ZyXEL Communications NBG417N Wireless N-LITE 3G Router User Manual 3890293
ZyXEL Communications Corporation Wireless N-LITE 3G Router 3890293
Contents
- 1. Manual
- 2. User Manual
User Manual
NBG4115 ny on fid en tia Wireless N-lite 3G Router Default Login Details http://192.168.1.1 pa IP Address 1234 om Password Firmware Version 1.0 Edition 2, 7/2009 www.zyxel.com www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation About This User's Guide About This User's Guide tia Intended Audience Tips for Reading User’s Guides On-Screen en This manual is intended for people who want to configure the NBG4115 using the Web Configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. fid When reading a ZyXEL User’s Guide On-Screen, keep the following in mind: • If you don’t already have the latest version of Adobe Reader, you can download it from http://www.adobe.com. on • Use the PDF’s bookmarks to quickly navigate to the areas that interest you. Adobe Reader’s bookmarks pane opens by default in all ZyXEL User’s Guide PDFs. • If you know the page number or know vaguely which page-range you want to view, you can enter a number in the toolbar in Reader, then press [ENTER] to jump directly to that page. • Type [CTRL]+[F] to open the Adobe Reader search utility and enter a word or phrase. This can help you quickly pinpoint the information you require. You can also enter text directly into the toolbar in Reader. ny • To quickly move around within a page, press the [SPACE] bar. This turns your cursor into a “hand” with which you can grab the page and move it around freely on your screen. pa • Embedded hyperlinks are actually cross-references to related text. Click them to jump to the corresponding section of the User’s Guide PDF. Related Documentation • Quick Start Guide om The Quick Start Guide is designed to help you get your NBG4115 up and running right away. It contains information on setting up your network and configuring for Internet access. • Supporting Disc The embedded Web Help contains descriptions of individual screens and supplementary information. • Support Disc Refer to the included CD for support documents. User’s Guide About This User's Guide Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw tia The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Thank you! en Need More Help? • Download Library on fid More help is available at www.zyxel.com. ny Search for the latest product updates and documentation from this link. Read the Tech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to use your product. • Knowledge Base pa If you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. • Forum om This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. User’s Guide About This User's Guide Customer Support tia See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following information ready when you contact an office. Should problems arise that cannot be solved by the methods listed above, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. • Product model and serial number. en • Warranty Information. om pa ny on fid • Date that you received your device. User’s Guide Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. tia Document Conventions en Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. fid Syntax Conventions • The NBG4115 may be referred to as the “NBG4115”, the “device”, the “product” or the “system” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font. on • A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “enter” or “return” key on your keyboard. • “Enter” means for you to type one or more characters and then press the [ENTER] key. “Select” or “choose” means for you to use one of the predefined choices. ny • A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Maintenance > Log > Log Setting means you first click Maintenance in the navigation panel, then the Log sub menu and finally the Log Setting tab to get to that screen. • Units of measurement may denote the “metric” value or the “scientific” value. For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on. om pa • “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”. User’s Guide Document Conventions Icons Used in Figures Computer Notebook computer Server DSLAM Firewall Telephone Switch fid en tia NBG4115 Figures in this User’s Guide may use the following generic icons. The NBG4115 icon is not an exact representation of your device. on Router om pa ny Modem User’s Guide Safety Warnings Safety Warnings pa ny on fid en tia • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. • Connect ONLY suitable accessories to the device. • Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information. • Make sure to connect the cables to the correct ports. • Place connecting cables carefully so that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for your device. • Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). • Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord. • Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it from the power outlet. • Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one. • Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. • Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. • Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s). • If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical om and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. User’s Guide Contents Overview Contents Overview tia Introduction ............................................................................................................................ 19 Introduction ................................................................................................................................ 21 The WPS Button ........................................................................................................................ 25 en The Web Configurator ............................................................................................................... 27 Connection Wizard .................................................................................................................... 39 AP Mode .................................................................................................................................... 55 Tutorials ..................................................................................................................................... 63 fid Network ................................................................................................................................... 79 on Wireless LAN ............................................................................................................................. 81 WAN ........................................................................................................................................ 101 LAN ...........................................................................................................................................115 DHCP Server ............................................................................................................................119 NAT .......................................................................................................................................... 125 DDNS ...................................................................................................................................... 135 Security ................................................................................................................................. 139 Firewall .................................................................................................................................... 141 Content Filtering ...................................................................................................................... 147 ny Management ......................................................................................................................... 151 Static Route ............................................................................................................................. 153 Bandwidth Management .......................................................................................................... 157 pa Remote Management .............................................................................................................. 165 UPnP ....................................................................................................................................... 169 Maintenance and Troubleshooting ..................................................................................... 179 om System ..................................................................................................................................... 181 Logs ......................................................................................................................................... 187 Tools ........................................................................................................................................ 189 Sys OP Mode .......................................................................................................................... 195 Language ................................................................................................................................. 199 Troubleshooting ....................................................................................................................... 201 Appendices and Index ......................................................................................................... 209 User’s Guide C om pa ny on fid en tia Contents Overview 10 User’s Guide Table of Contents Table of Contents tia About This User's Guide .......................................................................................................... 3 Document Conventions............................................................................................................ 6 en Safety Warnings........................................................................................................................ 8 Contents Overview ................................................................................................................... 9 fid Table of Contents.................................................................................................................... 11 Part I: Introduction................................................................................. 19 on Chapter 1 Introduction ............................................................................................................................. 21 1.1 Overview .............................................................................................................................. 21 1.2 Applications ......................................................................................................................... 21 1.3 Ways to Manage the NBG4115 ........................................................................................... 22 1.4 Good Habits for Managing the NBG4115 ............................................................................ 22 1.5 LEDs .................................................................................................................................... 22 ny Chapter 2 The WPS Button...................................................................................................................... 25 2.1 Overview .............................................................................................................................. 25 pa Chapter 3 The Web Configurator ............................................................................................................ 27 3.1 Overview .............................................................................................................................. 27 om 3.2 Accessing the Web Configurator ......................................................................................... 27 3.3 Resetting the NBG4115 ....................................................................................................... 29 3.3.1 Procedure to Use the Reset Button ........................................................................... 29 3.4 Navigating the Web Configurator ...................................................................................... 29 3.5 The Status Screen in Router Mode ..................................................................................... 30 3.5.1 Navigation Panel ........................................................................................................ 32 3.5.2 Summary: DHCP Table ........................................................................................... 34 3.5.3 Summary: Packet Statistics ..................................................................................... 35 3.5.4 Summary: WLAN Station Status ............................................................................ 36 Chapter 4 Connection Wizard ................................................................................................................. 39 User’s Guide 11 Table of Contents tia 4.1 Overview .............................................................................................................................. 39 4.2 Wizard Setup ....................................................................................................................... 39 4.3 STEP 1: System Information ............................................................................................... 40 4.3.1 System Name ............................................................................................................. 40 4.3.2 Domain Name ............................................................................................................ 41 4.4 STEP 2: Wireless LAN ........................................................................................................ 42 4.4.1 Extend (WPA-PSK or WPA2-PSK) Security ............................................................... 43 fid en 4.5 STEP 3: Internet Configuration ............................................................................................ 43 4.5.1 Ethernet Connection .................................................................................................. 44 4.5.2 PPPoE Connection .................................................................................................... 45 4.5.3 PPTP Connection ....................................................................................................... 46 4.5.4 Mobile 3G ................................................................................................................... 48 4.5.5 Your IP Address ......................................................................................................... 49 4.5.6 WAN IP Address Assignment ..................................................................................... 49 4.5.7 IP Address and Subnet Mask ..................................................................................... 50 4.5.8 DNS Server Address Assignment .............................................................................. 50 on 4.5.9 WAN IP and DNS Server Address Assignment ......................................................... 51 4.5.10 WAN MAC Address .................................................................................................. 52 4.6 Connection Wizard Complete .............................................................................................. 53 Chapter 5 AP Mode................................................................................................................................... 55 5.1 Overview .............................................................................................................................. 55 5.2 Setting your NBG4115 to AP Mode ..................................................................................... 55 5.3 The Status Screen in AP Mode ........................................................................................... 56 pa ny 5.3.1 Navigation Panel ........................................................................................................ 58 5.4 LAN Settings ........................................................................................................................ 59 5.5 WLAN and Maintenance Settings ........................................................................................ 60 5.6 Logging in while in AP Mode ............................................................................................... 61 Chapter 6 Tutorials ................................................................................................................................... 63 6.1 Overview .............................................................................................................................. 63 om 6.2 Set Up a 3G Connection ...................................................................................................... 63 6.3 Set Up the NBG4115 for Gaming ........................................................................................ 65 6.4 Set Up a Wireless Network with WPS ................................................................................. 68 6.4.1 Push Button Configuration (PBC) .............................................................................. 68 6.4.2 PIN Configuration ....................................................................................................... 70 6.5 Configure Wireless Security without WPS ........................................................................... 71 6.5.1 Configure Your Notebook ........................................................................................... 72 6.6 Bandwidth Management ...................................................................................................... 74 6.6.1 Bandwidth Management by Application ..................................................................... 74 6.6.2 Custom Bandwidth Management ............................................................................... 75 12 User’s Guide Table of Contents 6.6.3 Bandwidth Management by IP or IP Range ............................................................... 76 Part II: Network....................................................................................... 79 tia Chapter 7 Wireless LAN........................................................................................................................... 81 fid en 7.1 Overview .............................................................................................................................. 81 7.1.1 What You Can Do in this Chapter .............................................................................. 82 7.1.2 What You Should Know ............................................................................................. 82 7.2 General ............................................................................................................................... 85 7.2.1 No Security ................................................................................................................. 87 7.2.2 WEP Encryption ......................................................................................................... 87 7.2.3 WPA-PSK/WPA2-PSK ................................................................................................ 89 on 7.3 MAC Filter ............................................................................................................................ 90 7.4 Advanced ............................................................................................................................. 92 7.5 QoS ..................................................................................................................................... 94 7.5.1 Application Priority Configuration ............................................................................... 95 7.6 WPS .................................................................................................................................... 97 7.7 WPS Station ........................................................................................................................ 98 7.8 Scheduling ........................................................................................................................... 99 Chapter 8 WAN........................................................................................................................................ 101 pa ny 8.1 Overview ............................................................................................................................ 101 8.2 What You Can Do in this Chapter ...................................................................................... 101 8.2.1 What You Need To Know ......................................................................................... 102 8.3 Internet Connection ........................................................................................................... 105 8.3.1 Ethernet .................................................................................................................... 105 8.3.2 PPPoE ...................................................................................................................... 106 8.3.3 PPTP ........................................................................................................................ 108 8.3.4 Mobile 3G ..................................................................................................................111 om 8.4 Advanced ............................................................................................................................113 Chapter 9 LAN......................................................................................................................................... 115 9.1 Overview .............................................................................................................................115 9.1.1 What You Can Do in this Chapter .............................................................................115 9.2 What You Need To Know ....................................................................................................115 9.3 IP ........................................................................................................................................117 Chapter 10 DHCP Server.......................................................................................................................... 119 User’s Guide 13 Table of Contents tia 10.1 Overview ...........................................................................................................................119 10.1.1 What You Can Do in this Chapter ...........................................................................119 10.1.2 What You Need To Know ........................................................................................119 10.2 General ............................................................................................................................ 120 10.3 Advanced ...................................................................................................................... 121 10.4 Client List ........................................................................................................................ 122 Chapter 11 NAT......................................................................................................................................... 125 fid en 11.1 Overview ....................................................................................................................... 125 11.1.1 What You Can Do in this Chapter ........................................................................... 126 11.1.2 What You Need To Know ........................................................................................ 126 11.2 General ............................................................................................................................ 128 11.3 Application ..................................................................................................................... 129 11.4 Advanced ......................................................................................................................... 131 11.5 Technical Reference ........................................................................................................ 132 on 11.5.1 NATPort Forwarding: Services and Port Numbers ................................................. 132 11.5.2 NAT Port Forwarding Example ............................................................................... 132 11.5.3 Trigger Port Forwarding .......................................................................................... 133 11.5.4 Trigger Port Forwarding Example ........................................................................... 134 11.5.5 Two Points To Remember About Trigger Ports ...................................................... 134 Chapter 12 DDNS...................................................................................................................................... 135 12.1 Overview ......................................................................................................................... 135 pa ny 12.1.1 What You Can Do in this Chapter .......................................................................... 135 12.1.2 What You Need To Know ....................................................................................... 135 12.2 General .......................................................................................................................... 136 Part III: Security.................................................................................... 139 om Chapter 13 Firewall................................................................................................................................... 141 13.1 Overview ........................................................................................................................ 141 13.1.1 What You Can Do in this Chapter .......................................................................... 141 13.1.2 What You Need To Know ....................................................................................... 142 13.2 General ......................................................................................................................... 144 13.3 Services ......................................................................................................................... 144 Chapter 14 Content Filtering ................................................................................................................... 147 14 User’s Guide Table of Contents tia 14.1 Overview .......................................................................................................................... 147 14.1.1 What You Can Do in this Chapter .......................................................................... 147 14.1.2 What You Need To Know ....................................................................................... 147 14.2 Filter ................................................................................................................................. 148 14.3 Technical Reference ........................................................................................................ 149 14.3.1 Customizing Keyword Blocking URL Checking ...................................................... 149 en Part IV: Management............................................................................ 151 Chapter 15 Static Route ........................................................................................................................... 153 fid 15.1 Overview .......................................................................................................................... 153 15.1.1 What You Can Do in this Chapter .......................................................................... 153 15.2 IP Static Route ................................................................................................................ 154 15.2.1 Static Route Setup Screen ................................................................................... 155 on Chapter 16 Bandwidth Management....................................................................................................... 157 16.1 Overview ......................................................................................................................... 157 16.1.1 What You Can Do in this Chapter .......................................................................... 157 16.1.2 What You Need To Know ....................................................................................... 157 16.2 General ........................................................................................................................... 158 pa ny 16.3 Advanced ........................................................................................................................ 159 16.3.1 Pre-Configured Gaming Ports ................................................................................ 162 16.3.2 Priority Levels ......................................................................................................... 162 16.3.3 User Defined Service Rule Configuration ........................................................... 162 16.3.4 Predefined Bandwidth Management Services ....................................................... 163 16.3.5 Services and Port Numbers ................................................................................... 164 Chapter 17 Remote Management............................................................................................................ 165 om 17.1 Overview .......................................................................................................................... 165 17.1.1 What You Can Do in this Chapter .......................................................................... 165 17.1.2 What You Need To Know ....................................................................................... 165 17.2 WWW ........................................................................................................................... 166 Chapter 18 UPnP ...................................................................................................................................... 169 18.1 Overview ......................................................................................................................... 169 18.1.1 What You Can Do in this Chapter .......................................................................... 169 18.1.2 What You Need to Know ........................................................................................ 169 User’s Guide 15 Table of Contents 18.2 General ............................................................................................................................ 170 18.3 Technical Reference ........................................................................................................ 171 18.3.1 Installing UPnP in Windows XP ............................................................................. 171 tia Part V: Maintenance and Troubleshooting ........................................ 179 en Chapter 19 System ................................................................................................................................... 181 fid 19.1 Overview .......................................................................................................................... 181 19.1.1 What You Can Do in this Chapter .......................................................................... 181 19.2 General .......................................................................................................................... 181 19.3 Time Setting ..................................................................................................................... 183 Chapter 20 Logs ....................................................................................................................................... 187 on 20.1 Overview .......................................................................................................................... 187 20.1.1 What You Can Do in this Chapter .......................................................................... 187 20.2 View Log .......................................................................................................................... 187 Chapter 21 Tools....................................................................................................................................... 189 21.1 Overview .......................................................................................................................... 189 pa ny 21.1.1 What You Can Do in this Chapter .......................................................................... 189 21.2 Firmware .......................................................................................................................... 190 21.3 Configuration ................................................................................................................... 192 21.3.1 Backup Configuration ............................................................................................. 192 21.3.2 Restore Configuration ............................................................................................ 193 21.3.3 Back to Factory Defaults ........................................................................................ 194 21.4 Restart ............................................................................................................................. 194 om Chapter 22 Sys OP Mode ......................................................................................................................... 195 22.1 Overview .......................................................................................................................... 195 22.1.1 What You Can Do in this Chapter .......................................................................... 195 22.1.2 What You Need to Know ........................................................................................ 195 22.2 General ............................................................................................................................ 196 Chapter 23 Language ............................................................................................................................... 199 23.1 Overview .......................................................................................................................... 199 23.2 Language ......................................................................................................................... 199 16 User’s Guide Table of Contents Chapter 24 Troubleshooting.................................................................................................................... 201 en tia 24.1 Overview .......................................................................................................................... 201 24.2 Power, Hardware Connections, and LEDs ...................................................................... 201 24.3 NBG4115 Access and Login ............................................................................................ 202 24.4 Internet Access ................................................................................................................ 204 24.5 Resetting the NBG4115 to Its Factory Defaults ............................................................... 206 24.6 Wireless Router/AP Troubleshooting ............................................................................... 206 Part VI: Appendices and Index ........................................................... 209 fid Appendix A Product Specifications....................................................................................... 211 Appendix B Pop-up Windows, JavaScripts and Java Permissions ...................................... 215 Appendix C IP Addresses and Subnetting ........................................................................... 223 on Appendix D Setting up Your Computer’s IP Address ........................................................... 233 24.6.1 Verifying Settings ................................................................................................... 250 Appendix E Wireless LANs .................................................................................................. 251 24.6.2 WPA(2)-PSK Application Example ......................................................................... 261 24.6.3 WPA(2) with RADIUS Application Example ........................................................... 261 Appendix F Services ............................................................................................................ 263 ny Appendix G Legal Information.............................................................................................. 267 om pa Index....................................................................................................................................... 275 User’s Guide 17 C om pa ny on fid en tia Table of Contents 18 User’s Guide en Introduction fid Introduction (21) The WPS Button (25) on The Web Configurator (27) Connection Wizard (39) AP Mode (55) om pa ny Tutorials (63) tia P ART I 19 20 om pa ny on fid en tia CHAPTER tia Introduction en 1.1 Overview This chapter introduces the main features and applications of the NBG4115. fid The NBG4115 extends the range of your existing wired network without additional wiring, providing easy network access to mobile users. You can set up a wireless network with other IEEE 802.11b/g/n compatible devices. 1.2 Applications on A range of services such as a firewall and content filtering are also available for secure Internet computing. Your can create the following networks using the NBG4115: ny • Wired. You can connect network devices via the Ethernet ports of the NBG4115 so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG4115 to access network resources. pa • WAN. Connect to a broadband modem/router for Internet access. • WPS. Create an instant network connection with another WPS-compatabile device, sharing your network connection with it. om • 3G Wireless. Connect to a local 3G wireless network to take advantage of superior connection speeds and improved download times. Figure 1 NBG4115 Network LAN 1 LAN 2 WLAN User’s Guide 21 Chapter 1 Introduction 1.3 Ways to Manage the NBG4115 Use any of the following methods to manage the NBG4115. tia • WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web Configurator to set up a wireless network with your ZyXEL Device. en • Web Configurator. This is recommended for everyday management of the NBG4115 using a (supported) web browser. 1.4 Good Habits for Managing the NBG4115 fid Do the following things regularly to make the NBG4115 more secure and to manage the NBG4115 more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. on • Write down the password and put it in a safe place. 1.5 LEDs ny • Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the NBG4115 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG4115. You could simply restore your last configuration. om pa Figure 2 Front Panel 22 User’s Guide Chapter 1 Introduction The following table describes the LEDs and the WPS button. Table 1 Front Panel LEDs and WPS Button COLOR STATUS DESCRIPTION POWER Green On The NBG4115 is receiving power and functioning properly. Off The NBG4115 is not receiving power. On The NBG4115 is ready, but is not sending/ receiving data through the wireless LAN. Blinking The NBG4115 is sending/receiving data through the wireless LAN. tia Green en WLAN LED The NBG4115 is negotiating a WPS connection with a wireless client. LAN 1-2 Green Green pa Internet Green WPS Button The NBG4115 is sending/receiving data through the WAN. Off The WAN connection is not ready, or has failed. On fid Blinking The NBG4115 has a successful 10/100MB Ethernet connection. Blinking The NBG4115 is sending/receiving data through the LAN. Off The LAN is not connected. On The NBG4115 has a 3G card installed and is communicating with routers. Blinking The NBG4115 is transmitting and/or receiving data from routers through an installed 3G card. Off There is no 3G card installed. On The NBG4115 has received an IP address through either the WAN or WLAN interface and can connect to the Internet. Off The NBG4115 has not received an IP address through either the WAN or WLAN interface and as such cannot connect to the Internet. Press this button for 1 second to set up a wireless connection via WiFi Protected Setup with another WPS-enabled client. You must press the WPS button on the client side within 120 seconds for a successful connection. om The NBG4115 has a successful 10/100MB WAN connection. ny 3G On on Green The wireless LAN is not ready or has failed. WAN Off User’s Guide 23 C om pa ny on fid en tia Chapter 1 Introduction 24 User’s Guide CHAPTER tia The WPS Button en 2.1 Overview fid Your NBG4115 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. on WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure). Depending on the devices you have, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. om pa ny For more information on using WPS, see Section 6.4 on page 68. User’s Guide 25 C om pa ny on fid en tia Chapter 2 The WPS Button 26 User’s Guide CHAPTER tia The Web Configurator en 3.1 Overview fid This chapter describes how to access the NBG4115 Web Configurator and provides an overview of its screens. on The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG4115 via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions or Safari 2.0 or later versions. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: • Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScripts (enabled by default). • Java permissions (enabled by default). ny Refer to the Troubleshooting chapter to see how to make sure these functions are allowed in Internet Explorer. pa 3.2 Accessing the Web Configurator Make sure your NBG4115 hardware is properly connected and prepare your computer or computer network to connect to the NBG4115 (refer to the Quick Start Guide). om Launch your web browser. Type "http://192.168.1.1" as the website address. Your computer must be in the same subnet in order to access this website address. User’s Guide 27 Type "1234" (default) as the password and click Login. In some versions, the default password appears automatically - if this is the case, click Login. You should see a screen asking you to change your password (highly recommended) as shown next. Type a new password (and retype it to confirm) and click Apply or click Ignore. tia Chapter 3 The Web Configurator on fid en Figure 3 Change Password Screen Note: The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the NBG4115 if this happens. Select the setup mode you want to use. ny • Click Go to Wizard Setup to use the Configuration Wizard for basic Internet and Wireless setup. om pa • Click Go to Advanced Setup to view and configure all the NBG4115’s settings. 28 User’s Guide Chapter 3 The Web Configurator • Select a language to go to the basic Web Configurator in that language. To change to the advanced configurator see Chapter 23 on page 199. Selecting the setup mode on fid en tia Figure 4 3.3 Resetting the NBG4115 ny If you forget your password or IP address, or you cannot access the Web Configurator, you will need to use the RESET button at the back of the NBG4115 to reload the factory-default configuration file. This means that you will lose all configurations that you had previously saved, the password will be reset to “1234” and the IP address will be reset to “192.168.1.1”. pa 3.3.1 Procedure to Use the Reset Button Make sure the power LED is on. Press the RESET button for longer than 1 second to restart/reboot the NBG4115. Press the RESET button for longer than five seconds to set the NBG4115 back to its factory-default configurations. om 3.4 Navigating the Web Configurator The following summarizes how to navigate the Web Configurator from the Status screen in Router Mode and AP Mode. User’s Guide 29 Chapter 3 The Web Configurator 3.5 The Status Screen in Router Mode tia (For information on the status screen in AP Mode see Chapter 5 on page 56.) Click on Status. The screen below shows the status screen in Router Mode. ny on fid en Figure 5 Web Configurator Status Screen pa The following table describes the icons shown in the Status screen. Table 2 Status Screen Icon Key ICON DESCRIPTION om Click this icon to open the setup wizard. 30 Click this icon to view copyright and a link for related product information. Click this icon at any time to exit the Web Configurator. Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics. Click this button to refresh the status screen statistics. User’s Guide Chapter 3 The Web Configurator The following table describes the labels shown in the Status screen. Table 3 Web Configurator Status Screen LABEL DESCRIPTION This is the System Name you enter in the Maintenance > System > General screen. It is for identification purposes. Firmware Version This is the firmware version and the date created. WAN Information tia System Name (3G Only) When a 3G USB device is attached to the NBG4115, this provides information specific to it. - MAC Address This shows the WAN Ethernet adapter MAC Address of your device. - IP Address This shows the WAN port’s IP address. - IP Subnet Mask This shows the WAN port’s subnet mask. - DHCP This shows the WAN port’s DHCP role - Client or None. fid en - SIM Card Status LAN Information This shows the LAN Ethernet adapter MAC Address of your device. - IP Address This shows the LAN port’s IP address. - IP Subnet Mask This shows the LAN port’s subnet mask. - DHCP This shows the LAN port’s DHCP role - Server or None. on - MAC Address WLAN Information This shows the wireless adapter MAC Address of your device. - Status This shows the current status of the Wireless LAN - On, Off or Off by scheduler. - Name (SSID) This shows a descriptive name used to identify the NBG4115 in the wireless LAN. ny - MAC Address - Channel Device Information This shows the channel number which you select manually. This shows the channel number which the NBG4115 is currently using over the wireless LAN. - Security Mode This shows the level of wireless security the NBG4115 is using. pa - Operating Channel - 802.11 Mode This shows the wireless standard. - WPS This displays Configured when the WPS has been set up. om This displays Unconfigured if the WPS has not been set up. Click the status to display Network > Wireless LAN > WPS screen. System Status System Up Time This is the total time the NBG4115 has been on. Current Date/Time This field displays your NBG4115’s present date and time. System Resource - CPU Usage User’s Guide This displays what percentage of the NBG4115’s processing ability is currently used. When this percentage is close to 100%, the NBG4115 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications. 31 Chapter 3 The Web Configurator Table 3 Web Configurator Status Screen (continued) LABEL DESCRIPTION - Memory Usage This shows what percentage of the heap memory the NBG4115 is using. This shows whether the firewall is active or not. - Bandwidth Management This shows whether bandwidth management is enabled or not. - UPnP This shows whether UPnP is active or not. tia - Firewall System Setting Interface Status This displays the NBG4115 port types. The port types are: WAN, LAN and WLAN. Status For the 3G, LAN and WAN ports, this field displays Down (line is down) or Up (line is up or connected). en Interface fid For the WLAN, it displays Up when the WLAN is enabled or Down when the WLAN is disabled. Rate For the LAN ports, this displays the port speed and duplex setting or N/A when the line is disconnected. on For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet encapsulation and Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE or PPTP encapsulation. This field displays N/A when the line is disconnected. For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and N/A when the WLAN is disabled. Summary Use this screen to view current DHCP client information. Packet Statistics Use this screen to view port status and packet specific statistics. WLAN Station Status Use this screen to view the wireless stations that are currently associated to the NBG4115. ny DHCP Table pa 3.5.1 Navigation Panel Use the sub-menus on the navigation panel to configure NBG4115 features. om The following table describes the sub-menus. Table 4 Screens Summary LINK Status 32 TAB FUNCTION This screen shows the NBG4115’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. Network User’s Guide Chapter 3 The Web Configurator Table 4 Screens Summary WAN General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115. Advanced This screen allows you to configure advanced wireless settings. QoS Use this screen to configure Wi-Fi Multimedia Quality of Service (WMM QoS). WMM QoS allows you to prioritize wireless traffic according to the delivery requirements of individual services. WPS Use this screen to configure WPS. WPS Station Use this screen to add a wireless station using WPS. Scheduling Use this screen to schedule the times the Wireless LAN is enabled. Internet Connection This screen allows you to configure ISP parameters, WAN IP address assignment, DNS servers and the WAN MAC address. Advanced Use this screen to configure other advanced properties. IP DHCP Server General tia en Use this screen to configure LAN IP address and subnet mask. Use this screen to enable the NBG4115’s DHCP server. LAN FUNCTION fid Wireless LAN TAB on LINK Client List Use this screen to view current DHCP client information and to always assign an IP address to a MAC address (and host name). General Use this screen to enable NAT. Application Use this screen to configure servers behind the NBG4115. Advanced Use this screen to change your NBG4115’s port triggering settings. General Use this screen to set up dynamic DNS. General Use this screen to activate/deactivate the firewall. Services This screen shows a summary of the firewall rules, and allows you to edit/add a firewall rule. Filter Use this screen to block certain web features and sites containing certain keywords in the URL. IP Static Route Use this screen to configure IP static routes. ny Use this screen to assign IP addresses to specific individual computers based on their MAC addresses and to have DNS servers assigned by the DHCP server. pa NAT Advanced om DDNS Security Firewall Content Filter Management Static Route User’s Guide 33 Chapter 3 The Web Configurator Table 4 Screens Summary FUNCTION General Use this screen to use pre-configured bandwidth management profiles for how your NBG4115 manages incoming and outgoing data. Advanced Use this screen to create your own bandwidth management profile for how your NBG4115 manages incoming and outgoing data. Remote MGMT WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the NBG4115. UPnP General Use this screen to enable UPnP on the NBG4115. General Use this screen to view and change administrative settings such as system and domain names, password and inactivity timer. Time Setting Use this screen to change your NBG4115’s time and date. Logs View Log Use this screen to view the logs for the categories that you selected. Tools Firmware tia Bandwidth Management TAB en LINK Restart Use this screen to upload firmware to your NBG4115. Use this screen to backup and restore the configuration or reset the factory defaults to your NBG4115. This screen allows you to reboot the NBG4115 without turning the power off. Configuration on System fid Maintenance General This screen allows you to select whether your device acts as a Router or a Access Point. Language Language This screen allows you to select the language you prefer. ny Sys OP Mode pa 3.5.2 Summary: DHCP Table om DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on that network, or else the computer must be manually configured. Click the DHCP Table (Details...) hyperlink in the Status screen. Read-only information here relates to your DHCP status. The DHCP table shows current 34 User’s Guide Chapter 3 The Web Configurator DHCP client information (including IP Address, Host Name and MAC Address) of all network clients using the NBG4115’s DHCP server. The following table describes the labels in this screen. Table 5 Summary: DHCP Table en tia Figure 6 Summary: DHCP Table DESCRIPTION This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above. fid LABEL This field displays the computer host name. MAC Address This field shows the MAC address of the computer with the name in the Host Name field. on Host Name Refresh Every Ethernet device has a unique MAC (Media Access Control) address which uniquely identifies a device. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. Click Refresh to renew the screen. ny 3.5.3 Summary: Packet Statistics pa Click the Packet Statistics (Details...) hyperlink in the Status screen. Readonly information here includes port status, packet specific statistics and the "system up time". The Poll Interval(s) field is configurable and is used for refreshing the screen. om Figure 7 Summary: Packet Statistics User’s Guide 35 Chapter 3 The Web Configurator The following table describes the labels in this screen. DESCRIPTION Port This is the NBG4115’s port type. Status For the LAN ports, this displays the port speed and duplex setting or Down when the line is disconnected. tia LABEL Table 6 Summary: Packet Statistics en For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet encapsulation and Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE or PPTP encapsulation. This field displays Down when the line is disconnected. For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and Down when the WLAN is disabled. This is the number of transmitted packets on this port. RxPkts This is the number of received packets on this port. Collisions This is the number of collisions on this port. Tx B/s This displays the transmission speed in bytes per second on this port. Rx B/s This displays the reception speed in bytes per second on this port. System Up Time This is the total time the NBG4115 has been on. Poll Interval(s) Enter the time interval for refreshing statistics in this field. Set Interval Click this button to apply the new poll interval you entered in the Poll Interval(s) field. Stop Click Stop to stop refreshing statistics. on fid TxPkts ny 3.5.4 Summary: WLAN Station Status pa Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG4115 in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings. om Figure 8 Summary: Wireless Association List 36 User’s Guide Chapter 3 The Web Configurator The following table describes the labels in this screen. Table 7 Summary: Wireless Association List DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the NBG4115’s WLAN network. Refresh Click Refresh to reload the list. om pa ny on fid en tia LABEL User’s Guide 37 C om pa ny on fid en tia Chapter 3 The Web Configurator 38 User’s Guide CHAPTER tia Connection Wizard en 4.1 Overview fid This chapter provides information on the wizard setup screens in the Web Configurator. on 4.2 Wizard Setup The Web Configurator’s wizard setup helps you configure your device to access the Internet. Refer to your ISP (Internet Service Provider) checklist in the Quick Start Guide to know what to enter in each field. Leave a field blank if you don’t have that information. After you access the NBG4115 Web Configurator, click the Go to Wizard setup hyperlink. ny You can click Go to Advanced setup hyperlink to skip this wizard setup and configure basic or advanced features accordingly. om pa Figure 9 Select Wizard or Advanced Mode User’s Guide 39 Chapter 4 Connection Wizard Choose a language by clicking on the language’s button. The screen will update. Click the Next button to proceed to the next screen. Read the on-screen information and click Next. on fid Figure 11 Welcome to the Connection Wizard en tia Figure 10 Select a Language ny 4.3 STEP 1: System Information System Information contains administrative and system-related information. pa 4.3.1 System Name System Name is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name". om • In Windows 2000, click Start > Settings > Control Panel and then doubleclick System. Click the Network Identification tab and then the Properties button. Note the entry for the Computer name field and enter it as the System Name. 40 • In Windows XP, click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the NBG4115 System Name. User’s Guide Chapter 4 Connection Wizard 4.3.2 Domain Name Click Next to configure the NBG4115 for Internet access. on fid en Figure 12 Wizard Step 1: System Information tia The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the NBG4115 via DHCP. The following table describes the labels in this screen. Table 8 Wizard Step 1: System Information System Name System Name is a unique name to identify the NBG4115 in an Ethernet network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted. Type the domain name (if you know it) here. If you leave this field blank, the ISP may assign a domain name via DHCP. The domain name entered by you is given priority over the ISP assigned domain name. pa Domain Name DESCRIPTION ny LABEL Click Back to display the previous screen. Next Click Next to proceed to the next screen. om Back Click Exit to close the wizard screen without saving. Exit User’s Guide 41 Chapter 4 Connection Wizard 4.4 STEP 2: Wireless LAN Set up your wireless LAN using the following screen. fid en tia Figure 13 Wizard Step 2: Wireless LAN The following table describes the labels in this screen. on Table 9 Wizard Step 2: Wireless LAN LABEL DESCRIPTION Name (SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. Security If you change this field on the NBG4115, make sure all wireless stations use the same SSID in order to access the network. Select a Security level from the drop-down list box. ny Choose Auto (WPA2-PSK) to have the NBG4115 generate a pre-shared key automatically. After you click Next a screen pops up displaying the generated pre-shared key. Write down the key for use later when connecting other wireless devices to your network. Click OK to continue. om pa Choose None to have no wireless LAN security configured. If you do not enable any wireless security on your NBG4115, your network is accessible to any wireless networking device that is within range. If you choose this option, skip directly to Section 4.5 on page 43. 42 Choose Extend (WPA-PSK or WPA2-PSK) security to configure a PreShared Key. Choose this option only if your wireless clients support WPAPSK or WPA2-PSK respectively. If you choose this option, skip directly to Section 4.4.1 on page 43. Channel Selection The range of radio frequencies used by IEEE 802.11b/g/n wireless devices is called a channel. The device will automatically select the channel with the least interference. Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving. User’s Guide Chapter 4 Connection Wizard Note: The wireless stations and NBG4115 must use the same SSID, channel ID, WPA-PSK (if WPA-PSK is enabled) or WPA2-PSK (if WPA2-PSK is enabled) for wireless communication. tia 4.4.1 Extend (WPA-PSK or WPA2-PSK) Security Choose Extend (WPA-PSK) or Extend (WPA2-PSK) security in the Wireless LAN setup screen to set up a Pre-Shared Key. on fid en Figure 14 Wizard Step 2: Extend (WPA-PSK or WPA2-PSK) Security The following table describes the labels in this screen. Table 10 Wizard Step 2: Extend (WPA-PSK or WPA2-PSK) Security DESCRIPTION Pre-Shared Key Type from 8 to 63 case-sensitive ASCII or HEX characters. You can set up the most secure wireless connection by configuring WPA in the wireless LAN screens. You need to configure an authentication server to do this. Back Next Click Back to display the previous screen. Click Next to proceed to the next screen. Click Exit to close the wizard screen without saving. pa Exit ny LABEL om 4.5 STEP 3: Internet Configuration The NBG4115 offers four Internet connection types. They are Ethernet, PPP over Ethernet, PPTP or Mobile 3G. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box. If you have an always-on connection, most likely you should use Ethernet. If your connection requires a user name and password to authenticate your connection, then choose either PPPoE or PPTP. Finally, if you are using a USB-based 3G device, select the Mobile 3G option. User’s Guide 43 Chapter 4 Connection Wizard Note: When you select Mobile 3G, then all WAN connections are made through this. Check with your ISP to make sure you use the correct type. This wizard screen varies according to the connection type that you select. fid en tia Figure 15 Wizard Step 3: ISP Parameters. on The following table describes the labels in this screen, Table 11 Wizard Step 3: ISP Parameters CONNECTION TYPE DESCRIPTION Select the Ethernet option when the WAN port is used as a regular Ethernet. PPPoE Select the PPP over Ethernet option for a dial-up connection. If your ISP gave you an IP address and/or subnet mask, then select PPTP. ny PPTP Ethernet Mobile 3G Select the PPTP option for a dial-up connection. Select the Mobile 3G option for a USB 3G connection. pa 4.5.1 Ethernet Connection om Choose Ethernet when the WAN port is used as a regular Ethernet. Continue to Section 4.5.5 on page 49. Figure 16 Wizard Step 3: Ethernet Connection 44 User’s Guide Chapter 4 Connection Wizard 4.5.2 PPPoE Connection tia Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet Engineering Task Force) standard specifying how a host personal computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for instance, RADIUS). en One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for specific users. fid Operationally, PPPoE saves significant effort for both the subscriber and the ISP/ carrier, as it requires no specific configuration of the broadband modem at the subscriber’s site. on By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access. pa ny Figure 17 Wizard Step 3: PPPoE Connection om The following table describes the labels in this screen. Table 12 Wizard Step 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access User’s Guide Connection Type Select the PPP over Ethernet option for a dial-up connection. Service Name Type the name of your service provider. User Name Type the user name given to you by your ISP. Password Type the password associated with the user name above. Back Click Back to return to the previous screen. 45 Chapter 4 Connection Wizard Table 12 Wizard Step 3: PPPoE Connection DESCRIPTION Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. tia LABEL 4.5.3 PPTP Connection en Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. fid PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. Refer to the appendix for more information on PPTP. on Note: The NBG4115 supports one PPTP server connection at any given time. om pa ny Figure 18 Wizard Step 3: PPTP Connection The following table describes the fields in this screen Table 13 Wizard Step 3: PPTP Connection 46 LABEL DESCRIPTION ISP Parameters for Internet Access Connection Type Select PPTP from the drop-down list box. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection. User’s Guide Chapter 4 Connection Wizard Table 13 Wizard Step 3: PPTP Connection LABEL DESCRIPTION User Name Type the user name given to you by your ISP. Password Type the password associated with the User Name above. PPTP Configuration Type the IP address of the PPTP server. Connection ID/ Name Enter the connection ID or connection name in this field. It must follow the "c:id" and "n:name" format. For example, C:12 or N:My ISP. tia Server IP Address en This field is optional and depends on the requirements of your ISP. Select this radio button if your ISP did not assign you a fixed IP address. Use fixed IP address Select this radio button, provided by your ISP to give the NBG4115 a fixed, unique IP address. fid Get automatically from ISP Type the (static) IP address assigned to you by your ISP. My IP Subnet Mask Type the subnet mask assigned to you by your ISP (if given). on My IP Address Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. om pa ny Back User’s Guide 47 Chapter 4 Connection Wizard 4.5.4 Mobile 3G tia Mobile 3G is a set of international “third generation” standards for the sending and receiving of voice, video, and wireless data in a mobile environment. For the NBG4115, this type of wireless connection requires a connected 3G-compatible USB device (see the included Quick Start Guide for installation information), and a 3G account with your local ISP. on fid Figure 19 Wizard Step 3: Mobile 3G Connection en Note: When you use Mobile 3G, all WAN connections are made through it. The following table describes the fields in this screen LABEL ny Table 14 Wizard Step 3: Mobile 3G Connection DESCRIPTION ISP Parameters for Internet Access Select Mobile 3G from the drop-down list box. PIN Code Enter the 4-digit 3G account PIN code given to you by your ISP. pa Connection Type Enter the Access Point Name (APN) given to you by your ISP. Dial Number Enter the phone number that must be dialed in order to login to your 3G account from the NBG4115. User Name Type the user name given to you by your ISP. om APN Code Type the password associated with the User Name above. Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. Password 48 User’s Guide Chapter 4 Connection Wizard 4.5.5 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG4115 an automatically assigned IP address depending on your ISP. Table 15 Wizard Step 3: Your IP Address fid The following table describes the labels in this screen en tia Figure 20 Wizard Step 3: Your IP Address DESCRIPTION Get automatically from your ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. If you choose this option, skip directly to Section 4.5.10 on page 52. Use fixed IP address provided by your ISP Select this option if you were given IP address and/or DNS server settings by the ISP. The fixed IP address should be in the same subnet as your broadband modem or router. Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. ny on LABEL 4.5.6 WAN IP Address Assignment om pa Every computer on the Internet must have a unique IP address. If your networks are isolated from the Internet, for instance, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks. Table 16 Private IP Address Ranges 10.0.0.0 10.255.255.255 172.16.0.0 172.31.255.255 192.168.0.0 192.168.255.255 You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your User’s Guide 49 Chapter 4 Connection Wizard local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. tia Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. 4.5.7 IP Address and Subnet Mask en Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. fid Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. ny on If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network. pa Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your NBG4115, but make sure that no other device on your network is using that IP address. om The subnet mask specifies the network number portion of an IP address. Your NBG4115 will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the NBG4115 unless you are instructed to do otherwise. 4.5.8 DNS Server Address Assignment 50 Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG4115 can get the DNS server addresses in the following ways. User’s Guide Chapter 4 Connection Wizard The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the Wizard and/or WAN > Internet Connection screen. If the ISP did not give you DNS server information, leave the DNS Server fields set to 0.0.0.0 in the Wizard screen and/or set to From ISP in the WAN > Internet Connection screen for the ISP to dynamically assign the DNS server IP addresses. en tia 4.5.9 WAN IP and DNS Server Address Assignment fid The following wizard screen allows you to assign a fixed WAN IP address and DNS server addresses. ny on Figure 21 Wizard Step 3: WAN IP and DNS Server Addresses pa The following table describes the labels in this screen Table 17 Wizard Step 3: WAN IP and DNS Server Addresses LABEL DESCRIPTION WAN IP Address Assignment om My WAN IP Address Enter your WAN IP address in this field. The WAN IP address should be in the same subnet as your DSL/Cable modem or router. My WAN IP Subnet Mask Enter the IP subnet mask in this field. Gateway IP Address Enter the gateway IP address in this field. System DNS Server Address Assignment (if applicable) DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG4115 uses a system DNS server (in the order you specify here) to resolve domain names for DDNS and the time server. User’s Guide 51 Chapter 4 Connection Wizard DESCRIPTION First DNS Server Enter the DNS server's IP address in the fields provided. Second DNS Server If you do not configure a system DNS server, you must use IP addresses when configuring DDNS and the time server. Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. en tia LABEL Table 17 Wizard Step 3: WAN IP and DNS Server Addresses 4.5.10 WAN MAC Address fid Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. Table 18 Example of Network Properties for LAN Servers with Fixed IP Addresses 192.168.1.2-192.168.1.32; 192.168.1.65-192.168.1.254. Subnet mask 255.255.255.0 Gateway (or default route) 192.168.1.1(NBG4115 LAN IP) on Choose an IP address ny This screen allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Once it is successfully configured, the address will be copied to configuration file. It is advisable to clone the MAC address from a computer on your LAN even if your ISP does not presently require MAC address authentication. om pa Figure 22 Wizard Step 3: WAN MAC Address 52 User’s Guide Chapter 4 Connection Wizard The following table describes the fields in this screen. DESCRIPTION Factory Default Select Factory Default to use the factory assigned default MAC address. Clone the computer’s MAC address Select this option and enter the IP address of the computer on the LAN whose MAC you are cloning. It is advisable to clone the MAC address from a computer on your LAN even if your ISP does not presently require MAC address authentication. Set WAN MAC Address Select this option and enter the MAC address you want to use. Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. fid en tia LABEL Table 19 Wizard Step 3: WAN MAC Address on 4.6 Connection Wizard Complete Click Finish to complete the wizard setup. pa ny Figure 23 Connection Wizard Complete om You have successfully set up your NBG4115 to operate on your network and access the Internet. User’s Guide 53 C om pa ny on fid en tia Chapter 4 Connection Wizard 54 User’s Guide CHAPTER tia AP Mode en 5.1 Overview fid This chapter discusses how to configure settings while your NBG4115 is set to AP Mode. Many screens that are available in Router Mode are not available in AP Mode. Note: See Chapter 6 on page 63 for an example of setting up a wireless network in AP mode. on Use your NBG4115 as an AP if you already have a router or gateway on your network. In this mode your device bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example. Figure 24 Wireless Internet Access in AP Mode om pa ny 5.2 Setting your NBG4115 to AP Mode Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. User’s Guide 55 Chapter 5 AP Mode To set your NBG4115 to AP Mode, go to Maintenance > Sys OP Mode > General and select Access Point. A pop-up appears providing information on this mode. Click OK in the pop-up message window. (See Section 22.2 on page 196 for more information on the pop-up.) Click Apply. Your NBG4115 is now in AP Mode. on fid en tia Figure 25 Maintenance > Sys OP Mode > General Note: You have to log in to the Web Configurator again when you change modes. 5.3 The Status Screen in AP Mode Click on Status. The screen below shows the status screen in AP Mode. om pa ny Figure 26 Status: AP Mode 56 User’s Guide Chapter 5 AP Mode The following table describes the labels shown in the Status screen. Table 20 Web Configurator Status Screen LABEL DESCRIPTION This is the System Name you enter in the Maintenance > System > General screen. It is for identification purposes. Firmware Version This is the firmware version and the date created. LAN Information tia System Name This shows the LAN Ethernet adapter MAC Address of your device. - IP Address This shows the LAN port’s IP address. - IP Subnet Mask This shows the LAN port’s subnet mask. - DHCP This shows the LAN port’s DHCP role - None. fid en - MAC Address WLAN Information This shows the wireless adapter MAC Address of your device. - Status This shows the current status of the Wireless LAN - On, Off or Off by scheduler. - Name (SSID) This shows a descriptive name used to identify the NBG4115 in the wireless LAN. - Channel This shows the channel number which you select manually. - Operating Channel This shows the channel number which the NBG4115 is currently using over the wireless LAN. - Security Mode This shows the level of wireless security the NBG4115 is using. - 802.11 Mode This shows the IEEE 802.11 standard that the NBG4115 supports. Wireless clients must support the same standard in order to be able to connect to the NBG4115 This shows the WPS (WiFi Protected Setup) Status. Click the status to display Network > Wireless LAN > WPS screen. This is the total time the NBG4115 has been on. pa System Uptime ny System Status on - MAC Address - WPS Device Information Current Date/Time This field displays your NBG4115’s present date and time. System Resource om - CPU Usage - Memory Usage This displays what percentage of the NBG4115’s processing ability is currently used. When this percentage is close to 100%, the NBG4115 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications. This shows what percentage of the heap memory the NBG4115 is using. Interface Status Interface This displays the NBG4115 port types. The port types are: LAN and WLAN. Status For the LAN port, this field displays Down (line is down) or Up (line is up or connected). For the WLAN, it displays Up when the WLAN is enabled or Down when the WLAN is disabled. User’s Guide 57 Chapter 5 AP Mode Table 20 Web Configurator Status Screen (continued) LABEL DESCRIPTION Rate For the LAN ports, this displays the port speed and duplex setting or N/A when the line is disconnected. tia For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and N/A when the WLAN is disabled. Summary Use this screen to view port status and packet specific statistics. WLAN Station Status Use this screen to view the wireless stations that are currently associated to the NBG4115. en Packet Statistics 5.3.1 Navigation Panel fid Use the menu in the navigation panel to configure NBG4115 features in AP Mode. The following screen and table show the features you can configure in AP Mode. pa ny on Figure 27 Menu: AP Mode The following table describes the sub-menus. Table 21 Screens Summary LINK om Status TAB FUNCTION This screen shows the NBG4115’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. Network 58 User’s Guide Chapter 5 AP Mode Table 21 Screens Summary LAN General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115. Advanced This screen allows you to configure advanced wireless settings. QoS Use this screen to configure Wi-Fi Multimedia Quality of Service (WMM QoS). WMM QoS allows you to prioritize wireless traffic according to the delivery requirements of individual services. WPS Use this screen to configure WPS. WPS Station Use this screen to add a wireless station using WPS. Scheduling Use this screen to schedule the times the Wireless LAN is enabled. IP Use this screen to configure LAN IP address and subnet mask or to get the LAN IP address from a DHCP server. General Use this screen to view and change administrative settings such as system and domain names, password and inactivity timer. Time Setting Use this screen to change your NBG4115’s time and date. Tools Firmware tia View Log Use this screen to view the logs for the categories that you selected. Use this screen to upload firmware to your NBG4115. ny Logs on Maintenance System FUNCTION en Wireless LAN TAB fid LINK Configuratio Use this screen to backup and restore the configuration or reset the factory defaults to your NBG4115. This screen allows you to reboot the NBG4115 without turning the power off. General This screen allows you to select whether your device acts as a Router or a Access Point. pa Sys OP Mode Restart This screen allows you to select the language you prefer. om Language 5.4 LAN Settings Use this section to configure your LAN settings while in AP Mode. Click Network > LAN to see the screen below. User’s Guide 59 Chapter 5 AP Mode Note: If you change the IP address of the NBG4115 in the screen below, you will need to log into the NBG4115 again using the new IP address. The table below describes the labels in the screen. fid Table 22 Network > LAN > IP en tia Figure 28 Network > LAN > IP DESCRIPTION Get from DHCP Server Select this to let the DHCP server in the gateway assign the NBG4115 IP address. User Defined LAN IP Select this to give the NBG4115 a static IP address. IP Address Type the IP address in dotted decimal notatiion. The default setting is 192.168.1.2. If you change the IP address you will have to log in again with the new IP address. IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your NBG4115 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG4115. Apply Click Apply to save your changes to the NBG4115. ny Click Reset to reload the previous configuration for this screen. pa Reset on LABEL 5.5 WLAN and Maintenance Settings om The configuration of wireless and maintenance settings in AP Mode is the same as for Router Mode. • See Chapter 5 on page 69 for information on the configuring your wireless network. • See Maintenance and Troubleshooting (179) for information on the configuring your Maintenance settings. 60 User’s Guide Chapter 5 AP Mode 5.6 Logging in while in AP Mode Connect your computer to the LAN port of the NBG4115. The default IP address of the NBG4115 is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”. Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Type “ipconfig” to show your computer’s IP address. If your computer’s IP address is not in the correct range then see Appendix D on page 233 for information on changing your computer’s IP address. After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type “192.168.1.2” as the web address in your web browser. on fid en tia om pa ny See Chapter 6 on page 63 for a tutorial on setting up a network with an AP. User’s Guide 61 C om pa ny on fid en tia Chapter 5 AP Mode 62 User’s Guide CHAPTER tia Tutorials en 6.1 Overview 6.2 Set Up a 3G Connection fid This chapter provides tutorials for setting up your NBG4115. on This section shows you how to make a 3G connection with your NBG4115. There are two ways to set up your 3G options. Use the Wizard, which was introduced in the Quick Start Guide. The wizard is good for getting up and running in as little time as possible. It allows you to configure the minimum number of options required to get connected. Use the Web Configurator’s Network options. This is handy because it gives you access to other options not available in the Wizard, allowing you to have more control over your device. ny This tutorial shows you how to do the second one. pa You will need the following information, which should be provided by your ISP: DESCRIPTION EXAMPLE This is the 4-digit Personal Identification Number (PIN) for your 3G device’s SIM card. 1234 This is the Access Point Name (APN) of the 3G network to which you intend to connect. mobile.p3.cz.co This is the number used to instruct your 3G device to make its data connection to the 3G network. *99# om FIELD PIN Code APN Code Dial Number User’s Guide gprsinternet *99***3# 63 Chapter 6 Tutorials FIELD DESCRIPTION EXAMPLE User Name This is your account user name. dcmchale Password This is your account user name’s password. 0b1ken@kashiik.org tia ***** To set up a 3G connection: Connect to the Web Configurator, as described in the Quick Start Guide. When presented with the option to choose either Wizard or Advanced, click Go to Advanced setup. Expand the Network submenu on the navigation pane, then click WAN. om pa ny on fid en 64 User’s Guide Chapter 6 Tutorials From the Connection Type menu, select Mobile 3G then configure your 3G settings when the screen updates itself.f Click Apply to save your changes, then exit the Web Configurator. on fid en tia Note: Once you set up and enable a 3G device, all incoming and outgoing network connections are made through it and not the WAN port on your NBG4115. ny 6.3 Set Up the NBG4115 for Gaming om pa Gaming is a very popular online activity, and one that can be extremely bandwidth sensitive. Some video games may have higher performance expectations than other types of software. As such, they tend to require more finely tuned Quality of Service (QoS) prioritization. If the data packets from a game are assigned a lower priority by the NBG4115, then they may take longer to reach their destination; but if they are given a higher priority, then they should arrive at their destination marginally faster. This is because Internet servers that rely on QoS to sort packets that are in transit generally pass higher priority packets on first, while lower priority packets are held back slightly longer. When this happens on a single server with a single data packet, your gameplay is not affected. When it happens over 15 servers from beginning to end with thousands of bytes of data, then the build up of low-priority latency can become significant. For Massively Multiplayer Online (MMOs) and First Person Shooters (FPS) (which account for 3-4% of all Internet-related traffic) a latency difference of even 200 milliseconds is enough to ruin the gaming experience. User’s Guide 65 Chapter 6 Tutorials Bandwidth management allows you to set up custom parameters on the NBG4115 so that whenever you play a game, the QoS is automatically upgraded to the highest priority in order to ensure your game data packets are plucked first from the pool of incoming information and sent on ahead of lower priority packets. tia This tutorial shows you how to set up your NBG4115 for gaming. In the Web Configurator, expand the navigation pane’s Management category and then select Bandwidth MGMT Select the Advanced tab. om pa ny on fid en 66 User’s Guide Chapter 6 Tutorials Enable the Gaming check box and set its Priority to High. on fid en tia The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in the Management > Bandwidth MGMT > Advanced screen: Table 23 Preconfigured Gaming Ports TCP PORTS UDP PORTS 3074, 3390, 3932, 5555 1900, 3776, 7777, 88, 3074 Playstation 80, 443, 5223, 5223 3478, 3479, 3658, 4658 Battlenet 40, 6112, 4000, 61136119, 112 pa XBox 360 ny APPLICATION MSN Game Zone 6667, 28800-29000 6667, 28800-29000 om Note: If you need to customize specific ports, go to the next step. Otherwise, skip ahead to step 5. User’s Guide 67 Chapter 6 Tutorials To create a custom QoS setting for a specific game, enter the following information in the first available custom Priority Queue line: tia Service: This is the name by which your custom service is labled. It can be anything with the limitation that it cannot be longer than 10 characters. Priority: Set this to High. fid en Specific Port: From the list, select the communication protocol your game uses. In this example, our game uses TCP/IP so we choose TCP. If you are not sure, then select Both. Enter the starting port in the first port range box, then enter then last port in the second port range box. For our game, we used 6112 to 6119. Click Apply to save your changes, then exit the Web Configurator. on 6.4 Set Up a Wireless Network with WPS This section gives you an example of how to set up wireless network using WPS. This example uses the NBG4115 as the AP and NWD210N as the wireless client which connects to a notebook. ny Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCI card). There are two WPS methods for creating a secure connection. This tutorial shows you how to do both. pa • Push Button Configuration (PBC) - create a secure wireless network simply by pressing a button. See Section 6.4.1 on page 68.This is the easier method. om • PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN (Personal Identification Number) in the NBG4115’s interface. See Section 6.4.2 on page 70. This is the more secure method, since one device can authenticate the other. 6.4.1 Push Button Configuration (PBC) 68 Make sure that your NBG4115 is turned on and that it is within range of your computer. Make sure that you have installed the wireless client (this example uses the NWD210N) driver and utility in your notebook. User’s Guide Chapter 6 Tutorials In the wireless client utility, find the WPS settings. Enable WPS and press the WPS button (Start or WPS button) Log into NBG4115’s Web Configurator and press the Push Button button in the Network > Wireless Client > WPS Station screen. tia Note: Your NBG4115 has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other. en Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. fid The NBG4115 sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the NBG4115 securely. on The following figure shows you an example to set up wireless network and security by pressing a button on both NBG4115 and wireless client (the NWD210N in this example). Figure 29 Example WPS Process: PBC Method ZyXEL Device WITHIN 2 MINUTES SECURITY INFO COMMUNICATION om pa ny Wireless Client User’s Guide 69 Chapter 6 Tutorials 6.4.2 PIN Configuration When you use the PIN configuration method, you need to use both NBG4115’s configuration interface and the client’s utilities. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Enter the PIN number to the PIN field in the Network > Wireless LAN > WPS Station screen on the NBG4115. Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the NBG4115’s WPS Station screen within two minutes. en tia fid The NBG4115 authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the NBG4115 securely. on The following figure shows you the example to set up wireless network and security on NBG4115 and wireless client (ex. NWD210N in this example) by using PIN method. ZyXEL Device om pa ny Wireless Client Figure 30 Example WPS Process: PIN Method 70 WITHIN 2 MINUTES User’s Guide Chapter 6 Tutorials 6.5 Configure Wireless Security without WPS SSID_Example3 Channel Security WPA-PSK en (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) tia SSID This example shows you how to configure wireless security settings with the following parameters on your NBG4115. Follow the steps below to configure the wireless settings on your NBG4115. fid The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 3.2 on page 27). Open the Wireless LAN > General screen in the AP’s Web Configurator. Make sure the Enable Wireless LAN check box is selected. Enter SSID_Example3 as the SSID and select a channel. Set security mode to WPA-PSK and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click Apply. on om pa ny Figure 31 Tutorial: Network > Wireless LAN > General User’s Guide 71 Chapter 6 Tutorials Open the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. on fid en tia Figure 32 Tutorial: Status Screen ny 6.5.1 Configure Your Notebook Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG4115 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. Wireless adapters come with software sometimes called a “utility” that you install on your computer. See your wireless adapter’s User’s Guide for information on how to do that. After you’ve installed the utility, open it. If you cannot see your utility’s icon on your screen, go to Start > Programs and click on your utility in the list of programs that appears. The utility displays a list of APs within range, as shown in the example screen below. om pa 72 User’s Guide Chapter 6 Tutorials Select SSID_Example3 and click Connect. fid en tia Figure 33 Connecting a Wireless Client to a Wireless Network t Select WPA-PSK and type the security key in the following screen. Click Next. ny on Figure 34 Security Settings The Confirm Save window appears. Check your settings and click Save to continue. om pa Figure 35 Confirm Save User’s Guide 73 Chapter 6 Tutorials Check the status of your wireless connection in the screen below. If your wireless connection is weak or you have no connection, see the Troubleshooting section of this User’s Guide. fid en tia Figure 36 Link Status on If your connection is successful, open your Internet browser and enter http:// www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured. 6.6 Bandwidth Management ny This section shows you how to configure the bandwidth management feature on the NBG4115 to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you to specify bandwidth management rules based on an application or subnet. pa Use the Management > Bandwidth MGMT > Advanced screen to configure bandwidth management for your network. 6.6.1 Bandwidth Management by Application om For this example, your company’s customer support department wants to prioritize VoIP, e-mail and MSN Messenger services. In the Priority Queue table, VoIP and e-mail services are already pre-defined. However, you still need to add MSN Messenger in the list (refer to Section 6.6.2 on page 75). 74 User’s Guide Chapter 6 Tutorials In the following screen, you set the priorities for VoIP and e-mail. fid en tia Figure 37 Tutorial: Priority Queue on Click Enable for the VoIP (SIP) service and set priority to High. Do the same for E-mail. For the rest of the applications, click Enable if you need these services and set the priority to Low. Note: You can also leave the Enable field blank for the rest of the applications. In doing so, the NBG4115 does not apply bandwidth management to these services. 6.6.2 Custom Bandwidth Management ny Aside from the VOIP and e-mail services, you need to set the priority for MSN Messenger. To do this, add the service in the Priority Queue table of the Management > Bandwidth MGMT > Advanced screen. om pa Figure 38 Tutorial: Adding TFTP to Priority Queue To add the MSN Messenger service in the Priority Queue: User’s Guide 75 Click Enable in one of the fields for additional services. Add MSN as the service name. Set the priority for this to High. For the port, choose TCP from the drop-down menu and enter 1863 in the Specific Port field. tia Chapter 6 Tutorials en Your priority table should now have the VoIP, e-mail and MSN Messenger services priorities set to High. 6.6.3 Bandwidth Management by IP or IP Range on fid For this example, your company’s 20th anniversary is coming up. You want to use the multimedia room’s Internet connection to upload some videos to the website. You also use this room for video conferences, radio broadcasts, live video streaming, and so on throughout the day. While these media-heavy activities are going on, you still want to keep uploading the videos in the background. As such, you want to dedicate the minimum amount of bandwidth for this traffic. You know the following: • Multimedia room’s LAN IP range: 192.168.1.1 to 192.168.1.34 • IP Address of the computer uploading through FTP: 192.168.1.34 • Services you want to configure: TCP 7070 RTSP TCP or UDP 554 VDO LIVE TCP 7000 TCP 20 ~ 21 pa FTP ny REAL AUDIO Click the Edit icon in Management > Bandwidth MGMT > Advanced to open the following screen. The following screen appears. om Figure 39 Tutorial: Bandwidth Allocation Example 76 User’s Guide Chapter 6 Tutorials Enter the following values for each service you want to add. For this tutorial, you need to add each of the following service (see table below) and click Apply. Table 24 VDO LIVE FTP tia REAL AUDIO RTSP SERVICES FIELDS Check this to turn on this bandwidth management rule. Direction Select Both applies bandwidth management to traffic that the NBG4115 forwards to both the LAN and the WAN. Select To WAN LAN IP Range Enter 192.168.1.1 ~ 192.168.1.33. Enter 192.168.1.34 Protocol TCP TCP or UDP TCP Port Range 7070 554 7000 Policy Min Rate Select 30M as the minimum bandwidth allowed. Apply Click this to add the rule to the Bandwidth Allocation table. fid en Active TCP 20 ~ 21 Max Select 64K on After adding these services, go to Management > Bandwidth MGMT > Advanced and check if you have the correct values. pa ny Figure 40 Tutorial: Bandwidth Allocation Example om Note: The Policy column displays either Max (maximum) or Min (minimum). This is directly directed to the value in the Rate column. For example, you selected Min and entered 30M as the rate for the VoIP service. The NBG4115 allocates at least 30 megabytes for the VoIP service. Refer to Appedix F on page 263 for a list of common services that you can add in the Bandwidth Mgnt screen. User’s Guide 77 C om pa ny on fid en tia Chapter 6 Tutorials 78 User’s Guide WAN (101) on LAN (115) DHCP Server (119) NAT (125) om pa ny DDNS (135) tia fid Wireless LAN (81) en Network P ART II 79 80 om pa ny on fid en tia CHAPTER tia Wireless LAN en 7.1 Overview fid This chapter discusses how to configure the wireless network settings in your NBG4115. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. ny on Figure 41 Example of a Wireless Network om pa AP The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your NBG4115 is the AP. User’s Guide 81 Chapter 7 Wireless LAN 7.1.1 What You Can Do in this Chapter tia • Use the MAC Filter screen (Section 7.3 on page 90) to allow or deny wireless stations based on their MAC addresses from connecting to the NBG4115. • Use the General screen (Section 7.2 on page 85) to enable the Wireless LAN, enter the SSID and select the wireless security mode. • Use the Advanced screen (Section 7.4 on page 92) to allow intra-BSS networking and set the RTS/CTS Threshold. en • Use the QoS screen (Section 7.5 on page 94) to ensure Quality of Service (QoS) in your wireless network. • Use the WPS screen (Section 7.6 on page 97) to quickly set up a wireless network with strong security, without having to configure security settings manually. fid • Use the WPS Station screen (Section 7.7 on page 98) to add a wireless station using WPS. • Use the Scheduling screen (Section 7.8 on page 99) to set the times your wireless LAN is turned on and off. on 7.1.2 What You Should Know Every wireless network must follow these basic guidelines. • Every wireless client in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service Set IDentity. • If two wireless networks overlap, they should use different channels. ny Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. • Every wireless client in the same wireless network must use security compatible with the AP. pa Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. Wireless Security Overview om The following sections introduce different types of wireless security you can set up in the wireless network. SSID 82 Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. User’s Guide Chapter 7 Wireless LAN This type of security is fairly weak, however, because there are ways for unauthorized devices to get the SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network. MAC Address Filter en tia Every wireless client has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s Guide or other documentation. fid You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless network, it does not matter if it has the correct settings. on This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the wireless network. User Authentication ny You can make every user log in to the wireless network before they can use it. This is called user authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do this. For wireless networks, there are two typical places to store the user names and passwords for each user. pa • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server used in businesses more than in homes. om If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot set up user names and passwords for your users. Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network. User’s Guide 1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. 2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. 83 Chapter 7 Wireless LAN Local user databases also have an additional limitation that is explained in the next section. Encryption tia Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. en The types of encryption you can choose depend on the type of user authentication. (See Section on page 83 for information about this.) Table 25 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER No Security WPA Static WEP WPA-PSK WPA2-PSK WPA2 on Stronges fid Weakest For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK. ny Usually, you should set up the strongest encryption that every wireless client in the wireless network supports. For example, suppose the AP does not have a local user database, and you do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA. Therefore, you should set up Static WEP in the wireless network. pa Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly. om Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user database. In this case, it is better to set up stronger encryption with no authentication than to set up weaker encryption with the local user database. 84 When you select WPA2 or WPA2-PSK in your NBG4115, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the NBG4115. User’s Guide Chapter 7 Wireless LAN Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every wireless client in the wireless network must have the same key. WPS fid en tia WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Depending on the devices in your network, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification Number) in the devices. Then, they connect and set up a secure network by themselves. See how to set up a secure wireless network using WPS in the Section 6.4 on page 68. 7.2 General on Use this screen to enable the Wireless LAN, enter the SSID and select the wireless security mode. Note: If you are configuring the NBG4115 from a computer connected to the wireless LAN and you change the NBG4115’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the NBG4115’s new settings. ny Click Network > Wireless LAN to open the General screen. om pa Figure 42 Network > Wireless LAN > General User’s Guide 85 Chapter 7 Wireless LAN The following table describes the general wireless LAN labels in this screen. Table 26 Network > Wireless LAN > General DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN. Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. Channel Selection Set the operating frequency/channel depending on your particular region. en tia LABEL fid Select a channel from the drop-down list box. The options vary depending on the frequency band and the country you are in. Refer to the Connection Wizard chapter for more information on channels. This option is only available if Auto Channel Selection is disabled. Select this check box for the NBG4115 to automatically choose the channel with the least interference. Deselect this check box if you wish to manually select the channel using the Channel Section field. Operating Channel This displays the channel the NBG4115 is currently using. Channel Width Select whether the NBG4115 uses a wireless channel width of 20 or 40 MHz. A standard 20 MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps. Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow the NBG4115 to adjust the channel bandwidth automatically. Security Mode Select WPA-PSK or WPA2-PSK to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as this device. After you select to use a security, additional options appears in this screen. See 7.2.2 and 7.2.3 sections. Or you can select No Security to allow any client to associate this network without authentication. pa ny on Auto Channel Selection Note: If you enable the WPS function, only No Security, WPA-PSK and WPA2-PSK are available in this field. Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. om Apply See the rest of this chapter for information on the other labels in this screen. 86 User’s Guide Chapter 7 Wireless LAN 7.2.1 No Security on fid en Figure 43 Network > Wireless LAN > General: No Security tia Note: If you do not enable any wireless security on your NBG4115, your network is accessible to any wireless networking device that is within range. Select No Security to allow wireless stations to communicate with the access points without any data encryption. The following table describes the labels in this screen. LABEL Security Mode DESCRIPTION Choose No Security from the drop-down list box. Click Apply to save your changes back to the NBG4115. pa Apply ny Table 27 Wireless No Security Reset Click Reset to reload the previous configuration for this screen. om 7.2.2 WEP Encryption WEP encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private. It encrypts unicast and multicast communications in a network. Both the wireless stations and the access points must use the same WEP key. Your NBG4115 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. User’s Guide 87 Chapter 7 Wireless LAN In order to configure and enable WEP encryption; click Network > Wireless LAN to display the General screen. Select Static WEP from the Security Mode list. ny on fid en tia Figure 44 Network > Wireless LAN > General: Static WEP The following table describes the wireless LAN security labels in this screen. pa Table 28 Network > Wireless LAN > General: Static WEP DESCRIPTION WEP Encryption Select 64-bit WEP or 128-bit WEP to enable data encryption. Authenticatio n Method This field is activated when you select 64-bit WEP or 128-bit WEP in the WEP Encryption field. om LABEL 88 ASCII Select Auto, Open System or Shared Key from the drop-down list box. This field specifies whether the wireless clients have to provide the WEP key to login to the wireless client. Keep this setting at Auto or Open System unless you want to force a key verification before communication between the wireless client and the ZyXEL Device occurs. Select Shared Key to force the clients to provide the WEP key prior to communication. Select this option in order to enter ASCII characters as WEP key. User’s Guide Chapter 7 Wireless LAN Table 28 Network > Wireless LAN > General: Static WEP DESCRIPTION Hex Select this option in order to enter hexadecimal characters as a WEP key. The preceding "0x", that identifies a hexadecimal key, is entered automatically. The WEP keys are used to encrypt data. Both the NBG4115 and the wireless stations must use the same WEP key for data transmission. tia Key 1 to Key LABEL If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). en If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F"). You must configure at least one key, only one key can be activated at any one time. The default key is key 1. Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. fid Apply on 7.2.3 WPA-PSK/WPA2-PSK Click Network > Wireless LAN to display the General screen. Select WPA-PSK or WPA2-PSK from the Security Mode list. om pa ny Figure 45 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK User’s Guide 89 Chapter 7 Wireless LAN The following table describes the labels in this screen. DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK in the Security Mode field. tia LABEL Table 29 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the NBG4115 even when the NBG4115 is using WPA2-PSK. WPA-PSK/WPA2-PSK uses a simple common password for authentication. en Pre-Shared Key Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces and symbols). fid Type a pre-shared key less than 64 case-sensitive HEX characters ("09", "A-F"). The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to all clients. The re-keying process is the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis. Setting of the Group Key Update Timer is also supported in WPA-PSK/WPA2-PSK mode. The default is 1800 seconds (30 minutes). Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. on Group Key Update Timer ny 7.3 MAC Filter om pa The MAC filter screen allows you to configure the NBG4115 to give exclusive access to up to 16 devices (Allow) or exclude up to 16 devices from accessing the NBG4115 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. 90 User’s Guide Chapter 7 Wireless LAN To change your NBG4115’s MAC filter settings, click Network > Wireless LAN > MAC Filter. The screen appears as shown. on fid en tia Figure 46 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu. LABEL Active ny Table 30 Network > Wireless LAN > MAC Filter Select Yes from the drop down list box to enable MAC address filtering. Define the filter action for the list of MAC addresses in the MAC Address table. pa Filter Action DESCRIPTION om Select Deny to block access to the NBG4115, MAC addresses not listed will be allowed to access the NBG4115 User’s Guide Select Allow to permit access to the NBG4115, MAC addresses not listed will be denied access to the NBG4115. Set This is the index number of the MAC address. MAC Address Enter the MAC addresses of the wireless station that are allowed or denied access to the NBG4115 in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. 91 Chapter 7 Wireless LAN 7.4 Advanced Click Network > Wireless LAN > Advanced. The screen appears as shown. on fid en tia Figure 47 Network > Wireless LAN > Advanced The following table describes the labels in this screen. LABEL Table 31 Network > Wireless LAN > Advanced DESCRIPTION Wireless Advanced Setup Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS (Clear To Send) handshake. ny RTS/CTS Threshold Enter a value between 0 and 2432. The threshold (number of bytes) for the fragmentation boundary for directed messages. It is the maximum data fragment size that can be sent. Enter an even number between 256 and 2346. pa Fragmentatio n Threshold This field is not available when Super Mode is selected. om Beacon Interval 92 When a wirelessly networked device sends a beacon, it includes with it a beacon interval. This specifies the time period before the device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low-power mode before waking up to handle the beacon. This value can be set from 20ms to 1000ms. A high value helps save current consumption of the access point. DTIM Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Active Power Management mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 100. Preamble A preamble affects the timing in your wireless network. There are two preamble modes: long and short. If a device uses a different preamble mode than the NBG4115 does, it cannot communicate with the NBG4115. User’s Guide Chapter 7 Wireless LAN Table 31 Network > Wireless LAN > Advanced DESCRIPTION CTS Protection When set to None, the NBG4115 protects wireless communication against interference. tia When set to Always, the NBG4115 improves performance within mixed wireless modes. LABEL Select Auto to let the NBG4115 determine whether to turn this feature on or off in the current environment. This field controls the transmission power of the NBG4115. When using the NBG4115 with a notebook computer, select a lower transmission power level when you are close to the AP in order to conserve battery power. Enable IntraBSS Traffic A Basic Service Set (BSS) exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point (AP). fid en Tx Power on Intra-BSS traffic is traffic between wireless clients in the BSS. When IntraBSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. om pa ny Apply User’s Guide 93 Chapter 7 Wireless LAN 7.5 QoS tia Click Network > Wireless LAN > QoS. The following screen appears. The QoS screen allows you to automatically give a service (such as e-mail, VoIP or FTP) a priority level. ny on fid en Figure 48 Network > Wireless LAN > QoS The following table describes the labels in this screen. Table 32 Network > Wireless LAN > QoS pa LABEL om WMM QoS Policy 94 DESCRIPTION Select Default to have the NBG4115 automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly. Select Application Priority from the drop-down list box to display a table of application names, services, ports and priorities to which you want to apply WMM QoS. The table appears only if you select Application Priority in WMM QoS Policy. This is the number of an individual application entry. Name This field displays a description given to an application entry. Service This field displays either FTP, WWW, E-mail or a User Defined service to which you want to apply WMM QoS. User’s Guide Chapter 7 Wireless LAN LABEL DESCRIPTION Dest Port This field displays the destination port number to which the application sends traffic. Priority This field displays the priority of the application. tia Highest - Typically used for voice or video that should be highquality. Table 32 Network > Wireless LAN > QoS (continued) High - Typically used for voice or video that can be medium-quality. en Mid - Typically used for applications that do not fit into another priority. For example, Internet surfing. Low - Typically used for non-critical “background” applications, such as large file transfers and print jobs that should not affect other applications. Click the Edit icon to open the Application Priority Configuration screen. Modify an existing application entry or create a application entry in the Application Priority Configuration screen. fid Modify on Click the Remove icon to delete an application entry. Apply Click Apply to save your changes to the NBG4115. 7.5.1 Application Priority Configuration Use this screen to edit a WMM QoS application entry. Click the edit icon under Modify. The following screen displays. om pa ny Figure 49 Network > Wireless LAN > QoS: Application Priority Configuration See Appendix F on page 263 for a list of commonly-used services and destination ports. The following table describes the fields in this screen. Network > Wireless LAN > QoS: Application Priority Configuration User’s Guide LABEL DESCRIPTION Name Type a description of the application priority. 95 Chapter 7 Wireless LAN LABEL DESCRIPTION Service The following is a description of the applications you can prioritize with WMM QoS. Select a service from the drop-down list box. • E-Mail tia Electronic mail consists of messages sent through a computer network to specific groups or individuals. Here are some default ports for e-mail: POP3 - port 110 en IMAP - port 143 SMTP - port 25 HTTP - port 80 fid • FTP Network > Wireless LAN > QoS: Application Priority Configuration (continued) • WWW on File Transfer Protocol enables fast transfer of files, including large files that it may not be possible to send via e-mail. FTP uses port number 21. The World Wide Web is an Internet system to distribute graphical, hyper-linked information, based on Hyper Text Transfer Protocol (HTTP) - a client/server protocol for the World Wide Web. The Web is not synonymous with the Internet; rather, it is just one service on the Internet. Other services on the Internet include Internet Relay Chat and Newsgroups. The Web is accessed through use of a browser. • User-Defined Dest Port pa Priority ny User-defined services are user specific services configured using known ports and applications. This displays the port the selected service uses. Type a port number in the field provided if you want to use a different port to the default port. Select a priority from the drop-down list box. Click Apply to save your changes back to the NBG4115. Cancel Click Cancel to return to the previous screen. om Apply 96 User’s Guide Chapter 7 Wireless LAN 7.6 WPS on fid en Figure 50 WPS tia To open this screen, click Network > Wireless LAN > WPS tab. Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS status. The following table describes the labels in this screen. LABEL ny Table 33 WPS DESCRIPTION WPS Setup Select this to enable the WPS feature. PIN Number This displays a PIN number last time system generated. Click Generate to generate a new PIN number. pa Enable WPS WPS Status om Status Release Configuration User’s Guide This displays Configured when the NBG4115 has connected to a wireless network using WPS or when Enable WPS is selected and wireless or wireless security settings have been changed. The current wireless and wireless security settings also appear in the screen. This displays Unconfigured if WPS is disabled and there are no wireless or wireless security changes on the NBG4115 or you click Release_Configuration to remove the configured wireless and wireless security settings. This button is only available when the WPS status displays Configured. Click this button to remove all configured wireless and wireless security settings for WPS connections on the NBG4115. 97 Chapter 7 Wireless LAN Table 33 WPS DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Refresh Click Refresh to get this screen information afresh. tia LABEL 7.7 WPS Station en Use this screen when you want to add a wireless station using WPS. To open this screen, click Network > Wireless LAN > WPS Station tab. fid Note: Note: After you click Push Button on this screen, you have to press a similar button in the wireless station utility within 2 minutes. To add the second wireless station, you have to press these buttons on both device and the wireless station again after the first 2 minutes. ny on Figure 51 WPS Station pa The following table describes the labels in this screen. Table 34 WPS Station DESCRIPTION Push Button Use this button when you use the PBC (Push Button Configuration) method to configure wireless stations’s wireless settings. See Section 6.4.1 on page 68. om LABEL 98 Or input station’s PIN number Click this to start WPS-aware wireless station scanning and the wireless security information synchronization. Use this button when you use the PIN Configuration method to configure wireless station’s wireless settings. See Section 6.4.2 on page 70. Type the same PIN number generated in the wireless station’s utility. Then click Start to associate to each other and perform the wireless security information synchronization. User’s Guide Chapter 7 Wireless LAN 7.8 Scheduling tia Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Network > Wireless LAN > Scheduling tab. ny on fid en Figure 52 Scheduling The following table describes the labels in this screen. pa Table 35 Scheduling DESCRIPTION Enable Wireless LAN Scheduling Select this to enable Wireless LAN scheduling. Action Select On or Off to specify whether the Wireless LAN is turned on or off. This field works in conjunction with the Day and Except for the following times fields. Day Select Everyday or the specific days to turn the Wireless LAN on or off. If you select Everyday you can not select any specific days. This field works in conjunction with the Except for the following times field. om LABEL User’s Guide 99 Chapter 7 Wireless LAN Table 35 Scheduling DESCRIPTION Except for the following times (24-Hour Format) Select a begin time using the first set of hour and minute (min) drop down boxes and select an end time using the second set of hour and minute (min) drop down boxes. If you have chosen On earlier for the WLAN Status the Wireless LAN will turn off between the two times you enter in these fields. If you have chosen Off earlier for the WLAN Status the Wireless LAN will turn on between the two times you enter in these fields. tia LABEL en Note: Entering the same begin time and end time will mean the whole day. Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. om pa ny on fid Apply 100 User’s Guide CHAPTER tia WAN en 8.1 Overview fid This chapter discusses the NBG4115’s WAN screens. Use these screens to configure your NBG4115 for Internet access. Figure 53 LAN and WAN LAN on A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. ny WAN pa See the chapter about the connection wizard for more information on the fields in the WAN screens. om 8.2 What You Can Do in this Chapter • Use the Internet Connection (Section 8.3 on page 105) screen to enter your ISP information and set how the computer acquires its IP, DNS and WAN MAC addresses. • Use the Advanced (Section 8.4 on page 113) screen to enable multicasting, configure Windows networking and bridge. User’s Guide 101 Chapter 8 WAN 8.2.1 What You Need To Know The following terms and concepts may help as you read through this chapter. tia Encapsulation Method en Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password (and service name) for user authentication. fid WAN IP Address on The WAN IP address is an IP address for the NBG4115, which makes it accessible from an outside network. It is used by the NBG4115 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG4115 tries to access the Internet. If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation method). DNS Server Address Assignment ny Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. pa The NBG4115 can get the DNS server addresses in the following ways. The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. om If your ISP dynamically assigns the DNS server IP addresses (along with the NBG4115’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. 102 User’s Guide Chapter 8 WAN WAN MAC Address tia The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address. en Otherwise, click Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to configuration file. It is recommended that you clone the MAC address prior to hooking up the WAN Port. Multicast on Figure 54 Multicast Example fid Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1. Server ny In the multicast example above, systems A and B comprise one multicast group. In multicasting, the server only needs to send one data stream and this is delivered to systems A and B. pa IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The NBG4115 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). om At start up, the NBG4115 queries all directly connected networks to gather group membership. After that, the NBG4115 periodically updates this information. IP multicasting can be enabled/disabled on the NBG4115 LAN and/or WAN interfaces in the Web Configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. NetBIOS over TCP/IP NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial- User’s Guide 103 Chapter 8 WAN up services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls. However it may sometimes be necessary to allow NetBIOS packets to pass through to the WAN in order to find a computer on the WAN. Auto-Bridge en tia In the rear panel of your NBG4115, you can see four LAN ports (1 to 2) and one WAN port. The WAN port is for your Internet access connection, and the LAN ports are for your network devices. The WAN port has a different IP address from the LAN ports. fid When you enable auto-bridging in your NBG4115, all three ports (2 LAN ports and the WAN port) share the same IP address. This might happen if you put the NBG4115 behind a NAT router that assigns it this IP address. When the NBG4115 is in auto-bridge mode, the NBG4115 acts as an AP and all the interfaces (LAN, WAN and WLAN) are bridged. In this mode, your NAT, DHCP server and firewall on the NBG4115 are not available. You do not have to reconfigure them if you return to router mode. on Auto-bridging only works under the following conditions: • The WAN IP must be 192.168.x.y (where x and y must be from zero to nine). If the LAN IP address and the WAN IP address are in the same subnet but x or y is greater than nine, the device operates in router mode (with firewall available). om pa ny • The device must be in Router Mode (see Chapter 22 on page 195 for more information) for auto-bridging to become active. 104 User’s Guide Chapter 8 WAN 8.3 Internet Connection 8.3.1 Ethernet This screen displays when you select the Ethernet connection type. tia Use this screen to change your NBG4115’s Internet access settings. Click Network > WAN. The screen differs according to the connection you choose. pa ny on fid en Figure 55 Network > WAN > Internet Connection: Ethernet Encapsulation The following table describes the labels in this screen. om Table 36 Network > WAN > Internet Connection: Ethernet LABEL DESCRIPTION Connection Type You must choose the Ethernet option when the WAN port is used as a regular Ethernet. WAN IP Address Assignment User’s Guide Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Use Fixed IP Address Select this option If the ISP assigned a fixed IP address. 105 Chapter 8 WAN Table 36 Network > WAN > Internet Connection: Ethernet LABEL DESCRIPTION Enter your WAN IP address in this field if you selected Use Fixed IP Address. IP Subnet Mask Enter the IP Subnet Mask in this field. Gateway IP Address Enter a Gateway IP Address (if your ISP gave you one) in this field. tia IP Address DNS Servers fid en First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right Second DNS displays the (read-only) DNS server IP address that the ISP assigns. Server Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose UserDefined, but leave the IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second UserDefined changes to None after you click Apply. on Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. The MAC address section allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Factory default Select Factory default to use the factory assigned default MAC Address. Clone the computer’s MAC address - IP Address Select Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to the rom file. It will not change unless you change the setting or upload a different ROM file. Set WAN MAC Address Select this option and enter the MAC address you want to use. pa ny WAN MAC Address Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om 8.3.2 PPPoE The NBG4115 supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is for a dial-up connection using PPPoE. 106 For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example Radius). User’s Guide Chapter 8 WAN One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals. tia Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. en By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. This screen displays when you select the PPPoE connection type. om pa ny on fid Figure 56 Network > WAN > Internet Connection: PPPoE The following table describes the labels in this screen. Table 37 Network > WAN > Internet Connection: PPPoE LABEL DESCRIPTION ISP Parameters for Internet Access User’s Guide Connection Type Select PPP over Ethernet if you connect to your Internet via dial-up. Service Name Type the PPPoE service name provided to you. PPPoE uses a service name to identify and reach the PPPoE server. User Name Type the user name given to you by your ISP. 107 Chapter 8 WAN Table 37 Network > WAN > Internet Connection: PPPoE DESCRIPTION Password Type the password associated with the user name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-Up Connection Select Nailed-Up Connection if you do not want the connection to time out. Idle Timeout This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. tia LABEL First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose UserDefined, but leave the IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second UserDefined changes to None after you click Apply. fid Second DNS Server en DNS Servers on Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. The MAC address section allows users to configure the WAN port's MAC address by using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Factory default Select Factory default to use the factory assigned default MAC Address. Clone the computer’s MAC address IP Address Select Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to the rom file. It will not change unless you change the setting or upload a different ROM file. Set WAN MAC Address Select this option and enter the MAC address you want to use. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om pa ny WAN MAC Address 8.3.3 PPTP Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. 108 PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the Internet. User’s Guide Chapter 8 WAN This screen displays when you select the PPTP connection type. ny on fid en tia Figure 57 Network > WAN > Internet Connection: PPTP pa The following table describes the labels in this screen. Table 38 Network > WAN > Internet Connection: PPTP LABEL DESCRIPTION om ISP Parameters for Internet Access Connection Type Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. The NBG4115 supports only one PPTP server connection at any given time. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection. User Name User’s Guide Type the user name given to you by your ISP. 109 Chapter 8 WAN Table 38 Network > WAN > Internet Connection: PPTP DESCRIPTION Password Type the password associated with the User Name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out. Idle Timeout This value specifies the time in minutes that elapses before the NBG4115 automatically disconnects from the PPTP server. tia LABEL en PPTP Configuration Type the IP address of the PPTP server. Connection ID/ Name Type your identification name for the PPTP server. Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Use Fixed IP Address Select this option If the ISP assigned a fixed IP address. fid Server IP Address/ Domain Enter your WAN IP address in this field if you selected Use Fixed IP Address. My IP Subnet Mask Your NBG4115 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG4115. Get automatically from ISP DNS Servers Select this to get your WAN IP address from your ISP. Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. ny First DNS Server WAN IP Address Assignment on My WAN IP Address om pa Second DNS Server 110 Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose User-Defined, but leave the IP address set to 0.0.0.0, UserDefined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. WAN MAC Address The MAC address section allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Factory default Select Factory default to use the factory assigned default MAC Address. User’s Guide Chapter 8 WAN DESCRIPTION Clone the computer’s MAC address - IP Address Select Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to the rom file. It will not change unless you change the setting or upload a different ROM file. Set WAN MAC Address Select this option and enter the MAC address you want to use. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. en tia LABEL Table 38 Network > WAN > Internet Connection: PPTP 8.3.4 Mobile 3G fid 3G is an International Telecommunication Union (ITU) mobile networking standard that provides high-speed connectivity, greater network capacity, and a significantly improved broadcast range to compatible devices. on This screen displays when you select the Mobile 3G connection type. Note: The Mobile 3G option and its sub-options only appear when you have a 3G USB device connected to the NBG4115. om pa ny Figure 58 Network > WAN > Internet Connection: Mobile 3G User’s Guide 111 Chapter 8 WAN The following table describes the labels in this screen. Table 39 Network > WAN > Internet Connection: Mobile 3G LABEL DESCRIPTION 3G is . tia Connection Type ISP Parameters for Internet Access To configure a Mobile 3G client, you must configure the User Name and Password fields as well as PIN Code, APN Code, and Dial Number. Select your ISP from this list, if it is pre-configured. PIN Code Enter the 4-digit 3G account PIN code given to you by your ISP. APN Code Enter the Access Point Name (APN) given to you by your ISP. Dial Number Enter the phone number that must be dialed in order to login to your 3G account from the NBG4115. User Name Type the user name given to you by your ISP. Password Type the password associated with the User Name above. Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out. Idle Timeout This value specifies the time in minutes that elapses before the NBG4115 automatically disconnects from the PPTP server. on fid en Internet Service Provider DNS Servers Second DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. First DNS Server pa ny Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose User-Defined, but leave the IP address set to 0.0.0.0, UserDefined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply. om WAN MAC Address 112 Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. The MAC address section allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Factory default Select Factory default to use the factory assigned default MAC Address. Clone the computer’s MAC address - IP Address Select Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to the rom file. It will not change unless you change the setting or upload a different ROM file. Set WAN MAC Address Select this option and enter the MAC address you want to use. User’s Guide Chapter 8 WAN Table 39 Network > WAN > Internet Connection: Mobile 3G DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. tia LABEL 8.4 Advanced en Use this screen to enable Multicast, allow Windows Networking and enable Auto-bridge. Note: The three categories shown in this screen are independent of each other. pa ny on Figure 59 Network > WAN > Advanced fid To change your NBG4115’s advanced WAN settings, click Network > WAN > Advanced. The screen appears as shown. The following table describes the labels in this screen. Table 40 WAN > Advanced om LABEL DESCRIPTION Multicast Setup Multicast Check this to enable multicasting. This applies to traffic routed from the WAN to the LAN. Leaving this blank may cause incoming traffic to be dropped or sent to all connected network devices. Windows Networking (NetBIOS over TCP/IP) User’s Guide 113 Chapter 8 WAN DESCRIPTION Allow between LAN and WAN Select this check box to forward NetBIOS packets from the LAN to the WAN and from the WAN to the LAN. If your firewall is enabled with the default policy set to block WAN to LAN traffic, you also need to enable the default WAN to LAN firewall rule that forwards NetBIOS traffic. tia LABEL Table 40 WAN > Advanced Clear this check box to block all NetBIOS packets going from the LAN to the WAN and from the WAN to the LAN. Allow Trigger Dial Select this option to allow NetBIOS packets to initiate calls. en Auto-bridge Select this option to have the NBG4115 switch to bridge mode automatically when the NBG4115 gets a WAN IP address in the range of 192.168.x.y (where x and y are from zero to nine) no matter what the LAN IP address is. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om pa ny on fid Enable Auto-bridge mode 114 User’s Guide CHAPTER 9.1 Overview This chapter describes how to configure LAN settings. en tia LAN on fid A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your physical network into logical networks. DSL ny LAN pa The LAN screens can help you configure a LAN DHCP server and manage IP addresses. om 9.1.1 What You Can Do in this Chapter Use the IP (Section 9.3 on page 117) screen to change your basic LAN settings. 9.2 What You Need To Know The following terms and concepts may help as you read through this chapter. User’s Guide 115 Chapter 9 LAN LAN and WAN IP Addresses The actual physical connection determines whether the NBG4115 ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. LAN tia Figure 60 LAN and WAN IP Addresses fid en WAN on The LAN parameters of the NBG4115 are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) • DHCP server enabled with 32 client IP addresses starting from 192.168.1.33. ny These parameters should work for the majority of installations. If your ISP gives you explicit DNS server address(es), read the embedded Web Configurator help regarding what fields need to be configured. IP Pool Setup pa The NBG4115 is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to 192.168.1.64. This configuration leaves 31 IP addresses (excluding the NBG4115 itself) in the lower range (192.168.1.2 to 192.168.1.32) for other server computers, for instance, servers for mail, FTP, TFTP, web, etc., that you may have. om Refer to Section 4.5.7 on page 50 for information on IP Address and Subnet Mask. LAN TCP/IP The NBG4115 has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. 116 Refer to the Section 4.5.8 on page 50 section for information on System DNS Servers. User’s Guide Chapter 9 LAN 9.3 IP Use this screen to change your basic LAN settings. Click Network > LAN. fid The following table describes the labels in this screen. en tia Figure 61 Network > LAN > IP Table 41 Network > LAN > IP DESCRIPTION IP Address Type the IP address of your NBG4115 in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your NBG4115 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG4115. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om pa ny on LABEL User’s Guide 117 C om pa ny on fid en tia Chapter 9 LAN 118 User’s Guide CHAPTER 10 tia DHCP Server en 10.1 Overview on fid DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 10.1.1 What You Can Do in this Chapter • Use the General (Section 10.2 on page 120) screen to enable the DHCP server. • Use the Advanced (Section 10.3 on page 121) screen to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. ny • Use the Client List (Section 10.4 on page 122) screen to view the current DHCP client information. 10.1.2 What You Need To Know pa The following terms and concepts may help as you read through this chapter. MAC Addresses om Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. Refer to Section 4.5.7 on page 50 for information on IP Address and Subnet Mask. Refer to the Section 4.5.8 on page 50 section for information on System DNS Servers. User’s Guide 119 Chapter 10 DHCP Server 10.2 General Use this screen to enable the DHCP server. Click Network > DHCP Server. The following screen displays. Table 42 Network > DHCP Server > General en fid The following table describes the labels in this screen. tia Figure 62 Network > DHCP Server > General DESCRIPTION Enable DHCP Server Enable or Disable DHCP for LAN. on LABEL ny DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients (computers) to obtain TCP/IP configuration at startup from a server. Leave the Enable DHCP Server check box selected unless your ISP instructs you to do otherwise. Clear it to disable the NBG4115 acting as a DHCP server. When configured as a server, the NBG4115 provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured. When set as a server, fill in the following four fields. IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool for LAN. Pool Size This field specifies the size, or count of the IP address pool for LAN. pa Apply Click Apply to save your changes back to the NBG4115. Click Reset to begin configuring this screen afresh. om Reset 120 User’s Guide Chapter 10 DHCP Server 10.3 Advanced tia This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. You can also use this screen to configure the DNS server information that the NBG4115 sends to the DHCP clients. ny on fid Figure 63 Network > DHCP Server > Advanced en To change your NBG4115’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays. The following table describes the labels in this screen. pa Table 43 Network > DHCP Server > Advanced LABEL DESCRIPTION Static DHCP Table This is the index number of the static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN. IP Address Type the LAN IP address of a computer on your LAN. om DNS Server DNS Servers Assigned by DHCP Server User’s Guide The NBG4115 passes a DNS (Domain Name System) server IP address (in the order you specify here) to the DHCP clients. The NBG4115 only passes this information to the LAN DHCP clients when you select the Enable DHCP Server check box. When you clear the Enable DHCP Server check box, DHCP service is disabled and you must have another DHCP sever on your LAN, or else the computers must have their DNS server addresses manually configured. 121 Chapter 10 DHCP Server LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. tia Second DNS Server Table 43 Network > DHCP Server > Advanced en Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose User-Defined, but leave the IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second UserDefined changes to None after you click Apply. on fid Select DNS Relay to have the NBG4115 act as a DNS proxy. The NBG4115's LAN IP address displays in the field to the right (readonly). The NBG4115 tells the DHCP clients on the LAN that the NBG4115 itself is the DNS server. When a computer on the LAN sends a DNS query to the NBG4115, the NBG4115 forwards the query to the NBG4115's system DNS server (configured in the WAN > Internet Connection screen) and relays the response back to the computer. You can only select DNS Relay for one of the three servers; if you select DNS Relay for a second or third DNS server, that choice changes to None after you click Apply. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. ny Apply 10.4 Client List pa The DHCP table shows current DHCP client information (including IP Address, Host Name and MAC Address) of network clients using the NBG4115’s DHCP servers. om Configure this screen to always assign an IP address to a MAC address (and host name). Click Network > DHCP Server > Client List. Note: You can also view a read-only client list by clicking the DHCP Table (Details...) hyperlink in the Status screen. 122 User’s Guide Chapter 10 DHCP Server The following screen displays. The following table describes the labels in this screen. Table 44 Network > DHCP Server > Client List en tia Figure 64 Network > DHCP Server > Client List DESCRIPTION This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above. Host Name This field displays the computer host name. MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is unique to your computer (six pairs of hexadecimal notation). on fid LABEL A network interface card such as an Ethernet adapter has a hardwired address that is assigned at the factory. This address follows an industry standard that ensures no other adapter has a similar address. Apply Click Apply to save your settings. Click Refresh to reload the DHCP table. om pa Refresh Select this check box in the DHCP Setup section to have the NBG4115 always assign the IP address(es) to the MAC address(es) (and host name(s)). After you click Apply, the MAC address and IP address also display in the Advanced screen (where you can edit them). ny Reserve User’s Guide 123 C om pa ny on fid en tia Chapter 10 DHCP Server 124 User’s Guide CHAPTER 11 tia NAT en 11.1 Overview fid NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network. on The figure below is a simple illustration of a NAT network. You want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses to the devices (A to D) connected to your NBG4115. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the NBG4115, which is 192.168.1.1. ny Figure 65 NAT Example A: 192.168.1.33 pa FTP, Telnet, SNMP Ports 21 to 25 LAN WAN 192.168.1.1 om B: 192.168.1.34 Port 80 IP address assigned by ISP C: 192.168.1.35 This chapter discusses how to configure NAT on the NBG4115. Note: You must create a firewall rule in addition to setting up NAT, to allow traffic from the WAN to be forwarded through the NBG4115. User’s Guide 125 Chapter 11 NAT 11.1.1 What You Can Do in this Chapter tia • Use the Application (Section 11.3 on page 129) screen to change your NBG4115’s port forwarding settings. • Use the General (Section 11.2 on page 128) screen to enable NAT and set a default server. • Use the Advanced (Section 11.5.3 on page 133) screen to change your NBG4115’s trigger port settings. en 11.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. fid Inside/Outside on This denotes where a host is located relative to the NBG4115, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts. Global/Local This denotes the IP address of a host in a packet as the packet traverses a router, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. ny Note: Inside/outside refers to the location of a host, while global/local refers to the IP address of a host used in a packet. pa An inside local address (ILA) is the IP address of an inside host in a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side. The following table summarizes this information. om Table 45 NAT Definitions ITEM DESCRIPTION Inside This refers to the host on the LAN. Outside This refers to the host on the WAN. Local This refers to the packet address (source or destination) as the packet travels on the LAN. Global This refers to the packet address (source or destination) as the packet travels on the WAN. Note: NAT never changes the IP address (either local or global) of an outside host. 126 User’s Guide Chapter 11 NAT What NAT Does tia In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. Note that the IP address (either local or global) of an outside host is never changed. fid en The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. In addition, you can designate servers, for example, a web server and a telnet server, on your local network and make them accessible to the outside world. If you do not define any servers , NAT offers the additional benefit of firewall protection. With no servers defined, your NBG4115 filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). on How NAT Works ny Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN. NAT maps private (local) IP addresses to globally unique ones required for communication with hosts on other networks. It replaces the original IP source address in each packet and then forwards it to the Internet. The NBG4115 keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. om pa Figure 66 How NAT Works User’s Guide 127 Chapter 11 NAT 11.2 General Use this screen to enable NAT and set a default server. Click Network > NAT to open the General screen. fid en tia Figure 67 Network > NAT > General The following table describes the labels in this screen. LABEL DESCRIPTION NAT Setup Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet). Enable Network Address Translation on Table 46 Network > NAT > General Select the check box to enable NAT. ny Default Server Setup Server IP Address In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in the Application screen. pa If you do not assign a Default Server IP address, the NBG4115 discards all packets received for ports that are not specified in the Application screen or remote management. Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om Apply 128 User’s Guide Chapter 11 NAT tia Port forwarding allows you to define the local servers to which the incoming services will be forwarded. To change your NBG4115’s port forwarding settings, click Network > NAT > Application. The screen appears as shown. 11.3 Application Note: If you do not assign a Default Server IP address in the NAT > General screen, the NBG4115 discards all packets received for ports that are not specified in this screen or remote management. en Refer to Appendix F on page 263 for port numbers commonly used for particular services. pa ny on fid Figure 68 Network > NAT > Application The following table describes the labels in this screen. Table 47 NAT Application om LABEL DESCRIPTION Add Application Rule Active Service Name User’s Guide Select the check box to enable this rule and the requested service can be forwarded to the host with a specified internal IP address. Clear the checkbox to disallow forwarding of these ports to an inside server without having to delete the entry. Type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name. The predefined service name and port number(s) will display in the Service Name and Port fields. 129 Chapter 11 NAT Table 47 NAT Application (continued) LABEL DESCRIPTION Local Port Range Enter the start and end port(s) to be forwarded. tia Public Port Range Type the inside IP address of the server that receives packets from the port(s) specified in the Port field. Apply Click Apply to save your changes to the Application Rules Summary table. Reset Click Reset to not save and return your new changes in the Service Name and Port fields to the previous one. en Server IP Address Application Rules Summary This is the number of an individual port forwarding server entry. Active This icon is turned on when the rule is enabled. Name This field displays a name to identify this rule. Local Start/End Port This field displays the port number(s). on fid Public Start/End Port This field displays the inside IP address of the server. Modify Click the Edit icon to display and modify an existing rule setting in the fields under Add Application Rule. Server IP Address om pa ny Click the Remove icon to delete a rule. 130 User’s Guide Chapter 11 NAT 11.4 Advanced on fid en Figure 69 Network > NAT > Advanced tia Note: Only one LAN computer can use a trigger port (range) at a time. To change your NBG4115’s trigger port settings, click Network > NAT > Advanced. The screen appears as shown. The following table describes the labels in this screen. Table 48 Network > NAT > Advanced DESCRIPTION ny LABEL This is the rule index number (read-only). Name Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The NBG4115 forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service. om pa Incoming Type a unique name (up to 15 characters) for identification purposes. All characters are permitted - including spaces. Start Port Type a port number or the starting port number in a range of port numbers. End Port Type a port number or the ending port number in a range of port numbers. Trigger User’s Guide The trigger port is a port (or a range of ports) that causes (or triggers) the NBG4115 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Start Port Type a port number or the starting port number in a range of port numbers. End Port Type a port number or the ending port number in a range of port numbers. 131 Chapter 11 NAT Table 48 Network > NAT > Advanced DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. tia LABEL 11.5 Technical Reference en The following section contains additional technical information about the NBG4115 features described in this chapter. fid 11.5.1 NATPort Forwarding: Services and Port Numbers on A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world. ny Use the Application screen to forward incoming service requests to the server(s) on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. pa In addition to the servers for specified services, NAT supports a default server. A service request that does not have a server explicitly designated for it is forwarded to the default server. If the default is not defined, the service request is simply discarded. om Note: Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. 11.5.2 NAT Port Forwarding Example 132 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP User’s Guide Chapter 11 NAT addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. en tia Figure 70 Multiple Servers Behind NAT Example fid 11.5.3 Trigger Port Forwarding on Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. om pa ny Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The NBG4115 records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the NBG4115's WAN port receives a response with a specific port number and protocol ("incoming" port), the NBG4115 forwards the traffic to the LAN IP address of the computer that sent the request. After that computer’s connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. User’s Guide 133 Chapter 11 NAT 11.5.4 Trigger Port Forwarding Example The following is an example of trigger port forwarding. fid en tia Figure 71 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the NBG4115 to record Jane’s computer IP address. The NBG4115 associates Jane's computer IP address with the "incoming" port range of 6970-7170. The Real Audio server responds using a port number ranging between 6970-7170. The NBG4115 forwards the traffic to Jane’s computer IP address. Only Jane can connect to the Real Audio server until the connection is closed or times out. The NBG4115 times out in three minutes with UDP (User Datagram Protocol), or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). ny on 11.5.5 Two Points To Remember About Trigger Ports Trigger events only happen on data that is going coming from inside the NBG4115 and going to the outside. If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it. om pa 134 User’s Guide CHAPTER 12 12.1 Overview en tia DDNS DDNS services let you use a domain name with a dynamic IP address. fid 12.1.1 What You Can Do in this Chapter on Use the DDNS screen (Section 12.2 on page 136) to enable DDNS and configure the DDNS settings on the NBG4115. 12.1.2 What You Need To Know What is DDNS? The following terms and concepts may help as you read through this chapter. pa ny DDNS, or Dynamic DNS, allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect. Your friends or relatives will always be able to call you even if they don't know your IP address. om DynDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. Note: If you have a private WAN IP address, then you cannot use Dynamic DNS. You must have a public WAN IP address. User’s Guide 135 Chapter 12 DDNS 12.2 General To change your NBG4115’s DDNS, click Network > DDNS. The screen appears as shown. on fid en tia Figure 72 Dynamic DNS ny The following table describes the labels in this screen. Table 49 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Select this check box to use dynamic DNS. Service Provider Select the name of your Dynamic DNS service provider. Dynamic DNS Type Select the type of service that you are registered for from your Dynamic DNS service provider. om pa Enable Dynamic DNS Enter a host names in the field provided. You can specify up to two host names in the field separated by a comma (","). User Name Enter your user name. Password Enter the password assigned to you. Token Enter your client authorization key provided by the server to update DynDNS records. Host Name This field is configurable only when you select WWW.REGFISH.COM in the Service Provider field. Enable Wildcard Option 136 Select the check box to enable DynDNS Wildcard. User’s Guide Chapter 12 DDNS Table 49 Dynamic DNS DESCRIPTION Enable off line option This option is available when CustomDNS is selected in the DDNS Type field. Check with your Dynamic DNS service provider to have traffic redirected to a URL (that you can specify) while you are off line. LABEL tia IP Address Update Policy: Use WAN IP Address Select this option to update the IP address of the host name(s) to the WAN IP address. Select this option to update the IP address of the host name(s) automatically by the DDNS server. It is recommended that you select this option. Use specified IP Address Type the IP address of the host name(s). Use this if you have a static IP address. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om pa ny on fid en Dynamic DNS server auto detect IP Address User’s Guide 137 C om pa ny on fid en tia Chapter 12 DDNS 138 User’s Guide tia fid Firewall (141) en Security om pa ny on Content Filtering (147) 139 P ART III 140 om pa ny on fid en tia CHAPTER 13 tia Firewall en 13.1 Overview fid Use these screens to enable and configure the firewall that protects your NBG4115 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall: on • allows traffic that originates from your LAN computers to go to all of the networks. • blocks traffic that originates on the other networks from going to the LAN. The following figure illustrates the default firewall action. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2). However other traffic initiated from the WAN is blocked (3 and 4). ny Figure 73 Default Firewall Action WAN LAN om pa 13.1.1 What You Can Do in this Chapter • Use the General screen (Section 13.2 on page 144) to enable or disable the NBG4115’s firewall. • Use the Services screen (Section 13.3 on page 144) screen enable service blocking, enter/delete/modify the services you want to block and the date/time you want to block them. User’s Guide 141 Chapter 13 Firewall 13.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. tia What is a Firewall? on Stateful Inspection Firewall fid en Originally, the term “firewall” referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall" is a system or group of systems that enforces an access-control policy between two networks. It may also be defined as a mechanism used to protect a trusted network from a network that is not trusted. Of course, firewalls cannot solve every security problem. A firewall is one of the mechanisms used to establish a network security perimeter in support of a network security policy. It should never be the only mechanism or method employed. For a firewall to guard effectively, you must design and deploy it appropriately. This requires integrating the firewall into a broad information-security policy. In addition, specific policies must be implemented within the firewall itself. ny Stateful inspection firewalls restrict access by screening data packets against defined access rules. They make access control decisions based on IP address and protocol. They also "inspect" the session data to assure the integrity of the connection and to adapt to dynamic protocols. These firewalls generally provide the best speed and transparency; however, they may lack the granular application level access control or caching that some proxies support. Firewalls, of one type or another, have become an integral part of standard security solutions for enterprises. About the NBG4115 Firewall pa The NBG4115’s firewall feature physically separates the LAN and the WAN and acts as a secure gateway for all data passing between the networks. om It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (click the General tab under Firewall and then click the Enable Firewall check box). The NBG4115's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG4115 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. 142 The NBG4115 is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. User’s Guide Chapter 13 Firewall The NBG4115 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet. en Guidelines For Enhancing Security With Your Firewall tia The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world. These computers will have access to Internet services such as e-mail, FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless the remote host is authorized to use a specific service. Change the default password via Web Configurator. Think about access control before you connect to the network in any way, including attaching a modem to the port. Limit who can access your router. Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. For local services that are enabled, protect against misuse. Protect by configuring the services to communicate only with specific peers, and protect by configuring rules to block packets for the services at specific interfaces. Protect against IP spoofing by making sure the firewall is active. Keep the firewall in a secured (locked) room. om pa ny on fid User’s Guide 143 Chapter 13 Firewall 13.2 General Use this screen to enable or disable the NBG4115’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. fid en tia Figure 74 Security > Firewall > General l The following table describes the labels in this screen. Table 50 Security > Firewall > General DESCRIPTION Enable Firewall Select this check box to activate the firewall. The NBG4115 performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated. Apply Click Apply to save the settings. Reset Click Reset to start configuring this screen again. on LABEL ny 13.3 Services pa If an outside user attempts to probe an unsupported port on your NBG4115, an ICMP response packet is automatically returned. This allows the outside user to know the NBG4115 exists. Use this screen to prevent the ICMP response packet from being sent. This keeps outsiders from discovering your NBG4115 when unsupported ports are probed. om You can also use this screen to enable service blocking, enter/delete/modify the services you want to block and the date/time you want to block them. 144 User’s Guide Chapter 13 Firewall Click Security > Firewall > Services. The screen appears as shown next. The following table describes the labels in this screen. Table 51 Security > Firewall > Services en tia Figure 75 Security > Firewall > Services l DESCRIPTION ICMP Internet Control Message Protocol is a message control and errorreporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Respond to Ping on The NBG4115 will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to all incoming LAN and WAN Ping requests. Do not respond to requests for unauthorized services Select this option to prevent hackers from finding the NBG4115 by probing for unused ports. If you select this option, the NBG4115 will not respond to port request(s) for unused ports, thus leaving the unused ports and the NBG4115 unseen. By default this option is not selected and the NBG4115 will reply with an ICMP Port Unreachable packet for a port probe on its unused UDP ports, and a TCP Reset packet for a port probe on its unused TCP ports. ny on fid LABEL pa Note that the probing packets must first traverse the NBG4115's firewall mechanism before reaching this anti-probing mechanism. Therefore if the firewall mechanism blocks a probing packet, the NBG4115 reacts based on the firewall policy, which by default, is to send a TCP reset packet for a blocked TCP packet. You can use the command "sys firewall tcprst rst [on|off]" to change this policy. When the firewall mechanism blocks a UDP packet, it drops the packet without sending a response packet. Click Apply to save the settings. Reset Click Reset to start configuring this screen again. om Apply User’s Guide 145 C om pa ny on fid en tia Chapter 13 Firewall 146 User’s Guide CHAPTER 14 tia Content Filtering en 14.1 Overview fid This chapter provides a brief overview of content filtering using the embedded web GUI. on Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering is the ability to block certain web features or specific URL keywords. 14.1.1 What You Can Do in this Chapter Use the Filter (Section 14.2 on page 148) screen to restrict web features, add keywords for blocking and designate a trusted computer. 14.1.2 What You Need To Know ny The following terms and concepts may help as you read through this chapter. Content Filtering Profiles pa Content filtering allows you to block certain web features, such as cookies, and/or block access to specific web sites. For example, you can configure one policy that blocks John Doe’s access to arts and entertainment web pages. om A content filtering profile conveniently stores your custom settings for the following features. Keyword Blocking URL Checking The NBG4115 checks the URL’s domain name (or IP address) and file path separately when performing keyword blocking. The URL’s domain name or IP address is the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is www.zyxel.com.tw. User’s Guide 147 Chapter 14 Content Filtering The file path is the characters that come after the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. en tia Since the NBG4115 checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the NBG4115 would find “tw” in the domain name (www.zyxel.com.tw). It would also find “news” in the file path (news/pressroom.php) but it would not find “tw/news”. 14.2 Filter om pa ny on Figure 76 Security > Content Filter > Filter fid Use this screen to restrict web features, add keywords for blocking and designate a trusted computer. Click Security > Content Filter to open the Filter screen. 148 User’s Guide Chapter 14 Content Filtering The following table describes the labels in this screen. Table 52 Security > Content Filter > Filter DESCRIPTION Enable URL Keyword Blocking The NBG4115 can block Web sites with URLs that contain certain keywords in the domain name or IP address. For example, if the keyword "bad" was enabled, all sites containing this keyword in the domain name or IP address will be blocked, e.g., URL http:// www.website.com/bad.html would be blocked. Select this check box to enable this feature. Keyword Type a keyword in this field. You may use any character (up to 64 characters). Wildcards are not allowed. You can also enter a numerical IP address. Keyword List This list displays the keywords already added. Add Click Add after you have typed a keyword. en tia LABEL fid Repeat this procedure to add other keywords. Up to 64 keywords are allowed. When you try to access a web page containing a keyword, you will get a message telling you that the content filter is blocking this request. Highlight a keyword in the lower box and click Delete to remove it. The keyword disappears from the text box after you click Apply. Clear All Click this button to remove all of the listed keywords. Apply Click Apply to save your changes. Reset Click Reset to begin configuring this screen afresh on Delete ny 14.3 Technical Reference pa The following section contains additional technical information about the NBG4115 features described in this chapter. 14.3.1 Customizing Keyword Blocking URL Checking om You can use commands to set how much of a website’s URL the content filter is to check for keyword blocking. See the appendices for information on how to access and use the command interpreter. Domain Name or IP Address URL Checking By default, the NBG4115 checks the URL’s domain name or IP address when performing keyword blocking. This means that the NBG4115 checks the characters that come before the first slash in the URL. User’s Guide 149 Chapter 14 Content Filtering For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw. tia Full path URL checking has the NBG4115 check the characters that come before the last slash in the URL. Full Path URL Checking en For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/. fid Use the ip urlfilter customize actionFlags 6 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's full path. File Name URL Checking Filename URL checking has the NBG4115 check all of the characters in the URL. on For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php. om pa ny Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename. 150 User’s Guide fid tia en Management P ART IV Static Route (153) on Bandwidth Management (157) Remote Management (165) om pa ny UPnP (169) 151 152 om pa ny on fid en tia CHAPTER 15 tia Static Route en 15.1 Overview This chapter shows you how to configure static routes for your NBG4115. fid The NBG4115 usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the NBG4115 send data to devices not reachable through the default gateway, use static routes. on For example, the next figure shows a computer (A) connected to the NBG4115’s LAN interface. The NBG4115 routes most traffic from A to the Internet through the NBG4115’s default gateway (R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 77 Example of Static Routing Topology ny LAN R1 WAN R2 om pa R3 15.1.1 What You Can Do in this Chapter • Use the IP Static Route screen (Section 15.2 on page 154) to view existing static route rules. • Use the Static Route Setup screen (Section 15.2.1 on page 155) to add or edit a static route rule. User’s Guide 153 Chapter 15 Static Route 15.2 IP Static Route Use this screen to view existing static route rules. Click Management > Static Route to open the IP Static Route screen. The following screen displays. on fid en tia Figure 78 Management > Static Route > IP Static Route The following table describes the labels in this screen. Table 53 Management > Static Route > IP Static Route DESCRIPTION This is the index number of an individual static route. The first entry is for the default route and not editable. Name This is the name that describes or identifies this route. Active This icon is turned on when this static route is active. ny LABEL Click the Edit icon under Modify and select the Active checkbox in the Static Route Setup screen to enable the static route. Clear the checkbox to disable this static route without having to delete the entry. This parameter specifies the IP network address of the final destination. Routing is always based on network number. pa Destination om Gateway Click the Edit icon to open the static route setup screen. Modify a static route or create a new static route in the Static Route Setup screen. Click the Remove icon to delete a static route. Modify This is the IP address of the gateway. The gateway is an immediate neighbor of your NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the remote nodes. 154 User’s Guide Chapter 15 Static Route 15.2.1 Static Route Setup Screen fid en tia Figure 79 Management > Static Route > IP Static Route: Static Route Setup To edit a static route, click the edit icon under Modify. The following screen displays. Fill in the required information for each static route. The following table describes the labels in this screen. on Table 54 Management > Static Route > IP Static Route: Static Route Setup DESCRIPTION Route Name Enter the name of the IP static route. Leave this field blank to delete this static route. Active This field allows you to activate/deactivate this static route. Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number. If you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID. ny LABEL Enter the IP subnet mask here. Gateway IP Address Enter the IP address of the gateway. The gateway is an immediate neighbor of your NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the Remote Nodes. pa IP Subnet Mask om Metric Metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 15. In practice, 2 or 3 is usually a good number. Click Apply to save your changes back to the NBG4115. Cancel Click Cancel to return to the previous screen and not save your changes. Apply User’s Guide 155 C om pa ny on fid en tia Chapter 15 Static Route 156 User’s Guide CHAPTER 16 tia Bandwidth Management en 16.1 Overview fid This chapter contains information about configuring bandwidth management and editing rules. ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application. on In the figure below, uplink traffic goes from the LAN device (A) to the WAN device (B). Bandwidth management is applied before sending the packets out to the WAN. Downlink traffic comes back from the WAN device (B) to the LAN device (A). Bandwidth management is applied before sending the traffic out to LAN. ny Figure 80 Bandwidth Management pa om You can allocate specific amounts of bandwidth capacity (bandwidth budgets) to individual applications (like VoIP, Web, FTP, and E-mail for example). 16.1.1 What You Can Do in this Chapter • Use the General screen (Section 16.2 on page 158) to enable bandwidth management and assign uplink/downlink limits. • Use the Advanced screen (Section 16.3 on page 159) to configure bandwidth management rules for the pre-defined services and applications. 16.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. User’s Guide 157 Chapter 16 Bandwidth Management tia You can limit an application’s uplink or downlink bandwidth. This limit keeps the traffic from using up too much of the out-going interface’s bandwidth. This way you can make sure there is bandwidth for other applications. Use the following guidelines: Bandwidth Limiting • The sum of the bandwidth allotments that apply to the WAN interface (LAN to WAN, WLAN to WAN) must be less than or equal to the Uplink value that you configure in the Bandwidth Management General screen. fid en • The sum of the bandwidth allotments that apply to the LAN port (WAN to LAN, WAN to WLAN) must be less than or equal to the Downlink value that you configure in the Bandwidth Management General screen. 16.2 General on Use this screen to enable bandwidth management and assign uplink/downlink limits. You can use either one of the following types: • Priority Queue. Enable bandwidth management to give uplink traffic that matches a bandwidth rule priority over traffic that does not match a bandwidth rule. (This type does not apply to downlink traffic.) • Bandwidth Allocation. Enabling bandwidth management also allows you to control the maximum or minimum amounts of bandwidth that can be used by traffic that matches a bandwidth rule. ny Note: You cannot apply both bandwidth management types at the same time. pa Click Management > Bandwidth MGMT to open the bandwidth management General screen. om Figure 81 Management > Bandwidth MGMT > General 158 User’s Guide Chapter 16 Bandwidth Management The following table describes the labels in this screen. Table 55 Management > Bandwidth MGMT > General LABEL DESCRIPTION This field allows you to have NBG4115 apply bandwidth management. tia Bandwidth Management Type Service Management Select Priority Queue or Bandwidth Allocation to enable bandwidth management. en Select Priority Queue to allocate bandwidth based on the pre-defined priority assigned to an application. Refer to Section 16.3 on page 159. Select Bandwidth Allocation allocate specific amounts of bandwidth to specific protocols on an IP or IP range. Refer to Section 16.3 on page 159. fid Select Disable if you do not want to use this feature. Total Bandwidth Setting. The fields below appear when you enable Bandwidth Management. Select the total amount of bandwidth (from 64 Kilobits to 30 Megabits) that you want to dedicate to uplink traffic. on Uplink This is traffic from LAN/WLAN to WAN. Downlink Select the total amount of bandwidth (from 64 Kilobits to 30 Megabits) that you want to dedicate to uplink traffic. This is traffic from WAN to LAN/WLAN. Click Apply to save your customized settings. Reset Click Reset to begin configuring this screen afresh. ny Apply 16.3 Advanced pa Use this screen to configure bandwidth managements rule for the pre-defined services or applications. om Use this screen to configure bandwidth managements rule for specific protocols on an IP or IP range. Note: This screen contains the Priority Queue and Bandwidth Allocation tables. Though both tables are described in this section, you can only apply the rules in one table. Fill out the table of the Bandwidth Management Type you selected in Section 16.2 on page 158 User’s Guide 159 Chapter 16 Bandwidth Management Click Management > Bandwidth MGMT > Advanced to open the bandwidth management Advanced screen. pa ny on fid en tia Figure 82 Management > Bandwidth MGMT > Advanced The following table describes the labels in this screen. om Table 56 Management > Bandwidth MGMT > Advanced LABEL DESCRIPTION Priority Queue 160 Local IP Address Enter the IP address of the computer to which bandwidth management does not apply. Priority Queue Use this table to allocate specific amounts of bandwidth based on the pre-defined service. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. User’s Guide Chapter 16 Bandwidth Management Table 56 Management > Bandwidth MGMT > Advanced (continued) LABEL DESCRIPTION Service This is the name of the service. Select a priority from the drop down list box. Choose High or Low. Specific Port This displays the port/s assigned to the service. tia Priority You can also enter the name (up to 10 keyboard characters) of a service you want to add in the priority queue (for example, Messenger). en You can also specify the port/s to services to which you want to allocate bandwidth. Choose either Both, TCP or UDP in the drop-down menu and enter the port or range of ports in the provided boxes. Note: If you are entering a specific port and not a range of ports, you can either leave the second port field blank or enter the same port number again. Use this table to allocate specific amounts of bandwidth to specific protocols on an IP or IP range. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. LAN IP Range This displays the range of IP addresses for which the bandwidth management rule applies. Direction These read-only labels represent uplink or downlink traffic. on fid Bandwidth Allocation To LAN applies bandwidth management to traffic from WAN to LAN/ WLAN (i.e., downlink). To WAN applies bandwidth management to traffic from LAN/WLAN to WAN (i.e., uplink). ny Both applies bandwidth management to traffic that the NBG4115 forwards to both the LAN and the WAN. This displays the range of ports for which the bandwidth management rule applies. Policy This displays either Max (maximum) or Min (minimum) and refers to the maximum or minimum bandwidth allowed for the rule in kilobits per second in the field below. pa Port Range This is the maximum or minimum bandwidth allowed (refer to the field above) for the rule in bits per second. Modify Click the Edit icon to open the Rule Configuration screen. Modify an existing rule or create a new rule in the Rule Configuration screen. See Section 16.3.3 on page 162 for more information. om Rate User’s Guide Click the Remove icon to delete a rule. Apply Click Apply to save your customized settings. Reset Click Reset to begin configuring this screen afresh. 161 Chapter 16 Bandwidth Management 16.3.1 Pre-Configured Gaming Ports The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in this screen: tia Table 57 Preconfigured Gaming Ports TCP PORTS UDP PORTS XBox 360 3074, 3390, 3932, 5555 1900, 3776, 7777, 88, 3074 Playstation 80, 443, 5223, 5223 3478, 3479, 3658, 4658 Battlenet 40, 6112, 4000, 61136119, 112 MSN Game Zone 6667, 28800-29000 en APPLICATION fid 6667, 28800-29000 16.3.2 Priority Levels on Traffic with a higher priority gets through faster while traffic with a lower priority is dropped if the network is congested. The following describes the priorities that you can apply to traffic that the NBG4115 forwards out through an interface. • High - Typically used for voice traffic or video that is especially sensitive to jitter (jitter is the variations in delay). • Low - This is typically used for all other traffic that are not time-sensitive. ny 16.3.3 User Defined Service Rule Configuration pa If you want to edit a bandwidth management rule for specific protocols on an IP or IP range, click the Edit icon in the Bandwidth Allocation table of the Advanced screen. The following screen displays. om Figure 83 Management > Bandwidth MGMT > Advanced: Allocation Setup 162 The following table describes the labels in this screen. User’s Guide Chapter 16 Bandwidth Management Table 58 Management > Bandwidth MGMT > Advanced: Allocation Setup DESCRIPTION Active Select this check box to turn on this bandwidth management rule. Direction Enter whether you want to apply the rule to uplink or downlink traffic. LABEL tia To LAN applies bandwidth management to traffic from WAN to LAN/ WLAN (i.e., downlink). To WAN applies bandwidth management to traffic from LAN/WLAN to WAN (i.e., uplink). en Select Both applies bandwidth management to traffic that the NBG4115 forwards to both the LAN and the WAN. Specify the range of IP addresses for which the bandwidth management rule applies. Protocol Select the protocol (TCP, UDP, SMTP, HTTP, POP3, FTP or ALL) for which the bandwidth management rule applies. Port Range Enter the range of ports for which the bandwidth management rule applies. Policy Select Max or Min and specify the maximum or minimum bandwidth allowed for the rule in bits per second in the field below. Rate (bps) Select the maximum or minimum bandwidth allowed (refer to the field above) for the rule in bits per second. Apply Click Apply to save your customized settings. Reset Click Reset to begin configuring this screen afresh. on fid LAN IP Range 16.3.4 Predefined Bandwidth Management Services ny The following is a description of the services that you can select and to which you can apply media bandwidth management in the Management > Bandwidth MGMT > Advanced screen. pa Table 59 Media Bandwidth Management Setup: Services DESCRIPTION FTP File Transfer Program enables fast transfer of files, including large files that may not be possible by e-mail. FTP uses port number 21. WWW The World Wide Web (WWW) is an Internet system to distribute graphical, hyper-linked information, based on Hyper Text Transfer Protocol (HTTP) - a client/server protocol for the World Wide Web. The Web is not synonymous with the Internet; rather, it is just one service on the Internet. Other services on the Internet include Internet Relay Chat and Newsgroups. The Web is accessed through use of a browser. WWW uses port 80. om SERVICE Telnet User’s Guide Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. Telnet uses port 23. 163 Chapter 16 Bandwidth Management Table 59 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION E-Mail Electronic mail consists of messages sent through a computer network to specific groups or individuals. Here are some default ports for e-mail: POP3 - port 110 Sending voice signals over the Internet is called Voice over IP or VoIP. Session Initiated Protocol (SIP) is an internationally recognized standard for implementing VoIP. SIP is an application-layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet. en VoIP (SIP) tia SMTP - port 25 SIP is transported primarily over UDP but can also be transported over TCP, using the default port number 5060. BitTorrent is a free P2P (peer-to-peer) sharing tool allowing you to distribute large software and media files using ports 6881 to 6889. BitTorrent requires you to search for a file with a searching engine yourself. It distributes files by corporation and trading, that is, the client downloads the file in small pieces and share the pieces with other peers to get other half of the file. Gaming Online gaming services lets you play multiplayer games on the Internet via broadband technology. One example is Microsoft’s Xbox Live, which uses port 3074. As of this writing, your NBG4115 supports Xbox, Playstation, Battlenet and MSN Game Zone. on fid BitTorrent 16.3.5 Services and Port Numbers om pa ny See Appendix F on page 263 for commonly used services and port numbers. 164 User’s Guide CHAPTER 17 tia Remote Management en 17.1 Overview This chapter provides information on the Remote Management screens. fid Remote management allows you to determine which services/protocols can access which NBG4115 interface (if any) from which computers. You may manage your NBG4115 from a remote location via: LAN only • LAN and WAN on • 17.1.1 What You Can Do in this Chapter Use the WWW screen (Section 17.2 on page 166) to change your NBG4115’s World Wide Web settings. ny 17.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. pa Remote Management Limitations Remote management over LAN or WAN will not work when: You have disabled that service in one of the remote management screens. om The IP address in the Secured Client IP Address field does not match the client IP address. If it does not match, the NBG4115 will disconnect the session immediately. There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. There is a firewall rule that blocks it. User’s Guide 165 Chapter 17 Remote Management Remote Management and NAT When NAT is enabled: • Use the NBG4115’s WAN IP address when configuring from the WAN. tia • Use the NBG4115’s LAN IP address when configuring from the LAN. System Timeout fid en There is a default system management idle timeout of five minutes (three hundred seconds). The NBG4115 automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling. You can change the timeout period in the System screen on 17.2 WWW To change your NBG4115’s World Wide Web settings, click Management > Remote MGMT to display the WWW screen. pa ny Figure 84 Management > Remote MGMT > WWW om The following table describes the labels in this screen. Table 60 Management > Remote MGMT > WWW 166 LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Server Access Select the interface(s) through which a computer may access the NBG4115 using this service. User’s Guide Chapter 17 Remote Management DESCRIPTION Secured Client IP Address A secured client is a “trusted” computer that is allowed to communicate with the NBG4115 using this service. Select All to allow any computer to access the NBG4115 using this service. tia Choose Selected to just allow the computer with the IP address that you specify to access the NBG4115 using this service. LABEL Note: This only applies on WAN IP. Click Apply to save your customized settings and exit this screen. Reset Click Reset to begin configuring this screen afresh. om pa ny on fid en Apply User’s Guide 167 C om pa ny on fid en tia Chapter 17 Remote Management 168 User’s Guide CHAPTER 18 tia UPnP en 18.1 Overview This chapter introduces the UPnP feature in the Web Configurator. on fid Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. 18.1.1 What You Can Do in this Chapter Use the UPnP screen (Section 18.2 on page 170) to enable UPnP on the NBG4115. ny 18.1.2 What You Need to Know The following terms and concepts may help as you read through this chapter. pa How do I know if I'm using UPnP? om UPnP hardware is identified as an icon in the Network Connections folder (Windows XP). Each UPnP compatible device installed on your network will appear as a separate icon. Selecting the icon of a UPnP device will allow you to access the information and properties of that device. NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping User’s Guide 169 Chapter 18 UPnP • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. tia See the NAT chapter for more information on NAT. Cautions with UPnP fid en The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG4115 allows multicast messages on the LAN only. 18.2 General on All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. ny Use this screen to enable UPnP. Click the Management > UPnP to open the following screen. om pa Figure 85 Management > UPnP > General 170 User’s Guide Chapter 18 UPnP The following table describes the labels in this screen. Table 61 Management > UPnP > General DESCRIPTION Enable the Universal Plug and Play (UPnP) Feature Select this check box to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the NBG4115's IP address (although you must still enter the password to access the Web Configurator). Allow users to make port forwarding changes through UPnP Select this check box to allow UPnP-enabled applications to automatically configure the NBG4115 so that they can communicate through the NBG4115, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually configure port forwarding for the UPnP enabled application. Apply Click Apply to save the setting to the NBG4115. Reset Click Reset to begin configuring this screen afresh. on fid en tia LABEL 18.3 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter. 18.3.1 Installing UPnP in Windows XP ny Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. pa om Figure 86 Network Connections User’s Guide 171 Chapter 18 UPnP The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. In the Networking Services window, select the Universal Plug and Play check box. pa ny Figure 88 Networking Services on fid en tia Figure 87 Windows Optional Networking Components Wizard Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. om 18.3.1.1 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG4115. 172 Make sure the computer is connected to a LAN port of the NBG4115. Turn on your computer and the NBG4115. User’s Guide Chapter 18 UPnP Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. tia on fid en Figure 89 Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. om pa ny Figure 90 Internet Connection Properties User’s Guide 173 Chapter 18 UPnP You may edit or delete the port mappings or click Add to manually add port mappings. en tia Figure 91 Internet Connection Properties: Advanced Settings on fid Figure 92 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. pa ny om Figure 93 System Tray Icon 174 User’s Guide Chapter 18 UPnP Double-click on the icon to display your current Internet connection status. fid en tia Figure 94 Internet Connection Status Web Configurator Easy Access on With UPnP, you can access the web-based configurator on the NBG4115 without finding out the IP address of the NBG4115 first. This comes helpful if you do not know the IP address of the NBG4115. Follow the steps below to access the Web Configurator. Click Start and then Control Panel. Double-click Network Connections. om pa ny User’s Guide 175 Chapter 18 UPnP Select My Network Places under Other Places. on fid en tia Figure 95 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG4115 and select Invoke. The Web Configurator login screen displays. ny om pa Figure 96 Network Connections: My Network Places 176 User’s Guide Chapter 18 UPnP Right-click on the icon for your NBG4115 and select Properties. A properties window displays with basic information about the NBG4115. om pa ny on fid en tia Figure 97 Network Connections: My Network Places: Properties: Example User’s Guide 177 C om pa ny on fid en tia Chapter 18 UPnP 178 User’s Guide tia P ART V fid en Maintenance and Troubleshooting on System (181) Logs (187) Sys OP Mode (195) ny Language (199) Tools (189) om pa Troubleshooting (201) 179 180 om pa ny on fid en tia CHAPTER 19 tia System en 19.1 Overview This chapter provides information on the System screens. fid See the chapter about wizard setup for more information on the next few screens. 19.1.1 What You Can Do in this Chapter on • Use the General screen (Section 19.2 on page 181) to enter a name to identify the NBG4115 in the network and set the password. 19.2 General • Use the Time Setting screen (Section 19.3 on page 183) to change your NBG4115’s time and date. ny Use this screen to enter a name to identify the NBG4115 in the network and set the password. Click Maintenance > System. The following screen displays. om pa Figure 98 Maintenance > System > General User’s Guide 181 Chapter 19 System The following table describes the labels in this screen. Table 62 Maintenance > System > General LABEL DESCRIPTION System Name is a unique name to identify the NBG4115 in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name). tia System Name System Setup Domain Name en This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. Enter the domain name (if you know it) here. If you leave this field blank, the ISP may assign a domain name via DHCP. fid The domain name entered by you is given priority over the ISP assigned domain name. Type how many minutes a management session can be left idle before the session times out. The default is 5 minutes. After it times out you have to log in with your password again. Very long idle timeouts may have security risks. A value of "0" means a management session never times out, no matter how long it has been left idle (not recommended). Password Setup Change your NBG4115’s password (recommended) using the fields as shown. Old Password Type the default password or the existing password you use to access the system in this field. New Password Type your new system password (up to 30 characters). Note that as you type a password, the screen displays an asterisk (*) for each character you type. Retype to Confirm Type the new password again in this field. Click Apply to save your changes back to the NBG4115. Click Reset to begin configuring this screen afresh. om pa Reset ny Apply on Administrator Inactivity Timer 182 User’s Guide Chapter 19 System 19.3 Time Setting tia To change your NBG4115’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the NBG4115’s time based on your local time zone. ny on fid en Figure 99 Maintenance > System > Time Setting pa he following table describes the labels in this screen. Table 63 Maintenance > System > Time Setting LABEL DESCRIPTION Current Time and Date om Current Time Current Date This field displays the time of your NBG4115. Each time you reload this page, the NBG4115 synchronizes the time with the time server. This field displays the date of your NBG4115. Each time you reload this page, the NBG4115 synchronizes the date with the time server. Time and Date Setup Manual User’s Guide Select this radio button to enter the time and date manually. If you configure a new time and date, Time Zone and Daylight Saving at the same time, the new time and date you entered has priority and the Time Zone and Daylight Saving settings do not affect it. 183 Chapter 19 System Table 63 Maintenance > System > Time Setting LABEL DESCRIPTION New Time This field displays the last updated time from the time server or the last time configured manually. (hh:mm:ss) New Date (yyyy/mm/dd) tia When you set Time and Date Setup to Manual, enter the new time in this field and then click Apply. This field displays the last updated date from the time server or the last date configured manually. en When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Select this radio button to have the NBG4115 get the time and date from the time server you specified below. Auto Select Auto to have the NBG4115 automatically search for an available time server and synchronize the date and time with the time server after you click Apply. User Defined Time Server Address Select User Defined Time Server Address and enter the IP address or URL (up to 20 extended ASCII characters in length) of your time server. Check with your ISP/network administrator if you are unsure of this information. fid Get from Time Server on Time Zone Setup Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Savings Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Time Zone Select this option if you use Daylight Saving Time. Configure the day and time when Daylight Saving Time starts if you selected Daylight Savings. The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time starts in most parts of the United States on the first Sunday of April. Each time zone in the United States starts using Daylight Saving Time at 2 A.M. local time. So in the United States you would select First, Sunday, April and type 2 in the o'clock field. Daylight Saving Time starts in the European Union on the last Sunday of March. All of the time zones in the European Union start using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March. The time you type in the o'clock field depends on your time zone. In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). om pa ny Start Date 184 User’s Guide Chapter 19 System Table 63 Maintenance > System > Time Setting DESCRIPTION End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Savings. The o'clock field uses the 24 hour format. Here are a couple of examples: LABEL tia Daylight Saving Time ends in the United States on the last Sunday of October. Each time zone in the United States stops using Daylight Saving Time at 2 A.M. local time. So in the United States you would select Last, Sunday, October and type 2 in the o'clock field. fid en Daylight Saving Time ends in the European Union on the last Sunday of October. All of the time zones in the European Union stop using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, October. The time you type in the o'clock field depends on your time zone. In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. om pa ny on Apply User’s Guide 185 C om pa ny on fid en tia Chapter 19 System 186 User’s Guide CHAPTER 20 tia Logs en 20.1 Overview fid This chapter contains information about configuring general log settings and viewing the NBG4115’s logs. Refer to the appendices for example log message explanations. on The Web Configurator allows you to look at all of the NBG4115’s logs in one location. 20.1.1 What You Can Do in this Chapter ny 20.2 View Log Use the View Log screen (Section 20.2 on page 187) to see the logs for the activity on your NBG4115. Use the View Log screen to see the logged messages for the NBG4115. om pa The log wraps around and deletes the old entries after it fills. Click a column heading to sort it. A triangle indicates ascending or descending sort order. User’s Guide 187 Chapter 20 Logs Click Maintenance > Logs to open the View Log screen. fid en tia Figure 100 Maintenance > Logs > View Log on The following table describes the labels in this screen. Table 64 Maintenance > Logs > View Log DESCRIPTION Refresh Click Refresh to renew the log screen. Clear Log Click Clear Log to delete all the logs. This is the index number of the log entry. Time This field displays the time the log was recorded. See the chapter on system maintenance and information to configure the NBG4115’s time and date. ny This field states the reason for the log. om pa Message LABEL 188 User’s Guide CHAPTER 21 tia Tools en 21.1 Overview fid This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the NBG4115. 21.1.1 What You Can Do in this Chapter on • Use the Firmware screen (Section 21.2 on page 190) to upload firmware to your NBG4115. • Use the Configuration screen (Section 21.3 on page 192) to view information related to factory defaults, backup configuration, and restoring configuration. om pa ny • Use the Restart screen (Section 21.4 on page 194) to have the NBG4115 reboot. User’s Guide 189 Chapter 21 Tools tia Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a “*.bin” extension, e.g., “NBG4115.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot. 21.2 Firmware en Click Maintenance > Tools. Follow the instructions in this screen to upload firmware to your NBG4115. on fid Figure 101 Maintenance > Tools > Firmware The following table describes the labels in this screen. Table 65 Maintenance > Tools > Firmware DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse... to find it. ny LABEL Click Choose File to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click Upload to begin the upload process. This process may take up to two minutes. pa Choose File om Note: Do not turn off the NBG4115 while firmware upload is in progress! 190 User’s Guide Chapter 21 Tools After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG4115 again. en tia Figure 102 Upload Warning fid The NBG4115 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. on Figure 103 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. ny If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. om pa Figure 104 Upload Error Message User’s Guide 191 Chapter 21 Tools tia Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. 21.3 Configuration on fid en Figure 105 Maintenance > Tools > Configuration ny 21.3.1 Backup Configuration pa Backup configuration allows you to back up (save) the NBG4115’s current configuration to a file on your computer. Once your NBG4115 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. om Click Backup to save the NBG4115’s current configuration to your computer. 192 User’s Guide Chapter 21 Tools 21.3.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your NBG4115. tia Table 66 Maintenance Restore Configuration DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse... to find it. Choose File Click Choose File to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click Upload to begin the upload process. en LABEL fid Note: Do not turn off the NBG4115 while configuration file upload is in progress After you see a “configuration upload successful” screen, you must then wait one minute before logging into the NBG4115 again. ny on Figure 106 Configuration Restore Successful pa The NBG4115 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. om Figure 107 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG4115 IP address (192.168.1.1). See Appendix D on page 233 for details on how to set up your computer’s IP address. User’s Guide 193 Chapter 21 Tools If the upload was not successful, the following screen will appear. Click Return to go back to the Configuration screen. en tia Figure 108 Configuration Restore Error 21.3.3 Back to Factory Defaults fid Pressing the Reset button in this section clears all user-entered configuration information and returns the NBG4115 to its factory defaults. 21.4 Restart on You can also press the RESET button on the rear panel to reset the factory defaults of your NBG4115. Refer to the chapter about introducing the Web Configurator for more information on the RESET button. ny System restart allows you to reboot the NBG4115 without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the NBG4115 reboot. This does not affect the NBG4115's configuration. om pa Figure 109 Maintenance > Tools > Restart 194 User’s Guide CHAPTER 22 tia Sys OP Mode en 22.1 Overview fid The Sys OP Mode (System Operation Mode) function lets you configure whether your NBG4115 is a router or AP. You can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device. See Section 1.1 on page 21 for more information on which mode to choose. on 22.1.1 What You Can Do in this Chapter Use the General screen (Section 22.2 on page 196) to select how you connect to the Internet. 22.1.2 What You Need to Know Router ny The following terms and concepts may help as you read through this chapter. pa A router connects your local network with another network, such as the Internet. The router has two IP addresses, the LAN IP address and the WAN IP address. Figure 110 LAN and WAN IP Addresses in Router Mode WAN om LAN Internet LAN IP User’s Guide WAN IP 195 Chapter 22 Sys OP Mode AP An AP extends one network and so has just one IP address. All Ethernet ports on the AP have the same IP address. To connect to the Internet, another device, such as a router, is required. tia Figure 111 IP Address in AP Mode LAN en 1 IP on fid Internet 22.2 General Use this screen to select how you connect to the Internet. om pa ny Figure 112 Maintenance > Sys OP Mode > General If you select Router Mode, the following pop-up message window appears. Figure 113 Maintenance > Sys Op Mode > General: Router 196 User’s Guide Chapter 22 Sys OP Mode • In this mode there are both LAN and WAN ports. The LAN Ethernet and WAN Ethernet ports have different IP addresses. • The DHCP server on your device is enabled and allocates IP addresses to other devices on your local network. • The LAN IP address of the device on the local network is set to 192.168.1.1. tia • You can configure the IP address settings on your WAN port. Contact your ISP or system administrator for more information on appropriate settings. fid Figure 114 Maintenance > Sys Op Mode > General: AP en If you select Access Point the following pop-up message window appears. • In AP Mode all Ethernet ports have the same IP address. on • All ports on the rear panel of the device are LAN ports, including the port labeled WAN. There is no WAN port. • The DHCP server on your device is disabled. In AP mode there must be a device with a DHCP server on your network such as a router or gateway which can allocate IP addresses. The IP address of the device on the local network is set to 192.168.1.2. The following table describes the labels in the General screen. LABEL ny Table 67 Maintenance > Sys OP Mode > General DESCRIPTION System Operation Mode Select Router if your device routes traffic between a local network and another network such as the Internet. This mode offers services such as a firewall or content filter. pa Router Select Access Point if your device bridges traffic between clients on the same network. Apply Click Apply to save your settings. om Access Point Reset Click Reset to return your settings to the default (Router) Note: If you select the incorrect System Operation Mode you cannot connect to the Internet. User’s Guide 197 C om pa ny on fid en tia Chapter 22 Sys OP Mode 198 User’s Guide CHAPTER 23 tia Language en 23.1 Overview fid This chapter shows you how to change the Web Configurator’s display language. 23.2 Language on Use this screen to change the language for the Web Configurator display. om pa ny Figure 115 Language Click the language you prefer. The Web Configurator language changes after a while without restarting the NBG4115. User’s Guide 199 C om pa ny on fid en tia Chapter 23 Language 200 User’s Guide CHAPTER 24 tia Troubleshooting en 24.1 Overview • Power, Hardware Connections, and LEDs • NBG4115 Access and Login • Internet Access fid This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. on • Resetting the NBG4115 to Its Factory Defaults • Wireless Router/AP Troubleshooting ny 24.2 Power, Hardware Connections, and LEDs The NBG4115 does not turn on. None of the LEDs turn on. Make sure you are using the power adaptor or cord included with the NBG4115. Make sure the power adaptor or cord is connected to the NBG4115 and plugged in to an appropriate power source. Make sure the power source is turned on. Disconnect and re-connect the power adaptor or cord to the NBG4115. If the problem continues, contact the vendor. om pa One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.5 on page 22. User’s Guide 201 Chapter 24 Troubleshooting Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adaptor to the NBG4115. If the problem continues, contact the vendor. tia en I don’t know the IP address of my NBG4115. fid 24.3 NBG4115 Access and Login The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the NBG4115 by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig. The IP address of the Default Gateway might be the IP address of the NBG4115 (it depends on the network), so enter this IP address in your Internet browser.Set your device to Router Mode, login (see the Quick Start Guide for instructions) and go to the Device Information table in the Status screen. Your NBG4115’s IP address is available in the Device Information table. ny on • If the DHCP setting under LAN information is None, your device has a fixed IP address. pa • If the DHCP setting under LAN information is Client, then your device receives an IP address from a DHCP server on the network. If your NBG4115 is a DHCP client, you can find your IP address from the DHCP server. This information is only available from the DHCP server which allocates IP addresses on your network. Find this information directly from the DHCP server or contact your system administrator for more information. om Reset your NBG4115 to change all settings back to their default. This means your current settings are lost. See Section 24.5 on page 206 in the Troubleshooting for information on resetting your NBG4115. 202 User’s Guide Chapter 24 Troubleshooting I forgot the password. The default password is 1234. If this does not work, you have to reset the device to its factory defaults. See Section 24.5 on page 206. en tia I cannot see or access the Login screen in the Web Configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. fid on • If you changed the IP address (Section 7.3 on page 102), use the new IP address. • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I don’t know the IP address of my NBG4115. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix B on page 215. Make sure your computer is in the same subnet as the NBG4115. (If you know that there are routers between your computer and the NBG4115, skip this step.) ny pa • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address. See Section 7.3 on page 102. • If there is no DHCP server on your network, make sure your computer’s IP address is in the same subnet as the NBG4115. See Section 7.3 on page 102. Reset the device to its factory defaults, and try to access the NBG4115 with the default IP address. See Section 7.3 on page 102. om If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the NBG4115 using another service, such as Telnet. If you can access the NBG4115, check the remote management settings and firewall rules to find out why the NBG4115 does not respond to HTTP. User’s Guide 203 Chapter 24 Troubleshooting • If your computer is connected to the WAN port or is connected wirelessly, use a computer that is connected to a LAN/ETHERNET port. tia I can see the Login screen, but I cannot log in to the NBG4115. Make sure you have entered the password correctly. The default password is 1234. This field is case-sensitive, so make sure [Caps Lock] is not on. You cannot log in to the Web Configurator while someone is using Telnet to access the NBG4115. Log out of the NBG4115 in the other session, or ask the person who is logged in to log out. This can happen when you fail to log out properly from your last session. Try logging in again after 5 minutes. Disconnect and re-connect the power adaptor or cord to the NBG4115. If this does not work, you have to reset the device to its factory defaults. See Section 24.5 on page 206. on fid en ny 24.4 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure you entered your ISP account information correctly in the wizard. These fields are case-sensitive, so make sure [Caps Lock] is not on. om pa If you are trying to access the Internet wirelessly, make sure the wireless settings in the wireless client are the same as the settings in the AP. • Go to Network > Wireless LAN > General > WDS and check if the NBG4115 is set to bridge mode. Select Disable and try to connect to the Internet again. 204 Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. Go to Maintenance > Sys OP Mode > General. Check your System Operation Mode setting. User’s Guide Chapter 24 Troubleshooting • Select Router if your device routes traffic between a local network and another network such as the Internet. • Select Access Point if your device bridges traffic between clients on the same network. If the problem continues, contact your ISP. tia en I cannot access the Internet anymore. I had access to the Internet (with the NBG4115), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page 22. Reboot the NBG4115. If the problem continues, contact your ISP. on fid The Internet connection is slow or intermittent. There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.5 on page 22. If the NBG4115 is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. Check the signal strength. If the signal strength is low, try moving the NBG4115 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on). pa ny Reboot the NBG4115. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. om Advanced Suggestion • Check the settings for QoS. If it is disabled, you might consider activating it. User’s Guide 205 Chapter 24 Troubleshooting 24.5 Resetting the NBG4115 to Its Factory Defaults en You will lose all of your changes when you push the RESET button. tia If you reset the NBG4115, you lose all of the changes you have made. The NBG4115 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again. fid To reset the NBG4115, Make sure the power LED is on. Press the RESET button for longer than 1 second to restart/reboot the NBG4115. Press the RESET button for longer than five seconds to set the NBG4115 back to its factory-default configurations. on If the NBG4115 restarts automatically, wait for the NBG4115 to finish restarting, and log in to the Web Configurator. The password is “1234”. ny If the NBG4115 does not restart automatically, disconnect and reconnect the NBG4115’s power. Then, follow the directions above again. pa 24.6 Wireless Router/AP Troubleshooting om I cannot access the NBG4115 or ping any computer from the WLAN (wireless AP or router). 206 Make sure the wireless LAN is enabled on the NBG4115 Make sure the wireless adapter on the wireless station is working properly. Make sure the wireless adapter installed on your computer is IEEE 802.11 compatible and supports the same wireless standard as the NBG4115. Make sure your computer (with a wireless adapter installed) is within the transmission range of the NBG4115. User’s Guide Chapter 24 Troubleshooting Check that both the NBG4115 and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG4115. Make sure you allow the NBG4115 to be remotely accessed through the WLAN interface. Check your remote management settings. tia • See the chapter on Wireless LAN in the User’s Guide for more information. en to select Router Mode. fid I set up URL keyword blocking, but I can still access a website that should be blocked. on Make sure that you select the Enable URL Keyword Blocking check box in the Content Filtering screen. Make sure that the keywords that you type are listed in the Keyword List. If a keyword that is listed in the Keyword List is not blocked when it is found in a URL, customize the keyword blocking using commands. See the Customizing Keyword Blocking URL Checking section in the Content Filter chapter. ny I can access the Internet, but I cannot open my network folders. pa In the Network > LAN > Advanced screen, make sure Allow between LAN and WAN is checked. This is not checked by default to keep the LAN secure. om If you still cannot access a network folder, make sure your account has access rights to the folder you are trying to open. I can access the Web Configurator after I switched to AP mode. When you change from router mode to AP mode, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”. Refer to Appendix D on page 233 for instructions on how to change your computer’s IP address. User’s Guide 207 C om pa ny on fid en tia Chapter 24 Troubleshooting 208 User’s Guide tia P ART VI fid en Appendices and Index Pop-up Windows, JavaScripts and Java Permissions (215) IP Addresses and Subnetting (223) on Product Specifications (211) ny Setting up Your Computer’s IP Address (233) Wireless LANs (251) Services (263) pa Legal Information (267) om Index (275) 209 210 om pa ny on fid en tia APPENDIX tia Product Specifications Table 68 Hardware Features en The following tables summarize the NBG4115’s hardware and firmware features. 140 mm (W) x 110 mm (D) x 30 mm (H) Weight 190 g (without a 3G card installed) SDRAM 32 MB Flash Memory 4 MB Power Specification Input: 120~240 AC, 50~60 Hz Ethernet ports on Output: 12 V DC 1.25A fid Dimensions Auto-negotiating: 10 Mbps, 100 Mbps in either half-duplex or fullduplex mode. Auto-crossover: Use either crossover or straight-through Ethernet cables. LEDs pa Reset Button PWR, LAN1-2, 3G, Internet, WAN, WLAN/WPS The reset button is built into the rear panel. Use this button to restore the NBG4115 to its factory default settings. Press for 1 second to restart the device. Press for 5 seconds to restore to factory default settings. WPS button Press the WPS on two WPS enabled devices within 120 seconds for a security-enabled wireless connection. Antenna The NBG4115 is equipped with a 2dBi (2.4GHz) detachable antenna to provide clear radio transmission and reception on the wireless network. USB Port The NBG4115 has one built-in USB 2.0 type A for 3G connectivity. When a 3G card is plugged in and operational this port functions as a WAN port. Operation Environment Temperature: 0º C ~ 40º C / 32ºF ~ 104ºF Storage Environment Temperature: -30º C ~ 70º C / -22ºF ~ 158ºF om A combination of switch and router makes your NBG4115 a costeffective and viable network solution. You can add up to four computers to the NBG4115 without the cost of a hub when connecting to the Internet through the WAN port. You can add up to five computers to the NBG4115 when you connect to the Internet in AP mode. Add more than four computers to your LAN by using a hub. ny 4-5 Port Switch Humidity: 20% ~ 90% Humidity: 20% ~ 95% User’s Guide 211 Appendix A Product Specifications FEATURE DESCRIPTION Default LAN IP Address 192.168.1.1 (router) Table 69 Firmware Features Default LAN Subnet Mask 255.255.255.0 (24 bits) Default Password 1234 tia 192.168.1.2. (AP) 192.168.1.33 to 192.168.1.64 Wireless Interface Wireless LAN Default Wireless SSID ZyXEL Device Management Use the Web Configurator to easily configure the rich range of features on the NBG4115. Wireless Functionality Allows IEEE 802.11b and/or IEEE 802.11g wireless clients to connect to the NBG4115 wirelessly. Enable wireless security ( WPA(2)-PSK) and/or MAC filtering to protect your wireless network. on fid en DHCP Pool Note: The NBG4115 may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as microwave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. Download new firmware (when available) from the ZyXEL web site and use the Web Configurator to put it on the NBG4115. Firmware Upgrade Note: Only upload firmware for your specific model! Make a copy of the NBG4115’s configuration and put it back on the NBG4115 later if you decide you want to revert back to an earlier configuration. Network Address Translation (NAT) Each computer on your network must have its own unique IP address. Use NAT to convert a single public IP address to multiple private IP addresses for the computers on your network. pa ny Configuration Backup & Restoration om Firewall Content Filter 212 You can configure firewall on the NBG4115 for secure Internet access. When the firewall is on, by default, all incoming traffic from the Internet to your network is blocked unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files for example. The NBG4115 blocks or allows access to web sites that you specify and blocks access to web sites with URLs that contain keywords that you specify. You can define time periods and days during which content filtering is enabled. You can also include or exclude particular computers on your network from content filtering. You can also subscribe to category-based content filtering that allows your NBG4115 to check web sites against an external database. User’s Guide Appendix A Product Specifications Table 69 Firmware Features DESCRIPTION Bandwidth Management You can efficiently manage traffic on your network by reserving bandwidth and giving priority to certain types of traffic and/or to particular computers. Remote Management This allows you to decide whether a service (HTTP or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the NBG4115. Wireless LAN Scheduler You can schedule the times the Wireless LAN is enabled/ disabled. Time and Date Get the current time and date from an external server when you turn on your NBG4115. You can also set the time manually. These dates and times are then used in logs. Port Forwarding If you have a server (mail or web server for example) on your network, then use this feature to let people access it from the Internet. DHCP (Dynamic Host Configuration Protocol) Use this feature to have the NBG4115 assign IP addresses, an IP default gateway and DNS servers to computers on your network. Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can use a fixed URL, www.zyxel.com for example, with a dynamic IP address. You must register for this service with a Dynamic DNS service provider. IP Multicast IP Multicast is used to send traffic to a specific group of computers. The NBG4115 supports versions 1 and 2 of IGMP (Internet Group Management Protocol) used to join multicast groups (see RFC 2236). tia en fid on Use logs for troubleshooting. You can view logs in the Web Configurator. PPPoE mimics a dial-up Internet access connection. ny Logging PPPoE FEATURE Point-to-Point Tunneling Protocol (PPTP) enables secure transfer of data through a Virtual Private Network (VPN). The NBG4115 supports one PPTP connection at a time. Universal Plug and Play (UPnP) The NBG4115 can communicate with other UPnP enabled devices in a network. om pa PPTP Encapsulation User’s Guide 213 C om pa ny on fid en tia Appendix A Product Specifications 214 User’s Guide APPENDIX In order to use the Web Configurator you need to allow: • JavaScripts (enabled by default). • Java permissions (enabled by default). fid • Web browser pop-up windows from your device. en tia Pop-up Windows, JavaScripts and Java Permissions on Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device. ny Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device’s IP address. pa Disable pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. om Figure 116 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. User’s Guide 215 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Click Apply to save this setting. ny on fid en tia Figure 117 Internet Options: Privacy Enable pop-up Blockers with Exceptions pa Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. om 216 User’s Guide Appendix B Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. om pa ny on fid en tia Figure 118 Internet Options: Privacy User’s Guide 217 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. on fid en tia Figure 119 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts ny om pa If pages of the Web Configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 218 User’s Guide Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. on fid en tia Figure 120 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). om pa ny User’s Guide 219 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. on fid en tia Figure 121 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. om pa ny 220 User’s Guide Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. on fid en tia Figure 122 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.6 Linearized : No Encryption : Standard V2.3 (128-bit) User Access : Print, Copy, Extract, Print high-res XMP Toolkit : 3.1-701 Create Date : 2009:09:01 18:22:01+08:00 Creator Tool : pdfFactory Pro www.ahasoft.com.tw/FinePrint Modify Date : 2009:09:04 17:44:44+08:00 Metadata Date : 2009:09:04 17:44:44+08:00 Format : application/pdf Creator : sam Title : ~3890293.pdf Producer : pdfFactory Pro 3.10 (Windows XP Professional Chinese) Document ID : uuid:917bed06-c807-40d8-a2e6-9a805004dcae Instance ID : uuid:e49d448d-2e46-48f4-b139-31a3e8abcff4 Has XFA : No Page Count : 279 Author : samEXIF Metadata provided by EXIF.tools