ZyXEL Communications NBG6503 Simultaneous Dual-Band Wireless AC750 Home Router User Manual Book
ZyXEL Communications Corporation Simultaneous Dual-Band Wireless AC750 Home Router Book
user manual
N BG6 5 0 3 Sim ult aneous Dual- band Wireless AC750 Hom e Rout er Version 1.00 Edit ion 1, 04/ 2013 Quick Start Guide Use r ’s Gu ide D e fa u lt D e t a ils LAN I P Address - Rout er Mode ht t p: / / 192.168.1.1 ( Default m ode) www.zyxel.com - AP Mode ht t p: / / 192.168.1.2 User Nam e adm in Password 1234 SSI D ZyXEL Pre- shared Key 00000000 Copyright © 2013 ZyXEL Com m unicat ions Corporat ion IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Related Documentation • Quick St art Guide The Quick St art Guide shows how t o connect t he NBG6503 and access t he Web Configurat or wizards. I t also cont ains a connect ion diagram and package cont ent s list . Not e: I t is recom m ended you use t he Web Configurat or t o configure t he NBG6503. NBG6503 User’s Guide Contents Overview Contents Overview User’s Guide .......................................................................................................................................13 Getting to Know Your Router ..................................................................................................................15 Connection Wizard ..................................................................................................................................21 Introducing the Web Configurator ...........................................................................................................31 Monitor ....................................................................................................................................................37 Router Modes ..........................................................................................................................................43 Easy Mode ..............................................................................................................................................45 Router Mode ...........................................................................................................................................57 Access Point Mode .................................................................................................................................65 Tutorials ..................................................................................................................................................73 Technical Reference ..........................................................................................................................81 Wireless LAN ..........................................................................................................................................83 WAN ........................................................................................................................................................99 LAN .......................................................................................................................................................109 DHCP Server ........................................................................................................................................ 113 Network Address Translation (NAT) ...................................................................................................... 117 Dynamic DNS ........................................................................................................................................123 Static Route ...........................................................................................................................................125 Firewall ..................................................................................................................................................129 Content Filter .........................................................................................................................................133 Bandwidth Management .......................................................................................................................137 Remote Management ............................................................................................................................145 Universal Plug-and-Play (UPnP) ...........................................................................................................147 Maintenance ..........................................................................................................................................155 Troubleshooting ....................................................................................................................................165 NBG6503 User’s Guide Contents Overview NBG6503 User’s Guide Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................5 Part I: User’s Guide ......................................................................................... 13 Chapter 1 Getting to Know Your Router.............................................................................................................15 1.1 Overview ...........................................................................................................................................15 1.2 Applications .......................................................................................................................................15 1.3 Ways to Manage the Router .............................................................................................................15 1.4 Good Habits for Managing the Router ..............................................................................................16 1.5 LEDs .................................................................................................................................................17 1.6 The WPS Button ...............................................................................................................................18 1.7 Wall Mounting ...................................................................................................................................18 Chapter 2 Connection Wizard .............................................................................................................................21 2.1 Overview ...........................................................................................................................................21 2.2 Accessing the Wizard ........................................................................................................................21 2.3 Connect to Internet ............................................................................................................................22 2.3.1 Connection Type: DHCP .........................................................................................................23 2.3.2 Connection Type: Static IP ......................................................................................................23 2.3.3 Connection Type: PPPoE ........................................................................................................24 2.3.4 Connection Type: PPTP ..........................................................................................................25 2.4 Router Password ...............................................................................................................................27 2.5 Wireless Security ..............................................................................................................................27 2.5.1 Wireless Security: No Security ................................................................................................27 2.5.2 Wireless Security: WPA-PSK/WPA2-PSK ...............................................................................28 Chapter 3 Introducing the Web Configurator ....................................................................................................31 3.1 Overview ...........................................................................................................................................31 3.2 Accessing the Web Configurator .......................................................................................................31 3.2.1 Login Screen ...........................................................................................................................31 3.2.2 Password Screen ....................................................................................................................32 3.2.3 Home Screen ...........................................................................................................................33 3.3 Resetting the Router .........................................................................................................................35 NBG6503 User’s Guide Table of Contents 3.3.1 Procedure to Use the Reset Button .........................................................................................35 Chapter 4 Monitor.................................................................................................................................................37 4.1 Overview ...........................................................................................................................................37 4.2 What You Can Do .............................................................................................................................37 4.3 The Log Screen .................................................................................................................................37 4.3.1 View Log ..................................................................................................................................37 4.4 BW MGMT Monitor ...........................................................................................................................39 4.5 DHCP Table ...................................................................................................................................39 4.6 Packet Statistics ...............................................................................................................................40 4.7 WLAN 2.4G Station Status 4.8 WLAN 5G Station Status ............................................................................................................41 ...............................................................................................................41 Chapter 5 Router Modes......................................................................................................................................43 5.1 Overview ...........................................................................................................................................43 5.1.1 Web Configurator Modes .........................................................................................................43 5.1.2 Device Modes ..........................................................................................................................43 Chapter 6 Easy Mode ...........................................................................................................................................45 6.1 Overview ...........................................................................................................................................45 6.2 What You Can Do .............................................................................................................................47 6.3 What You Need to Know ...................................................................................................................47 6.4 Navigation Panel ...............................................................................................................................47 6.5 Network Map .....................................................................................................................................47 6.6 Control Panel ....................................................................................................................................48 6.6.1 Game Engine ...........................................................................................................................49 6.6.2 Power Saving ..........................................................................................................................50 6.6.3 Content Filter ...........................................................................................................................51 6.6.4 Bandwidth MGMT ....................................................................................................................51 6.6.5 Firewall ....................................................................................................................................52 6.6.6 Wireless Security .....................................................................................................................52 6.6.7 WPS ........................................................................................................................................54 6.7 Status Screen in Easy Mode .............................................................................................................55 Chapter 7 Router Mode........................................................................................................................................57 7.1 Overview ...........................................................................................................................................57 7.2 What You Can Do .............................................................................................................................57 7.3 Status Screen ....................................................................................................................................58 7.3.1 Navigation Panel .....................................................................................................................61 NBG6503 User’s Guide Table of Contents Chapter 8 Access Point Mode.............................................................................................................................65 8.1 Overview ...........................................................................................................................................65 8.2 What You Can Do .............................................................................................................................65 8.3 What You Need to Know ...................................................................................................................65 8.3.1 Setting your Router to AP Mode ..............................................................................................66 8.3.2 Accessing the Web Configurator in Access Point Mode ..........................................................66 8.3.3 Configuring your WLAN, Bandwidth Management and Maintenance Settings ........................67 8.4 AP Mode Status Screen ....................................................................................................................68 8.5 LAN Screen .......................................................................................................................................70 Chapter 9 Tutorials ...............................................................................................................................................73 9.1 Overview ...........................................................................................................................................73 9.2 Connecting to the Internet from an Access Point ..............................................................................73 9.3 Configuring Wireless Security Using WPS ........................................................................................73 9.3.1 Push Button Configuration (PBC) ............................................................................................74 9.3.2 PIN Configuration ....................................................................................................................75 9.4 Enabling and Configuring Wireless Security (No WPS) ....................................................................77 9.4.1 Configure Your Notebook ........................................................................................................78 Part II: Technical Reference............................................................................ 81 Chapter 10 Wireless LAN.......................................................................................................................................83 10.1 Overview .........................................................................................................................................83 10.2 What You Can Do ...........................................................................................................................83 10.3 What You Should Know ..................................................................................................................84 10.3.1 Wireless Security Overview ...................................................................................................84 10.4 General Wireless LAN 2.4G/5G Screen .........................................................................................86 10.4.1 No Security ............................................................................................................................87 10.4.2 WEP Encryption ....................................................................................................................88 10.4.3 WPA-PSK/WPA2-PSK ...........................................................................................................90 10.5 MAC Filter .......................................................................................................................................90 10.6 Wireless LAN Advanced Screen .....................................................................................................91 10.7 Quality of Service (QoS) Screen .....................................................................................................93 10.8 WPS Screen ....................................................................................................................................94 10.9 WPS Station Screen ........................................................................................................................95 10.10 Scheduling Screen ........................................................................................................................96 10.11 WDS Screen ..................................................................................................................................97 NBG6503 User’s Guide Table of Contents Chapter 11 WAN .....................................................................................................................................................99 11.1 Overview .........................................................................................................................................99 11.2 What You Can Do ............................................................................................................................99 11.3 What You Need To Know .................................................................................................................99 11.3.1 Configuring Your Internet Connection ..................................................................................100 11.3.2 Multicast ...............................................................................................................................101 11.4 Internet Connection .......................................................................................................................102 11.4.1 Ethernet Encapsulation ........................................................................................................102 11.4.2 PPPoE Encapsulation ..........................................................................................................103 11.4.3 PPTP Encapsulation ............................................................................................................105 11.5 Advanced WAN Screen .................................................................................................................108 Chapter 12 LAN ....................................................................................................................................................109 12.1 Overview .......................................................................................................................................109 12.2 What You Can Do .........................................................................................................................109 12.3 What You Need To Know .............................................................................................................. 110 12.3.1 IP Pool Setup ....................................................................................................................... 110 12.3.2 LAN TCP/IP ......................................................................................................................... 110 12.3.3 IP Alias ................................................................................................................................ 110 12.4 LAN IP Screen .............................................................................................................................. 111 12.5 IP Alias Screen .............................................................................................................................. 111 Chapter 13 DHCP Server ..................................................................................................................................... 113 13.1 Overview ....................................................................................................................................... 113 13.2 What You Can Do ......................................................................................................................... 113 13.3 General Screen ............................................................................................................................. 113 13.4 Advanced Screen ....................................................................................................................... 114 Chapter 14 Network Address Translation (NAT)................................................................................................ 117 14.1 Overview .................................................................................................................................... 117 14.2 What You Can Do ......................................................................................................................... 117 14.3 General NAT Screen ..................................................................................................................... 118 14.4 NAT Application Screen .............................................................................................................. 118 14.5 NAT Advanced Screen ..................................................................................................................120 14.5.1 Trigger Port Forwarding Example ........................................................................................122 14.5.2 Two Points To Remember About Trigger Ports ...................................................................122 Chapter 15 Dynamic DNS ....................................................................................................................................123 NBG6503 User’s Guide Table of Contents 15.1 Overview ......................................................................................................................................123 15.2 What You Can Do .........................................................................................................................123 15.3 What You Need To Know ..............................................................................................................123 15.4 Dynamic DNS Screen .................................................................................................................123 Chapter 16 Static Route .......................................................................................................................................125 16.1 Overview ....................................................................................................................................125 16.2 What You Can Do .........................................................................................................................125 16.3 IP Static Route Screen .................................................................................................................126 Chapter 17 Firewall ..............................................................................................................................................129 17.1 Overview .....................................................................................................................................129 17.2 What You Can Do .........................................................................................................................129 17.3 What You Need To Know ..............................................................................................................130 17.4 General Firewall Screen .............................................................................................................130 17.5 Services Screen ...........................................................................................................................131 Chapter 18 Content Filter ....................................................................................................................................133 18.1 Overview .......................................................................................................................................133 18.2 What You Can Do .........................................................................................................................133 18.3 What You Need To Know ..............................................................................................................133 18.3.1 Content Filtering Profiles .....................................................................................................133 18.4 Content Filter Screen ....................................................................................................................134 Chapter 19 Bandwidth Management...................................................................................................................137 19.1 Overview ......................................................................................................................................137 19.2 What You Can Do .........................................................................................................................137 19.3 What You Need To Know ..............................................................................................................138 19.4 General Screen ............................................................................................................................138 19.5 Advanced Screen .........................................................................................................................138 19.5.1 Rule Configuration: Application Rule Configuration .........................................................141 19.5.2 Rule Configuration: User Defined Service Rule Configuration .........................................142 19.6 Monitor Screen ..............................................................................................................................143 19.6.1 Predefined Bandwidth Management Services .....................................................................143 Chapter 20 Remote Management........................................................................................................................145 20.1 Overview .......................................................................................................................................145 20.2 What You Can Do .........................................................................................................................145 NBG6503 User’s Guide Table of Contents 20.3 What You Need to Know ...............................................................................................................145 20.3.1 Remote Management and NAT ...........................................................................................145 20.3.2 System Timeout ..................................................................................................................146 20.4 WWW Screen .............................................................................................................................146 Chapter 21 Universal Plug-and-Play (UPnP)......................................................................................................147 21.1 Overview ......................................................................................................................................147 21.2 What You Can Do .........................................................................................................................147 21.3 What You Need to Know ...............................................................................................................147 21.3.1 NAT Traversal ......................................................................................................................147 21.3.2 Cautions with UPnP .............................................................................................................148 21.4 UPnP Screen ...............................................................................................................................148 21.5 Technical Refereance ....................................................................................................................148 21.5.1 Using UPnP in Windows XP Example .................................................................................148 21.5.2 Web Configurator Easy Access ...........................................................................................151 Chapter 22 Maintenance ......................................................................................................................................155 22.1 Overview .......................................................................................................................................155 22.2 What You Can Do .........................................................................................................................155 22.3 General Screen .............................................................................................................................155 22.4 Password Screen ..........................................................................................................................156 22.5 Time Setting Screen ......................................................................................................................157 22.6 Firmware Upgrade Screen ............................................................................................................158 22.7 Configuration Backup/Restore Screen ..........................................................................................160 22.8 Restart Screen ..............................................................................................................................161 22.9 System Operation Mode Overview ...............................................................................................161 22.10 Sys OP Mode Screen ..................................................................................................................163 Chapter 23 Troubleshooting................................................................................................................................165 23.1 Power, Hardware Connections, and LEDs ....................................................................................165 23.2 Router Access and Login ..............................................................................................................166 23.3 Internet Access .............................................................................................................................167 23.4 Resetting the Router to Its Factory Defaults .................................................................................169 23.5 Wireless Router/AP Troubleshooting ............................................................................................169 Appendix A IP Addresses and Subnetting.......................................................................................171 Appendix B Setting Up Your Computer’s IP Address ......................................................................181 Appendix C Wireless LANs..............................................................................................................209 Appendix D Common Services........................................................................................................223 10 NBG6503 User’s Guide Table of Contents Appendix E Legal Information..........................................................................................................227 Index ..................................................................................................................................................235 NBG6503 User’s Guide 11 Table of Contents 12 NBG6503 User’s Guide P ART I User’s Guide 13 14 C HAPT ER Getting to Know Your Router 1.1 Overview This chapt er int roduces t he m ain feat ures and applicat ions of t he Rout er. The Rout er upgrades t he speed of your exist ing wireless net work, providing fast er net work access t o m obile users. Making use of I EEE 802.11AC t echnology, it not only upgrades your net work t o t he next level but also elim inat es dead spot s, while offering backward com pat ibilit y wit h ot her I EEE 802.11b/ g/ n com pat ible devices. A range of services such as a firewall and cont ent filt ering are also available for secure I nt ernet com put ing. You can use m edia bandwidt h m anagem ent t o efficient ly m anage t raffic on your net work. Bandwidt h m anagem ent feat ures allow you t o priorit ize t im e- sensit ive or highly im port ant applicat ions such as Voice over t he I nt ernet ( VoI P) . 1.2 Applications Your can creat e t he following net works using t he Rout er: • W ir e d. You can connect net work devices via t he Et hernet port s of t he Rout er so t hat t hey can com m unicat e wit h each ot her and access t he I nt ernet . • W ir e le ss. Wireless client s can connect t o t he Rout er t o access net work resources. • W AN . Connect t o a broadband m odem / rout er for I nt ernet access. 1.3 Ways to Manage the Router Use any of t he following m et hods t o m anage t he Rout er. • Web Configurat or. This is recom m ended for everyday m anagem ent of t he Rout er using a ( support ed) web browser. • Wireless swit ch. You can use t he built- in swit ch of t he Rout er t o t urn t he wireless funct ion on and off wit hout opening t he Web Configurat or. • WPS ( Wi- Fi Prot ect ed Set up) but t on. You can use t he WPS but t on or t he WPS sect ion of t he Web Configurat or t o set up a wireless net work wit h your Rout er. NBG6503 User’s Guide 15 Chapter 1 Getting to Know Your Router 1.4 Good Habits for Managing the Router Do t he following t hings regularly t o m ake t he Rout er m ore secure and t o m anage t he Rout er m ore effect ively. • Change t he password. Use a password t hat ’s not easy t o guess and t hat consist s of different t ypes of charact ers, such as num bers and let t ers. • Writ e down t he password and put it in a safe place. • Back up t he configurat ion ( and m ake sure you know how t o rest ore it ) . Rest oring an earlier working configurat ion m ay be useful if t he device becom es unst able or even crashes. I f you forget your password, you will have t o reset t he Rout er t o it s fact ory default set t ings. I f you backed up an earlier configurat ion file, you would not have t o t ot ally re- configure t he Rout er. You could sim ply rest ore your last configurat ion. 16 NBG6503 User’s Guide Chapter 1 Getting to Know Your Router 1.5 LEDs Figure 1 Front Panel Power WAN LAN 1-4 WLAN 5GHz WLAN WPS 2.4GHz The following t able describes t he LEDs and t he WPS but t on. Table 1 Front Panel LEDs and WPS But t on LED COLOR STATUS POWER Green On The Rout er is receiving power and funct ioning properly. Off The Rout er is not receiving power. On The Rout er has a successful 10/ 100MB WAN connect ion. Blinking The Rout er is sending/ receiving dat a t hrough t he WAN. Off The WAN connect ion is not ready, or has failed. On The Rout er has a successful 10/ 100MB Et hernet connect ion. WAN LAN 1- 4 WLAN 5 GHz NBG6503 User’s Guide Green Green Green DESCRIPTION Blinking The Rout er is sending/ receiving dat a t hrough t he LAN. Off The LAN is not connect ed. On The Rout er is ready, but is not sending/ receiving dat a t hrough t he wireless LAN 5 GHz band. Blinking The Rout er is sending/ receiving dat a t hrough t he wireless LAN 5 GHz band. Off The wireless LAN 5 GHz band is not ready or has failed. 17 Chapter 1 Getting to Know Your Router Table 1 Front Panel LEDs and WPS But t on ( cont inued) LED COLOR STATUS DESCRIPTION WLAN 2.4 GHz Green On The Rout er is ready, but is not sending/ receiving dat a t hrough t he wireless LAN 2.4 GHz band. Blinking The Rout er is sending/ receiving dat a t hrough t he wireless LAN 2.4 GHz band. Off The wireless LAN 2.4 GHz band is not ready or has failed. On WPS is enabled. Blinking The Rout er is negot iat ing a WPS connect ion wit h a wireless client . Off The wireless LAN is not ready or has failed. WPS Green 1.6 The WPS Button Your Rout er support s WiFi Prot ect ed Set up ( WPS) , which is an easy way t o set up a secure wireless net work. WPS is an indust ry st andard specificat ion, defined by t he WiFi Alliance. WPS allows you t o quickly set up a wireless net work wit h st rong securit y, wit hout having t o configure securit y set t ings m anually. Each WPS connect ion works bet ween t wo devices. Bot h devices m ust support WPS ( check each device’s docum ent at ion t o m ake sure) . Depending on t he devices you have, you can eit her press a but t on ( on t he device it self, or in it s configurat ion ut ilit y) or ent er a PI N ( a unique Personal I dent ificat ion Num ber t hat allows one device t o aut hent icat e t he ot her) in each of t he t wo devices. When WPS is act ivat ed on a device, it has t wo m inut es t o find anot her device t hat also has WPS act ivat ed. Then, t he t wo devices connect and set up a secure net work by t hem selves. For m ore inform at ion on using WPS, see Sect ion 9.3 on page 73. 1.7 Wall Mounting You m ay need screw anchors if m ount ing on a concret e or brick wall. Table 2 Wall Mounting Information Dist ance bet ween holes 11 cm M4 Screws Two Screw anchors ( opt ional) Two Select a posit ion free of obst ruct ions on a wall st rong enough t o hold t he weight of t he device. Mark t w o holes on t he wall at t he appropriat e dist ance apart for t he screws. Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws. 18 NBG6503 User’s Guide Chapter 1 Getting to Know Your Router I f using screw anchors, drill t wo holes for t he screw anchors int o t he wall. Push t he anchors int o t he full dept h of t he holes, t hen insert t he screws int o t he anchors. Do not insert t he screws all t he way in - leave a sm all gap of about 0.5 cm . I f not using scr ew anchors, use a screwdriver t o insert t he screws int o t he wall. Do not insert t he screws all t he way in - leave a gap of about 0.5 cm . Make sure t he screws are fast ened w ell enough t o hold t he weight of t he Rout er wit h t he connect ion cables. Align t he holes on t he back of t he Rout er wit h t he scr ews on t he wall. Hang t he Rout er on t he scr ews. Figure 2 Wall Mounting Example NBG6503 User’s Guide 19 C HAPT ER Connection Wizard 2.1 Overview This chapt er provides inform at ion on t he wizard set up screens in t he Web Configurat or. The Web Configurat or ’s wizard set up helps you configure your device t o access t he I nt ernet . Refer t o your I SP for your I nt ernet account inform at ion. Leave a field blank if you don’t have t hat inform at ion. 2.2 Accessing the Wizard Launch your web browser and t ype " ht t p: / / 192.168.1.1" as t he websit e address. Type " 1234" ( default ) as t he password and click Login . Not e: The Wizard appears when t he Rout er is accessed for t he first t im e or when you reset t he Rout er t o it s default fact or y set t ings. The Wizard screen opens. Choose your La ngua ge and click Con ne ct t o I nt e r n e t . Figure 3 Welcom e NBG6503 User’s Guide 21 Chapter 2 Connection Wizard 2.3 Connect to Internet The Rout er offers four I nt ernet connect ion t ypes. They are St a t ic I P, D H CP, PPPoE, or PPTP. The wizard at t em pt s t o det ect which WAN connect ion t ype you are using. Figure 4 Det ect ing your I nt ernet Connect ion Type I f t he wizard does not det ect a connect ion t ype, you m ust select one from t he drop- down list box. Check wit h your I SP t o m ake sure you use t he correct t ype. Not e: I f you get an err or m essage, check your hardware connect ions. Make sur e your I nt ernet connect ion is up and running. The following screen depends on your I nt ernet connect ion t ype. Ent er t he det ails provided by your I nt ernet Service Provider ( I SP) in t he fields ( if any) . Figure 5 I nt ernet Connect ion Type Your Rout er det ect s t he following I nt ernet Connect ion t ype. Table 3 I nt ernet Connect ion Type 22 CONNECTION TYPE DESCRIPTION St at ic I P Select t he St a t ic I P if an adm inist rat or assigns t he I P address of your com put er. DHCP Select t he D H CP ( Dynam ic Host Configurat ion Prot ocol) opt ion when t he WAN port is used as a regular Et hernet . PPPoE Select t he PPPoE ( Point- t o- Point Prot ocol over Et hernet ) opt ion for a dial- up connect ion. PPTP Select t he PPTP ( Point- t o- Point Tunneling Prot ocol) opt ion for a dial- up connect ion, and your I SP gave you an I P address and/ or subnet m ask. NBG6503 User’s Guide Chapter 2 Connection Wizard 2.3.1 Connection Type: DHCP Choose D H CP as t he I nt e r ne t Conne ct ion Type when t he WAN port is used as a regular Et hernet . Click N e x t . Figure 6 I nt ernet Connect ion Type: DHCP Not e: I f you get an err or screen aft er clicking N e x t , you m ight have select ed t he w rong I nt ernet Connect ion t ype. Click Ba ck , m ake sure your I nt ernet connect ion is working and select t he right Connect ion Type. Cont act your I SP if you are not sure of your I nt er net Connect ion t ype. 2.3.2 Connection Type: Static IP Choose St a t ic I P as t he I n t e r n e t Con n e ct ion Type if your I SP assigned an I P address for your I nt ernet connect ion. Click N e x t . Figure 7 I nt ernet Connect ion Type: St at ic I P The following t able describes t he labels in t his screen. Table 4 I nt ernet Connect ion Type: St at ic I P LABEL DESCRIPTION I nt ernet Connect ion Type Select t he St a t ic I P opt ion. I P Address Ent er t he I P address provided by your I SP. NBG6503 User’s Guide 23 Chapter 2 Connection Wizard Table 4 I nt ernet Connect ion Type: St at ic I P ( cont inued) LABEL DESCRIPTION Subnet Mask Ent er t he I P subnet m ask in t his field. Default Gat eway Ent er t he gat eway I P address in t his field. Prim ary DNS DNS ( Dom ain Nam e Syst em ) is for m apping a dom ain nam e t o it s corresponding I P address and vice versa. The DNS server is ext rem ely im port ant because wit hout it , you m ust know t he I P address of a com put er before you can access it . The Rout er uses a syst em DNS server ( in t he order you specify here) t o resolve dom ain nam es for DDNS and t he t im e server. Ent er t he prim ary DNS server's I P address in t he fields provided. Secondary DNS Ent er t he secondary DNS server's I P address in t he fields provided. Exit Click t his t o close t he wizard screen wit hout saving. Back Click t his t o ret urn t o t he previous screen. Next Click t his t o cont inue. 2.3.3 Connection Type: PPPoE Point- t o- Point Prot ocol over Et hernet ( PPPoE) funct ions as a dial- up connect ion. PPPoE is an I ETF ( I nt ernet Engineering Task Force) st andard specifying how a host personal com put er int eract s wit h a broadband m odem ( for exam ple DSL, cable, wireless, et c.) t o achieve access t o high- speed dat a net works. For t he service provider, PPPoE offers an access and aut hent icat ion m et hod t hat works wit h exist ing access cont rol syst em s ( for inst ance, RADI US) . One of t he benefit s of PPPoE is t he abilit y t o let end users access one of m ult iple net work services, a funct ion known as dynam ic service select ion. This enables t he service provider t o easily creat e and offer new I P services for specific users. Operat ionally, PPPoE saves significant effort for bot h t he subscriber and t he I SP/ carrier, as it requires no specific configurat ion of t he broadband m odem at t he subscriber's sit e. By im plem ent ing PPPoE direct ly on t he Rout er ( rat her t han individual com put ers) , t he com put ers on t he LAN do not need PPPoE soft ware inst alled, since t he Rout er does t hat part of t he t ask. Furt herm ore, wit h NAT, all of t he LAN's com put ers will have I nt ernet access. Figure 8 I nt ernet Connect ion Type: PPPoE 24 NBG6503 User’s Guide Chapter 2 Connection Wizard The following t able describes t he labels in t his screen. Table 5 I nt ernet Connect ion Type: PPPoE LABEL DESCRIPTION I nt ernet Connect ion Type Select t he PPPoE opt ion for a dial- up connect ion. Dynam ic I P Select t his radio but t on if your I SP did not assign you a fixed I P address. St at ic I P Select t his radio but t on, provided by your I SP t o give t he Rout er a fixed, unique I P address. User Nam e Type t he user nam e given t o you by your I SP. Password Type t he password associat ed wit h t he user nam e above. Exit Click t his t o close t he wizard screen wit hout saving. Back Click t his t o ret urn t o t he previous screen. Next Click t his t o cont inue. 2.3.4 Connection Type: PPTP Point- t o- Point Tunneling Prot ocol ( PPTP) is a net work prot ocol t hat enables t ransfers of dat a from a rem ot e client t o a privat e server, creat ing a Virt ual Privat e Net work ( VPN) using TCP/ I P- based net works. PPTP support s on- dem and, m ult i- prot ocol, and virt ual privat e net working over public net works, such as t he I nt ernet . Refer t o t he appendix for m ore inform at ion on PPTP. The Rout er support s one PPTP server connect ion at any given t im e. Figure 9 I nt ernet Connect ion Type: PPTP The following t able describes t he fields in t his screen Table 6 I nt ernet Connect ion Type: PPTP LABEL DESCRIPTION I nt ernet Connect ion Type Select PPTP from t he drop- down list box. To configure a PPTP client , you m ust configure t he Use r N a m e and Pa ssw or d fields for a PPP connect ion and t he PPTP param et ers for a PPTP connect ion. Dynam ic I P Select t his radio but t on if your I SP did not assign you a fixed I P address. NBG6503 User’s Guide 25 Chapter 2 Connection Wizard Table 6 I nt ernet Connect ion Type: PPTP ( cont inued) LABEL DESCRIPTION St at ic I P Select t his radio but t on, provided by your I SP t o give t he Rout er a fixed, unique I P address. PPTP Address Type t he ( st at ic) I P address assigned t o you by your I SP. PPTP Subnet Mask Type t he subnet m ask assigned t o you by your I SP ( if given) . PPTP Gat eway I P Address Type t he gat eway I P address of t he PPTP server. PPTP Server I P Address Type t he server I P address of t he PPTP server. User Nam e Type t he user nam e given t o you by your I SP. Password Type t he password associat ed wit h t he User Nam e above. Exit Click t his t o close t he wizard screen wit hout saving. Back Click t his t o ret urn t o t he previous screen. Next Click t his t o cont inue. The Rout er connect s t o t he I nt ernet . Figure 10 Connect ing t o t he I nt ernet Not e: I f t he Wizard successfully connect s t o t he I nt ernet , it proceeds t o t he next st ep. I f you get an error m essage, go back t o t he previous scr een and m ake sure you have ent ered t he cor rect inform at ion pr ovided by your I SP. 26 NBG6503 User’s Guide Chapter 2 Connection Wizard 2.4 Router Password Change t he login password in t he following screen. Ent er t he new password and ret ype it t o confirm . Click N e x t t o proceed wit h t he W ir e le ss Se cur it y screen. Figure 11 Rout er Password 2.5 Wireless Security Configure Wireless Set t ings. Configure t he wireless net work set t ings on your Rout er in t he following screen. The fields t hat show up depend on t he kind of securit y you select . 2.5.1 Wireless Security: No Security Choose N o Se cu r it y in t he Wireless Securit y screen t o let wireless devices wit hin range access your wireless net work. Figure 12 Wireless Securit y: No Securit y NBG6503 User’s Guide 27 Chapter 2 Connection Wizard The following t able describes t he labels in t his screen. Table 7 Wireless Securit y: No Securit y LABEL DESCRIPTION Wireless Radio Select a wireless radio from t he drop- down list box. Choose 2 .4 G H z t o set t he securit y set t ing for t he wireless 2.4G band. Choose 5 G H z t o set t he securit y set t ing for t he wireless 5G band. Wireless Net work Nam e ( SSI D) Ent er a descript ive nam e ( up t o 32 print able 7- bit ASCI I charact ers) for t he wireless LAN. Securit y m ode Select a Se cu r it y level from t he drop- down list box. I f you change t his field on t he Rout er, m ake sure all wireless st at ions use t he sam e SSI D in order t o access t he net work. Choose N on e t o have no wireless LAN securit y configured. I f you do not enable any wireless securit y on your Rout er, your net work is accessible t o any wireless net working device t hat is wit hin range. Exit Click t his t o close t he wizard screen wit hout saving. Back Click t his t o ret urn t o t he previous screen. Next Click t his t o cont inue. 2.5.2 Wireless Security: WPA-PSK/WPA2-PSK Choose W PA- PSK or W PA2 - PSK securit y in t he Wireless Securit y screen t o set up a password for your wireless net work. Figure 13 Wireless Securit y: WPA- PSK/ WPA2- PSK The following t able describes t he labels in t his screen. Table 8 Wireless Securit y: WPA- PSK/ WPA2- PSK LABEL DESCRIPTION Wireless Radio Select a wireless radio from t he drop- down list box. Choose 2 .4 G H z t o set t he securit y set t ing for t he wireless 2.4G band. Choose 5 G H z t o set t he securit y set t ing for t he wireless 5G band. Wireless Net work Nam e ( SSI D) 28 Ent er a descript ive nam e ( up t o 32 print able 7- bit ASCI I charact ers) for t he wireless LAN. I f you change t his field on t he Rout er, m ake sure all wireless st at ions use t he sam e SSI D in order t o access t he net work. NBG6503 User’s Guide Chapter 2 Connection Wizard Table 8 Wireless Securit y: WPA- PSK/ WPA2- PSK ( cont inued) LABEL DESCRIPTION Securit y m ode Select a Se cu r it y level from t he drop- down list box. Choose W PA- PSK or W PA2 - PSK securit y t o configure a Pre- Shared Key. Choose t his opt ion only if your wireless client s support WPA- PSK or WPA2- PSK respect ively. Wireless password Type from 8 t o 63 case- sensit ive ASCI I charact ers. You can set up t he m ost secure wireless connect ion by configuring WPA in t he wireless LAN screens. Verify Password Ret ype t he password t o confirm . Exit Click t his t o close t he wizard screen wit hout saving. Back Click t his t o ret urn t o t he previous screen. Next Click t his t o cont inue. Congrat ulat ions! Open a web browser, such as I nt ernet Explorer, t o visit your favorit e websit e. Not e: I f you cannot access t he I nt ernet w hen your com put er is connect ed t o one of t he Rout er’s LAN port s, check your connect ions. Then t urn t he Rout er off, wait for a few seconds t hen t urn it back on. I f t hat does not work, log in t o t he web configurat or again and check you have t yped all inform at ion cor rect ly. See t he User ’s Guide for m ore suggest ions. Figure 14 Congrat ulat ions You can also click GO t o open t he Ea sy M ode Web Configurat or of your Rout er. You have successfully set up your Rout er t o operat e on your net work and access t he I nt ernet . You are now ready t o connect wirelessly t o your Rout er and access t he I nt ernet . NBG6503 User’s Guide 29 C HAPT ER Introducing the Web Configurator 3.1 Overview This chapt er describes how t o access t he Rout er Web Configurat or and provides an overview of it s screens. The Web Configurat or is an HTML- based m anagem ent int erface t hat allows easy set up and m anagem ent of t he Rout er via I nt ernet browser. Use I nt ernet Explorer 6.0 and lat er or Net scape Navigat or 7.0 and lat er versions or Safari 2.0 or lat er versions. The recom m ended screen resolut ion is 1024 by 768 pixels. I n order t o use t he Web Configurat or you need t o allow: • Web browser pop- up windows from your device. Web pop- up blocking is enabled by default in Windows XP SP ( Service Pack) 2. • JavaScript ( enabled by default ) . • Java perm issions ( enabled by default ) . Refer t o t he Troubleshoot ing chapt er ( Chapt er 23 on page 165) t o see how t o m ake sure t hese funct ions are allowed in I nt ernet Explorer. 3.2 Accessing the Web Configurator Make sure your Rout er hardware is properly connect ed and prepare your com put er or com put er net work t o connect t o t he Rout er ( refer t o t he Quick St art Guide) . Launch your web browser. Type " ht t p: / / 192.168.1.1" as t he websit e address. Your com put er m ust be in t he sam e subnet in order t o access t his websit e address. 3.2.1 Login Screen Not e: I f t his is t he first t im e you are accessing t he Web Configurat or, you m ay be redirect ed t o t he Wizard. Refer t o Chapt er 2 on page 21 for t he Connect ion Wizard screens. NBG6503 User’s Guide 31 Chapter 3 Introducing the Web Configurator The Web Configurat or init ially displays t he following login screen. Figure 15 Login screen The following t able describes t he labels in t his screen. Table 9 Login screen LABEL DESCRIPTION Password Type " 1234" ( default ) as t he password. Language Select t he language you want t o use t o configure t he Web Configurat or. Click Login. This shows t he current weat her, eit her in celsius or fahrenheit , of t he cit y you specify in Sect ion 3.2.3.1 on page 34. This shows t he t im e ( hh: m m : ss) and dat e ( yyyy: m m : dd) of t he t im ezone you select in Sect ion 3.2.3.2 on page 34 or Sect ion 22.5 on page 157. The t im e is in 24- hour form at , for exam ple 15: 00 is 3: 00 PM. 3.2.2 Password Screen You should see a screen asking you t o change your password ( highly recom m ended) as shown next . Figure 16 Change Password Screen 32 NBG6503 User’s Guide Chapter 3 Introducing the Web Configurator The following t able describes t he labels in t his screen. Table 10 Change Password Screen LABEL DESCRIPTION New Password Type a new password. Ret ype t o Confirm Ret ype t he password for confirm at ion. Apply Click Apply t o save your changes back t o t he Rout er. I gnore Click I gn or e if you do not want t o change t he password t his t im e. Not e: The m anagem ent session aut om at ically t im es out when t he t im e period set in t he Adm in ist r a t or I n a ct ivit y Tim e r field expir es ( default five m inut es; go t o Chapt er 22 on page 155 t o change t his) . Sim ply log back int o t he Rout er if t his happens. 3.2.3 Home Screen I f you have previously logged int o t he Web Configurat or but did not click Logout , you m ay be redirect ed t o t he Hom e screen. You can also open t his screen by clicking H om e ( m ode screens. or ) in t he Easy Mode or Expert The Hom e screen displays as follows. Figure 17 Hom e Screen The following t able describes t he labels in t his screen. Table 11 Hom e Screen LABEL DESCRIPTION Go Click t his t o open t he Easy m ode Web Configurat or. Language Select a language t o go t o t he Easy m ode Web Configurat or in t hat language and click Login . NBG6503 User’s Guide 33 Chapter 3 Introducing the Web Configurator Table 11 Hom e Screen ( cont inued) LABEL DESCRIPTION ( This is j ust an exam ple) . This shows t he current weat her, eit her in celsius or fahrenheit , of t he cit y you specify in Sect ion 3.2.3.1 on page 34. ( This is j ust an exam ple) . This shows t he t im e ( hh: m m : ss) and dat e ( yyyy: m m : dd) of t he t im ezone you select in Sect ion 3.2.3.2 on page 34 or Sect ion 22.5 on page 157. 3.2.3.1 Weather Edit You can change t he t em perat ure unit and select t he locat ion for which you want t o know t he weat her. Click t he icon t o change t he Weat her display. Figure 18 Change Weat her The following t able describes t he labels in t his screen. Table 12 Change Weat her LABEL DESCRIPTION Choose which t em perat ure unit you want t he Rout er t o display. C or o F Change Locat ion Select t he locat ion for which you want t o know t he weat her. I f t he cit y you want is not list ed, choose one t hat is closest t o it . Finish Click t his t o apply t he set t ings and refresh t he dat e and t im e display. 3.2.3.2 Time/Date Edit One t im ezone can cover m ore t han one count ry. You can choose a part icular count ry in which t he Rout er is locat ed and have t he Rout er display and use t he current t im e and dat e for it s logs. Click t he icon t o change t he Weat her display. Figure 19 Change Password Screen The following t able describes t he labels in t his screen. Table 13 Change Password Screen LABEL DESCRIPTION Change t im e zone Select t he specific count ry whose current t im e and dat e you want t he Rout er t o display. Finish Click t his t o apply t he set t ings and refresh t he weat her display. Not e: You can also edit t he t im ezone in Sect ion 22.5 on page 157. 34 NBG6503 User’s Guide Chapter 3 Introducing the Web Configurator 3.3 Resetting the Router I f you forget your password or I P address, or you cannot access t he Web Configurat or, you will need t o use t he RESET but t on at t he back of t he Rout er t o reload t he fact ory- default configurat ion file. This m eans t hat you will lose all configurat ions t hat you had previously saved, t he password will be reset t o “ 1234” and t he I P address will be reset t o “ 192.168.1.1”. 3.3.1 Procedure to Use the Reset Button Make sure t he power LED is on. Press t he RESET but t on for longer t han 1 second t o rest art / reboot t he Rout er. Press t he RESET but t on for longer t han five seconds t o set t he Rout er back t o it s fact ory- default configurat ions. NBG6503 User’s Guide 35 C HAPT ER Monitor 4.1 Overview This chapt er discusses read- only inform at ion relat ed t o t he device st at e of t he Rout er. Not e: To access t he Monit or screens, you can also click t he links in t he Sum m ary t able of t he St at us screen t o view t he bandwidt h consum ed, packet s sent / received as well as t he st at us of client s connect ed t o t he Rout er. 4.2 What You Can Do • Use t he Log ( Sect ion 4.3 on page 37) screen t o see t he logs for t he act ivit y on t he Rout er. • Use t he BW M GM T M onit or screen ( Sect ion 4.4 on page 39) t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. • Use t he D H CP Ta ble screen ( Sect ion 4.5 on page 39) t o view inform at ion relat ed t o your DHCP st at us. • Use t he Pa ck e t St a t ist ics screen ( Sect ion 4.6 on page 40) t o view port st at us, packet specific st at ist ics, t he " syst em up t im e" and so on. • Use t he W LAN 2 .4 G St a t ion St a t us screen ( Sect ion 4.7 on page 41) t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er t hrough t he wireless 2.4G net work. • Use t he W LAN 5 G St a t ion St a t u s screen ( Sect ion 4.8 on page 41) t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er t hrough t he wireless 5G net work. 4.3 The Log Screen The Web Configurat or allows you t o look at all of t he Rout er’s logs in one locat ion. 4.3.1 View Log Use t he Vie w Log screen t o see t he logged m essages for t he Rout er. The log wraps around and delet es t he old ent ries aft er it fills. Select what logs you want t o see from t he D ispla y drop list . The NBG6503 User’s Guide 37 Chapter 4 Monitor log choices depend on your set t ings in t he Log Se t t ings screen. Click Re fr e sh t o renew t he log screen. Click Cle a r t o delet e all t he logs. Figure 20 View Log You can configure which logs t o display in t he Vie w Log screen. Go t o t he Log Se t t in gs screen and select t he logs you wish t o display. Click Apply t o save your set t ings. Click Re fr e sh t o st art t he screen afresh. Figure 21 Log Set t ings 38 NBG6503 User’s Guide Chapter 4 Monitor 4.4 BW MGMT Monitor The Bandwidt h Managem ent ( BW MGMT) Monit or allows you t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. The bandwidt h is m easured in kilobit s per second ( kbps) . The m onit or shows what kinds of applicat ions are running in t he net work, t he m axim um kbps t hat each applicat ion can use, as well as t he percent age of bandwidt h it is using. Figure 22 Sum m ary: BW MGMT Monit or 4.5 DHCP Table DHCP ( Dynam ic Host Configurat ion Prot ocol, RFC 2131 and RFC 2132) allows individual client s t o obt ain TCP/ I P configurat ion at st art - up from a server. You can configure t he Rout er’s LAN as a DHCP server or disable it . When configured as a server, t he Rout er provides t he TCP/ I P configurat ion for t he client s. I f DHCP service is disabled, you m ust have anot her DHCP server on t hat net work, or else t he com put er m ust be m anually configured. Click t he D H CP Ta ble ( D e t a ils...) hyperlink in t he St a t u s screen. Read- only inform at ion here relat es t o your DHCP st at us. The DHCP t able shows current DHCP client inform at ion ( including I P Addr e ss, H ost N a m e and M AC Addr e ss) of all net work client s using t he Rout er’s DHCP server. Figure 23 Sum m ary: DHCP Table NBG6503 User’s Guide 39 Chapter 4 Monitor The following t able describes t he labels in t his screen. Table 14 Sum m ary: DHCP Table LABEL DESCRIPTION This is t he index num ber of t he host com put er. MAC Address This field shows t he MAC address of t he com put er wit h t he nam e in t he H ost N a m e field. Every Et hernet device has a unique MAC ( Media Access Cont rol) address which uniquely ident ifies a device. The MAC address is assigned at t he fact ory and consist s of six pairs of hexadecim al charact ers, for exam ple, 00: A0: C5: 00: 00: 02. I P Address This field displays t he I P address relat ive t o t he # field list ed above. Expires in This field displays t he t im e when t he I P address and MAC address associat ion ends. Refresh Click Re fr e sh t o renew t he screen. 4.6 Packet Statistics Click t he Pa ck e t St a t ist ics ( D e t a ils...) hyperlink in t he St a t u s screen. Read- only inform at ion here includes port st at us, packet specific st at ist ics and t he " syst em up t im e" . The Poll I nt e r va l( s) field is configurable and is used for refreshing t he screen. Figure 24 Sum m ary: Packet St at ist ics The following t able describes t he labels in t his screen. Table 15 Sum m ary: Packet St at ist ics LABEL DESCRIPTION Port This is t he Rout er’s port t ype. St at us For t he LAN port s, t his displays t he port speed and duplex set t ing or D ow n when t he line is disconnect ed. For t he WAN port , it displays t he port speed and duplex set t ing if you’re using Et hernet encapsulat ion and I dle ( line ( ppp) idle) , D ia l ( st art ing t o t rigger a call) and D r op ( dropping a call) if you're using PPPoE or PPTP encapsulat ion. This field displays D ow n when t he line is disconnect ed. For WLAN 2.4G/ 5G, it displays t he m axim um t ransm ission rat e when t he WLAN 2.4G/ 5G is enabled and D ow n when t he WLAN 2.4G/ 5G is disabled. 40 TxPkt s This is t he num ber of t ransm it t ed packet s on t his port . RxPkt s This is t he num ber of received packet s on t his port . NBG6503 User’s Guide Chapter 4 Monitor Table 15 Sum m ary: Packet St at ist ics ( cont inued) LABEL DESCRIPTION Collisions This is t he num ber of collisions on t his port . Tx B/ s This displays t he t ransm ission speed in byt es per second on t his port . Rx B/ s This displays t he recept ion speed in byt es per second on t his port . Up Tim e This is t he t ot al t im e t he Rout er has been for each session. Syst em Up Tim e This is t he t ot al t im e t he Rout er has been on. Poll I nt erval( s) Ent er t he t im e int erval in seconds for refreshing st at ist ics in t his field. Set I nt erval Click t his but t on t o apply t he new poll int erval you ent ered in t he Poll I nt e r va l( s) field. St op Click St op t o st op refreshing st at ist ics. 4.7 WLAN 2.4G Station Status Click t he W LAN 2 .4 G St a t ion St a t us ( D e t a ils...) hyperlink in t he St a t us screen. View t he wireless st at ions t hat are current ly associat ed t o t he Rout er in t he Associa t ion List . Associat ion m eans t hat a wireless client ( for exam ple, your net work or com put er wit h a wireless net work card) has connect ed successfully t o t he AP ( or wireless rout er) using t he sam e SSI D, channel and securit y set t ings. Figure 25 Sum m ary: Wireless Associat ion List The following t able describes t he labels in t his screen. Table 16 Sum m ary: Wireless Associat ion List LABEL DESCRIPTION This is t he index num ber of an associat ed wireless st at ion. MAC Address This field displays t he MAC address of an associat ed wireless st at ion. Associat ion Tim e This field displays t he t im e a wireless st at ion first associat ed wit h t he Rout er’s WLAN net work. Refresh Click Re fr e sh t o reload t he list . 4.8 WLAN 5G Station Status Click t he W LAN 5 G St a t ion St a t u s ( D e t a ils...) hyperlink in t he St a t us screen. View t he wireless st at ions t hat are current ly associat ed t o t he Rout er in t he Associa t ion List . Associat ion m eans t hat a wireless client ( for exam ple, your net work or com put er wit h a wireless net work card) has NBG6503 User’s Guide 41 Chapter 4 Monitor connect ed successfully t o t he AP ( or wireless rout er) using t he sam e SSI D, channel and securit y set t ings. Figure 26 Sum m ary: Wireless Associat ion List The following t able describes t he labels in t his screen. Table 17 Sum m ary: Wireless Associat ion List 42 LABEL DESCRIPTION This is t he index num ber of an associat ed wireless st at ion. MAC Address This field displays t he MAC address of an associat ed wireless st at ion. Associat ion Tim e This field displays t he t im e a wireless st at ion first associat ed wit h t he Rout er’s WLAN net work. Refresh Click Re fr e sh t o reload t he list . NBG6503 User’s Guide C HAPT ER Router Modes 5.1 Overview This chapt er int roduces t he different m odes available on your Rout er. First , t he t erm “ m ode” refers t o t wo t hings in t his User ’s Guide. • W e b Configu r a t or m ode . This refers t o t he Web Configurat or int erface you want t o use for edit ing Rout er feat ures. • D e vice m ode . This is t he operat ing m ode of your Rout er, or sim ply how t he Rout er is being used in t he net work. 5.1.1 Web Configurator Modes This refers t o t he configurat ion int erface of t he Web Configurat or, which has t wo m odes: • Ea sy. The Web Configurat or shows t his m ode by default . Refer t o Chapt er 6 on page 45 for m ore inform at ion on t he screens in t his m ode. This int erface m ay be sufficient for users who j ust want t o use t he device. • Ex pe r t . Advanced users can change t o t his m ode t o cust om ize all t he funct ions of t he Rout er. Click Ex pe r t M ode aft er logging int o t he Web Configurat or. The User ’s Guide Chapt er 3 on page 31 t hrough Chapt er 22 on page 155 discusses t he screens in t his m ode. 5.1.2 Device Modes This refers t o t he operat ing m ode of t he Rout er, which can act as a: • Rout e r. This is t he default device m ode of t he Rout er. Use t his m ode t o connect t he local net work t o anot her net work, like t he I nt ernet . Go t o Sect ion 7.3 on page 58 t o view t he St a t us screen in t his m ode. • Acce ss Point . Use t his m ode if you want t o ext end your net work by allowing net work devices t o connect t o t he Rout er wirelessly. Go t o Sect ion 8.4 on page 68 view t he St a t us screen in t his m ode. For m ore inform at ion on t hese m odes and t o change t he m ode of your Rout er, refer t o Sect ion 22.10 on page 163. The m enu for changing device m odes is available in Ex pe r t m ode only. Not e: Choose your Device Mode carefully t o avoid having t o change it lat er. When changing t o anot her m ode, t he I P address of t he Rout er changes. The running applicat ions and services of t he net work devices connect ed t o t he Rout er can be int errupt ed. NBG6503 User’s Guide 43 Chapter 5 Router Modes 44 NBG6503 User’s Guide C HAPT ER Easy Mode 6.1 Overview The Web Configurat or is set t o Ea sy M ode by default . You can configure several key feat ures of t he Rout er in t his m ode. This m ode is useful t o users who are not fully fam iliar wit h som e feat ures t hat are usually int ended for net work adm inist rat ors. When you log in t o t he Web Configurat or, t he following screen opens. Figure 27 Easy Mode: Net work Map Navigation Panel Network Map Go to Status Screen Control Panel NBG6503 User’s Guide 45 Chapter 6 Easy Mode Click St a t us t o open t he following screen screen. Figure 28 Easy Mode: St at us Screen Navigation Panel Go to Network Map Screen Status Screen Control Panel Right- click N BG6 5 0 3 t o open t he pop up m enu. Figure 29 Easy Mode: Pop Up Menu Navigation Panel Pop Up Menu Control Panel 46 NBG6503 User’s Guide Chapter 6 Easy Mode 6.2 What You Can Do You can do t he following in t his m ode: • Use t his N a viga t ion Pa ne l ( Sect ion 6.4 on page 47) t o opt out of t he Ea sy m ode. • Use t he N e t w or k M a p screen ( Sect ion 6.5 on page 47) t o check if your Rout er can ping t he gat eway and whet her it is connect ed t o t he I nt ernet . • Use t he Cont r ol Pa n e l ( Sect ion 6.6 on page 48) t o configure and enable Rout er feat ures, including wireless securit y, wireless scheduling and bandwidt h m anagem ent and so on. • Use t he St a t us Scr e e n screen ( Sect ion 6.7 on page 55) t o view read- only inform at ion about t he Rout er, including t he WAN I P, MAC Address of t he Rout er and t he firm ware version. • Use t he Pop Up M e n u t o refresh t he Rout er or run t he e a Zy1 2 3 wizard ( Sect ion 2.2 on page 21) . 6.3 What You Need to Know Bet ween t he different device m odes, t he Cont rol Panel ( Sect ion 6.6 on page 48) changes depending on which feat ures are applicable t o t he m ode: • Rout e r M ode : All Cont rol Panel feat ures are available. • Acce ss Point M ode : Only Pow e r Sa vin g and W ir e le ss Se cur it y are available. 6.4 Navigation Panel Use t his navigat ion panel t o opt out of t he Ea sy m ode. Figure 30 Navigat ion Panel The following t able describes t he labels in t his screen. Table 18 Navigat ion Panel ITEM DESCRIPTION Hom e Click t his t o go t o t he Login page. Expert Mode Click t his t o change t o Ex pe r t m ode and cust om ize feat ures of t he Rout er. Logout Click t his t o end t he Web Configurat or session. 6.5 Network Map Not e: The Net work MAP is viewable by Windows XP ( need t o inst all pat ch) , Windows Vist a and Windows 7 users only. For Windows XP ( Service Pack 2) users, you can see t he net w ork devices connect ed t o t he Rout er by downloading t he LLTD ( Link Layer Topology Discovery) pat ch fr om t he Microsoft Websit e. NBG6503 User’s Guide 47 Chapter 6 Easy Mode Not e: Don’t worry if t he Net work Map does not display in your web br owser. This feat ure m ay not be support ed by your syst em . You can st ill configure t he Cont rol Panel ( Sect ion 6.6 on page 48) in t he Easy Mode and t he Rout er feat ures t hat you want t o use in t he Expert Mode. When you log int o t he Net work Configurat or, t he Net work Map is shown as follows. Figure 31 Net work Map The line connect ing t he Rout er t o t he gat eway becom es green when t he Rout er is able t o ping t he gat eway. I t becom es red when t he ping init iat ing from t he Rout er does not get a response from t he gat eway. The sam e rule applies t o t he line connect ing t he gat eway t o t he I nt ernet . You can also view t he devices ( represent ed by icons indicat ing t he kind of net work device) connect ed t o t he Rout er, including t hose connect ing wirelessly. Right- click on t he Rout er icon t o refresh t he net work m ap and go t o t he Wizard. Right click on t he ot her icons t o view inform at ion about t he device. 6.6 Control Panel The feat ures configurable in Ea sy M ode are shown in t he Con t r ol Pa n e l. Figure 32 Cont rol Panel Swit ch ON t o enable t he feat ure. Ot herwise, swit ch OFF. I f t he feat ure is t urned on, t he green light flashes. I f it is t urned off, t he red light flashes. Addit ionally, click t he feat ure t o open a screen where you can edit it s set t ings. 48 NBG6503 User’s Guide Chapter 6 Easy Mode The following t able describes t he labels in t his screen. Table 19 Cont rol Panel ITEM DESCRIPTION Gam e Engine Swit ch ON t o m axim ize bandwidt h for gam ing t raffic in your net work. Ot herwise, swit ch OFF. Refer t o Sect ion 6.6.1 on page 49 t o see t his screen. Power Saving Click t his t o schedule t he wireless feat ure of t he Rout er. Disabling t he wireless funct ion helps lower t he energy consum pt ion of t he Rout er. Swit ch ON t o apply wireless scheduling. Ot herwise, swit ch OFF. Refer t o Sect ion 6.6.2 on page 50 t o see t his screen. Cont ent Filt er Click t his t o rest rict access t o cert ain websit es, based on keywords cont ained in URLs, t o which you do not want users in your net work t o open. Swit ch ON t o apply websit e filt ering. Ot herwise, swit ch OFF. Refer t o Sect ion 6.6.3 on page 51 t o see t his screen. Bandw idt h MGMT Click t his t o edit bandwidt h m anagem ent for predefined applicat ions. Swit ch ON t o have t he Rout er m anagem ent bandwidt h for uplink and downlink t raffic according t o an applicat ion or service. Ot herwise, swit ch OFF. Refer t o Sect ion 6.6.4 on page 51 t o see t his screen. Firewall Swit ch ON t o ensure t hat your net work is prot ect ed from Denial of Service ( DoS) at t acks. Ot herwise, swit ch OFF. Refer t o Sect ion 6.6.5 on page 52 t o see t his screen. Wireless Securit y Click t his t o configure t he wireless securit y, such as SSI D, securit y m ode and WPS key on your Rout er. Refer t o Sect ion 6.6.6 on page 52 t o see t his screen. 6.6.1 Game Engine When t his feat ure is enabled, t he Rout er m axim izes t he bandwidt h for gam ing t raffic t hat it forwards out t hrough an int erface. Figure 33 Gam e Engine Not e: When t his is swit ched on, t he Ga m e Con sole t ab in t he Bandwidth MGMT screen is aut om at ically posit ioned on t op. Turn t his off if your net work is not using gam ing. Click OK t o close t his screen. NBG6503 User’s Guide 49 Chapter 6 Easy Mode 6.6.2 Power Saving Use t his screen t o set t he day of t he week and t im e of t he day when your wireless LAN is t urned on and off. Wireless LAN scheduling is disabled by default . Disabling t he wireless capabilit y lowers t he energy consum pt ion of t he of t he Rout er. Figure 34 Power Saving The following t able describes t he labels in t his screen. Table 20 Power Saving LABEL DESCRIPTION Wireless Radio Select t he wireless radio t o set it s power saving set t ings. WLAN St at us Select On or Off t o specify whet her t he Wireless LAN is t urned on or off ( depending on what you select ed in t he W LAN St a t us field) . This field works in conj unct ion wit h t he D a y and Ex ce pt for t h e follow ing t im e s fields. Day Select Eve r yda y or t he specific days t o t urn t he Wireless LAN on or off. I f you select Eve r yda y you can not select any specific days. This field works in conj unct ion wit h t he Ex ce pt for t h e follow in g t im e s field. For t he following t im es ( 24- Hour Form at ) Select a begin t im e using t he first set of h our and m inut e ( m in ) drop down boxes and select an end t im e using t he second set of h ou r and m inut e ( m in ) drop down boxes. I f you have chosen On earlier for t he WLAN St at us t he Wireless LAN will t urn on bet ween t he t wo t im es you ent er in t hese fields. I f you have chosen Off earlier for t he WLAN St at us t he Wireless LAN will t urn off bet ween t he t wo t im es you ent er in t hese fields. I n t his t im e form at , m idnight is 00: 00 and progresses up t o 24: 00. For exam ple, 6: 00 PM is 18: 00. 50 Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide Chapter 6 Easy Mode 6.6.3 Content Filter Use t his screen t o rest rict access t o cert ain websit es, based on keywords cont ained in URLs, t o which you do not want users in your net work t o open. Figure 35 Cont ent Filt er The following t able describes t he labels in t his screen. Table 21 Cont ent Filt er LABEL DESCRIPTION Add Click Add aft er you have t yped a keyword. Repeat t his procedure t o add ot her keywords. Up t o 64 keywords are allowed. Note: The Router does not recognize wildcard characters as keywords. When you t ry t o access a web page cont aining a keyword, you will get a m essage t elling you t hat t he cont ent filt er is blocking t his request . Delet e Highlight a keyword in t he t ext box and click D e le t e t o rem ove it . The keyword disappears from t he t ext box aft er you click Apply. Apply Click Apply t o save your changes. Cancel Click Ca nce l t o close t his screen wit hout saving any changes. 6.6.4 Bandwidth MGMT Use t his screen t o set bandwidt h allocat ion t o pre- defined services and applicat ions for bandwidt h allocat ion. NBG6503 User’s Guide 51 Chapter 6 Easy Mode The Rout er uses bandwidt h m anagem ent for incom ing and out going t raffic. Rank t he services and applicat ions by dragging t hem accordingly from H igh t o Low and click Apply. Click Ca nce l t o close t he screen. Figure 36 Bandwidt h MGNT Use your mouse to drag the items according to how you want to prioritze them. Left-click and slide up or down. 6.6.5 Firewall Enable t his feat ure t o prot ect t he net work from Denial of Service ( DoS) at t acks. The Rout er blocks repet it ive pings from t he WAN t hat can ot herwise cause syst em s t o slow down or hang. Figure 37 Firewall Click OK t o close t his screen. 6.6.6 Wireless Security Use t his screen t o configure securit y for your t he Wireless LAN. You can ent er t he SSI D and select t he wireless securit y m ode in t he following screen. 52 NBG6503 User’s Guide Chapter 6 Easy Mode Not e: You can enable t he Wireless funct ion of your Rout er by first t urning on t he swit ch in t he back panel. Figure 38 Wireless Securit y The following t able describes t he general wireless LAN labels in t his screen. Table 22 Wireless Securit y LABEL DESCRIPTION Wireless Radio Select t he wireless radio t o set it s securit y set t ing. Wireless Net work Nam e ( SSI D) ( Service Set I Dent it y) The SSI D ident ifies t he Service Set wit h which a wireless st at ion is associat ed. Wireless st at ions associat ing t o t he access point ( AP) m ust have t he sam e SSI D. Ent er a descript ive nam e ( up t o 32 keyboard charact ers) for t he wireless LAN. Securit y m ode Select W PA- PSK or W PA2 - PSK t o add securit y on t his wireless net work. The wireless client s w hich want t o associat e t o t his net work m ust have sam e w ireless securit y set t ings as t his device. Aft er you select t o use a securit y, addit ional opt ions appears in t his screen. Select N o Se cu r it y t o allow any client t o connect t o t his net work wit hout aut hent icat ion. Wireless password This field appears when you choose wit her W PA- PSK or W PA2 - PSK as t he securit y m ode. Verify password Type t he password again t o confirm . Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o close t his screen. WPS Click t his t o configure t he WPS screen. Type a pre- shared key from 8 t o 63 case- sensit ive keyboard charact ers. You can t ransfer t he wireless set t ings configured here ( W ir e le ss Se cu r it y screen) t o anot her wireless device t hat support s WPS. NBG6503 User’s Guide 53 Chapter 6 Easy Mode 6.6.7 WPS Use t his screen t o add a wireless st at ion t o t he net work using WPS. Click W PS in t he W ir e le ss Se cur it y t o open t he following screen. Figure 39 Wireless Securit y: WPS The following t able describes t he labels in t his screen. Table 23 Wireless Securit y: WPS LABEL DESCRIPTION Wireless Securit y Click t his t o go back t o t he Wireless Securit y screen. WPS Creat e a secure wireless net work sim ply by pressing a but t on. The Rout er scans for a WPS- enabled device w it hin t he range and perform s wireless securit y inform at ion synchronizat ion. Note: After you click the WPS button on this screen, you have to press a similar button in the wireless station utility within 2 minutes. To add the second wireless station, you have to press these buttons on both device and the wireless station again after the first 2 minutes. Regist er Creat e a secure wireless net work sim ply by ent ering a wireless client 's PI N ( Personal I dent ificat ion Num ber) in t he Rout er’s int erface and pushing t his but t on. Type t he sam e PI N num ber generat ed in t he wireless st at ion’s ut ilit y. Then click Re gist e r t o associat e t o each ot her and perform t he wireless securit y inform at ion synchronizat ion. Exit 54 Click Ex it t o close t his screen. NBG6503 User’s Guide Chapter 6 Easy Mode 6.7 Status Screen in Easy Mode I n t he Net work Map screen, click St a t us t o view read- only inform at ion about t he Rout er. Figure 40 St at us Screen in Easy Mode The following t able describes t he labels in t his screen. Table 24 St at us Screen in Easy Mode ITEM DESCRIPTION Nam e This is t he nam e of t he Rout er in t he net work. You can change t his in t he M a int e n a n ce > Ge n e r a l screen in Sect ion 22.3 on page 155. Tim e This is t he current syst em dat e and t im e. The dat e is in YYYY: MM: DD ( Year- Mont h- Day) form at . The t im e is in HH: MM: SS ( Hour: Minut es: Seconds) form at . WAN I P This is t he I P address of t he WAN port . MAC Address This is t he MAC address of t he Rout er. Firm ware Version This shows t he firm ware version of t he Rout er. Wireless 2.4G Net work Nam e This shows t he SSI D of t he wireless 2.4G net work. You can configure t his in t he Wireless Securit y screen ( Sect ion 6.6.6 on page 52; Sect ion 10.3.1.1 on page 84) . Securit y This shows t he wireless securit y used by t he Rout er for t he 2.4G w ireless radio. Wireless 5G Net work Nam e This shows t he SSI D of t he wireless 5G net work. You can configure t his in t he Wireless Securit y screen ( Sect ion 6.6.6 on page 52; Sect ion 10.3.1.1 on page 84) . Securit y This shows t he wireless securit y used by t he Rout er for t he 5G wireless radio. NBG6503 User’s Guide The firm ware version form at shows t he t runk version, m odel code and release num ber. 55 Chapter 6 Easy Mode 56 NBG6503 User’s Guide C HAPT ER Router Mode 7.1 Overview The Rout er is set t o rout er m ode by default . Rout ers are used t o connect t he local net work t o anot her net work ( for exam ple, t he I nt ernet ) . I n t he figure below, t he Rout er connect s t he local net work ( LAN 1 ~ LAN 4 ) t o t he I nt ernet . Figure 41 Rout er Net work Modem Rou t e r Not e: The St at us scr een is shown aft er changing t o t he Expert m ode of t he Web Configurat or. I t varies depending on t he device m ode of your Rout er. 7.2 What You Can Do Use t he St a t u s screen ( Sect ion 7.3 on page 58) t o view read- only inform at ion about your Rout er. NBG6503 User’s Guide 57 Chapter 7 Router Mode 7.3 Status Screen Click t o open t he st at us screen. Figure 42 St at us Screen: Rout er Mode The following t able describes t he icons shown in t he St a t u s screen. Table 25 St at us Screen I con Key: Rout er Mode ICON DESCRIPTION Click t his icon t o view copyright and a link for relat ed product inform at ion. Click t his icon t o go t o Easy Mode. See Chapt er 6 on page 45. Click t his t o go t o t he Hom e page. See Chapt er 4 on page 37. Select a num ber of seconds or N on e from t he drop- down list box t o refresh all screen st at ist ics aut om at ically at t he end of every t im e int erval or t o not refresh t he screen st at ist ics. Click t his but t on t o refresh t he st at us screen st at ist ics. Click t his icon t o see t he St at us page. The inform at ion in t his screen depends on t he device m ode you select . Click t his icon t o see t he M on it or navigat ion m enu. 58 NBG6503 User’s Guide Chapter 7 Router Mode Table 25 St at us Screen I con Key: Rout er Mode ( cont inued) ICON DESCRIPTION Click t his icon t o see t he Con figu r a t ion navigat ion m enu. Click t his icon t o see t he M a in t e n a n ce navigat ion m enu. The following t able describes t he labels shown in t he St a t u s screen. Table 26 St at us Screen: Rout er Mode LABEL DESCRIPTION Logout Click t his at any t im e t o exit t he Web Configurat or. Device I nform at ion Host Nam e This is t he Syst e m N a m e you ent er in t he M a in t e n a n ce > Ge n e r a l screen. I t is for ident ificat ion purposes. Firm ware Version This is t he firm ware version and t he dat e creat ed. Sys OP Mode This is t he device m ode ( Sect ion 5.1.2 on page 43) t o which t he Rout er is set - Rou t e r M ode . WAN I nform at ion - MAC Address This shows t he WAN Et hernet adapt er MAC Address of your device. - I P Address This shows t he WAN port ’s I P address. - I P Subnet Mask This shows t he WAN port ’s subnet m ask. - Default Gat eway This shows t he WAN port ’s gat eway I P address. - DHCP This shows t he LAN port ’s DHCP role - Clie nt or Se r ve r. LAN I nform at ion - MAC Address This shows t he LAN Et hernet adapt er MAC Address of your device. - I P Address This shows t he LAN port ’s I P address. - I P Subnet Mask This shows t he LAN port ’s subnet m ask. - DHCP This shows t he LAN port ’s DHCP role - Se r ve r or N on e . WLAN 2.4G I nform at ion - WLAN OP Mode This is t he device m ode ( Sect ion 5.1.2 on page 43) t o which t he Rout er’s wireless LAN is set - Acce ss Poin t M ode . - MAC Address This shows t he wireless adapt er MAC Address of your device. - SSI D This shows a descript ive nam e used t o ident ify t he Rout er in t he wireless LAN. - Channel This shows t he channel num ber which t he Rout er is current ly using over t he wireless LAN.. - Securit y This shows t he level of wireless securit y t he Rout er is using. WLAN 5G I nform at ion - MAC Address This shows t he wireless adapt er MAC Address of your device. - SSI D This shows a descript ive nam e used t o ident ify t he Rout er in t he wireless LAN. - Channel This shows t he channel num ber which t he Rout er is current ly using over t he wireless LAN.. - Securit y This shows t he level of wireless securit y t he Rout er is using. Syst em St at us I t em This colum n shows t he t ype of dat a t he Rout er is recording. Dat a This colum n shows t he act ual dat a recorded by t he Rout er. Syst em Up Tim e NBG6503 User’s Guide This is t he t ot al t im e t he Rout er has been on. 59 Chapter 7 Router Mode Table 26 St at us Screen: Rout er Mode ( cont inued) LABEL Current Dat e/ Tim e DESCRIPTION This field displays your Rout er’s present dat e and t im e. Syst em Resource - CPU Usage This displays what percent age of t he Rout er’s processing abilit y is current ly used. When t his percent age is close t o 100% , t he Rout er is running at full load, and t he t hroughput is not going t o im prove anym ore. I f you want som e applicat ions t o have m ore t hroughput , you should t urn off ot her applicat ions ( for exam ple, using bandwidt h m anagem ent .) - Mem ory Usage This shows what percent age of t he heap m em ory t he Rout er is using. Syst em Set t ing - Firewall This shows whet her t he firewall is enabled or not . - Bandwidt h Managem ent This shows whet her t he bandwidt h m anagem ent is enabled or not . - UPnP This shows whet her UPnP is enabled or not . - Configurat ion Mode This shows t he web configurat or m ode you are viewing - Ex pe r t . I nt erface St at us I nt erface This displays t he Rout er port t ypes. The port t ypes are: W AN , LAN and W LAN . St at us For t he LAN and WAN port s, t his field displays D ow n ( line is down) or Up ( line is up or connect ed) . For t he WLAN, it displays Up when t he WLAN is enabled or D ow n when t he WLAN is disabled. Rat e For t he LAN port s, t his displays t he port speed and duplex set t ing or N / A when t he line is disconnect ed. For t he WAN port , it displays t he port speed and duplex set t ing if you’re using Et hernet encapsulat ion and I dle ( line ( ppp) idle) , D ia l ( st art ing t o t rigger a call) and D r op ( dropping a call) if you're using PPPoE or PPTP encapsulat ion. This field displays N / A when t he line is disconnect ed. For t he WLAN, it displays t he m axim um t ransm ission rat e when t he WLAN is enabled and N / A when t he WLAN is disabled. Sum m ary BW MGMT Monit or Click D e t a ils... t o go t o t he M on it or > BW M GM T M on it or screen ( Sect ion 4.4 on page 39) . Use t his screen t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. DHCP Table Click D e t a ils... t o go t o t he M on it or > D H CP Ta ble screen ( Sect ion 4.5 on page 39) . Use t his screen t o view current DHCP client inform at ion. Packet St at ist ics Click D e t a ils... t o go t o t he M onit or > Pa ck e t St a t ist ics screen ( Sect ion 4.6 on page 40) . Use t his screen t o view port st at us and packet specific st at ist ics. WLAN St at ion St at us Click D e t a ils... t o go t o t he M on it or > W LAN 2 .4 G / 5 G St a t ion St a t u s screen ( Sect ion 4.8 on page 41) . Use t his screen t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er. 60 NBG6503 User’s Guide Chapter 7 Router Mode 7.3.1 Navigation Panel Use t he sub- m enus on t he navigat ion panel t o configure Rout er feat ures. Figure 43 Navigat ion Panel: Rout er Mode The following t able describes t he sub- m enus. Table 27 Navigat ion Panel: Rout er Mode LINK TAB St at us FUNCTION This screen shows t he Rout er’s general device, syst em and int erface st at us inform at ion. Use t his screen t o access t he wizard, and sum m ary st at ist ics t ables. M ON I TOR Log Use t his screen t o view t he list of act ivit ies recorded by your Rout er. BW MGMT Use t his screen t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. DHCP Table Use t his screen t o view current DHCP client inform at ion. Packet St at ist ics Use t his screen t o view port st at us and packet specific st at ist ics. WLAN 2.4G St at ion St at us Use t his screen t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er t hrough t he wireless 2.4G net work. WLAN 5G St at ion St at us Use t his screen t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er t hrough t he wireless 5G net work. CON FI GURATI ON Net work NBG6503 User’s Guide 61 Chapter 7 Router Mode Table 27 Navigat ion Panel: Rout er Mode ( cont inued) LINK TAB FUNCTION General Use t his screen t o configure wireless 2.4G LAN. MAC Filt er Use t he MAC filt er screen t o configure t he Rout er t o block access t o devices or block t he devices from accessing t he Rout er. Advanced This screen allows you t o configure advanced wireless set t ings. QoS Use t his screen t o configure Wi- Fi Mult im edia Qualit y of Service ( WMM QoS) . WMM QoS allows you t o priorit ize wireless t raffic according t o t he delivery requirem ent s of individual services. WPS Use t his screen t o configure WPS. WPS St at ion Use t his screen t o add a wireless st at ion using WPS. Scheduling Use t his screen t o schedule t he t im es t he Wireless LAN is enabled. WDS Use t his screen t o set up Wireless Dist ribut ion Syst em ( WDS) on your Rout er. General Use t his screen t o configure wireless 5G LAN. MAC Filt er Use t he MAC filt er screen t o configure t he Rout er t o block access t o devices or block t he devices from accessing t he Rout er. Advanced This screen allows you t o configure advanced wireless set t ings. QoS Use t his screen t o configure Wi- Fi Mult im edia Qualit y of Service ( WMM QoS) . WMM QoS allows you t o priorit ize wireless t raffic according t o t he delivery requirem ent s of individual services. WPS Use t his screen t o configure WPS. WPS St at ion Use t his screen t o add a wireless st at ion using WPS. Scheduling Use t his screen t o schedule t he t im es t he Wireless LAN is enabled. I nt ernet Connect ion This screen allows you t o configure I SP param et ers, WAN I P address assignm ent , DNS servers and t he WAN MAC address. Advanced Use t his screen t o configure ot her advanced propert ies. IP Use t his screen t o configure LAN I P address and subnet m ask. I P Alias Use t his screen t o have t he Rout er apply I P alias t o creat e LAN subnet s. General Use t his screen t o enable t he Rout er’s DHCP server. Advanced Use t his screen t o assign I P addresses t o specific individual com put ers based on t heir MAC addresses and t o have DNS servers assigned by t he DHCP server. General Use t his screen t o enable NAT. Applicat ion Use t his screen t o configure servers behind t he Rout er. Advanced Use t his screen t o change your Rout er’s port t riggering set t ings. DDNS General Use t his screen t o set up dynam ic DNS. St at ic Rout e I P St at ic Rout e Use t his screen t o configure I P st at ic rout es. General Use t his screen t o act ivat e/ deact ivat e t he firewall. Services This screen shows a sum m ary of t he firewall rules, and allows you t o edit / add a firewall rule. Wireless LAN 2.4G Wireless LAN 5G WAN LAN DHCP Server NAT Securit y Firewall Cont ent Filt er Use t his screen t o block cert ain web feat ures and sit es cont aining cert ain keywords in t he URL. Managem ent 62 NBG6503 User’s Guide Chapter 7 Router Mode Table 27 Navigat ion Panel: Rout er Mode ( cont inued) LINK TAB FUNCTION General Use t his screen t o enable bandwidt h m anagem ent . Advanced Use t his screen t o set t he upst ream bandwidt h and edit a bandwidt h m anagem ent rule. Monit or Use t his screen t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. Rem ot e Managem ent WWW Use t his screen t o be able t o access t he Rout er from t he LAN, WAN or bot h. UPnP General Use t his screen t o enable UPnP on t he Rout er. Bandwidt h Managem ent M AI N TEN AN CE General Use t his screen t o view and change adm inist rat ive set t ings such as syst em and dom ain nam es. Password Password Set up Use t his screen t o change t he password of your Rout er. Tim e Tim e Set t ing Use t his screen t o change your Rout er’s t im e and dat e. Firm ware Upgrade Use t his screen t o upload firm ware t o your Rout er. Backup/ Rest ore Use t his screen t o backup and rest ore t he configurat ion or reset t he fact ory default s t o your Rout er. Rest art This screen allows you t o reboot t he Rout er wit hout t urning t he power off. Sys OP Mode This screen allows you t o select whet her your device act s as a Rout er or a Access Point . NBG6503 User’s Guide 63 Chapter 7 Router Mode 64 NBG6503 User’s Guide C HAPT ER Access Point Mode 8.1 Overview Use your Rout er as an access point ( AP) if you already have a rout er or gat eway on your net work. I n t his m ode your Rout er bridges a wired net work ( LAN) and wireless LAN ( WLAN) in t he sam e subnet . See t he figure below for an exam ple. Figure 44 Wireless I nt ernet Access in Access Point Mode Rou t e r Many screens t hat are available in Rout er m ode are not available in Access Point m ode, such as bandwidt h m anagem ent and firewall. Not e: See Chapt er 9 on page 73 for an exam ple of set t ing up a wireless net work in Access Point m ode. 8.2 What You Can Do • Use t he St a t u s screen ( Sect ion 8.4 on page 68) t o view read- only inform at ion about your Rout er. • Use t he LAN screen ( Sect ion 8.5 on page 70) t o set t he I P address for your Rout er act ing as an access point . 8.3 What You Need to Know See Chapt er 9 on page 73 for a t ut orial on set t ing up a net work wit h t he Rout er as an access point . NBG6503 User’s Guide 65 Chapter 8 Access Point Mode 8.3.1 Setting your Router to AP Mode Log int o t he Web Configurat or if you haven’t already. See t he Quick st art Guide for inst ruct ions on how t o do t his. To use your Rout er as an access point , go t o M a int e n a n ce > Sys OP M ode and select Acce ss Point m ode . Figure 45 Changing t o Access Point m ode Not e: You have t o log in t o t he Web Configurat or again when you change m odes. As soon as you do, your Rout er is already in Access Point m ode. When you select Acce ss Point M ode , t he following pop- up m essage window appears. Figure 46 Pop up for Access Point m ode Click OK. Click Apply. The Web Configurat or refreshes once t he change t o Access Point m ode is successful. 8.3.2 Accessing the Web Configurator in Access Point Mode Log in t o t he Web Configurat or in Access Point m ode, do t he following: 66 Connect your com put er t o t he LAN port of t he Rout er. The default I P address of t he Rout er is “ 192.168.1.2”. I n t his case, your com put er m ust have an I P address in t he range bet ween “ 192.168.1.3” and “ 192.168.1.254”. NBG6503 User’s Guide Chapter 8 Access Point Mode Click St a r t > Run on your com put er in Windows. Type “ cm d” in t he dialog box. Ent er “ ipconfig” t o show your com put er ’s I P address. I f your com put er ’s I P address is not in t he correct range t hen see Appendix B on page 181 for inform at ion on changing your com put er ’s I P address. Aft er you’ve set your com put er ’s I P address, open a web browser such as I nt ernet Explorer and t ype “ 192.168.1.2” as t he web address in your web browser. Not e: Aft er clicking Login, t he Easy m ode appears. Refer t o page 45 for t he Easy m ode screens. Change t o Expert m ode t o see t he scr eens described in t he sect ions following t his. 8.3.3 Configuring your WLAN, Bandwidth Management and Maintenance Settings The configurat ion of wireless, bandwidt h m anagem ent and m aint enance set t ings in Acce ss Point m ode is t he sam e as for Rout e r M ode . • See Chapt er 10 on page 83 for inform at ion on t he configuring your wireless net work. • See Chapt er 19 on page 137 for inform at ion on configuring your Bandwidt h Managem ent screen. • See Chapt er 22 on page 155 t o Chapt er 22 on page 155 for inform at ion on configuring your Maint enance set t ings. NBG6503 User’s Guide 67 Chapter 8 Access Point Mode 8.4 AP Mode Status Screen Click t o open t he St a t us screen. Figure 47 St at us Screen: Access Point Mode The following t able describes t he labels shown in t he St a t u s screen. Table 28 St at us Screen: Access Point Mode LABEL DESCRIPTION Logout Click t his at any t im e t o exit t he Web Configurat or. Device I nform at ion Host Nam e This is t he Syst e m N a m e you ent er in t he M a in t e n a n ce > Ge n e r a l screen. I t is for ident ificat ion purposes. Firm ware Version This is t he firm ware version and t he dat e creat ed. Sys OP Mode This is t he device m ode ( Sect ion 5.1.2 on page 43) t o which t he Rout er is set - Acce ss Point M ode . LAN I nform at ion - MAC Address This shows t he LAN Et hernet adapt er MAC Address of your device. - I P Address This shows t he LAN port ’s I P address. - I P Subnet Mask This shows t he LAN port ’s subnet m ask. - Default Gat eway This shows t he LAN Et hernet default gat eway of your device. - DHCP This shows t he LAN port ’s DHCP role - Se r ve r , Clie n t or N on e . 68 NBG6503 User’s Guide Chapter 8 Access Point Mode Table 28 St at us Screen: Access Point Mode ( cont inued) LABEL DESCRIPTION WLAN 2.4G I nform at ion - WLAN OP Mode This is t he device m ode ( Sect ion 5.1.2 on page 43) t o which t he Rout er’s wireless LAN is set - Acce ss Poin t M ode . - MAC Address This shows t he wireless adapt er MAC Address of your device. - SSI D This shows a descript ive nam e used t o ident ify t he Rout er in t he wireless 2.4G LAN. - Channel This shows t he channel num ber which you select m anually. - Securit y This shows t he level of wireless securit y t he Rout er is using. WLAN 5G I nform at ion - MAC Address This shows t he wireless adapt er MAC Address of your device. - SSI D This shows a descript ive nam e used t o ident ify t he Rout er in t he wireless 5G LAN. - Channel This shows t he channel num ber which you select m anually. - Securit y This shows t he level of wireless securit y t he Rout er is using. Syst em St at us I t em This colum n shows t he t ype of dat a t he Rout er is recording. Dat a This colum n shows t he act ual dat a recorded by t he Rout er. Syst em Up Tim e This is t he t ot al t im e t he Rout er has been on. Current Dat e/ Tim e This field displays your Rout er’s present dat e and t im e. Syst em Resource - CPU Usage This displays what percent age of t he Rout er’s processing abilit y is current ly used. When t his percent age is close t o 100% , t he Rout er is running at full load, and t he t hroughput is not going t o im prove anym ore. I f you want som e applicat ions t o have m ore t hroughput , you should t urn off ot her applicat ions ( for exam ple, using bandwidt h m anagem ent . - Mem ory Usage This shows what percent age of t he heap m em ory t he Rout er is using. Syst em Set t ing - Configurat ion Mode This shows t he web configurat or m ode you are viewing - Ex pe r t . I nt erface St at us I nt erface This displays t he Rout er port t ypes. The port t ypes are: LAN , W LAN 2 .4 G, and W LAN 5 G. St at us For t he LAN and WAN port s, t his field displays D ow n ( line is down) or Up ( line is up or connect ed) . For t he WLAN, it displays Up when t he WLAN is enabled or D ow n when t he WLAN is disabled. Rat e For t he LAN port s, t his displays t he port speed and duplex set t ing or N / A when t he line is disconnect ed. For t he WAN port , it displays t he port speed and duplex set t ing if you’re using Et hernet encapsulat ion and I dle ( line ( ppp) idle) , D ia l ( st art ing t o t rigger a call) and D r op ( dropping a call) if you're using PPPoE or PPTP encapsulat ion. This field displays N / A when t he line is disconnect ed. For t he WLAN, it displays t he m axim um t ransm ission rat e when t he WLAN is enabled and N / A when t he WLAN is disabled. Sum m ary Packet St at ist ics Click D e t a ils... t o go t o t he M on it or > Pa ck e t St a t ist ics screen ( Sect ion 4.6 on page 40) . Use t his screen t o view port st at us and packet specific st at ist ics. WLAN St at ion St at us Click D e t a ils... t o go t o t he M on it or > W LAN 2 .4 G / 5 G St a t ion St a t u s screen ( Sect ion 4.8 on page 41) . Use t his screen t o view t he wireless st at ions t hat are current ly associat ed t o t he Rout er. NBG6503 User’s Guide 69 Chapter 8 Access Point Mode 8.4.0.1 Navigation Panel Use t he m enu in t he navigat ion panel t o configure Rout er feat ures in Access Point m ode. The following screen and t able show t he feat ures you can configure in Access Point m ode. Figure 48 Menu: Access Point Mode Refer t o Table 27 on page 61 for descript ions of t he labels shown in t he N a viga t ion panel. 8.5 LAN Screen Use t his sect ion t o configure your LAN set t ings while in Acce ss Poin t m ode. Click N e t w or k > LAN t o see t he screen below. Not e: I f you change t he I P address of t he Rout er in t he screen below, you will need t o log int o t he Rout er again using t he new I P address. Figure 49 Net work > LAN > I P The t able below describes t he labels in t he screen. 70 NBG6503 User’s Guide Chapter 8 Access Point Mode Table 29 Net work > LAN > I P LABEL DESCRIPTION Get from DHCP Server Click t his t o deploy t he Rout er as an access point in t he net work. When you enable t his, t he Rout er get s it s I P address from t he net work’s DHCP server ( for exam ple, your I SP) . Users connect ed t o t he Rout er can now access t he net work ( i.e., t he I nt ernet if t he I P address is given by t he I SP) . The Web Configurat or m ay no longer be accessible unless you know t he I P address assigned by t he DHCP server t o t he Rout er. You need t o reset t he Rout er t o be able t o access t he Web Configurat or again ( see Sect ion 22.7 on page 160 for det ails on how t o reset t he Rout er) . Also when you select t his, you cannot ent er an I P address for your Rout er in t he field below. Use Defined LAN I P Address Click t his if you want t o specify t he I P address of your Rout er. Or if your I SP or net work adm inist rat or gave you a st at ic I P address t o access t he net work or t he I nt ernet . I P Address Type t he I P address in dot t ed decim al not at ion. The default set t ing is 192.168.1.2. I f you change t he I P address you will have t o log in again wit h t he new I P address. I P Subnet Mask The subnet m ask specifies t he net work num ber port ion of an I P address. Your Rout er will aut om at ically calculat e t he subnet m ask based on t he I P address t hat you assign. Unless you are im plem ent ing subnet t ing, use t he subnet m ask com put ed by t he Rout er. Gat eway I P Address Ent er a Ga t e w a y I P Addr e ss ( if your I SP or net work adm inist rat or gave you one) in t his field. DNS Assignm ent First DNS Server Second DNS Server Select Fr om I SP if your I SP dynam ically assigns DNS server inform at ion ( and t he Rout er's WAN I P address) . The field t o t he right displays t he ( read- only) DNS server I P address t hat t he I SP assigns. Select Use r - D e fin e d if you have t he I P address of a DNS server. Ent er t he DNS server's I P address in t he field t o t he right . I f you chose Use r - D e fin e d, but leave t he I P address set t o 0.0.0.0, Use r - D e fin e d changes t o N on e aft er you click Apply. I f you set a second choice t o Use r - D e fin e d, and ent er t he sam e I P address, t he second Use r - D e fine d changes t o N on e aft er you click Apply. Select N on e if you do not want t o configure DNS servers. I f you do not configure a DNS server, you m ust know t he I P address of a com put er in order t o access it . Apply Click Apply t o save your changes t o t he Rout er. Reset Click Re se t t o reload t he previous configurat ion for t his screen. NBG6503 User’s Guide 71 C HAPT ER Tutorials 9.1 Overview This chapt er provides t ut orials for your Rout er as follows: • Connect ing t o t he I nt ernet from an Access Point • Configuring Wireless Securit y Using WPS • Enabling and Configuring Wireless Securit y ( No WPS) • I f your connect ion is successful, open your I nt ernet browser and ent er ht t p: / / www.zyxel.com or t he URL of any ot her web sit e in t he address bar. I f you are able t o access t he web sit e, your wireless connect ion is successfully configured. 9.2 Connecting to the Internet from an Access Point This sect ion gives you an exam ple of how t o set up an access point ( AP) and wireless client ( a not ebook ( B) , in t his exam ple) for wireless com m unicat ion. B can access t he I nt ernet t hrough t he access point wirelessly. Figure 50 Wireless Access Point Connect ion t o t he I nt ernet 9.3 Configuring Wireless Security Using WPS This sect ion gives you an exam ple of how t o set up wireless net work using WPS. This exam ple uses t he Rout er as t he AP and NWD210N as t he wireless client which connect s t o a not ebook. Not e: The wireless client m ust be a WPS- aware device ( for exam ple, a WPS USB adapt er or PCI card) . There are t wo WPS m et hods for creat ing a secure connect ion. This t ut orial shows you how t o do bot h. NBG6503 User’s Guide 73 Chapter 9 Tutorials • Push Bu t t on Configu r a t ion ( PBC) - creat e a secure wireless net work sim ply by pressing a but t on. See Sect ion 9.3.1 on page 74.This is t he easier m et hod. • PI N Con figu r a t ion - creat e a secure wireless net work sim ply by ent ering a wireless client 's PI N ( Personal I dent ificat ion Num ber) in t he Rout er’s int erface. See Sect ion 9.3.2 on page 75. This is t he m ore secure m et hod, since one device can aut hent icat e t he ot her. 9.3.1 Push Button Configuration (PBC) Make sure t hat your Rout er is t urned on and t hat it is wit hin range of your com put er. Make sure t hat you have inst alled t he wireless client ( t his exam ple uses t he NWD210N) driver and ut ilit y in your not ebook. I n t he wireless client ut ilit y, find t he WPS set t ings. Enable WPS and press t he WPS but t on ( St a r t or W PS but t on) Log int o Rout er’s Web Configurat or and press t he Pu sh Bu t t on but t on in t he N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > W PS St a t ion screen. Not e: Your Rout er has a WPS but t on locat ed on it s panel, as well as a WPS but t on in it s configurat ion ut ilit y. Bot h but t ons have exact ly t he sam e funct ion; you can use one or t he ot her. Not e: I t doesn’t m at t er which but t on is pressed first . You m ust press t he second but t on wit hin t w o m inut es of pressing t he first one. The Rout er sends t he proper configurat ion set t ings t o t he wireless client . This m ay t ake up t o t wo m inut es. Then t he wireless client is able t o com m unicat e wit h t he Rout er securely. 74 NBG6503 User’s Guide Chapter 9 Tutorials The following figure shows you an exam ple t o set up wireless net work and securit y by pressing a but t on on bot h Rout er and wireless client ( t he NWD210N in t his exam ple) . Figure 51 Exam ple WPS Process: PBC Met hod Router Wireless Client WITHIN 2 MINUTES SECURITY INFO COMMUNICATION 9.3.2 PIN Configuration When you use t he PI N configurat ion m et hod, you need t o use bot h Rout er’s configurat ion int erface and t he client ’s ut ilit ies. Launch your wireless client ’s configurat ion ut ilit y. Go t o t he WPS set t ings and select t he PI N m et hod t o get a PI N num ber. Ent er t he PI N num ber t o t he PI N field in t he N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > W PS St a t ion screen on t he Rout er. Click St a r t but t on ( or but t on next t o t he PI N field) on bot h t he wireless client ut ilit y screen and t he Rout er’s W PS St a t ion screen wit hin t wo m inut es. The Rout er aut hent icat es t he wireless client and sends t he proper configurat ion set t ings t o t he wireless client . This m ay t ake up t o t wo m inut es. Then t he wireless client is able t o com m unicat e wit h t he Rout er securely. NBG6503 User’s Guide 75 Chapter 9 Tutorials The following figure shows you t he exam ple t o set up wireless net work and securit y on Rout er and wireless client ( ex. NWD210N in t his exam ple) by using PI N m et hod. Figure 52 Exam ple WPS Process: PI N Met hod Wireless Client Router WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 76 NBG6503 User’s Guide Chapter 9 Tutorials 9.4 Enabling and Configuring Wireless Security (No WPS) This exam ple shows you how t o configure wireless securit y set t ings wit h t he following param et ers on your Rout er. SSI D SSI D_Exam ple3 Ch a n n e l Se cu r it y WPA- PSK ( Pre- Shared Key: Thisism yWPA- PSKpre- sharedkey) Follow t he st eps below t o configure t he wireless set t ings on your Rout er. The inst ruct ions require t hat your hardware is connect ed ( see t he Quick St art Guide) and you are logged int o t he Web Configurat or t hrough your LAN connect ion ( see Sect ion 3.2 on page 31) . Open t he W ir e le ss LAN > Ge n e r a l screen in t he AP’s Web Configurat or. Enable W ir e le ss LAN . Ent er SSI D _ Ex a m ple 3 as t he SSI D and select a channel. Set securit y m ode t o W PA- PSK and ent er Thisism yW PA- PSKpr e - sha r e dk e y in t he Pr e - Sha r e d Ke y field. Click Apply. Figure 53 Tut orial: Net work > Wireless LAN > General NBG6503 User’s Guide 77 Chapter 9 Tutorials Open t he St a t us screen. Verify your wireless and wireless securit y set t ings under D e vice I nfor m a t ion and check if t he WLAN connect ion is up under I nt e r fa ce St a t us. Figure 54 Tut orial: Checking Wireless Set t ings 9.4.1 Configure Your Notebook Not e: We use t he ZyXEL M- 302 wireless adapt er ut ilit y screens as an exam ple for t he wireless client . The screens m ay vary for different m odels. The Rout er support s I EEE 802.11b, I EEE 802.11g, I EEE 802.11n and I EEE 802.11ac wireless client s. Make sure t hat your not ebook or com put er ’s wireless adapt er support s one of t hese st andards. Wireless adapt ers com e wit h soft ware som et im es called a “ ut ilit y” t hat you inst all on your com put er. See your wireless adapt er ’s User ’s Guide for inform at ion on how t o do t hat . Aft er you’ve inst alled t he ut ilit y, open it . I f you cannot see your ut ilit y’s icon on your screen, go t o St a r t > Pr ogr a m s and click on your ut ilit y in t he list of program s t hat appears. The ut ilit y displays a list of APs wit hin range, as shown in t he exam ple screen below. Select SSI D_Exam ple3 and click Conne ct . Figure 55 Connect ing a Wireless Client t o a Wireless Net work t 78 NBG6503 User’s Guide Chapter 9 Tutorials Select WPA- PSK and t ype t he securit y key in t he following screen. Click N e x t . Figure 56 Securit y Set t ings The Confir m Sa ve window appears. Check your set t ings and click Sa ve t o cont inue. Figure 57 Confirm Save Check t he st at us of your wireless connect ion in t he screen below. I f your wireless connect ion is weak or you have no connect ion, see t he Troubleshoot ing sect ion of t his User ’s Guide. Figure 58 Link St at us I f your connect ion is successful, open your I nt ernet browser and ent er ht t p: / / www.zyxel.com or t he URL of any ot her web sit e in t he address bar. I f you are able t o access t he web sit e, your wireless connect ion is successfully configured. NBG6503 User’s Guide 79 Chapter 9 Tutorials 80 NBG6503 User’s Guide P ART II Technical Reference 81 82 C HAPTER 10 Wireless LAN 10.1 Overview This chapt er discusses how t o configure t he wireless net work set t ings in your Rout er. See t he appendices for m ore det ailed inform at ion about wireless net works. The following figure provides an exam ple of a wireless net work. Figure 59 Exam ple of a Wireless Net work Router 2.4G 5G The wireless 2.4G net work is t he part in t he blue circle and wireless 5G net work is t he part in t he green circle. I n t hese wireless net works, devices A, B and C are called wireless client s. The wireless client s use t he access point ( AP) t o int eract wit h ot her devices ( such as t he print er) or wit h t he I nt ernet . 10.2 What You Can Do • Use t he Ge n e r a l screen ( Sect ion 10.4 on page 86) t o enable t he Wireless LAN, ent er t he SSI D and select t he wireless securit y m ode. • Use t he M AC Filt e r screen ( Sect ion 10.5 on page 90) t o allow or deny wireless st at ions based on t heir MAC addresses from connect ing t o t he Rout er. NBG6503 User’s Guide 83 Chapter 10 Wireless LAN • Use t he Adva nce d screen ( Sect ion 10.6 on page 91) t o allow wireless advanced feat ures, such as int ra- BSS net working and set t he RTS/ CTS Threshold. • Use t he QoS screen ( Sect ion 10.7 on page 93) t o set priorit y levels t o services, such as e- m ail, VoI P, chat , and so on. • Use t he W PS screen ( Sect ion 10.8 on page 94) t o quickly set up a wireless net work wit h st rong securit y, wit hout having t o configure securit y set t ings m anually. • Use t he W PS St a t ion screen ( Sect ion 10.9 on page 95) t o add a wireless st at ion using WPS. • Use t he Sche duling screen ( Sect ion 10.10 on page 96) t o set t he t im es your wireless LAN is t urned on and off. • Use t he W D S screen ( Sect ion 10.11 on page 97) t o configure Wireless Dist ribut ion Syst em on your Rout er. 10.3 What You Should Know Every wireless net work m ust follow t hese basic guidelines. • Every wireless client in t he sam e wireless net work m ust use t he sam e SSI D. The SSI D is t he nam e of t he wireless net work. I t st ands for Service Set I Dent it y. • I f t wo wireless net works overlap, t hey should use different channels. Like radio st at ions or t elevision channels, each wireless net work uses a specific channel, or frequency, t o send and receive inform at ion. • Every wireless client in t he sam e wireless net work m ust use securit y com pat ible wit h t he AP. Securit y st ops unaut horized devices from using t he wireless net work. I t can also prot ect t he inform at ion t hat is sent in t he wireless net work. 10.3.1 Wireless Security Overview The following sect ions int roduce different t ypes of wireless securit y you can set up in t he wireless net work. 10.3.1.1 SSID Norm ally, t he AP act s like a beacon and regularly broadcast s t he SSI D in t he area. You can hide t he SSI D inst ead, in which case t he AP does not broadcast t he SSI D. I n addit ion, you should change t he default SSI D t o som et hing t hat is difficult t o guess. This t ype of securit y is fairly weak, however, because t here are ways for unaut horized devices t o get t he SSI D. I n addit ion, unaut horized devices can st ill see t he inform at ion t hat is sent in t he wireless net work. 10.3.1.2 MAC Address Filter Every wireless client has a unique ident ificat ion num ber, called a MAC address. 1 A MAC address is usually writ t en using t welve hexadecim al charact ers2 ; for exam ple, 00A0C5000002 or 84 1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. 2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG6503 User’s Guide Chapter 10 Wireless LAN 00: A0: C5: 00: 00: 02. To get t he MAC address for each wireless client , see t he appropriat e User ’s Guide or ot her docum ent at ion. You can use t he MAC address filt er t o t ell t he AP which wireless client s are allowed or not allowed t o use t he wireless net work. I f a wireless client is allowed t o use t he wireless net work, it st ill has t o have t he correct set t ings ( SSI D, channel, and securit y) . I f a wireless client is not allowed t o use t he wireless net work, it does not m at t er if it has t he correct set t ings. This t ype of securit y does not prot ect t he inform at ion t hat is sent in t he wireless net work. Furt herm ore, t here are ways for unaut horized devices t o get t he MAC address of an aut horized wireless client . Then, t hey can use t hat MAC address t o use t he wireless net work. 10.3.1.3 Encryption Wireless net works can use encrypt ion t o prot ect t he inform at ion t hat is sent in t he wireless net work. Encrypt ion is like a secret code. I f you do not know t he secret code, you cannot underst and t he m essage. The t ypes of encrypt ion you can choose depend on t he t ype of user aut hent icat ion. Table 30 Types of Encrypt ion for Each Type of Aut hent icat ion NO AUTHENTICATION W e a k e st No Securit y WEP WPA- PSK St r on ge st WPA2- PSK Usually, you should set up t he st rongest encrypt ion t hat every wireless client in t he wireless net work support s. Suppose t he wireless net work has t wo wireless client s. Device A only support s WEP, and device B support s WEP and WPA- PSK. Therefore, you should set up W EP in t he wireless net work. Not e: I t is recom m ended t hat w ireless net works use W PA- PSK or st ronger encrypt ion. I EEE 802.1x and WEP encrypt ion are bet t er t han none at all, but it is st ill possible for unaut horized devices t o figure out t he original inform at ion pret t y quickly. When you select W PA2 - PSK in your Rout er, you can also select an opt ion ( W PA Com pa t ible ) t o support WPA as well. I n t his case, if som e wireless client s support WPA and som e support WPA2, you should set up W PA2 - PSK ( depending on t he t ype of wireless net work login) and select t he W PA Com pa t ible opt ion in t he Rout er. Many t ypes of encrypt ion use a key t o prot ect t he inform at ion in t he wireless net work. The longer t he key, t he st ronger t he encrypt ion. Every wireless client in t he wireless net work m ust have t he sam e key. 10.3.1.4 WPS WiFi Prot ect ed Set up ( WPS) is an indust ry st andard specificat ion, defined by t he WiFi Alliance. WPS allows you t o quickly set up a wireless net work wit h st rong securit y, wit hout having t o configure securit y set t ings m anually. Depending on t he devices in your net work, you can eit her press a but t on ( on t he device it self, or in it s configurat ion ut ilit y) or ent er a PI N ( Personal I dent ificat ion Num ber) in t he devices. Then, t hey connect and set up a secure net work by t hem selves. See how t o set up a secure wireless net work using WPS in t he Sect ion 9.3 on page 73. NBG6503 User’s Guide 85 Chapter 10 Wireless LAN 10.3.1.5 WDS Wireless Dist ribut ion Syst em or WDS securit y is used bet ween bridged APs. I t is independent of t he securit y bet ween t he wired net works and t heir respect ive APs. I f you do not enable WDS securit y, t raffic bet ween APs is not encrypt ed. When WDS securit y is enabled, bot h APs m ust use t he sam e pre- shared key. 10.4 General Wireless LAN 2.4G/5G Screen Use t his screen t o enable t he Wireless LAN 2.4G or 5G, ent er t he SSI D and select t he wireless securit y m ode. Not e: I f you are configur ing t he Rout er from a com put er connect ed t o t he wireless LAN and you change t he Rout er’s SSI D, channel or securit y set t ings, you will lose your wireless connect ion when you press Apply t o confirm . You m ust t hen change t he wireless set t ings of your com put er t o m at ch t he Rout er’s new set t ings. Click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G t o open t he Ge ne r a l screen. Figure 60 Net work > Wireless LAN 2.4G/ 5G > General The following t able describes t he general wireless LAN labels in t his screen. Table 31 Net work > Wireless LAN 2.4G/ 5G > General LABEL DESCRIPTION Wireless Set up Wireless LAN Select t he radio but t on t o En a ble or D isa ble W ir e le ss LAN . You can t urn t he wireless LAN on or off using t he swit ch at t he rear panel of t he Rout er. 86 Net work Nam e( SSI D) ( Service Set I Dent it y) The SSI D ident ifies t he Service Set wit h which a wireless st at ion is associat ed. Wireless st at ions associat ing t o t he Rout er m ust have t he sam e SSI D. Ent er a descript ive nam e ( up t o 32 keyboard charact ers) for t he wireless LAN. Hide SSI D Select t his check box t o hide t he SSI D in t he out going beacon fram e so a st at ion cannot obt ain t he SSI D t hrough scanning using a sit e survey t ool. NBG6503 User’s Guide Chapter 10 Wireless LAN Table 31 Net work > Wireless LAN 2.4G/ 5G > General ( cont inued) LABEL DESCRIPTION Channel Select ion Set t he operat ing frequency/ channel depending on your part icular region. Select a channel from t he drop- down list box. The opt ions vary depending on t he frequency band and t he count ry you are in. Refer t o t he Connect ion Wizard chapt er for m ore inform at ion on channels. This opt ion is only available if Au t o Ch a n n e l Se le ct ion is disabled. Operat ing Channel This displays t he channel t he Rout er is current ly using. Securit y Securit y Mode Select W EP, W PA, W PA2 , W PA- PSK or W PA2 - PSK t o add securit y on t his wireless net work. The wireless client s which want t o associat e t o t his net work m ust have sam e wireless securit y set t ings as t he Rout er. Aft er you select t o use a securit y, addit ional opt ions appears in t his screen. See 10.4.2, and 10.4.3 sect ions. Or you can select N o Se cu r it y t o allow any client t o associat e t his net work wit hout aut hent icat ion. Note: If you enable the WPS function, only No Security, Static WEP, WPA-PSK and WPA2PSK are available in this field. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o reload t he previous configurat ion for t his screen. See t he rest of t his chapt er for inform at ion on t he ot her labels in t his screen. 10.4.1 No Security Select N o Se cur it y t o allow wireless st at ions t o com m unicat e wit h t he access point s wit hout any dat a encrypt ion. Not e: I f you do not enable any wireless securit y on your Rout er, your net work is accessible t o any wireless net working device t hat is wit hin range. Figure 61 Net work > Wireless LAN 2.4G/ 5G > General: No Securit y NBG6503 User’s Guide 87 Chapter 10 Wireless LAN The following t able describes t he labels in t his screen. Table 32 Net work > Wireless LAN 2.4G/ 5G > General: No Securit y LABEL DESCRIPTION Securit y Mode Choose N o Se cur it y from t he drop- down list box. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. Refer t o Table 31 on page 86 for descript ions of t he ot her labels in t his screen. 10.4.2 WEP Encryption WEP encrypt ion scram bles t he dat a t ransm it t ed bet ween t he wireless st at ions and t he access point s t o keep net work com m unicat ions privat e. I t encrypt s unicast and m ult icast com m unicat ions in a net work. Bot h t he wireless st at ions and t he access point s m ust use t he sam e WEP key. Your Rout er allows you t o configure up t o four 64- bit or 128- bit WEP keys but only one key can be enabled at any one t im e. I n order t o configure and enable WEP encrypt ion, click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G t o display t he Ge n e r a l screen. Select St a t ic W EP from t he Se cu r it y M ode list . Figure 62 Net work > Wireless LAN 2.4G/ 5G > General: St at ic WEP 88 NBG6503 User’s Guide Chapter 10 Wireless LAN The following t able describes t he wireless LAN securit y labels in t his screen. Table 33 Net work > Wireless LAN 2.4G/ 5G > General: St at ic WEP LABEL DESCRIPTION Securit y Mode Select St a t ic W EP t o enable dat a encrypt ion. PassPhrase Ent er a Passphrase ( up t o 26 print able charact ers) and click Generat e. A passphrase funct ions like a password. I n WEP securit y m ode, it is furt her convert ed by t he Rout er int o a com plicat ed st ring t hat is referred t o as t he “ key”. This key is request ed from all devices wishing t o connect t o a wireless net work. WEP Encrypt ion Select 6 4 - bit W EP or 1 2 8 - bit W EP. Aut hent icat ion Met hod Select Au t o or Sh a r e d Ke y from t he drop- down list box. This dict at es t he lengt h of t he securit y key t hat t he net work is going t o use. This field specifies whet her t he wireless client s have t o provide t he WEP key t o login t o t he wireless client . Keep t his set t ing at Au t o unless you want t o force a key verificat ion before com m unicat ion bet ween t he wireless client and t he Rout er occurs. Select Sh a r e d Ke y t o force t he client s t o provide t he WEP key prior t o com m unicat ion. ASCI I Select t his opt ion in order t o ent er ASCI I charact ers as WEP key. Hex Select t his opt ion in order t o ent er hexadecim al charact ers as a WEP key. The preceding " 0x" , t hat ident ifies a hexadecim al key, is ent ered aut om at ically. Key 1 t o Key 4 The WEP keys are used t o encrypt dat a. Bot h t he Rout er and t he wireless st at ions m ust use t he sam e WEP key for dat a t ransm ission. I f you chose 6 4 - bit W EP, t hen ent er any 5 ASCI I charact ers or 10 hexadecim al charact ers ( " 0- 9" , " A- F" ) . I f you chose 1 2 8 - bit W EP, t hen ent er 13 ASCI I charact ers or 26 hexadecim al charact ers ( " 0- 9" , " A- F" ) . You m ust configure at least one key, only one key can be act ivat ed at any one t im e. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. Refer t o Table 31 on page 86 for descript ions of t he ot her labels in t his screen. NBG6503 User’s Guide 89 Chapter 10 Wireless LAN 10.4.3 WPA-PSK/WPA2-PSK Click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G t o display t he Ge n e r a l screen. Select W PA- PSK or W PA2 - PSK from t he Se cu r it y M ode list . Figure 63 Net work > Wireless LAN 2.4G/ 5G> General: WPA- PSK/ WPA2- PSK The following t able describes t he labels in t his screen. Table 34 Net work > Wireless LAN 2.4G/ 5G > General: WPA- PSK/ WPA2- PSK LABEL DESCRIPTION Securit y Mode Select W PA- PSK or W PA2 - PSK t o enable dat a encrypt ion. WPA- PSK Com pat ible This field appears when you choose W PA- PSK2 as t he Se cu r it y M ode . Pre- Shared Key Check t his field t o allow wireless devices using W PA- PSK securit y m ode t o connect t o your Rout er. W PA- PSK/ W PA2 - PSK uses a sim ple com m on password for aut hent icat ion. Type a pre- shared key from 8 t o 63 case- sensit ive keyboard charact ers. Group Key Updat e Tim er The Gr ou p Ke y Upda t e Tim e r is t he rat e at which t he AP sends a new group key out t o all client s. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. Refer t o Table 31 on page 86 for descript ions of t he ot her labels in t his screen. 10.5 MAC Filter The MAC filt er screen allows you t o configure t he Rout er t o give exclusive access t o devices ( Allow) or exclude devices from accessing t he Rout er ( Deny) . Every Et hernet device has a unique MAC ( Media Access Cont rol) address. The MAC address is assigned at t he fact ory and consist s of six 90 NBG6503 User’s Guide Chapter 10 Wireless LAN pairs of hexadecim al charact ers, for exam ple, 00: A0: C5: 00: 00: 02. You need t o know t he MAC address of t he devices t o configure t his screen. To change your Rout er’s MAC filt er set t ings, click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > M AC Filt e r. The screen appears as shown. Figure 64 Net work > Wireless LAN 2.4G/ 5G > MAC Filt er The following t able describes t he labels in t his m enu. Table 35 Net work > Wireless LAN 2.4G/ 5G > MAC Filt er LABEL DESCRIPTION Access Policy Policy Define t he filt er act ion for t he list of MAC addresses in t he M AC Addr e ss t able. Select Allow t o perm it access t o t he Rout er, MAC addresses not list ed will be denied access t o t he Rout er. Select Re j e ct t o block access t o t he Rout er, MAC addresses not list ed will be allowed t o access t he Rout er Add a st at ion Mac Address Ent er t he MAC addresses of t he wireless st at ion t hat are allowed or denied access t o t he Rout er in t hese address fields. Ent er t he MAC addresses in a valid MAC address form at , t hat is, six hexadecim al charact er pairs, for exam ple, 12: 34: 56: 78: 9a: bc. Click Add. MAC Filt er Sum m ary Delet e Click t he delet e icon t o rem ove t he MAC address from t he list . MAC Address This is t he MAC address of t he wireless st at ion t hat are allowed or denied access t o t he Rout er. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. 10.6 Wireless LAN Advanced Screen Use t his screen t o allow wireless advanced feat ures, such as int ra- BSS net working and set t he RTS/ CTS Threshold NBG6503 User’s Guide 91 Chapter 10 Wireless LAN Click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > Adva nce d. The screen appears as shown. Figure 65 Net work > Wireless LAN > Advanced The following t able describes t he labels in t his screen. Table 36 Net work > Wireless LAN 2.4G/ 5G > Advanced LABEL DESCRIPTION RTS/ CTS Threshold Dat a wit h it s fram e size larger t han t his value will perform t he RTS ( Request To Send) / CTS ( Clear To Send) handshake. Fragm ent at ion Threshold The t hreshold ( num ber of byt es) for t he fragm ent at ion boundary for direct ed m essages. I t is t he m axim um dat a fragm ent size t hat can be sent . Ent er an even num ber. Enable I nt raBSS Traffic A Basic Service Set ( BSS) exist s when all com m unicat ions bet ween wireless client s or bet w een a wireless client and a wired net work client go t hrough one access point ( AP) . I nt ra- BSS t raffic is t raffic bet ween wireless client s in t he BSS. When I nt ra- BSS is enabled, wireless client A and B can access t he wired net work and com m unicat e wit h each ot her. When I nt ra- BSS is disabled, wireless client A and B can st ill access t he wired net work but cannot com m unicat e wit h each ot her. Out put Pow er Set t he out put power of t he Rout er in t his field. I f t here is a high densit y of APs in an area, decrease t he out put power of t he Rout er t o reduce int erference wit h ot her APs. Select one of t he following 1 0 0 % , 9 0 % , 7 5 % , 5 0 % , 2 5 % , 1 0 % or M in im u m . See t he product specificat ions for m ore inform at ion on your Rout er’s out put power. Net work Mode ( Wireless LAN 2.4G) Select 1 1 b/ g m ix e d m ode t o allow I EEE802.11b and I EEE802.11g com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 b on ly t o allow only I EEE 802.11b com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 g on ly t o allow only I EEE 802.11g com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 n on ly t o allow only I EEE 802.11n com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 b/ g/ n m ix e d m ode t o allow I EEE802.11b, I EEE802.11g and I EEE802.11n com pliant WLAN devices t o associat e wit h t he Rout er. 92 NBG6503 User’s Guide Chapter 10 Wireless LAN Table 36 Net work > Wireless LAN 2.4G/ 5G > Advanced ( cont inued) LABEL DESCRIPTION Net work Mode ( Wireless LAN 5G) Select 1 1 a / n m ix e d m ode t o allow I EEE802.11a and I EEE802.11n com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 a only t o allow only I EEE 802.11a com pliant WLAN devices t o associat e wit h t he Rout er. Select 1 1 a / a n / a c t o allow only I EEE 802.11a, I EEE802.11an and I EEE802.11ac com pliant WLAN devices t o associat e wit h t he Rout er. HT ( High Throughput ) Physical Mode - Use t he fields below t o configure t he 802.11 wireless environm ent of your Rout er. Operat ing Mode Choose t his according t o t he wireless m ode( s) used in your net work. M ix e d M ode - Select t his if t he wireless client s in your net work use different wireless m odes ( for exam ple, I EEE 802.11b/ g and I EEE 802.1n m odes) Gr e e n M ode - Select t his if t he wireless client s in your net work uses only one t ype of wireless m ode ( for exam ple, I EEEE 802.11 n only) Channel Bandw idt h Select t he channel bandwidt h you want t o use for your wireless net work. I t is recom m ended t hat you select 2 0 / 4 0 ( 20, 40, 20/ 40 MHz) . Select 20 MHz if you want t o lessen radio int erference wit h ot her wireless devices in your neighborhood. Guard I nt erval Select Au t o t o increase dat a t hroughput . However, t his m ay m ake dat a t ransfer m ore prone t o errors. Select Lon g t o priorit ize dat a int egrit y. This m ay be because your wireless net work is busy and congest ed or t he Rout er is locat ed in an environm ent prone t o radio int erference. Ext ension Channel This is set t o Au t o by default . I f you select 2 0 / 4 0 as your Ch a n n e l Ba n dw idt h , t he ext ension channel enables t he Rout er t o get higher dat a t hroughput . This also lowers radio int erference and t raffic. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. 10.7 Quality of Service (QoS) Screen The QoS screen allows you t o aut om at ically give a service ( such as VoI P and video) a priorit y level. Click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > QoS. The following screen appears. Figure 66 Net work > Wireless LAN > QoS NBG6503 User’s Guide 93 Chapter 10 Wireless LAN The following t able describes t he labels in t his screen. Table 37 Net work > Wireless LAN 2.4G/ 5G > QoS LABEL DESCRIPTION Enable WMM QoS Check t his t o have t he Rout er aut om at ically give a service a priorit y level according t o t he ToS value in t he I P header of packet s it sends. WMM QoS ( Wifi Mult iMedia Qualit y of Service) gives high priorit y t o voice and video, which m akes t hem run m ore sm oot hly. Apply Click Apply t o save your changes t o t he Rout er. Cancel Click Ca nce l t o reload t he previous configurat ion for t his screen. 10.8 WPS Screen Use t his screen t o enable/ disable WPS, view or generat e a new PI N num ber and check current WPS st at us. To open t his screen, click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > W PS t ab. Figure 67 Net work > Wireless LAN 2.4G/ 5G > WPS The following t able describes t he labels in t his screen. Table 38 Net work > Wireless LAN 2.4G/ 5G > WPS LABEL DESCRIPTION WPS Set up Enable WPS Select t his t o enable t he WPS feat ure. PI N Num ber This displays a PI N num ber last t im e syst em generat ed. Click Ge n e r a t e t o generat e a new PI N num ber. St at us St at us This displays Con figu r e d when t he Rout er has connect ed t o a wireless net work using WPS or when En a ble W PS is select ed and wireless or wireless securit y set t ings have been changed. The current wireless and wireless securit y set t ings also appear in t he screen. This displays Un con figu r e d if WPS is disabled and t here are no wireless or wireless securit y changes on t he Rout er or you click Re le a se _ Con figur a t ion t o rem ove t he configured wireless and wireless securit y set t ings. 94 NBG6503 User’s Guide Chapter 10 Wireless LAN Table 38 Net work > Wireless LAN 2.4G/ 5G > WPS ( cont inued) LABEL DESCRIPTION Release Configurat ion This but t on is only available when t he WPS st at us displays Con figu r e d. Click t his but t on t o rem ove all configured wireless and wireless securit y set t ings for WPS connect ions on t he Rout er. 802.11 Mode This is t he 802.11 m ode used. Only com pliant WLAN devices can associat e wit h t he Rout er. SSI D This is t he nam e of t he wireless net work. Securit y This is t he t ype of wireless securit y em ployed by t he net work. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. 10.9 WPS Station Screen Use t his screen when you want t o add a wireless st at ion using WPS. To open t his screen, click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > W PS St a t ion t ab. Not e: Not e: Aft er you click Pu sh Bu t t on on t his screen, you have t o press a sim ilar but t on in t he wireless st at ion ut ilit y wit hin 2 m inut es. To add t he second wireless st at ion, you have t o pr ess t hese but t ons on bot h device and t he wireless st at ion again aft er t he fir st 2 m inut es. Figure 68 Net work > Wireless LAN 2.4G/ 5G > WPS St at ion NBG6503 User’s Guide 95 Chapter 10 Wireless LAN The following t able describes t he labels in t his screen. Table 39 Net work > Wireless LAN > WPS St at ion LABEL DESCRIPTION Push But t on Use t his but t on when you use t he PBC ( Push But t on Configurat ion) m et hod t o configure wireless st at ions’s wireless set t ings. See Sect ion 9.3.1 on page 74. Click t his t o st art WPS- aware wireless st at ion scanning and t he wireless securit y inform at ion synchronizat ion. Or input st at ion’s PI N num ber Use t his but t on when you use t he PI N Configurat ion m et hod t o configure wireless st at ion’s wireless set t ings. See Sect ion 9.3.2 on page 75. Type t he sam e PI N num ber generat ed in t he wireless st at ion’s ut ilit y. Then click St a r t t o associat e t o each ot her and perform t he wireless securit y inform at ion synchronizat ion. 10.10 Scheduling Screen Use t his screen t o set t he t im es your wireless LAN is t urned on and off. Wireless LAN scheduling is disabled by default . The wireless LAN can be scheduled t o t urn on or off on cert ain days and at cert ain t im es. To open t his screen, click N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G > Sche duling t ab. Figure 69 Net work > Wireless LAN 2.4G/ 5G > Scheduling The following t able describes t he labels in t his screen. Table 40 Net work > Wireless LAN 2.4G/ 5G > Scheduling LABEL DESCRIPTION Wireless LAN Scheduling Enable Wireless LAN Scheduling Select t his t o enable Wireless LAN scheduling. Scheduling 96 NBG6503 User’s Guide Chapter 10 Wireless LAN Table 40 Net work > Wireless LAN 2.4G/ 5G > Scheduling ( cont inued) LABEL DESCRIPTION WLAN St at us Select On or Off t o specify whet her t he Wireless LAN is t urned on or off. This field works in conj unct ion wit h t he D a y and Ex ce pt for t he follow in g t im e s fields. Day Select Eve r yda y or t he specific days t o t urn t he Wireless LAN on or off. I f you select Eve r yda y you can not select any specific days. This field works in conj unct ion wit h t he Ex ce pt for t he follow in g t im e s field. For t he following t im es ( 24- Hour Form at ) Select a begin t im e using t he first set of h ou r and m inut e ( m in ) drop down boxes and select an end t im e using t he second set of h ou r and m inut e ( m in ) drop down boxes. I f you have chosen On earlier for t he WLAN St at us t he Wireless LAN will t urn on bet ween t he t wo t im es you ent er in t hese fields. I f you have chosen Off earlier for t he WLAN St at us t he Wireless LAN will t urn off bet ween t he t wo t im es you ent er in t hese fields. Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. 10.11 WDS Screen A Wireless Dist ribut ion Syst em is a wireless connect ion bet ween t wo or m ore APs. Use t his screen t o set t he operat ing m ode of your Rout er t o AP + Br idge or Br idge On ly and est ablish wireless links wit h ot her APs. You need t o know t he MAC address of t he peer device, which also m ust be in bridge m ode. Not e: You m ust enable t he sam e wireless securit y set t ings on t he Rout er and on all wireless client s t hat you want t o associat e wit h it . The WDS feat ure is only available in wireless 2.4G net work. Click N e t w or k > W ir e le ss LAN 2 .4 G > W D S t ab. The following screen opens wit h t he Ba sic Se t t in g set t o AP+ Br idge , and Se cur it y M ode set t o W EP. Figure 70 Net work > Wireless LAN 2.4G > WDS NBG6503 User’s Guide 97 Chapter 10 Wireless LAN The following t able describes t he labels in t his screen. Table 41 Net work > Wireless LAN 2.4G > WDS LABEL DESCRIPTION WDS Set up Basic Set t ings Select t he operat ing m ode for your Rout er. • • AP + Br idge - The Rout er funct ions as a bridge and access point sim ult aneously. Br idge - The Rout er act s as a wireless net work bridge and est ablishes wireless links wit h ot her APs. You need t o know t he MAC address of t he peer device, which also m ust be in bridge m ode. The Rout er can est ablish up t o five wireless links wit h ot her APs. Local MAC Address This is t he MAC address of your Rout er. Phy Mode Select t he Phy m ode you want t he Rout er t o use. This dict at es t he m axim um size of packet s during dat a t ransm ission. Rem ot e MAC Address This is t he MAC address of t he peer device t hat your Rout er want s t o m ake a bridge connect ion wit h. You can connect t o up t o 4 peer devices. Securit y EncrypType Select whet her t o use W EP, TKI P or AES encrypt ion for your WDS connect ion in t his field. Ot herwise, select N o Se cu r it y. 98 EncrypKey The Encryp key is used t o encrypt dat a. Peers m ust use t he sam e key for dat a t ransm ission. Apply Click Apply t o save your changes t o Rout er. Cancel Click Ca n ce l t o reload t he previous configurat ion for t his screen. NBG6503 User’s Guide C HAPTER 11 WAN 11.1 Overview This chapt er discusses t he Rout er’s W AN screens. Use t hese screens t o configure your Rout er for I nt ernet access. A WAN ( Wide Area Net work) connect ion is an out side connect ion t o anot her net work or t he I nt ernet . I t connect s your privat e net works such as a LAN ( Local Area Net work) and ot her net works, so t hat a com put er in one locat ion can com m unicat e wit h com put ers in ot her locat ions. Figure 71 LAN and WAN Router 11.2 What You Can Do • Use t he I nt e r ne t Conn e ct ion screen ( Sect ion 11.4 on page 102) t o ent er your I SP inform at ion and set how t he com put er acquires it s I P, DNS and WAN MAC addresses. • Use t he Adva n ce d screen ( Sect ion 11.5 on page 108) t o enable m ult icast ing, configure Windows net working and bridge. 11.3 What You Need To Know The inform at ion in t his sect ion can help you configure t he screens for your WAN connect ion, as well as enable/ disable som e advanced feat ures of your Rout er. NBG6503 User’s Guide 99 Chapter 11 WAN 11.3.1 Configuring Your Internet Connection Encapsulation Method Encapsulat ion is used t o include dat a from an upper layer prot ocol int o a lower layer prot ocol. To set up a WAN connect ion t o t he I nt ernet , you need t o use t he sam e encapsulat ion m et hod used by your I SP ( I nt ernet Service Provider) . I f your I SP offers a dial- up I nt ernet connect ion using PPPoE ( PPP over Et hernet ) or PPTP ( Point- t o- Point Tunneling Prot ocol) , t hey should also provide a usernam e and password ( and service nam e) for user aut hent icat ion. WAN IP Address The WAN I P address is an I P address for t he Rout er, which m akes it accessible from an out side net work. I t is used by t he Rout er t o com m unicat e wit h ot her devices in ot her net works. I t can be st at ic ( fixed) or dynam ically assigned by t he I SP each t im e t he Rout er t ries t o access t he I nt ernet . I f your I SP assigns you a st at ic WAN I P address, t hey should also assign you t he subnet m ask and DNS server I P address( es) ( and a gat eway I P address if you use t he Et hernet or ENET ENCAP encapsulat ion m et hod) . DNS Server Address Assignment Use Dom ain Nam e Syst em ( DNS) t o m ap a dom ain nam e t o it s corresponding I P address and vice versa, for inst ance, t he I P address of www.zyxel.com is 204.217.0.2. The DNS server is ext rem ely im port ant because wit hout it , you m ust know t he I P address of a com put er before you can access it . The Rout er can get t he DNS server addresses in t he following ways. The I SP t ells you t he DNS server addresses, usually in t he form of an inform at ion sheet , when you sign up. I f your I SP gives you DNS server addresses, m anually ent er t hem in t he DNS server fields. I f your I SP dynam ically assigns t he DNS server I P addresses ( along wit h t he Rout er’s WAN I P address) , set t he DNS server fields t o get t he DNS server address from t he I SP. WAN MAC Address The MAC address screen allows users t o configure t he WAN port 's MAC address by eit her using t he fact ory default or cloning t he MAC address from a com put er on your LAN. Choose Fa ct or y D e fa ult t o select t he fact ory assigned default MAC Address. Ot herwise, click Clon e t he com pu t e r 's M AC a ddr e ss - I P Addr e ss and ent er t he I P address of t he com put er on t he LAN whose MAC you are cloning. Once it is successfully configured, t he address will be copied t o configurat ion file. I t is recom m ended t hat you clone t he MAC address prior t o hooking up t he WAN Port . 100 NBG6503 User’s Guide Chapter 11 WAN 11.3.2 Multicast Tradit ionally, I P packet s are t ransm it t ed in one of eit her t wo ways - Unicast ( 1 sender - 1 recipient ) or Broadcast ( 1 sender - everybody on t he net work) . Mult icast delivers I P packet s t o a group of host s on t he net work - not everybody and not j ust 1. Figure 72 Mult icast Exam ple Router I n t he m ult icast exam ple above, syst em s A and D com prise one m ult icast group. I n m ult icast ing, t he server only needs t o send one dat a st ream and t his is delivered t o syst em s A and D. I GMP ( I nt ernet Group Mult icast Prot ocol) is a net work- layer prot ocol used t o est ablish m em bership in a m ult icast group - it is not used t o carry user dat a. The Rout er support s bot h I GMP version 1 ( I GM P- v1 ) and I GMP version 2 ( I GM P- v2 ) . At st art up, t he Rout er queries all direct ly connect ed net works t o gat her group m em bership. Aft er t hat , t he Rout er periodically updat es t his inform at ion. I P m ult icast ing can be enabled/ disabled on t he Rout er LAN and/ or WAN int erfaces in t he Web Configurat or ( LAN ; W AN ) . Select N one t o disable I P m ult icast ing on t hese int erfaces. NBG6503 User’s Guide 101 Chapter 11 WAN 11.4 Internet Connection Use t his screen t o change your Rout er’s I nt ernet access set t ings. Click W AN from t he Configurat ion m enu. The screen differs according t o t he encapsulat ion you choose. 11.4.1 Ethernet Encapsulation This screen displays when you select Et h e r ne t encapsulat ion. Figure 73 Net work > WAN > I nt ernet Connect ion: Et hernet Encapsulat ion The following t able describes t he labels in t his screen. Table 42 Net work > WAN > I nt ernet Connect ion: Et hernet Encapsulat ion LABEL DESCRIPTION I SP Param et ers for I nt ernet Access Encapsulat ion You m ust choose t he Et h e r n e t opt ion when t he WAN port is used as a regular Et hernet . WAN I P Address Assignm ent Get aut om at ically from I SP ( Default ) Select t his opt ion I f your I SP did not assign you a fixed I P address. This is t he default select ion. Use Fixed I P Address Select t his opt ion I f t he I SP assigned a fixed I P address. I P Address 102 Ent er your WAN I P address in t his field if you select ed Use Fix e d I P Addr e ss. NBG6503 User’s Guide Chapter 11 WAN Table 42 Net work > WAN > I nt ernet Connect ion: Et hernet Encapsulat ion ( cont inued) LABEL DESCRIPTION I P Subnet Mask Ent er t he I P Su bn e t M a sk in t his field. Gat eway I P Address Ent er a Ga t e w a y I P Addr e ss ( if your I SP gave you one) in t his field. MTU Size Ent er t he Maxim um Transm ission Unit ( MTU) or t he largest packet size per fram e t hat your Rout er can receive and process. WAN DNS Assignm ent First DNS Server Second DNS Server Select Fr om I SP if your I SP dynam ically assigns DNS server inform at ion ( and t he Rout er's WAN I P address) . The field t o t he right displays t he ( read- only) DNS server I P address t hat t he I SP assigns. Select Use r - D e fin e d if you have t he I P address of a DNS server. Ent er t he DNS server's I P address in t he field t o t he right . I f you chose Use r - D e fin e d, but leave t he I P address set t o 0.0.0.0, Use r - D e fin e d changes t o N on e aft er you click Apply. I f you set a second choice t o Use r - D e fin e d, and ent er t he sam e I P address, t he second Use r - D e fine d changes t o N on e aft er you click Apply. Select N on e if you do not want t o configure DNS servers. I f you do not configure a DNS server, you m ust know t he I P address of a com put er in order t o access it . WAN MAC Address The MAC address sect ion allows users t o configure t he WAN port 's MAC address by eit her using t he Rout er’s MAC address, copying t he MAC address from a com put er on your LAN or m anually ent ering a MAC address. Fact ory default Select Fa ct or y de fa u lt t o use t he fact ory assigned default MAC Address. Clone t he com put er ’s MAC address I P Address Select Clon e t h e com pu t e r ' s M AC a ddr e ss - I P Addr e ss and ent er t he I P address of t he com put er on t he LAN whose MAC you are cloning. Set WAN MAC Address Select t his opt ion and ent er t he MAC address you want t o use. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 11.4.2 PPPoE Encapsulation The Rout er support s PPPoE ( Point- t o- Point Prot ocol over Et hernet ) . PPPoE is an I ETF st andard ( RFC 2516) specifying how a personal com put er ( PC) int eract s wit h a broadband m odem ( DSL, cable, wireless, et c.) connect ion. The PPP ove r Et he r ne t opt ion is for a dial- up connect ion using PPPoE. For t he service provider, PPPoE offers an access and aut hent icat ion m et hod t hat works wit h exist ing access cont rol syst em s ( for exam ple Radius) . One of t he benefit s of PPPoE is t he abilit y t o let you access one of m ult iple net work services, a funct ion known as dynam ic service select ion. This enables t he service provider t o easily creat e and offer new I P services for individuals. Operat ionally, PPPoE saves significant effort for bot h you and t he I SP or carrier, as it requires no specific configurat ion of t he broadband m odem at t he cust om er sit e. By im plem ent ing PPPoE direct ly on t he Rout er ( rat her t han individual com put ers) , t he com put ers on t he LAN do not need PPPoE soft ware inst alled, since t he Rout er does t hat part of t he t ask. Furt herm ore, wit h NAT, all of t he LANs’ com put ers will have access. NBG6503 User’s Guide 103 Chapter 11 WAN This screen displays when you select PPPoE encapsulat ion. Figure 74 Net work > WAN > I nt ernet Connect ion: PPPoE Encapsulat ion The following t able describes t he labels in t his screen. Table 43 Net work > WAN > I nt ernet Connect ion: PPPoE Encapsulat ion LABEL DESCRIPTION I SP Param et ers for I nt ernet Access Encapsulat ion Select PPP ove r Et h e r n e t if you connect t o your I nt ernet via dial- up. User Nam e Type t he user nam e given t o you by your I SP. Password Type t he password associat ed wit h t he user nam e above. Ret ype t o Confirm Type your password again t o m ake sure t hat you have ent ered is correct ly. MTU Size Ent er t he Maxim um Transm ission Unit ( MTU) or t he largest packet size per fram e t hat your Rout er can receive and process. Nailed- Up Connect ion Select N a ile d- Up Con n e ct ion if you do not want t he connect ion t o t im e out . I dle Tim eout ( sec) This value specifies t he t im e in m inut es t hat elapses before t he rout er aut om at ically disconnect s from t he PPPoE server. WAN I P Address Assignm ent 104 NBG6503 User’s Guide Chapter 11 WAN Table 43 Net work > WAN > I nt ernet Connect ion: PPPoE Encapsulat ion ( cont inued) LABEL DESCRIPTION Get aut om at ically from I SP Select t his opt ion I f your I SP did not assign you a fixed I P address. This is t he default select ion. Use Fixed I P Address Select t his opt ion I f t he I SP assigned a fixed I P address. My WAN I P Address Ent er your WAN I P address in t his field if you select ed Use Fix e d I P Addr e ss. WAN DNS Assignm ent First DNS Server Second DNS Server Select Fr om I SP if your I SP dynam ically assigns DNS server inform at ion ( and t he Rout er's WAN I P address) . The field t o t he right displays t he ( read- only) DNS server I P address t hat t he I SP assigns. Select Use r - D e fin e d if you have t he I P address of a DNS server. Ent er t he DNS server's I P address in t he field t o t he right . I f you chose Use r - D e fin e d, but leave t he I P address set t o 0.0.0.0, Use r - D e fin e d changes t o N on e aft er you click Apply. I f you set a second choice t o Use r - D e fin e d, and ent er t he sam e I P address, t he second Use r - D e fin e d changes t o N on e aft er you click Apply. Select N on e if you do not want t o configure DNS servers. I f you do not configure a DNS server, you m ust know t he I P address of a com put er in order t o access it . WAN MAC Address The MAC address sect ion allow s users t o configure t he WAN port 's MAC address by using t he Rout er’s MAC address, copying t he MAC address from a com put er on your LAN or m anually ent ering a MAC address. Fact ory default Select Fa ct or y de fa u lt t o use t he fact ory assigned default MAC Address. Clone t he com put er ’s MAC address - I P Address Select Clon e t h e com pu t e r 's M AC a ddr e ss - I P Addr e ss and ent er t he I P address of t he com put er on t he LAN whose MAC you are cloning. Set WAN MAC Address Select t his opt ion and ent er t he MAC address you want t o use. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 11.4.3 PPTP Encapsulation Point- t o- Point Tunneling Prot ocol ( PPTP) is a net work prot ocol t hat enables secure t ransfer of dat a from a rem ot e client t o a privat e server, creat ing a Virt ual Privat e Net work ( VPN) using TCP/ I Pbased net works. PPTP support s on- dem and, m ult i- prot ocol and virt ual privat e net working over public net works, such as t he I nt ernet . NBG6503 User’s Guide 105 Chapter 11 WAN This screen displays when you select PPTP encapsulat ion. Figure 75 Net work > WAN > I nt ernet Connect ion: PPTP Encapsulat ion The following t able describes t he labels in t his screen. Table 44 Net work > WAN > I nt ernet Connect ion: PPTP Encapsulat ion LABEL DESCRIPTION I SP Param et ers for I nt ernet Access 106 Connect ion Type To configure a PPTP client , you m ust configure t he Use r N a m e and Pa ssw or d fields for a PPP connect ion and t he PPTP param et ers for a PPTP connect ion. User Nam e Type t he user nam e given t o you by your I SP. Password Type t he password associat ed wit h t he User Nam e above. Ret ype t o Confirm Type your password again t o m ake sure t hat you have ent ered is correct ly. NBG6503 User’s Guide Chapter 11 WAN Table 44 Net work > WAN > I nt ernet Connect ion: PPTP Encapsulat ion ( cont inued) LABEL DESCRIPTION Nailed- up Connect ion Select N a ile d- Up Con n e ct ion if you do not want t he connect ion t o t im e out . I dle Tim eout This value specifies t he t im e in m inut es t hat elapses before t he Rout er aut om at ically disconnect s from t he PPTP server. PPTP Configurat ion Server I P Address Type t he I P address of t he PPTP server. Get aut om at ically from I SP Select t his opt ion I f your I SP did not assign you a fixed I P address. This is t he default select ion. Use Fixed I P Address Select t his opt ion I f t he I SP assigned a fixed I P address. I P Address Ent er your WAN I P address in t his field if you select ed Use Fix e d I P Addr e ss. I P Subnet Mask Your Rout er will aut om at ically calculat e t he subnet m ask based on t he I P address t hat you assign. Unless you are im plem ent ing subnet t ing, use t he subnet m ask com put ed by t he Rout er. Gat eway I P Address Ent er a Ga t e w a y I P Addr e ss ( if your I SP gave you one) in t his field. WAN I P Address Assignm ent Get aut om at ically from I SP Select t his t o get your WAN I P address from your I SP. Use Fixed I P Address Select t his opt ion I f t he I SP assigned a fixed I P address. My WAN I P Address Ent er your WAN I P address in t his field if you select ed Use Fix e d I P Addr e ss. WAN DNS Assignm ent First DNS Server Second DNS Server Select Fr om I SP if your I SP dynam ically assigns DNS server inform at ion ( and t he Rout er's WAN I P address) . The field t o t he right displays t he ( read- only) DNS server I P address t hat t he I SP assigns. Select Use r - D e fin e d if you have t he I P address of a DNS server. Ent er t he DNS server's I P address in t he field t o t he right . I f you chose Use r - D e fine d, but leave t he I P address set t o 0.0.0.0, Use r - D e fin e d changes t o N on e aft er you click Apply. I f you set a second choice t o Use r - D e fine d, and ent er t he sam e I P address, t he second Use r - D e fin e d changes t o N on e aft er you click Apply. Select N on e if you do not want t o configure DNS servers. I f you do not configure a DNS server, you m ust know t he I P address of a com put er in order t o access it . WAN MAC Address The MAC address sect ion allows users t o configure t he WAN port 's MAC address by eit her using t he Rout er’s MAC address, copying t he MAC address from a com put er on your LAN or m anually ent ering a MAC address. Fact ory default Select Fa ct or y de fa ult t o use t he fact ory assigned default MAC Address. Clone t he com put er ’s MAC address I P Address Select Clon e t he com pu t e r 's M AC a ddr e ss - I P Addr e ss and ent er t he I P address of t he com put er on t he LAN whose MAC you are cloning. Set WAN MAC Address Select t his opt ion and ent er t he MAC address you want t o use. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide 107 Chapter 11 WAN 11.5 Advanced WAN Screen Use t his screen t o enable M ult ica st and enable Aut o- br idge . Not e: The cat egor ies show n in t his screen are independent of each ot her. To change your Rout er’s advanced WAN set t ings, click N e t w or k > W AN > Adva nce d. The screen appears as shown. Figure 76 Net work > WAN > Advanced The following t able describes t he labels in t his screen. Table 45 Net work > WAN > Advanced LABEL DESCRIPTION Mult icast Set up Mult icast Select I GM Pv1 / v2 t o enable m ult icast ing. This applies t o t raffic rout ed from t he WAN t o t he LAN. Select N on e t o disable t his feat ure. This m ay cause incom ing t raffic t o be dropped or sent t o all connect ed net work devices. Aut o- Subnet Set up None Select t his opt ion t o have t he Rout er do not hing when it get s a WAN I P address in t he range of 192.168.x.y ( where x and y are from zero t o nine) or in t he sam e subnet as t he LAN I P address. Enable Aut obridge m ode Select t his opt ion t o have t he Rout er swit ch t o bridge m ode aut om at ically when t he Rout er get s a WAN I P address in t he range of 192.168.x.y ( where x and y are from zero t o nine) no m at t er what t he LAN I P address is. Enable Aut o- I PChange m ode Select t his opt ion t o have t he Rout er change it s LAN I P address t o 10.0.0.1 or 192.168.1.1 accordingly when t he Rout er get s a dynam ic WAN I P address in t he sam e subnet as t he LAN I P address 192.168.1.1 or 10.0.0.1. The NAT, DHCP server and firewall funct ions on t he Rout er are st ill available in t hism ode. 108 Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide C HAPTER 12 LAN 12.1 Overview This chapt er describes how t o configure LAN set t ings. A Local Area Net work ( LAN) is a shared com m unicat ion syst em t o which m any com put ers are at t ached. A LAN is a com put er net work lim it ed t o t he im m ediat e area, usually t he sam e building or floor of a building. The LAN screens can help you configure a LAN DHCP server, m anage I P addresses, and part it ion your physical net work int o logical net works. Figure 77 LAN Exam ple The LAN screens can help you m anage I P addresses. 12.2 What You Can Do • Use t he I P screen ( Sect ion 12.4 on page 111) t o change t he I P address for your Rout er. • Use t he I P Alia s screen ( Sect ion 12.5 on page 111) t o have t he Rout er apply I P alias t o creat e LAN subnet s. NBG6503 User’s Guide 109 Chapter 12 LAN 12.3 What You Need To Know The act ual physical connect ion det erm ines whet her t he Rout er port s are LAN or WAN port s. There are t wo separat e I P net works, one inside t he LAN net work and t he ot her out side t he WAN net work as shown next . Figure 78 LAN and WAN I P Addresses The LAN param et ers of t he Rout er are preset in t he fact ory wit h t he following values: • I P address of 192.168.1.1 wit h subnet m ask of 255.255.255.0 ( 24 bit s) • DHCP server enabled wit h 32 client I P addresses st art ing from 192.168.1.33. These param et ers should work for t he m aj orit y of inst allat ions. I f your I SP gives you explicit DNS server address( es) , read t he em bedded Web Configurat or help regarding what fields need t o be configured. 12.3.1 IP Pool Setup The Rout er is pre- configured wit h a pool of 32 I P addresses st art ing from 192.168.1.33 t o 192.168.1.64. This configurat ion leaves 31 I P addresses ( excluding t he Rout er it self ) in t he lower range ( 192.168.1.2 t o 192.168.1.32) for ot her server com put ers, for inst ance, servers for m ail, FTP, TFTP, web, et c., t hat you m ay have. 12.3.2 LAN TCP/IP The Rout er has built- in DHCP server capabilit y t hat assigns I P addresses and DNS servers t o syst em s t hat support DHCP client capabilit y. 12.3.3 IP Alias I P alias allows you t o part it ion a physical net work int o different logical net works over t he sam e Et hernet int erface. The Rout er support s t hree logical LAN int erfaces via it s single physical Et hernet int erface wit h t he Rout er it self as t he gat eway for each LAN net work. 110 NBG6503 User’s Guide Chapter 12 LAN 12.4 LAN IP Screen Use t his screen t o change t he I P address for your Rout er. Click N e t w or k > LAN > I P. Figure 79 Net work > LAN > I P The following t able describes t he labels in t his screen. Table 46 Net work > LAN > I P LABEL DESCRIPTION I P Address Type t he I P address of your Rout er in dot t ed decim al not at ion. I P Subnet Mask The subnet m ask specifies t he net work num ber port ion of an I P address. Your Rout er will aut om at ically calculat e t he subnet m ask based on t he I P address t hat you assign. Unless you are im plem ent ing subnet t ing, use t he subnet m ask com put ed by t he Rout er. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 12.5 IP Alias Screen Use t his screen t o have t he Rout er apply I P alias t o creat e LAN subnet s. Click LAN > I P Alia s. Figure 80 Net work > LAN > I P Alias The following t able describes t he labels in t his screen. Table 47 Net work > LAN > I P Alias LABEL DESCRIPTION I P Alias Check t his t o enable I P alias. I P Address Type t he I P alias address of your Rout er in dot t ed decim al not at ion. NBG6503 User’s Guide 111 Chapter 12 LAN Table 47 Net work > LAN > I P Alias ( cont inued) 112 LABEL DESCRIPTION I P Subnet Mask The subnet m ask specifies t he net work num ber port ion of an I P address. Your Rout er will aut om at ically calculat e t he subnet m ask based on t he I P address t hat you assign. Unless you are im plem ent ing subnet t ing, use t he subnet m ask com put ed by t he Rout er. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide C HAPTER 13 DHCP Server 13.1 Overview DHCP ( Dynam ic Host Configurat ion Prot ocol, RFC 2131 and RFC 2132) allows individual client s t o obt ain TCP/ I P configurat ion at st art - up from a server. You can configure t he Rout er’s LAN as a DHCP server or disable it . When configured as a server, t he Rout er provides t he TCP/ I P configurat ion for t he client s. I f DHCP service is disabled, you m ust have anot her DHCP server on your LAN, or else t he com put er m ust be m anually configured. 13.2 What You Can Do • Use t he Ge n e r a l ( Sect ion 13.3 on page 113) screen t o enable t he DHCP server. • Use t he Adva nce d ( Sect ion 13.4 on page 114) screen t o assign I P addresses on t he LAN t o specific individual com put ers based on t heir MAC Addresses. 13.3 General Screen Use t his screen t o enable t he DHCP server. Click N e t w or k > D H CP Se r ve r. The following screen displays. Figure 81 Net work > DHCP Server > General The following t able describes t he labels in t his screen. Table 48 Net work > DHCP Server > General LABEL DESCRIPTION Enable DHCP Server Enable or Disable DHCP for LAN. I P Pool St art ing Address This field specifies t he first of t he cont iguous addresses in t he I P address pool for LAN. NBG6503 User’s Guide 113 Chapter 13 DHCP Server Table 48 Net work > DHCP Server > General ( cont inued) LABEL DESCRIPTION Pool Size This field specifies t he size, or count of t he I P address pool for LAN. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 13.4 Advanced Screen This screen allows you t o assign I P addresses on t he LAN t o specific individual com put ers based on t heir MAC addresses. You can also use t his screen t o configure t he DNS server inform at ion t hat t he Rout er sends t o t he DHCP client s. To change your Rout er’s st at ic DHCP set t ings, click N e t w or k > D H CP Se r ve r > Adva nce d. The following screen displays. Figure 82 Net work > DHCP Server > Advanced The following t able describes t he labels in t his screen. Table 49 Net work > DHCP Server > Advanced LABEL DESCRIPTION LAN St at ic DHCP Table 114 This is t he index num ber of t he st at ic I P t able ent ry ( row) . MAC Address Type t he MAC address ( wit h colons) of a com put er on your LAN. NBG6503 User’s Guide Chapter 13 DHCP Server Table 49 Net work > DHCP Server > Advanced ( cont inued) LABEL DESCRIPTION I P Address Type t he LAN I P address of a com put er on your LAN. DNS Server DNS Servers Assigned by DHCP Server The Rout er passes a DNS ( Dom ain Nam e Syst em ) server I P address ( in t he order you specify here) t o t he DHCP client s. The Rout er only passes t his inform at ion t o t he LAN DHCP client s when you select t he Ena ble D H CP Se r ve r check box. When you clear t he En a ble D H CP Se r ve r check box, DHCP service is disabled and you m ust have anot her DHCP sever on your LAN, or else t he com put ers m ust have t heir DNS server addresses m anually configured. First DNS Server Select Fr om I SP if your I SP dynam ically assigns DNS server inform at ion ( and t he Rout er's WAN I P address) . The field t o t he right displays t he ( read- only) DNS server I P address t hat t he I SP assigns. Second DNS Server Select Use r - D e fin e d if you have t he I P address of a DNS server. Ent er t he DNS server's I P address in t he field t o t he right . I f you chose Use r - D e fin e d, but leave t he I P address set t o 0.0.0.0, Use r - D e fin e d changes t o N on e aft er you click Apply. I f you set a second choice t o Use r - D e fine d, and ent er t he sam e I P address, t he second Use r - D e fine d changes t o N on e aft er you click Apply. Select D N S Re la y t o have t he Rout er act as a DNS proxy. The Rout er's LAN I P address displays in t he field t o t he right ( read- only) . The Rout er t ells t he DHCP client s on t he LAN t hat t he Rout er it self is t he DNS server. When a com put er on t he LAN sends a DNS query t o t he Rout er, t he Rout er forwards t he query t o t he Rout er's syst em DNS server ( configured in t he W AN > I n t e r n e t Con n e ct ion screen) and relays t he response back t o t he com put er. You can only select D N S Re la y for one of t he t hree servers; if you select D N S Re la y for a second or t hird DNS server, t hat choice changes t o N on e aft er you click Apply. Select N on e if you do not want t o configure DNS servers. I f you do not configure a DNS server, you m ust know t he I P address of a com put er in order t o access it . Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide 115 C HAPTER 14 Network Address Translation (NAT) 14.1 Overview NAT ( Net work Address Translat ion - NAT, RFC 1631) is t he t ranslat ion of t he I P address of a host in a packet . For exam ple, t he source address of an out going packet , used wit hin one net work is changed t o a different I P address known wit hin anot her net work. Each packet has t wo addresses – a source address and a dest inat ion address. For out going packet s, NAT m aps privat e ( local) I P addresses t o globally unique ones required for com m unicat ion wit h host s on ot her net works. I t replaces t he original I P source address in each packet and t hen forwards it t o t he I nt ernet . The Rout er keeps t rack of t he original addresses and port num bers so incom ing reply packet s can have t heir original values rest ored. The following figure illust rat es t his. Figure 83 NAT Exam ple For m ore inform at ion on I P address t ranslat ion, refer t o RFC 1631, The I P Net work Address Translat or ( NAT) . 14.2 What You Can Do • Use t he Ge n e r a l screen ( Sect ion 14.3 on page 118) t o enable NAT and set a default server. • Use t he Applica t ion screen ( Sect ion 14.4 on page 118) o forward incom ing service request s t o t he server( s) on your local net work. • Use t he Adva nce d screen ( Sect ion 14.5 on page 120) t o change your Rout er’s t rigger port set t ings. NBG6503 User’s Guide 117 Chapter 14 Network Address Translation (NAT) 14.3 General NAT Screen Use t his screen t o enable NAT and set a default server. Click N e t w or k > N AT > Ge n e r a l t o open t he following screen. Figure 84 Net work > NAT > General The following t able describes t he labels in t his screen. Table 50 Net work > NAT > General LABEL DESCRIPTION NAT Set up Enable Net work Address Translat ion Net work Address Translat ion ( NAT) allows t he t ranslat ion of an I nt ernet prot ocol address used wit hin one net work ( for exam ple a privat e I P address used in a local net work) t o a different I P address known wit hin anot her net work ( for exam ple a public I P address used on t he I nt ernet ) . Select t he check box t o enable NAT. Default Server Set up Server I P Address I n addit ion t o t he servers for specified services, NAT support s a default server. A default server receives packet s from port s t hat are not specified in t he Applica t ion screen. I f you do not assign a D e fa u lt Se r ve r I P a ddr e ss, t he Rout er discards all packet s received for port s t hat are not specified in t he Applica t ion screen or rem ot e m anagem ent . Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 14.4 NAT Application Screen Use t he Applica t ion screen t o forward incom ing service request s t o t he server( s) on your local net work. You m ay ent er a single port num ber or a range of port num bers t o be forwarded, and t he local I P address of t he desired server. The port num ber ident ifies a service; for exam ple, web service is on port 80 and FTP on port 21. I n som e cases, such as for unknown services or where one server can support m ore t han one service ( for exam ple bot h FTP and web service) , it m ight be bet t er t o specify a range of port num bers. I n addit ion t o t he servers for specified services, NAT support s a default server. A service request t hat does not have a server explicit ly designat ed for it is forwarded t o t he default server. I f t he default is not defined, t he service request is sim ply discarded. 118 NBG6503 User’s Guide Chapter 14 Network Address Translation (NAT) Not e: Many resident ial broadband I SP account s do not allow you t o run any server processes ( such as a Web or FTP server) from your locat ion. Your I SP m ay periodically check for servers and m ay suspend your account if it discovers any act ive services at your locat ion. I f you are unsure, refer t o your I SP. Port forwarding allows you t o define t he local servers t o which t he incom ing services will be forwarded. To change your Rout er’s port forwarding set t ings, click N e t w or k > N AT > Applica t ion . The screen appears as shown. Not e: I f you do not assign a D e fa u lt Se r ve r I P a ddr e ss in t he N AT > Ge n e r a l screen, t he Rout er discards all packet s received for port s t hat are not specified in t his screen or rem ot e m anagem ent . Refer t o Appendix D on page 223 for port num bers com m only used for part icular services. Figure 85 Net work > NAT > Applicat ion The following t able describes t he labels in t his screen. Table 51 Net work > NAT > Applicat ion LABEL DESCRIPTION Add Applicat ion Rule Act ive Select t he check box t o enable t his rule and t he request ed service can be forwarded t o t he host wit h a specified int ernal I P address. Clear t he checkbox t o disallow forwarding of t hese port s t o an inside server wit hout having t o delet e t he ent ry. Service Nam e Type a nam e ( of up t o 31 print able charact ers) t o ident ify t his rule in t he first field next t o Se r vice N a m e . Ot herwise, select a predefined service in t he second field next t o Se r vice N a m e . The predefined service nam e and port num ber( s) will display in t he Se r vice N a m e and Por t fields. Port Type a port num ber( s) t o define t he service t o be forwarded t o t he specified server. To specify a range of port s, ent er a hyphen ( - ) bet ween t he first port and t he last port , such as 10- 20. To specify t wo or m ore non- consecut ive port num bers, separat e t hem by a com m a wit hout spaces, such as 123,567. Server I P Address NBG6503 User’s Guide Type t he I P address of t he server on your LAN t hat receives packet s from t he port ( s) specified in t he Por t field. 119 Chapter 14 Network Address Translation (NAT) Table 51 Net work > NAT > Applicat ion ( cont inued) LABEL DESCRIPTION Applicat ion Rules Sum m ary This is t he num ber of an individual port forwarding server ent ry. Act ive This icon is t urned on when t he rule is enabled. Nam e This field displays a nam e t o ident ify t his rule. Port This field displays t he port num ber( s) . Server I P Address This field displays t he inside I P address of t he server. Modify Click t he Edit icon t o display and m odify an exist ing rule set t ing in t he fields under Add Applica t ion Ru le . Click t he Re m ove icon t o delet e a rule. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. 14.5 NAT Advanced Screen Som e services use a dedicat ed range of port s on t he client side and a dedicat ed range of port s on t he server side. Wit h regular port forwarding you set a forwarding port in NAT t o forward a service ( com ing in from t he server on t he WAN) t o t he I P address of a com put er on t he client side ( LAN) . The problem is t hat port forwarding only forwards a service t o a single LAN I P address. I n order t o use t he sam e service on a different LAN com put er, you have t o m anually replace t he LAN com put er's I P address in t he forwarding port wit h anot her LAN com put er's I P address. Trigger port forwarding solves t his problem by allowing com put ers on t he LAN t o dynam ically t ake t urns using t he service. The Rout er records t he I P address of a LAN com put er t hat sends t raffic t o t he WAN t o request a service wit h a specific port num ber and prot ocol ( a " t rigger" port ) . When t he Rout er's WAN port receives a response wit h a specific port num ber and prot ocol ( " incom ing" port ) , t he Rout er forwards t he t raffic t o t he LAN I P address of t he com put er t hat sent t he request . Aft er t hat com put er ’s connect ion for t hat service closes, anot her com put er on t he LAN can use t he service in t he sam e m anner. This way you do not need t o configure a new I P address each t im e you want a different LAN com put er t o use t he applicat ion. To change your Rout er’s t rigger port set t ings, click N e t w or k > N AT > Adva nce d. The screen appears as shown. 120 NBG6503 User’s Guide Chapter 14 Network Address Translation (NAT) Not e: Only one LAN com put er can use a t rigger port ( range) at a t im e. Figure 86 Net work > NAT > Advanced The following t able describes t he labels in t his screen. Table 52 Net work > NAT > Advanced LABEL DESCRIPTION This is t he rule index num ber ( read- only) . Nam e Type a unique nam e ( up t o 15 charact ers) for ident ificat ion purposes. All charact ers are perm it t ed - including spaces. I ncom ing I ncom ing is a port ( or a range of port s) t hat a server on t he WAN uses when it sends out a part icular service. The Rout er forwards t he t raffic wit h t his port ( or range of port s) t o t he client com put er on t he LAN t hat request ed t he service. St art Port Type a port num ber or t he st art ing port num ber in a range of port num bers. End Port Type a port num ber or t he ending port num ber in a range of port num bers. Trigger The t rigger port is a port ( or a range of port s) t hat causes ( or t riggers) t he Rout er t o record t he I P address of t he LAN com put er t hat sent t he t raffic t o a server on t he WAN. St art Port Type a port num ber or t he st art ing port num ber in a range of port num bers. End Port Type a port num ber or t he ending port num ber in a range of port num bers. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide 121 Chapter 14 Network Address Translation (NAT) 14.5.1 Trigger Port Forwarding Example The following is an exam ple of t rigger port forwarding. Figure 87 Trigger Port Forwarding Process: Exam ple Router Router Jane request s a file from t he Real Audio server ( port 7070) . Port 7070 is a “ t rigger ” port and causes t he Rout er t o record Jane’s com put er I P address. The Rout er associat es Jane's com put er I P address wit h t he " incom ing" port range of 6970- 7170. The Real Audio server responds using a port num ber ranging bet ween 6970- 7170. The Rout er forwards t he t raffic t o Jane’s com put er I P address. Only Jane can connect t o t he Real Audio server unt il t he connect ion is closed or t im es out . The Rout er t im es out in t hree m inut es wit h UDP ( User Dat agram Prot ocol) , or t wo hours wit h TCP/ I P ( Transfer Cont rol Prot ocol/ I nt ernet Prot ocol) . 14.5.2 Two Points To Remember About Trigger Ports 122 Trigger event s only happen on dat a t hat is going com ing from inside t he Rout er and going t o t he out side. I f an applicat ion needs a cont inuous dat a st ream , t hat port ( range) will be t ied up so t hat anot her com put er on t he LAN can’t t rigger it . NBG6503 User’s Guide C HAPTER 15 Dynamic DNS 15.1 Overview Dynam ic DNS ( DDNS) services let you use a dom ain nam e wit h a dynam ic I P address. 15.2 What You Can Do Use t he D yn a m ic D N S screen ( Sect ion 15.4 on page 123) t o enable DDNS and configure t he DDNS set t ings on t he Rout er. 15.3 What You Need To Know Dynam ic DNS allows you t o updat e your current dynam ic I P address wit h one or m any dynam ic DNS services so t hat anyone can cont act you ( in Net Meet ing, CU- SeeMe, et c.) . You can also access your FTP server or Web sit e on your own com put er using a dom ain nam e ( for inst ance m yhost .dhs.org, where m yhost is a nam e of your choice) t hat will never change inst ead of using an I P address t hat changes each t im e you reconnect . Your friends or relat ives will always be able t o call you even if t hey don't know your I P address. 15.4 Dynamic DNS Screen To change your Rout er’s DDNS, click N e t w or k > D D N S. The screen appears as shown. Figure 88 Net work > DDNS NBG6503 User’s Guide 123 Chapter 15 Dynamic DNS The following t able describes t he labels in t his screen. Table 53 Net work > DDNS 124 LABEL DESCRIPTION Enable Dynam ic DNS Select t his check box t o use dynam ic DNS. Service Provider Select t he nam e of your Dynam ic DNS service provider. Host Nam e Ent er a host nam es in t he field provided. You can specify up t o t wo host nam es in t he field separat ed by a com m a ( " ," ) . User Nam e Ent er your user nam e. Password Ent er t he password assigned t o you. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide C HAPTER 16 Static Route 16.1 Overview This chapt er shows you how t o configure st at ic rout es for your Rout er. Each rem ot e node specifies only t he net work t o which t he gat eway is direct ly connect ed, and t he Rout er has no knowledge of t he net works beyond. For inst ance, t he Rout er knows about net work N2 in t he following figure t hrough rem ot e node Rout er 1. However, t he Rout er is unable t o rout e a packet t o net work N3 because it doesn't know t hat t here is a rout e t hrough t he sam e rem ot e node Rout er 1 ( via gat eway Rout er 2) . The st at ic rout es are for you t o t ell t he Rout er about t he net works beyond t he rem ot e nodes. Figure 89 Exam ple of St at ic Rout ing Topology 16.2 What You Can Do Use t he I P St a t ic Rout e screen ( Sect ion 16.3 on page 126) t o view, add and delet e rout es. NBG6503 User’s Guide 125 Chapter 16 Static Route 16.3 IP Static Route Screen Click N e t w or k > St a t ic Rou t e t o open t he I P St a t ic Rout e screen. Figure 90 Net work > St at ic Rout e The following t able describes t he labels in t his screen. Table 54 Net work > St at ic Rout e LABEL DESCRIPTION St at ic Rout ing Set t ings Rout e Nam e Ent er a t he nam e t hat describes or ident ifies t his rout e. Dest inat ion I P Address Ent er t he I P net work address of t he final dest inat ion. I P Subnet Net m ask This is t he subnet t o which t he rout e’s final dest inat ion belongs. Gat eway I P Address Ent er t he t he I P address of t he gat eway. Met ric Assign a num ber t o ident ify t he rout e. Add Rule Click t his t o add t he I P st at ic rout e. Applicat ion Rules Sum m ary 126 No. This is t he num ber of an individual st at ic rout e. Act ive The rules are always on and t his is indicat ed by t he icon. Nam e This is t he nam e t hat describes or ident ifies t his rout e. NBG6503 User’s Guide Chapter 16 Static Route Table 54 Net work > St at ic Rout e LABEL DESCRIPTION Dest inat ion This param et er specifies t he I P net work address of t he final dest inat ion. Rout ing is always based on net work num ber. Gat eway This is t he I P address of t he gat eway. The gat eway is a rout er or swit ch on t he sam e net work segm ent as t he device's LAN or WAN port . The gat eway helps forward packet s t o t heir dest inat ions. Met ric This is t he num ber assigned t o t he rout e. Delet e Click t he Delet e icon t o rem ove a st at ic rout e from t he Rout er. A window displays asking you t o confirm t hat you want t o delet e t he rout e. NBG6503 User’s Guide 127 C HAPTER 17 Firewall 17.1 Overview This chapt er shows you how t o enable and configure t he firewall t hat prot ect s your Rout er and your LAN from unwant ed or m alicious t raffic. Enable t he firewall t o prot ect your LAN com put ers from at t acks by hackers on t he I nt ernet and cont rol access bet ween t he LAN and WAN. By default t he firewall: • allows t raffic t hat originat es from your LAN com put ers t o go t o all of t he net works. • blocks t raffic t hat originat es on t he ot her net works from going t o t he LAN. The following figure illust rat es t he default firewall act ion. User A can init iat e an I M ( I nst ant Messaging) session from t he LAN t o t he WAN ( 1) . Ret urn t raffic for t his session is also allowed ( 2) . However ot her t raffic init iat ed from t he WAN is blocked ( 3 and 4) . Figure 91 Default Firewall Act ion 17.2 What You Can Do • Use t he Ge n e r a l ( Sect ion 17.4 on page 130) screen t o enable or disable t he Rout er’s firewall. • Use t he Se r vice s screen ( Sect ion 17.5 on page 131) screen enable service blocking, ent er/ delet e/ m odify t he services you want t o block and t he dat e/ t im e you want t o block t hem . NBG6503 User’s Guide 129 Chapter 17 Firewall 17.3 What You Need To Know The Rout er’s firewall feat ure physically separat es t he LAN and t he WAN and act s as a secure gat eway for all dat a passing bet ween t he net works. I t is designed t o prot ect against Denial of Service ( DoS) at t acks when act ivat ed ( click t he Ge n e r a l t ab under Fir e w a ll and t hen click t he Ena ble Fir e w a ll check box) . The Rout er's purpose is t o allow a privat e Local Area Net work ( LAN) t o be securely connect ed t o t he I nt ernet . The Rout er can be used t o prevent t heft , dest ruct ion and m odificat ion of dat a, as well as log event s, which m ay be im port ant t o t he securit y of your net work. The Rout er is inst alled bet ween t he LAN and a broadband m odem connect ing t o t he I nt ernet . This allows it t o act as a secure gat eway for all dat a passing bet ween t he I nt ernet and t he LAN. The Rout er has one Et hernet WAN port and four Et hernet LAN port s, which are used t o physically separat e t he net work int o t wo areas.The WAN ( Wide Area Net work) port at t aches t o t he broadband ( cable or DSL) m odem t o t he I nt ernet . The LAN ( Local Area Net work) port at t aches t o a net work of com put ers, which needs securit y from t he out side world. These com put ers will have access t o I nt ernet services such as e- m ail, FTP and t he World Wide Web. However, "inbound access" is not allowed ( by default ) unless t he rem ot e host is aut horized t o use a specific service. 17.4 General Firewall Screen Use t his screen t o enable or disable t he Rout er’s firewall, and set up firewall logs. Click Se cu r it y > Fir e w a ll t o open t he Ge ne r a l screen. Figure 92 Securit y > Firewall > General The following t able describes t he labels in t his screen. Table 55 Securit y > Firewall > General 130 LABEL DESCRIPTION Enable Firewall Select t his check box t o act ivat e t he firewall. The Rout er perform s access cont rol and prot ect s against Denial of Service ( DoS) at t acks when t he firewall is act ivat ed. Apply Click Apply t o save t he set t ings. Reset Click Re se t t o st art configuring t his screen again. NBG6503 User’s Guide Chapter 17 Firewall 17.5 Services Screen I f an out side user at t em pt s t o probe an unsupport ed port on your Rout er, an I CMP response packet is aut om at ically ret urned. This allows t he out side user t o know t he Rout er exist s. Use t his screen t o prevent t he I CMP response packet from being sent . This keeps out siders from discovering your Rout er when unsupport ed port s are probed. You can also use t his screen t o enable service blocking, ent er/ delet e/ m odify t he services you want t o block and t he dat e/ t im e you want t o block t hem . Click Se cur it y > Fir e w a ll > Se r vice s. The screen appears as shown next . Figure 93 Securit y > Firewall > Services The following t able describes t he labels in t his screen. Table 56 Securit y > Firewall > Services LABEL DESCRIPTION I CMP I nt ernet Cont rol Message Prot ocol is a m essage cont rol and error- report ing prot ocol bet ween a host server and a gat eway t o t he I nt ernet . I CMP uses I nt ernet Prot ocol ( I P) dat agram s, but t he m essages are processed by t he TCP/ I P soft ware and direct ly apparent t o t he applicat ion user. Respond t o Ping on The Rout er will not respond t o any incom ing Ping request s when D isa ble is select ed. Select LAN t o reply t o incom ing LAN Ping request s. Select W AN t o reply t o incom ing WAN Ping request s. Ot herwise select LAN & W AN t o reply t o all incom ing LAN and WAN Ping request s. Apply Click Apply t o save t he set t ings. NBG6503 User’s Guide 131 Chapter 17 Firewall Table 56 Securit y > Firewall > Services ( cont inued) LABEL DESCRIPTION Enable Firewall Rule Enable Firewall Rule Select t his check box t o act ivat e t he firewall rules t hat you define ( see Add Fir e w a ll Rule below) Apply Click Apply t o save t he set t ings. Add Firewall Rule Service Nam e Ent er a nam e t hat ident ifies or describes t he firewall rule. MAC Address Ent er t he MAC address of t he com put er for which t he firewall rule applies. Dest I P Address Ent er t he I P address of t he com put er t o which t raffic for t he applicat ion or service is ent ering. The Rout er applies t he firewall rule t o t raffic init iat ing from t his com put er. Source I P Address Ent er t he I P address of t he com put er t hat init ializes t raffic for t he applicat ion or service. Prot ocol Select t he prot ocol ( TCP, UD P, I CM P or N on e ) used t o t ransport t he packet s for which you want t o apply t he firewall rule. Dest Port Range Ent er t he port num ber/ range of t he dest inat ion t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Source Port Range Ent er t he port num ber/ range of t he source t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Add Rule Click Add t o save t he firewall rule. The Rout er applies t he firewall rule t o t raffic init iat ing from t his com put er. Firewall Rule This is your firewall rule num ber. The ordering of your rules is im port ant as rules are applied in t urn. Service Nam e This is a nam e t hat ident ifies or describes t he firewall rule. MAC Address This is t he MAC address of t he com put er for which t he firewall rule applies. Dest I P Address This is t he I P address of t he com put er t o which t raffic for t he applicat ion or service is ent ering. Source I P Address This is t he I P address of t he com put er from which t raffic for t he applicat ion or service is init ialized. Prot ocol This is t he prot ocol ( TCP, UD P, I CM P or N on e ) used t o t ransport t he packet s for which you want t o apply t he firewall rule. Dest Port Range This is t he port num ber/ range of t he dest inat ion t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Source Port Range This is t he port num ber/ range of t he source t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Act ion D r op - Traffic m at ching t he condit ions of t he firewall rule are st opped. Delet e Click t his t o rem ove t he firewall rule. Reset Click Re se t t o st art configuring t his screen again. See Appendix D on page 223 for com m only used services and port num bers. 132 NBG6503 User’s Guide C HAPTER 18 Content Filter 18.1 Overview This chapt er provides a brief overview of cont ent filt ering using t he em bedded web GUI . I nt ernet cont ent filt ering allows you t o creat e and enforce I nt ernet access policies t ailored t o your needs. Cont ent filt ering is t he abilit y t o block cert ain web feat ures or specific URL keywords. 18.2 What You Can Do Use t he Cont e n t Filt e r ( Sect ion 18.4 on page 134) screen t o rest rict web feat ures, add keywords for blocking and designat e a t rust ed com put er. 18.3 What You Need To Know Cont ent filt ering allows you t o block cert ain web feat ures, such as cookies, and/ or block access t o specific web sit es. For exam ple, you can configure one policy t hat blocks John Doe’s access t o art s and ent ert ainm ent web pages. 18.3.1 Content Filtering Profiles A cont ent filt ering profile convenient ly st ores your cust om set t ings for t he following feat ures. Restrict Web Features The Rout er can disable web proxies and block web feat ures such as Act iveX cont rols, Java applet s and cookies. Keyword Blocking URL Checking The Rout er checks t he URL’s dom ain nam e ( or I P address) and file pat h separat ely when perform ing keyword blocking. The URL’s dom ain nam e or I P address is t he charact ers t hat com e before t he first slash in t he URL. For exam ple, wit h t he URL www.zyxel.com .t w/ news/ pressroom .php, t he dom ain nam e is www.zyxel.com .t w. The file pat h is t he charact ers t hat com e aft er t he first slash in t he URL. For exam ple, wit h t he URL www.zyxel.com .t w/ news/ pressroom .php, t he file pat h is news/ pressroom .php. NBG6503 User’s Guide 133 Chapter 18 Content Filter Since t he Rout er checks t he URL’s dom ain nam e ( or I P address) and file pat h separat ely, it will not find it em s t hat go across t he t wo. For exam ple, wit h t he URL www.zyxel.com .t w/ news/ pressroom .php, t he Rout er would find “ t w” in t he dom ain nam e ( www.zyxel.com .t w) . I t would also find “ news” in t he file pat h ( news/ pressroom .php) but it would not find “ t w/ news”. 18.4 Content Filter Screen Use t his screen t o rest rict web feat ures, add keywords for blocking and designat e a t rust ed com put er. Click Se cur it y > Con t e nt Filt e r t o open t he Cont e nt Filt e r screen. Figure 94 Securit y > Cont ent Filt er > Cont ent Filt er The following t able describes t he labels in t his screen. Table 57 Securit y > Cont ent Filt er > Cont ent Filt er LABEL DESCRIPTION Trust ed I P Set up To enable t his feat ure, t ype an I P address of any one of t he com put ers in your net work t hat you want t o have as a t rust ed com put er. This allows t he t rust ed com put er t o have full access t o all feat ures t hat are configured t o be blocked by cont ent filt ering. Leave t his field blank t o have no t rust ed com put ers. 134 Rest rict Web Feat ures Select t he box( es) t o rest rict a feat ure. When you download a page cont aining a rest rict ed feat ure, t hat part of t he web page will appear blank or grayed out . Act iveX A t ool for building dynam ic and act ive Web pages and dist ribut ed obj ect applicat ions. When you visit an Act iveX Web sit e, Act iveX cont rols are downloaded t o your browser, where t hey rem ain in case you visit t he sit e again. Java A program m ing language and developm ent environm ent for building downloadable Web com ponent s or I nt ernet and int ranet business applicat ions of all kinds. NBG6503 User’s Guide Chapter 18 Content Filter Table 57 Securit y > Cont ent Filt er > Cont ent Filt er ( cont inued) LABEL DESCRIPTION Cookies Used by Web servers t o t rack usage and provide service based on I D. Web Proxy A server t hat act s as an int erm ediary bet ween a user and t he I nt ernet t o provide securit y, adm inist rat ive cont rol, and caching service. When a proxy server is locat ed on t he WAN it is possible for LAN users t o circum vent cont ent filt ering by point ing t o t his proxy server. Enable URL Keyword Blocking The Rout er can block Web sit es wit h URLs t hat cont ain cert ain keywords in t he dom ain nam e or I P address. For exam ple, if t he keyword " bad" was enabled, all sit es cont aining t his keyword in t he dom ain nam e or I P address will be blocked, e.g., URL ht t p: / / www.websit e.com / bad.ht m l would be blocked. Select t his check box t o enable t his feat ure. Keyword Type a keyword in t his field. You m ay use any charact er ( up t o 64 charact ers) . Wildcards are not allowed. You can also ent er a num erical I P address. Keyword List This list displays t he keywords already added. Add Click Add aft er you have t yped a keyword. Repeat t his procedure t o add ot her keywords. Up t o 64 keywords are allowed. When you t ry t o access a web page cont aining a keyword, you will get a m essage t elling you t hat t he cont ent filt er is blocking t his request . Delet e Highlight a keyword in t he lower box and click D e le t e t o rem ove it . The keyword disappears from t he t ext box aft er you click Apply. Clear All Click t his but t on t o rem ove all of t he list ed keywords. Apply Click Apply t o save your changes. Reset Click Re se t t o begin configuring t his screen afresh NBG6503 User’s Guide 135 C HAPTER 19 Bandwidth Management 19.1 Overview This chapt er cont ains inform at ion about configuring bandwidt h m anagem ent and edit ing rules. ZyXEL’s Bandwidt h Managem ent allows you t o specify bandwidt h m anagem ent rules based on an applicat ion. I n t he figure below, uplink t raffic goes from t he LAN device ( A) t o t he WAN device ( B) . Bandwidt h m anagem ent is applied before sending t he packet s out t o t he WAN. Downlink t raffic com es back from t he WAN device ( B) t o t he LAN device ( A) . Bandwidt h m anagem ent is applied before sending t he t raffic out t o LAN. Figure 95 Bandwidt h Managem ent Exam ple -> VOIP -> FTP -> HTTP -> Chat, Email You can allocat e specific am ount s of bandwidt h capacit y ( bandwidt h budget s) t o individual applicat ions ( like VoI P, Web, FTP, and E- m ail for exam ple) . 19.2 What You Can Do • Use t he Ge n e r a l screen ( Sect ion 19.4 on page 138) t o enable bandwidt h m anagem ent and assign bandwidt h values. • Use t he Adva nce d screen ( Sect ion 19.5 on page 138) t o configure bandwidt h m anagem ent s rule for t he pre- defined services and applicat ions. • Use t he M on it or screen ( Sect ion 19.6 on page 143) t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. NBG6503 User’s Guide 137 Chapter 19 Bandwidth Management 19.3 What You Need To Know The sum of t he bandwidt h allot m ent s t hat apply t o t he WAN int erface ( LAN t o WAN, WLAN t o WAN) m ust be less t han or equal t o t he Upst r e a m Ba ndw idt h t hat you configure in t he Ba n dw idt h M a na ge m e nt Adva nce d screen ( Sect ion 19.5 on page 138) . The sum of t he bandwidt h allot m ent s t hat apply t o t he LAN int erface ( WAN t o LAN, WAN t o WLAN) m ust be less t han or equal t o t he D ow nst r e a m Ba n dw idt h t hat you configure in t he Ba ndw idt h M a na ge m e nt Adva nce d screen Sect ion 19.5 on page 138. 19.4 General Screen Use t his screen t o have t he Rout er apply bandwidt h m anagem ent . Click M a na ge m e nt > Ba ndw idt h M a n a ge m e n t t o open t he bandwidt h m anagem ent Ge n e r a l screen. Figure 96 Managem ent > Bandwidt h Managem ent > General The following t able describes t he labels in t his screen. Table 58 Managem ent > Bandwidt h Managem ent > General LABEL DESCRIPTION Enable Bandw idt h Managem ent This field allows you t o have Rout er apply bandwidt h m anagem ent . Enable bandwidt h m anagem ent t o give t raffic t hat m at ches a bandwidt h rule priorit y over t raffic t hat does not m at ch a bandwidt h rule. Enabling bandwidt h m anagem ent also allows you t o cont rol t he m axim um or m inim um am ount s of bandwidt h t hat can be used by t raffic t hat m at ches a bandwidt h rule. Apply Click Apply t o save your cust om ized set t ings. Reset Click Re se t t o begin configuring t his screen afresh. 19.5 Advanced Screen Use t his screen t o configure bandwidt h m anagem ent rules for t he pre- defined services or applicat ions. You can also use t his screen t o configure bandwidt h m anagem ent rule for ot her services or applicat ions t hat are not on t he pre- defined list of Rout er. Addit ionally, you can define t he source and dest inat ion I P addresses and port for a service or applicat ion. 138 NBG6503 User’s Guide Chapter 19 Bandwidth Management Not e: The t w o t ables shown in t his screen can be configured and applied at t he sam e t im e. Click M a na ge m e nt > Ba n dw idt h M a n a ge m e n t > Adva nce d t o open t he bandwidt h m anagem ent Adva nce d screen. Figure 97 Managem ent > Bandwidt h Managem ent > Advanced The following t able describes t he labels in t his screen. NBG6503 User’s Guide 139 Chapter 19 Bandwidth Management Table 59 Managem ent > Bandwidt h Managem ent > Advanced LABEL DESCRIPTION Managem ent Bandwidt h Upst ream Bandw idt h Select t he t ot al am ount of bandwidt h ( from 64 Kilobit s t o 50 Megabit s) t hat you want t o dedicat e t o uplink t raffic. This is t raffic from LAN/ WLAN t o WAN. Downst ream Bandw idt h Select t he t ot al am ount of bandwidt h ( from 64 Kilobit s t o 50 Megabit s) t hat you want t o dedicat e t o uplink t raffic. This is t raffic from WAN t o LAN/ WLAN. Applicat ion List Use t his t able t o allocat e specific am ount s of bandwidt h based on a pre- defined service. This is t he num ber of an individual bandwidt h m anagem ent rule. Priorit y Select a priorit y from t he drop down list box. Choose H igh , M id or Low . • • • H igh - Select t his for voice t raffic or video t hat is especially sensit ive t o j it t er ( j it t er is t he variat ions in delay) . M id - Select t his for " excellent effort " or bet t er t han best effort and would include im port ant business t raffic t hat can t olerat e som e delay. Low - Select t his for non- crit ical " background" t raffic such as bulk t ransfers t hat are allowed but t hat should not affect ot her applicat ions and users. Cat egory This is t he cat egory where a service belongs. Service This is t he nam e of t he service. Select t he check box t o have t he Rout er apply t his bandwidt h m anagem ent rule. Advanced Set t ing Click t he Edit icon t o open t he Rule Con figu r a t ion screen where you can m odify t he rule. User- defined Service Use t his t able t o allocat e specific am ount s of bandwidt h t o specific applicat ions or services you specify. This is t he num ber of an individual bandwidt h m anagem ent rule. Enable Select t his check box t o have t he Rout er apply t his bandwidt h m anagem ent rule. Direct ion Select TO LAN / W LAN t o apply bandwidt h m anagem ent t o t raffic from WAN t o LAN/ WLAN. Select TO W AN t o apply bandwidt h m anagem ent t o t raffic from LAN/ WLAN t o WAN. Service Nam e Ent er a descript ive nam e for t he bandwidt h m anagem ent rule. Cat egory This is t he cat egory where a service belongs. Modify Click t he Edit icon t o open t he Rule Con figu r a t ion screen. Modify an exist ing rule or creat e a new rule in t he Ru le Configu r a t ion screen. See Sect ion 19.5.2 on page 142 for m ore inform at ion. Click t he Re m ove icon t o delet e a rule. 140 Apply Click Apply t o save your cust om ized set t ings. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide Chapter 19 Bandwidth Management 19.5.1 Rule Configuration: Application Rule Configuration I f you want t o edit a bandwidt h m anagem ent rule for a pre- defined service or applicat ion, click t he Edit icon in t he Applica t ion List t able of t he Adva nce d screen. The following screen displays. Figure 98 Bandwidt h Managem ent Rule Configurat ion: Applicat ion List The following t able describes t he labels in t his screen. Table 60 Bandwidt h Managem ent Rule Configurat ion: Applicat ion List LABEL DESCRIPTION This is t he num ber of an individual bandwidt h m anagem ent rule. Enable Select an int erface’s check box t o enable bandwidt h m anagem ent on t hat int erface. Direct ion These read- only labels represent t he physical int erfaces. Bandwidt h m anagem ent applies t o all t raffic flowing out of t he rout er t hrough t he int erface, regardless of t he t raffic’s source. Traffic redirect or I P alias m ay cause LAN- t o- LAN t raffic t o pass t hrough t he Rout er and be m anaged by bandwidt h m anagem ent . Bandwidt h Select M a x im um Ba ndw idt h or M in im u m Ba n dw idt h and specify t he m axim um or m inim um bandwidt h allowed for t he rule in kilobit s per second. Dest inat ion Port This is t he port num ber of t he dest inat ion t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. See Appendix D on page 223 for som e com m on services and port num bers. Source Port This is t he port num ber of t he source t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. See Appendix D on page 223 for som e com m on services and port num bers. Prot ocol This is t he prot ocol ( TCP, UD P or user- defined) used for t he service. Apply Click Apply t o save your cust om ized set t ings. Cancel Click Ca n ce l t o exit t his screen wit hout saving. NBG6503 User’s Guide 141 Chapter 19 Bandwidth Management 19.5.2 Rule Configuration: User Defined Service Rule Configuration I f you want t o edit a bandwidt h m anagem ent rule for ot her applicat ions or services, click t he Edit icon in t he Use r - de fine d Se r vice t able of t he Adva nce d screen. The following screen displays. Figure 99 Bandwidt h Managem ent Rule Configurat ion: User- defined Service The following t able describes t he labels in t his screen Table 61 Bandwidt h Managem ent Rule Configurat ion: User- defined Service LABEL DESCRIPTION BW Budget Select M a x im u m Ba n dw idt h or M in im um Ba n dw idt h and specify t he m axim um or m inim um bandwidt h allowed for t he rule in kilobit s per second. Dest inat ion Address Ent er t he I P address of t he dest inat ion com put er. Dest inat ion Subnet Net m ask Ent er t he subnet net m ask of t he dest inat ion of t he t raffic for which t he bandwidt h m anagem ent rule applies. Dest inat ion Port This is t he port num ber of t he dest inat ion t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Source Address Ent er t he I P address of t he com put er t hat init ializes t raffic for t he applicat ion or service. The Rout er applies bandwidt h m anagem ent t o t he service or applicat ion t hat is ent ering t his com put er. The Rout er applies bandwidt h m anagem ent t o t raffic init iat ing from t his com put er. Source Subnet Net m ask Ent er t he subnet net m ask of t he com put er init iat ing t he t raffic for which t he bandwidt h m anagem ent rule applies. Source Port This is t he port num ber of t he source t hat define t he t raffic t ype, for exam ple TCP port 80 defines web t raffic. Prot ocol Select t he prot ocol ( TCP, UD P, Use r de fin e d) for which t he bandwidt h m anagem ent rule applies. I f you select Use r - de fin e d, ent er t he prot ocol for which t he bandwidt h m anagem ent rule applies. For exam ple, I CMP for ping t raffic. Apply Click Apply t o save your cust om ized set t ings. Cancel Click Ca n ce l t o exit t his screen wit hout saving. See Appendix D on page 223 for com m only used services and port num bers. 142 NBG6503 User’s Guide Chapter 19 Bandwidth Management 19.6 Monitor Screen Use t his screen t o view t he am ount of net work bandwidt h t hat applicat ions running in t he net work are using. The bandwidt h is m easured in kilobit s per second ( kbps) . The m onit or shows what kinds of applicat ions are running in t he net work, t he m axim um kbps t hat each applicat ion can use, as well as t he percent age of bandwidt h it is using. Figure 100 Managem ent > Bandwidt h Managem ent > Monit or 19.6.1 Predefined Bandwidth Management Services The following is a descript ion of som e services t hat you can select and t o which you can apply m edia bandwidt h m anagem ent in t he M a n a ge m e n t > Ba n dw idt h M a na ge m e n t > Adva nce d screen. Table 62 Media Bandwidt h Managem ent Set up: Services SERVICE DESCRIPTION FTP File Transfer Program enables fast t ransfer of files, including large files t hat m ay not be possible by e- m ail. WWW The World Wide Web ( WWW) is an I nt ernet syst em t o dist ribut e graphical, hyper- linked inform at ion, based on Hyper Text Transfer Prot ocol ( HTTP) - a client / server prot ocol for t he World Wide Web. The Web is not synonym ous wit h t he I nt ernet ; rat her, it is j ust one service on t he I nt ernet . Ot her services on t he I nt ernet include I nt ernet Relay Chat and Newsgroups. The Web is accessed t hrough use of a browser. E- Mail Elect ronic m ail consist s of m essages sent t hrough a com put er net work t o specific groups or individuals. Here are som e default port s for e- m ail: VoI P ( SI P) Sending voice signals over t he I nt ernet is called Voice over I P or VoI P. Session I nit iat ed Prot ocol ( SI P) is an int ernat ionally recognized st andard for im plem ent ing VoI P. SI P is an applicat ion- layer cont rol ( signaling) prot ocol t hat handles t he set t ing up, alt ering and t earing down of voice and m ult im edia sessions over t he I nt ernet . SI P is t ransport ed prim arily over UDP but can also be t ransport ed over TCP. NBG6503 User’s Guide 143 Chapter 19 Bandwidth Management Table 62 Media Bandwidt h Managem ent Set up: Services ( cont inued) 144 SERVICE DESCRIPTION Bit Torrent Bit Torrent is a free P2P ( peer- t o- peer) sharing t ool allowing you t o dist ribut e large soft ware and m edia files. Bit Torrent requires you t o search for a file wit h a searching engine yourself. I t dist ribut es files by corporat ion and t rading, t hat is, t he client downloads t he file in sm all pieces and share t he pieces wit h ot her peers t o get ot her half of t he file. Gam ing Online gam ing services let s you play m ult iplayer gam es on t he I nt ernet via broadband t echnology. As of t his writ ing, your Rout er support s Xbox, Playst at ion, Bat t lenet and MSN Gam e Zone. NBG6503 User’s Guide C HAPTER 20 Remote Management 20.1 Overview This chapt er provides inform at ion on t he Rem ot e Managem ent screens. Rem ot e Managem ent allows you t o m anage your Rout er from a rem ot e locat ion t hrough t he following int erfaces: • LAN and WAN • LAN only • WAN only Not e: The Rout er is m anaged using t he Web Configurat or. 20.2 What You Can Do Use t he W W W screen ( Sect ion 20.4 on page 146) t o define t he int erface/ s from which t he Rout er can be m anaged rem ot ely and specify a secure client t hat can m anage t he Rout er. 20.3 What You Need to Know Rem ot e m anagem ent over LAN or WAN will not work when: The I P address in t he Se cu r e d Clie n t I P Addr e ss field ( Sect ion 20.4 on page 146) does not m at ch t he client I P address. I f it does not m at ch, t he Rout er will disconnect t he session im m ediat ely. There is already anot her rem ot e m anagem ent session. You m ay only have one rem ot e m anagem ent session running at one t im e. There is a firewall rule t hat blocks it . 20.3.1 Remote Management and NAT When NAT is enabled: • Use t he Rout er’s WAN I P address when configuring from t he WAN. • Use t he Rout er’s LAN I P address when configuring from t he LAN. NBG6503 User’s Guide 145 Chapter 20 Remote Management 20.3.2 System Timeout There is a default syst em m anagem ent idle t im eout of five m inut es ( t hree hundred seconds) . The Rout er aut om at ically logs you out if t he m anagem ent session rem ains idle for longer t han t his t im eout period. The m anagem ent session does not t im e out when a st at ist ics screen is polling. You can change t he t im eout period in t he Syst e m screen 20.4 WWW Screen To change your Rout er’s rem ot e m anagem ent set t ings, click M a n a ge m e n t > Re m ot e M a na ge m e nt > W W W. Figure 101 Managem ent > Rem ot e Managem ent > WWW The following t able describes t he labels in t his screen Table 63 Managem ent > Rem ot e Managem ent > WWW 146 LABEL DESCRIPTION Server Port You m ay change t he server port num ber for a service if needed, how ever you m ust use t he sam e port num ber in order t o use t hat service for rem ot e m anagem ent . Server Access Select t he int erface( s) t hrough which a com put er m ay access t he Rout er using t his service. Secured Client I P Address Select All t o allow all com put es t o access t he Rout er. Apply Click Apply t o save your cust om ized set t ings and exit t his screen. Reset Click Re se t t o begin configuring t his screen afresh. Ot herwise, check Se le ct e d and specify t he I P address of t he com put er t hat can access t he Rout er. NBG6503 User’s Guide C HAPTER 21 Universal Plug-and-Play (UPnP) 21.1 Overview This chapt er int roduces t he UPnP feat ure in t he web configurat or. Universal Plug and Play ( UPnP) is a dist ribut ed, open net working st andard t hat uses TCP/ I P for sim ple peer- t o- peer net work connect ivit y bet ween devices. A UPnP device can dynam ically j oin a net work, obt ain an I P address, convey it s capabilit ies and learn about ot her devices on t he net work. I n t urn, a device can leave a net work sm oot hly and aut om at ically when it is no longer in use. 21.2 What You Can Do Use t he UPnP screen ( Sect ion 21.4 on page 148) t o enable UPnP on your Rout er. 21.3 What You Need to Know UPnP hardware is ident ified as an icon in t he Net work Connect ions folder ( Windows XP) . Each UPnP com pat ible device inst alled on your net work will appear as a separat e icon. Select ing t he icon of a UPnP device will allow you t o access t he inform at ion and propert ies of t hat device. 21.3.1 NAT Traversal UPnP NAT t raversal aut om at es t he process of allowing an applicat ion t o operat e t hrough NAT. UPnP net work devices can aut om at ically configure net work addressing, announce t heir presence in t he net work t o ot her UPnP devices and enable exchange of sim ple product and service descript ions. NAT t raversal allows t he following: • Dynam ic port m apping • Learning public I P addresses • Assigning lease t im es t o m appings Windows Messenger is an exam ple of an applicat ion t hat support s NAT t raversal and UPnP. See t he NAT chapt er for m ore inform at ion on NAT. NBG6503 User’s Guide 147 Chapter 21 Universal Plug-and-Play (UPnP) 21.3.2 Cautions with UPnP The aut om at ed nat ure of NAT t raversal applicat ions in est ablishing t heir own services and opening firewall port s m ay present net work securit y issues. Net work inform at ion and configurat ion m ay also be obt ained and m odified by users in som e net work environm ent s. When a UPnP device j oins a net work, it announces it s presence wit h a m ult icast m essage. For securit y reasons, t he Rout er allows m ult icast m essages on t he LAN only. All UPnP- enabled devices m ay com m unicat e freely wit h each ot her wit hout addit ional configurat ion. Disable UPnP if t his is not your int ent ion. 21.4 UPnP Screen Use t his screen t o enable UPnP on your Rout er. Click M a n a ge m e nt > UPnP t o display t he screen shown next . Figure 102 Managem ent > UPnP The following t able describes t he fields in t his screen. Table 64 Managem ent > UPnP LABEL DESCRIPTION Enable t he Universal Plug and Play ( UPnP) Feat ure Select t his check box t o act ivat e UPnP. Be aware t hat anyone could use a UPnP applicat ion t o open t he web configurat or's login screen wit hout ent ering t he Rout er's I P address ( alt hough you m ust st ill ent er t he password t o access t he web configurat or) . Apply Click Apply t o save t he set t ing t o t he Rout er. Reset Click Re se t t o ret urn t o t he previously saved set t ings. 21.5 Technical Refereance The sect ions show exam ples of using UPnP. 21.5.1 Using UPnP in Windows XP Example This sect ion shows you how t o use t he UPnP feat ure in Windows XP. You m ust already have UPnP inst alled in Windows XP and UPnP act ivat ed on t he Rout er. 148 NBG6503 User’s Guide Chapter 21 Universal Plug-and-Play (UPnP) Make sure t he com put er is connect ed t o a LAN port of t he Rout er. Turn on your com put er and t he Rout er. 21.5.1.1 Auto-discover Your UPnP-enabled Network Device Click st a r t and Cont r ol Pa ne l. Double- click N e t w or k Con n e ct ions. An icon displays under I nt ernet Gat eway. Right- click t he icon and select Pr ope r t ie s. Figure 103 Net work Connect ions I n t he I nt e r ne t Conne ct ion Pr ope r t ie s window, click Se t t ings t o see t he port m appings t here were aut om at ically creat ed. Figure 104 I nt ernet Connect ion Propert ies NBG6503 User’s Guide 149 Chapter 21 Universal Plug-and-Play (UPnP) You m ay edit or delet e t he port m appings or click Add t o m anually add port m appings. Figure 105 I nt ernet Connect ion Propert ies: Advanced Set t ings Figure 106 I nt ernet Connect ion Propert ies: Advanced Set t ings: Add Not e: When t he UPnP- enabled device is disconnect ed from your com put er, all port m appings will be delet ed aut om at ically. Select Sh ow icon in not ifica t ion a r e a w he n conn e ct e d opt ion and click OK. An icon displays in t he syst em t ray. Figure 107 Syst em Tray I con 150 NBG6503 User’s Guide Chapter 21 Universal Plug-and-Play (UPnP) Double- click on t he icon t o display your current I nt ernet connect ion st at us. Figure 108 I nt ernet Connect ion St at us 21.5.2 Web Configurator Easy Access Wit h UPnP, you can access t he web- based configurat or on t he Rout er wit hout finding out t he I P address of t he Rout er first . This com es helpful if you do not know t he I P address of t he Rout er. Follow t he st eps below t o access t he web configurat or. Click St a r t and t hen Cont r ol Pa ne l. Double- click N e t w or k Conne ct ions. NBG6503 User’s Guide 151 Chapter 21 Universal Plug-and-Play (UPnP) Select M y N e t w or k Pla ce s under Ot h e r Pla ce s. Figure 109 Net work Connect ions An icon wit h t he descript ion for each UPnP- enabled device displays under Loca l N e t w or k . Right- click on t he icon for your Rout er and select I n vok e . The web configurat or login screen displays. Figure 110 Net work Connect ions: My Net work Places 152 NBG6503 User’s Guide Chapter 21 Universal Plug-and-Play (UPnP) Right- click on t he icon for your Rout er and select Pr ope r t ie s. A propert ies window displays wit h basic inform at ion about t he Rout er. Figure 111 Net work Connect ions: My Net work Places: Propert ies: Exam ple NBG6503 User’s Guide 153 C HAPTER 22 Maintenance 22.1 Overview This chapt er provides inform at ion on t he M a int e na nce screens. 22.2 What You Can Do • Use t he Ge n e r a l screen t o configure syst em and dom ain nam e. You can also set t he t im eout period of t he m anagem ent session ( Sect ion 22.3 on page 155) . • Use t he Pa ssw or d screen t o change your Rout er’s syst em password ( Sect ion 22.4 on page 156) . • Use t he Tim e screen t o change your Rout er’s t im e and dat e ( Sect ion 22.5 on page 157) . • Use t he Fir m w a r e Upgr a de screen t o upload firm ware t o your Rout er ( Sect ion 22.6 on page 158) . • Use t he Ba ck u p/ Re st or e screen t o view inform at ion relat ed t o fact ory default s, backup configurat ion, and rest oring configurat ion ( Sect ion 22.8 on page 161) . • Use t he Re st a r t screen t o reboot t he Rout er wit hout t urning t he power off ( Sect ion 22.8 on page 161) . • Use t he Sys OP M ode screen t o select how you want t o use your Rout er ( Sect ion 22.10 on page 163) . 22.3 General Screen Use t his screen t o set t he configure syst em and dom ain nam e as well as m anagem ent session t im eout period. Click M a int e na nce > Ge n e r a l. The following screen displays. Figure 112 Maint enance > General NBG6503 User’s Guide 155 Chapter 22 Maintenance The following t able describes t he labels in t his screen. Table 65 Maint enance > General LABEL DESCRIPTION Syst em Set up Syst em Nam e Syst em Nam e is a unique nam e t o ident ify t he Rout er in an Et hernet net work. Dom ain Nam e Ent er t he dom ain nam e you want t o give t o t he Rout er. Adm inist rat or I nact ivit y Tim er Type how m any m inut es a m anagem ent session can be left idle before t he session t im es out . The default is 5 m inut es. Aft er it t im es out you have t o log in wit h your password again. Very long idle t im eout s m ay have securit y risks. A value of " 0" m eans a m anagem ent session never t im es out , no m at t er how long it has been left idle ( not recom m ended) . Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o begin configuring t his screen afresh. 22.4 Password Screen I t is st rongly recom m ended t hat you change your Rout er's password. I f you forget your Rout er's password ( or I P address) , you will need t o reset t he device. See Sect ion 22.8 on page 161 for det ails. Click M a int e na nce > Pa ssw or d. The screen appears as shown. Figure 113 Maint enance > Password The following t able describes t he labels in t his screen. Table 66 Maint enance > Password 156 LABEL DESCRIPTION Password Set up Change your Rout er’s password ( recom m ended) using t he fields as shown. Old Password Type t he default password or t he exist ing password you use t o access t he syst em in t his field. New Password Type your new syst em password ( up t o 30 charact ers) . Not e t hat as you t ype a password, t he screen displays an ast erisk ( * ) for each charact er you t ype. Ret ype t o Confirm Type t he new password again in t his field. Apply Click Apply t o save your changes back t o t he Rout er. Reset Click Re se t t o begin configuring t his screen afresh. NBG6503 User’s Guide Chapter 22 Maintenance 22.5 Time Setting Screen Use t his screen t o configure t he Rout er’s t im e based on your local t im e zone. To change your Rout er’s t im e and dat e, click M a int e n a n ce > Tim e . The screen appears as shown. Figure 114 Maint enance > Tim e The following t able describes t he labels in t his screen. Table 67 Maint enance > Tim e LABEL DESCRIPTION Current Tim e and Dat e Current Tim e This field displays t he t im e of your Rout er. Each t im e you reload t his page, t he Rout er synchronizes t he t im e wit h t he t im e server. Current Dat e This field displays t he dat e of your Rout er. Each t im e you reload t his page, t he Rout er synchronizes t he dat e wit h t he t im e server. Current Tim e and Dat e Manual Select t his radio but t on t o ent er t he t im e and dat e m anually. I f you configure a new t im e and dat e, Tim e Zone and Daylight Saving at t he sam e t im e, t he new t im e and dat e you ent ered has priorit y and t he Tim e Zone and Daylight Saving set t ings do not affect it . New Tim e This field displays t he last updat ed t im e from t he t im e server or t he last t im e configured m anually. ( hh: m m : ss) When you select M a n u a l, ent er t he new t im e in t his field and t hen click Apply. New Dat e ( yyyy/ m m / dd) This field displays t he last updat ed dat e from t he t im e server or t he last dat e configured m anually. When you select M a n u a l, ent er t he new dat e in t his field and t hen click Apply. NBG6503 User’s Guide 157 Chapter 22 Maintenance Table 67 Maint enance > Tim e ( cont inued) LABEL DESCRIPTION Get from Tim e Server Select t his radio but t on t o have t he Rout er get t he t im e and dat e from t he t im e server you specified below. Aut o Select Au t o t o have t he Rout er aut om at ically search for an available t im e server and synchronize t he dat e and t im e wit h t he t im e server aft er you click Apply. User Defined Tim e Server Address Select Use r D e fin e d Tim e Se r ve r Addr e ss and ent er t he I P address or URL ( up t o 20 ext ended ASCI I charact ers in lengt h) of your t im e server. Check wit h your I SP/ net work adm inist rat or if you are unsure of t his inform at ion. Tim e Zone Set up Tim e Zone Choose t he t im e zone of your locat ion. This will set t he t im e difference bet ween your t im e zone and Greenwich Mean Tim e ( GMT) . Daylight Savings Daylight saving is a period from lat e spring t o early fall when m any count ries set t heir clocks ahead of norm al local t im e by one hour t o give m ore dayt im e light in t he evening. St art Dat e Configure t he day and t im e when Daylight Saving Tim e st art s if you select ed D a yligh t Sa vin gs. The o'clock field uses t he 24 hour form at . Here are a couple of exam ples: Select t his opt ion if you use Daylight Saving Tim e. Daylight Saving Tim e st art s in m ost part s of t he Unit ed St at es on t he first Sunday of April. Each t im e zone in t he Unit ed St at es st art s using Daylight Saving Tim e at 2 A.M. local t im e. So in t he Unit ed St at es you would select Fir st , Sun da y, Apr il and select 2 in t he o' clock field. Daylight Saving Tim e st art s in t he European Union on t he last Sunday of March. All of t he t im e zones in t he European Union st art using Daylight Saving Tim e at t he sam e m om ent ( 1 A.M. GMT or UTC) . So in t he European Union you would select La st , Su n da y, M a r ch . The t im e you select in t he o'clock field depends on your t im e zone. I n Germ any for inst ance, you would select 2 because Germ any's t im e zone is one hour ahead of GMT or UTC ( GMT+ 1) . End Dat e Configure t he day and t im e when Daylight Saving Tim e ends if you select ed D a ylight Sa vin gs. The o'clock field uses t he 24 hour form at . Here are a couple of exam ples: Daylight Saving Tim e ends in t he Unit ed St at es on t he last Sunday of Oct ober. Each t im e zone in t he Unit ed St at es st ops using Daylight Saving Tim e at 2 A.M. local t im e. So in t he Unit ed St at es you would select La st , Su n da y, Oct obe r and select 2 in t he o'clock field. Daylight Saving Tim e ends in t he European Union on t he last Sunday of Oct ober. All of t he t im e zones in t he European Union st op using Daylight Saving Tim e at t he sam e m om ent ( 1 A.M. GMT or UTC) . So in t he European Union you would select La st , Su n da y, Oct obe r. The t im e you select in t he o'clock field depends on your t im e zone. I n Germ any for inst ance, you would select 2 because Germ any's t im e zone is one hour ahead of GMT or UTC ( GMT+ 1) . Apply Click Apply t o save your changes back t o t he Rout er. Cancel Click Ca n ce l t o begin configuring t his screen afresh. 22.6 Firmware Upgrade Screen Find firm ware at www.zyxel.com in a file t hat ( usually) uses t he syst em m odel nam e wit h a “ * .bin” ext ension, e.g., “ Rout er.bin”. The upload process uses HTTP ( Hypert ext Transfer Prot ocol) and m ay t ake up t o t wo m inut es. Aft er a successful upload, t he syst em will reboot . 158 NBG6503 User’s Guide Chapter 22 Maintenance Click M a int e na nce > Fir m w a r e Upgr a de . Follow t he inst ruct ions in t his screen t o upload firm ware t o your Rout er. Figure 115 Maint enance > Firm ware Upgrade The following t able describes t he labels in t his screen. Table 68 Maint enance > Firm ware Upgrade LABEL DESCRIPTION File Pat h Type in t he locat ion of t he file you want t o upload in t his field or click Br ow se ... t o find it . Browse... Click Br ow se ... t o find t he .bin file you want t o upload. Rem em ber t hat you m ust decom press com pressed ( .zip) files before you can upload t hem . Upload Click Uploa d t o begin t he upload process. This process m ay t ake up t o t wo m inut es. Check for Lat est Firm ware Now Click t his t o check for t he lat est updat ed firm ware. Not e: Do not t urn off t he Rout er while firm ware upload is in progress! Aft er you see t he Fir m w a r e Uploa d I n Pr oce ss screen, wait t wo m inut es before logging int o t he Rout er again. The Rout er aut om at ically rest art s in t his t im e causing a t em porary net work disconnect . I n som e operat ing syst em s, you m ay see t he following icon on your deskt op. Figure 116 Net work Tem porarily Disconnect ed Aft er t wo m inut es, log in again and check your new firm ware version in t he St a t us screen. I f t he upload was not successful, an error m essage appears. Click Re t ur n t o go back t o t he Fir m w a r e Upgr a de screen. NBG6503 User’s Guide 159 Chapter 22 Maintenance 22.7 Configuration Backup/Restore Screen Backup configurat ion allows you t o back up ( save) t he Rout er’s current configurat ion t o a file on your com put er. Once your Rout er is configured and funct ioning properly, it is highly recom m ended t hat you back up your configurat ion file before m aking configurat ion changes. The backup configurat ion file will be useful in case you need t o ret urn t o your previous set t ings. Rest ore configurat ion allows you t o upload a new or previously saved configurat ion file from your com put er t o your Rout er. Click M a in t e n a n ce > Ba ck u p/ Re st or e . I nform at ion relat ed t o fact ory default s, backup configurat ion, and rest oring configurat ion appears as shown next . Figure 117 Maint enance > Backup/ Rest ore The following t able describes t he labels in t his screen. Table 69 Maint enance > Backup/ Rest ore 160 LABEL DESCRIPTION Backup Click Ba ck u p t o save t he Rout er’s current configurat ion t o your com put er. File Pat h Type in t he locat ion of t he file you want t o upload in t his field or click Br ow se ... t o find it . Browse... Click Br ow se ... t o find t he file you want t o upload. Rem em ber t hat you m ust decom press com pressed ( .ZI P) files before you can upload t hem . NBG6503 User’s Guide Chapter 22 Maintenance Table 69 Maint enance > Backup/ Rest ore ( cont inued) LABEL DESCRIPTION Upload Click Uploa d t o begin t he upload process. Note: Do not turn off the Router while configuration file upload is in progress. Aft er you see a “ configurat ion upload successful” screen, you m ust t hen wait one m inut e before logging int o t he Rout er again. The Rout er aut om at ically rest art s in t his t im e causing a t em porary net work disconnect . I f you see an error screen, click Back t o ret urn t o t he Backup/ Rest ore screen. Reset Pressing t he Re se t but t on in t his sect ion clears all user- ent ered configurat ion inform at ion and ret urns t he Rout er t o it s fact ory default s. You can also press t he RESET but t on on t he rear panel t o reset t he fact ory default s of your Rout er. Refer t o t he chapt er about int roducing t he Web Configurat or for m ore inform at ion on t he RESET but t on. Not e: I f you uploaded t he default configurat ion file you m ay need t o change t he I P address of your com put er t o be in t he sam e subnet as t hat of t he default Rout er I P address ( 192.168.1.2) . See Appendix B on page 181 for det ails on how t o set up your com put er ’s I P address. 22.8 Restart Screen Syst em rest art allows you t o reboot t he Rout er wit hout t urning t he power off. Click M a int e na nce > Re st a r t t o open t he following screen. Figure 118 Maint enance > Rest art Click Re st a r t t o have t he Rout er reboot . This does not affect t he Rout er's configurat ion. 22.9 System Operation Mode Overview The Sys OP M ode ( Syst em Operat ion Mode) funct ion let s you configure your Rout er as an access point , wireless client or bot h at t he sam e t im e. You can choose bet ween Rou t e r and Acce ss Point M ode depending on your net work t opology and t he feat ures you require from your device. The following describes t he device m odes available in your Rout er. NBG6503 User’s Guide 161 Chapter 22 Maintenance Router A rout er connect s your local net work wit h anot her net work, such as t he I nt ernet . The rout er has t wo I P addresses, t he LAN I P address and t he WAN I P address. Figure 119 LAN and WAN I P Addresses in Rout er Mode Access Point An access point enabled all et hernet port s t o be bridged t oget her and be in t he sam e subnet . To connect t o t he I nt ernet , anot her device, such as a rout er, is required. Figure 120 Access Point Mode 162 NBG6503 User’s Guide Chapter 22 Maintenance 22.10 Sys OP Mode Screen Use t his screen t o select how you want t o use your Rout er. Figure 121 Maint enance > Sys OP Mode The following t able describes t he labels in t he Ge n e r a l screen. Table 70 Maint enance > Sys OP Mode LABEL DESCRIPTION Syst em Operat ion Mode Rout er Select Rou t e r M ode if your device rout es t raffic bet ween a local net work and anot her net work such as t he I nt ernet . This m ode offers services such as a firewall or bandwidt h m anagem ent . You can configure t he I P address set t ings on your WAN port . Cont act your I SP or syst em adm inist rat or for m ore inform at ion on appropriat e set t ings. Access Point Select Acce ss Poin t M ode if your device bridges t raffic bet ween client s on t he sam e net work. • • • • I n Acce ss Poin t M ode , all Et hernet port s have t he sam e I P address. All port s on t he rear panel of t he device are LAN port s, including t he port labeled WAN. There is no WAN port . The DHCP server on your device is disabled. The I P address of t he device on t he local net work is set t o 192.168.1.2. Apply Click Apply t o save your set t ings. Cancel Click Ca n ce l t o ret urn your set t ings t o t he default ( Rou t e r ) . Not e: I f you select t he incorrect Syst em Operat ion Mode you m ay not be able t o connect t o t he I nt ernet . NBG6503 User’s Guide 163 C HAPTER 23 Troubleshooting This chapt er offers som e suggest ions t o solve problem s you m ight encount er. The pot ent ial problem s are divided int o t he following cat egories. • Power, Hardware Connect ions, and LEDs • Rout er Access and Login • I nt ernet Access • Reset t ing t he Rout er t o I t s Fact ory Default s • Wireless Rout er/ AP Troubleshoot ing 23.1 Power, Hardware Connections, and LEDs The Rout er does not t urn on. None of t he LEDs t urn on. Make sure you are using t he power adapt or or cord included wit h t he Rout er. Make sure t he power adapt or or cord is connect ed t o t he Rout er and plugged in t o an appropriat e power source. Make sure t he power source is t urned on. Disconnect and re- connect t he power adapt or or cord t o t he Rout er. I f t he problem cont inues, cont act t he vendor. One of t he LEDs does not behave as expect ed. Make sure you underst and t he norm al behavior of t he LED. See Sect ion 1.5 on page 17. Check t he hardware connect ions. See t he Quick St art Guide. I nspect your cables for dam age. Cont act t he vendor t o replace any dam aged cables. Disconnect and re- connect t he power adapt or t o t he Rout er. I f t he problem cont inues, cont act t he vendor. NBG6503 User’s Guide 165 Chapter 23 Troubleshooting 23.2 Router Access and Login I don’t know t he I P address of m y Rout er. The default I P address is 1 9 2 .1 6 8 .1 .1 . I f you changed t he I P address and have forgot t en it , you m ight get t he I P address of t he Rout er by looking up t he I P address of t he default gat eway for your com put er. To do t his in m ost Windows com put ers, click St a r t > Run , ent er cm d, and t hen ent er ipconfig. The I P address of t he D e fa ult Ga t e w a y m ight be t he I P address of t he Rout er ( it depends on t he net work) , so ent er t his I P address in your I nt ernet browser.Set your device t o Rout e r M ode , login ( see t he Quick St art Guide for inst ruct ions) and go t o t he D e vice I n for m a t ion t able in t he St a t u s screen. Your Rout er’s I P address is available in t he D e vice I nfor m a t ion t able. • I f t he D H CP set t ing under LAN in for m a t ion is N on e , your device has a fixed I P address. • I f t he D H CP set t ing under LAN infor m a t ion is Clie n t , t hen your device receives an I P address from a DHCP server on t he net work. I f your Rout er is a DHCP client , you can find your I P address from t he DHCP server. This inform at ion is only available from t he DHCP server which allocat es I P addresses on your net work. Find t his inform at ion direct ly from t he DHCP server or cont act your syst em adm inist rat or for m ore inform at ion. Reset your Rout er t o change all set t ings back t o t heir default . This m eans your current set t ings are lost . See Sect ion 23.4 on page 169 in t he Tr ou ble shoot ing for inform at ion on reset t ing your Rout er. I forgot t he passwor d. The default password is 1 2 3 4 . I f t his does not work, you have t o reset t he device t o it s fact ory default s. See Sect ion 23.4 on page 169. I cannot see or access t he Login screen in t he Web Configurat or. Make sure you are using t he correct I P address. • The default I P address is 192.168.1.1. • I f you changed t he I P address ( Sect ion 12.4 on page 111) , use t he new I P address. • I f you changed t he I P address and have forgot t en it , see t he t roubleshoot ing suggest ions for I don’t know t he I P address of m y Rout er. 166 NBG6503 User’s Guide Chapter 23 Troubleshooting Check t he hardware connect ions, and m ake sure t he LEDs are behaving as expect ed. See t he Quick St art Guide. Make sure your I nt ernet browser does not block pop- up windows and has JavaScript and Java enabled. See Appendix A on page 173. Make sure your com put er is in t he sam e subnet as t he Rout er. ( I f you know t hat t here are rout ers bet ween your com put er and t he Rout er, skip t his st ep.) • I f t here is a DHCP server on your net work, m ake sure your com put er is using a dynam ic I P address. See Appendix B on page 181. • I f t here is no DHCP server on your net work, m ake sure your com put er ’s I P address is in t he sam e subnet as t he Rout er. See Appendix B on page 181. Reset t he device t o it s fact ory default s, and t ry t o access t he Rout er wit h t he default I P address. See Sect ion 3.3 on page 35. I f t he problem cont inues, cont act t he net work adm inist rat or or vendor, or t ry one of t he advanced suggest ions. Adva n ce d Sugge st ion • I f your com put er is connect ed t o t he W AN port or is connect ed wirelessly, use a com put er t hat is connect ed t o a LAN / ETH ERN ET port . I can see t he Login screen, but I cannot log in t o t he Rout er. Make sure you have ent ered t he password correct ly. The default password is 1 2 3 4 . This field is case- sensit ive, so m ake sure [ Caps Lock] is not on. This can happen when you fail t o log out properly from your last session. Try logging in again aft er 5 m inut es. Disconnect and re- connect t he power adapt or or cord t o t he Rout er. I f t his does not work, you have t o reset t he device t o it s fact ory default s. See Sect ion 23.4 on page 169. 23.3 Internet Access I cannot access t he I nt er net . Check t he hardware connect ions, and m ake sure t he LEDs are behaving as expect ed. See t he Quick St art Guide. NBG6503 User’s Guide 167 Chapter 23 Troubleshooting Make sure you ent ered your I SP account inform at ion correct ly in t he wizard. These fields are casesensit ive, so m ake sure [ Caps Lock] is not on. I f you are t rying t o access t he I nt ernet wirelessly, m ake sure t he wireless set t ings in t he wireless client are t he sam e as t he set t ings in t he AP. • Go t o N e t w or k > W ir e le ss LAN 2 .4 G > Ge ne r a l > W D S and check if t he Rout er is set t o bridge m ode. Select D isa ble and t ry t o connect t o t he I nt ernet again. Disconnect all t he cables from your device, and follow t he direct ions in t he Quick St art Guide again. Go t o M a int e n a n ce > Sys OP M ode . Check your Syst em Operat ion Mode set t ing. • Select Rout e r if your device rout es t raffic bet ween a local net work and anot her net work such as t he I nt ernet . • Select Acce ss Point if your device bridges t raffic bet ween client s on t he sam e net work. I f t he problem cont inues, cont act your I SP. I cannot access t he I nt ernet anym ore. I had access t o t he I nt ernet ( wit h t he Rout er) , but m y I nt ernet connect ion is not available anym ore. Check t he hardware connect ions, and m ake sure t he LEDs are behaving as expect ed. See t he Quick St art Guide and Sect ion 1.5 on page 17. Reboot t he Rout er. I f t he problem cont inues, cont act your I SP. The I nt ernet connect ion is slow or int erm it t ent . There m ight be a lot of t raffic on t he net work. Look at t he LEDs, and check Sect ion 1.5 on page 17. I f t he Rout er is sending or receiving a lot of inform at ion, t ry closing som e program s t hat use t he I nt ernet , especially peer- t o- peer applicat ions. Check t he signal st rengt h. I f t he signal st rengt h is low, t ry m oving t he Rout er closer t o t he AP if possible, and look around t o see if t here are any devices t hat m ight be int erfering wit h t he wireless net work ( for exam ple, m icrowaves, ot her wireless net works, and so on) . Reboot t he Rout er. I f t he problem cont inues, cont act t he net work adm inist rat or or vendor, or t ry one of t he advanced suggest ions. Adva n ce d Sugge st ions • Check t he set t ings for bandwidt h m anagem ent . I f it is disabled, you m ight consider act ivat ing it . I f it is enabled, you m ight consider changing t he allocat ions. 168 NBG6503 User’s Guide Chapter 23 Troubleshooting • Check t he set t ings for QoS. I f it is disabled, you m ight consider act ivat ing it . I f it is enabled, you m ight consider raising or lowering t he priorit y for som e applicat ions. I set up URL keyword blocking, but I can st ill access a websit e t hat should be blocked. Make sure t hat you select t he En a ble URL Ke yw or d Block in g check box in t he Cont ent Filt ering screen. Make sure t hat t he keywords t hat you t ype are list ed in t he Ke yw or d List . I f a keyword t hat is list ed in t he Ke yw or d List is not blocked when it is found in a URL, cust om ize t he keyword blocking using com m ands. See t he Cust om izing Keyword Blocking URL Checking sect ion in t he Cont ent Filt er chapt er. 23.4 Resetting the Router to Its Factory Defaults I f you reset t he Rout er, you lose all of t he changes you have m ade. The Rout er re- loads it s default set t ings, and t he password reset s t o 1 2 3 4 . You have t o m ake all of your changes again. You will lose all of your changes when you push t he RESET but t on. To reset t he Rout er, Make sure t he power LED is on. Press t he RESET but t on for longer t han 1 second t o rest art / reboot t he Rout er. Press t he RESET but t on for longer t han five seconds t o set t he Rout er back t o it s fact ory- default configurat ions. I f t he Rout er rest art s aut om at ically, wait for t he Rout er t o finish rest art ing, and log in t o t he Web Configurat or. The password is “ 1234”. I f t he Rout er does not rest art aut om at ically, disconnect and reconnect t he Rout er’s power. Then, follow t he direct ions above again. 23.5 Wireless Router/AP Troubleshooting I cannot access t he Rout er or ping any com put er from t he WLAN ( wireless AP or rout er) . Make sure t he wireless LAN is enabled on t he Rout er NBG6503 User’s Guide 169 Chapter 23 Troubleshooting Make sure t he wireless adapt er on t he wireless st at ion is working properly. Make sure t he wireless adapt er inst alled on your com put er is I EEE 802.11 com pat ible and support s t he sam e wireless st andard as t he Rout er. Make sure your com put er ( wit h a wireless adapt er inst alled) is wit hin t he t ransm ission range of t he Rout er. Check t hat bot h t he Rout er and your wireless st at ion are using t he sam e wireless and wireless securit y set t ings. Make sure t raffic bet ween t he WLAN and t he LAN is not blocked by t he firewall on t he Rout er. Make sure you allow t he Rout er t o be rem ot ely accessed t hrough t he WLAN int erface. Check your rem ot e m anagem ent set t ings. • See t he chapt er on Wireless LAN in t he User ’s Guide for m ore inform at ion. I cannot access t he Web Configurat or aft er I sw it ched t o AP m ode. 192.168.1.1 is the default I P in Router mode (the default mode). I n AP mode the default I P is 192.168.1.2. So, when you switch from Router mode to AP mode, you need to use the AP mode I P to log in. My 5G net work doesn’t work. Check t he labels on t he ant ennas and connect ors, m ake sure t he correct ant ennas are connect ed t o t he corresponding connect ors. Connect t he 2 .4 G / 5 G ant enna t o t he 2 .4 G / 5 G connect or and t he 2 .4 G ant enna t o t he 2 .4 G connect or. • See t he Quick St art Guide for det ails. 170 NBG6503 User’s Guide A PPENDIX IP Addresses and Subnetting This appendix int roduces I P addresses and subnet m asks. I P addresses ident ify individual devices on a net work. Every net working device ( including com put ers, servers, rout ers, print ers, et c.) needs an I P address t o com m unicat e across t he net work. These net working devices are also known as host s. Subnet m asks det erm ine t he m axim um num ber of possible host s on a net work. You can also use subnet m asks t o divide one net work int o m ult iple sub- net works. Introduction to IP Addresses One part of t he I P address is t he net work num ber, and t he ot her part is t he host I D. I n t he sam e way t hat houses on a st reet share a com m on st reet nam e, t he host s on a net work share a com m on net work num ber. Sim ilarly, as each house has it s own house num ber, each host on t he net work has it s own unique ident ifying num ber - t he host I D. Rout ers use t he net work num ber t o send packet s t o t he correct net work, while t he host I D det erm ines t o which host on t he net work t he packet s are delivered. Structure An I P address is m ade up of four part s, writ t en in dot t ed decim al not at ion ( for exam ple, 192.168.1.1) . Each of t hese four part s is known as an oct et . An oct et is an eight- digit binary num ber ( for exam ple 11000000, which is 192 in decim al not at ion) . Therefore, each oct et has a possible range of 00000000 t o 11111111 in binary, or 0 t o 255 in decim al. NBG6503 User’s Guide 171 Appendix A IP Addresses and Subnetting The following figure shows an exam ple I P address in which t he first t hree oct et s ( 192.168.1) are t he net work num ber, and t he fourt h oct et ( 16) is t he host I D. Figure 122 Net work Num ber and Host I D How m uch of t he I P address is t he net work num ber and how m uch is t he host I D varies according t o t he subnet m ask. Subnet Masks A subnet m ask is used t o det erm ine which bit s are part of t he net work num ber, and which bit s are part of t he host I D ( using a logical AND operat ion) . The t erm “ subnet ” is short for “ sub- net work”. A subnet m ask has 32 bit s. I f a bit in t he subnet m ask is a “ 1” t hen t he corresponding bit in t he I P address is part of t he net work num ber. I f a bit in t he subnet m ask is “ 0” t hen t he corresponding bit in t he I P address is part of t he host I D. The following exam ple shows a subnet m ask ident ifying t he net work num ber ( in bold t ext ) and host I D of an I P address ( 192.168.1.2 in decim al) . Table 71 I P Address Net work Num ber and Host I D Exam ple 1ST OCTET: 2ND OCTET: (192) (168) 3RD OCTET: 4TH OCTET (1) (2) I P Address ( Binary) 11000000 10101000 00000001 00000010 Subnet Mask ( Binary) 11111111 11111111 11111111 00000000 Net work Num ber 11000000 10101000 00000001 Host I D 00000010 By convent ion, subnet m asks always consist of a cont inuous sequence of ones beginning from t he left m ost bit of t he m ask, followed by a cont inuous sequence of zeros, for a t ot al num ber of 32 bit s. Subnet m asks can be referred t o by t he size of t he net work num ber part ( t he bit s wit h a “ 1” value) . For exam ple, an “ 8- bit m ask” m eans t hat t he first 8 bit s of t he m ask are ones and t he rem aining 24 bit s are zeroes. 172 NBG6503 User’s Guide Appendix A IP Addresses and Subnetting Subnet m asks are expressed in dot t ed decim al not at ion j ust like I P addresses. The following exam ples show t he binary and decim al not at ion for 8- bit , 16- bit , 24- bit and 29- bit subnet m asks. Table 72 Subnet Masks BINARY DECIMAL 1ST OCTET 2ND OCTET 3RD OCTET 4TH OCTET 8- bit m ask 11111111 00000000 00000000 00000000 255.0.0.0 16- bit m ask 11111111 11111111 00000000 00000000 255.255.0.0 24- bit m ask 11111111 11111111 11111111 00000000 255.255.255.0 29- bit m ask 11111111 11111111 11111111 11111000 255.255.255.248 Network Size The size of t he net work num ber det erm ines t he m axim um num ber of possible host s you can have on your net work. The larger t he num ber of net work num ber bit s, t he sm aller t he num ber of rem aining host I D bit s. An I P address wit h host I Ds of all zeros is t he I P address of t he net work ( 192.168.1.0 wit h a 24- bit subnet m ask, for exam ple) . An I P address wit h host I Ds of all ones is t he broadcast address for t hat net work ( 192.168.1.255 wit h a 24- bit subnet m ask, for exam ple) . As t hese t wo I P addresses cannot be used for individual host s, calculat e t he m axim um num ber of possible host s in a net work as follows: Table 73 Maxim um Host Num bers SUBNET MASK HOST ID SIZE 8 bit s 24 bit s 16 bit s 255.0.0.0 255.255.0.0 MAXIMUM NUMBER OF HOSTS 2 24 – 2 16 bit s 16 16777214 – 2 65534 24 bit s 255.255.255.0 8 bit s 2 – 2 254 29 bit s 255.255.255.248 3 bit s 23 – 2 Notation Since t he m ask is always a cont inuous num ber of ones beginning from t he left , followed by a cont inuous num ber of zeros for t he rem ainder of t he 32 bit m ask, you can sim ply specify t he num ber of ones inst ead of writ ing t he value of each oct et . This is usually specified by writ ing a “ / ” followed by t he num ber of bit s in t he m ask aft er t he address. For exam ple, 192.1.1.0 / 25 is equivalent t o saying 192.1.1.0 wit h subnet m ask 255.255.255.128. The following t able shows som e possible subnet m asks using bot h not at ions. Table 74 Alt ernat ive Subnet Mask Not at ion SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST OCTET (DECIMAL) 255.255.255.0 / 24 0000 0000 255.255.255.128 / 25 1000 0000 128 255.255.255.192 / 26 1100 0000 192 NBG6503 User’s Guide 173 Appendix A IP Addresses and Subnetting Table 74 Alt ernat ive Subnet Mask Not at ion ( cont inued) SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST OCTET (DECIMAL) 255.255.255.224 / 27 1110 0000 224 255.255.255.240 / 28 1111 0000 240 255.255.255.248 / 29 1111 1000 248 255.255.255.252 / 30 1111 1100 252 Subnetting You can use subnet t ing t o divide one net work int o m ult iple sub- net works. I n t he following exam ple a net work adm inist rat or creat es t wo sub- net works t o isolat e a group of servers from t he rest of t he com pany net work for securit y reasons. I n t his exam ple, t he com pany net work address is 192.168.1.0. The first t hree oct et s of t he address ( 192.168.1) are t he net work num ber, and t he rem aining oct et is t he host I D, allowing a m axim um of 2 8 – 2 or 254 possible host s. The following figure shows t he com pany net work before subnet t ing. Figure 123 Subnet t ing Exam ple: Before Subnet t ing You can “ borrow” one of t he host I D bit s t o divide t he net work 192.168.1.0 int o t wo separat e subnet works. The subnet m ask is now 25 bit s ( 255.255.255.128 or / 25) . The “ borrowed” host I D bit can have a value of eit her 0 or 1, allowing t wo subnet s; 192.168.1.0 / 25 and 192.168.1.128 / 25. 174 NBG6503 User’s Guide Appendix A IP Addresses and Subnetting The following figure shows t he com pany net work aft er subnet t ing. There are now t wo subnet works, A and B. Figure 124 Subnet t ing Exam ple: Aft er Subnet t ing I n a 25- bit subnet t he host I D has 7 bit s, so each sub- net work has a m axim um of 2 7 – 2 or 126 possible host s ( a host I D of all zeroes is t he subnet ’s address it self, all ones is t he subnet ’s broadcast address) . 192.168.1.0 wit h m ask 255.255.255.128 is subnet A it self, and 192.168.1.127 wit h m ask 255.255.255.128 is it s broadcast address. Therefore, t he lowest I P address t hat can be assigned t o an act ual host for subnet A is 192.168.1.1 and t he highest is 192.168.1.126. Sim ilarly, t he host I D range for subnet B is 192.168.1.129 t o 192.168.1.254. Example: Four Subnets The previous exam ple illust rat ed using a 25- bit subnet m ask t o divide a 24- bit address int o t wo subnet s. Sim ilarly, t o divide a 24- bit address int o four subnet s, you need t o “ borrow” t wo host I D bit s t o give four possible com binat ions ( 00, 01, 10 and 11) . The subnet m ask is 26 bit s ( 11111111.11111111.11111111.1 1 000000) or 255.255.255.192. Each subnet cont ains 6 host I D bit s, giving 2 6 - 2 or 62 host s for each subnet ( a host I D of all zeroes is t he subnet it self, all ones is t he subnet ’s broadcast address) . Table 75 Subnet 1 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE I P Address ( Decim al) 192.168.1. I P Address ( Binary) 11000000.10101000.00000001. 0 0 000000 Subnet Mask ( Binary) 11111111.11111111.11111111. 1 1 000000 NBG6503 User’s Guide 175 Appendix A IP Addresses and Subnetting Table 75 Subnet 1 ( cont inued) IP/SUBNET MASK NETWORK NUMBER Subnet Address: 192.168.1.0 Lowest Host I D: 192.168.1.1 Broadcast Address: 192.168.1.63 Highest Host I D: 192.168.1.62 LAST OCTET BIT VALUE Table 76 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE I P Address 192.168.1. 64 I P Address ( Binary) 11000000.10101000.00000001. 0 1 000000 Subnet Mask ( Binary) 11111111.11111111.11111111. 1 1 000000 Subnet Address: 192.168.1.64 Lowest Host I D: 192.168.1.65 Broadcast Address: 192.168.1.127 Highest Host I D: 192.168.1.126 Table 77 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE I P Address 192.168.1. 128 I P Address ( Binary) 11000000.10101000.00000001. 1 0 000000 Subnet Mask ( Binary) 11111111.11111111.11111111. 1 1 000000 Subnet Address: 192.168.1.128 Lowest Host I D: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host I D: 192.168.1.190 Table 78 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE I P Address 192.168.1. 192 I P Address ( Binary) 11000000.10101000.00000001. 1 1 000000 Subnet Mask ( Binary) 11111111.11111111.11111111. 1 1 000000 Subnet Address: 192.168.1.192 Lowest Host I D: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host I D: 192.168.1.254 Example: Eight Subnets Sim ilarly, use a 27- bit m ask t o creat e eight subnet s ( 000, 001, 010, 011, 100, 101, 110 and 111) . 176 NBG6503 User’s Guide Appendix A IP Addresses and Subnetting The following t able shows I P address last oct et values for each subnet . Table 79 Eight Subnet s SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 30 31 32 33 62 63 64 65 94 95 96 97 126 127 128 129 158 159 160 161 190 191 192 193 222 223 224 225 254 255 Subnet Planning The following t able is a sum m ary for subnet planning on a net work wit h a 24- bit net work num ber. Table 80 24- bit Net work Num ber Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 ( / 25) 126 255.255.255.192 ( / 26) 62 255.255.255.224 ( / 27) 30 255.255.255.240 ( / 28) 16 14 255.255.255.248 ( / 29) 32 255.255.255.252 ( / 30) 64 255.255.255.254 ( / 31) 128 The following t able is a sum m ary for subnet planning on a net work wit h a 16- bit net work num ber. Table 81 16- bit Net work Num ber Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.128.0 ( / 17) 32766 255.255.192.0 ( / 18) 16382 255.255.224.0 ( / 19) 8190 255.255.240.0 ( / 20) 16 4094 255.255.248.0 ( / 21) 32 2046 255.255.252.0 ( / 22) 64 1022 255.255.254.0 ( / 23) 128 510 255.255.255.0 ( / 24) 256 254 255.255.255.128 ( / 25) 512 126 10 255.255.255.192 ( / 26) 1024 62 11 255.255.255.224 ( / 27) 2048 30 12 255.255.255.240 ( / 28) 4096 14 NBG6503 User’s Guide 177 Appendix A IP Addresses and Subnetting Table 81 16- bit Net work Num ber Subnet Planning ( cont inued) NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 13 255.255.255.248 ( / 29) 8192 14 255.255.255.252 ( / 30) 16384 15 255.255.255.254 ( / 31) 32768 Configuring IP Addresses Where you obt ain your net work num ber depends on your part icular sit uat ion. I f t he I SP or your net work adm inist rat or assigns you a block of regist ered I P addresses, follow t heir inst ruct ions in select ing t he I P addresses and t he subnet m ask. I f t he I SP did not explicit ly give you an I P net work num ber, t hen m ost likely you have a single user account and t he I SP will assign you a dynam ic I P address when t he connect ion is est ablished. I f t his is t he case, it is recom m ended t hat you select a net work num ber from 192.168.0.0 t o 192.168.255.0. The I nt ernet Assigned Num ber Aut horit y ( I ANA) reserved t his block of addresses specifically for privat e use; please do not use any ot her num ber unless you are t old ot herwise. You m ust also enable Net work Address Translat ion ( NAT) on t he Rout er. Once you have decided on t he net work num ber, pick an I P address for your Rout er t hat is easy t o rem em ber ( for inst ance, 192.168.1.1) but m ake sure t hat no ot her device on your net work is using t hat I P address. The subnet m ask specifies t he net work num ber port ion of an I P address. Your Rout er will com put e t he subnet m ask aut om at ically based on t he I P address t hat you ent ered. You don't need t o change t he subnet m ask com put ed by t he Rout er unless you are inst ruct ed t o do ot herwise. Private IP Addresses Every m achine on t he I nt ernet m ust have a unique address. I f your net works are isolat ed from t he I nt ernet ( running only bet ween t wo branch offices, for exam ple) you can assign any I P addresses t o t he host s wit hout problem s. However, t he I nt ernet Assigned Num bers Aut horit y ( I ANA) has reserved t he following t hree blocks of I P addresses specifically for privat e net works: • 10.0.0.0 • 172.16.0.0 — 10.255.255.255 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 You can obt ain your I P address from t he I ANA, from an I SP, or it can be assigned from a privat e net work. I f you belong t o a sm all organizat ion and your I nt ernet access is t hrough an I SP, t he I SP can provide you wit h t he I nt ernet addresses for your local net works. On t he ot her hand, if you are part of a m uch larger organizat ion, you should consult your net work adm inist rat or for t he appropriat e I P addresses. Regardless of your part icular sit uat ion, do not creat e an arbit rary I P address; always follow t he guidelines above. For m ore inform at ion on address assignm ent , please refer t o RFC 1597, Address Allocat ion for Privat e I nt ernet s and RFC 1466, Guidelines for Managem ent of I P Address Space. 178 NBG6503 User’s Guide Appendix A IP Addresses and Subnetting IP Address Conflicts Each device on a net work m ust have a unique I P address. Devices wit h duplicat e I P addresses on t he sam e net work will not be able t o access t he I nt ernet or ot her resources. The devices m ay also be unreachable t hrough t he net work. Conflicting Computer IP Addresses Example More t han one device can not use t he sam e I P address. I n t he following exam ple com put er A has a st at ic ( or fixed) I P address t hat is t he sam e as t he I P address t hat a DHCP server assigns t o com put er B which is a DHCP client . Neit her can access t he I nt ernet . This problem can be solved by assigning a different st at ic I P address t o com put er A or set t ing com put er A t o obt ain an I P address aut om at ically. Figure 125 Conflict ing Com put er I P Addresses Exam ple Conflicting Router IP Addresses Example Since a rout er connect s different net works, it m ust have int erfaces using different net work num bers. For exam ple, if a rout er is set bet ween a LAN and t he I nt ernet ( WAN) , t he rout er ’s LAN and WAN addresses m ust be on different subnet s. I n t he following exam ple, t he LAN and WAN are on t he sam e subnet . The LAN com put ers cannot access t he I nt ernet because t he rout er cannot rout e bet ween net works. Figure 126 Conflict ing Rout er I P Addresses Exam ple NBG6503 User’s Guide 179 Appendix A IP Addresses and Subnetting Conflicting Computer and Router IP Addresses Example More t han one device can not use t he sam e I P address. I n t he following exam ple, t he com put er and t he rout er ’s LAN port bot h use 192.168.1.1 as t he I P address. The com put er cannot access t he I nt ernet . This problem can be solved by assigning a different I P address t o t he com put er or t he rout er ’s LAN port . Figure 127 Conflict ing Com put er and Rout er I P Addresses Exam ple 180 NBG6503 User’s Guide A PPENDIX Setting Up Your Computer’s IP Address Not e: Your specific Rout er m ay not support all of t he operat ing syst em s described in t his appendix. See t he product specificat ions for m ore inform at ion about which operat ing syst em s are support ed. This appendix shows you how t o configure t he I P set t ings on your com put er in order for it t o be able t o com m unicat e wit h t he ot her devices on your net work. Windows Vist a/ XP/ 2000, Mac OS 9/ OS X, and all versions of UNI X/ LI NUX include t he soft ware com ponent s you need t o use TCP/ I P on your com put er. I f you m anually assign I P inform at ion inst ead of using a dynam ic I P, m ake sure t hat your net work’s com put ers have I P addresses t hat place t hem in t he sam e subnet . I n t his appendix, you can set up an I P address for: • Windows XP/ NT/ 2000 on page 182 • Windows Vist a on page 185 • Windows 7 on page 189 • Mac OS X: 10.3 and 10.4 on page 193 • Mac OS X: 10.5 and 10.6 on page 196 • Linux: Ubunt u 8 ( GNOME) on page 199 • Linux: openSUSE 10.3 ( KDE) on page 203 NBG6503 User’s Guide 181 Appendix B Setting Up Your Computer’s IP Address Windows XP/NT/2000 The following exam ple uses t he default Windows XP display t hem e but can also apply t o Windows 2000 and Windows NT. 182 Click St a r t > Con t r ol Pa n e l. I n t he Cont r ol Pa n e l, click t he N e t w or k Con ne ct ion s icon. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Right- click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s. On t he Ge n e r a l t ab, select I n t e r n e t Pr ot ocol ( TCP/ I P) and t hen click Pr ope r t ie s. NBG6503 User’s Guide 183 Appendix B Setting Up Your Computer’s IP Address The I nt e r ne t Pr ot ocol TCP/ I P Pr ope r t ie s window opens. Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP. You m ay also have t o ent er a Pr e fe r r e d D N S se r ve r and an Alt e r na t e D N S se r ve r , if t hat inform at ion was provided. Click OK t o close t he I n t e r ne t Pr ot ocol ( TCP/ I P) Pr ope r t ie s window. Click OK t o close t he Loca l Ar e a Con n e ct ion Pr ope r t ie s window. Verifying Settings Click St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . I n t he Com m a nd Pr om pt window, t ype " ipconfig" and t hen press [ ENTER] . You can also go t o St a r t > Con t r ol Pa n e l > N e t w or k Con n e ct ions, right- click a net work connect ion, click St a t u s and t hen click t he Suppor t t ab t o view your I P address and connect ion inform at ion. 184 NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Windows Vista This sect ion shows screens from Windows Vist a Professional. Click St a r t > Cont r ol Pa n e l. I n t he Cont r ol Pa n e l, click t he N e t w or k a nd I n t e r n e t icon. Click t he N e t w or k a n d Sh a r ing Ce n t e r icon. NBG6503 User’s Guide 185 Appendix B Setting Up Your Computer’s IP Address Click M a n a ge n e t w or k con n e ct ions. Right- click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s. Not e: During t his procedure, click Con t inu e whenever Windows displays a screen saying t hat it needs your perm ission t o cont inue. 186 NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Select I n t e r n e t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) and t hen select Pr ope r t ie s. NBG6503 User’s Guide 187 Appendix B Setting Up Your Computer’s IP Address The I nt e r ne t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) Pr ope r t ie s window opens. Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP. You m ay also have t o ent er a Pr e fe r r e d D N S se r ve r and an Alt e r na t e D N S se r ve r , if t hat inform at ion was provided.Click Adva nce d. Click OK t o close t he I n t e r ne t Pr ot ocol ( TCP/ I P) Pr ope r t ie s window. 10 Click OK t o close t he Loca l Ar e a Con n e ct ion Pr ope r t ie s window. Verifying Settings Click St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . I n t he Com m a nd Pr om pt window, t ype " ipconfig" and t hen press [ ENTER] . You can also go t o St a r t > Con t r ol Pa n e l > N e t w or k Con n e ct ions, right- click a net work connect ion, click St a t u s and t hen click t he Suppor t t ab t o view your I P address and connect ion inform at ion. 188 NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Windows 7 This sect ion shows screens from Windows 7 Ent erprise. Click St a r t > Cont r ol Pa n e l. I n t he Cont r ol Pa n e l, click Vie w ne t w or k st a t us a nd t a sk s under t he N e t w or k a n d I n t e r n e t cat egory. Click Ch a n ge a da pt e r se t t in gs. NBG6503 User’s Guide 189 Appendix B Setting Up Your Computer’s IP Address Double click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s. Not e: During t his procedure, click Con t inu e whenever Windows displays a screen saying t hat it needs your perm ission t o cont inue. 190 NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Select I n t e r n e t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) and t hen select Pr ope r t ie s. NBG6503 User’s Guide 191 Appendix B Setting Up Your Computer’s IP Address The I nt e r ne t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) Pr ope r t ie s window opens. Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP. You m ay also have t o ent er a Pr e fe r r e d D N S se r ve r and an Alt e r na t e D N S se r ve r , if t hat inform at ion was provided. Click Adva nce d if you want t o configure advanced set t ings for I P, DNS and WI NS. 192 Click OK t o close t he I n t e r ne t Pr ot ocol ( TCP/ I P) Pr ope r t ie s window. Click OK t o close t he Loca l Ar e a Con n e ct ion Pr ope r t ie s window. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Verifying Settings Click St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . I n t he Com m a nd Pr om pt window, t ype " ipconfig" and t hen press [ ENTER] . The I P set t ings are displayed as follows. Mac OS X: 10.3 and 10.4 The screens in t his sect ion are from Mac OS X 10.4 but can also apply t o 10.3. Click Apple > Syst e m Pr e fe r e nce s. NBG6503 User’s Guide 193 Appendix B Setting Up Your Computer’s IP Address 194 I n t he Syst e m Pr e fe r e nce s window, click t he N e t w or k icon. When t he N e t w or k preferences pane opens, select Built - in Et he r ne t from t he net work connect ion t ype list , and t hen click Configu r e . NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address For dynam ically assigned set t ings, select Usin g D H CP from t he Configu r e I Pv4 list in t he TCP/ I P t ab. For st at ically assigned set t ings, do t he following: • From t he Configu r e I Pv4 list , select M a nua lly. • I n t he I P Addr e ss field, t ype your I P address. • I n t he Subn e t M a sk field, t ype your subnet m ask. • I n t he Rou t e r field, t ype t he I P address of your device. Click Apply N ow and close t he window. NBG6503 User’s Guide 195 Appendix B Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Applica t ions > Ut ilit ie s > N e t w or k Ut ilit ie s, and t hen select ing t he appropriat e N e t w or k I nt e r fa ce from t he I n fo t ab. Figure 128 Mac OS X 10.4: Net work Ut ilit y Mac OS X: 10.5 and 10.6 The screens in t his sect ion are from Mac OS X 10.5 but can also apply t o 10.6. 196 Click Apple > Syst e m Pr e fe r e nce s. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address I n Syst e m Pr e fe r e n ce s, click t he N e t w or k icon. When t he N e t w or k preferences pane opens, select Et he r ne t from t he list of available connect ion t ypes. From t he Configu r e list , select Usin g D H CP for dynam ically assigned set t ings. NBG6503 User’s Guide 197 Appendix B Setting Up Your Computer’s IP Address For st at ically assigned set t ings, do t he following: • From t he Configu r e list , select M a nua lly. • I n t he I P Addr e ss field, ent er your I P address. • I n t he Subn e t M a sk field, ent er your subnet m ask. • I n t he Rou t e r field, ent er t he I P address of your Rout er. 198 Click Apply and close t he window. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Applica t ions > Ut ilit ie s > N e t w or k Ut ilit ie s, and t hen select ing t he appropriat e N e t w or k int e r fa ce from t he I nfo t ab. Figure 129 Mac OS X 10.5: Net work Ut ilit y Linux: Ubuntu 8 (GNOME) This sect ion shows you how t o configure your com put er ’s TCP/ I P set t ings in t he GNU Obj ect Model Environm ent ( GNOME) using t he Ubunt u 8 Linux dist ribut ion. The procedure, screens and file locat ions m ay vary depending on your specific dist ribut ion, release version, and individual configurat ion. The following screens use t he default Ubunt u 8 inst allat ion. Not e: Make sur e you are logged in as t he root adm inist rat or. Follow t he st eps below t o configure your com put er I P address in GNOME: Click Syst e m > Adm in ist r a t ion > N e t w or k . NBG6503 User’s Guide 199 Appendix B Setting Up Your Computer’s IP Address 200 When t he N e t w or k Se t t in gs window opens, click Un lock t o open t he Aut he nt ica t e window. ( By default , t he Unlock but t on is greyed out unt il clicked.) You cannot m ake changes t o your configurat ion unless you first ent er your adm in password. I n t he Aut he nt ica t e window, ent er your adm in account nam e and password t hen click t he Aut he nt ica t e but t on. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address I n t he N e t w or k Se t t ings window, select t he connect ion t hat you want t o configure, t hen click Pr ope r t ie s. The Pr ope r t ie s dialog box opens. • I n t he Configu r a t ion list , select Au t om a t ic Con figu r a t ion ( D H CP) if you have a dynam ic I P address. • I n t he Configur a t ion list , select St a t ic I P a ddr e ss if you have a st at ic I P address. Fill in t he I P a ddr e ss, Subne t m a sk , and Ga t e w a y a ddr e ss fields. Click OK t o save t he changes and close t he Pr ope r t ie s dialog box and ret urn t o t he N e t w or k Se t t in gs screen. NBG6503 User’s Guide 201 Appendix B Setting Up Your Computer’s IP Address 202 I f you know your DNS server I P address( es) , click t he D N S t ab in t he N e t w or k Se t t in gs window and t hen ent er t he DNS server inform at ion in t he fields provided. Click t he Close but t on t o apply t he changes. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Syst e m > Adm in ist r a t ion > N e t w or k Tools, and t hen select ing t he appropriat e N e t w or k de vice from t he D e vice s t ab. The I n t e r fa ce St a t ist ics colum n shows dat a if your connect ion is working properly. Figure 130 Ubunt u 8: Net work Tools Linux: openSUSE 10.3 (KDE) This sect ion shows you how t o configure your com put er ’s TCP/ I P set t ings in t he K Deskt op Environm ent ( KDE) using t he openSUSE 10.3 Linux dist ribut ion. The procedure, screens and file locat ions m ay vary depending on your specific dist ribut ion, release version, and individual configurat ion. The following screens use t he default openSUSE 10.3 inst allat ion. Not e: Make sur e you are logged in as t he root adm inist rat or. Follow t he st eps below t o configure your com put er I P address in t he KDE: NBG6503 User’s Guide 203 Appendix B Setting Up Your Computer’s IP Address 204 Click K M e n u > Com pu t e r > Adm in ist r a t or Se t t in gs ( Ya ST) . When t he Run a s Root - KD E su dialog opens, ent er t he adm in password and click OK. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address When t he Ya ST Cont r ol Ce nt e r window opens, select N e t w or k D e vice s and t hen click t he N e t w or k Ca r d icon. When t he N e t w or k Se t t in gs window opens, click t he Ove r vie w t ab, select t he appropriat e connect ion N a m e from t he list , and t hen click t he Configu r e but t on. NBG6503 User’s Guide 205 Appendix B Setting Up Your Computer’s IP Address When t he N e t w or k Ca r d Se t u p window opens, click t he Addr e ss t ab Figure 131 openSUSE 10.3: Net work Card Set up Select D yna m ic Addr e ss ( D H CP) if you have a dynam ic I P address. Select St a t ica lly a ssign e d I P Addr e ss if you have a st at ic I P address. Fill in t he I P a ddr e ss, Subne t m a sk , and H ost na m e fields. 206 Click N e x t t o save t he changes and close t he N e t w or k Ca r d Se t up window. NBG6503 User’s Guide Appendix B Setting Up Your Computer’s IP Address I f you know your DNS server I P address( es) , click t he H ost na m e / D N S t ab in N e t w or k Se t t in gs and t hen ent er t he DNS server inform at ion in t he fields provided. Click Finish t o save your set t ings and close t he window. Verifying Settings Click t he KN e t w or k M a na ge r icon on t he Ta sk ba r t o check your TCP/ I P propert ies. From t he Opt ion s sub- m enu, select Sh ow Con n e ct ion I n for m a t ion . Figure 132 openSUSE 10.3: KNet work Manager NBG6503 User’s Guide 207 Appendix B Setting Up Your Computer’s IP Address When t he Conn e ct ion St a t u s - KN e t w or k M a n a ge r window opens, click t he St a t ist ics t a b t o see if your connect ion is working properly. Figure 133 openSUSE: Connect ion St at us - KNet work Manager 208 NBG6503 User’s Guide A PPENDIX Wireless LANs Wireless LAN Topologies This sect ion discusses ad- hoc and infrast ruct ure wireless LAN t opologies. Ad-hoc Wireless LAN Configuration The sim plest WLAN configurat ion is an independent ( Ad- hoc) WLAN t hat connect s a set of com put ers wit h wireless adapt ers ( A, B, C) . Any t im e t wo or m ore wireless adapt ers are wit hin range of each ot her, t hey can set up an independent net work, which is com m only referred t o as an ad- hoc net work or I ndependent Basic Service Set ( I BSS) . The following diagram shows an exam ple of not ebook com put ers using wireless adapt ers t o form an ad- hoc wireless LAN. Figure 134 Peer- t o- Peer Com m unicat ion in an Ad- hoc Net work BSS A Basic Service Set ( BSS) exist s when all com m unicat ions bet ween wireless client s or bet ween a wireless client and a wired net work client go t hrough one access point ( AP) . I nt ra- BSS t raffic is t raffic bet ween wireless client s in t he BSS. When I nt ra- BSS is enabled, wireless client A and B can access t he wired net work and com m unicat e wit h each ot her. When I nt ra- BSS is NBG6503 User’s Guide 209 Appendix C Wireless LANs disabled, wireless client A and B can st ill access t he wired net work but cannot com m unicat e wit h each ot her. Figure 135 Basic Service Set ESS An Ext ended Service Set ( ESS) consist s of a series of overlapping BSSs, each cont aining an access point , wit h each access point connect ed t oget her by a wired net work. This wired connect ion bet ween APs is called a Dist ribut ion Syst em ( DS) . This t ype of wireless LAN t opology is called an I nfrast ruct ure WLAN. The Access Point s not only provide com m unicat ion wit h t he wired net work but also m ediat e wireless net work t raffic in t he im m ediat e neighborhood. 210 NBG6503 User’s Guide Appendix C Wireless LANs An ESSI D ( ESS I Dent ificat ion) uniquely ident ifies each ESS. All access point s and t heir associat ed wireless client s wit hin t he sam e ESS m ust have t he sam e ESSI D in order t o com m unicat e. Figure 136 I nfrast ruct ure WLAN Channel A channel is t he radio frequency( ies) used by wireless devices t o t ransm it and receive dat a. Channels available depend on your geographical area. You m ay have a choice of channels ( for your region) so you should use a channel different from an adj acent AP ( access point ) t o reduce int erference. I nt erference occurs when radio signals from different access point s overlap causing int erference and degrading perform ance. Adj acent channels part ially overlap however. To avoid int erference due t o overlap, your AP should be on a channel at least five channels away from a channel t hat an adj acent AP is using. For exam ple, if your region has 11 channels and an adj acent AP is using channel 1, t hen you need t o select a channel bet ween 6 or 11. RTS/CTS A hidden node occurs when t wo st at ions are wit hin range of t he sam e access point , but are not wit hin range of each ot her. The following figure illust rat es a hidden node. Bot h st at ions ( STA) are wit hin range of t he access point ( AP) or wireless gat eway, but out- of- range of each ot her, so t hey NBG6503 User’s Guide 211 Appendix C Wireless LANs cannot " hear" each ot her, t hat is t hey do not know if t he channel is current ly being used. Therefore, t hey are considered hidden from each ot her. Figure 137 RTS/ CTS When st at ion A sends dat a t o t he AP, it m ight not know t hat t he st at ion B is already using t he channel. I f t hese t wo st at ions send dat a at t he sam e t im e, collisions m ay occur when bot h set s of dat a arrive at t he AP at t he sam e t im e, result ing in a loss of m essages for bot h st at ions. RTS/ CTS is designed t o prevent collisions due t o hidden nodes. An RTS/ CTS defines t he biggest size dat a fram e you can send before an RTS ( Request To Send) / CTS ( Clear t o Send) handshake is invoked. When a dat a fram e exceeds t he RTS/ CTS value you set , t he st at ion t hat want s t o t ransm it t his fram e m ust first send an RTS ( Request To Send) m essage t o t he AP for perm ission t o send it . The AP t hen responds wit h a CTS ( Clear t o Send) m essage t o all ot her st at ions wit hin it s range t o not ify t hem t o defer t heir t ransm ission. I t also reserves and confirm s wit h t he request ing st at ion t he t im e fram e for t he request ed t ransm ission. St at ions can send fram es sm aller t han t he specified RTS/ CTS direct ly t o t he AP wit hout t he RTS ( Request To Send) / CTS ( Clear t o Send) handshake. You should only configure RTS/ CTS if t he possibilit y of hidden nodes exist s on your net work and t he " cost " of resending large fram es is m ore t han t he ext ra net work overhead involved in t he RTS ( Request To Send) / CTS ( Clear t o Send) handshake. I f t he RTS/ CTS value is great er t han t he Fr a gm e nt a t ion Thr e sh old value ( see next ) , t hen t he RTS ( Request To Send) / CTS ( Clear t o Send) handshake will never occur as dat a fram es will be fragm ent ed before t hey reach RTS/ CTS size. Not e: Enabling t he RTS Threshold causes redundant net w ork overhead t hat could negat ively affect t he t hroughput perfor m ance inst ead of pr oviding a rem edy. Fragmentation Threshold A Fr a gm e nt a t ion Thr e sh old is t he m axim um dat a fragm ent size t hat can be sent in t he wireless net work before t he AP will fragm ent t he packet int o sm aller dat a fram es. A large Fr a gm e n t a t ion Th r e sh old is recom m ended for net works not prone t o int erference while you should set a sm aller t hreshold for busy net works or net works t hat are prone t o int erference. 212 NBG6503 User’s Guide Appendix C Wireless LANs I f t he Fr a gm e nt a t ion Thr e shold value is sm aller t han t he RTS/ CTS value ( see previously) you set t hen t he RTS ( Request To Send) / CTS ( Clear t o Send) handshake will never occur as dat a fram es will be fragm ent ed before t hey reach RTS/ CTS size. Preamble Type Pream ble is used t o signal t hat dat a is com ing t o t he receiver. Short and long refer t o t he lengt h of t he synchronizat ion field in a packet . Short pream ble increases perform ance as less t im e sending pream ble m eans m ore t im e for sending dat a. All I EEE 802.11 com pliant wireless adapt ers support long pream ble, but not all support short pream ble. Use long pream ble if you are unsure what pream ble m ode ot her wireless devices on t he net work support , and t o provide m ore reliable com m unicat ions in busy wireless net works. Use short pream ble if you are sure all wireless devices on t he net work support it , and t o provide m ore efficient com m unicat ions. Use t he dynam ic set t ing t o aut om at ically use short pream ble when all wireless devices on t he net work support it , ot herwise t he Rout er uses long pream ble. Not e: The wireless devices MUST use t he sam e pream ble m ode in order t o com m unicat e. Wireless Security Overview Wireless securit y is vit al t o your net work t o prot ect wireless com m unicat ion bet ween wireless client s, access point s and t he wired net work. Wireless securit y m et hods available on t he Rout er are dat a encrypt ion, wireless client aut hent icat ion, rest rict ing access by device MAC address and hiding t he Rout er ident it y. The following figure shows t he relat ive effect iveness of t hese wireless securit y m et hods available on your Rout er. Table 82 Wireless Securit y Levels SECURITY LEVEL Least Secure SECURITY TYPE Unique SSI D ( Default ) Unique SSI D wit h Hide SSI D Enabled MAC Address Filt ering WEP Encrypt ion I EEE802.1x EAP wit h RADI US Server Aut hent icat ion Wi- Fi Prot ect ed Access ( WPA) WPA2 Most Secure Not e: You m ust enable t he sam e wireless securit y set t ings on t he Rout er and on all wireless client s t hat you want t o associat e wit h it . NBG6503 User’s Guide 213 Appendix C Wireless LANs IEEE 802.1x I n June 2001, t he I EEE 802.1x st andard was designed t o ext end t he feat ures of I EEE 802.11 t o support ext ended aut hent icat ion as well as providing addit ional account ing and cont rol feat ures. I t is support ed by Windows XP and a num ber of net work devices. Som e advant ages of I EEE 802.1x are: • User based ident ificat ion t hat allows for roam ing. • Support for RADI US ( Rem ot e Aut hent icat ion Dial I n User Service, RFC 2138, 2139) for cent ralized user profile and account ing m anagem ent on a net work RADI US server. • Support for EAP ( Ext ensible Aut hent icat ion Prot ocol, RFC 2486) t hat allows addit ional aut hent icat ion m et hods t o be deployed wit h no changes t o t he access point or t he wireless client s. RADIUS RADI US is based on a client- server m odel t hat support s aut hent icat ion, aut horizat ion and account ing. The access point is t he client and t he server is t he RADI US server. The RADI US server handles t he following t asks: • Aut hent icat ion Det erm ines t he ident it y of t he users. • Aut horizat ion Det erm ines t he net work services available t o aut hent icat ed users once t hey are connect ed t o t he net work. • Account ing Keeps t rack of t he client ’s net work act ivit y. RADI US is a sim ple package exchange in which your AP act s as a m essage relay bet ween t he wireless client and t he net work RADI US server. Types of RADIUS Messages The following t ypes of RADI US m essages are exchanged bet ween t he access point and t he RADI US server for user aut hent icat ion: • Access- Request Sent by an access point request ing aut hent icat ion. • Access- Rej ect Sent by a RADI US server rej ect ing access. • Access-Accept Sent by a RADI US server allowing access. • Access- Challenge Sent by a RADI US server request ing m ore inform at ion in order t o allow access. The access point sends a proper response from t he user and t hen sends anot her Access- Request m essage. The following t ypes of RADI US m essages are exchanged bet ween t he access point and t he RADI US server for user account ing: 214 NBG6503 User’s Guide Appendix C Wireless LANs • Account ing- Request Sent by t he access point request ing account ing. • Account ing- Response Sent by t he RADI US server t o indicat e t hat it has st art ed or st opped account ing. I n order t o ensure net work securit y, t he access point and t he RADI US server use a shared secret key, which is a password, t hey bot h know. The key is not sent over t he net work. I n addit ion t o t he shared key, password inform at ion exchanged is also encrypt ed t o prot ect t he net work from unaut horized access. Types of EAP Authentication This sect ion discusses som e popular aut hent icat ion t ypes: EAP- MD5, EAP-TLS, EAP-TTLS, PEAP and LEAP. Your wireless LAN device m ay not support all aut hent icat ion t ypes. EAP ( Ext ensible Aut hent icat ion Prot ocol) is an aut hent icat ion prot ocol t hat runs on t op of t he I EEE 802.1x t ransport m echanism in order t o support m ult iple t ypes of user aut hent icat ion. By using EAP t o int eract wit h an EAP- com pat ible RADI US server, an access point helps a wireless st at ion and a RADI US server perform aut hent icat ion. The t ype of aut hent icat ion you use depends on t he RADI US server and an int erm ediary AP( s) t hat support s I EEE 802.1x. . For EAP-TLS aut hent icat ion t ype, you m ust first have a wired connect ion t o t he net work and obt ain t he cert ificat e( s) from a cert ificat e aut horit y ( CA) . A cert ificat e ( also called digit al I Ds) can be used t o aut hent icat e users and a CA issues cert ificat es and guarant ees t he ident it y of each cert ificat e owner. EAP-MD5 (Message-Digest Algorithm 5) MD5 aut hent icat ion is t he sim plest one- way aut hent icat ion m et hod. The aut hent icat ion server sends a challenge t o t he wireless client . The wireless client ‘proves’ t hat it knows t he password by encrypt ing t he password wit h t he challenge and sends back t he inform at ion. Password is not sent in plain t ext . However, MD5 aut hent icat ion has som e weaknesses. Since t he aut hent icat ion server needs t o get t he plaint ext passwords, t he passwords m ust be st ored. Thus som eone ot her t han t he aut hent icat ion server m ay access t he password file. I n addit ion, it is possible t o im personat e an aut hent icat ion server as MD5 aut hent icat ion m et hod does not perform m ut ual aut hent icat ion. Finally, MD5 aut hent icat ion m et hod does not support dat a encrypt ion wit h dynam ic session key. You m ust configure WEP encrypt ion keys for dat a encrypt ion. EAP-TLS (Transport Layer Security) Wit h EAP-TLS, digit al cert ificat ions are needed by bot h t he server and t he wireless client s for m ut ual aut hent icat ion. The server present s a cert ificat e t o t he client . Aft er validat ing t he ident it y of t he server, t he client sends a different cert ificat e t o t he server. The exchange of cert ificat es is done in t he open before a secured t unnel is creat ed. This m akes user ident it y vulnerable t o passive at t acks. A digit al cert ificat e is an elect ronic I D card t hat aut hent icat es t he sender ’s ident it y. However, t o im plem ent EAP-TLS, you need a Cert ificat e Aut horit y ( CA) t o handle cert ificat es, which im poses a m anagem ent overhead. NBG6503 User’s Guide 215 Appendix C Wireless LANs EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an ext ension of t he EAP-TLS aut hent icat ion t hat uses cert ificat es for only t he serverside aut hent icat ions t o est ablish a secure connect ion. Client aut hent icat ion is t hen done by sending usernam e and password t hrough t he secure connect ion, t hus client ident it y is prot ect ed. For client aut hent icat ion, EAP-TTLS support s EAP m et hods and legacy aut hent icat ion m et hods such as PAP, CHAP, MS- CHAP and MS- CHAP v2. PEAP (Protected EAP) Like EAP-TTLS, server- side cert ificat e aut hent icat ion is used t o est ablish a secure connect ion, t hen use sim ple usernam e and password m et hods t hrough t he secured connect ion t o aut hent icat e t he client s, t hus hiding client ident it y. However, PEAP only support s EAP m et hods, such as EAP- MD5, EAP- MSCHAPv2 and EAP- GTC ( EAP- Generic Token Card) , for client aut hent icat ion. EAP- GTC is im plem ent ed only by Cisco. LEAP LEAP ( Light weight Ext ensible Aut hent icat ion Prot ocol) is a Cisco im plem ent at ion of I EEE 802.1x. Dynamic WEP Key Exchange The AP m aps a unique key t hat is generat ed wit h t he RADI US server. This key expires when t he wireless connect ion t im es out , disconnect s or reaut hent icat ion t im es out . A new WEP key is generat ed each t im e reaut hent icat ion is perform ed. I f t his feat ure is enabled, it is not necessary t o configure a default encrypt ion key in t he wireless securit y configurat ion screen. You m ay st ill configure and st ore keys, but t hey will not be used while dynam ic WEP is enabled. Not e: EAP- MD5 cannot be used wit h Dynam ic WEP Key Exchange For added securit y, cert ificat e- based aut hent icat ions ( EAP-TLS, EAP-TTLS and PEAP) use dynam ic keys for dat a encrypt ion. They are oft en deployed in corporat e environm ent s, but for public deploym ent , a sim ple user nam e and password pair is m ore pract ical. The following t able is a com parison of t he feat ures of aut hent icat ion t ypes. Table 83 Com parison of EAP Aut hent icat ion Types 216 EAP-MD5 EAP-TLS EAP-TTLS PEAP LEAP Mut ual Aut hent icat ion No Yes Yes Yes Yes Cert ificat e – Client No Yes Opt ional Opt ional No Cert ificat e – Server No Yes Yes Yes No Dynam ic Key Exchange No Yes Yes Yes Yes Credent ial I nt egrit y None St rong St rong St rong Moderat e Deploym ent Difficult y Easy Hard Moderat e Moderat e Moderat e Client I dent it y Prot ect ion No No Yes Yes No NBG6503 User’s Guide Appendix C Wireless LANs WPA and WPA2 Wi- Fi Prot ect ed Access ( WPA) is a subset of t he I EEE 802.11i st andard. WPA2 ( I EEE 802.11i) is a wireless securit y st andard t hat defines st ronger encrypt ion, aut hent icat ion and key m anagem ent t han WPA. Key differences bet ween WPA or WPA2 and WEP are im proved dat a encrypt ion and user aut hent icat ion. I f bot h an AP and t he wireless client s support WPA2 and you have an ext ernal RADI US server, use WPA2 for st ronger dat a encrypt ion. I f you don't have an ext ernal RADI US server, you should use WPA2- PSK ( WPA2- Pre- Shared Key) t hat only requires a single ( ident ical) password ent ered int o each access point , wireless gat eway and wireless client . As long as t he passwords m at ch, a wireless client will be grant ed access t o a WLAN. I f t he AP or t he wireless client s do not support WPA2, j ust use WPA or WPA- PSK depending on whet her you have an ext ernal RADI US server or not . Select WEP only when t he AP and/ or wireless client s do not support WPA or WPA2. WEP is less secure t han WPA or WPA2. Encryption WPA im proves dat a encrypt ion by using Tem poral Key I nt egrit y Prot ocol ( TKI P) , Message I nt egrit y Check ( MI C) and I EEE 802.1x. WPA2 also uses TKI P when required for com pat ibilit y reasons, but offers st ronger encrypt ion t han TKI P wit h Advanced Encrypt ion St andard ( AES) in t he Count er m ode wit h Cipher block chaining Message aut hent icat ion code Prot ocol ( CCMP) . TKI P uses 128- bit keys t hat are dynam ically generat ed and dist ribut ed by t he aut hent icat ion server. AES ( Advanced Encrypt ion St andard) is a block cipher t hat uses a 256- bit m at hem at ical algorit hm called Rij ndael. They bot h include a per- packet key m ixing funct ion, a Message I nt egrit y Check ( MI C) nam ed Michael, an ext ended init ializat ion vect or ( I V) wit h sequencing rules, and a re- keying m echanism . WPA and WPA2 regularly change and rot at e t he encrypt ion keys so t hat t he sam e encrypt ion key is never used t wice. The RADI US server dist ribut es a Pairwise Mast er Key ( PMK) key t o t he AP t hat t hen set s up a key hierarchy and m anagem ent syst em , using t he PMK t o dynam ically generat e unique dat a encrypt ion keys t o encrypt every dat a packet t hat is wirelessly com m unicat ed bet ween t he AP and t he wireless client s. This all happens in t he background aut om at ically. The Message I nt egrit y Check ( MI C) is designed t o prevent an at t acker from capt uring dat a packet s, alt ering t hem and resending t hem . The MI C provides a st rong m at hem at ical funct ion in which t he receiver and t he t ransm it t er each com put e and t hen com pare t he MI C. I f t hey do not m at ch, it is assum ed t hat t he dat a has been t am pered wit h and t he packet is dropped. By generat ing unique dat a encrypt ion keys for every dat a packet and by creat ing an int egrit y checking m echanism ( MI C) , wit h TKI P and AES it is m ore difficult t o decrypt dat a on a Wi- Fi net work t han WEP and difficult for an int ruder t o break int o t he net work. The encrypt ion m echanism s used for WPA( 2) and WPA( 2) - PSK are t he sam e. The only difference bet ween t he t wo is t hat WPA( 2) - PSK uses a sim ple com m on password, inst ead of user- specific credent ials. The com m on- password approach m akes WPA( 2) - PSK suscept ible t o brut e- force NBG6503 User’s Guide 217 Appendix C Wireless LANs password- guessing at t acks but it ’s st ill an im provem ent over WEP as it em ploys a consist ent , single, alphanum eric password t o derive a PMK which is used t o generat e unique t em poral encrypt ion keys. This prevent all wireless devices sharing t he sam e encrypt ion keys. ( a weakness of WEP) User Authentication WPA and WPA2 apply I EEE 802.1x and Ext ensible Aut hent icat ion Prot ocol ( EAP) t o aut hent icat e wireless client s using an ext ernal RADI US dat abase. WPA2 reduces t he num ber of key exchange m essages from six t o four ( CCMP 4- way handshake) and short ens t he t im e required t o connect t o a net work. Ot her WPA2 aut hent icat ion feat ures t hat are different from WPA include key caching and pre- aut hent icat ion. These t wo feat ures are opt ional and m ay not be support ed in all wireless devices. Key caching allows a wireless client t o st ore t he PMK it derived t hrough a successful aut hent icat ion wit h an AP. The wireless client uses t he PMK when it t ries t o connect t o t he sam e AP and does not need t o go wit h t he aut hent icat ion process again. Pre- aut hent icat ion enables fast roam ing by allowing t he wireless client ( already connect ing t o an AP) t o perform I EEE 802.1x aut hent icat ion wit h anot her AP before connect ing t o it . Wireless Client WPA Supplicants A wireless client supplicant is t he soft ware t hat runs on an operat ing syst em inst ruct ing t he wireless client how t o use WPA. At t he t im e of writ ing, t he m ost widely available supplicant is t he WPA pat ch for Windows XP, Funk Soft ware's Odyssey client . The Windows XP pat ch is a free download t hat adds WPA capabilit y t o Windows XP's built- in " Zero Configurat ion" wireless client . However, you m ust run Windows XP t o use it . WPA(2) with RADIUS Application Example To set up WPA( 2) , you need t he I P address of t he RADI US server, it s port num ber ( default is 1812) , and t he RADI US shared secret . A WPA( 2) applicat ion exam ple wit h an ext ernal RADI US server looks as follows. " A" is t he RADI US server. " DS" is t he dist ribut ion syst em . 218 The AP passes t he wireless client 's aut hent icat ion request t o t he RADI US server. The RADI US server t hen checks t he user's ident ificat ion against it s dat abase and grant s or denies net work access accordingly. A 256- bit Pairwise Mast er Key ( PMK) is derived from t he aut hent icat ion process by t he RADI US server and t he client . NBG6503 User’s Guide Appendix C Wireless LANs The RADI US server dist ribut es t he PMK t o t he AP. The AP t hen set s up a key hierarchy and m anagem ent syst em , using t he PMK t o dynam ically generat e unique dat a encrypt ion keys. The keys are used t o encrypt every dat a packet t hat is wirelessly com m unicat ed bet ween t he AP and t he wireless client s. Figure 138 WPA( 2) wit h RADI US Applicat ion Exam ple WPA(2)-PSK Application Example A WPA( 2) - PSK applicat ion looks as follows. First ent er ident ical passwords int o t he AP and all wireless client s. The Pre- Shared Key ( PSK) m ust consist of bet ween 8 and 63 ASCI I charact ers or 64 hexadecim al charact ers ( including spaces and sym bols) . The AP checks each wireless client 's password and allows it t o j oin t he net work only if t he password m at ches. The AP and wireless client s generat e a com m on PMK ( Pairwise Mast er Key) . The key it self is not sent over t he net work, but is derived from t he PSK and t he SSI D. NBG6503 User’s Guide 219 Appendix C Wireless LANs The AP and wireless client s use t he TKI P or AES encrypt ion process, t he PMK and inform at ion exchanged in a handshake t o creat e t em poral encrypt ion keys. They use t hese keys t o encrypt dat a exchanged bet ween t hem . Figure 139 WPA( 2) - PSK Aut hent icat ion Security Parameters Summary Refer t o t his t able t o see what ot her securit y param et ers you should configure for each aut hent icat ion m et hod or key m anagem ent prot ocol t ype. MAC address filt ers are not dependent on how you configure t hese securit y feat ures. Table 84 Wireless Securit y Relat ional Mat rix AUTHENTICATION ENCRYPTIO METHOD/ KEY MANAGEMENT PROTOCOL N METHOD ENTER MANUAL KEY IEEE 802.1X Open No Disable None Enable wit hout Dynam ic WEP Key Open Shared WEP WEP No Enable wit h Dynam ic WEP Key Yes Enable wit hout Dynam ic WEP Key Yes Disable No Enable wit h Dynam ic WEP Key Yes Enable wit hout Dynam ic WEP Key Yes Disable WPA TKI P/ AES No Enable WPA- PSK TKI P/ AES Yes Disable WPA2 TKI P/ AES No Enable WPA2- PSK TKI P/ AES Yes Disable Antenna Overview An ant enna couples RF signals ont o air. A t ransm it t er wit hin a wireless device sends an RF signal t o t he ant enna, which propagat es t he signal t hrough t he air. The ant enna also operat es in reverse by capt uring RF signals from t he air. 220 NBG6503 User’s Guide Appendix C Wireless LANs Posit ioning t he ant ennas properly increases t he range and coverage area of a wireless LAN. Antenna Characteristics Frequency An ant enna in t he frequency of 2.4GHz or 5GHz is needed t o com m unicat e efficient ly in a wireless LAN Radiation Pattern A radiat ion pat t ern is a diagram t hat allows you t o visualize t he shape of t he ant enna’s coverage area. Antenna Gain Ant enna gain, m easured in dB ( decibel) , is t he increase in coverage wit hin t he RF beam widt h. Higher ant enna gain im proves t he range of t he signal for bet t er com m unicat ions. For an indoor sit e, each 1 dB increase in ant enna gain result s in a range increase of approxim at ely 2.5% . For an unobst ruct ed out door sit e, each 1dB increase in gain result s in a range increase of approxim at ely 5% . Act ual result s m ay vary depending on t he net work environm ent . Ant enna gain is som et im es specified in dBi, which is how m uch t he ant enna increases t he signal power com pared t o using an isot ropic ant enna. An isot ropic ant enna is a t heoret ical perfect ant enna t hat sends out radio signals equally well in all direct ions. dBi represent s t he t rue gain t hat t he ant enna provides. Types of Antennas for WLAN There are t wo t ypes of ant ennas used for wireless LAN applicat ions. • Om ni- direct ional ant ennas send t he RF signal out in all direct ions on a horizont al plane. The coverage area is t orus- shaped ( like a donut ) which m akes t hese ant ennas ideal for a room environm ent . Wit h a wide coverage area, it is possible t o m ake circular overlapping coverage areas wit h m ult iple access point s. • Direct ional ant ennas concent rat e t he RF signal in a beam , like a flashlight does wit h t he light from it s bulb. The angle of t he beam det erm ines t he widt h of t he coverage pat t ern. Angles t ypically range from 20 degrees ( very direct ional) t o 120 degrees ( less direct ional) . Direct ional ant ennas are ideal for hallways and out door point- t o- point applicat ions. Positioning Antennas I n general, ant ennas should be m ount ed as high as pract ically possible and free of obst ruct ions. I n point- t o–point applicat ion, posit ion bot h ant ennas at t he sam e height and in a direct line of sight t o each ot her t o at t ain t he best perform ance. For om ni- direct ional ant ennas m ount ed on a t able, desk, and so on, point t he ant enna up. For om ni- direct ional ant ennas m ount ed on a wall or ceiling, point t he ant enna down. For a single AP applicat ion, place om ni- direct ional ant ennas as close t o t he cent er of t he coverage area as possible. NBG6503 User’s Guide 221 Appendix C Wireless LANs For direct ional ant ennas, point t he ant enna in t he direct ion of t he desired coverage area. 222 NBG6503 User’s Guide A PPENDIX Common Services The following t able list s som e com m only- used services and t heir associat ed prot ocols and port num bers. For a com prehensive list of port num bers, I CMP t ype/ code num bers and services, visit t he I ANA ( I nt ernet Assigned Num ber Aut horit y) web sit e. • N a m e : This is a short , descript ive nam e for t he service. You can use t his one or creat e a different one, if you like. • Pr ot ocol: This is t he t ype of I P prot ocol used by t he service. I f t his is TCP/ UD P, t hen t he service uses t he sam e port num ber wit h TCP and UDP. I f t his is USER- D EFI N ED, t he Por t ( s) is t he I P prot ocol num ber, not t he port num ber. • Por t ( s) : This value depends on t he Pr ot ocol. Please refer t o RFC 1700 for furt her inform at ion about port num bers. • I f t he Pr ot ocol is TCP, UD P, or TCP/ UD P, t his is t he I P port num ber. • I f t he Pr ot ocol is USER, t his is t he I P prot ocol num ber. • D e scr ipt ion : This is a brief explanat ion of t he applicat ions t hat use t his service or t he sit uat ions in which t his service is used. Table 85 Com m only Used Services NAME PROTOCOL PORT(S) DESCRIPTION AH ( I PSEC_TUNNEL) User- Defined 51 The I PSEC AH ( Aut hent icat ion Header) t unneling prot ocol uses t his service. AI M/ New- I CQ TCP 5190 AOL’s I nt ernet Messenger service. I t is also used as a list ening port by I CQ. AUTH TCP 113 Aut hent icat ion prot ocol used by som e servers. BGP TCP 179 Border Gat eway Prot ocol. BOOTP_CLI ENT UDP 68 DHCP Client . BOOTP_SERVER UDP 67 DHCP Server. CU- SEEME TCP 7648 A popular videoconferencing solut ion from Whit e Pines Soft ware. UDP 24032 DNS TCP/ UDP 53 Dom ain Nam e Server, a service t hat m at ches web nam es ( for exam ple www.zyxel.com ) t o I P num bers. ESP ( I PSEC_TUNNEL) User- Defined 50 The I PSEC ESP ( Encapsulat ion Securit y Prot ocol) t unneling prot ocol uses t his service. FI NGER TCP 79 Finger is a UNI X or I nt ernet relat ed com m and t hat can be used t o find out if a user is logged on. FTP TCP 20 TCP 21 File Transfer Program , a program t o enable fast t ransfer of files, including large files t hat m ay not be possible by e- m ail. TCP 1720 Net Meet ing uses t his prot ocol. H.323 NBG6503 User’s Guide 223 Appendix D Common Services Table 85 Com m only Used Services ( cont inued) 224 NAME PROTOCOL PORT(S) DESCRIPTION HTTP TCP 80 Hyper Text Transfer Prot ocol - a client / server prot ocol for t he world wide web. HTTPS TCP 443 HTTPS is a secured ht t p session oft en used in e- com m erce. I CMP User- Defined I nt ernet Cont rol Message Prot ocol is oft en used for diagnost ic or rout ing purposes. I CQ UDP 4000 This is a popular I nt ernet chat program . I GMP ( MULTI CAST) User- Defined I nt ernet Group Managem ent Prot ocol is used when sending packet s t o a specific group of host s. I KE UDP 500 The I nt ernet Key Exchange algorit hm is used for key dist ribut ion and m anagem ent . I RC TCP/ UDP 6667 This is anot her popular I nt ernet chat program . MSN Messenger TCP 1863 Microsoft Net works’ m essenger service uses t his prot ocol. NEW- I CQ TCP 5190 An I nt ernet chat program . NEWS TCP 144 A prot ocol for news groups. NFS UDP 2049 Net work File Syst em - NFS is a client / server dist ribut ed file service t hat provides t ransparent file sharing for net work environm ent s. NNTP TCP 119 Net work News Transport Prot ocol is t he delivery m echanism for t he USENET newsgroup service. PI NG User- Defined Packet I Nt ernet Groper is a prot ocol t hat sends out I CMP echo request s t o t est whet her or not a rem ot e host is reachable. POP3 TCP 110 Post Office Prot ocol version 3 let s a client com put er get e- m ail from a POP3 server t hrough a t em porary connect ion ( TCP/ I P or ot her) . PPTP TCP 1723 Point- t o- Point Tunneling Prot ocol enables secure t ransfer of dat a over public net works. This is t he cont rol channel. PPTP_TUNNEL ( GRE) User- Defined 47 PPTP ( Point- t o- Point Tunneling Prot ocol) enables secure t ransfer of dat a over public net works. This is t he dat a channel. RCMD TCP 512 Rem ot e Com m and Service. REAL_AUDI O TCP 7070 A st ream ing audio service t hat enables real t im e sound over t he web. REXEC TCP 514 Rem ot e Execut ion Daem on. RLOGI N TCP 513 Rem ot e Login. RTELNET TCP 107 Rem ot e Telnet . RTSP TCP/ UDP 554 The Real Tim e St ream ing ( m edia cont rol) Prot ocol ( RTSP) is a rem ot e cont rol for m ult im edia on t he I nt ernet . SFTP TCP 115 Sim ple File Transfer Prot ocol. NBG6503 User’s Guide Appendix D Common Services Table 85 Com m only Used Services ( cont inued) NAME PROTOCOL PORT(S) DESCRIPTION SMTP TCP 25 Sim ple Mail Transfer Prot ocol is t he m essage- exchange st andard for t he I nt ernet . SMTP enables you t o m ove m essages from one e- m ail server t o anot her. SNMP TCP/ UDP 161 Sim ple Net work Managem ent Program . SNMP-TRAPS TCP/ UDP 162 Traps for use wit h t he SNMP ( RFC: 1215) . SQL- NET TCP 1521 St ruct ured Query Language is an int erface t o access dat a on m any different t ypes of dat abase syst em s, including m ainfram es, m idrange syst em s, UNI X syst em s and net work servers. SSH TCP/ UDP 22 Secure Shell Rem ot e Login Program . STRM WORKS UDP 1558 St ream Works Prot ocol. SYSLOG UDP 514 Syslog allows you t o send syst em logs t o a UNI X server. TACACS UDP 49 Login Host Prot ocol used for ( Term inal Access Cont roller Access Cont rol Syst em ) . TELNET TCP 23 Telnet is t he login and t erm inal em ulat ion prot ocol com m on on t he I nt ernet and in UNI X environm ent s. I t operat es over TCP/ I P net works. I t s prim ary funct ion is t o allow users t o log int o rem ot e host syst em s. TFTP UDP 69 Trivial File Transfer Prot ocol is an I nt ernet file t ransfer prot ocol sim ilar t o FTP, but uses t he UDP ( User Dat agram Prot ocol) rat her t han TCP ( Transm ission Cont rol Prot ocol) . VDOLI VE TCP 7000 Anot her videoconferencing solut ion. NBG6503 User’s Guide 225 A PPENDIX Legal Information Copyright Copyright © 2013 by ZyXEL Com m unicat ions Corporat ion. The cont ent s of t his publicat ion m ay not be reproduced in any part or as a whole, t ranscribed, st ored in a ret rieval syst em , t ranslat ed int o any language, or t ransm it t ed in any form or by any m eans, elect ronic, m echanical, m agnet ic, opt ical, chem ical, phot ocopying, m anual, or ot herwise, wit hout t he prior writ t en perm ission of ZyXEL Com m unicat ions Corporat ion. Published by ZyXEL Com m unicat ions Corporat ion. All right s reserved. Disclaimer ZyXEL does not assum e any liabilit y arising out of t he applicat ion or use of any product s, or soft ware described her ein. Neit her does it convey any license under it s pat ent right s nor t he pat ent right s of ot hers. ZyXEL furt her reserves t he right t o m ake changes in any product s described herein wit hout not ice. This publicat ion is subj ect t o change w it hout not ice. Certifications Federal Communications Commission (FCC) Interference Statement The device com plies wit h Part 15 of FCC rules. Operat ion is subj ect t o t he following t wo condit ions: • This device m ay not cause harm ful int erference. • This device m ust accept any int erference received, including int erference t hat m ay cause undesired operat ions. This device has been t est ed and found t o com ply wit h t he lim it s for a Class B digit al device pursuant t o Part 15 of t he FCC Rules. These lim it s are designed t o provide reasonable prot ect ion against harm ful int erference in a resident ial inst allat ion. This device generat es, uses, and can radiat e radio frequency energy, and if not inst alled and used in accordance wit h t he inst ruct ions, m ay cause harm ful int erference t o radio com m unicat ions. However, t here is no guarant ee t hat int erference will not occur in a part icular inst allat ion. I f t his device does cause harm ful int erference t o radio/ t elevision recept ion, which can be det erm ined by t urning t he device off and on, t he user is encouraged t o t ry t o correct t he int erference by one or m ore of t he following m easures: Reorient or relocat e t he receiving ant enna. I ncrease t he separat ion bet ween t he equipm ent and t he receiver. Connect t he equipm ent int o an out let on a circuit different from t hat t o which t he receiver is connect ed. NBG6503 User’s Guide 227 Appendix E Legal Information Consult t he dealer or an experienced radio/ TV t echnician for help. FCC Radiation Exposure Statement • This t ransm it t er m ust not be co- locat ed or operat ing in conj unct ion wit h any ot her ant enna or t ransm it t er. • I EEE 802.11b or 802.11g operat ion of t his product in t he U.S.A. is firm ware- lim it ed t o channels 1 t hrough 11. • To com ply wit h FCC RF exposure com pliance requirem ent s, a separat ion dist ance of at least 20 cm m ust be m aint ained bet ween t he ant enna of t his device and all persons. • For operat ion wit hin 5.15 ~ 5.25GHz frequency range, it is rest rict ed t o indoor environm ent . 注意 ! 依據 低 率電波輻射性電機管理辦法 第十二條 經型式認證合格之低 率射頻電機,非經許可,公司 者均不得擅自變更頻率 大 率或變更原設計之特性及 能 商號或使用 第十四條 低 率射頻電機之使用不得影響飛航安 及干擾合法通信;經發現 有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用 前項合法通信,指依電信規定作業之無線電信 低 率射頻電機須忍 受合法通信或工業 科學及醫療用電波輻射性電機設備之干擾 本機限在不干擾合法電臺與不受被干擾保障條件下於室 減少電磁波影響,請妥適使用 使用 Notices Changes or m odificat ions not expressly approved by t he part y responsible for com pliance could void t he user's aut horit y t o operat e t he equipm ent . This device has been designed for t he WLAN 2.4 GHz net work t hroughout t he EC region and Swit zerland, wit h rest rict ions in France. This Class B digit al apparat us com plies wit h Canadian I CES- 003. Cet appareil num érique de la classe B est conform e à la norm e NMB- 003 du Canada. Industry Canada Statement This device com plies wit h RSS- 210 of t he I ndust ry Canada Rules. Operat ion is subj ect t o t he following t wo condit ions: 228 t his device m ay not cause int erference and t his device m ust accept any int erference, including int erference t hat m ay cause undesired operat ion of t he device NBG6503 User’s Guide Appendix E Legal Information This device has been designed t o operat e wit h an ant enna having a m axim um gain of 5dBi. Ant enna having a higher gain is st rict ly prohibit ed per regulat ions of I ndust ry Canada. The required ant enna im pedance is 50 ohm s. To reduce pot ent ial radio int erference t o ot her users, t he ant enna t ype and it s gain should be so chosen t hat t he EI RP is not m ore t han required for successful com m unicat ion. IC Radiation Exposure Statement: This equipm ent com plies wit h I C radiat ion exposure lim it s set fort h for an uncont rolled environm ent . This equipm ent should be inst alled and operat ed wit h m inim um dist ance 20cm bet ween t he radiat or & your body. Viewing Certifications Go t o ht t p: / / www.zyxel.com . Select your product on t he ZyXEL hom e page t o go t o t hat product 's page. Select t he cert ificat ion you wish t o view from t his page. ZyXEL Limited Warranty ZyXEL warrant s t o t he original end user ( purchaser) t hat t his product is free from any defect s in m at erial or workm anship for a specific period ( t he Warrant y Period) from t he dat e of purchase. The Warrant y Period varies by region. Check wit h your vendor and/ or t he aut horized ZyXEL local dist ribut or for det ails about t he Warrant y Period of t his product . During t he warrant y period, and upon proof of purchase, should t he product have indicat ions of failure due t o fault y workm anship and/ or m at erials, ZyXEL will, at it s discret ion, repair or replace t he defect ive product s or com ponent s wit hout charge for eit her part s or labor, and t o what ever ext ent it shall deem necessary t o rest ore t he product or com ponent s t o proper operat ing condit ion. Any replacem ent will consist of a new or re- m anufact ured funct ionally equivalent product of equal or higher value, and will be solely at t he discret ion of ZyXEL. This warrant y shall not apply if t he product has been m odified, m isused, t am pered wit h, dam aged by an act of God, or subj ect ed t o abnorm al working condit ions. Note Repair or replacem ent , as provided under t his warrant y, is t he exclusive rem edy of t he purchaser. This warrant y is in lieu of all ot her warrant ies, express or im plied, including any im plied warrant y of m erchant abilit y or fit ness for a part icular use or purpose. ZyXEL shall in no event be held liable for indirect or consequent ial dam ages of any kind t o t he purchaser. To obt ain t he services of t his warrant y, cont act your vendor. You m ay also refer t o t he warrant y policy for t he region in which you bought t he device at ht t p: / / www.zyxel.com / web/ support _warrant y_info.php. Registration Regist er your product online t o receive e- m ail not ices of firm ware upgrades and inform at ion at www.zyxel.com . NBG6503 User’s Guide 229 Appendix E Legal Information Open Source Licenses This product cont ains in part som e free soft ware dist ribut ed under GPL license t erm s and/ or GPL like licenses. Open source licenses are provided wit h t he firm ware package. You can download t he lat est firm ware at www.zyxel.com . To obt ain t he source code covered under t hose Licenses, please cont act support @zyxel.com .t w t o get it . Regulatory Information European Union The following inform at ion applies if you use t he product wit hin t he European Union. Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive) Com pliance I nform at ion for 2.4GHz and 5GHz Wireless Product s Relevant t o t he EU and Ot her Count ries Following t he EU Direct ive 1999/ 5/ EC ( R&TTE Direct ive) [ Czech] ZyXEL t ím t o prohlašuj e, že t ent o zařízení j e ve shodě se základním i požadavky a dalším i příslušným i ust anovením i sm ěrnice 1999/ 5/ EC. [ Danish] Undert egnede ZyXEL erklærer herved, at følgende udst yr udst yr overholder de væsent lige krav og øvrige relevant e krav i direkt iv 1999/ 5/ EF. [ Germ an] Hierm it erklärt ZyXEL, dass sich das Gerät Ausst at t ung in Übereinst im m ung m it den grundlegenden Anforderungen und den übrigen einschlägigen Best im m ungen der Richt linie 1999/ 5/ EU befindet . [ Est onian] Käesolevaga kinnit ab ZyXEL seadm e seadm ed vast avust direkt iivi 1999/ 5/ EÜ põhinõuet ele j a nim et at ud direkt iivist t ulenevat ele t eist ele asj akohast ele sät et ele. English Hereby, ZyXEL declares t hat t his equipm ent is in com pliance wit h t he essent ial requirem ent s and ot her relevant provisions of Direct ive 1999/ 5/ EC. [ Spanish] Por m edio de la present e ZyXEL declara que el equipo cum ple con los requisit os esenciales y cualesquiera ot ras disposiciones aplicables o exigibles de la Direct iva 1999/ 5/ CE. [ Greek] 230 Ε Η Α Α ZyXEL ∆Η Ω Ε Ω∆Ε Α Α Η Ε Α ε Ε π ισ ός ΦΩ Ε Α ΧΕ Ε ∆ Α Α Ε Η ∆ΗΓ Α 1999/ 5/ ΕC. [ French] Par la présent e ZyXEL déclare que l'appareil équipem ent s est conform e aux exigences essent ielles et aux aut res disposit ions pert inent es de la direct ive 1999/ 5/ EC. [ I t alian] Con la present e ZyXEL dichiara che quest o at t rezzat ura è conform e ai requisit i essenziali ed alle alt re disposizioni pert inent i st abilit e dalla diret t iva 1999/ 5/ CE. [ Lat vian] Ar šo ZyXEL deklarē, ka iekārt as at bilst Direkt īvas 1999/ 5/ EK būt iskaj ām prasībām un cit iem ar t o saist īt aj iem not eikum iem . [ Lit huanian] Šiuo ZyXEL deklaruoj a, kad šis įranga at it inka esm inius reikalavim us ir kit as 1999/ 5/ EB Direkt yvos nuost at as. [ Dut ch] Hierbij verklaart ZyXEL dat het t oest el uit rust ing in overeenst em m ing is m et de essent iële eisen en de andere relevant e bepalingen van richt lij n 1999/ 5/ EC. [ Malt ese] Hawnhekk, ZyXEL, j iddikj ara li dan t agħm ir j ikkonform a m al- ħt iġij iet essenzj ali u m a provvedim ent i oħraj n relevant i li hem m fid- Dirret t iva 1999/ 5/ EC. [ Hungarian] Alulírot t , ZyXEL nyilat kozom , hogy a berendezés m egfelel a vonat kozó alapvet õ követ elm ényeknek és az 1999/ 5/ EK irányelv egyéb elõírásainak. [ Polish] Niniej szym ZyXEL oświadcza, że sprzęt j est zgodny z zasadniczym i wym ogam i oraz pozost ałym i st osownym i post anowieniam i Dyrekt ywy 1999/ 5/ EC. NBG6503 User’s Guide Appendix E Legal Information [ Port uguese] ZyXEL declara que est e equipam ent o est á conform e com os requisit os essenciais e out ras disposições da Direct iva 1999/ 5/ EC. [ Slovenian] ZyXEL izj avlj a, da j e t a oprem a v skladu z bist venim i zaht evam i in ost alim i relevant nim i določili direkt ive 1999/ 5/ EC. [ Slovak] ZyXEL t ým t o vyhlasuj e, že zariadenia spĺňa základné požiadavky a všet ky príslušné ust anovenia Sm ernice 1999/ 5/ EC. [ Finnish] ZyXEL vakuut t aa t ät en et t ä lait t eet t yyppinen lait e on direkt iivin 1999/ 5/ EY oleellist en vaat im ust en j a sit ä koskevien direkt iivin m uiden eht oj en m ukainen. [ Swedish] Härm ed int ygar ZyXEL at t denna ut rust ning st år I överensst äm m else m ed de väsent liga egenskapskrav och övriga relevant a best äm m elser som fram går av direkt iv 1999/ 5/ EC. [ Bulgarian] С [ I celandic] Hér m eð lýsir, ZyXEL því yfir að þessi búnaður er í sam ræm i við grunnkröfur og önnur viðeigandi ákvæði t ilskipunar 1999/ 5/ EC. [ Norwegian] Erklærer herved ZyXEL at det t e ut st yret er I sam svar m ed de grunnleggende kravene og andre relevant e best em m elser I direkt iv 1999/ 5/ EF. [ Rom anian] Prin prezent a, ZyXEL declară că acest echipam ent est e în conform it at e cu cerinţele esenţiale şi alt e prevederi relevant e ale Direct ivei 1999/ 5/ EC. я я ZyXEL ,ч 1999/ 5/ C. National Restrictions This product m ay be used in all EU count ries ( and ot her count ries following t he EU direct ive 1999/ 5/ EC) wit hout any lim it at ion except for t he count ries m ent ioned below: Ce produit peut êt re ut ilisé dans t ous les pays de l’UE ( et dans t ous les pays ayant t ransposés la direct ive 1999/ 5/ CE) sans aucune lim it at ion, except é pour les pays m ent ionnés ci- dessous: Quest o prodot t o è ut ilizzabile in t ut t e i paesi EU ( ed in t ut t i gli alt ri paesi che seguono le diret t ive EU 1999/ 5/ EC) senza nessuna lim it azione, eccet t o per i paesii m enzionat i di seguit o: Das Produkt kann in allen EU St aat en ohne Einschränkungen eingeset zt werden ( sowie in anderen St aat en die der EU Direkt ive 1995/ 5/ CE folgen) m it Außnahm e der folgenden aufgeführt en St aat en: I n t he m aj orit y of t he EU and ot her European count ries, t he 2, 4- and 5- GHz bands have been m ade available for t he use of wireless local area net works ( LANs) . Lat er in t his docum ent you will find an overview of count ries inwhich addit ional rest rict ions or requirem ent s or bot h are applicable. The requirem ent s for any count ry m ay evolve. ZyXEL recom m ends t hat you check wit h t he local aut horit ies for t he lat est st at us of t heir nat ional regulat ions for bot h t he 2,4- and 5- GHz wireless LANs. NBG6503 User’s Guide 231 Appendix E Legal Information The following count ries have rest rict ions and/ or requirem ent s in addit ion t o t hose given in t he t able labeled “ Overview of Regulat ory Requirem ent s for Wireless LANs” : . Overview of Regulat ory Requirem ent s for Wireless LANs Frequency Band ( MHz) Max Power Level I ndoor ONLY I ndoor and Out door ( EI RP) 1 ( m W) 2400- 2483.5 100 5150- 5350 200 5470- 5725 1000 Belgium The Belgian I nst it ut e for Post al Services and Telecom m unicat ions ( BI PT) m ust be not ified of any out door wireless link having a range exceeding 300 m et ers. Please check ht t p: / / www.bipt .be for m ore det ails. Draadloze verbindingen voor buit engebruik en m et een reikwij dt e van m eer dan 300 m et er dienen aangem eld t e worden bij het Belgisch I nst it uut voor post dienst en en t elecom m unicat ie ( BI PT) . Zie ht t p: / / www.bipt .be voor m eer gegevens. Les liaisons sans fil pour une ut ilisat ion en ext érieur d’une dist ance supérieure à 300 m èt res doivent êt re not ifiées à l’I nst it ut Belge des services Post aux et des Télécom m unicat ions ( I BPT) . Visit ez ht t p: / / www.ibpt .be pour de plus am ples dét ails. Denm ark I n Denm ark, t he band 5150 - 5350 MHz is also allowed for out door usage. I Danm ark m å frekvensbåndet 5150 - 5350 også anvendes udendørs. France For 2.4 GHz, t he out put power is rest rict ed t o 10 m W EI RP when t he product is used out doors in t he band 2454 - 2483.5 MHz. There are no rest rict ions when used indoors or in ot her part s of t he 2.4 GHz band. Check ht t p: / / www.arcep.fr/ for m ore det ails. Pour la bande 2.4 GHz, la puissance est lim it ée à 10 m W en p.i.r.e. pour les équipem ent s ut ilisés en ext érieur dans la bande 2454 - 2483.5 MHz. I l n'y a pas de rest rict ions pour des ut ilisat ions en int érieur ou dans d'aut res part ies de la bande 2.4 GHz. Consult ez ht t p: / / www.arcep.fr/ pour de plus am ples dét ails. R&TTE 1999/ 5/ EC WLAN 2.4 – 2.4835 GHz I EEE 802.11 b/ g/ n Locat ion Frequency Range( GHz) Power ( EI RP) I ndoor ( No rest rict ions) 2.4 – 2.4835 100m W ( 20dBm ) Out door 2.4 – 2.454 100m W ( 20dBm ) 2.454 – 2.4835 10m W ( 10dBm ) I t aly This product m eet s t he Nat ional Radio I nt erface and t he requirem ent s specified in t he Nat ional Frequency Allocat ion Table for I t aly. Unless t his wireless LAN product is operat ing wit hin t he 232 NBG6503 User’s Guide Appendix E Legal Information boundaries of t he owner's propert y, it s use requires a “ general aut horizat ion.” Please check ht t p: / / www.sviluppoeconom ico.gov.it / for m ore det ails. Quest o prodot t o è conform e alla specifiche di I nt erfaccia Radio Nazionali e rispet t a il Piano Nazionale di ripart izione delle frequenze in I t alia. Se non viene inst allat o all 'int erno del proprio fondo, l'ut ilizzo di prodot t i Wireless LAN richiede una “Aut orizzazione Generale”. Consult are ht t p: / / www.sviluppoeconom ico.gov.it / per m aggiori det t agli. Lat via The out door usage of t he 2.4 GHz band requires an aut horizat ion from t he Elect ronic Com m unicat ions Office. Please check ht t p: / / www.esd.lv for m ore det ails. 2.4 GHz frekvenèu j oslas izm ant oðanai ârpus t elpâm nepiecieðam a at ïauj a no Elekt ronisko sakaru direkcij as. Vairâk inform âcij as: ht t p: / / www.esd.lv. Not es: 1. Alt hough Norway, Swit zerland and Liecht enst ein are not EU m em ber st at es, t he EU Direct ive 1999/ 5/ EC has also been im plem ent ed in t hose count ries. 2. The regulat ory lim it s for m axim um out put power are specified in EI RP. The EI RP level ( in dBm ) of a device can be calculat ed by adding t he gain of t he ant enna used( specified in dBi) t o t he out put power available at t he connect or ( specified in dBm ) . List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Aust ria AT Malt a MT Belgium BE Net herlands NL Cyprus CY Poland PL Czech Republic CR Port ugal PT Denm ark DK Slovakia SK Est onia EE Slovenia SI Finland FI Spain ES France FR Sweden SE Germ any DE Unit ed Kingdom GB Greece GR I celand IS Hungary HU Liecht enst ein LI I reland IE Nor way NO I t aly IT Swit zerland CH Lat via LV Bulgaria BG Lit huania LT Rom ania RO Luxem bourg LU Turkey TR Safety Warnings • • • • • • • • • Do NOT use t his product near wat er, for exam ple, in a wet basem ent or near a swim m ing pool. Do NOT expose your device t o dam pness, dust or corrosive liquids. Do NOT st ore t hings on t he device. Do NOT inst all, use, or ser vice t his device during a t hunderst orm . There is a r em ot e risk of elect ric shock from light ning. Connect ONLY suit able accessories t o t he device. Do NOT open t he device or unit . Opening or rem oving covers can expose you t o dangerous high volt age point s or ot her risks. ONLY qualified service personnel should service or disassem ble t his device. Please cont act your vendor for furt her inform at ion. Make sure t o connect t he cables t o t he correct port s. Place connect ing cables carefully so t hat no one will st ep on t hem or st um ble over t hem . Always disconnect all cables from t his device befor e servicing or disassem bling. NBG6503 User’s Guide 233 Appendix E Legal Information • • • • • • • • • • Use ONLY an appropriat e power adapt or or cord for your device. Connect t he power adapt or or cord t o t he right supply volt age ( for exam ple, 110V AC in Nort h Am er ica or 230V AC in Europe) . Do NOT allow anyt hing t o rest on t he power adapt or or cord and do NOT place t he product where anyone can walk on t he power adapt or or cord. Do NOT use t he device if t he power adapt or or cor d is dam aged as it m ight cause elect rocut ion. I f t he power adapt or or cord is dam aged, rem ove it fr om t he power out let . Do NOT at t em pt t o repair t he power adapt or or cord. Cont act your local vendor t o order a new one. Do not use t he device out side, and m ake sure all t he connect ions are indoors. There is a rem ot e risk of elect ric shock from light ning. Do NOT obst ruct t he device vent ilat ion slot s, as insufficient airflow m ay harm your device. Ant enna Warning! This device m eet s ETSI and FCC cert ificat ion requirem ent s when using t he included ant enna( s) . Only use t he included ant enna( s) . I f you wall m ount your device, m ake sure t hat no elect rical lines, gas or wat er pipes w ill be dam aged. Your product is m arked w it h t his sym bol, which is know n as t he WEEE m ark. WEEE st ands for Wast e Elect ronics and Elect rical Equipm ent . I t m eans t hat used elect rical and elect ronic product s should not be m ixed w it h general wast e. Used elect rical and elect ronic equipm ent should be t reat ed separat ely. 234 NBG6503 User’s Guide Index Index Act iveX 134 Address Assignm ent 100 Advanced Encrypt ion St andard See AES. AES 217 alt ernat ive subnet m ask not at ion 173 ant enna direct ional 221 gain 221 om ni- direct ional 221 AP 15 AP ( access point ) 211 AP Mode m enu 70 st at us screen 68 AP+ Bridge 15 cert ificat ions 227 not ices 228 viewing 229 Channel 59, 69 channel 84, 211 int erference 211 Configurat ion rest ore 160 cont ent filt ering 133 by keyword ( in URL) 133 by web feat ure 133 Cookies 135 copyright 227 CPU usage 60, 69 CTS ( Clear t o Send) 212 Aut o- bridge 108 Daylight saving 158 Bandwidt h m anagem ent overview 137 priorit y 139 services 143 Basic Service Set , See BSS 209 Bit Torrent 144 Bridge/ Repeat er 15 bridged APs, securit y 86 BSS 209 DDNS 123 see also Dynam ic DNS service providers 123 DHCP 39, 113 DHCP server see also Dynam ic Host Configurat ion Prot ocol DHCP server 110, 113 DHCP t able 39 DHCP client inform at ion DHCP st at us disclaim er 227 DNS 115 DNS Server 100 DNS server 115 CA 215 Cert ificat e Aut horit y See CA. NBG6503 User’s Guide docum ent at ion relat ed 2 Dom ain Nam e Syst em 115 Dom ain Nam e Syst em . See DNS. duplex set t ing 60, 69 Dynam ic DNS 123 235 Index Dynam ic Host Configurat ion Prot ocol 113 dynam ic WEP key exchange 216 DynDNS 123 I ANA 178 DynDNS see also DDNS 123 I BSS 209 EAP Aut hent icat ion 215 encrypt ion 85, 217 key 85 WPA com pat ible 85 I GMP 101 see also I nt ernet Group Mult icast Prot ocol version I GMP version 101 I ndependent Basic Service Set See I BSS 209 init ializat ion vect or ( I V) 217 ESS 210 I nt ernet Assigned Num bers Aut horit y See I ANA 178 ESSI D 169 I nt ernet Group Mult icast Prot ocol 101 Ext ended Service Set , See ESS 210 I P Address 111, 118, 119 I P alias 110 I P Pool 113 FCC int erference st at em ent 227 File Transfer Program 143 Firewall I CMP packet s 131 Firm ware upload 158 file ext ension using HTTP firm ware version 59, 68 Java 134 fragm ent at ion t hreshold 212 LAN 109 I P pool set up 110 FTP. see also File Transfer Program 143 LAN overview 109 LAN set up 109 LAN TCP/ I P 110 Language 161 Link t ype 60, 69 General wireless LAN screen 86 Local Area Net work 109 Guide Quick St art 2 MAC 90 hidden node 211 MAC address 84, 100 cloning 100 HTTP 143 MAC address filt er 84 Hyper Text Transfer Prot ocol 143 MAC address filt ering 90 MAC filt er 90 236 NBG6503 User’s Guide Index m anaging t he device good habit s 16 using t he web configurat or. See web configurat or. using t he wireless swit ch. using t he WPS. See WPS. MBSSI D 15 Media access cont rol 90 PPPoE 103 dial- up connect ion PPTP 105 pream ble m ode 213 product regist rat ion 229 PSK 217 Mem ory usage 60, 69 Message I nt egrit y Check ( MI C) 217 m ode 15 Mult icast 101 I GMP 101 NAT 117, 118, 178 how it works 117 overview 117 see also Net work Address Translat ion NAT Traversal 147 Navigat ion Panel 61, 70 navigat ion panel 61, 70 Net work Address Translat ion 117, 118 Qualit y of Service ( QoS) 93 Quick St art Guide 2 RADI US 214 m essage t ypes 214 m essages 214 shared secret key 215 regist rat ion product 229 relat ed docum ent at ion 2 Rem ot e m anagem ent and NAT 145 lim it at ions 145 syst em t im eout 146 Reset but t on 35 operat ing m ode 15 Reset t he device 35 ot her docum ent at ion 2 Rest ore configurat ion 160 Roam ing 91 RTS ( Request To Send) 212 t hreshold 211, 212 RTS/ CTS Threshold 84, 91, 92 P2P 144 Pairwise Mast er Key ( PMK) 217, 219 peer- t o- peer 144 Point- t o- Point Prot ocol over Et hernet 103 Point- t o- Point Tunneling Prot ocol 105 safet y warnings 233 Pool Size 114 Scheduling 96 Port forwarding 119 default server 118 local server 119 Service and port num bers 132, 142 Service Set I Dent ificat ion 53, 86 port speed 60, 69 Service Set I Dent it y. See SSI D. NBG6503 User’s Guide Service Set 53, 86 237 Index Session I nit iat ed Prot ocol 143 SI P 143 SSI D 53, 59, 69, 84, 86 WAN ( Wide Area Net work) 99 St at ic DHCP 114 WAN advanced 108 St at ic Rout e 125 WAN MAC address 100 St at us 58 warrant y 229 not e 229 subnet 171 Subnet Mask 111, 112 subnet m ask 172 subnet t ing 174 Web Configurat or how t o access 31 Overview 31 web configurat or 15 Sum m ary DHCP t able 39 Packet st at ist ics 40 Wireless st at ion st at us 41 WEP encrypt ion 88 Syst em General Set up 155 WEP key 88 Syst em rest art 161 Wi- Fi Prot ect ed Access 217 Web Proxy 135 WEP Encrypt ion 89, 90 Wireless associat ion list 41 wireless channel 169 wireless client WPA supplicant s 218 wireless LAN 169 TCP/ I P configurat ion 113 wireless LAN scheduling 96 Tem poral Key I nt egrit y Prot ocol ( TKI P) 217 Wireless net work basic guidelines 83 channel 84 encrypt ion 85 exam ple 83 MAC address filt er 84 overview 83 securit y 84 SSI D 84 Tim e set t ing 157 t rigger port 120 Trigger port forwarding 120 exam ple 122 process 122 Universal Plug and Play 147 Applicat ion 147 Securit y issues 148 UPnP 147 Wireless securit y 84 overview 84 t ype 84 wireless securit y 169, 213 wireless swit ch 15 URL Keyword Blocking 135 Wireless t ut orial 73 WPS 73 User Nam e 124 Wizard set up 21 VoI P 143 VPN 105 238 WLAN int erference 211 securit y param et ers 220 WLAN 2.4G 41 WLAN 5G 41 World Wide Web 143 WPA 217 NBG6503 User’s Guide Index key caching 218 pre- aut hent icat ion 218 user aut hent icat ion 218 vs WPA- PSK 217 wireless client supplicant 218 wit h RADI US applicat ion exam ple 218 WPA com pat ible 85 WPA2 217 user aut hent icat ion 218 vs WPA2- PSK 217 wireless client supplicant 218 wit h RADI US applicat ion exam ple 218 WPA2- Pre- Shared Key 217 WPA2- PSK 217 applicat ion exam ple 219 WPA- PSK 217 applicat ion exam ple 219 WPS 15 WWW 143 Xbox Live 144 NBG6503 User’s Guide 239 Index 240 NBG6503 User’s Guide
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.6 Linearized : No Encryption : Standard V4.4 (128-bit) User Access : Print, Extract, Print high-res Author : ZT01650 Create Date : 2013:04:26 11:38:32Z Modify Date : 2013:05:28 22:25:03+08:00 XMP Toolkit : Adobe XMP Core 4.2.1-c043 52.372728, 2009/01/18-15:08:04 Format : application/pdf Title : Book.book Creator : ZT01650 Creator Tool : FrameMaker 9.0 Metadata Date : 2013:05:28 22:25:03+08:00 Producer : Acrobat Distiller 9.5.2 (Windows) Document ID : uuid:69b401b5-e551-419d-beec-8ddfd340c1f6 Instance ID : uuid:b2a94ea2-3b94-4e7a-9e92-2c39a5bd22ee Page Mode : UseOutlines Page Count : 230EXIF Metadata provided by EXIF.tools