User Guide for ZYXEL models including: NBG6818, ARMOR G1, Baby Monitor, NBG6818 ARMOR G1 Baby Monitor

ARMOR G1 - CNET Content Solutions

information in this manual is accurate. Related ation ... NBG6818 use the IPv6 DNS server addresses you configure manually. Select if you do ...

Product labels, screen names, field labels and field choices are all in bold font. • A right angle bracket ( > ) within a screen name denotes a mouse click.

Not Your Device? Search For Manuals / Datasheets:

File Info : application/pdf, 183 Pages, 5.43MB

Document
38e1e3ed-262e-407a-9ca8-5c150473e412
User's Guide

ARMOR G1

AC2600 Multi-Gigabit Security WiFi Router Model: NBG6818

Default Login Details

LAN IP Address

http://zyxelwifi.com OR
http://zyxelwifi.net

Version 1.00 Edition 2, 08/2020

Copyright © 2020 Zyxel Communications Corporation

IMPO RTANT! READ C AREFULLY BEFO RE USE. KEEP THIS G UIDE FO R FUTURE REFERENC E.
Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Re la te d Do c um e nta tio n
· Quick Start Guide The Quick Start Guide shows how to connect the NBG6818 and access the Web Configurator wizards. It contains information on setting up your network and configuring for Internet access.
· More Information Go to suppo rt.zyxe l.c o m to find other information on the NBG6818.
NBG6818 User's Guide
2

Do c um e nt C o nve ntio ns

Wa rning s a nd No te s
These are how warnings and notes are shown in this guide.
Wa rning s te ll yo u a b o ut thing s tha t c o uld ha rm yo u o r yo ur de vic e .
Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.

Synta x C o nve ntio ns
· Product labels, screen names, field labels and field choices are all in bo ld font.
· A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Se tting > Inte rne t > Inte rne t C o nne c tio n means you first click Se tting in the navigation panel, then the Inte rne t sub menu and finally the Inte rne t C o nne c tio n tab to get to that screen.

Ic o ns Use d in Fig ure s
Figures in this user guide may use the following generic icons. The NBG6818 icon is not an exact representation of your device.

NBG6818

Wireless Device

Laptop Computer

Switch

Firewall

Server

Internet

Desktop Computer

Smartphone

NBG6818 User's Guide
3

Contents Overview
C o nte nts O ve rvie w
Use r's G uide ......................................................................................................................................10 Introduction ........................................................................................................................................... 11 Wizard .................................................................................................................................................... 17 The Web Configurator ......................................................................................................................... 27 NBG6818 Modes ................................................................................................................................... 34 Standard Mode .................................................................................................................................... 36 ................................................................................................................................................................ 38 Bridge Mode ......................................................................................................................................... 39 Tutorials .................................................................................................................................................. 42
Te c hnic a l Re fe re nc e ........................................................................................................................55 Applications .......................................................................................................................................... 56 WAN ....................................................................................................................................................... 77 Wireless LAN ........................................................................................................................................ 102 LAN ....................................................................................................................................................... 113 Security ................................................................................................................................................ 123 System .................................................................................................................................................. 130 Troubleshooting .................................................................................................................................. 141
NBG6818 User's Guide
4

Table of Contents
Ta b le o f C o nte nts
Do c um e nt C o nve ntio ns ......................................................................................................................3
C o nte nts O ve rvie w .............................................................................................................................4
Ta b le o f C o nte nts .................................................................................................................................5
Pa rt I: Use r's G uide .......................................................................................... 10
C ha pte r 1 Intro duc tio n ........................................................................................................................................11
1.1 Overview ......................................................................................................................................... 11 1.2 Applications .................................................................................................................................... 11 1.3 Ways to Manage the NBG6818 .................................................................................................... 12 1.4 Good Habits for Managing the NBG6818 ................................................................................... 12 1.5 Resetting the NBG6818 .................................................................................................................. 13
1.5.1 How to Use the RESET Button ................................................................................................ 13 1.6 The WPS Button ............................................................................................................................... 13 1.7 LEDs .................................................................................................................................................. 14 1.8 Desk Mounting ................................................................................................................................ 15 1.9 Wall Mounting ................................................................................................................................. 15
C ha pte r 2 Wiza rd .................................................................................................................................................17
2.1 Overview ......................................................................................................................................... 17 2.2 Accessing the Wizard ..................................................................................................................... 17
C ha pte r 3 The We b C o nfig ura to r........................................................................................................................27
3.1 Overview ......................................................................................................................................... 27 3.2 Accessing the Web Configurator ................................................................................................. 27 3.3 Navigation Panel ............................................................................................................................ 29
3.3.1 Standard Mode Navigation Panel ...................................................................................... 30 3.3.2 Bridge Mode Navigation Panel ........................................................................................... 32
C ha pte r 4 NBG 6818 Mo de s.................................................................................................................................34
4.1 Overview ......................................................................................................................................... 34 4.2 Modes .............................................................................................................................................. 34
NBG6818 User's Guide
5

Table of Contents
C ha pte r 5 Sta nda rd Mo de ..................................................................................................................................36
5.1 Overview ......................................................................................................................................... 36 5.2 What You Can Do .......................................................................................................................... 36 5.3 Standard Mode Status Screen ...................................................................................................... 36 .............................................................................................................................................................38
C ha pte r 6 Bridg e Mo de .......................................................................................................................................39
6.1 Overview ......................................................................................................................................... 39 6.2 What You Can Do .......................................................................................................................... 39 6.3 Setting your NBG6818 to Bridge Mode ........................................................................................ 39
6.3.1 Accessing the Web Configurator in Bridge Mode ............................................................ 40 6.4 Bridge Mode Status Screen ........................................................................................................... 41
C ha pte r 7 Tuto ria ls ...............................................................................................................................................42
7.1 Overview ......................................................................................................................................... 42 7.2 Run a Speed Test ............................................................................................................................ 42 7.3 Configure the NBG6818's WiFi Networks ...................................................................................... 43 7.4 Enable or Disable a WiFi Network ................................................................................................. 45 7.5 Add Clients to a Profile .................................................................................................................. 46 7.6 Set a Profile's WiFi Schedule .......................................................................................................... 47 7.7 Pause or Resume Internet Access on a Profile ............................................................................ 49 7.8 Turn on or off the NBG6818's LED (Light) ...................................................................................... 50 7.9 Change Your NBG6818 Operating Mode ................................................................................... 51 7.10 Configure a Port Forwarding Rule .............................................................................................. 52
Pa rt II: Te c hnic a l Re fe re nc e ........................................................................... 55
C ha pte r 8 Applic a tio ns .......................................................................................................................................56
8.1 Overview ......................................................................................................................................... 56 8.1.1 What You Can Do ................................................................................................................. 56 8.1.2 What You Need To Know ..................................................................................................... 56 8.1.3 Before You Begin ................................................................................................................... 57
8.2 Parental Control ............................................................................................................................. 57 8.2.1 Device Screen ....................................................................................................................... 57
8.3 OpenVPN Server/Client ................................................................................................................. 61 8.3.1 OpenVPN Server Screen ...................................................................................................... 61 8.3.2 OpenVPN Account Screen .................................................................................................. 63
NBG6818 User's Guide
6

Table of Contents
8.3.3 OpenVPN Client Screen ....................................................................................................... 65 8.4 USB Application .............................................................................................................................. 67
8.4.1 SAMBA Server Screen ........................................................................................................... 67 8.4.2 FTP Server Screen .................................................................................................................. 69 8.4.3 USB Media Sharing Screen ................................................................................................... 71 8.5 Access Your Shared Files From a Computer ............................................................................... 73 8.5.1 Using Windows Explorer ........................................................................................................ 73 8.5.2 Using FTP Program ................................................................................................................. 74
C ha pte r 9 WAN ....................................................................................................................................................77
9.1 Overview ......................................................................................................................................... 77 9.2 What You Can Do .......................................................................................................................... 77 9.3 What You Need To Know .............................................................................................................. 78
9.3.1 Configuring Your Internet Connection ............................................................................... 78 9.4 Internet Connection Screen .......................................................................................................... 79
9.4.1 IPoE Encapsulation ................................................................................................................ 79 9.4.2 PPPoE Encapsulation ............................................................................................................ 82 9.4.3 PPTP Encapsulation ............................................................................................................... 85 9.5 NAT & Port Forwarding Screen ...................................................................................................... 87 9.5.1 Add Port Forwarding Rule Screen ....................................................................................... 89 9.6 Passthrough Screen ........................................................................................................................ 91 9.7 Port Trigger Screen ......................................................................................................................... 92 9.7.1 Add Port Trigger Rule Screen ............................................................................................... 94 9.8 Dynamic DNS Screen ..................................................................................................................... 95 9.9 UPnP Screen .................................................................................................................................... 96 9.9.1 Turning On UPnP in Windows 7 Example ............................................................................ 97 9.9.2 Turning on UPnP in Windows 10 Example .......................................................................... 99
C ha pte r 10 Wire le ss LAN .....................................................................................................................................102
10.1 Overview ..................................................................................................................................... 102 10.1.1 What You Can Do ............................................................................................................. 102 10.1.2 What You Should Know .................................................................................................... 103
10.2 Main WiFi Screen ........................................................................................................................ 106 10.3 Guest WiFi Screen ....................................................................................................................... 108 10.4 MAC Filter Screen ...................................................................................................................... 108
10.4.1 Add MAC Address Screen ............................................................................................... 109 10.5 WPS Screen ................................................................................................................................. 110 10.6 Scheduling Screen ..................................................................................................................... 112
C ha pte r 11 LAN ....................................................................................................................................................113
NBG6818 User's Guide
7

Table of Contents
11.1 Overview ..................................................................................................................................... 113 11.2 What You Can Do ...................................................................................................................... 113 11.3 What You Need To Know .......................................................................................................... 113 11.4 LAN IP Screen .............................................................................................................................. 114
11.4.1 Static DHCP Table-Add/Edit Rule Screen ....................................................................... 117 11.4.2 Configure LAN Screen in Bridge Mode .......................................................................... 119 11.5 IPv6 LAN Screen .......................................................................................................................... 120
C ha pte r 12 Se c urity .............................................................................................................................................123
12.1 Overview ................................................................................................................................... 123 12.1.1 What You Can Do ............................................................................................................. 123 12.1.2 What You Need To Know ................................................................................................. 123
12.2 IPv4 Firewall Screen ................................................................................................................... 124 12.2.1 IPv4 Firewall-Add Rule Screen ......................................................................................... 126
12.3 IPv6 Firewall Screen .................................................................................................................... 127 12.3.1 IPv6 Firewall-Add Rule Screen ......................................................................................... 128
C ha pte r 13 Syste m ...............................................................................................................................................130
13.1 Overview ..................................................................................................................................... 130 13.2 What You Can Do ...................................................................................................................... 130 13.3 Status Screen ............................................................................................................................... 130 13.4 General Setting Screen .............................................................................................................. 133 13.5 Remote Access Screen .............................................................................................................. 135 13.6 Maintenance Screen ................................................................................................................. 136 13.7 Operating Mode Screen ........................................................................................................... 137 13.8 Logs Screen ................................................................................................................................. 139
C ha pte r 14 Tro ub le sho o ting ................................................................................................................................141
14.1 Overview ..................................................................................................................................... 141 14.2 Power, Hardware Connections, and LEDs ............................................................................... 141 14.3 NBG6818 Access and Login ...................................................................................................... 142 14.4 Internet Access ........................................................................................................................... 143 14.5 Resetting the NBG6818 to Its Factory Defaults ........................................................................ 144 14.6 Wireless Connections ................................................................................................................. 144 14.7 USB Device Problems ................................................................................................................. 146
Appendix A Customer Support ..................................................................................................... 147
Appendix B Setting Up Your Computer's IP Address................................................................... 153
Appendix C Common Services ..................................................................................................... 172
NBG6818 User's Guide
8

Table of Contents
Appendix D Legal Information ...................................................................................................... 175
Inde x .................................................................................................................................................181
NBG6818 User's Guide
9

PA RT I
Use r's G uide
10

C HA PTER 1 Intro duc tio n
1.1 O ve rvie w
This chapter introduces the main features and applications of the NBG6818, also called ARMOR G1. The NBG6818 extends the range of your existing wired network without additional wiring, providing easy network access to mobile users. You can set up a wireless network with other IEEE 802.11a/b/g/n/ac compatible devices. The NBG6818 is able to function both 2.4GHz and 5GHz networks at the same time. A range of services such as a firewall and content filtering are also available for secure Internet computing. There is an USB port on the side panel of your NBG6818. You can connect an USB memory stick, an USB hard drive, or an USB device for file sharing. The NBG6818 automatically detects the USB device.
1.2 Applic a tio ns
Your can have the following networks with the NBG6818: · Wire d. You can connect network devices via the Ethernet ports of the NBG6818 so that they can
communicate with each other and access the Internet. Fig ure 1 Internet Access Application: Wired Connection
· Wire le ss. Wireless clients can connect to the NBG6818 to access network resources. You can use WPS (Wi-Fi Protected Setup) to create an instant network connection with another WPS-compatible device.
NBG6818 User's Guide
11

Chapter 1 Introduction Fig ure 2 Internet Access Application: Wireless Connection
· WAN. Connect to a broadband modem/router for Internet access. Fig ure 3 Internet Access Application: Ethernet WAN
1.3 Wa ys to Ma na g e the NBG 6818
Use the following method to manage the NBG6818. · Web Configurator. This is recommended for everyday management of the NBG6818 using a
(supported) web browser. · Zyxel ARMOR. This is the app you can use to manage the NBG6818 on your cellphone. To install the
app, scan the QR code on the QSG.
1.4 G o o d Ha b its fo r Ma na g ing the NBG 6818
Do the following things regularly to make the NBG6818 more secure and to manage the NBG6818 more effectively. · Change the password. Use a password that's not easy to guess and that consists of different types of
characters, such as numbers and letters. · Write down the password and put it in a safe place. · Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the NBG6818 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG6818. You could simply restore your last configuration.
NBG6818 User's Guide
12

Chapter 1 Introduction
1.5 Re se tting the NBG 6818
If you forget your password or IP address, or you cannot access the Web Configurator, insert a thin object into the Re se t hole on the side of the NBG6818 to reload the factory-default configuration file. This means that you will lose all settings that you had previously saved.
1.5.1 Ho w to Use the RESETButto n
1 Make sure the power LED is on. 2 Locate the Re se t hole. 3 Insert a thin object into the Re se t hole for longer than eight seconds to reset the NBG6818 back to its
factory-default configuration.
1.6 The WPS Butto n
Your NBG6818 supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the Wi-Fi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device's documentation to make sure). Depending on the devices you have, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. You can use the WPS button in the Web Configurator of the NBG6818 to activate WPS in order to quickly set up a wireless network with strong security.
1 Make sure the power LED is on (not blinking). 2 Open the Web Configurator. 3 Click Se tting s > WiFi > WPS, and the press the WPS button. 4 Press the WPS button on another WPS-enabled device within range of the NBG6818.
Note: You must activate WPS in the NBG6818 and in another wireless device within two minutes of each other. For more information on using WPS, see Section 7.2 on page 42.
NBG6818 User's Guide
13

1.7 LEDs
Fig ure 4 Front Panel

Chapter 1 Introduction

The following table describes the front panel LED.

Table 1 Front Panel LED

C O LO R STATUS

White

On

Blinking

Dark Blue On

Blinking

Amber

Blinking (Slow)

Blinking (Fast)

Purple

Blinking

Purple and Dark Blue

Blinking

Red

On

DESC RIPTIO N The NBG6818 is receiving power. The NBG6818 is booting. Blue tooth is ready. Blue tooth configuration is in process. The NBG6818 is upgrading firmware. The NBG6818 is resetting. WPS configuration is in process. The NBG6818 is receiving power and ready for use.
The NBG6818 detects and error while self-testing, or there is a device malfunction.

NBG6818 User's Guide
14

Fig ure 5 Rear Panel

Chapter 1 Introduction

1.8 De sk Mo unting
Place the side of the NBG6818 with rubber feet carefully on the desk.

1.9 Wa ll Mo unting

You may need screw anchors if mounting on a concrete or brick wall.

Table 2 Wall Mounting Information

Distance between holes

10.50 cm

M4 Screws

Two

Screw anchors (optional)

Two

Fig ure 6 Screw Specifications

1 Select a position free of obstructions on a wall strong enough to hold the weight of the device.
2 Mark two holes on the wall at the appropriate distance apart for the screws.
Be c a re ful to a vo id da m a g ing pipe s o r c a b le s lo c a te d inside the wa ll whe n drilling ho le s fo r the sc re ws.
3 If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the full depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way in - leave a small gap of about 0.5 cm. If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the screws all the way in - leave a gap of about 0.5 cm.
NBG6818 User's Guide
15

Chapter 1 Introduction 4 Make sure the screws are fastened well enough to hold the weight of the NBG6818 with the connection
cables. 5 Remove the rubber feet. 6 Align the holes on the back of the NBG6818 with the screws on the wall. Hang the NBG6818 on the
screws. Fig ure 7 Wall Mounting- Rubber Feet
NBG6818 User's Guide
16

C HA PTER 2 Wiza rd
2.1 O ve rvie w
In this chapter, you will learn how to: · Go through NBG6818 (ARMOR G1) wizard steps · Configure basic settings for your WiFi · Create a myZyxel Cloud account.
2.2 Ac c e ssing the Wiza rd
Launch your web browser and type "http://zyxelwifi.com" or "http://zyxelwifi.net" as the website address. Note: The wizard appears automatically when the NBG6818 is accessed for the first time or
when you reset the NBG6818 to its default factory settings. 1 Your NBG6818 will check the status of your Internet connection the first time you log in.
NBG6818 User's Guide
17

Chapter 2 Wizard 2 The following screen shows if you are connected to the Internet. Click Ne xt to go to the next step in the
wizard.
The following screen shows if you are not connected to the Internet. Note: You may need to turn off your network firewall if access to the Internet from the
NBG6818 is blocked. You need to connect to the Internet to access your NBG6818. See Section 14.4 on page 143 if you cannot connect to the Internet.
NBG6818 User's Guide
18

Chapter 2 Wizard
3 Enter 1-128 single-byte printable ASCII characters but not "''<>^$& as your 2.4G / 5G WiFi Na m e and WiFi Pa sswo rd. Select the check box Ke e p 2.4G & 5G na m e the sa m e if you want to use the same name for your 2.4G and 5G WiFi.
NBG6818 User's Guide
19

Chapter 2 Wizard
4 Wait a moment for your WiFi settings to be applied to your NBG6818.
NBG6818 User's Guide
20

Chapter 2 Wizard 5 The following screen shows if you have set up your WiFi name and password successfully. Click Ne xt to
go to the next step in the wizard.
6 Wait a moment for the NBG6818 to check if your device is updated with the latest firmware. If not, your NBG6818 will automatically update the firmware.
NBG6818 User's Guide
21

Chapter 2 Wizard
7 You need to create a myZyxel Cloud account to log into the NBG6818. Click Ne xt to go to the next step in the wizard.
8 A pop up message shows. Click O K to be redirected to the registration website of myZyxel Cloud. NBG6818 User's Guide
22

Chapter 2 Wizard
9 Enter your Em a il and Pa sswo rd if you already have a myZyxel Cloud account. If not, you can create one by clicking Sig n Up. You can also click the Facbook or Google icon to create an account with your Facebook or Google account.
NBG6818 User's Guide
23

Chapter 2 Wizard
10 The legal page shows after you log in. Select the check box I unde rsta nd a nd a g re e the Zyxe l C lo ud Te rm s o f Use and then click C o nfirm .
NBG6818 User's Guide
24

Chapter 2 Wizard
11 The following page asks for your authorization to use your account. Click Autho rize to finish registering your myZyxel Cloud account. You will be directed back to the NBG6818 web configurator.
12 Wait a moment for your NBG6818 to link to your myZyxel Cloud account. NBG6818 User's Guide
25

Chapter 2 Wizard
13 You can create a local password to access the NBG6818 directly. You can choose to log in with your myZyxel Cloud account or your local password the next time you log in. Note: You can change your local password in Syste m > G e ne ra l Se tting s. See Section 13.4 on page 133 for more information.
NBG6818 User's Guide
26

C HA PTER 3 The We b C o nfig ura to r
3.1 O ve rvie w
This chapter describes how to access the NBG6818 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy system setup and management via Internet browser. Use a browser that supports HTML5, such Mozilla Firefox, or Google Chrome. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: · Web browser pop-up windows from your device. · JavaScript (enabled by default). · Java permissions (enabled by default).
3.2 Ac c e ssing the We b C o nfig ura to r
1 Make sure your NBG6818 hardware is properly connected (refer to the Quick Start Guide). 2 Launch your web browser. 3 If the NBG6818 is in Sta nda rd Mo de (the default mode), enter "http://zyxelwifi.com" in the browser's
address bar. If the NBG6818 is in Bridg e Mo de , type "http:// (DHCP-assigned IP)" in the browser's address bar. 4 On the displayed login screen, log in using your myZyxelCloud username and password or the local password. Note: If this is the first time you are accessing the web configurator or if the device has been
reset, you must complete the setup wizard, see Chapter 2 on page 17. Note: For setting and changing the local password, see Section 13.4 on page 133.
NBG6818 User's Guide
27

Chapter 3 The Web Configurator
5 The NBG6818 O ve rvie w screen displays allowing you to monitor your NBG6818. It shows if the NBG6818 is online, and how many wireless clients are currently connected to your device, as well as their upstream/ downstream data rates. Fig ure 8 Overview (Standard Mode)
NBG6818 User's Guide
28

Chapter 3 The Web Configurator Fig ure 9 Overview (Bridge Mode)
3.3 Na vig a tio n Pa ne l
Use the submenus on the navigation panel to configure NBG6818 features. Your navigation panel varies depending on the mode of your NBG6818. See Chapter 5 on page 36 for more information on Standard Mode. See Chapter 6 on page 39 for more information on Bridge Mode.
NBG6818 User's Guide
29

Chapter 3 The Web Configurator
3.3.1 Sta nda rd Mo de Na vig a tio n Pa ne l
Fig ure 10 Navigation Panel (Standard Mode)

The following table describes the submenus.

Table 3 Settings > System > Status (Standard Mode)

LINK Overview

TA B

FUNC TIO N Use this screen to:

Diagnose Parental Control

Advanced Speed Test
Speed Test History
Device

· View read-only information about your NBG6818 · Configure WiFi settings · Change the brightness of your device's LED Use this screen to check the speed of the connection between your NBG6818 and the broadband modem/router. Use this screen to view a summary of previously run speed tests.
Use this screen to:

OpenVPN Server

Profile
OpenVPN Server
OpenVPN Account

· View devices information · Add and configure parental control rules or schedules Use this screen to enable or configure existing parental control rules. Use this screen to create and configure an OpenVPN server account.
Use this screen to: · View basic information about NBG6818 OpenVPN server · View basic information about clients that are connected to the NBG6818
OpenVPN server

NBG6818 User's Guide
30

Chapter 3 The Web Configurator

Table 3 Settings > System > Status (Standard Mode) (continued)

LINK OpenVPN Client

TA B

FUNC TIO N Use this screen to:

USB Application SAMBA

· View basic information about OpenVPN Server accounts that you are connected to
· Add an OpenVPN Server Account you want your NBG6818 to connect to when the NBG6818 functions as an OpenVPN client. Use this screen to:

Internet WiFi LAN

FTP
USB Media Sharing Internet Connection NAT & Port Forwarding
Passthrough Port Trigger
Dynamic DNS UPnP Main WiFi
Guest WiFi MAC Filter
WPS Scheduling LAN IP

· Set up file-sharing via the NBG6818 using Windows Explorer or the workgroup name
· Configure the workgroup name and create file-sharing user accounts Use this screen to set up file sharing via the NBG6818 using FTP and create user accounts. Use this screen to configure settings for media sharing.
This screen allows you to configure ISP parameters, WAN IP address assignment, DNS servers and the WAN MAC address. Use this screen to enable NAT.
Use this screen to configure servers behind the NBG6818 and forward incoming service requests to the servers on your local network. Use this screen to change your NBG6818's port triggering settings. Use this screen to configure ALGs (Application Layer Gateway) and VPN passthrough settings. Use this screen to configure dynamic DNS. Use this screen to enable UPnP on the NBG6818. Use this screen to enable the wireless LAN and configure wireless LAN and wireless security settings. Use this screen to configure multiple BSSs on the NBG6818. Use the MAC filter screen to configure the NBG6818 to block access to devices or block the devices from accessing the NBG6818. Use this screen to configure WPS. Use this screen to schedule the times the Wireless LAN is enabled. Use this screen to configure the NBG6818's LAN IP address and subnet mask.

Use this screen to configure the IPv6 address for the NBG6818 on the LAN.

Firewall

IPv6 LAN IPv4 Firewall IPv6 Firewall

Use this screen to enable the NBG6818's DHCP server. Use this screen to configure the IPv6 address for your NBG6818 on the LAN. Use this screen to configure IPv4 firewall rules. Use this screen to configure IPv6 firewall rules.

NBG6818 User's Guide
31

Chapter 3 The Web Configurator

Table 3 Settings > System > Status (Standard Mode) (continued)

LINK

TA B

FUNC TIO N

System

Status

Use this screen to view the basic information of the NBG6818

General Setting

Use this screen to change password or to set the timeout period of the management session.

Remote Access

Use this screen to configure the interface/s from which the NBG6818 can be managed remotely and specify a secure client that can manage the NBG6818.

Maintenance Use this screen to upload firmware, reboot the NBG6818 without turning the power off or reset the NBG6818 to factory default.

Operating Mode

Use this screen to select whether your device acts as a router, or a bridge.

Logs

Use this screen to view the list of activities recorded by your NBG6818.

3.3.2 Bridg e Mo de Na vig a tio n Pa ne l
Fig ure 11 Navigation Panel (Bridge Mode)

The following table describes the submenus.

Table 4 Settings > System > Status (Bridge Mode)

LINK Overview

TA B

FUNC TIO N Use this screen to:

Diagnose

Advanced Speed Test
Speed Test History

· View read-only information about your NBG6818 · Configure WiFi settings · Change the brightness of your device's LED
Use this screen to check the speed of the connection between your NBG6818 and the broadband modem/router.
Use this screen to view a summary of previously run speed tests.

NBG6818 User's Guide
32

Chapter 3 The Web Configurator

Table 4 Settings > System > Status (Bridge Mode) (continued)

LINK USB Application

TA B SAMBA

FUNC TIO N Use this screen

· Set up file-sharing via the NBG6818 using Windows Explorer or the workgroup name
· Configure the workgroup name and create file-sharing user accounts

FTP

Use this screen to set up file sharing via the NBG6818 using FTP and create user

accounts.

USB Media Sharing

Use this screen to configure settings for media sharing.

WiFi

Main WiFi

Use this screen to enable the wireless LAN and configure wireless LAN and

wireless security settings.

MAC Filter

Use the MAC filter screen to configure the NBG6818 to block access to devices or block the devices from accessing the NBG6818.

WPS

Use this screen to configure WPS.

Scheduling

Use this screen to schedule the times the Wireless LAN is enabled.

LAN

LAN IP

Use this screen to configure the NBG6818's LAN IP address and subnet mask.

Use this screen to configure the IPv6 address for the NBG6818 on the LAN.

System

Status General Setting Remote Access Maintenance
Operating Mode Logs

Use this screen to enable the NBG6818's DHCP server. Use this screen to view the basic information of the NBG6818 Use this screen to change password or to set the timeout period of the management session. Use this screen to enable remote assistant.
Use this screen to upload firmware, reboot the NBG6818 without turning the power off or reset the NBG6818 to factory default. Use this screen to select whether your device acts as a router, or a bridge.
Use this screen to view the list of activities recorded by your NBG6818.

NBG6818 User's Guide
33

Chapter 4 NBG6818 Modes
C HA PTER 4 NBG 6818 Mo de s
4.1 O ve rvie w
This chapter introduces the different operating modes available on your NBG6818. Or simply how the NBG6818 is being used in the network.
4.2 Mode s
This refers to the operating mode of the NBG6818, which can act in: · Sta nda rd Mo de : This is the default device mode of the NBG6818. Use this mode to connect the local
network to another network, like the Internet. Go to Section 5.3 on page 36 to view the Sta tus screen in this mode. Fig ure 12 Standard Mode Example
· Bridg e Mo de : Use this mode if you want to extend your network by allowing network devices to connect to the NBG6818 wirelessly. Go to Section 6.4 on page 41 to view the Sta tus screen in this mode.
NBG6818 User's Guide
34

Chapter 4 NBG6818 Modes Fig ure 13 Bridge Mode Example
For more information on changing the mode of your NBG6818, refer to Section 13.7 on page 137. Note: Choose your device mode carefully to avoid having to change it later. When changing to another mode, the IP address of the NBG6818 changes. The running applications and services of the network devices connected to the NBG6818 may be interrupted.
NBG6818 User's Guide
35

Chapter 5 Standard Mode
C HA PTER 5 Sta nda rd Mo de
5.1 O ve rvie w
The NBG6818 is set to standard (router) mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the NBG6818 connects the local network (LAN1 ~ LAN4) to the Internet. Fig ure 14 NBG6818 in Standard Mode
5.2 Wha t Yo u C a n Do
· Use the Sta tus screen to view read-only information about your NBG6818 (Section 5.3 on page 36).
5.3 Sta nda rd Mo de Sta tus Sc re e n
Click Se tting s > Syste m > Sta tus to open the status screen.
NBG6818 User's Guide
36

Chapter 5 Standard Mode Fig ure 15 Settings > System > Status (Standard Mode)

The following table describes the labels shown in the Sta tus screen.

Table 5 Settings > System > Status (Standard Mode)

LA BEL

DESC RIPTIO N

System

Model Name

This is the model name of your device.

Firmware Version

This is the firmware version.

System Operation Mode

This is the device mode to which the NBG6818 is set, see Section 13.7 on page 137 for more information.

Enable IPv4 Firewall

This shows if the IPv4 firewall is enabled on the NBG6818.

Enable IPv6 Simple Security

This shows if the IPv6 firewall is enabled on the NB6818.

System Uptime

This is the total time the NBG6818 has been on.

WAN Information

MAC Address

This shows the WAN Ethernet adapter MAC Address of your device.

IP Address

This shows the WAN port's IP address.

NBG6818 User's Guide
37

Chapter 5

Table 5 Settings > System > Status (Standard Mode) (continued)

LA BEL

DESC RIPTIO N

IP Subnet Mask

This shows the WAN port's subnet mask.

Gateway

This shows the WAN port's gateway IP address.

IPv6 Address

This shows the current IPv6 address of the NBG6818.

LAN Information

MAC Address

This shows the LAN Ethernet adapter MAC Address of your device.

IP Address

This shows the LAN port's IP address.

IP Subnet Mask

This shows the LAN port's subnet mask.

DHCP Server

This shows the LAN port's DHCP role - Ena ble or Disa b le .

IPv6 Address

This shows the current IPv6 address of the NBG6818 in the LAN.

NBG6818 User's Guide
38

Chapter 6 Bridge Mode
C HA PTER 6 Bridg e Mo de
6.1 O ve rvie w
Use your NBG6818 as a bridge if you already have a router or gateway on your network. In this mode your NBG6818 bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example. Fig ure 16 NBG6818 in Bridge Mode
Many screens that are available in Sta nda rd Mo de are not available in Bridg e Mo de , such as port forwarding and firewall. See Section 3.3 on page 29 for more information.
6.2 Wha t Yo u C a n Do
· Set up a network with the NBG6818 as a bridge (Section 6.3 on page 39). · Use the Sta tus screen to view read-only information about your NBG6818 (Section 6.4 on page 41).
6.3 Se tting yo ur NBG 6818 to Bridg e Mo de
1 Log into the Web Configurator if you haven't already. See the Quick start Guide for instructions on how to do this. NBG6818 User's Guide
39

Chapter 6 Bridge Mode 2 To use your NBG6818 as a bridge, go to Se tting s > Syste m > O pe ra ting Mo de and select Bridg e Mo de .
Fig ure 17 Changing to Bridge mode
Note: You have to log in to the Web Configurator again when you change modes. As soon as you do, your NBG6818 is already in Bridge mode.
3 When you select Bridg e Mo de , the following pop-up message window appears. Fig ure 18 Pop up for Bridge mode
Click O K. Then click Apply. The Web Configurator refreshes once the change to Bridge mode is successful.
6.3.1 Ac c e ssing the We b C o nfig ura to r in Bridg e Mo de
Log in to the Web Configurator in Bridge mode, do the following: 1 Connect your computer to the LAN port of the NBG6818. 2 The default IP address of the NBG6818 in bridge mode is "192.168.123.2". In this case, your computer
must have an IP address in the range between "192.168.123.3" and "192.168.123.254". 3 Click Sta rt > Run on your computer in Windows. Type "cmd" in the dialog box. Enter "ipconfig" to show
your computer's IP address. If your computer's IP address is not in the correct range then see Appendix B on page 153 for information on changing your computer's IP address. 4 After you've set your computer's IP address, open a web browser such as Internet Explorer and type "192.168.123.2" as the web address in your web browser.
NBG6818 User's Guide
40

Chapter 6 Bridge Mode
6.4 Bridg e Mo de Sta tus Sc re e n
Click Se tting s > Syste m > Sta tus to open the status screen. Fig ure 19 Settings > System > Status (Bridge Mode)

The following table describes the labels shown in the Sta tus screen.

Table 6 Settings > System > Status (Bridge Mode)

LA BEL

DESC RIPTIO N

System

Model Name

This is the model name of your device.

Firmware Version

This is the firmware version.

System Operation Mode

This is the device mode to which the NBG6818 is set, see Section 13.7 on page 137 for more information.

Enable IPv4 Firewall

This shows if the IPv4 firewall is enabled on the NBG6818.

Enable IPv6 Simple Security This shows if the IPv6 firewall is enabled on the NB6818.

System Uptime

This is the total time the NBG6818 has been on.

LAN Information

MAC Address

This shows the LAN Ethernet adapter MAC Address of your device.

IP Address

This shows the LAN port's IP address.

IP Subnet Mask

This shows the LAN port's subnet mask.

DHCP Server

This shows the LAN port's DHCP role - Ena b le or Disa b le .

IPv6 Address

This shows the current IPv6 address of the NBG6818 in the LAN.

NBG6818 User's Guide
41

C HA PTER 7 Tuto ria ls
7.1 O ve rvie w
This chapter provides tutorials for setting up your NBG6818. · Run a Speed Test · Configure the NBG6818's WiFi Networks · Enable or Disable a WiFi Network · Add Clients to a Profile · Set a Profile's WiFi Schedule · Pause or Resume Internet Access on a Profile · Change Your NBG6818 Operating Mode · Configure a Port Forwarding Rule
7.2 Run a Spe e d Te st
With the NBG6818 Web Configurator, you can check the speed of the connection between your NBG6818 and the broadband modem/router. 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ), and click Dia g no se to open the Adva nc e d Spe e d Te st screen. Use this screen to view all the available connections in your NBG6818 System.
2 Click TESTto perform a speed test. This shows data rates for both upstream and downstream traffic. Click TESTAG AIN to update the information in this screen.
NBG6818 User's Guide
42

Chapter 7 Tutorials 3 Click the Spe e d Te st Histo ry tab to view a summary of the tests made. Click C le a r to delete all records.

7.3 C o nfig ure the NBG 6818's WiFi Ne two rks

In the NBG6818 you can configure independent wireless networks with different privileges. Clients can associate only with the network for which they have security settings (SSID and password). The following table describes the different NBG6818's profile networks and their privileges.

Table 7 WiFi Network Privileges

WIFI NETWO RK

INTERNETAC C ESS

Main WiFi

Yes

Guest WiFi

Yes

2.4G / 5G WIFI NETWO RK
2.4G and 5G
2.4G and 5G

AC C ESS TO WEB C O NFIG URATO R

AC C ESS TO WIRED LAN

Yes

Yes

No

No

Note: A user can only configure the WiFi networks' security settings if they are connected to the Ma in WiFi network.

1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ), and click Se tting s to open the WiFi screen. Use each tab in the WiFi menu to configure each of the WiFi networks' security settings.

NBG6818 User's Guide
43

Chapter 7 Tutorials
2 Select Ena ble to activate a WiFi Network. Enter the 2.4G / 5G Na m e and Pa sswo rd clients use to connect to the WiFi network. You can configure two different WiFi Names for the Ma in WiFi 2.4G and 5G networks. Select Ke e p 2.4G & 5G na me the sa m e , so they both use the same WiFi Name. Click Apply to save your changes.
NBG6818 User's Guide
44

Chapter 7 Tutorials
7.4 Ena b le o r Disa b le a WiFi Ne two rk
After the NBG6818 is set up, you can use separate WiFi networks for your clients. The WiFi settings will be applied to all clients in the same network. Note: This is not available if you are using bridge mode. 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ), and click Se tting s to open the WiFi screen.
NBG6818 User's Guide
45

Chapter 7 Tutorials
2 Enable guest WiFi and enter the WiFi Na m e (SSID) and WiFi Pa sswo rd. Click Apply to save your changes.
7.5 Add C lie nts to a Pro file
Profiling clients allows you to easily block/allow Internet access or set a schedule for all client devices in the same profile.
NBG6818 User's Guide
46

Chapter 7 Tutorials 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ), and click Pa re nta l C o ntro l to open the
De vic e screen. Use the De vic e screen to view all the clients in your NBG6818.
2 Click the icon under Ac tio n ( ) to view the user information. In De vic e De ta il, select a predefined profile and click Apply.
7.6 Se t a Pro file 's WiFi Sc he dule
When you create or edit a profile, you can schedule the NBG6818 to automatically disable or enable WiFi access during a certain period of time for clients in that profile. Note: This is not available if you are using bridge mode. 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ).Select Pa re nta l C o ntro l, and click the Pro file tab. Use the Pro file screen to display the profiles created in the NBG6818.
NBG6818 User's Guide
47

Chapter 7 Tutorials
2 Click Ena ble to activate this profile's Internet schedule. Click the Edit icon ( ) to modify a profile's Internet schedule.
3 Click the start time cell and drag down to the end time to set up your schedule.
NBG6818 User's Guide
48

Chapter 7 Tutorials
7.7 Pa use o r Re sum e Inte rne t Ac c e ss o n a Pro file
You may want to manually block a profile of client devices from accessing the Internet immediately and resume it later. Note: This is not available if you are using bridge mode. 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ).Select Pa re nta l C o ntro l, and click the Pro file tab. Use the Pro file screen to display the profiles created in the NBG6818.
NBG6818 User's Guide
49

Chapter 7 Tutorials
2 Click a profile's Re sum e button to resume network access at once, or click the Q uic k Blo c k button to pause Internet access for that specific profile.
7.8 Turn o n o r o ff the NBG 6818's LED (Lig ht)
1 In the O ve rvie w screen, find the LED field and drag the button of the slider to the left.
NBG6818 User's Guide
50

Chapter 7 Tutorials
7.9 C ha ng e Yo ur NBG 6818 O pe ra ting Mo de
The operating mode refers to how the NBG6818 is being used in the network. The NBG6818 has two operating modes: · Sta nda rd: This is the NBG6818's default mode. In this mode, the NBG6818 routes traffic between a
local network and another network such as the Internet. · Bridg e : Use this mode so the NBG6818 bridges traffic between clients on the same network. Note: Features such as parental Control, UPnP, Port Forwarding are not available in Bridge
mode. 1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( ).From the Se tting s drop-down list, click
Syste m , then click the O pe ra ting Mo de tab. Select the operating mode and select APPLY to save your changes. Changing the NBG6818's operating mode may take up to two minutes.
NBG6818 User's Guide
51

Chapter 7 Tutorials

7.10 C o nfig ure a Po rt Fo rwa rding Rule

If you want to forward incoming packets to a specific or appropriate IP address in the private network using ports, set a port forwarding rule.
Note: This is not available if you are using bridge mode.

1 Click the Na vig a tio n Pa ne l icon on the top-left corner ( Inte rne t, and click the NAT& Po rt Fo rwa rding tab.

). From the Se tting s drop-down list, select

NBG6818 User's Guide
52

Chapter 7 Tutorials
2 Select Ena b le in the Ena ble Po rt Fo rwa rding field. 3 Click Add Rule to create a port forwarding rule. Add a service name, a port number or a range of ports
to define the service to be forwarded, specify the transport layer protocol used for the service, and the IP address of a device on your local network that will receive the packets from the port(s).
NBG6818 User's Guide
53

Chapter 7 Tutorials
NBG6818 User's Guide
54

PA RT II
Te c hnic a l Re fe re nc e
55

C HA PTER 8 Applic a tio ns
8.1 O ve rvie w
This chapter shows you how to configure parental control, OpenVPN, USB media sharing and file sharing.
8.1.1 Wha t Yo u C a n Do
· Use the Pa re nta l C o ntro l screens to enable parental control, configure the parental control rules and schedules, and send e-mail notifications. (Section 8.2 on page 57).
· Use the O pe nVPN Se rve r screen to create or configure your NBG6818 when it functions as an OpenVPN Server (Section 8.3.1 on page 61).
· Use the O pe nVPN C lie nt screen to add an OpenVPN Server Account you want your NBG6818 to connect to (Section 8.3.3 on page 65).
· Use the USB Applic a tio n screen to allow file sharing or to set up your NBG6818 to act as a media server (Section 8.4 on page 67).
8.1.2 Wha t Yo u Ne e d To Kno w
The following terms and concepts may help as you read through this chapter.
DLNA
The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. DLNA clients play files stored on DLNA servers. The NBG6818 can function as a DLNA-compliant media server and stream files to DLNAcompliant media clients without any configuration.
Wo rkg ro up na m e
This is the name given to a set of computers that are connected on a network and share resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network.
File Syste m s
A file system is a way of storing and organizing files on your hard drive and storage device. Often different operating systems such as Windows or Linux have different file systems. The file-sharing feature on your NBG6818 supports New Technology File System (NTFS), File Allocation Table (FAT) and FAT32 file systems. The NBG6818 uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the NBG6818. CIFS
NBG6818 User's Guide
56

Chapter 8 Applications
protocol is supported on Microsoft Windows, Linux Samba and other operating systems (refer to your systems specifications for CIFS compatibility).
Sa m b a
SMB is a client-server protocol used by Microsoft Windows systems for sharing files, printers, and so on. Samba is a free SMB server that runs on most Unix and Unix-like systems. It provides an implementation of an SMB client and server for use with non-Microsoft operating systems.
File Tra nsfe r Pro to c o l
This is a method of transferring data from one computer to another over a network such as the Internet.
VPN
A virtual private network (VPN) provides secure communications between sites without the expense of leased site-to-site lines. A secure VPN is a combination of tunneling, encryption, authentication, access control and auditing. It is used to transport traffic over the Internet or any insecure network that uses TCP/IP for communication.
8.1.3 Be fo re Yo u Be g in
Make sure the NBG6818 is connected to your network and turned on.
1 Connect the USB device to one of the NBG6818's USB ports. 2 The NBG6818 detects the USB device and makes its contents available for browsing. If you are
connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Note: If your USB device cannot be detected by the NBG6818, see the troubleshooting for
suggestions.
8.2 Pa re nta l C o ntro l
Parental Control allows you to block specific URLs. You can also define time periods and days during which the NBG6818 performs parental control on a specific user. Note: This is not available if you are using bridge mode.
8.2.1 De vic e Sc re e n
Use this screen to enable parental control, view the parental control rules and schedules. Click Pa re nta l C o ntro l > De vic e to show the following screen.
NBG6818 User's Guide
57

Chapter 8 Applications Fig ure 20 Parental Control > Device

The following table describes the fields in this screen.

Table 8 Parental Control

LA BEL Sort By Connect to

DESC RIPTIO N
Choose to sort the order of your devices by Type or Na m e .
Choose whether you want to show devices that are connected to Ma in Ne two rk or devices that are connected G ue st Ne two rk.

No. Type Network Name MAC

Choose All if you want to show all devices. This shows the index number of the rule. The shows the type of device to which this rule applies. This shows the type of network the devices are connected to. This shows the name of the user to which this rule applies. This field shows the MAC address of the device with the name in the Na m e field.

IP Address Profile

Every Ethernet device has a unique MAC (Media Access Control) address which uniquely identifies a device. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
This field displays the IP address relative to the No . field listed above.
This shows the name of the rule that is applied to the device.

Action

If no rule exists, una ssig ne d is showed in this field. Click the Ac tio n icon ( ) to configure a rule for the device.

8.2.1.1 Edit De vic e De ta il Sc re e n
Use this screen to configure basic settings for the device. Click the Ac tio n icon ( ), and then the Edit icon ( ) to show the following screen.

NBG6818 User's Guide
58

Chapter 8 Applications Fig ure 21 Edit Device Detail

Table 9 Edit Device Detail

LA BEL

DESC RIPTIO N

Device Name

Enter a name for the device to which this rule applies.

Type

Choose the type of device to which this rule applies.

Apply

Click Apply to save your settings back to the NBG6818.

Cancel

Click C a nc e l to exist the screen without saving.

8.2.1.2 Add Ne w Pro file Sc re e n
Use this screen to configure a restricted access schedule. Click the Ac tio n icon ( ), then Add Ne w Pro file to show the following screen.

NBG6818 User's Guide
59

Fig ure 22 Add New Profile

Chapter 8 Applications

The following table describes the fields in this screen.

Table 10 Add New Profile

LA BEL

DESC RIPTIO N

Profile Name

Enter a name for this rule.

Select All

Click Se le c t All then deselect the blocks you don't want or click on blocks separately to specify days and times to turn the Wireless LAN on or off.

Deselect All

Click De se le c t All to remove all the wireless LAN scheduling.

Apply

Click Apply to save your changes back to the NBG6818.

Back

Click Ba c k to exist the screen without saving.

NBG6818 User's Guide
60

Chapter 8 Applications
8.2.1.3 Pro file Sc re e n
Use this screen to edit or delete an existing rule. Click Pa re nta l Co ntro l > Pro file to show the following screen. Fig ure 23 Parental Control > Profile

The following table describes the fields in this screen.

Table 11 Parental Control > Profile

LA BEL

DESC RIPTIO N

Enable/Disable

Set the switch to the right (

switch to the left (

).

) to enable an existing rule. Otherwise, set the

Quick Block Edit

Click Q uic k Blo c k to activate the profile. Click on the Edit icon to edit an existing rule.

Delete

Click on the De le te icon to delete an existing rule.

8.3 O pe nVPN Se rve r/ C lie nt
OpenVPN is a VPN protocol which is open source and free of charge. It can be used to create a virtual private network or to interconnect local networks.
It uses OpenSSL encryption library and SSLv3/TLSv1 protocols. This provides high security and anonymity for all transmitted data.
It also provides faster connection speeds than other VPN protocols.
Note: We do not recommended activating OpenVPN Server and OpenVPN Client at the same time on your NBG6818.
8.3.1 O pe nVPN Se rve r Sc re e n
Use this screen to create an OpenVPN server account. Click the Na vig a tio n Pa ne l icon on the top-left corner ( ).Select O pe nVPN Se rve r, and click the O pe nVPN Se rve r tab.

NBG6818 User's Guide
61

Chapter 8 Applications Fig ure 24 Example of NBG6818 Acting As VPN Server
Note: You have to enable DDNS in Se tting s > Inte rne t > Dyna m ic DNS screen before you can create an OpenVPN account. See Section 9.8 on page 95 for more information on Dynamic DNS.
Fig ure 25 OpenVPN Server

The following table describes the fields in this screen.

Table 12 OpenVPN Server

LA BEL

DESC RIPTIO N

OpenVPN Server

Dynamic DNS

This field shows the status of your Dynamic DNS. Make sure it shows Ena ble before you create an OpenVPN account.

Host Name

This field shows the Host Name of your Dynamic DNS account.

Configuration

Status

Select Ena ble to activate your OpenVPN Server account.

Protocol

Select the protocol you want to apply to your OpenVPN Server account.

NBG6818 User's Guide
62

Chapter 8 Applications

Table 12 OpenVPN Server

LA BEL Server Port
VPN Subnet/ Netmask

DESC RIPTIO N
The default server port number is 1194. You can change it if needed. However, clients connected to this OpenVPN Server account will have to use the same port number in order to access the server account.
The fields define the network form which OpenVPN clients can connect to the NBG6818 OpenVPN server.

Advertise DNS to Clients Key Setting

Enter an IPv4 address and subnet mask.
Select Ena ble if you want the NBG6818 to broadcast its OpenVPN server to OpenVPN clients in its VPN network defined previously.
Click the C ha ng e Ke y button if you want to change the key your clients use to access to your OpenVPN Server account.

Export Config
Apply Cancel

You do not need to click Change Key the first time to configure this screen. Periodically changing the key is recommended, but you must export the new .opvn configuration file and send it to all OpenVPN clients so that they can they use the new key.
Click Expo rt Co nfig to export your configuration to an .ovpn file that OpenVPN clients need to connect to the NBG6818 OpenVPN server.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to begin configuring this screen afresh.

8.3.2 O pe nVPN Ac c o unt Sc re e n
Use the O pe nVPN Ac c o unt List screen to view the basic information of the NBG6818 OpenVPN server.
Use the O pe nVPN Ac c o unt Sta tus screen to view the basic information of clients that are connected to the NBG6818 OpenVPN server
Note: At the time of writing, up to 16 OpenVPN clients can connect to the NBG6818 OpenVPN server at the same time.
Fig ure 26 OpenVPN Account

NBG6818 User's Guide
63

Chapter 8 Applications

The following table describes the fields in this screen.

Table 13 OpenVPN Account

LA BEL OpenVPN Account List No. Username Password
Client Access Allowed
Actions

DESC RIPTIO N
This is the rule index number. This field displays a name to identify this rule. This field displays a combination of characters and numbers clients need to connect to an account. This field displays the interface(s) through which the clients are allowed to connect to an account. Click the icons under Ac tio ns to delete or edit an existing OpenVPN account settings.

Click to delete an existing OpenVPN account.

OpenVPN Account Status No. Public IP Private IP Connected Time

Click

to edit an existing OpenVPN account.

This is the number used to identify a client. This field displays the public IP of a client. This field displays the private IP of a client. This field displays how long a client is connected.

8.3.2.1 O pe nVPN Ac c o unt List- Add Rule Sc re e n
Use this screen to configure your OpenVPN account settings. Fig ure 27 OpenVPN Account LIst-Add Rule

The following table describes the fields in this screen.

Table 14 OpenVPN Account List-Add Rule

LA BEL

DESC RIPTIO N

User Name

Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed.

Password

Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed.

Client Access Allowed

Select the interface(s) through which the clients are allowed to connect to your account.

NBG6818 User's Guide
64

Chapter 8 Applications

Table 14 OpenVPN Account List-Add Rule

LA BEL

DESC RIPTIO N

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to exist this screen without saving.

8.3.3 O pe nVPN C lie nt Sc re e n
Use the O pe nVPN Se rve r List in this screen to view the basic information of the OpenVPN Server accounts that you are connected to when the NBG6818 functions as an OpenVPN client.
Fig ure 28 Example of NBG6818 Acting As VPN Client

Note: You can only connect to one server at a time. Fig ure 29 OpenVPN Client

The following table describes the fields in this screen.

Table 15 OpenVPN Client

LA BEL

DESC RIPTIO N

No.

This is the rule index number.

Description

This field displays a name to identify this rule.

Enable VPN on

This field displays the interface(s) through which your NBG6818 are allowed to connect to an OpenVPN Server account.

Connected IP

This field displays the IP address of the OpenVPN Server account your NBG6818 is connected to.

NBG6818 User's Guide
65

Chapter 8 Applications

Table 15 OpenVPN Client

LA BEL Active
Actions

DESC RIPTIO N

Slide the switch to the right ( Server account.

) to activate your connection to an OpenVPN

Click the icons under Ac tio ns to delete or edit an existing OpenVPN Server account settings.

Click to delete an existing OpenVPN Server account.

Click

to edit an existing OpenVPN Server account.

8.3.3.1 O pe nVPN Se rve r List- Add Rule Sc re e n
Use this screen to add an OpenVPN Server Account that you want your NBG6818 to connect to. Fig ure 30 OpenVPN Server List-Add Rule

The following table describes the fields in this screen.

Table 16 OpenVPN Server List-Add Rule

LA BEL

DESC RIPTIO N

Description

Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed.

User Name

Enter the Use r Na m e of the OpenVPN Server account you want to connect to.

Password

Enter the Password of the OpenVPN Server account you want to connect to.

Import .ovpn file

Import an .ovpn file that you get from the OpenVPN Server that you want to connect to.

Enable VPN on

Note: Do not import the .ovpn file you get from your NBG6818's OpenVPN Server.
Select the interface(s) that are allowed by the OpenVPN Server account you want to connect to.

NBG6818 User's Guide
66

Chapter 8 Applications

Table 16 OpenVPN Server List-Add Rule

LA BEL

DESC RIPTIO N

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to exist this screen without saving.

8.4 USB Applic a tio n
8.4.1 SAMBA Se rve r Sc re e n
Use this screen to set up file-sharing via the NBG6818 using Windows Explorer or the workgroup name. You can also configure the workgroup name and create file-sharing user accounts. Click USB Applic a tio n > SAMBA to show the following screen. Fig ure 31 USB Application > SAMBA

The following table describes the labels in this screen.

Table 17 USB Application > SAMBA

LA BEL

DESC RIPTIO N

SAMBA Setup

Enable SAMBA

Select this to enable file sharing through the NBG6818 using Windows Explorer or by browsing to your work group.

Name

Specify the name to identify the NBG6818 in a work group.

NBG6818 User's Guide
67

Chapter 8 Applications

Table 17 USB Application > SAMBA (continued)

LA BEL

DESC RIPTIO N

Work Group

You can add the NBG6818 to an existing or a new workgroup on your network. Enter the name of the workgroup which your NBG6818 automatically joins. You can set the NBG6818's workgroup name to be exactly the same as the workgroup name to which your computer belongs to.

Description Require username and password User Accounts
No. Status User Name USB
Actions
Apply Cancel

Note: The NBG6818 will not be able to join the workgroup if your local area network has restrictions set up that do not allow devices to join a workgroup. In this case, contact your network administrator.
Enter the description of the NBG6818 in a work group.
Select Ye s to need a user account for access to the connected USB stick from any computer. Otherwise, select No .
Before you can share files you need a user account. Configure the following fields to set up a file-sharing account.
This is the index number of the user account.
This field displays whether a user account is activated or not.
This field displays the user name that will be allowed to access the shared files.
This field displays the user's access rights to the USB storage device which is connected to the NBG6818's USB port.
Click the icons under Ac tio ns to delete or edit a port forwarding rule.

Click to delete an existing trigger port settings.

Click

to edit an existing trigger port settings.

Click Apply to save your changes back to the NBG6818.

Click C a nc e l to begin configuring this screen afresh.

8.4.1.1 Add SAMBA Ac c o unt Sc re e n
Use this screen to configure settings for a SAMBA account. Click USB Applic a tio n > SAMBA > Add Rule to show the following screen.

NBG6818 User's Guide
68

Chapter 8 Applications Fig ure 32 USB Application > SAMBA > Add Rule

The following table describes the labels in this screen.

Table 18 USB Application > SAMBA > Add Rule

LA BEL Status

DESC RIPTIO N Select Ena ble to enable the account.

User Name Password USB

Select Disa ble to disable the account.
Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed.
Enter the password used to access the shared files. You can enter up to 20 characters. Only letters and numbers are allowed. The password is case sensitive.
Specify the user's access rights to the USB storage device which is connected to the NBG6818's USB port.

Re a d & Write - The user has read and write rights, meaning that the user can create and edit the files on the connected USB device.

Re a d - The user has read rights only and can not create or edit the files on the connected USB device.

Apply Cancel

No ne - The user cannot access the files on the USB device(s) connected to the USB port.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to exist the screen without saving.

8.4.2 FTP Se rve r Sc re e n
Use this screen to set up file sharing via the NBG6818 using FTP and create user accounts. Click USB Applic a tio n > FTP to show the following screen.

NBG6818 User's Guide
69

Chapter 8 Applications Fig ure 33 USB Application > FTP

The following table describes the labels in this screen.

Table 19 Expert Mode > Applications > File Sharing > FTP

LA BEL Enable FTP Port
User Accounts
No. Status
User Name USB
Upstream Bandwidth Downstream Bandwidth Actions

DESC RIPTIO N Select this to enable the FTP server on the NBG6818 for file sharing using FTP. You may change the server port number for FTP if needed, however you must use the same port number in order to use that service for file sharing. Before you can share files you need a user account. Configure the following fields to set up a file-sharing account. This is the index number of the user account. This field displays whether a user account is activated or not. Select the check box to enable the account. Clear the check box to disable the account. This field displays the user name that will be allowed to access the shared files. This field displays the user's access rights to the USB storage device which is connected to the NBG6818's USB port. This field shows the maximum bandwidth (in Kbps) allowed for incoming FTP traffic.
This field shows the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic.
Click the icons under Ac tio ns to delete or edit a port forwarding rule.

Click to delete an existing trigger port settings.

Apply Cancel

Click

to edit an existing trigger port settings.

Click Apply to save your changes back to the NBG6818.

Click C a nc e l to begin configuring this screen afresh.

8.4.2.1 Add FTP Ac c o unt Sc re e n
Use this screen to configure settings for a FTP account. Click USB Applic a tio n > FTP > Add Rule to show the following screen.

NBG6818 User's Guide
70

Chapter 8 Applications Fig ure 34 USB Application > FTP > Add Rule

The following table describes the labels in this screen.

Table 20 USB Application > FTP > Add Rule

LA BEL Status

DESC RIPTIO N Select Ena ble to enable the account.

User Name Password USB

Select Disa ble to disable the account.
Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed.
Enter the password used to access the shared files. You can enter up to 20 characters. Only letters and numbers are allowed. The password is case sensitive.
Specify the user's access rights to the USB storage device which is connected to the NBG6818's USB port.

Re a d & Write - The user has read and write rights, meaning that the user can create and edit the files on the connected USB device.

Re a d - The user has read rights only and can not create or edit the files on the connected USB device.

Upstream Bandwidth Downstream Bandwidth Apply Cancel

No ne - The user cannot access the files on the USB device(s) connected to the USB port. Enter the maximum bandwidth (in Kbps) allowed for incoming FTP traffic. Enter the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic. Click Apply to save your changes back to the NBG6818. Click C a nc e l to exist the screen without saving.

8.4.3 USB Me dia Sha ring Sc re e n
Use this screen to configure settings for media sharing.
NBG6818 User's Guide
71

Chapter 8 Applications The media server feature lets anyone on your network play video, music, and photos from the USB storage device connected to your NBG6818 without having to copy them to another computer. The NBG6818 can function as a DLNA-compliant media server, where the NBG6818 streams files to DLNAcompliant media clients like Windows Media Player. The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. The NBG6818 media server enables you to: · Publish all share folders for everyone to play media files in the USB storage device connected to the
NBG6818. · Use hardware-based media clients like the DMA-2500 to play the files. Note: Anyone on your network can play the media files in the published folders. No user
name and password nor other form of security is required. Fig ure 35 Media Server Overview
Click USB Applic a tio n > USB Me dia Sha ring to show the following screen. Fig ure 36 USB Application > USB Media Sharing
NBG6818 User's Guide
72

Chapter 8 Applications

The following table describes the labels in this screen.

Table 21 USB Application > USB Media Sharing

LA BEL

DESC RIPTIO N

USB Media Sharing

Media Server (DLNA) Setup

Choose Ena ble to have the NBG6818 function as a DLNA-compliant media server. Otherwise, choose Disa b le .

Share Media Type Permission

Photo/Music/Video Select the media type that you want to share on the USB device connected to the NBG6818's USB port.

Rescan Media Control

Rescan

Click this button to have the NBG6818 scan the media files on the connected USB device and do indexing of the file list again so that DLNA clients can find the new files if any.

Apply Cancel

Click Apply to save your changes back to the NBG6818. Click C a nc e l to begin configuring this screen afresh.

8.5 Ac c e ss Yo ur Sha re d File s Fro m a C o m pute r
8.5.1 Using Windo ws Explo re r
You can use Windows Explorer to access the file storage devices connected to the NBG6818.
Note: The examples in this User's Guide show you how to use Microsoft's Windows 7 to browse your shared files. Refer to your operating system's documentation for how to browse your file structure.
Open Windows Explorer to access usb1 using the Windows Explorer browser.
In the Windows Explorer's address bar type a double backslash "\\" followed by the IP address of the NBG6818 (the default IP address of the NBG6818 is 192.168.123.1) and press [ENTER]. The share folder usb1 is available.

NBG6818 User's Guide
73

Fig ure 37 USB1

Chapter 8 Applications

Once you access usb1 via your NBG6818, you do not have to relogin unless you restart your computer.
8.5.2 Using FTP Pro g ra m
Here is how to use an FTP program to access a file storage device connected to the NBG6818's USB port.
Note: This example uses the FileZilla FTP program to browse your shared files.
1 Download FileZilla and install the FTP software to your computer
2 Go to USB Applic a tio n > FTP. On the FTP Se tup screen, click Add Rule to go to the Add FTP Ac c o unt screen. You can use this screen to create a set of Use r Na m e and Pa sswo rd and set up USB rules for file sharing. (See more information at Section 8.4.2 on page 69.) Click Apply to save the changes. Fig ure 38 Add FTP Account

NBG6818 User's Guide
74

Chapter 8 Applications 3 You can click the Edit or De le te icon to edit or delete the rules.
Fig ure 39 Add Rule Edit
4 Open FileZilla, enter the Ho st IP address of the NBG6818 (the default IP address is 192.168.123.1), the Use rna m e and Pa sswo rd, and the po rt number 21, and then click Q uic kc o nne c t. A screen asking for password authentication appears.
File Sharing via Windows Explorer
NBG6818 User's Guide
75

Chapter 8 Applications 5 Once you log in the USB device displays in the usb1 folder.
NBG6818 User's Guide
76

C HA PTER 9 WAN
9.1 O ve rvie w
This chapter discusses the NBG6818's WAN screens. Use these screens to configure your NBG6818 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Fig ure 40 LAN and WAN
Note: Features in this chapter are not available if you are using bridge mode.
9.2 Wha t Yo u C a n Do
· Use the Inte rne t C o nne c tio n screen to enter your ISP information and set how the computer acquires its IP, DNS and WAN MAC addresses (Section 9.4 on page 79).
· Use the NAT& Po rt Fo rwa rding screen to enable NAT, set a default server and change your NBG6818's port forwarding settings (Section 9.5 on page 87).
· Use the Pa ssthro ug h screen to configure your NBG6818's ALGs and VPN pass-through settings (Section 9.6 on page 91)
· Use the Po rt Trig g e r screen to configure your NBG6818's trigger port settings (Section 9.7 on page 92). · Use the Dyna m ic DNS screen to change your NBG6818's DDNS settings (Section 9.8 on page 95). · Use the UPnP screen to enable UPnP on your NBG6818 (Section 9.9 on page 96).
NBG6818 User's Guide
77

Chapter 9 WAN
9.3 Wha t Yo u Ne e d To Kno w
The information in this section can help you configure the screens for your WAN connection, as well as enable/disable some advanced features of your NBG6818.
9.3.1 C o nfig uring Yo ur Inte rne t C o nne c tio n
Enc a psula tio n Me tho d
Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password (and service name) for user authentication.
WAN IP Addre ss
The WAN IP address is an IP address for the NBG6818, which makes it accessible from an outside network. It is used by the NBG6818 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG6818 tries to access the Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation method).
DNS Se rve r Addre ss Assig nm e nt
Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it.
The NBG6818 can get the DNS server addresses in the following ways.
1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields.
2 If your ISP dynamically assigns the DNS server IP addresses (along with the NBG6818's WAN IP address), set the DNS server fields to get the DNS server address from the ISP.
WAN MAC Addre ss
The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Fa c to ry De fa ult to select the factory assigned default MAC Address.
Otherwise, click C lo ne the c o m pute r's MAC a ddre ss - IP Addre ss and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to configuration file. It is recommended that you clone the MAC address prior to hooking up the WAN Port.
NBG6818 User's Guide
78

Chapter 9 WAN
Auto - IP C ha ng e
When the NBG6818 gets a WAN IP address or a DNS server IP address which is in the same subnet as the LAN IP address 192.168.123.1, Auto-IP-Change allows the NBG6818 to change its LAN IP address to 10.0.0.1 automatically. If the NBG6818's original LAN IP address is 10.0.0.1 and the WAN IP address is in the same subnet, such as 10.0.0.3, the NBG6818 switches to use 192.168.123.1 as its LAN IP address. Fig ure 41 Auto-IP-Change Example
Auto-IP-Change only works under the following conditions: · The NBG6818 must be in Sta nda rd Mo de (see Section 13.7 on page 137 for more information) for Auto-
IP-Change to become active. · The NBG6818 is set to receive a dynamic WAN IP address.
9.4 Inte rne t C o nne c tio n Sc re e n
Use this screen to change your NBG6818's Internet access settings. The screen varies depending on the encapsulation method you select. Click Se tting s > Inte rne t > Inte rne t C o nne c tio n.
9.4.1 IPo E Enc a psula tio n
This screen displays when you select IPo E encapsulation.
NBG6818 User's Guide
79

Chapter 9 WAN Fig ure 42 Settings > Internet > Internet Connection: IPoE (IPv4 Only)

The following table describes the labels in this screen.

Table 22 Network > WAN > Internet Connection: IPoE Encapsulation

LA BEL
Internet Connection Internet Service Provider Type IPv4 / IPv6

DESC RIPTIO N You must choose the IPo E option when the WAN port is used as a regular Ethernet. Select IPv4 O nly if you want the NBG6818 to run IPv4 only.

Select Dua l Sta c k to allow the NBG6818 to run IPv4 and IPv6 at the same time. IPv4 Address Automatic IP (DHCP) Select this option If your ISP did not assign you a fixed IP address. This is the default selection.

NBG6818 User's Guide
80

Chapter 9 WAN

Table 22 Network > WAN > Internet Connection: IPoE Encapsulation (continued)

LA BEL Static IP
IP Address IP Subnet Mask Gateway MTU Size
DNS Server First DNS Server Second DNS Server Third DNS Server WAN MAC Address

DESC RIPTIO N Select this option If the ISP assigned a fixed IP address. Enter your WAN IP address in this field if you selected Sta tic IP Addre ss. Enter the Sub ne t Ma sk in this field. Enter a gateway IP address (if your ISP gave you one) in this field. Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives, the NBG6818 divides it into smaller fragments.
Select Use r- De fine d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it.

Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file.

Factory Default

Select this option to have the WAN interface use the factory assigned default MAC address. By default, the NBG6818 uses the factory assigned MAC address to identify itself.

Clone My Computer's MAC Address

Select this option to have the WAN interface use a different MAC address by cloning the MAC address of another device or computer. Enter the IP address of the device or computer whose MAC you are cloning.

Set WAN MAC Address

Select this option to have the WAN interface use a manually specified MAC address. Enter the MAC address in the fields.

LAN & WAN Subnet Conflict

Automatically change the LAN IP

Select this option to have the NBG6818 change its LAN IP address to 10.0.0.1 or 192.168.123.1 accordingly when the NBG6818 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 78 for more information.

IPv6 Address

The NAT, DHCP server and firewall functions on the NBG6818 are still available in this mode.

This section is NOT available when you select IPv4 O nly in the IPv4/ IPv6 field. Automatic IP (DHCP) Select this option if you want to obtain an IPv6 address from a DHCPv6 server.

Static IP Address IPv6 Address Prefix length
Gateway
Link Local Only
IPv6 DNS Server

· Select DUID- LL(De fa ult) to have the NBG6818 use DUID-LL (DUID Based on Link-layer Address) for identification when exchanging DHCPv6 messages.
· Select DUID- LLTto have the NBG6818 use DUID-LLT (DUID Based on Link-layer Address Plus Time) for identification when exchanging DHCPv6 messages.
Select this option if you have a fixed IPv6 address assigned by your ISP.
Enter the IPv6 address assigned by your ISP.
Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address.
Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to their destinations.
Select this option to use the link-local address which uniquely identifies a device on the local network (the LAN).

This section is NOT available when you select IPv4 O nly in the IPv4/ IPv6 field.

NBG6818 User's Guide
81

Chapter 9 WAN

Table 22 Network > WAN > Internet Connection: IPoE Encapsulation (continued)

LA BEL

DESC RIPTIO N

First DNS Server Second DNS Server Third DNS Server

Select Use r- De fine d and enter the IPv6 DNS server address assigned by the ISP to have the NBG6818 use the IPv6 DNS server addresses you configure manually.
Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IPv6 address of a computer in order to access it.

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to begin configuring this screen afresh.

9.4.2 PPPo E Enc a psula tio n
The NBG6818 supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPP o ve r Ethe rne t option is for a dial-up connection using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example Radius).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the NBG6818 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG6818 does that part of the task. Furthermore, with NAT, all of the LANs' computers will have access.

NBG6818 User's Guide
82

Chapter 9 WAN
This screen displays when you select PPPo E encapsulation. Fig ure 43 Settings > Internet > Internet Connection: PPPoE (IPv4 Only)

The following table describes the labels in this screen.

Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation

LA BEL

DESC RIPTIO N

Internet Connection

Internet Service Provider Type

Select PPPo E if you connect to your Internet via dial-up.

IPv4 / IPv6

Select IPv4 O nly if you want the NBG6818 to run IPv4 only.

PPPoE Username

Select Dua l Sta c k to allow the NBG6818 to run IPv4 and IPv6 at the same time. Type the user name given to you by your ISP.

NBG6818 User's Guide
83

Chapter 9 WAN

Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)

LA BEL

DESC RIPTIO N

Password

Type the password associated with the user name above.

MTU Size

Enter the Maximum Transmission Unit (MTU) or the largest packet size per frame that your NBG6818 can receive and process.

Service Name

Enter the PPPoE service name specified in the ISP account.

DNS Server

First DNS Server Second DNS Server Third DNS Server

Select Use r- De fine d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it.

WAN IP Address Assignment

Obtained from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection.

Fixed IP

Select this option and enter your WAN IP address if the ISP assigned a fixed IP address.

WAN MAC Address

The MAC address section allows users to configure the WAN port's MAC address by using the NBG6818's MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address.

Factory Default

Select Fa c to ry de fa ult to use the factory assigned default MAC Address.

Clone My Computer's MAC Address

Select C lo ne the c o m pute r's MAC a ddre ss - IP Addre ss and enter the IP address of the computer on the LAN whose MAC you are cloning.

Set WAN MAC Address

Select this option and enter the MAC address you want to use.

IPv6 Address

This section is NOT available when you select IPv4 O nly in the IPv4/ IPv6 field.

Automatic IP (DHCP)

Select this option if you want to obtain an IPv6 address from a DHCPv6 server.
· Select DUID- LL(De fa ult) to have the NBG6818 use DUID-LL (DUID Based on Link-layer Address) for identification when exchanging DHCPv6 messages.
· Select DUID- LLTto have the NBG6818 use DUID-LLT (DUID Based on Link-layer Address Plus Time) for identification when exchanging DHCPv6 messages.

Static IP Address

Select this option if you have a fixed IPv6 address assigned by your ISP.

IPv6 Address

Enter the IPv6 address assigned by your ISP.

Prefix length

Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address.

Gateway

Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to their destinations.

Link Local Only

Select this option to use the link-local address which uniquely identifies a device on the local network (the LAN).

IPv6 DNS Server

This section is NOT available when you select IPv4 O nly in the IPv4/ IPv6 field.

First DNS Server Second DNS Server Third DNS Server

Select Use r- De fine d and enter the IPv6 DNS server address assigned by the ISP to have the NBG6818 use the IPv6 DNS server addresses you configure manually.
Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IPv6 address of a computer in order to access it.

LAN & WAN Subnet Conflict

NBG6818 User's Guide
84

Chapter 9 WAN

Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)

LA BEL
Automatically change the LAN IP

DESC RIPTIO N
Select this option to have the NBG6818 change its LAN IP address to 10.0.0.1 or 192.168.123.1 accordingly when the NBG6818 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 78 for more information.

Apply Cancel

The NAT, DHCP server and firewall functions on the NBG6818 are still available in this mode. Click Apply to save your changes back to the NBG6818. Click C a nc e l to begin configuring this screen afresh.

9.4.3 PPTP Enc a psula tio n
This screen displays when you select PPTP encapsulation. Fig ure 44 Settings > Internet > Internet Connection: PPTP (IPv4 Only)

NBG6818 User's Guide
85

Chapter 9 WAN

The following table describes the labels in this screen.

Table 24 Network > WAN > Internet Connection: PPTP Encapsulation

LA BEL

DESC RIPTIO N

Internet Connection

Internet Service Provider Type

Select PPTP if you want to connect the Internet via point to point tunneling protocol.

PPTP Username

Enter the user name given to you by your ISP.

Password

Enter the password associated with the user name above.

PPTP Encryption Type Use the drop-down list box to select the type of Microsoft Point-to-Point Encryption (MPPE). Options are:

Auto - This ISP account adjusts the encryption type automatically.

No ne - This ISP account does not use MPPE.

40 - This ISP account uses 40-bit MPPE.

128 - This ISP account uses 128-bit MMPE.

MTU Size

Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives, the NBG6818 divides it into smaller fragments.

PPTP Server IP Address

Enter the IP address of the PPTP server.

Auto Connect

Select this radio button if the PPTP server did not assign you a fixed IP address.

Static IP

Select this radio button if the PPTP server assigned an IP address for your Internet connection.

IP Address

Enter the IP address provided by the PPTP server.

IP Subnet Mask

Enter the IP subnet mask in this field.

Gateway

Enter the gateway IP address in this field.

DNS Server

First DNS Server Second DNS Server Third DNS Server

Select Use r- De fine d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it.

WAN IP Address Assignment

Obtained from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection.

Fixed IP

Select this option If the ISP assigned a fixed IP address.

IP Address

Enter your WAN IP address in this field if you selected IP Addre ss.

WAN MAC Address

Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file.

Factory Default

Select this option to have the WAN interface use the factory assigned default MAC address. By default, the NBG6818 uses the factory assigned MAC address to identify itself.

Clone My Computer's MAC Address

Select this option to have the WAN interface use a different MAC address by cloning the MAC address of another device or computer. Enter the IP address of the device or computer whose MAC you are cloning.

Set WAN MAC Address

Select this option to have the WAN interface use a manually specified MAC address. Enter the MAC address in the fields.

LAN & WAN Subnet Conflict

NBG6818 User's Guide
86

Chapter 9 WAN

Table 24 Network > WAN > Internet Connection: PPTP Encapsulation (continued)

LA BEL
Automatically change the LAN IP

DESC RIPTIO N
Select this option to have the NBG6818 change its LAN IP address to 10.0.0.1 or 192.168.123.1 accordingly when the NBG6818 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 78 for more information.

Apply Cancel

The NAT, DHCP server and firewall functions on the NBG6818 are still available in this mode. Click Apply to save your changes back to the NBG6818. Click C a nc e l to begin configuring this screen afresh.

9.5 NAT& Po rt Fo rwa rding Sc re e n
Use Port Forwarding to forward incoming service requests from the Internet to the server(s) on your local network. Port forwarding is commonly used when you want to host online gaming, P2P file sharing, or other servers on your network.
You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports.
Note: TCP port 7547 is reserved for system use.
Note: Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP.
C o nfig uring Se rve rs Be hind Po rt Fo rwa rding (Exa m ple )
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.123.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet.

NBG6818 User's Guide
87

Chapter 9 WAN Fig ure 45 Multiple Servers Behind NAT Example
Use this screen to enable NAT, set a default server and view the summary table of your NBG6818's port forwarding settings. Click Se tting s > Inte rne t > NAT& Po rt Fo rwa rding to show the following screen. Fig ure 46 Settings > Internet > NAT & Port Forwarding
NBG6818 User's Guide
88

Chapter 9 WAN

The following table describes the labels in this screen.

Table 25 Expert Mode > WAN > NAT > General

LA BEL

DESC RIPTIO N

NAT & Port Forwarding

Network Address Translation (NAT)

Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet).

Server Setup Default Server

Select Ena b le to activate NAT. Select Disa b le to turn it off.
You can decide whether you want to use the default server or specify a server manually. In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in the port forwarding summary table below.

Select this to use the default server.

Change To Server Select this and manually enter the server's IP address.

Port Forwarding Rule

Enable Port Forwarding

Select Ena b le to allow port forwarding. Otherwise, select Disa ble .

No.

This number uniquely identifies the port forwarding rule.

Name

This field displays a name to identify this rule.

Protocol

This is the transport layer protocol used for the service.

External Port

This is the port number used to connect to this service using the router's external IP address on the WAN.

Server IP Address This field displays the internal IP address of the server.

Internal Port

This is the port number used to connect to this service using the server's internal IP address on the LAN.

Actions

Click the icons under Ac tio ns to delete or edit a port forwarding rule.

Click to delete the rule.

Apply Cancel

Click

to edit the rule.

Click Apply to save your changes back to the NBG6818.

Click C a nc e l to begin configuring this screen afresh.

9.5.1 Add Po rt Fo rwa rding Rule Sc re e n
Use this screen to configure your NBG6818's port forwarding settings to forward incoming service requests to the servers on your local network. Click Se tting s > Inte rne t > NAT& Po rt Fo rwa rding > Add Rule to show the following screen.

NBG6818 User's Guide
89

Chapter 9 WAN Fig ure 47 Add Port Forwarding Rule

The following table describes the labels in this screen.

Table 26 Add Port Forwarding Rule

LA BEL Service Name
Protocol

DESC RIPTIO N
Select a pre-defined service from the drop-down list box. The pre-defined service port number(s) and protocol will be displayed in the port forwarding summary table. Otherwise, select Use r- De fine to manually enter the port number/range and select the Pro to c o l.
Select the transport layer protocol supported by this virtual server. Choices are TC P, UDP, or TC P_UDP.

External Port

If you have chosen a pre-defined service in the Se rvic e Na m e field, the protocol will be configured automatically.
This shows the port number used to connect to this service using the router's external IP address on the WAN.

Device List Internal Port

If you select Use r- De fine in the Se rvic e Na m e field, enter the port number(s) manually.
Select the internal IP address of the virtual server.
This shows the port number used to connect to this service using the server's internal IP address on the LAN.

Apply Cancel

If you select Use r- De fine in the Se rvic e Na m e field, enter an internal port number manually or leave the field blank for port range forwarding.
Click Apply to save your changes.
Click C a nc e l to exist this screen without saving.

NBG6818 User's Guide
90

Chapter 9 WAN
9.6 Pa ssthro ug h Sc re e n
Use this screen to change your NBG6818's ALGs and VPN pass-through settings. Click Se tting s > Inte rne t > Pa ssthro ug h to show the following screen.
ALG O ve rvie w
Application Layer Gateway (ALG) allows the following applications to operate properly through the NBG6818's NAT. · SIP - Session Initiation Protocol (SIP) - An application-layer protocol that can be used to create voice
and multimedia sessions over Internet. · H.323 - A teleconferencing protocol suite that provides audio, data and video conferencing. · FTP - File Transfer Protocol - an Internet file transfer service. · SNMP - Simple Network Management Protocol - An application-layer protocol that can be used to
exchange management information between network devices. · RTSP - Real Time Streaming Protocol - An application-layer protocol that can be used to stop, pause
or play video and audio applications streaming on the Internet. · IRC - Internet Relay Chat - An application-layer protocol that can control the relay chat applications
and allow clients to have real-time communications with others on the Internet. The ALG feature is only needed for traffic that goes through the NBG6818's NAT. Fig ure 48 Settings > Internet > Passthrough
NBG6818 User's Guide
91

Chapter 9 WAN

The following table describes the labels in this screen.

Table 27 Settings > Internet > Passthrough

LA BEL

DESC RIPTIO N

ALG Setup

FTP

Select Ena ble to allow TCP packets with a specified port destination to pass through.

H.323 SIP

Select Ena ble to allow peer-to-peer H.323 calls.
Select Ena ble to make sure SIP (VoIP) works correctly with port-forwarding and addressmapping rules.

SNMP

Select Ena ble to allow a manager station to manage and monitor the NBG6818 through the network via SNMP.

RTSP

Select Ena ble to have the NBG6818 detect RTSP traffic and help build RTSP sessions through its NAT.

IRC VPN Passthrough

Select Ena ble to allow clients to have real-time communications with others on the Internet.

PPTP

Select Ena ble to allow VPN clients to make outbound PPTP connections. It is required in order to connect to a PPTP VPN account. If PPTP is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG6818 and the NBG6818 will drop the request. When PPTP is enabled, the NBG6818 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully.

L2TP

Select Ena ble to allow VPN clients to make outbound L2TP connections. It is required in order to connect to a L2TP VPN account. If L2TP is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG6818 and the NBG6818 will drop the request. When L2TP is enabled, the NBG6818 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully.

IPSEC

Select Ena ble to allow VPN clients to make outbound IPSec connections. It is required in order to connect to a IPSec VPN account. If IPSEC is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG6818 and the NBG6818 will drop the request. When IPSEC is enabled, the NBG6818 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully.

Apply Cancel

Click Apply to save your changes back to the NBG6818. Click C a nc e l to begin configuring this screen afresh.

9.7 Po rt Trig g e r Sc re e n
Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding, you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address.
Trigger port forwarding addresses this problem. Trigger port forwarding allows computers on the LAN to dynamically take turns using the service. The Zyxel Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the Zyxel Device's WAN port receives a response with a specific port number and protocol ("open" port), the Zyxel Device forwards the traffic to the LAN IP address of the computer that sent the request. After that computer's connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application.
NBG6818 User's Guide
92

Chapter 9 WAN
Note: TCP port 7547 is reserved for system use. Note: The maximum number of trigger ports for a single rule or all rules is 999. Note: The maximum number of open ports for a single rule or all rules is 999. Fig ure 49 Trigger Port Forwarding Process: Example

1 Jane requests a file from the Real Audio server (port 7070).
2 Port 7070 is a "trigger" port and causes the Zyxel Device to record Jane's computer IP address. The Zyxel Device associates Jane's computer IP address with the "open" port range of 6970-7170.
3 The Real Audio server responds using a port number ranging between 6970-7170.
4 The Zyxel Device forwards the traffic to Jane's computer IP address.Only Jane can connect to the Real Audio server until the connection is closed or times out. The Zyxel Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol).
Use this screen to view the summary table of your NBG6818's port trigger settings. Click Expe rt Mo de > WAN > NAT> Po rt Trig g e r to show the following screen.
Note: Only one LAN computer can use a trigger port (range) at a time.
Fig ure 50 Expert Mode > WAN > NAT > Port Trigger

The following table describes the labels in this screen.

Table 28 Expert Mode > WAN > NAT > Port Trigger

LA BEL

DESC RIPTIO N

Port Trigger Rules (Max Limit: 32)

No.

This is the rule index number.

NBG6818 User's Guide
93

Chapter 9 WAN

Table 28 Expert Mode > WAN > NAT > Port Trigger (continued)

LA BEL Name Incoming Port
End Port Trigger Port
End Port Actions

DESC RIPTIO N
This field displays a name to identify this rule. This field displays a port number that a server on the WAN uses when it sends out a particular service. This field displays a port number or the final port number in a range of port numbers. This field displays a port number that causes the NBG6818 to record the IP address of the LAN computer that sent then traffic to a server on the WAN. This field displays a port number or the ending port number in a range of port numbers. Click the icons under Ac tio ns to delete or edit an existing trigger port settings.

Click to delete the rule.

Click

to edit the rule.

9.7.1 Add Po rt Trig g e r Rule Sc re e n
Use this screen to configure your NBG6818's port trigger settings. Click Expe rt Mo de > WAN > NAT> Po rt Trig g e r > Add Rule to show the following screen.
Fig ure 51 Add Port Trigger Rule

Table 29 Add Port Trigger Rule

LA BEL Name
Incoming Port

DESC RIPTIO N
Type a unique name (up to 15 characters) for identification purposes. All characters are permitted - including spaces.
Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The ARMOR Z1 forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service.

End Port Trigger Port

Type a port number or the starting port number in a range of port numbers.
Type a port number or the ending port number in a range of port numbers.
The trigger port is a port (or a range of ports) that causes (or triggers) the ARMOR Z1 to record the IP address of the LAN computer that sent the traffic to a server on the WAN.

End Port

Type a port number or the starting port number in a range of port numbers. Type a port number or the ending port number in a range of port numbers.

NBG6818 User's Guide
94

Chapter 9 WAN

Table 29 Add Port Trigger Rule

LA BEL

DESC RIPTIO N

Apply

Click Apply to save your changes.

Cancel

Click C a nc e l to exist this screen without saving.

9.8 Dyna m ic DNS Sc re e n
Use this screen to change your NBG6818's DDNS settings. Click Se tting s > Inte rne t > Dyna m ic DNS to show the following screen.
Note: You can register at https://mycloud.zyxel.com/ to get a free accessible-from-anywhere DDNS account.
Fig ure 52 Settings> Internet > Dynamic DNS

The following table describes the labels in this screen.

Table 30 Settings > Internet > Dynamic DNS

LA BEL

DESC RIPTIO N

Dynamic DNS Setup

Dynamic DNS

Select Ena ble to use dynamic DNS. Select Disa ble to turn this feature off.

Service Provider

Select the name of your Dynamic DNS service provider.

Host Name

Enter a host names in the field provided. You can specify up to two host names in the field separated by a comma (",").

NBG6818 User's Guide
95

Chapter 9 WAN

Table 30 Settings > Internet > Dynamic DNS (continued)

LA BEL

DESC RIPTIO N

Username

Enter your user name.

Password

Enter the password assigned to you.

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to begin configuring this screen afresh.

9.9 UPnP Sc re e n
Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities, and learn about other devices on the network. A device can then leave a network smoothly and automatically when it is no longer in use.
See Section 9.9.1 on page 97 and Section 9.9.2 on page 99 for more information on UPnP.
Use this screen to enable UPnP on your NBG6818. Click Se tting s > Inte rne t > UPnP to display the following screen.
Fig ure 53 Settings > Internet > UPnP

Table 31 Settings > Internet > UPnP

LA BEL UPnP Setup Enable UPnP

DESC RIPTIO N Select Ena ble to activate UPnP.

UPnP Setup Rule No. Protocol InPort

Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the NBG6818's IP address (although you must still enter the password to access the web configurator).
This is the number of an individual UPnP entry. This is the transport layer protocol used for the service. InPo rt is a port that a LAN computer uses when it requests a particular service. This port is only applicable to the local network.

OutPort

This field displays the port number of the UPnP entry.
O utPo rt is the well-known port that the WAN server uses to reply to the LAN computer that made the request using In Port.

This field displays the port number of the UPnP entry.

NBG6818 User's Guide
96

Chapter 9 WAN

Table 31 Settings > Internet > UPnP

LA BEL

DESC RIPTIO N

IP Address

This field displays the IP address of this UPnP entry.

Apply

Click Apply to save your settings.

Cancel

Click C a nc e l to return to the previously saved settings.

9.9.1 Turning O n UPnP in Windo ws 7 Exa m ple
This section shows you how to use the UPnP feature in Windows 7. UPnP server is installed in Windows 7. Activate UPnP on the NBG6818 in Se tting s > Inte rne t > UPnP.
Make sure the computer is connected to a LAN port of the NBG6818. Turn on your computer and the NBG6818.
1 Click the start icon, C o ntro l Pa ne l and then the Ne two rk a nd Sha ring C e nte r.

2 Click C ha ng e Adva nc e d Sha ring Se tting s.
NBG6818 User's Guide
97

Chapter 9 WAN
3 Select Turn o n ne two rk disc o ve ry and click Sa ve C ha ng e s. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers.
NBG6818 User's Guide
98

Chapter 9 WAN
9.9.2 Turning o n UPnP in Windo ws 10 Exa m ple
This section shows you how to use the UPnP feature in Windows 10. UPnP server is installed in Windows 10. Activate UPnP on the NBG6818 in Se tting s > Inte rne t > UPnP. Make sure the computer is connected to the LAN port of the NBG6818. Turn on your computer and the NBG6818. 1 Click the start icon, Se tting s and then Ne two rk & Inte rne t.
NBG6818 User's Guide
99

Chapter 9 WAN
2 Click Ne two rk a nd Sha ring C e nte r.
3 Click C ha ng e a dva nc e d sha ring se tting s. NBG6818 User's Guide
100

Chapter 9 WAN
4 Under Do m a in, select Turn o n ne two rk disc o ve ry and click Sa ve C ha ng e s. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers
NBG6818 User's Guide
101

C HA PTER 1 0 Wire le ss LAN
10.1 O ve rvie w
This chapter discusses how to configure the wireless network settings in your NBG6818. The NBG6818 can service both 2.4GHz and 5GHz networks at the same time. You can have different wireless setup and settings for 2.4GHz and 5GHz wireless LANs. Click Se tting s > WiFi to configure wire le ss LAN 2.4G or wire le ss LAN 5G . See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Fig ure 54 Example of a Wireless Network
The wireless network in the figure is encircled in blue. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your NBG6818 is the AP.
10.1.1 Wha t Yo u C a n Do
· Use the Ma in WiFi screen to enable or disable the 2.4GHz or 5GHz wireless LAN, set up wireless security between the NBG6818 and the wireless clients, and make other basic configuration changes (Section 10.2 on page 106).
· Use the G ue st WiFi screen to set up multiple wireless networks on your NBG6818 (Section 10.3 on page 108).
· Use the MAC Filte r screen to allow or deny wireless stations from connecting to the NBG6818 based on their MAC address (Section 10.4 on page 108). NBG6818 User's Guide
102

Chapter 10 Wireless LAN
· Use the WPS screen to quickly set up a wireless network with strong security without having to configure security settings manually (Section 10.5 on page 110).
· Use the Sc he duling screen to set the times your wireless LAN is turned on and off (Section 10.6 on page 112).
10.1.2 Wha t Yo u Sho uld Kno w
Every wireless network must follow these basic guidelines.
· Every wireless client in the same wireless network must use the same Service Set Identifier (SSID). The SSID is the name of the wireless network.
· If two wireless networks overlap, they should use different channels. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information.
· Every wireless client in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It also protects information that is sent through the wireless network.
Wire le ss Se c urity O ve rvie w
The following sections introduce different types of wireless security you can set up in the wireless network.
SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices to get the SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network.
MAC Addre ss Filte r
Every wireless client has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User's Guide or other documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the wireless network.
1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses.
2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
NBG6818 User's Guide
103

Chapter 10 Wireless LAN
Use r Authe ntic a tio n
You can make every user log in to the wireless network before they can use it. This is called user authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do this. For wireless networks, there are two typical places to store the user names and passwords for each user. · In the AP: this feature is called a local user database or a local database. · In a RADIUS server: this is a server used in businesses more than in homes. If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot set up user names and passwords for your users. Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network. Local user databases also have an additional limitation that is explained in the next section.
Enc ryptio n
Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. The WPA-PSK (WiFi Protected Access-Pre-Shared Key) security mode provides both improved data encryption and user authentication over WEP. Using a pre-shared key, both the Zyxel Device and the connecting client share a common password in order to validate the connection. This type of encryption, while robust, is not as strong as WPA, WPA2 or even WPA2-PSK. The WPA2-PSK security mode is a more robust version of the WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. The WPA3-SAE (Simultaneous Authentication of Equals handshake) is the newer security mode that protects against dictionary attacks by implementing a new key exchange protocol.
G ue st WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG6818 (Z), but not other networks connected to it. In the following figure, a guest user can access the Internet from the guest wireless network A via Z but not the home or company network N. Note: The home or company network N and Guest WLAN network are independent networks. Note: Only Standard Mode supports guest WLAN.
NBG6818 User's Guide
104

Chapter 10 Wireless LAN Fig ure 55 Guest Wireless LAN Network
G ue st WLAN Ba ndwidth
The Guest WLAN Bandwidth function allows you to restrict the maximum bandwidth for the guest wireless network. Additionally, you can also define bandwidth for your home or office network. An example is shown in the next figure to define maximum bandwidth for your networks (A is Guest WLAN and N is a home or company network.) Fig ure 56 Example: Bandwidth for Different Networks
WPS
WiFi Protected Setup (WPS) is an industry standard specification defined by the WiFi Alliance. WPS allows you to set up a wireless network with strong security without having to configure security settings manually. Depending on the devices in your network, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification Number) in the devices. They then connect and set up a secure network by themselves. See how to set up a secure wireless network using WPS in Section 7.2 on page 42.
NBG6818 User's Guide
105

Chapter 10 Wireless LAN
10.2 Ma in WiFi Sc re e n
Use this screen to configure the SSID and wireless security of the NBG6818's default wireless LAN. Note: If you are configuring the NBG6818 from a computer connected to the wireless LAN
and you change the NBG6818's SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the NBG6818's new settings. Click Se tting s > WiFi > Ma in WiFi to show the following screen. Fig ure 57 Settings > WiFi > Main WiFi (Standard Mode)
NBG6818 User's Guide
106

Chapter 10 Wireless LAN Fig ure 58 Settings > WiFi > Main WiFi (Bridge Mode)

The following table describes the labels in this screen.

Table 32 Settings > WiFi > Main WiFi

LA BEL
Main WiFi Enable Main WiFi 2.4G/5G Name (SSID)

DESC RIPTIO N
Select Ena ble to activate the 2.4GHz and/or 5GHz wireless LAN. Select Disa ble to turn it off. The Service Set Identity (SSID) identifies the wireless LAN with which a wireless client is associated. Enter a name (up to 32 printable characters found on a typical English language keyboard) for the wireless LAN.

Security Mode Password

Click the Ke e p 2.4G & 5G na m e the sa m e check box to use the same SSID for 2.4G and 5G wireless network.
Select the security mode you want to apply to the NBG6818.
The password has two uses:

Region 2.4G/5G Bandwidth 2.4G/5G Channel
Apply Cancel

· Manual: Manually enter the same password on the Zyxel Device and the client. Enter 8-63 ASCII characters or exactly 64 hexadecimal (`0-9', `a-f') characters.
· WPS: When using WPS, the Zyxel Device sends this password to the client.
Click the eye icon to show or hide the password of your wireless network. When the eye icon is slashed , you'll see the password in plain text. Otherwise, it is hidden.
The country is set to US by default.
Select a bandwidth from the drop-down list box. The options vary depending on the frequency band you want to apply to the NBG6818.
Select a channel from the drop-down list box. The options vary depending on the frequency band you want to apply to the NBG6818.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to reload the previous configuration for this screen.

NBG6818 User's Guide
107

Chapter 10 Wireless LAN
10.3 G ue st WiFi Sc re e n
This screen allows you to enable and configure guest wireless network settings on the NBG6818. Click Se tting s > WiFi > G ue st WiFi to show the following screen. Note: This is not available if you are using bridge mode. Fig ure 59 Settings > WiFi > Guest WiFi

The following table describes the labels in this screen.

Table 33 Settings > WiFi > Guest WiFi

LA BEL
Enable Guest WiFi
Name (SSID)

DESC RIPTIO N Select Ena b le to activate the guest WiFi. Select Disa ble to turn it off.
An SSID profile is the set of parameters relating to one of the NBG6818's BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated.

Password

This field displays the name of the wireless profile on the network. When a wireless client scans for an AP to associate with, this is the name that is broadcast and seen in the wireless client utility.
The password has two uses.

Apply Cancel

· Manual: Manually enter the same password on the Zyxel Device and the client. Enter 8-63 ASCII characters or exactly 64 hexadecimal (`0-9', `a-f') characters.
· WPS: When using WPS, the Zyxel Device sends this password to the client.
Click the Eye icon to show or hide the password of your wireless network. When the Eye icon is slashed , you'll see the password in plain text. Otherwise, it is hidden.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to reload the previous configuration for this screen.

10.4 MAC Filte r Sc re e n
The MAC filter screen allows you to give exclusive access to devices (Allo w) or exclude devices from accessing the NBG6818 (De ny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters,
NBG6818 User's Guide
108

Chapter 10 Wireless LAN
for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. Use this screen to change your NBG6818's MAC filter settings. Click Se tting s > WiFi > MAC Filte r to show following screen. Fig ure 60 Settings > WiFi > MAC Filter

The following table describes the labels in this screen.

Table 34 Settings > WiFi > MAC Filter

LA BEL MAC Filter Filter Action

DESC RIPTIO N Select to turn on (Ena b le ) or off (Disa ble ) MAC address filtering. Define the filter action for the list of MAC addresses in the MAC Filte r Sum m a ry table.

Select Allo w to permit access to the NBG6818. MAC addresses not listed will be denied access to the NBG6818.

Select De ny to block access to the NBG6818. MAC addresses not listed will be allowed to access the NBG6818.
MAC Address List (Max Limit : 64)
This field displays the MAC address of the wireless station you want to filter.

Click to configure the MAC address.

Add Apply Cancel

Click to delete the MAC address. Click to add a rule in the MAC Addre ss List. Click Apply to save your changes back to the NBG6818. Click C a nc e l to reload the previous configuration for this screen.

10.4.1 Add MAC Addre ss Sc re e n
Use this screen to configure the MAC address you want to add to the MAC address list. Click Se tting s > WiFi > MAC Filte r > Add to show the following screen.

NBG6818 User's Guide
109

Chapter 10 Wireless LAN Fig ure 61 Settings > WiFi > MAC Filter > Add

The following table describes the labels in this screen.

Table 35 Settings > WiFi > MAC Filter > Add

LA BEL

DESC RIPTIO N

Type

This field displays the MAC address of the wireless station. If you select Use r- De fine d, enter the MAC address(es) manually.

MAC Address

Enter a MAC address manually in this field if you select Use r- De fine d in the Type field.

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to exist this screen without saving.

10.5 WPS Sc re e n
Use this screen to enable/disable WPS, view or generate a new PIN and check the current WPS status. Click Se tting s > WiFi > WPS to show the following screen.
Note: With WPS, wireless clients can only connect to the wireless network using the first SSID on the NBG6818.

NBG6818 User's Guide
110

Chapter 10 Wireless LAN Fig ure 62 Settings > WiFi > WPS

The following table describes the labels in this screen.

Table 36 Settings > WiFi > WPS

LA BEL WPS WiFi WPS Status Push Button

DESC RIPTIO N
Select Ena ble to turn on the WPS feature. Otherwise, select Disa ble . Use this button when you use the PBC (Push Button Configuration) method.

WPS Status Status

Click this to start WPS-aware wireless station scanning and wireless security information synchronization.
This displays Co nfig ure d when a wireless station has connected to the NBG6818 using WPS and wireless setup or security settings have been changed from default. The current wireless setup and security settings also appear in this screen.

802.11 Mode
SSID Security Apply Cancel

This displays Unc o nfig ure d if WPS is disabled and there are no wireless setup or security changes on the NBG6818 or if you click Re le a se C o nfig ura tio n to restore wireless setup and security settings to default.
This is the 802.11 mode used. Only compliant WLAN devices can associate with the NBG6818.
This is the name of the wireless network (the NBG6818's first SSID) that WPS clients connect to.
This is the type of wireless security employed by the network.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to reload the previous configuration for this screen.

NBG6818 User's Guide
111

Chapter 10 Wireless LAN
10.6 Sc he duling Sc re e n
Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. The y-axis shows the time period in days. The x-axis shows the time period in hours. Click on the boxes to select the time period. Click Se tting s > WiFi > Sc he duling to show the following screen. Fig ure 63 Settings > WiFi > Scheduling

The following table describes the labels in this screen.

Table 37 Expert Mode > Wireless > Scheduling

LA BEL

DESC RIPTIO N

WiFi Scheduling

Select Ena ble to activate the wireless LAN scheduling feature. Select Disa b le to turn it off.

Select All

Click Se le c t All or click gray blocks to specify days and times to turn the Wireless LAN on or off. If you click Se le c t All you can not select any specific days and times.

Deselect All

Click De se le c t All to remove all the wireless LAN scheduling.

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to reload the previous configuration for this screen.

NBG6818 User's Guide
112

C HA PTER 1 1 LA N
11.1 O ve rvie w
This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are connected. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. Fig ure 64 LAN Example
The LAN screens can help you configure a manage IP addresses and partition your physical network into logical networks.
11.2 Wha t Yo u C a n Do
· Use the LAN IP screen to configure the IP addresses for your NBG6818 on the LAN (Section 11.4 on page 114).
· Use the IPv6 LAN screen to configure the IPv6 address for your NBG6818 on the LAN (Section 11.5 on page 120).
11.3 Wha t Yo u Ne e d To Kno w
The actual physical connection determines whether the NBG6818 ports are LAN or WAN ports. There are two separate IP networks: one inside the LAN network and the other outside the WAN network as shown in the following figure.
NBG6818 User's Guide
113

Chapter 11 LAN Fig ure 65 LAN and WAN IP Addresses
The LAN parameters of the NBG6818 are preset in the factory with the following values: · IPv4 address of 192.168.123.1 with subnet mask of 255.255.255.0 (24 bits) · DHCP server enabled with 128 client IPv4 addresses starting from 192.168.123.33. These parameters should work for the majority of installations.
11.4 LAN IP Sc re e n
Use this screen to change the IP address for your NBG6818 in Standard Mode. Click Se tting s > LAN > LAN IP to show the following screen.
NBG6818 User's Guide
114

Chapter 11 LAN Fig ure 66 Settings > LAN > LAN IP (Standard Mode)
NBG6818 User's Guide
115

Chapter 11 LAN Fig ure 67 Settings > LAN > LAN IP (Bridge Mode)

The following table describes the labels in this screen.

Table 38 Settings > LAN > LAN IP

LA BEL

DESC RIPTIO N

LAN IP Rule

IP Address

Type the IP address of your NBG6818 in dotted decimal notation.

IP Subnet Mask

The subnet mask specifies the network number portion of an IP address. Your NBG6818 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG6818.

DHCP Server

Note: This is not available if you are using bridge mode.

DHCP Server

Select Ena b le to activate DHCP for LAN.

Select Disa ble to stop the NBG6818 from acting as a DHCP server.

IP Pool Starting Address

DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients (computers) to obtain TCP/IP configuration at startup from a server. Enable the DHCP server unless your ISP instructs you to do otherwise. When configured as a server, the NBG6818 provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured. When set as a server, fill in the following four fields.
This field specifies the first of the contiguous addresses in the IP address pool for LAN.

NBG6818 User's Guide
116

Chapter 11 LAN

Table 38 Settings > LAN > LAN IP (continued)

LA BEL DHCP Pool Size DNS Server

DESC RIPTIO N This field specifies the size, or count of the IP address pool for LAN.

DNS Servers Assigned by DHCP Server

First DNS Server Second DNS Server

Select O bta ine d Fro m ISP if your ISP dynamically assigns DNS server information (and the NBG6818's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns.

Third DNS Server

Select Use r- De fine d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.

Select LAN IP and the field to the right displays the (read-only) default gateway IP address of your computer.

Static DHCP Table

Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it.

Note: This is not available if you are using bridge mode.

No.

This is the index number of the static IP table entry (row).

Name

This field displays a name to identify this rule.

MAC Address

This field displays the MAC address of a computer on your LAN, or the MAC address you manually configured.

IP Address

This field displays the LAN IP address of a computer on your LAN, or the LAN address you manually configured.

Actions

Click the icons under Ac tio ns to delete or edit an existing static IP.

Click to delete an existing static IP.

Apply Cancel

Click

to edit an existing static IP.

Click Apply to save your changes back to the NBG6818.

Click C a nc e l to begin configuring this screen afresh.

11.4.1 Sta tic DHC P Ta b le - Add/ Edit Rule Sc re e n
Use this screen to configure the static DHCP. Click Se tting s > LAN > LAN IP > Add Rule or Se tting s > LAN > > LAN IP > Edit to show the following screens.
Note: This is not available if you are using bridge mode.

NBG6818 User's Guide
117

Chapter 11 LAN Fig ure 68 Settings > LAN > LAN IP > Add Rule
Fig ure 69 Settings > LAN > LAN IP > Edit

The following table describes the labels in these screens.

Table 39 Settings > LAN > LAN IP > Add Rule/Edit

LA BEL Device LIst

DESC RIPTIO N
This field lists the system name of the LAN user device which is connected to the NBG6818 and assigned an IP address.

Select a LAN user device from the list to automatically detect the MAC address of a computer on your LAN.

MAC Address IP Address Apply Cancel

Otherwise, select Use r- De fine d to enter the MAC address of a computer on your LAN in the MAC Addre ss field.
This field displays the MAC address of a computer on your LAN. If you select Use rDe fine d in the De vic e List field, enter the MAC address(es) manually.
This field displays the IP address of a computer on your LAN. If you select Use rDe fine d in the De vic e List field, enter the IP address(es) manually.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to exit this screen without saving.

NBG6818 User's Guide
118

Chapter 11 LAN
11.4.2 C o nfig ure LAN Sc re e n in Bridg e Mo de
Use this section to configure your LAN settings while in Bridg e Mo de . Click Se tting s > LAN > LAN IP to show the following screen. Note: If you change the IP address of the NBG6818 in the screen below, you will need to log
into the NBG6818 again using the new IP address. Fig ure 70 Settings > LAN > LAN IP
NBG6818 User's Guide
119

Chapter 11 LAN

The table below describes the labels in the screen.

Table 40 Settings > LAN > LAN IP

LA BEL
IP Address setting
Obtain an IP Address Automatically (DHCP)

DESC RIPTIO N
When you enable this, the NBG6818 gets its IP address from the network's DHCP server (for example, your ISP). Users connected to the NBG6818 can now access the network (i.e., the Internet if the IP address is given by the ISP).

The Web Configurator may no longer be accessible unless you know the IP address assigned by the DHCP server to the NBG6818. You need to reset the NBG6818 to be able to access the Web Configurator again (see Section 13.6 on page 136 for details on how to reset the NBG6818).

Static IP Address IP Address Subnet Mask
Gateway DNS Server First DNS Server Second DNS Server Third DNS Server

Also when you select this, you cannot enter an IP address for your NBG6818 in the field below.
Click this if you want to specify the IP address of your NBG6818. Or if your ISP or network administrator gave you a static IP address to access the network or the Internet.
Type the IP address in dotted decimal notation. The default setting is 192.168.1.2. If you change the IP address you will have to log in again with the new IP address.
The subnet mask specifies the network number portion of an IP address. Your NBG6818 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG6818.
Enter a gateway IP address (if your ISP or network administrator gave you one) in this field.
Select O bta ine d Fro m ISP if your ISP dynamically assigns DNS server information (and the NBG6818's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns.
Select Use r- De fine d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose Use r- De fine d, but leave the IP address set to 0.0.0.0, Use r- De fine d changes to No ne after you click Apply. If you set a second choice to Use r- De fine d, and enter the same IP address, the second Use r- De fine d changes to No ne after you click Apply.

Apply Cancel

Select No ne if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it.
Click Apply to save your changes to the NBG6818.
Click C a nc e l to reload the previous configuration for this screen.

11.5 IPv6 LAN Sc re e n
Use this screen to configure the IP address for your NBG6818 on the LAN. Click Se tting s > LAN > IPv6 LAN to show the following screen.
Note: This is not available if you are using bridge mode.

NBG6818 User's Guide
120

Chapter 11 LAN Fig ure 71 Settings > LAN > IPv6 LAN

The following table describes the labels in this screen.

Table 41 Settings > Expert Mode > LAN > IPv6 LAN

LA BEL

DESC RIPTIO N

LAN IPv6 Address Assignment

Enable_DHCPv6-PD

Select this option to use DHCPv6 prefix delegation. The NBG6818 will obtain an IPv6 prefix from the ISP or a connected uplink router for the LAN.

Autoconfiguration Type

Select SLAAC + RDNSS to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router in the network.

Select SLAAC + Sta te le ss DHC Pv6 to enable IPv6 stateless auto-configuration on this interface. The interface will get an IPv6 address from an IPv6 router and the DHCP server. The IP address information gets through DHCPv6.

IPv6 Address range (Start)

Select Sta te ful DHC Pv6 to allow a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients.
Enter the beginning of the range of IP addresses that this address object represents.

NBG6818 User's Guide
121

Chapter 11 LAN

Table 41 Settings > Expert Mode > LAN > IPv6 LAN (continued)

LA BEL
IPv6 Address range (End) IPv6 Lifetime Static IP Address

DESC RIPTIO N Enter the end of the range of IP address that this address object represents.
Enter the IPv6 lifetime in the LAN.

Select this option to manually enter an IPv6 address if you want to use a static IP address.

LAN IPv6 Address

Enter the LAN IPv6 address you want to assign to your NBG6818 in hexadecimal notation.

LAN IPv6 Routeinfo Enter the 48 to 64 address prefix length to specify in an IPv6 address compose the network

Length (48~64)

address.

Prefix Valid Lifetime Enter the valid lifetime for the prefix.

Link Local Only

Select this option to only use the link local address on the NBG6818 interfaces in the LAN. ULA

Select this option to identify a unique local address of the NBG6818 in the LAN.

RA period

Minimum RA period Enter the minimum time in seconds between router advertisement messages.

Apply

Click Apply to save your changes back to the NBG6818.

Cancel

Click C a nc e l to begin configuring this screen afresh.

NBG6818 User's Guide
122

C HA PTER 1 2 Se c urity
12.1 O ve rvie w
Use these screens to enable and configure the firewall that protects your NBG6818 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall: · allows traffic that originates from your LAN computers to go to all of the networks. · blocks traffic that originates on the other networks from going to the LAN. The following figure illustrates the default firewall action. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2). However other traffic initiated from the WAN is blocked (3 and 4). Fig ure 72 Default Firewall Action
Note: Features in this chapter are not available if you are using bridge mode.
12.1.1 Wha t Yo u C a n Do
· Use the IPv4 Fire wa ll screen to enable or disable the NBG6818's IPv4 firewall (Section 12.2 on page 124).
· Use the IPv6 Fire wa ll screen to enable or disable the NBG6818's IPv6 firewall (Section 12.3 on page 127).
12.1.2 Wha t Yo u Ne e d To Kno w
The following terms and concepts may help as you read through this chapter.
NBG6818 User's Guide
123

Chapter 12 Security
Ab o ut the NBG 6818 Fire wa ll
The NBG6818's firewall feature physically separates the LAN and the WAN and acts as a secure gateway for all data passing between the networks.
It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (click the IPv4 Fire wa ll or IPv6 Fire wa ll tab under Se c urity and then click the Ena b le Fire wa ll check box). The NBG6818's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG6818 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
The NBG6818 is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN.
The NBG6818 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet.
The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world. These computers will have access to Internet services such as e-mail, FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless the remote host is authorized to use a specific service.
G uide line s Fo r Enha nc ing Se c urity With Yo ur Fire wa ll
1 Change the default password via Web Configurator.
2 Think about access control before you connect to the network in any way, including attaching a modem to the port.
3 Limit who can access your router.
4 Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network.
5 For local services that are enabled, protect against misuse. Protect by configuring the services to communicate only with specific peers, and protect by configuring rules to block packets for the services at specific interfaces.
6 Protect against IP spoofing by making sure the firewall is active.
7 Keep the firewall in a secured (locked) room.
12.2 IPv4 Fire wa ll Sc re e n
Use this screen to enable or disable the NBG6818's IPv4 firewall. Click Se tting s > Fire wa ll > IPv4 Fire wa ll to show the following screen.
NBG6818 User's Guide
124

Chapter 12 Security Fig ure 73 Settings > Firewall > IPv4 Firewall

The following table describes the labels in this screen.

Table 42 Settings > Firewall > IPv4 Firewall

LA BEL

DESC RIPTIO N

ICMP

Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.

Respond to Ping on

The NBG6818 will not respond to any incoming Ping requests when No ne is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN Ping requests.

Firewall Setup

Enable Firewall

Select Ena ble to activate the firewall. The NBG6818 performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated.

Enable Firewall Rule

Filter Rule

Select Ena ble to activate the firewall rules that you define (see Add Firewall Rule below).

Actions

Select Dro p to silently discard the packets which meet the firewall rules. The others are accepted.

Firewall Rule No.
Service Name MAC address

Select Ac c e pt to allow the passage of the packets which meet the firewall rules. The others are blocked.
This is your firewall rule number. The ordering of your rules is important as rules are applied in turn. This is a name that identifies or describes the firewall rule. This is the MAC address of the computer for which the firewall rule applies.

NBG6818 User's Guide
125

Chapter 12 Security

Table 42 Settings > Firewall > IPv4 Firewall (continued)

LA BEL

DESC RIPTIO N

Dest IP Address

This is the IP address of the computer to which traffic for the application or service is entering.

Source IP Address This is the IP address of the computer from which traffic for the application or service is initialized.

Dest Port Range

This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic.

Source Port Range This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic.

Protocol

This is the protocol (TC P, UDP or IC MP) used to transport the packets for which you want to apply the firewall rule.

Actions

Click to remove the firewall rule.

Apply Cancel

Click to edit the firewall rule. Click Apply to save the settings. Click C a nc e l to start configuring this screen again.

12.2.1 IPv4 Fire wa ll- Add Rule Sc re e n
Use this screen to configure IPv4 firewall rule. Click Se tting s > Fire wa ll > IPv4 Fire wa ll > Add Rule to open the following screen.
Fig ure 74 Settings > Firewall > IPv4 Firewall > Add Rule

NBG6818 User's Guide
126

Chapter 12 Security

The following table describes the labels in this screen.

Table 43 Settings > Firewall > IPv4 Firewall > Add Rule

LA BEL Service Name MAC Address Dest IP Address

DESC RIPTIO N
Enter a name that identifies or describes the firewall rule. Enter the MAC address of the computer for which the firewall rule applies. Enter the IP address of the computer to which traffic for the application or service is entering.

Source IP Address

The NBG6818 applies the firewall rule to traffic initiating from this computer.
Enter the IP address of the computer that initializes traffic for the application or service.

Dest Port Range Source Port Range Protocol Apply Cancel

The NBG6818 applies the firewall rule to traffic initiating from this computer.
This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic.
This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic.
Select the protocol (TC P, UDP or IC MP) used to transport the packets for which you want to apply the firewall rule.
Click Apply to save the settings.
Click C a nc e l to exist this screen without saving.

12.3 IPv6 Fire wa ll Sc re e n
Use this screen to enable and create IPv6 firewall rules to filter IPv6 traffic. Click Se tting s > Fire wa ll > IPv6 Fire wa ll to show the following screen.
Fig ure 75 Settings > Firewall > IPv6 Firewall

NBG6818 User's Guide
127

Chapter 12 Security

The following table describes the labels in this screen.

Table 44 Settings > Firewall > IPv6 Firewall

LA BEL Configuration Simple Security Rule Status Action

DESC RIPTIO N
Select Ena ble to enabled simple security on your NBG6818. Select Ena ble to enabled rule status on your NBG6818. Select DRO P to silently discard the packets which meet the firewall rules. The others are accepted.

Firewall Rule No. Service Name MAC Address Dest IP Address Source IP Address Dest Port Range Source Port Range Protocol Actions

Select AC C EPTto allow the passage of the packets which meet the firewall rules. The others are blocked.
This is your firewall rule number. The ordering of your rules is important as rules are applied in turn. This is a name that identifies or describes the firewall rule. This is the MAC address of the computer for which the firewall rule applies. This is the IP address of the computer to which traffic for the application or service is entering. This is the IP address of the computer to which traffic for the application or service is initialized. This is the port number/range of the destination that defines the traffic type, for example TCP port 80 defines web traffic. This is the port number/range of the source that defines the traffic type, for example TCP port 80 defines web traffic. This is the protocol (TC P, UDP or IC MPv6) used to transport the packets for which you want to apply the firewall rule. Click to remove the firewall rule.

Apply Cancel

Click to edit the firewall rule. Click Apply to save the settings. Click C a nc e l to restore your previously saved settings.

12.3.1 IPv6 Fire wa ll- Add Rule Sc re e n
Use this screen to configure IPv4 firewall rule. Click Se tting s > Fire wa ll > IPv6 Fire wa ll > Add Rule to open the following screen.

NBG6818 User's Guide
128

Chapter 12 Security Fig ure 76 Settings > Firewall > IPv6 Firewall > Add Rule

The following table describes the labels in this screen.

Table 45 Settings > Firewall > IPv4 Firewall > Add Rule

LA BEL Service Name MAC Address Dest IP Address

DESC RIPTIO N
Enter a name that identifies or describes the firewall rule. Enter the MAC address of the computer for which the firewall rule applies. Enter the IP address of the computer to which traffic for the application or service is entering.

Source IP Address

The NBG6818 applies the firewall rule to traffic initiating from this computer.
Enter the IP address of the computer that initializes traffic for the application or service.

Dest Port Range Source Port Range Protocol Apply Cancel

The NBG6818 applies the firewall rule to traffic initiating from this computer.
This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic.
This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic.
Select the protocol (TC P, UDP or IC MP) used to transport the packets for which you want to apply the firewall rule.
Click Apply to save the settings.
Click C a nc e l to exist this screen without saving.

NBG6818 User's Guide
129

C HA PTER 1 3 Syste m
13.1 O ve rvie w
This chapter provides information on checking the NBG6818's status and logs, configuring basic and remote management settings, using maintenance and firmware upgrade tools, and changing the operating mode.
13.2 Wha t Yo u C a n Do
· Use the Sta tus screen to view the basic information of the NBG6818 (Section 13.3 on page 130) · Use the G e ne ra l Se tting screen to change password or to set the timeout period of the management
session (Section 13.4 on page 133). · Use the Re m o te Ac c e ss screen to configure the interface/s from which the NBG6818 can be
managed remotely and specify a secure client that can manage the NBG6818 (Section 13.5 on page 135). · Use the Ma inte na nc e screen to upload firmware, reboot the NBG6818 without turning the power off or reset the NBG6818 to factory defaults (Section 13.6 on page 136). · Use the O pe ra ting Mo de screen select whether you want the NBG6818 to act as a router or a bridge (Section 13.7 on page 137). · Use the Lo g s screen to see the system logs recorded by the NBG6818 (Section 13.8 on page 139).
13.3 Sta tus Sc re e n
Use this screen to view some basic information of your NBG6818. Click Se tting s > Syste m > Sta tus to show the following screen.
NBG6818 User's Guide
130

Chapter 13 System Fig ure 77 Settings > System > Status (Standard Mode)
NBG6818 User's Guide
131

Chapter 13 System Fig ure 78 Settings > System > Status (Bridge Mode)

The following table describes the labels in this screen.

Table 46 Settings > System > Status

LA BEL

DESC RIPTIO N

System

Model Name

This is the model name of your device.

Firmware Version

This is the firmware version.

System Operation Mode

This is the device mode in which the NBG6818 is currently running. See Section 13.7 on page 137 for more information.

Enable IPv4 Firewall

This shows if the IPv4 firewall is enabled on the NBG6818.

Enable IPv6 Simple Security This shows if the IPv6 firewall is enabled on the NBG6818.

System Uptime

This is the total time the NBG6818 has been on.

WAN Information

Note: : This is not available if you are using bridge mode.

MAC Address

This shows the WAN Ethernet adapter MAC Address of your device.

IP Address

This shows the NBG6818's WAN IP address.

IP Subnet Mask

This shows the NBG6818's WAN subnet mask.

Gateway

This shows the WAN port's gateway IP address.

IPv6 Address

This shows the current IPv6 address of the NBG6818.

LAN Information

MAC Address

This shows the LAN Ethernet adapter MAC Address of your device.

IP Address

This shows the NBG6818's LAN IP address.

IP Subnet Mask

This shows the NBG6818's LAN subnet mask.

NBG6818 User's Guide
132

Chapter 13 System

Table 46 Settings > System > Status (continued)

LA BEL

DESC RIPTIO N

DHCP Server

This shows whether the NBG6818 acts as a DHCP Server and provides LAN IP addresses to its clients or not.

IPv6 Address

This shows the current LAN IPv6 address of the NBG6818.

13.4 G e ne ra l Se tting Sc re e n
Use this screen to set the management session timeout period. Click Se tting s > Syste m > G e ne ra l Se tting to show the following screen.
Fig ure 79 Settings > System > General Setting (Standard Mode)

NBG6818 User's Guide
133

Chapter 13 System Fig ure 80 Settings > System > General Setting (Bridge Mode)

The following table describes the labels in this screen.

Table 47 Settings > System > General Setting

LA BEL System Settings System Name Domain Name

DESC RIPTIO N
System Name is a unique name to identify the NBG6818 in an Ethernet network. Enter the domain name you want to give to the NBG6818.

(This is not available if you are using bridge mode) Admin Inactivity Timer
Select Language
Admin Password Current Password New Password
Confirm New Password Apply Cancel

Type how many minutes a management session can be left idle before the session times out. The default is 5 minutes. After it times out, you have to log in with your password again. Very long idle timeouts may have security risks. A value of "0" means a management session never times out, no matter how long it has been left idle (not recommended). Select a language you prefer from the drop-down list box. The Web Configurator language changes after a while without restarting the NBG6818.
Type the default password or the existing password you use to access the system in this field. Type your new system password (up to 30 characters). Note that as you type a password, the screen displays a dot for each character you type. Type the new password again in this field.
Click Apply to save your changes back to the NBG6818. Click C a nc e l to discard all changes.

NBG6818 User's Guide
134

Chapter 13 System
13.5 Re m o te Ac c e ss Sc re e n
Use this screen to change your NBG6818's remote management settings. You can use HTTPS or Wake on LAN to access and manage the NBG6818. Wake On LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature, the remote hardware (such as the network adapter on a computer) must support Wake On LAN using the "Magic Packet" method. You need to know the MAC address of the remote client to use this feature. It may be on a label on the device. Click Se tting s > Syste m > Re m o te Ac c e ss to show the following screen. Note: You can only enable Re m o te Assista nt in this screen if you are using bridge mode. Fig ure 81 Settings > System > Remote Access (Standard Mode)
NBG6818 User's Guide
135

Chapter 13 System Fig ure 82 Settings > System > Remote Access (Bridge Mode)

The following table describes the labels in this screen.

Table 48 Settings > System > Remote Access

LA BEL

DESC RIPTIO N

HTTPS

Server Port

You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.

Access Interface

Select the interface(s) through which a computer may access the NBG6818 using this service.

Remote Assistance

Enable Remote Assistant

Select Ena ble to allow customer support to help you solve the problems you encounter with your NBG6818 remotely.

Wake on LAN

Wake on LAN Status

Select Ena ble to have the NBG6818 forward a WoL "Magic Packet" to all devices on the LAN if the packet comes from the WAN or remote network and uses the port number specified in the Po rt field. A LAN device whose hardware supports Wake on LAN then will be powered on if it is turned off previously.

Port

Type a port number from which a WoL packet is forwarded to the LAN.

Wake on LAN MAC Address This field displays the hostname and MAC address of the LAN device by default. Otherwise, select Use r- De fine d to enter the MAC Address of the device on the network that will be turned on.

Start

A MAC address consists of six hexadecimal character pairs.
Click this to have the NBG6818 generate a WoL packet and forward it to turn the specified device on.

Apply Cancel

A screen pops up displaying MAC address error if you input the MAC address incorrectly.
Click Apply to save your changes back to the NBG6818.
Click C a nc e l to begin configuring this screen afresh.

13.6 Ma inte na nc e Sc re e n
Use this screen to upgrade firmware, restart or reset your NBG6818.

NBG6818 User's Guide
136

Chapter 13 System
O nline Firm wa re
Find firmware at www.zyxel.com in a file that uses the version number and project code with a "*.bin" extension, e.g., "V1.00(ABCS.0)C0.bin". The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Syste m Re sta rt
System restart allows you to reboot the NBG6818 without turning the power off.
Re se t to Fa c to ry De fa ult
Click the RESETTO FAC TO RY DEFAULTbutton in this section to clear all user-entered configuration information and returns the NBG6818 to its factory defaults. You can also press the RESETbutton on the rear panel to reset the factory defaults of your NBG6818. Click Se tting s > Syste m > Ma inte na nc e to show the following screen. Fig ure 83 Settings > System > Maintenance
13.7 O pe ra ting Mo de Sc re e n
Use this screen to select how you want to use your NBG6818. The O pe ra ting Mo de function lets you configure your NBG6818 as a router or bridge. You can choose between Sta nda rd Mo de , and Bridg e Mo de depending on your network topology and the features you require from your device. The following describes the device modes available in your NBG6818.
NBG6818 User's Guide
137

Chapter 13 System
Sta nda rd (Ro ute r)
A router connects your local network with another network, such as the Internet. The router has two IP addresses, the LAN IP address and the WAN IP address. Fig ure 84 LAN and WAN IP Addresses in Standard Mode
Bridg e
A bridge enabled all Ethernet ports to be bridged together and be in the same subnet. To connect to the Internet, another device, such as a router, is required. Fig ure 85 Bridge Mode
Click Se tting s > Syste m > O pe ra ting Mo de to show the following screen.
NBG6818 User's Guide
138

Chapter 13 System Fig ure 86 Settings > System > Operation Mode

The following table describes the labels in this screen.

Table 49 Settings > System > Operation Mode

LA BEL Standard Mode

DESC RIPTIO N
Select Sta nda rd Mo de if your device routes traffic between a local network and another network such as the Internet. This mode offers services such as a firewall or bandwidth management.

Bridge Mode

You can configure the IP address settings on your WAN port. Contact your ISP or system administrator for more information on appropriate settings.
Select Bridge Mode if your device bridges traffic between clients on the same network.

Apply Cancel

· In Bridg3e Mode, all Ethernet ports have the same IP address. · All ports on the rear panel of the device are LAN ports, including the port labeled
WAN. There is no WAN port. · The DHCP server on your device is disabled. · Router functions (such as NAT, bandwidth management, remote management,
firewall and so on) are not available when the NBG6818 is in Bridge Mode. · The IP address of the device on the local network is set to 192.168.123.2.
Click Apply to save your settings.
Click C a nc e l to return your settings to the default (Sta nda rd).

Note: If you select the incorrect system operation Mode you may not be able to connect to the Internet

13.8 Lo g s Sc re e n
Use this screen to see the logged messages for the NBG6818.
You can configure which logs to display in the Log screen.
The newest log replaces the oldest log after it fills. Select what logs you want to see from the Lo g Type drop-down list box. The log choices depend on your other settings in the Syste m screens. Click Re fre sh to renew the log screen. Click Expo rt to save the current list of logs to your computer. Click C le a r to delete all the logs.
NBG6818 User's Guide
139

Chapter 13 System Click Apply to save your settings. Click C a nc e l to discard all changes. Click Se tting s > Syste m > Lo g s to show the following screen. Fig ure 87 Settings > System > Logs
NBG6818 User's Guide
140

C HA PTER 1 4 Tro ub le sho o ting
14.1 O ve rvie w
This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. · Power, Hardware Connections, and LEDs · NBG6818 Access and Login · Internet Access · Resetting the NBG6818 to Its Factory Defaults · Wireless Connections · USB Device Problems
14.2 Po we r, Ha rdwa re C o nne c tio ns, a nd LEDs
The NBG6818 does not turn on. None of the LEDs turn on.
· Make sure you are using the power adaptor or cord included with the NBG6818. · Make sure the power adaptor or cord is connected to the NBG6818 and plugged in to an
appropriate power source. Make sure the power source is turned on. · Disconnect and re-connect the power adaptor or cord to the NBG6818. · If the problem continues, contact the vendor.
One of the LEDs does not behave as expected.
· Make sure you understand the normal behavior of the LED. See Section 1.7 on page 14. · Check the hardware connections. See the Quick Start Guide. · Inspect your cables for damage. Contact the vendor to replace any damaged cables. · Disconnect and re-connect the power adaptor to the NBG6818. · If the problem continues, contact the vendor.
NBG6818 User's Guide
141

Chapter 14 Troubleshooting
14.3 NBG 6818 Ac c e ss a nd Lo g in
I don't know the IP address of my NBG6818.
· The default IP address of the NBG6818 in Sta nda rd Mo de is 192.168.123.1. If the NBG6818 obtains a WAN IP address in the same subnet as the LAN IP address 192.168.123.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See Auto-IP Change on page 79 for more information. The default IP address of the NBG6818 in Bridg e Mo de is 192.168.123.2.
· If you changed the IP address and have forgotten it, you might get the IP address of the NBG6818 in Sta nda rd Mo de by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Sta rt > Run, enter c m d, and then enter ipc o nfig . The IP address of the De fa ult G a te wa y might be the IP address of the NBG6818 (it depends on the network), so enter this IP address in your Internet browser.
· If your NBG6818 in Bridg e Mo de is a DHCP client, you can find your IP address from the DHCP server. This information is only available from the DHCP server which allocates IP addresses on your network. Find this information directly from the DHCP server or contact your system administrator for more information.
· Reset your NBG6818 to change all settings back to their default. This means your current settings are lost. See Section 14.5 on page 144 in the Tro uble sho o ting for information on resetting your NBG6818.
I cannot see or access the Lo g in screen in the Web Configurator.
· Make sure you are using the correct IP address. · The default IP address of the NBG6818 in Sta nda rd Mo de is 192.168.123.1. If the NBG6818 obtains a
WAN IP address in the same subnet as the LAN IP address 192.168.123.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See Auto-IP Change on page 79 for more information. The default IP address of the NBG6818 in Bridg e Mo de is 192.168.123.2. · If you changed the IP address (Section 11.4 on page 114), use the new IP address. · If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I don't know the IP address of my NBG6818. · Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. · Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix B on page 153 for more information. · Make sure your computer is in the same subnet as the NBG6818. (If you know that there are routers between your computer and the NBG6818, skip this step.) · If there is a DHCP server on your network, make sure your computer is using a dynamic IP address. See Section 11.4 on page 114. · If there is no DHCP server on your network, make sure your computer's IP address is in the same subnet as the NBG6818. See Section 11.4 on page 114. · Reset the device to its factory defaults, and try to access the NBG6818 with the default IP address. See Section 1.5 on page 13. · If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions.
NBG6818 User's Guide
142

Chapter 14 Troubleshooting
Adva nc e d Sug g e stio ns
· Try to access the NBG6818 using another service, such as Telnet. If you can access the NBG6818, check the remote management settings and firewall rules to find out why the NBG6818 does not respond to HTTP.
· If your computer is connected to the WAN port or is connected wirelessly, use a computer that is connected to a LAN/ETHERNETport.
I can see the Lo g in screen, but I cannot log in to the NBG6818.
· This can happen when you fail to log out properly from your last session. Try logging in again after 5 minutes.
· Disconnect and re-connect the power adaptor or cord to the NBG6818. · If this does not work, you have to reset the device to its factory defaults. See Section 14.5 on page
144.
14.4 Inte rne t Ac c e ss
I cannot access the Internet.
· Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide.
· Go to Expe rt > Ma inte na nc e > O pe ra tio n Mo de . Check your System Operation Mode setting. If the NBG6818 is in Sta nda rd Mo de , make sure the WAN port is connected to a broadband modem or router with Internet access. Your computer and the NBG6818 should be in the same subnet. If the NBG6818 is in Bridg e Mo de , make sure the WAN port is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address.
· If the NBG6818 is in Sta nda rd Mo de , make sure you entered your ISP account information correctly in the wizard or the WAN screen. These fields are case-sensitive, so make sure [Caps Lock] is not on.
· If you are trying to access the Internet wirelessly, make sure the wireless settings in the wireless client are the same as the settings in the AP.
· Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. · If the problem continues, contact your ISP.
I cannot access the Internet anymore. I had access to the Internet (with the NBG6818), but my Internet connection is not available anymore.
· Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.7 on page 14.
· Reboot the NBG6818.
NBG6818 User's Guide
143

Chapter 14 Troubleshooting
· If the problem continues, contact your ISP.
The Internet connection is slow or intermittent.
· There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.7 on page 14. If the NBG6818 is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications.
· Check the signal strength. If the signal strength is low, try moving the NBG6818 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on).
· Reboot the NBG6818. · If the problem continues, contact the network administrator or vendor, or try one of the advanced
suggestions. · Adva nc e d Sug g e stio n
Check the settings for QoS. If it is disabled, you might consider activating it.
14.5 Re se tting the NBG 6818 to Its Fa c to ry De fa ults
If you reset the NBG6818, you lose all of the changes you have made. The NBG6818 re-loads its default settings. You have to make all of your changes again.
You will lose all of your changes when you push the RESETbutton.
To reset the NBG6818: · Make sure the power LED is on. · Press the RESETbutton for one to four seconds to restart/reboot the NBG6818. · Press the RESETbutton for longer than five seconds to set the NBG6818 back to its factory-default
configurations. If the NBG6818 restarts automatically, wait for the NBG6818 to finish restarting, and log in to the Web Configurator. If the NBG6818 does not restart automatically, disconnect and reconnect the NBG6818's power. Then, follow the directions above again.
14.6 Wire le ss C o nne c tio ns
I cannot access the NBG6818 or ping any computer from the WLAN.
NBG6818 User's Guide
144

Chapter 14 Troubleshooting
· Make sure the wireless LAN is enabled on the NBG6818. · Make sure the wireless adapter on your computer is working properly. · Make sure the wireless adapter installed on your computer is IEEE 802.11 compatible and supports the
same wireless standard as the NBG6818. · Make sure your computer (with a wireless adapter installed) is within the transmission range of the
NBG6818. · Check that both the NBG6818 and the wireless adapter on your computer are using the same wireless
and wireless security settings. · Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG6818. · Make sure you allow the NBG6818 to be remotely accessed through the WLAN interface. Check your
remote management settings. See the chapter on Wireless LAN in the User's Guide for more information.
I cannot access the Web Configurator after I switched to Bridge Mode.
· When you change from Sta nda rd Mo de to Bridg e Mo de , your computer must have an IP address in the range between "192.168.123.3" and "192.168.123.254".
· Refer to Appendix B on page 153 for instructions on how to change your computer's IP address.
What factors may cause intermittent or unstabled wireless connection? How can I solve this problem?
The following factors may cause interference:
· Obstacles: walls, ceilings, furniture, and so on. · Building Materials: metal doors, aluminum studs. · Electrical devices: microwaves, monitors, electric motors, cordless phones, and other wireless devices.
To optimize the speed and quality of your wireless connection, you can:
· Move your wireless device closer to the AP if the signal strength is low. · Reduce wireless interference that may be caused by other wireless networks or surrounding wireless
electronics such as cordless phones. · Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and
the wireless client. · Reduce the number of wireless clients connecting to the same AP simultaneously, or add additional
APs if necessary. · Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless
client is sending or receiving a lot of information, it may have too many programs open that use the Internet. · Position the antennas for best reception. If the AP is placed on a table or floor, point the antennas upwards. If the AP is placed at a high position, point the antennas downwards. Try pointing the antennas in different directions and check which provides the strongest signal to the wireless clients.
NBG6818 User's Guide
145

Chapter 14 Troubleshooting
14.7 USB De vic e Pro b le m s
I cannot access or see a USB device that is connected to the NBG6818. · Disconnect the problematic USB device, then reconnect it to the NBG6818. · Ensure that the USB device has power. · Check your cable connections. · Restart the NBG6818 by disconnecting the power and then reconnecting it. · If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG6818 and try to connect to it again with your computer. · If the problem persists, contact your vendor.
What kind of USB devices do the NBG6818 support? · It is strongly recommended to use version 2.0 or higher USB storage devices (such as NTFS or FAT32 file system, USB hard drives) and/or USB devices. Other USB products are not guaranteed to function properly with the NBG6818. · The NBG6818 do not support 3G/4G USB dongles.
NBG6818 User's Guide
146

A PPEN DIX A
C usto m e r Suppo rt

In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device.
See http s://www.zyxe l.c o m/ho me p a g e .shtml and also http s://www.zyxe l.c o m/a b o ut_zyxe l/zyxe l_wo rldwide .shtml for the latest information.
Please have the following information ready when you contact an office.
Re q uire d Info rm a tio n
· Product model and serial number. · Warranty Information. · Date that you received your device. · Brief description of the problem and the steps you took to solve it.

C o rpo ra te He a dq ua rte rs (Wo rldwide )
Ta iwa n
· Zyxel Communications Corporation · http://www.zyxel.com

A sia

C hina
· Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp.
· https://www.zyxel.com/cn/zh/
Ind ia
· Zyxel Technology India Pvt Ltd · https://www.zyxel.com/in/en/
Ka za khsta n
· Zyxel Kazakhstan · https://www.zyxel.kz

NBG6818 User's Guide
147

Appendix A Customer Support
Ko re a
· Zyxel Korea Corp. · http://www.zyxel.kr
Ma la ysia
· Zyxel Malaysia Sdn Bhd. · http://www.zyxel.com.my
Pa kista n
· Zyxel Pakistan (Pvt.) Ltd. · http://www.zyxel.com.pk
Philippine s
· Zyxel Philippines · http://www.zyxel.com.ph
Sing a po re
· Zyxel Singapore Pte Ltd. · http://www.zyxel.com.sg
Ta iwa n
· Zyxel Communications Corporation · https://www.zyxel.com/tw/zh/
Tha ila nd
· Zyxel Thailand Co., Ltd. · https://www.zyxel.com/th/th/
Vie tna m
· Zyxel Communications Corporation-Vietnam Office · https://www.zyxel.com/vn/vi
Euro pe
Be la rus
· Zyxel BY · https://www.zyxel.by
Be lg ium
· Zyxel Communications B.V. · https://www.zyxel.com/be/nl/
NBG6818 User's Guide
148

Appendix A Customer Support
· https://www.zyxel.com/be/fr/
Bulg a ria
· Zyxel  · https://www.zyxel.com/bg/bg/
C ze c h Re pub lic
· Zyxel Communications Czech s.r.o · https://www.zyxel.com/cz/cs/
De nm a rk
· Zyxel Communications A/S · https://www.zyxel.com/dk/da/
Esto nia
· Zyxel Estonia · https://www.zyxel.com/ee/et/
Finla nd
· Zyxel Communications · https://www.zyxel.com/fi/fi/
Fra nc e
· Zyxel France · https://www.zyxel.fr
G e rm a ny
· Zyxel Deutschland GmbH · https://www.zyxel.com/de/de/
Hung a ry
· Zyxel Hungary & SEE · https://www.zyxel.com/hu/hu/
Ita ly
· Zyxel Communications Italy · https://www.zyxel.com/it/it/
La tvia
· Zyxel Latvia · https://www.zyxel.com/lv/lv/
NBG6818 User's Guide
149

Appendix A Customer Support
Lithua nia
· Zyxel Lithuania · https://www.zyxel.com/lt/lt/
Ne the rla nds
· Zyxel Benelux · https://www.zyxel.com/nl/nl/
No rwa y
· Zyxel Communications · https://www.zyxel.com/no/no/
Po la nd
· Zyxel Communications Poland · https://www.zyxel.com/pl/pl/
Ro m a nia
· Zyxel Romania · https://www.zyxel.com/ro/ro
Russia
· Zyxel Russia · https://www.zyxel.com/ru/ru/
Slo va kia
· Zyxel Communications Czech s.r.o. organizacna zlozka · https://www.zyxel.com/sk/sk/
Spa in
· Zyxel Communications ES Ltd. · https://www.zyxel.com/es/es/
Swe de n
· Zyxel Communications · https://www.zyxel.com/se/sv/
Switze rla nd
· Studerus AG · https://www.zyxel.ch/de · https://www.zyxel.ch/fr
NBG6818 User's Guide
150

Appendix A Customer Support
Turke y
· Zyxel Turkey A.S. · https://www.zyxel.com/tr/tr/
UK
· Zyxel Communications UK Ltd. · https://www.zyxel.com/uk/en/
Ukra ine
· Zyxel Ukraine · http://www.ua.zyxel.com
So uth Am e ric a
Arg e ntina
· Zyxel Communications Corporation · https://www.zyxel.com/co/es/
Bra zil
· Zyxel Communications Brasil Ltda. · https://www.zyxel.com/br/pt/
C o lo m b ia
· Zyxel Communications Corporation · https://www.zyxel.com/co/es/
Ec ua do r
· Zyxel Communications Corporation · https://www.zyxel.com/co/es/
So uth Am e ric a
· Zyxel Communications Corporation · https://www.zyxel.com/co/es/
Middle Ea st
Isra e l
· Zyxel Communications Corporation · http://il.zyxel.com/
NBG6818 User's Guide
151

Appendix A Customer Support
Middle Ea st
· Zyxel Communications Corporation · https://www.zyxel.com/me/en/
No rth Am e ric a USA
· Zyxel Communications, Inc. - North America Headquarters · https://www.zyxel.com/us/en/
O c e a nia Austra lia
· Zyxel Communications Corporation · https://www.zyxel.com/au/en/
Afric a So uth Afric a
· Nology (Pty) Ltd. · https://www.zyxel.com/za/en/
NBG6818 User's Guide
152

A PPEN DIX B
Se tting Up Yo ur C o m pute r's IP Addre ss
Note: Your specific NBG6818 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
This appendix shows you how to configure the IP settings on your computer in order for it to be able to communicate with the other devices on your network. Windows Vista/XP/2000, Mac OS 9/OS X, and all versions of UNIX/LINUX include the software components you need to use TCP/IP on your computer. If you manually assign IP information instead of using a dynamic IP, make sure that your network's computers have IP addresses that place them in the same subnet. In this appendix, you can set up an IP address for: · Windows 7 on page 153 · Mac OS X: 10.3 and 10.4 on page 157 · Mac OS X: 10.5 and 10.6 on page 159 · Linux: Ubuntu 8 (GNOME) on page 163 · Linux: openSUSE 10.3 (KDE) on page 166
Windo ws 7
This section shows screens from Windows 7 Enterprise. 1 Click Sta rt > C o ntro l Pa ne l.
NBG6818 User's Guide
153

Appendix B Setting Up Your Computer's IP Address
2 In the C o ntro l Pa ne l, click Vie w ne two rk sta tus a nd ta sks under the Ne two rk a nd Inte rne t category.
3 Click C ha ng e a da pte r se tting s. 4 Double click Lo c a l Are a C o nne c tio n and then select Pro pe rtie s.
NBG6818 User's Guide
154

Appendix B Setting Up Your Computer's IP Address
Note: During this procedure, click C o ntinue whenever Windows displays a screen saying that it needs your permission to continue.
5 Select Inte rne t Pro to c o l Ve rsio n 4 (TC P/ IPv4) and then select Pro pe rtie s.
NBG6818 User's Guide
155

Appendix B Setting Up Your Computer's IP Address 6 The Inte rne t Pro to c o l Ve rsio n 4 (TC P/ IPv4) Pro pe rtie s window opens.
7 Select O b ta in a n IP a ddre ss a uto m a tic a lly if your network administrator or ISP assigns your IP address dynamically. Select Use the fo llo wing IP Addre ss and fill in the IP a ddre ss, Sub ne t m a sk, and De fa ult g a te wa y fields if you have a static IP address that was assigned to you by your network administrator or ISP. You may also have to enter a Pre fe rre d DNS se rve r and an Alte rna te DNS se rve r, if that information was provided. Click Adva nc e d if you want to configure advanced settings for IP, DNS and WINS.
8 Click O K to close the Inte rne t Pro to c o l (TC P/ IP) Pro pe rtie s window. 9 Click O K to close the Lo c a l Are a C o nne c tio n Pro pe rtie s window.
Ve rifying Se tting s
1 Click Sta rt > All Pro g ra m s > Ac c e sso rie s > C o m m a nd Pro m pt. 2 In the Co m m a nd Pro m pt window, type "ipconfig" and then press [ENTER]. 3 The IP settings are displayed as follows.
NBG6818 User's Guide
156

Appendix B Setting Up Your Computer's IP Address
Ma c O S X: 10.3 a nd 10.4
The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > Syste m Pre fe re nc e s.
2 In the Syste m Pre fe re nc e s window, click the Ne two rk icon.
3 When the Ne two rk preferences pane opens, select Built- in Ethe rne t from the network connection type list, and then click C o nfig ure . NBG6818 User's Guide
157

Appendix B Setting Up Your Computer's IP Address
4 For dynamically assigned settings, select Using DHC P from the C o nfig ure IPv4 list in the TC P/ IP tab.
5 For statically assigned settings, do the following: · From the C o nfig ure IPv4 list, select Ma nua lly. · In the IP Addre ss field, type your IP address. · In the Subne t Ma sk field, type your subnet mask. · In the Ro ute r field, type the IP address of your device. NBG6818 User's Guide
158

Appendix B Setting Up Your Computer's IP Address
6 Click Apply No w and close the window.
Ve rifying Se tting s
Check your TCP/IP properties by clicking Applic a tio ns > Utilitie s > Ne two rk Utilitie s, and then selecting the appropriate Ne two rk Inte rfa c e from the Info tab. Fig ure 88 Mac OS X 10.4: Network Utility
Ma c O S X: 10.5 a nd 10.6
The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. 1 Click Apple > Syste m Pre fe re nc e s.
NBG6818 User's Guide
159

Appendix B Setting Up Your Computer's IP Address
2 In Syste m Pre fe re nc e s, click the Ne two rk icon.
3 When the Ne two rk preferences pane opens, select Ethe rne t from the list of available connection types. NBG6818 User's Guide
160

Appendix B Setting Up Your Computer's IP Address
4 From the C o nfig ure list, select Using DHC P for dynamically assigned settings. 5 For statically assigned settings, do the following:
· From the C o nfig ure list, select Ma nua lly. · In the IP Addre ss field, enter your IP address. · In the Subne t Ma sk field, enter your subnet mask. · In the Ro ute r field, enter the IP address of your NBG6818.
NBG6818 User's Guide
161

Appendix B Setting Up Your Computer's IP Address
6 Click Apply and close the window.
Ve rifying Se tting s
Check your TCP/IP properties by clicking Applic a tio ns > Utilitie s > Ne two rk Utilitie s, and then selecting the appropriate Ne two rk inte rfa c e from the Info tab. Fig ure 89 Mac OS X 10.5: Network Utility
NBG6818 User's Guide
162

Appendix B Setting Up Your Computer's IP Address
Linux: Ub untu 8 (G NO ME)
This section shows you how to configure your computer's TCP/IP settings in the GNU Object Model Environment (GNOME) using the Ubuntu 8 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration. The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: 1 Click Syste m > Adm inistra tio n > Ne two rk.
2 When the Ne two rk Se tting s window opens, click Unlo c k to open the Authe ntic a te window. (By default, the Unlo c k button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password.
3 In the Authe ntic a te window, enter your admin account name and password then click the Authe ntic a te button.
NBG6818 User's Guide
163

Appendix B Setting Up Your Computer's IP Address
4 In the Ne two rk Se tting s window, select the connection that you want to configure, then click Pro pe rtie s.
5 The Pro pe rtie s dialog box opens. NBG6818 User's Guide
164

Appendix B Setting Up Your Computer's IP Address
· In the C o nfig ura tio n list, select Auto m a tic C o nfig ura tio n (DHC P) if you have a dynamic IP address. · In the C o nfig ura tio n list, select Sta tic IP a ddre ss if you have a static IP address. Fill in the IP a ddre ss,
Subne t m a sk, and G a te wa y a ddre ss fields. 6 Click O K to save the changes and close the Pro pe rtie s dialog box and return to the Ne two rk Se tting s
screen. 7 If you know your DNS server IP address(es), click the DNS tab in the Ne two rk Se tting s window and then
enter the DNS server information in the fields provided.
8 Click the C lo se button to apply the changes.
Ve rifying Se tting s
Check your TCP/IP properties by clicking Syste m > Adm inistra tio n > Ne two rk To o ls, and then selecting the appropriate Ne two rk de vic e from the De vic e s tab. The Inte rfa c e Sta tistic s column shows data if your connection is working properly.
NBG6818 User's Guide
165

Appendix B Setting Up Your Computer's IP Address Fig ure 90 Ubuntu 8: Network Tools
Linux: o pe nSUSE 10.3 (KDE)
This section shows you how to configure your computer's TCP/IP settings in the K Desktop Environment (KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration. The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: 1 Click K Me nu > C o m pute r > Adm inistra to r Se tting s (Ya ST).
NBG6818 User's Guide
166

Appendix B Setting Up Your Computer's IP Address
2 When the Run a s Ro o t - KDE su dialog opens, enter the admin password and click O K. 3 When the Ya STC o ntro l C e nte r window opens, select Ne two rk De vic e s and then click the Ne two rk C a rd
icon.
NBG6818 User's Guide
167

Appendix B Setting Up Your Computer's IP Address
4 When the Ne two rk Se tting s window opens, click the O ve rvie w tab, select the appropriate connection Na me from the list, and then click the C o nfig ure button.
5 When the Ne two rk C a rd Se tup window opens, click the Addre ss tab NBG6818 User's Guide
168

Appendix B Setting Up Your Computer's IP Address Fig ure 91 openSUSE 10.3: Network Card Setup
6 Select Dyna m ic Addre ss (DHC P) if you have a dynamic IP address. Select Sta tic a lly a ssig ne d IP Addre ss if you have a static IP address. Fill in the IP a ddre ss, Sub ne t m a sk, and Ho stna m e fields.
7 Click Ne xt to save the changes and close the Ne two rk C a rd Se tup window. 8 If you know your DNS server IP address(es), click the Ho stna m e / DNS tab in Ne two rk Se tting s and then
enter the DNS server information in the fields provided.
NBG6818 User's Guide
169

Appendix B Setting Up Your Computer's IP Address
9 Click Finish to save your settings and close the window.
Ve rifying Se tting s
Click the KNe two rk Ma na g e r icon on the Ta sk ba r to check your TCP/IP properties. From the O ptio ns submenu, select Sho w C o nne c tio n Info rm a tio n. Fig ure 92 openSUSE 10.3: KNetwork Manager
When the C o nne c tio n Sta tus - KNe two rk Ma na g e r window opens, click the Sta tistic s ta b to see if your connection is working properly.
NBG6818 User's Guide
170

Appendix B Setting Up Your Computer's IP Address Fig ure 93 openSUSE: Connection Status - KNetwork Manager
NBG6818 User's Guide
171

A PPEN DIX C
C o m m o n Se rvic e s

The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site.

· Na me : This is a short, descriptive name for the service. You can use this one or create a different one, if you like.

· Pro to c o l: This is the type of IP protocol used by the service. If this is TC P/ UDP, then the service uses the same port number with TCP and UDP. If this is USER- DEFINED, the Po rt(s) is the IP protocol number, not the port number.

· Po rt(s): This value depends on the Pro to c o l. Please refer to RFC 1700 for further information about port numbers.

· If the Pro to c o l is TC P, UDP, or TC P/ UDP, this is the IP port number.

· If the Pro to c o l is USER, this is the IP protocol number.

· De sc riptio n: This is a brief explanation of the applications that use this service or the situations in which this service is used.
Table 50 Commonly Used Services

NA ME

PRO TO C O L

PO RT(S)

DESC RIPTIO N

AH (IPSEC_TUNNEL) User-Defined

51

The IPSEC AH (Authentication Header) tunneling protocol uses this service.

AIM/New-ICQ

TCP

5190

AOL's Internet Messenger service. It is also used as a listening port by ICQ.

AUTH

TCP

113

Authentication protocol used by some servers.

BGP

TCP

179

Border Gateway Protocol.

BOOTP_CLIENT

UDP

68

DHCP Client.

BOOTP_SERVER

UDP

67

DHCP Server.

CU-SEEME

TCP UDP

7648 24032

A popular videoconferencing solution from White Pines Software.

DNS

TCP/UDP

53

Domain Name Server, a service that matches web

names (for example www.zyxel.com) to IP numbers.

ESP (IPSEC_TUNNEL) User-Defined

50

The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service.

FINGER

TCP

79

Finger is a UNIX or Internet related command that can

be used to find out if a user is logged on.

FTP

TCP

20

File Transfer Program, a program to enable fast

transfer of files, including large files that may not be

TCP

21

possible by e-mail.

H.323

TCP

1720

NetMeeting uses this protocol.

HTTP

TCP

80

Hyper Text Transfer Protocol - a client/server protocol

for the world wide web.

HTTPS

TCP

443

HTTPS is a secured http session often used in e-

commerce.

NBG6818 User's Guide
172

Appendix C Common Services

Table 50 Commonly Used Services (continued)

NA ME

PRO TO C O L

PO RT(S)

ICMP

User-Defined

1

ICQ IGMP (MULTICAST)

UDP User-Defined

4000 2

IKE

UDP

500

IRC MSN Messenger

TCP/UDP TCP

6667 1863

NEW-ICQ NEWS NFS

TCP TCP UDP

5190 144 2049

NNTP PING

TCP

119

User-Defined

1

POP3

TCP

110

PPTP

TCP

1723

PPTP_TUNNEL (GRE) User-Defined

47

RCMD REAL_AUDIO
REXEC RLOGIN RTELNET RTSP

TCP TCP
TCP TCP TCP TCP/UDP

512 7070
514 513 107 554

SFTP

TCP

115

SMTP

TCP

25

SNMP SNMP-TRAPS SQL-NET

TCP/UDP TCP/UDP TCP

161 162 1521

SSH

TCP/UDP

22

DESC RIPTIO N
Internet Control Message Protocol is often used for diagnostic or routing purposes.
This is a popular Internet chat program.
Internet Group Management Protocol is used when sending packets to a specific group of hosts.
The Internet Key Exchange algorithm is used for key distribution and management.
This is another popular Internet chat program.
Microsoft Networks' messenger service uses this protocol.
An Internet chat program.
A protocol for news groups.
Network File System - NFS is a client/server distributed file service that provides transparent file sharing for network environments.
Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service.
Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable.
Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other).
Point-to-Point Tunneling Protocol enables secure transfer of data over public networks. This is the control channel.
PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data over public networks. This is the data channel.
Remote Command Service.
A streaming audio service that enables real time sound over the web.
Remote Execution Daemon.
Remote Login.
Remote Telnet.
The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet.
Simple File Transfer Protocol.
Simple Mail Transfer Protocol is the messageexchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another.
Simple Network Management Program.
Traps for use with the SNMP (RFC:1215).
Structured Query Language is an interface to access data on many different types of database systems, including mainframes, midrange systems, UNIX systems and network servers.
Secure Shell Remote Login Program.

NBG6818 User's Guide
173

Appendix C Common Services

Table 50 Commonly Used Services (continued)

NA ME

PRO TO C O L

PO RT(S)

STRM WORKS

UDP

1558

SYSLOG

UDP

514

TACACS

UDP

49

TELNET

TCP

23

TFTP

UDP

69

VDOLIVE

TCP

7000

DESC RIPTIO N
Stream Works Protocol.
Syslog allows you to send system logs to a UNIX server.
Login Host Protocol used for (Terminal Access Controller Access Control System).
Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems.
Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol).
Another videoconferencing solution.

NBG6818 User's Guide
174

A PPEN DIX D
Le g a l Info rm a tio n
C o pyrig ht
Copyright © 2020 by Zyxel Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Disc la im e r
Zyxel does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. Zyxel further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.
Re g ula to ry No tic e a nd Sta te m e nt
UNITED STATES o f AMERIC A
The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/
FC C EMC Sta te m e nt
· The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation.
· Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the device.
· This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
· If this device does cause harmful interference to radio or television reception, which is found by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures: · Reorient or relocate the receiving antenna · Increase the separation between the devices · Connect the equipment to an outlet other than the receiver's · Consult a dealer or an experienced radio/TV technician for assistance
The following information applies if you use the product with RF function within USA area.
FC C Ra dia tio n Expo sure Sta te m e nt
· This device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. · This transmitter must be at least 20 cm from the user and must not be co-located or operating in conjunction with any other antenna or
transmitter. · Operation of this device is restricted to indoor use only, except for relevant user's manual mention that this device can be installed into the
external environment.
EURO PEAN UNIO N
NBG6818 User's Guide
175

Appendix D Legal Information

The following information applies if you use the product within the European Union.
De c la ra tio n o f C o nfo rm ity with Re g a rd to EU Dire c tive 2014/ 53/ EU (Ra dio Eq uipm e nt Dire c tive , RED)
· Compliance information for wireless products relevant to the EU and other Countries following the EU Directive 2014/53/EU (RED). And this product may be used in all EU countries (and other countries following the EU Directive 2014/53/EU) without any limitation except for the countries mentioned below table:
· In the majority of the EU and other European countries, the 5GHz bands have been made available for the use of wireless local area networks (LANs). Later in this document you will find an overview of countries in which additional restrictions or requirements or both are applicable. The requirements for any country may evolve. Zyxel recommends that you check with the local authorities for the latest status of their national regulations for the 5GHz wireless LANs.
· If this device for operation in the band 5150-5350 MHz, it is for indoor use only. · This equipment should be installed and operated with a minimum distance of 20cm between the radio equipment and your body. · The maximum RF power operating for each band as follows:
· the band 2,400 to 2,483.5 MHz is 99.54 mW,
· the bands 5,150 MHz to 5,350 MHz is 175.79 mW,
· the 5,470 MHz to 5,725 MHz is 874.98 mW.

 (Bulgarian)

  Zyxel ,                2014/53/C.

Na tio na l Re stric tio ns
· The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http://www.bipt.be for more details.
· Draadloze verbindingen voor buitengebruik en met een reikwijdte van meer dan 300 meter dienen aangemeld te worden bij het Belgisch Instituut voor postdiensten en telecommunicatie (BIPT). Zie http://www.bipt.be voor meer gegevens.
· Les liaisons sans fil pour une utilisation en extérieur d'une distance supérieure à 300 mètres doivent être notifiées à l'Institut Belge des services Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples détails.

Español (Spanish)

Por medio de la presente Zyxel declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 2014/53/UE..

Cestina (Czech)

Zyxel tímto prohlasuje, ze tento zaízení je ve shod se základními pozadavky a dalsími píslusnými ustanoveními smrnice 2014/53/EU.

Dansk (Danish) Undertegnede Zyxel erklærer herved, at følgende udstyr udstyr overholder de væsentlige krav og øvrige relevante krav i direktiv 2014/53/EU.

Na tio na l Re stric tio ns
· In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage. · I Danmark må frekvensbåndet 5150 - 5350 også anvendes udendørs.

Deutsch (German)

Hiermit erklärt Zyxel, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 2014/53/EU befindet.

Eesti keel (Estonian)

Käesolevaga kinnitab Zyxel seadme seadmed vastavust direktiivi 2014/53/EL põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.

 (Greek)

   Zyxel                2014/53/EE.

English

Hereby, Zyxel declares that this device is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU.

Français (French)

Par la présente Zyxel déclare que l'appareil équipements est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 2014/53/UE.

Hrvatski (Croatian)

Zyxel ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 2014/53/UE.

Íslenska (Icelandic)

Hér með lýsir, Zyxel því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar 2014/53/ UE.

Italiano (Italian) Con la presente Zyxel dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 2014/53/UE.

Na tio na l Re stric tio ns
· This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a "general authorization." Please check http://www.sviluppoeconomico.gov.it/ for more details.
· Questo prodotto è conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una "Autorizzazione Generale". Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli.

Latviesu valoda (Latvian)

Ar so Zyxel deklar, ka iekrtas atbilst Direktvas 2014/53/ES btiskajm prasbm un citiem ar to saisttajiem noteikumiem.
Na tio na l Re stric tio ns
· The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http://www.esd.lv for more details.
· 2.4 GHz frekvenèu joslas izmantoðanai ârpus telpâm nepiecieðama atïauja no Elektronisko sakaru direkcijas. Vairâk informâcijas: http://www.esd.lv.

NBG6818 User's Guide
176

Appendix D Legal Information

Lietuvi kalba (Lithuanian)
Magyar (Hungarian)
Malti (Maltese)
Nederlands (Dutch)
Polski (Polish)
Português (Portuguese)
Român (Romanian)
Slovencina (Slovak)
Slovenscina (Slovene)
Suomi (Finnish)
Svenska (Swedish)
Norsk (Norwegian)

Siuo Zyxel deklaruoja, kad sis ranga atitinka esminius reikalavimus ir kitas 2014/53/ES Direktyvos nuostatas.
Alulírott, Zyxel nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 2014/53/EU irányelv egyéb elõírásainak.
Hawnhekk, Zyxel, jiddikjara li dan tagmir jikkonforma mal-tiijiet essenzjali u ma provvedimenti orajn relevanti li hemm fid-Dirrettiva 2014/53/UE.
Hierbij verklaart Zyxel dat het toestel uitrusting in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 2014/53/EU.
Niniejszym Zyxel owiadcza, e sprzt jest zgodny z zasadniczymi wymogami oraz pozostalymi stosownymi postanowieniami Dyrektywy 2014/53/UE.
Zyxel declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva 2014/53/ UE.
Prin prezenta, Zyxel declar c acest echipament este în conformitate cu cerinele eseniale i alte prevederi relevante ale Directivei 2014/53/UE.
Zyxel týmto vyhlasuje, ze zariadenia spa základné poziadavky a vsetky príslusné ustanovenia Smernice 2014/53/EÚ.
Zyxel izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi dolocili direktive 2014/53/EU.
Zyxel vakuuttaa täten että laitteet tyyppinen laite on direktiivin 2014/53/EU oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Härmed intygar Zyxel att denna utrustning står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 2014/53/EU.
Erklærer herved Zyxel at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I direktiv 2014/53/EU.

No te s: · Although Norway, Switzerland and Liechtenstein are not EU member states, the EU Directive 2014/53/EU has also been implemented in those
countries. · The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the
gain of the antenna used (specified in dBi) to the output power available at the connector (specified in dBm).
List o f na tio na l c o de s

COUNTRY Austria Belgium Bulgaria Croatia Cyprus Czech Republic Denmark Estonia Finland France Germany Greece Hungary Iceland Ireland Italy Latvia

ISO 3166 2 LETTER CODE AT BE BG HR CY CZ DK EE FI FR DE GR HU IS IE IT LV

COUNTRY Liechtenstein Lithuania Luxembourg Malta Netherlands Norway Poland Portugal Romania Serbia Slovakia Slovenia Spain Switzerland Sweden Turkey United Kingdom

ISO 3166 2 LETTER CODE LI LT LU MT NL NO PL PT RO RS SK SI ES CH SE TR GB

Sa fe ty Wa rning s
· Do not use this product near water, for example, in a wet basement or near a swimming pool. · Do not expose your device to dampness, dust or corrosive liquids. · Do not store things on the device. · Do not obstruct the device ventilation slots as insufficient airflow may harm your device. For example, do not place the device in an
enclosed space such as a box or on a very soft surface such as a bed or sofa.

NBG6818 User's Guide
177

Appendix D Legal Information
· Do not install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. · Connect ONLY suitable accessories to the device. · Do not open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. · Only qualified service personnel should service or disassemble this device. Please contact your vendor for further information. · Make sure to connect the cables to the correct ports. · Place connecting cables carefully so that no one will step on them or stumble over them. · Always disconnect all cables from this device before servicing or disassembling. · Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to
a power outlet. · Do not allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor
or cord. · Please use the provided or designated connection cables/power cables/ adaptors. Connect it to the right supply voltage (for example,
110V AC in North America or 230V AC in Europe). If the power adaptor or cord is damaged, it might cause electrocution. Remove it from the device and the power source, repairing the power adapter or cord is prohibited. Contact your local vendor to order a new one. · Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. · The following warning statements apply, where the disconnect device is not incorporated in the device or where the plug on the power supply cord is intended to serve as the disconnect device, - For permanently connected devices, a readily accessible disconnect device shall be incorporated external to the device; - For pluggable devices, the socket-outlet shall be installed near the device and shall be easily accessible.
Enviro nm e nt Sta te m e nt
ErP (Ene rg y- re la te d Pro duc ts)
Zyxel products put on the EU market in compliance with the requirement of the European Parliament and the Council published Directive 2009/ 125/EC establishing a framework for the setting of ecodesign requirements for energy-related products (recast), so called as "ErP Directive (Energy-related Products directive) as well as ecodesign requirement laid down in applicable implementing measures, power consumption has satisfied regulation requirements which are: · Network standby power consumption < 8W, and/or · Off mode power consumption < 0.5W, and/or · Standby mode power consumption < 0.5W. (Wireless settings, please refer to the chapter about wireless settings for more detail.)
Euro pe a n Unio n - Dispo sa l a nd Re c yc ling Info rm a tio n
The symbol below means that according to local regulations your product and/or its battery shall be disposed of separately from domestic waste. If this product is end of life, take it to a recycling station designated by local authorities. At the time of disposal, the separate collection of your product and/or its battery will help save natural resources and ensure that the environment is sustainable development.
Die folgende Symbol bedeutet, dass Ihr Produkt und/oder seine Batterie gemäß den örtlichen Bestimmungen getrennt vom Hausmüll entsorgt werden muss. Wenden Sie sich an eine Recyclingstation, wenn dieses Produkt das Ende seiner Lebensdauer erreicht hat. Zum Zeitpunkt der Entsorgung wird die getrennte Sammlung von Produkt und/oder seiner Batterie dazu beitragen, natürliche Ressourcen zu sparen und die Umwelt und die menschliche Gesundheit zu schützen.
El símbolo de abajo indica que según las regulaciones locales, su producto y/o su batería deberán depositarse como basura separada de la doméstica. Cuando este producto alcance el final de su vida útil, llévelo a un punto limpio. Cuando llegue el momento de desechar el producto, la recogida por separado éste y/o su batería ayudará a salvar los recursos naturales y a proteger la salud humana y medioambiental.
Le symbole ci-dessous signifie que selon les réglementations locales votre produit et/ou sa batterie doivent être éliminés séparément des ordures ménagères. Lorsque ce produit atteint sa fin de vie, amenez-le à un centre de recyclage. Au moment de la mise au rebut, la collecte séparée de votre produit et/ou de sa batterie aidera à économiser les ressources naturelles et protéger l'environnement et la santé humaine.
Il simbolo sotto significa che secondo i regolamenti locali il vostro prodotto e/o batteria deve essere smaltito separatamente dai rifiuti domestici. Quando questo prodotto raggiunge la fine della vita di servizio portarlo a una stazione di riciclaggio. Al momento dello smaltimento, la raccolta separata del vostro prodotto e/o della sua batteria aiuta a risparmiare risorse naturali e a proteggere l'ambiente e la salute umana.
Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe.
NBG6818 User's Guide
178



Appendix D Legal Information


·   ·  
  ·   ·   ·  · · 

· 
 -  :
·  ·  :
-  -  -  -  ·  ·  ·  ·  ·  ·  ·  ·  ·  (  :  /  110V AC 230V AC) ·  ·  ·  ·  ·  ·  ·  : -   -  
Ab o ut the Sym b o ls
Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents.

NBG6818 User's Guide
179

Appendix D Legal Information

Expla na tio n o f the Sym b o ls

SYMBOL

EXPLANATION Alternating current (AC): AC is an electric current in which the flow of electric charge periodically reverses direction.

Direct current (DC): DC if the unidirectional flow or movement of electric charge carriers.

Earth; ground: A wiring terminal intended for connection of a Protective Earthing Conductor.
Class II equipment: The method of protection against electric shock in the case of class II equipment is either double insulation or reinforced insulation.

Vie wing C e rtific a tio ns
Go to http://www.zyxel.com to view this product's documentation and certifications.
Zyxe l Lim ite d Wa rra nty
Zyxel warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized Zyxel local distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, Zyxel will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of Zyxel. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
No te
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. Zyxel shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php.
Re g istra tio n
Register your product online at www.zyxel.com to receive email notices of firmware upgrades and related information
O pe n So urc e Lic e nse s
This product may contain in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or Zyxel Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or Zyxel Technical Support at support@zyxel.com.

NBG6818 User's Guide
180

Index
Inde x

A
Address Assignment 78 ALG 91
and NAT 91 and security policy 91 AP 11 AP Mode menu 41 status screen 41 AP+Bridge 11 Application Layer Gateway, see ALG
B
Bridge/Repeater 11
C
certifications 177 viewing 180
channel 103 contact information
customer support 147 copyright 175 customer support 147
D

overview 72 rescan 73 DLNA-compliant client 56 DNS Server 78 Domain Name System. See DNS. DynDNS 127, 129 DynDNS see also DDNS 127, 129
E
encryption 104 ESSID 145
F
file sharing access right 69, 71 bandwidth 71 FTP 69 Samba 31, 33, 67 user account 68, 70 Windows Explorer 31, 33, 67 work group 31, 33, 67
Firewall guidelines 124 ICMP packets 127
firewall stateful inspection 123
FTP ALG 91

DDNS service providers 127, 129
DHCP server 114 Digital Living Network Alliance 56 disclaimer 175 DLNA 56
indexing 73

G
General wireless LAN screen 106 Guest WLAN 104 Guest WLAN Bandwidth 105

NBG6818 User's Guide
181

H
H.323 ALG 91

Index
N
NAT and ALG 91

I
IP Address 116
L
LAN 113 LAN overview 113 LAN setup 113 local (user) database 104 Local Area Network 113

O
OpenVPN Client 65 OpenVPN Server 61 operating mode 11
P
Point-to-Point Protocol over Ethernet 82 PPPoE 82
dial-up connection

M

Q

MAC 108 MAC address 78, 103
cloning 78 MAC address filter 103 MAC address filtering 108 MAC filter 108 managing the device
good habits 12 using the web configurator. See web configurator. using the WPS. See WPS. MBSSID 11 Media access control 108 media client 72 media file 72, 73 type 73 media server overview 72 meida file play 72 mode 11

Quality of Service (QoS) 110
R
RADIUS server 104 Reset button 13 Reset the device 13 Router Mode
status screen 36
S
Samba 57 Scheduling 112 security policy
and ALG 91 Service Set 107 Service Set IDentification 107 Service Set IDentity. See SSID.

NBG6818 User's Guide
182

SIP ALG 91
SSID 103, 107 stateful inspection firewall 123 Status 36 Subnet Mask 116 System General Setup 133 System restart 137
U
user authentication 104 local (user) database 104 RADIUS server 104
V
VoIP pass through see also ALG
W
WAN (Wide Area Network) 77 WAN MAC address 78 warranty 180
note 180 Web Configurator
how to access 27 web configurator 12 wireless channel 145 wireless LAN 145 wireless LAN scheduling 112 Wireless network
basic guidelines 102 channel 103 encryption 104 example 102 MAC address filter 103 overview 102 security 103 SSID 103 Wireless security 103

Index overview 103 type 103
wireless security 145 Wireless tutorial 42 WLAN button 13 work group 56
name 56 Windows 56 WPS 12
NBG6818 User's Guide
183


Acrobat Distiller 11.0 (Windows)