Seite 1 NBG4115 Wireless N-lite 3G Router Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 1.0 Edition 2, 7/2009 www.zyxel.com www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation...
Seite 3: About This User's Guide
User’s Guide PDF. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG4115 up and running right away. It contains information on setting up your network and configuring for Internet access.
Seite 4 • Knowledge Base If you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well.
Seite 5 Should problems arise that cannot be solved by the methods listed above, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following information ready when you contact an office.
Seite 6: Document Conventions
Syntax Conventions • The NBG4115 may be referred to as the “NBG4115”, the “device”, the “product” or the “system” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Seite 7 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The NBG4115 icon is not an exact representation of your device. NBG4115 Computer Notebook computer Server DSLAM Firewall Telephone Switch Router Modem User’s Guide...
Seite 8: Safety Warnings
Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. •...
Seite 9: Inhaltsverzeichnis
Contents Overview Contents Overview Introduction ..........................19 Introduction ..........................21 The WPS Button ........................25 The Web Configurator ....................... 27 Connection Wizard ........................39 AP Mode ............................ 55 Tutorials ............................. 63 Network ........................... 79 Wireless LAN ..........................81 WAN ............................101 LAN ............................115 DHCP Server ..........................119 NAT ............................
Seite 10 Contents Overview User’s Guide...
Seite 11: Inhaltsverzeichnis
Introduction ..........................21 1.1 Overview ..........................21 1.2 Applications ......................... 21 1.3 Ways to Manage the NBG4115 ................... 22 1.4 Good Habits for Managing the NBG4115 ................22 1.5 LEDs ............................ 22 Chapter 2 The WPS Button........................25 2.1 Overview ..........................25 Chapter 3 The Web Configurator ......................
Seite 12 4.6 Connection Wizard Complete ....................53 Chapter 5 AP Mode........................... 55 5.1 Overview ..........................55 5.2 Setting your NBG4115 to AP Mode ..................55 5.3 The Status Screen in AP Mode ................... 56 5.3.1 Navigation Panel ......................58 5.4 LAN Settings ........................59 5.5 WLAN and Maintenance Settings ..................
Seite 13 Table of Contents 6.6.3 Bandwidth Management by IP or IP Range ............... 76 Part II: Network..................79 Chapter 7 Wireless LAN........................... 81 7.1 Overview ..........................81 7.1.1 What You Can Do in this Chapter ................82 7.1.2 What You Should Know ..................... 82 7.2 General ..........................
Seite 14 Table of Contents 10.1 Overview ...........................119 10.1.1 What You Can Do in this Chapter ................119 10.1.2 What You Need To Know ..................119 10.2 General ..........................120 10.3 Advanced ........................121 10.4 Client List ........................122 Chapter 11 NAT............................125 11.1 Overview ........................
Seite 15 Table of Contents 14.1 Overview .......................... 147 14.1.1 What You Can Do in this Chapter ................147 14.1.2 What You Need To Know ..................147 14.2 Filter ..........................148 14.3 Technical Reference ......................149 14.3.1 Customizing Keyword Blocking URL Checking ............149 Part IV: Management................
Seite 16 Table of Contents 18.2 General ..........................170 18.3 Technical Reference ......................171 18.3.1 Installing UPnP in Windows XP ................171 Part V: Maintenance and Troubleshooting ........179 Chapter 19 System ........................... 181 19.1 Overview .......................... 181 19.1.1 What You Can Do in this Chapter ................181 19.2 General ..........................
Seite 17 24.2 Power, Hardware Connections, and LEDs ..............201 24.3 NBG4115 Access and Login .................... 202 24.4 Internet Access ........................ 204 24.5 Resetting the NBG4115 to Its Factory Defaults ............... 206 24.6 Wireless Router/AP Troubleshooting ................206 Part VI: Appendices and Index ............209 Appendix A Product Specifications..................
Seite 18 Table of Contents User’s Guide...
Seite 19: Introduction
Introduction Introduction (21) The WPS Button (25) The Web Configurator (27) Connection Wizard (39) AP Mode (55) Tutorials (63)
Seite 21: Introduction
1.2 Applications Your can create the following networks using the NBG4115: • Wired. You can connect network devices via the Ethernet ports of the NBG4115 so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG4115 to access network resources.
Seite 22: Ways To Manage The Nbg4115
NBG4115 using a (supported) web browser. 1.4 Good Habits for Managing the NBG4115 Do the following things regularly to make the NBG4115 more secure and to manage the NBG4115 more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
Seite 23 The NBG4115 is sending/receiving data through the LAN. The LAN is not connected. Green The NBG4115 has a 3G card installed and is communicating with routers. Blinking The NBG4115 is transmitting and/or receiving data from routers through an installed 3G card.
Seite 24 Chapter 1 Introduction User’s Guide...
Seite 25: The Wps Button
H A P T E R The WPS Button 2.1 Overview Your NBG4115 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
Seite 26 Chapter 2 The WPS Button User’s Guide...
Seite 27: The Web Configurator
Internet Explorer. 3.2 Accessing the Web Configurator Make sure your NBG4115 hardware is properly connected and prepare your computer or computer network to connect to the NBG4115 (refer to the Quick Start Guide). Launch your web browser. Type "http://192.168.1.1" as the website address.
Seite 28 Select the setup mode you want to use. • Click Go to Wizard Setup to use the Configuration Wizard for basic Internet and Wireless setup. • Click Go to Advanced Setup to view and configure all the NBG4115’s settings. User’s Guide...
Seite 29: Resetting The Nbg4115
If you forget your password or IP address, or you cannot access the Web Configurator, you will need to use the RESET button at the back of the NBG4115 to reload the factory-default configuration file. This means that you will lose all configurations that you had previously saved, the password will be reset to “1234”...
Seite 30: The Status Screen In Router Mode
Chapter 3 The Web Configurator 3.5 The Status Screen in Router Mode Click on Status. The screen below shows the status screen in Router Mode. (For information on the status screen in AP Mode see Chapter 5 on page 56.) Figure 5 Web Configurator Status Screen The following table describes the icons shown in the Status screen.
Seite 31 This is the firmware version and the date created. WAN Information - SIM Card Status (3G Only) When a 3G USB device is attached to the NBG4115, this provides information specific to it. - MAC Address This shows the WAN Ethernet adapter MAC Address of your device.
Seite 32: Navigation Panel
This shows whether UPnP is active or not. Interface Status Interface This displays the NBG4115 port types. The port types are: WAN, LAN and WLAN. Status For the 3G, LAN and WAN ports, this field displays Down (line is down) or Up (line is up or connected).
Seite 33 Wireless LAN General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115. Advanced This screen allows you to configure advanced wireless settings.
Seite 34: Summary: Dhcp Table
TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on that network, or else the computer must be manually configured.
Seite 35: Summary: Packet Statistics
Chapter 3 The Web Configurator DHCP client information (including IP Address, Host Name and MAC Address) of all network clients using the NBG4115’s DHCP server. Figure 6 Summary: DHCP Table The following table describes the labels in this screen. Table 5 Summary: DHCP Table...
Seite 36: Summary: Wlan Station Status
3.5.4 Summary: WLAN Station Status Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG4115 in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings.
Seite 37 This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the NBG4115’s WLAN network. Refresh Click Refresh to reload the list. User’s Guide...
Seite 38 Chapter 3 The Web Configurator User’s Guide...
Seite 39: Connection Wizard
Guide to know what to enter in each field. Leave a field blank if you don’t have that information. After you access the NBG4115 Web Configurator, click the Go to Wizard setup hyperlink. You can click Go to Advanced setup hyperlink to skip this wizard setup and configure basic or advanced features accordingly.
Seite 40: Step 1: System Information
System Name. • In Windows XP, click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the NBG4115 System Name. User’s Guide...
Seite 41: Domain Name
LABEL DESCRIPTION System System Name is a unique name to identify the NBG4115 in an Ethernet Name network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_"...
Seite 42: Step 2: Wireless Lan
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the (SSID) wireless LAN. If you change this field on the NBG4115, make sure all wireless stations use the same SSID in order to access the network. Security Select a Security level from the drop-down list box.
Seite 43: Extend (Wpa-Psk Or Wpa2-Psk) Security
Chapter 4 Connection Wizard Note: The wireless stations and NBG4115 must use the same SSID, channel ID, WPA-PSK (if WPA-PSK is enabled) or WPA2-PSK (if WPA2-PSK is enabled) for wireless communication. 4.4.1 Extend (WPA-PSK or WPA2-PSK) Security Choose Extend (WPA-PSK) or Extend (WPA2-PSK) security in the Wireless LAN setup screen to set up a Pre-Shared Key.
Seite 44: Connection Type
Chapter 4 Connection Wizard Note: When you select Mobile 3G, then all WAN connections are made through this. Check with your ISP to make sure you use the correct type. This wizard screen varies according to the connection type that you select. Figure 15 Wizard Step 3: ISP Parameters.
Seite 45: Pppoe Connection
By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Seite 46: Pptp Connection
Internet. Refer to the appendix for more information on PPTP. Note: The NBG4115 supports one PPTP server connection at any given time. Figure 18 Wizard Step 3: PPTP Connection The following table describes the fields in this screen...
Seite 47 Select this radio button if your ISP did not assign you a fixed IP automatically address. from ISP Use fixed IP Select this radio button, provided by your ISP to give the NBG4115 a address fixed, unique IP address. My IP Type the (static) IP address assigned to you by your ISP.
Seite 48: Mobile 3G
Mobile 3G is a set of international “third generation” standards for the sending and receiving of voice, video, and wireless data in a mobile environment. For the NBG4115, this type of wireless connection requires a connected 3G-compatible USB device (see the included Quick Start Guide for installation information), and a 3G account with your local ISP.
Seite 49: Your Ip Address
4.5.5 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG4115 an automatically assigned IP address depending on your ISP. Figure 20 Wizard Step 3: Your IP Address The following table describes the labels in this screen...
Seite 50: Ip Address And Subnet Mask
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your NBG4115, but make sure that no other device on your network is using that IP address.
Seite 51: Wan Ip And Dns Server Address Assignment
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG4115 uses a system DNS server (in the order you specify here) to resolve domain names for DDNS and the time server.
Seite 52: Wan Mac Address
This screen allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Once it is successfully configured, the address will be copied to configuration file.
Seite 53: Connection Wizard Complete
Click Exit to close the wizard screen without saving. 4.6 Connection Wizard Complete Click Finish to complete the wizard setup. Figure 23 Connection Wizard Complete You have successfully set up your NBG4115 to operate on your network and access the Internet. User’s Guide...
Seite 54 Chapter 4 Connection Wizard User’s Guide...
Seite 55: Ap Mode
AP mode. Use your NBG4115 as an AP if you already have a router or gateway on your network. In this mode your device bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet.
Seite 56: The Status Screen In Ap Mode
Chapter 5 AP Mode To set your NBG4115 to AP Mode, go to Maintenance > Sys OP Mode > General and select Access Point. Figure 25 Maintenance > Sys OP Mode > General A pop-up appears providing information on this mode. Click OK in the pop-up message window.
Seite 57 This shows the current status of the Wireless LAN - On, Off or Off by scheduler. - Name (SSID) This shows a descriptive name used to identify the NBG4115 in the wireless LAN. - Channel This shows the channel number which you select manually.
Seite 58: Navigation Panel
Use this screen to view the wireless stations that are currently associated to the NBG4115. 5.3.1 Navigation Panel Use the menu in the navigation panel to configure NBG4115 features in AP Mode. The following screen and table show the features you can configure in AP Mode. Figure 27 Menu: AP Mode The following table describes the sub-menus.
Seite 59: Lan Settings
Wireless General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115. Advanced This screen allows you to configure advanced wireless settings.
Seite 60: Wlan And Maintenance Settings
Chapter 5 AP Mode Note: If you change the IP address of the NBG4115 in the screen below, you will need to log into the NBG4115 again using the new IP address. Figure 28 Network > LAN > IP The table below describes the labels in the screen.
Seite 61: Logging In While In Ap Mode
5.6 Logging in while in AP Mode Connect your computer to the LAN port of the NBG4115. The default IP address of the NBG4115 is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”.
Seite 62 Chapter 5 AP Mode User’s Guide...
Seite 63: Tutorials
This chapter provides tutorials for setting up your NBG4115. 6.2 Set Up a 3G Connection This section shows you how to make a 3G connection with your NBG4115. There are two ways to set up your 3G options. Use the Wizard, which was introduced in the Quick Start Guide. The wizard is good for getting up and running in as little time as possible.
Seite 64 Chapter 6 Tutorials FIELD DESCRIPTION EXAMPLE User Name This is your account user name. dcmchale 0b1ken@kashiik.org Password This is your account user name’s ***** password. To set up a 3G connection: Connect to the Web Configurator, as described in the Quick Start Guide. When presented with the option to choose either Wizard or Advanced, click Go to Advanced setup.
Seite 65: Set Up The Nbg4115 For Gaming
Service (QoS) prioritization. If the data packets from a game are assigned a lower priority by the NBG4115, then they may take longer to reach their destination; but if they are given a higher priority, then they should arrive at their destination marginally faster.
Seite 66 Chapter 6 Tutorials Bandwidth management allows you to set up custom parameters on the NBG4115 so that whenever you play a game, the QoS is automatically upgraded to the highest priority in order to ensure your game data packets are plucked first from the pool of incoming information and sent on ahead of lower priority packets.
Seite 67 Chapter 6 Tutorials Enable the Gaming check box and set its Priority to High. The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in the Management > Bandwidth MGMT > Advanced screen:...
Seite 68: Set Up A Wireless Network With Wps
6.4.1 Push Button Configuration (PBC) Make sure that your NBG4115 is turned on and that it is within range of your computer. Make sure that you have installed the wireless client (this example uses the NWD210N) driver and utility in your notebook.
Seite 69: Wireless Client
Log into NBG4115’s Web Configurator and press the Push Button button in the Network > Wireless Client > WPS Station screen. Note: Your NBG4115 has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other.
Seite 70: Pin Configuration
Chapter 6 Tutorials 6.4.2 PIN Configuration When you use the PIN configuration method, you need to use both NBG4115’s configuration interface and the client’s utilities. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
Seite 71: Configure Wireless Security Without Wps
WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) Follow the steps below to configure the wireless settings on your NBG4115. The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 3.2 on page...
Seite 72: Configure Your Notebook
Figure 32 Tutorial: Status Screen 6.5.1 Configure Your Notebook Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG4115 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients.
Seite 73 Chapter 6 Tutorials Select SSID_Example3 and click Connect. Figure 33 Connecting a Wireless Client to a Wireless Network t Select WPA-PSK and type the security key in the following screen. Click Next. Figure 34 Security Settings The Confirm Save window appears. Check your settings and click Save to continue.
Seite 74: Bandwidth Management
6.6 Bandwidth Management This section shows you how to configure the bandwidth management feature on the NBG4115 to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you to specify bandwidth management rules based on an application or subnet.
Seite 75: Custom Bandwidth Management
E-mail. For the rest of the applications, click Enable if you need these services and set the priority to Low. Note: You can also leave the Enable field blank for the rest of the applications. In doing so, the NBG4115 does not apply bandwidth management to these services. 6.6.2 Custom Bandwidth Management Aside from the VOIP and e-mail services, you need to set the priority for MSN Messenger.
Seite 76: Bandwidth Management By Ip Or Ip Range
Chapter 6 Tutorials Click Enable in one of the fields for additional services. Add MSN as the service name. Set the priority for this to High. For the port, choose TCP from the drop-down menu and enter 1863 in the Specific Port field.
Seite 77 Note: The Policy column displays either Max (maximum) or Min (minimum). This is directly directed to the value in the Rate column. For example, you selected Min and entered 30M as the rate for the VoIP service. The NBG4115 allocates at least 30 megabytes for the VoIP service.
Seite 78 Chapter 6 Tutorials User’s Guide...
Seite 79: Network
Network Wireless LAN (81) WAN (101) LAN (115) DHCP Server (119) NAT (125) DDNS (135)
Seite 81: Wireless Lan
Wireless LAN 7.1 Overview This chapter discusses how to configure the wireless network settings in your NBG4115. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Figure 41 Example of a Wireless Network The wireless network is the part in the blue circle.
Seite 82: What You Can Do In This Chapter
• Use the MAC Filter screen (Section 7.3 on page 90) to allow or deny wireless stations based on their MAC addresses from connecting to the NBG4115. • Use the Advanced screen (Section 7.4 on page 92) to allow intra-BSS networking and set the RTS/CTS Threshold.
Seite 83 Chapter 7 Wireless LAN This type of security is fairly weak, however, because there are ways for unauthorized devices to get the SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network. MAC Address Filter Every wireless client has a unique identification number, called a MAC address.
Seite 84 When you select WPA2 or WPA2-PSK in your NBG4115, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless...
Seite 85: General
Use this screen to enable the Wireless LAN, enter the SSID and select the wireless security mode. Note: If you are configuring the NBG4115 from a computer connected to the wireless LAN and you change the NBG4115’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm.
Seite 86 This displays the channel the NBG4115 is currently using. Channel Channel Select whether the NBG4115 uses a wireless channel width of 20 or 40 Width MHz. A standard 20 MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps.
Seite 87: No Security
Select No Security to allow wireless stations to communicate with the access points without any data encryption. Note: If you do not enable any wireless security on your NBG4115, your network is accessible to any wireless networking device that is within range.
Seite 88 Keep this setting at Auto or Open System unless you want to force a key verification before communication between the wireless client and the ZyXEL Device occurs. Select Shared Key to force the clients to provide the WEP key prior to communication.
Seite 89: Wpa-Psk/Wpa2-Psk
Key 1 to Key The WEP keys are used to encrypt data. Both the NBG4115 and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Seite 90: Mac Filter
Click Reset to reload the previous configuration for this screen. 7.3 MAC Filter The MAC filter screen allows you to configure the NBG4115 to give exclusive access to up to 16 devices (Allow) or exclude up to 16 devices from accessing the NBG4115 (Deny).
Seite 91 Chapter 7 Wireless LAN To change your NBG4115’s MAC filter settings, click Network > Wireless LAN > MAC Filter. The screen appears as shown. Figure 46 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu.
Seite 92: Advanced
This value can be set from 1 to 100. Preamble A preamble affects the timing in your wireless network. There are two preamble modes: long and short. If a device uses a different preamble mode than the NBG4115 does, it cannot communicate with the NBG4115. User’s Guide...
Seite 93 When set to Always, the NBG4115 improves performance within mixed wireless modes. Select Auto to let the NBG4115 determine whether to turn this feature on or off in the current environment. Tx Power This field controls the transmission power of the NBG4115. When using...
Seite 94: Qos
LABEL DESCRIPTION WMM QoS Policy Select Default to have the NBG4115 automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Seite 95: Application Priority Configuration
Configuration screen. Click the Remove icon to delete an application entry. Apply Click Apply to save your changes to the NBG4115. 7.5.1 Application Priority Configuration Use this screen to edit a WMM QoS application entry. Click the edit icon under Modify.
Seite 96: User-Defined
Priority Select a priority from the drop-down list box. Apply Click Apply to save your changes back to the NBG4115. Cancel Click Cancel to return to the previous screen. User’s Guide...
Seite 97: Wps
This displays Unconfigured if WPS is disabled and there are no wireless or wireless security changes on the NBG4115 or you click Release_Configuration to remove the configured wireless and wireless security settings.
Seite 98: Wps Station
Table 33 WPS LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Refresh Click Refresh to get this screen information afresh. 7.7 WPS Station Use this screen when you want to add a wireless station using WPS. To open this screen, click Network >...
Seite 99: Scheduling
Chapter 7 Wireless LAN 7.8 Scheduling Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Network >...
Seite 100 Wireless LAN will turn on between the two times you enter in these fields. Note: Entering the same begin time and end time will mean the whole day. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. User’s Guide...
Seite 101: Wan
H A P T E R 8.1 Overview This chapter discusses the NBG4115’s WAN screens. Use these screens to configure your NBG4115 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Seite 102: What You Need To Know
(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG4115, which makes it accessible from an outside network. It is used by the NBG4115 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG4115 tries to access the Internet.
Seite 103 NBG4115 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP- v2). At start up, the NBG4115 queries all directly connected networks to gather group membership. After that, the NBG4115 periodically updates this information. IP multicasting can be enabled/disabled on the NBG4115 LAN and/or WAN interfaces in the Web Configurator (LAN;...
Seite 104 WAN in order to find a computer on the WAN. Auto-Bridge In the rear panel of your NBG4115, you can see four LAN ports (1 to 2) and one WAN port. The WAN port is for your Internet access connection, and the LAN ports are for your network devices.
Seite 105: Internet Connection
Chapter 8 WAN 8.3 Internet Connection Use this screen to change your NBG4115’s Internet access settings. Click Network > WAN. The screen differs according to the connection you choose. 8.3.1 Ethernet This screen displays when you select the Ethernet connection type.
Seite 106: Pppoe
DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right Second DNS displays the (read-only) DNS server IP address that the ISP assigns.
Seite 107 By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Seite 108: Pptp
DNS Servers First DNS Select From ISP if your ISP dynamically assigns DNS server information Server (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Second DNS Server Select User-Defined if you have the IP address of a DNS server.
Seite 109 PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. The NBG4115 supports only one PPTP server connection at any given time. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection.
Seite 110 DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the Second DNS Server right displays the (read-only) DNS server IP address that the ISP assigns.
Seite 111: Mobile 3G
Set WAN MAC Select this option and enter the MAC address you want to use. Address Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. 8.3.4 Mobile 3G 3G is an International Telecommunication Union (ITU) mobile networking standard that provides high-speed connectivity, greater network capacity, and a significantly improved broadcast range to compatible devices.
Seite 112 DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the Second DNS Server right displays the (read-only) DNS server IP address that the ISP assigns.
Seite 113: Advanced
Use this screen to enable Multicast, allow Windows Networking and enable Auto-bridge. Note: The three categories shown in this screen are independent of each other. To change your NBG4115’s advanced WAN settings, click Network > WAN > Advanced. The screen appears as shown. Figure 59 Network > WAN > Advanced The following table describes the labels in this screen.
Seite 114 Select this option to allow NetBIOS packets to initiate calls. Auto-bridge Enable Auto-bridge Select this option to have the NBG4115 switch to bridge mode mode automatically when the NBG4115 gets a WAN IP address in the range of 192.168.x.y (where x and y are from zero to nine) no matter what the LAN IP address is.
Seite 115: Lan
H A P T E R 9.1 Overview This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building.
Seite 116 WAN network as shown next. Figure 60 LAN and WAN IP Addresses The LAN parameters of the NBG4115 are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) •...
Seite 117 Table 41 Network > LAN > IP LABEL DESCRIPTION IP Address Type the IP address of your NBG4115 in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your NBG4115 will automatically calculate the subnet mask based on the IP address that you assign.
Seite 118 Chapter 9 LAN User’s Guide...
Seite 119: Dhcp Server
TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Seite 120: General
Leave the Enable DHCP Server check box selected unless your ISP instructs you to do otherwise. Clear it to disable the NBG4115 acting as a DHCP server. When configured as a server, the NBG4115 provides TCP/IP configuration for the clients.
Seite 121: Advanced
This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. You can also use this screen to configure the DNS server information that the NBG4115 sends to the DHCP clients.
Seite 122: Client List
User-Defined, and enter the same IP address, the second User- Defined changes to None after you click Apply. Select DNS Relay to have the NBG4115 act as a DNS proxy. The NBG4115's LAN IP address displays in the field to the right (read- only).
Seite 123 Reserve Select this check box in the DHCP Setup section to have the NBG4115 always assign the IP address(es) to the MAC address(es) (and host name(s)). After you click Apply, the MAC address and IP address also display in the Advanced screen (where you can edit them).
Seite 124 Chapter 10 DHCP Server User’s Guide...
Seite 125: Nat
You assign the LAN IP addresses to the devices (A to D) connected to your NBG4115. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the NBG4115, which is 192.168.1.1.
Seite 126: What You Can Do In This Chapter
The following terms and concepts may help as you read through this chapter. Inside/Outside This denotes where a host is located relative to the NBG4115, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Seite 127 It replaces the original IP source address in each packet and then forwards it to the Internet. The NBG4115 keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Seite 128: General
A default server receives packets from ports that are not specified in the Application screen. If you do not assign a Default Server IP address, the NBG4115 discards all packets received for ports that are not specified in the Application screen or remote management.
Seite 129: Application
Network > NAT > Application. The screen appears as shown. Note: If you do not assign a Default Server IP address in the NAT > General screen, the NBG4115 discards all packets received for ports that are not specified in this screen or remote management.
Seite 130 Chapter 11 NAT Table 47 NAT Application (continued) LABEL DESCRIPTION Local Port Enter the start and end port(s) to be forwarded. Range Public Port Range Server IP Type the inside IP address of the server that receives packets from the Address port(s) specified in the Port field.
Seite 131: Advanced
Trigger The trigger port is a port (or a range of ports) that causes (or triggers) the NBG4115 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Start Port Type a port number or the starting port number in a range of port numbers.
Seite 132: Technical Reference
Table 48 Network > NAT > Advanced LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. 11.5 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter.
Seite 133: Trigger Port Forwarding
(a "trigger" port). When the NBG4115's WAN port receives a response with a specific port number and protocol ("incoming" port), the NBG4115 forwards the traffic to the LAN IP address of the computer that sent the request. After that computer’s connection for that service closes, another computer on the LAN can use the service in the same manner.
Seite 134: Trigger Port Forwarding Example
Figure 71 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the NBG4115 to record Jane’s computer IP address. The NBG4115 associates Jane's computer IP address with the "incoming"...
Seite 135: Ddns
Use the DDNS screen (Section 12.2 on page 136) to enable DDNS and configure the DDNS settings on the NBG4115. 12.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. What is DDNS?
Seite 136: General
Chapter 12 DDNS 12.2 General To change your NBG4115’s DDNS, click Network > DDNS. The screen appears as shown. Figure 72 Dynamic DNS The following table describes the labels in this screen. Table 49 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Enable Dynamic Select this check box to use dynamic DNS.
Seite 137 Type the IP address of the host name(s). Use this if you have a Address static IP address. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. User’s Guide...
Seite 138 Chapter 12 DDNS User’s Guide...
Seite 139: Security
Security Firewall (141) Content Filtering (147)
Seite 141: Firewall
H A P T E R Firewall 13.1 Overview Use these screens to enable and configure the firewall that protects your NBG4115 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Seite 142: What You Need To Know
It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (click the General tab under Firewall and then click the Enable Firewall check box). The NBG4115's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG4115 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Seite 143 Chapter 13 Firewall The NBG4115 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet.
Seite 144: General
Chapter 13 Firewall 13.2 General Use this screen to enable or disable the NBG4115’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 74 Security > Firewall > General l The following table describes the labels in this screen.
Seite 145 Do not respond Select this option to prevent hackers from finding the NBG4115 by to requests for probing for unused ports. If you select this option, the NBG4115 will not unauthorized respond to port request(s) for unused ports, thus leaving the unused services ports and the NBG4115 unseen.
Seite 146 Chapter 13 Firewall User’s Guide...
Seite 147: Content Filtering
A content filtering profile conveniently stores your custom settings for the following features. Keyword Blocking URL Checking The NBG4115 checks the URL’s domain name (or IP address) and file path separately when performing keyword blocking. The URL’s domain name or IP address is the characters that come before the first slash in the URL.
Seite 148: Filter
URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. Since the NBG4115 checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the NBG4115 would find “tw”...
Seite 149: Technical Reference
Domain Name or IP Address URL Checking By default, the NBG4115 checks the URL’s domain name or IP address when performing keyword blocking. This means that the NBG4115 checks the characters that come before the first slash in the URL.
Seite 150 (or not extend) the keyword blocking search to include the URL's full path. File Name URL Checking Filename URL checking has the NBG4115 check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php.
Seite 151: Management
Management Static Route (153) Bandwidth Management (157) Remote Management (165) UPnP (169)
Seite 153: Static Route
This chapter shows you how to configure static routes for your NBG4115. The NBG4115 usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the NBG4115 send data to devices not reachable through the default gateway, use static routes.
Seite 154: Ip Static Route
NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the remote nodes.
Seite 155: Static Route Setup Screen
NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the Remote Nodes.
Seite 156 Chapter 15 Static Route User’s Guide...
Seite 157: Bandwidth Management
This chapter contains information about configuring bandwidth management and editing rules. ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application. In the figure below, uplink traffic goes from the LAN device (A) to the WAN device (B).
Seite 158: General
Chapter 16 Bandwidth Management Bandwidth Limiting You can limit an application’s uplink or downlink bandwidth. This limit keeps the traffic from using up too much of the out-going interface’s bandwidth. This way you can make sure there is bandwidth for other applications. Use the following guidelines: •...
Seite 159: Advanced
Table 55 Management > Bandwidth MGMT > General LABEL DESCRIPTION Service Management Bandwidth This field allows you to have NBG4115 apply bandwidth management. Management Select Priority Queue or Bandwidth Allocation to enable Type bandwidth management. Select Priority Queue to allocate bandwidth based on the pre-defined priority assigned to an application.
Seite 160 Use this table to allocate specific amounts of bandwidth based on the pre-defined service. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. User’s Guide...
Seite 161 IP or IP range. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. LAN IP Range This displays the range of IP addresses for which the bandwidth management rule applies.
Seite 162: Pre-Configured Gaming Ports
Chapter 16 Bandwidth Management 16.3.1 Pre-Configured Gaming Ports The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in this screen: Table 57 Preconfigured Gaming Ports APPLICATION TCP PORTS UDP PORTS XBox 360...
Seite 163: Predefined Bandwidth Management Services
To WAN applies bandwidth management to traffic from LAN/WLAN to WAN (i.e., uplink). Select Both applies bandwidth management to traffic that the NBG4115 forwards to both the LAN and the WAN. LAN IP Range Specify the range of IP addresses for which the bandwidth management rule applies.
Seite 164: Services And Port Numbers
Online gaming services lets you play multiplayer games on the Internet via broadband technology. One example is Microsoft’s Xbox Live, which uses port 3074. As of this writing, your NBG4115 supports Xbox, Playstation, Battlenet and MSN Game Zone. 16.3.5 Services and Port Numbers Appendix F on page 263 for commonly used services and port numbers.
Seite 165: Remote Management
You have disabled that service in one of the remote management screens. The IP address in the Secured Client IP Address field does not match the client IP address. If it does not match, the NBG4115 will disconnect the session immediately.
Seite 166: Www
Chapter 17 Remote Management Remote Management and NAT When NAT is enabled: • Use the NBG4115’s WAN IP address when configuring from the WAN. • Use the NBG4115’s LAN IP address when configuring from the LAN. System Timeout There is a default system management idle timeout of five minutes (three hundred seconds).
Seite 167 A secured client is a “trusted” computer that is allowed to communicate IP Address with the NBG4115 using this service. Select All to allow any computer to access the NBG4115 using this service. Choose Selected to just allow the computer with the IP address that you specify to access the NBG4115 using this service.
Seite 168 Chapter 17 Remote Management User’s Guide...
Seite 169: Upnp
Use the UPnP screen (Section 18.2 on page 170) to enable UPnP on the NBG4115. 18.1.2 What You Need to Know The following terms and concepts may help as you read through this chapter. How do I know if I'm using UPnP? UPnP hardware is identified as an icon in the Network Connections folder (Windows XP).
Seite 170: General
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG4115 allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration.
Seite 171: Technical Reference
Reset Click Reset to begin configuring this screen afresh. 18.3 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter. 18.3.1 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP.
Seite 172: Using Upnp In Windows Xp Example
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG4115. Make sure the computer is connected to a LAN port of the NBG4115. Turn on your computer and the NBG4115.
Seite 173 Chapter 18 UPnP Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Figure 89 Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Seite 174 Chapter 18 UPnP You may edit or delete the port mappings or click Add to manually add port mappings. Figure 91 Internet Connection Properties: Advanced Settings Figure 92 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Seite 175 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG4115 without finding out the IP address of the NBG4115 first. This comes helpful if you do not know the IP address of the NBG4115. Follow the steps below to access the Web Configurator.
Seite 176 Figure 95 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG4115 and select Invoke. The Web Configurator login screen displays. Figure 96 Network Connections: My Network Places...
Seite 177 Chapter 18 UPnP Right-click on the icon for your NBG4115 and select Properties. A properties window displays with basic information about the NBG4115. Figure 97 Network Connections: My Network Places: Properties: Example User’s Guide...
Seite 178 Chapter 18 UPnP User’s Guide...
Seite 179: Maintenance And Troubleshooting
Maintenance and Troubleshooting System (181) Logs (187) Tools (189) Sys OP Mode (195) Language (199) Troubleshooting (201)
Seite 181: System
183) to change your NBG4115’s time and date. 19.2 General Use this screen to enter a name to identify the NBG4115 in the network and set the password. Click Maintenance > System. The following screen displays. Figure 98 Maintenance > System > General...
Seite 182 DESCRIPTION System Setup System Name System Name is a unique name to identify the NBG4115 in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name).
Seite 183: Time Setting
Chapter 19 System 19.3 Time Setting To change your NBG4115’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the NBG4115’s time based on your local time zone. Figure 99 Maintenance > System > Time Setting he following table describes the labels in this screen.
Seite 184 When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the NBG4115 get the time and date Server from the time server you specified below.
Seite 185 Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh.
Seite 186 Chapter 19 System User’s Guide...
Seite 187: Logs
This chapter contains information about configuring general log settings and viewing the NBG4115’s logs. Refer to the appendices for example log message explanations. The Web Configurator allows you to look at all of the NBG4115’s logs in one location. 20.1.1 What You Can Do in this Chapter Use the View Log screen (Section 20.2 on page...
Seite 188 This is the index number of the log entry. Time This field displays the time the log was recorded. See the chapter on system maintenance and information to configure the NBG4115’s time and date. Message This field states the reason for the log.
Seite 189: Tools
Tools 21.1 Overview This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the NBG4115. 21.1.1 What You Can Do in this Chapter • Use the Firmware screen (Section 21.2 on page 190) to upload firmware to your NBG4115.
Seite 190: Firmware
(.zip) files before you can upload them. Upload Click Upload to begin the upload process. This process may take up to two minutes. Note: Do not turn off the NBG4115 while firmware upload is in progress! User’s Guide...
Seite 191 After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG4115 again. Figure 102 Upload Warning The NBG4115 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Seite 192: Configuration
21.3.1 Backup Configuration Backup configuration allows you to back up (save) the NBG4115’s current configuration to a file on your computer. Once your NBG4115 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Seite 193: Restore Configuration
Upload Click Upload to begin the upload process. Note: Do not turn off the NBG4115 while configuration file upload is in progress After you see a “configuration upload successful” screen, you must then wait one minute before logging into the NBG4115 again.
Seite 194: Back To Factory Defaults
Configurator for more information on the RESET button. 21.4 Restart System restart allows you to reboot the NBG4115 without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the NBG4115 reboot. This does not affect the NBG4115's configuration.
Seite 195: Sys Op Mode
22.1 Overview The Sys OP Mode (System Operation Mode) function lets you configure whether your NBG4115 is a router or AP. You can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device.
Seite 196: General
Chapter 22 Sys OP Mode An AP extends one network and so has just one IP address. All Ethernet ports on the AP have the same IP address. To connect to the Internet, another device, such as a router, is required. Figure 111 IP Address in AP Mode 1 IP Internet...
Seite 197 Chapter 22 Sys OP Mode • In this mode there are both LAN and WAN ports. The LAN Ethernet and WAN Ethernet ports have different IP addresses. • The DHCP server on your device is enabled and allocates IP addresses to other devices on your local network.
Seite 198 Chapter 22 Sys OP Mode User’s Guide...
Seite 199: Language
This chapter shows you how to change the Web Configurator’s display language. 23.2 Language Use this screen to change the language for the Web Configurator display. Click the language you prefer. The Web Configurator language changes after a while without restarting the NBG4115. Figure 115 Language User’s Guide...
Seite 200 Chapter 23 Language User’s Guide...
Seite 201: Troubleshooting
Make sure you are using the power adaptor or cord included with the NBG4115. Make sure the power adaptor or cord is connected to the NBG4115 and plugged in to an appropriate power source. Make sure the power source is turned on.
Seite 202: Nbg4115 Access And Login
IP address from a DHCP server on the network. If your NBG4115 is a DHCP client, you can find your IP address from the DHCP server. This information is only available from the DHCP server which allocates IP addresses on your network.
Seite 203 Appendix B on page 215. Make sure your computer is in the same subnet as the NBG4115. (If you know that there are routers between your computer and the NBG4115, skip this step.) • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address.
Seite 204: Internet Access
AP. • Go to Network > Wireless LAN > General > WDS and check if the NBG4115 is set to bridge mode. Select Disable and try to connect to the Internet again.
Seite 205 Internet, especially peer-to-peer applications. Check the signal strength. If the signal strength is low, try moving the NBG4115 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on).
Seite 206: Resetting The Nbg4115 To Its Factory Defaults
24.5 Resetting the NBG4115 to Its Factory Defaults If you reset the NBG4115, you lose all of the changes you have made. The NBG4115 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Seite 207 Chapter 24 Troubleshooting Check that both the NBG4115 and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG4115. Make sure you allow the NBG4115 to be remotely accessed through the WLAN interface.
Seite 208 Chapter 24 Troubleshooting User’s Guide...
Seite 209: Appendices And Index
Appendices and Index Product Specifications (211) Pop-up Windows, JavaScripts and Java Permissions (215) IP Addresses and Subnetting (223) Setting up Your Computer’s IP Address (233) Wireless LANs (251) Services (263) Legal Information (267) Index (275)
Seite 211: Appendix A Product Specifications
USB Port The NBG4115 has one built-in USB 2.0 type A for 3G connectivity. When a 3G card is plugged in and operational this port functions as a WAN port.
Seite 212 Configuration Backup & Make a copy of the NBG4115’s configuration and put it back on Restoration the NBG4115 later if you decide you want to revert back to an earlier configuration. Network Address Each computer on your network must have its own unique IP Translation (NAT) address.
Seite 213 Time and Date Get the current time and date from an external server when you turn on your NBG4115. You can also set the time manually. These dates and times are then used in logs. Port Forwarding If you have a server (mail or web server for example) on your network, then use this feature to let people access it from the Internet.
Seite 214 Appendix A Product Specifications User’s Guide...
Seite 215: Appendix B Pop-Up Windows, Javascripts And Java Permissions
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the Web Configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Seite 216 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 117 Internet Options: Privacy Click Apply to save this setting.
Seite 217 Appendix B Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 118 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. User’s Guide...
Seite 218 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 119 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the Web Configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Seite 219 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 120 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Seite 220 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 121 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Seite 221 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 122 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. User’s Guide...
Seite 222 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 123 Java (Sun) User’s Guide...
Seite 223: Appendix C Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Seite 224 Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 124 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Seite 225 Appendix C IP Addresses and Subnetting Table 70 Subnet Mask - Identifying Network Number OCTET: OCTET: OCTET: OCTET (192) (168) Network Number 11000000 10101000 00000001 Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits.
Seite 226 Appendix C IP Addresses and Subnetting As these two IP addresses cannot be used for individual hosts, calculate the maximum number of possible hosts in a network as follows: Table 72 Maximum Host Numbers MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0...
Seite 227 Appendix C IP Addresses and Subnetting Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons. In this example, the company network address is 192.168.1.0.
Seite 228 Appendix C IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 126 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of –...
Seite 229 Appendix C IP Addresses and Subnetting Each subnet contains 6 host ID bits, giving 2 - 2 or 62 hosts for each subnet (a host ID of all zeroes is the subnet itself, all ones is the subnet’s broadcast address). Table 74 Subnet 1 LAST OCTET BIT IP/SUBNET MASK...
Seite 230 Appendix C IP Addresses and Subnetting Table 77 Subnet 4 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111).
Seite 231: Subnet Mask
Network Address Translation (NAT) on the NBG4115. Once you have decided on the network number, pick an IP address for your NBG4115 that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Seite 232 Appendix C IP Addresses and Subnetting that you entered. You don't need to change the subnet mask computed by the NBG4115 unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
Seite 233: Appendix D Setting Up Your Computer's Ip Address
P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
Seite 234 Appendix D Setting up Your Computer’s IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 127 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks.
Seite 235 Appendix D Setting up Your Computer’s IP Address Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers.
Seite 236 Appendix D Setting up Your Computer’s IP Address Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 129 Windows 95/98/Me: TCP/IP Properties: DNS Configuration Click the Gateway tab.
Seite 237 Appendix D Setting up Your Computer’s IP Address Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 130 Windows XP: Start Menu User’s Guide...
Seite 238 Appendix D Setting up Your Computer’s IP Address In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT). Figure 131 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 132 Windows XP: Control Panel: Network Connections: Properties User’s Guide...
Seite 239 Appendix D Setting up Your Computer’s IP Address Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 133 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Seite 240 Appendix D Setting up Your Computer’s IP Address • Click Advanced. Figure 134 Windows XP: Internet Protocol (TCP/IP) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Seite 241 Appendix D Setting up Your Computer’s IP Address • Click OK when finished. Figure 135 Windows XP: Advanced TCP/IP Properties In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Seite 242 Appendix D Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 136 Windows XP: Internet Protocol (TCP/IP) Properties Click OK to close the Internet Protocol (TCP/IP) Properties window. Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window.
Seite 243 Appendix D Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 137 Macintosh OS 8/9: Apple Menu User’s Guide...
Seite 244 Appendix D Setting up Your Computer’s IP Address Select Ethernet built-in from the Connect via list. Figure 138 Macintosh OS 8/9: TCP/IP For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: •...
Seite 245 Appendix D Setting up Your Computer’s IP Address Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 139 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. •...
Seite 246 Appendix D Setting up Your Computer’s IP Address For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. •...
Seite 247 Appendix D Setting up Your Computer’s IP Address Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 142 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list.
Seite 248 Appendix D Setting up Your Computer’s IP Address Click the Devices tab. Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 144 Red Hat 9.0: KDE: Network Configuration: Activate After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen.
Seite 249 Appendix D Setting up Your Computer’s IP Address • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
Seite 250: Verifying Settings
Appendix D Setting up Your Computer’s IP Address 24.6.1 Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 149 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500...
Seite 251: Appendix E Wireless Lans
P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS).
Seite 252 Appendix E Wireless LANs with each other. When Intra-BSS is disabled, wireless station A and B can still access the wired network but cannot communicate with each other. Figure 151 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network.
Seite 253 Appendix E Wireless LANs An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless stations within the same ESS must have the same ESSID in order to communicate. Figure 152 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area.
Seite 254 Appendix E Wireless LANs wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. Figure 153 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel.
Seite 255 Appendix E Wireless LANs Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference.
Seite 256 Appendix E Wireless LANs several intermediate rate steps between the maximum and minimum data rates. The IEEE 802.11g data rate and modulation are as follows: Table 81 IEEE 802.11g DATA RATE MODULATION (MBPS) DBPSK (Differential Binary Phase Shift Keyed) DQPSK (Differential Quadrature Phase Shift Keying) 5.5 / 11 CCK (Complementary Code Keying) 6/9/12/18/24/36/...
Seite 257 Appendix E Wireless LANs Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. •...
Seite 258 Appendix E Wireless LANs However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the authentication server may access the password file. In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication.
Seite 259 Appendix E Wireless LANs If this feature is enabled, it is not necessary to configure a default encryption key in the Wireless screen. You may still configure and store keys here, but they will not be used while Dynamic WEP is enabled. Note: EAP-MD5 cannot be used with dynamic WEP key exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption.
Seite 260 Appendix E Wireless LANs TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
Seite 261: Wpa(2)-Psk Application Example
Appendix E Wireless LANs 24.6.2 WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters (including spaces and symbols).
Seite 262 Appendix E Wireless LANs Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features. Table 83 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY...
Seite 263: Appendix F Services
A popular videoconferencing solution from White Pines Software. TCP/UDP 24032 TCP/UDP Domain Name Server, a service that matches web names (e.g. www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation (IPSEC_TUNNEL) Security Protocol) tunneling protocol uses this service. FINGER Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
Seite 264 Appendix F Services Table 84 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide...
Seite 265 Appendix F Services Table 84 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). POP3S This is a more secure version of POP3 that runs over SSL.
Seite 266 Appendix F Services Table 84 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server.
Seite 267: Appendix G Legal Information
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice.
Seite 268 Appendix G Legal Information harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this device does cause harmful interference to radio/television reception, which can be determined by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna.
Seite 269 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications Go to http://www.zyxel.com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. User’s Guide...
Seite 270: End-User License Agreement
Appendix G Legal Information ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should...
Seite 271 Software as long as this License Agreement remains in full force and effect. Ownership of the Software, Documentation and all intellectual property rights therein shall remain at all times with ZyXEL. Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement.
Seite 272 Software (ftp://opensource.zyxel.com), and your use of such material is governed by their respective terms. ZyXEL has provided, as part of the Software package, access to certain third party software as a convenience.
Seite 273 Appendix G Legal Information IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, INDIRECT, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES FOR LOSS OF BUSINESS, LOSS OF PROFITS, BUSINESS INTERRUPTION, OR LOSS OF BUSINESS...
Seite 274 Software and Documentation shall not be assigned by you without the prior written consent of ZyXEL. Any waiver or modification of this License Agreement shall only be effective if it is in writing and signed by both parties hereto.
Seite 275: Index
Index Index content filtering by keyword (in URL) copyright Address Assignment CPU usage alternative subnet mask notation 31, 57 CTS (Clear to Send) AP (Access Point) AP Mode menu overview status screen Daylight saving AP+Bridge DDNS Auto-bridge see also Dynamic DNS service providers DHCP 34, 119...
Seite 276 Internet connection guidelines Ethernet ICMP packets PPPoE. see also PPP over Ethernet network security PPTP Stateful inspection WAN connection ZyXEL device firewall Internet connection wizard firewall Internet Group Multicast Protocol stateful inspection IP Address 117, 128, 129 Firmware upload IP address...
Seite 277 Index and encryption Local Area Network Operating Channel 31, 57 operating mode MAC address 83, 103 cloning 52, 103 MAC address filter peer-to-peer MAC address filtering Point-to-Point Protocol over Ethernet 45, 106 MAC filter Point-to-Point Tunneling Protocol 46, 108 managing the device Pool Size good habits Port forwarding...
Seite 278 Index registration syntax conventions product Sys Op Mode related documentation System General Setup Remote management System Name and NAT System name limitations vs computer name system timeout System restart Reset button 29, 194 Reset the device Restore configuration RF (Radio Frequency) Roaming TCP/IP configuration RTS (Request To Send)
Seite 279 Index WAN (Wide Area Network) WPA, WPA2 WAN advanced WAN IP address 96, 163 WAN IP address assignment WAN MAC address warranty note Web Configurator Xbox Live how to access Overview Web configurator navigating web configurator WEP Encryption WEP encryption WEP key Wildcard Wireless association list...
Seite 280 Index User’s Guide...

ZyXEL NBG4115 Bedienungsanleitung

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

Introduction

Part I: Introduction

Chapter 1 Introduction

Chapter 2 The WPS Button

Chapter 3 The Web Configurator

Chapter 4 Connection Wizard

Chapter 5 AP Mode

Chapter 6 Tutorials

Part II: Network

Network

Chapter 7 Wireless LAN

Chapter 8 WAN

Chapter 9 LAN

Chapter 10

DHCP Server

Chapter 11 NAT

Chapter 12 DDNS

Security

Part III: Security

Chapter 13 Firewall

Chapter 14

Content Filtering

Part IV: Management

Management

Chapter 15 Static Route

Chapter 16 Bandwidth Management

Chapter 17 Remote Management

Chapter 18 Upnp

Part V: Maintenance and Troubleshooting

Maintenance and Troubleshooting

Chapter 19 System

Chapter 20 Logs

Chapter 21 Tools

Chapter 22 Sys OP Mode

Chapter 23 Language

Chapter 24 Troubleshooting

Part VI: Appendices and Index

Appendices and Index

Appendix A Product Specifications

Appendix B Pop-Up Windows, Javascripts and Java Permissions

Appendix C IP Addresses and Subnetting

Appendix D Setting up Your Computer's IP Address

Appendix E Wireless Lans

Appendix F Services

Appendix G Legal Information

Index

Quicklinks

Fehlerbehebung

Verwandte Anleitungen für ZyXEL NBG4115

Inhaltszusammenfassung für ZyXEL NBG4115