Page 1 Simultaneous Dual-Band Wireless N Media Router Default Login Details IMPORTANT! LAN IP http://192.168.1.1 READ CAREFULLY Address BEFORE USE. Password 1234 KEEP THIS GUIDE FOR FUTURE Firmware Version 1.0 REFERENCE. Edition 1, 04/2012 www.zyxel.com www.zyxel.com Copyright © 2012 ZyXEL Communications Corporation...
Page 2 Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG5715 up and running right away. It contains information on setting up your network and configuring for Internet access. NBG5715 User’s Guide...
Page 3: Table Of Contents
User’s Guide ............................13 Introduction .............................15 The WPS Button .............................21 ZyXEL NetUSB Share Center Utility .......................23 Introducing the Web Configurator ......................29 Monitor and Summary ..........................33 NBG5715 Modes .............................39 Easy Mode ..............................41 Router Mode ............................51 Tutorials ..............................57 Technical Reference ..........................65 WAN ................................67 Wireless LAN ............................75...
Page 4 Contents Overview NBG5715 User’s Guide...
Page 5: Table Of Contents
Part I: User’s Guide ..................13 Chapter 1 Introduction............................15 1.1 Overview ............................15 1.2 Applications ............................16 1.3 Ways to Manage the NBG5715 ......................16 1.4 Good Habits for Managing the NBG5715 ..................16 1.5 LEDs ..............................17 1.6 Wall Mounting ...........................19 Chapter 2 The WPS Button..........................21 2.1 Overview ............................21 Chapter 3 ZyXEL NetUSB Share Center Utility....................23...
Page 6 Table of Contents 4.3 Resetting the NBG5715 ........................31 4.3.1 How to Use the RESET Button ....................31 Chapter 5 Monitor and Summary........................33 5.1 Overview ............................33 5.2 What You Can Do in this Chapter .....................33 5.3 The Log Screen ..........................33 5.3.1 View Log ..........................34 5.4 DHCP Table...
Page 7 11.4 The MAC Filter Screen ........................85 11.5 The Wireless LAN Advanced Screen ....................86 11.6 The QoS Screen ..........................87 11.7 The WPS Screen ..........................87 11.8 The WPS Station Screen .........................89 11.9 The Scheduling Screen ........................89 Chapter 12 LAN ..............................91 NBG5715 User’s Guide...
Page 8 Chapter 15 Dynamic DNS ............................109 15.1 Overview ............................109 15.1.1 What You Need To Know .....................109 15.2 The Dynamic DNS Screen ......................109 Chapter 16 Static Route ............................111 16.1 Overview ............................ 111 16.2 The Static Route Screen ......................111 NBG5715 User’s Guide...
Page 9 Bandwidth Management........................143 19.1 Overview ............................143 19.2 What You Can Do this Chapter .....................143 19.3 What You Need To Know ......................143 19.4 General Screen ..........................144 19.5 Advance Screen ...........................144 19.5.1 Rule Configuration: User Defined Service Rule Configuration .........146 NBG5715 User’s Guide...
Page 10 23.2 Power, Hardware Connections, and LEDs ..................167 23.3 NBG5715 Access and Login ......................168 23.4 Internet Access ..........................170 23.5 Resetting the NBG5715 to Its Factory Defaults ................171 23.6 Wireless Router Troubleshooting ....................171 23.7 USB Device Problems ........................172 23.8 ZyXEL NetUSB Share Center Utility Problems ................173...
Page 11 Appendix A Pop-up Windows, JavaScript and Java Permissions ...........175 Appendix B IP Addresses and Subnetting..................185 Appendix C Setting Up Your Computer’s IP Address ..............195 Appendix D Wireless LANs......................223 Appendix E Common Services ......................237 Appendix F Legal Information......................241 Index ..............................247 NBG5715 User’s Guide...
Page 12 Table of Contents NBG5715 User’s Guide...
Page 13: User's Guide
User’s Guide...
Page 15: Introduction
Voice over the Internet (VoIP). There are two USB 2.0 ports on the side panel of your NBG5715. You can connect USB (version 2.0 or lower) memory sticks, USB hard drives, or USB devices for file sharing. The NBG5715 automatically detects the USB devices.
Page 16: Applications
1.2 Applications Your can create the following networks using the NBG5715: • Wired. You can connect network devices via the Ethernet ports of the NBG5715 so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG5715 to access network resources.
Page 17: Leds
1.5 LEDs Look at the LED lights on the front panel to determine the status of the NBG5715. Use the LED button at the side panel of the device to turn the LED lights on or off. If you have already pushed the LED button to the ON position but none of the LEDS are on, make sure the NBG5715 is receiving power and the power is turned on.
Page 18 The NBG5715 is sending or receiving IP traffic. The NBG5715 does not have an IP connection. WLAN 2.4/5G The NBG5715 is ready, but is not sending/receiving data through the 5G wireless LAN. Blinking The NBG5715 is sending/receiving data through the 5G wireless LAN.
Page 19: Wall Mounting
Make sure the screws are fastened well enough to hold the weight of the NBG5715 with the connection cables. Align the holes on the back of the NBG5715 with the screws on the wall. Hang the NBG5715 on the screws.
Page 20 Chapter 1 Introduction Figure 4 Wall Mounting Example NBG5715 User’s Guide...
Page 21: The Wps Button
The WPS Button 2.1 Overview Your NBG5715 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually.
Page 22 Chapter 2 The WPS Button NBG5715 User’s Guide...
Page 23: Zyxel Netusb Share Center Utility
The ZyXEL NetUSB Share Center Utility allows you to work with the USB devices that are connected directly to the NBG5715 as if they are connected directly to your computer. This allows you to easily share USB-based devices such as printers, scanners, portable hard disks, MP3 players, faxes, and digital cameras (to name a few) with all the other people in your home or office as long as they are connected to the NBG5715 and have the ZyXEL NetUSB Share Center Utility installed.
Page 24: The Zyxel Netusb Share Center Utility
Table 3 ZyXEL NetUSB Share Center Utility Main Window Icons ICON DESCRIPTION Configure Server Click to open the NBG5715’s built-in Web Configurator, which you can use to set up the NBG5715 (see Chapter 4 on page 29 for details). Auto-Connect Printer Click this if you want to automatically connect to the printer each time your start your computer.
Page 25: The Menus
Note: You first must install the appropriate drivers for the printer that you intend to use. Delete Auto-Connect Printer This removes the auto-connect option from the selected printer. NBG5715 User’s Guide...
Page 26: The Share Center Configuration Window
This section describes the utility’s configuration window, which allows you to set certain options for the utility. These options do not apply to the USB devices connected to the NBG5715. You can open it by clicking the Tools > Configuration menu command.
Page 27: Manually Connecting To Usb Devices
3.3 Manually Connecting to USB Devices This example shows you how to connect to a USB device over your NBG5715 network. Makes sure that you have first installed the ZyXEL NetUSB Share Center Utility on the computer to which you want to connect the USB devices.
Page 28: Automatically Connecting To A Usb Printer
This example shows you how to set your computer to automatically connect to a shared USB printer over your NBG5715 network each time you log into your computer. Makes sure that you have first installed the ZyXEL NetUSB Share Center Utility.
Page 29: Introducing The Web Configurator
H A PT ER Introducing the Web Configurator 4.1 Overview This chapter describes how to access the NBG5715 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG5715 via Internet browser.
Page 30: Weather Edit
24-hour format, for example 15:00 is 3:00 PM. 4.2.2 Weather Edit You can change the temperature unit and select the location for which you want to know the weather. Click the icon to change the Weather display. Figure 11 Change Weather NBG5715 User’s Guide...
Page 31: Time/Date Edit
4.2.3 Time/Date Edit One timezone can cover more than one country. You can choose a particular country in which the NBG5715 is located and have the NBG5715 display and use the current time and date for its logs. Click the icon to change the Weather display.
Page 32 Chapter 4 Introducing the Web Configurator NBG5715 User’s Guide...
Page 33: Monitor And Summary
• Use the WLAN_2.4G/5G Station Status screen to view the 2.4G wireless stations that are currently associated to the NBG5715 (Section 5.7 on page 37). 5.3 The Log Screen The Web Configurator allows you to look at all of the NBG5715’s logs in one location. NBG5715 User’s Guide...
Page 34: View Log
5.3.1 View Log Use the View Log screen to see the logged messages for the NBG5715. The log wraps around and deletes the old entries after it fills. Select what logs you want to see from the Display drop list. The log choices depend on your settings in the Log Settings screen.
Page 35: Packet Statistics
Reserve Select this if you want to reserve the IP address for this specific MAC address. Apply Click Apply to save your changes back to the NBG5715. Reset Click Cancel to reload the previous configuration for this screen. 5.5 Packet Statistics Click Monitor >...
Page 36: Vpn Monitor
Rx B/s This displays the reception speed in bytes per second on this port. Up Time This is the total time the NBG5715 has been for each session. System Up Time This is the total time the NBG5715 has been on.
Page 37: Wlan_2.4G/5G Station Status
(Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG5715 in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings.
Page 38 Chapter 5 Monitor and Summary NBG5715 User’s Guide...
Page 39: Nbg5715 Modes
• Web Configurator mode. This refers to the Web Configurator interface you want to use for editing NBG5715 features. • Router mode: This is the device mode of the NBG5715. Use this mode to connect the local network to another network, like the Internet. Go to Section 8.2 on page 51...
Page 40 Chapter 6 NBG5715 Modes NBG5715 User’s Guide...
Page 41: Easy Mode
The Web Configurator is set to Easy Mode by default. You can configure several key features of the NBG5715 in this mode. This mode is useful to users who are not fully familiar with some features that are usually intended for network administrators.
Page 42: What You Can Do In This Chapter
• Use this Navigation Panel to opt out of the Easy mode (Section 7.3 on page 42). • Use the Network Map screen to check if your NBG5715 can ping the gateway and whether it is connected to the Internet (Section 7.4 on page 43).
Page 43: Network Map
When you log into the Network Configurator, the Network Map is shown as follows. Figure 22 Network Map The line connecting the NBG5715 to the gateway becomes green when the NBG5715 is able to ping the gateway. It becomes red when the ping initiating from the NBG5715 does not get a response from the gateway.
Page 44: Control Panel
Section 7.5.3 on page 46 to see this screen. Bandwidth MGMT Click this to edit bandwidth management for predefined applications. Switch ON to have the NBG5715 management bandwidth for uplink and downlink traffic according to an application or service. Otherwise, switch OFF. Refer to Section 7.5.4 on page 47...
Page 45: Power Saving
Use this screen to set the day of the week and time of the day when your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. Disabling the wireless capability lowers the energy consumption of the of the NBG5715. Figure 25 Power Saving The following table describes the labels in this screen.
Page 46: Content Filter
In this time format, midnight is 00:00 and progresses up to 24:00. For example, 6:00 PM is 18:00. Apply Click Apply to save your changes back to the NBG5715. Reset Click Reset to begin configuring this screen afresh. 7.5.3 Content Filter Use this screen to restrict access to certain websites, based on keywords contained in URLs, to which you do not want users in your network to open.
Page 47: Bandwidth Mgmt
7.5.5 Firewall Enable this feature to protect the network from Denial of Service (DoS) attacks. The NBG5715 blocks repetitive pings from the WAN that can otherwise cause systems to slow down or hang. Figure 28 Firewall Click OK to close this screen.
Page 48: Wps
Verify Type the password again to confirm. password Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to close this screen. Click this to configure the WPS screen. You can transfer the wireless settings configured here (Wireless Security screen) to another wireless device that supports WPS.
Page 49: Status Screen In Easy Mode
Register to associate to each other and perform the wireless security information synchronization. Exit Click Exit to close this screen. 7.6 Status Screen in Easy Mode In the Network Map screen, click Status to view read-only information about the NBG5715. NBG5715 User’s Guide...
Page 50 The following table describes the labels in this screen. Table 20 Status Screen in Easy Mode ITEM DESCRIPTION Name This is the name of the NBG5715 in the network. You can change this in the Maintenance > General screen in Section 22.3 on page 159. Time This is the current system date and time.
Page 51: Router Mode
Router Mode 8.1 Overview The NBG5715 operates as a router. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the NBG5715 connects the local network (LAN1 ~ LAN4) to the Internet.
Page 52 Click this icon to see the Status page. The information in this screen depends on the device mode you select. Click this icon to see the Monitor navigation menu. Click this icon to see the Configuration navigation menu. Click this icon to see the Maintenance navigation menu. NBG5715 User’s Guide...
Page 53 - CPU Usage This displays what percentage of the NBG5715’s processing ability is currently used. When this percentage is close to 100%, the NBG5715 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Page 54: Navigation Panel
Click Details... to go to the Monitor > VPN Monitor screen (Section 5.4 on page 34). Use this screen to view the active VPN connections. 8.2.1 Navigation Panel Use the sub-menus on the navigation panel to configure NBG5715 features. Figure 34 Navigation Panel: Router Mode NBG5715 User’s Guide...
Page 55 This screen shows the NBG5715’s general device, system and interface status information. Use this screen to access the summary statistics tables. MONITOR Use this screen to view the list of activities recorded by your NBG5715. DHCP Table Use this screen to view current DHCP client information. Packet Statistics Use this screen to view port status and packet specific statistics.
Page 56 This screen shows a summary of the firewall rules, and allows you to edit/add a firewall rule. IPSec VPN General Use this screen to display and manage the NBG5715’s VPN rules (tunnels). SA Monitor Use this screen to display and manage active VPN connections.
Page 57: Tutorials
9.2.1 Push Button Configuration (PBC) Make sure that your NBG5715 is turned on. The wireless LAN is enabled by default. Check if WLAN 2.4G LED is on. If not, you can enable wireless LAN by pressing the WLAN On/Off button on the device’s side panel or in the Network >...
Page 58: Access Point
Chapter 9 Tutorials Note: Your NBG5715 has a WPS button located on its front panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one.
Page 59: Pin Configuration
This may take up to two minutes. Then the wireless client is able to communicate with the NBG5715 securely. The following figure shows you the example to set up wireless network and security on NBG5715 and wireless client (ex. NWD210N in this example) by using PIN method.
Page 60: Configure Wireless Security Without Wps
WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) Follow the steps below to configure the wireless settings on your NBG5715. The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 4.2 on page...
Page 61: Configure Your Notebook
Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG5715 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 62 Chapter 9 Tutorials Select SSID_Example3 and click Connect. Select WPA-PSK and type the security key in the following screen. Click Next. The Confirm Save window appears. Check your settings and click Save to continue. NBG5715 User’s Guide...
Page 63 If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured. NBG5715 User’s Guide...
Page 64 Chapter 9 Tutorials NBG5715 User’s Guide...
Page 65: Technical Reference
Technical Reference...
Page 67: Wan
HAPTER 10.1 Overview This chapter discusses the NBG5715’s WAN screens. Use these screens to configure your NBG5715 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 68 (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG5715, which makes it accessible from an outside network. It is used by the NBG5715 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG5715 tries to access the Internet.
Page 69: Multicast
A and D. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The NBG5715 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
Page 70 Address First DNS Server Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the NBG5715's WAN IP address). The field to the right displays Second DNS the (read-only) DNS server IP address that the ISP assigns.
Page 71: Pppoe Encapsulation
By implementing PPPoE directly on the NBG5715 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG5715 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 72: The Advanced Screen
Click Cancel to begin configuring this screen afresh. 10.5 The Advanced Screen To change your NBG5715’s advanced WAN settings, click Network > WAN > Advanced. The screen appears as shown. You can use this screen to enable multicast. NBG5715 User’s Guide...
Page 73 Select None to disable this feature. This may cause incoming traffic to be dropped or sent to all connected network devices. Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to begin configuring this screen afresh.
Page 74 Chapter 10 WAN NBG5715 User’s Guide...
Page 75: Wireless Lan
This chapter discusses how to configure the wireless network settings in your NBG5715. The NBG5715 is able to function both 2.4G and 5G network at the same time. You can have different wireless settings for 2.4G and 5G. Click Configuration > Network > Wireless LAN 2.4G or Wireless LAN 5G to configure to do so.
Page 76: What You Can Do In This Chapter
(Section 11.2 on page 79). • Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from connecting to the NBG5715 (Section 11.4 on page 85). • Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section 11.5 on page...
Page 77 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG5715 User’s Guide...
Page 78 When you select WPA2 or WPA2-PSK in your NBG5715, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the NBG5715.
Page 79: The General Wireless Lan Screen
11.2 The General Wireless LAN Screen Use this screen to configure the SSIDs of the wireless LAN. Note: If you are configuring the NBG5715 from a computer connected to the wireless LAN and you change the NBG5715’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm.
Page 80 • 802.11b: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the NBG5715. In this mode, all wireless devices can only transmit at the data rates supported by IEEE 802.11b. • 802.11g: allows IEEE 802.11g compliant WLAN devices to associate with the Device.
Page 81: Wireless Security Modes
Both the wireless stations and the access points must use the same WEP key. Your NBG5715 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time.
Page 82 A passphrase functions like a password. In WEP security mode, it is further converted by the NBG5715 into a complicated string that is referred to as the “key”. This key is requested from all devices wishing to connect to a wireless network.
Page 83: Wpa-Psk/Wpa2-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NBG5715 and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 84 This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the NBG5715 even when the NBG5715 is using WPA2-PSK or WPA2. Group Key Update...
Page 85: The Mac Filter Screen
Click Reset to reload the previous configuration for this screen. 11.4 The MAC Filter Screen The MAC filter screen allows you to configure the NBG5715 to give exclusive access to devices (Allow) or exclude devices from accessing the NBG5715 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address.
Page 86: The Wireless Lan Advanced Screen
This field is configurable only when you select Enable in the MAC Address Filter field. Select Allow to permit access to the NBG5715, MAC addresses not listed will be denied access to the NBG5715. Select Deny to block access to the NBG5715, MAC addresses not listed will be allowed to access the NBG5715.
Page 87: The Qos Screen
Set the output power of the NBG5715 in this field. If there is a high density of APs power in an area, decrease the output power of the NBG5715 to reduce interference with other APs.
Page 88 This is the 802.11 mode used. Only compliant WLAN devices can associate with the NBG5715. SSID This is the name of the wireless network (the NBG5715’s first SSID). Security This is the type of wireless security employed by the network.
Page 89: The Wps Station Screen
Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Network > Wireless LAN 2.4G/5G > Scheduling tab. NBG5715 User’s Guide...
Page 90 Off earlier for the WLAN Status the Wireless LAN will turn off between the two times you enter in these fields. Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to reload the previous configuration for this screen.
Page 91: Lan
• Use the IP screen to change the IP address for your NBG5715 (Section 12.4 on page 92). • Use the IP Alias screen to have the NBG5715 apply IP alias to create LAN subnets (Section 12.5 on page 93).
Page 92: Ip Pool Setup
The NBG5715 has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. 12.4 The LAN IP Screen Use this screen to change the IP address for your NBG5715. Click Network > LAN > IP. Figure 56 Network > LAN > IP NBG5715 User’s Guide...
Page 93: The Ip Alias Screen
IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The NBG5715 supports three logical LAN interfaces via its single physical Ethernet interface with the NBG5715 itself as the gateway for each LAN network.
Page 94 Chapter 12 LAN NBG5715 User’s Guide...
Page 95: Dhcp Server
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG5715’s LAN as a DHCP server or disable it. When configured as a server, the NBG5715 provides the TCP/IP configuration for the clients.
Page 96: The Dhcp Server Advanced Screen
MAC addresses. You can also use this screen to configure the DNS server information that the NBG5715 sends to the DHCP clients. To change your NBG5715’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays.
Page 97: The Client List Screen
LAN IP address displays in the field to the right (read-only). The NBG5715 tells the DHCP clients on the LAN that the NBG5715 itself is the DNS server. When a computer on the LAN sends a DNS query to the NBG5715, the NBG5715 forwards the query to the NBG5715's system DNS server (configured in the WAN >...
Page 98 Reserve Select this if you want to reserve the IP address for this specific MAC address. Apply Click Apply to save your changes back to the NBG5715. Reset Click Cancel to reload the previous configuration for this screen. NBG5715 User’s Guide...
Page 99: Nat
You assign the LAN IP addresses to the devices (A to D) connected to your NBG5715. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the NBG5715, which is 192.168.1.1.
Page 100: What You Need To Know
The following terms and concepts may help as you read through this chapter. Inside/Outside This denotes where a host is located relative to the NBG5715, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 101: The Nat General Screen
IP source address in each packet and then forwards it to the Internet. The NBG5715 keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Page 102: The Port Forwarding Screen
To change your NBG5715’s port forwarding settings, click Network > NAT > Port Forwarding. The screen appears as shown. Note: If you do not assign a Default Server, the NBG5715 discards all packets received for ports that are not specified in this screen or remote management.
Page 103 Server IP Address This field displays the inside IP address of the server. Modify Click the Edit icon to open the edit screen where you can modify an existing rule. Click the Remove icon to delete a rule. NBG5715 User’s Guide...
Page 104: Port Forwarding Edit Screen
Table 46 Network > NAT > Port Forwarding (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to begin configuring this screen afresh. 14.3.1 Port Forwarding Edit Screen This screen lets you create or edit a port forwarding rule. Click the Add Port Forward button or a rule’s Edit icon in the Port Forwarding screen to open the following screen.
Page 105: The Nat Advance Screen
Type a port number or the ending port number in a range of port numbers. Trigger The trigger port is a port (or a range of ports) that causes (or triggers) the NBG5715 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Port Type a port number or the starting port number in a range of port numbers.
Page 106: Technical Reference
Chapter 14 NAT 14.5 Technical Reference The following section contains additional technical information about the NBG5715 features described in this chapter. 14.5.1 NATPort Forwarding: Services and Port Numbers A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Page 107: Trigger Port Forwarding
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The NBG5715 records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the NBG5715's WAN port receives a response with a specific port number and protocol ("incoming"...
Page 108: Two Points To Remember About Trigger Ports
Chapter 14 NAT 14.5.5 Two Points To Remember About Trigger Ports Trigger events only happen on data that is going coming from inside the NBG5715 and going to the outside. If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it.
Page 109: Dynamic Dns
IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the NBG5715 or a server in your network. Note: The NBG5715 must have a public global IP address and you should have your registered DDNS account information on hand.
Page 110 (","). Usename Enter your user name. Password Enter the password assigned to you. Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to begin configuring this screen afresh. NBG5715 User’s Guide...
Page 111: Static Route
N3 because it doesn't know that there is a route through the same remote node Router 1 (via gateway Router 2). The static routes are for you to tell the NBG5715 about the networks beyond the remote nodes.
Page 112: Add/Edit Static Route
Modify Click the Edit icon to open a screen where you can modify an existing rule. Click the Remove icon to delete a rule from the NBG5715. Apply Click Apply to save your changes back to the NBG5715.
Page 113 Gateway IP Enter the IP address of the next-hop gateway. The gateway is a router or switch Address on the same segment as your NBG5715's interface(s). The gateway helps forward packets to their destinations. Back Click Back to return to the previous screen without saving.
Page 114 Chapter 16 Static Route NBG5715 User’s Guide...
Page 115: Firewall
Firewall 17.1 Overview Use these screens to enable and configure the firewall that protects your NBG5715 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 116 (click the General tab under Firewall and then click the Enable Firewall check box). The NBG5715's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG5715 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 117: The Firewall General Screen
Keep the firewall in a secured (locked) room. 17.2 The Firewall General Screen Use this screen to enable or disable the NBG5715’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 74 Security > Firewall > General l The following table describes the labels in this screen.
Page 118 Respond to Ping The NBG5715 will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to all incoming LAN and WAN Ping requests.
Page 119 DROP - Traffic matching the conditions of the firewall rule are stopped. Delete Click Delete to remove the firewall rule. Reset Click Reset to start configuring this screen again. Appendix E on page 237 for commonly used services and port numbers. NBG5715 User’s Guide...
Page 120 Chapter 17 Firewall NBG5715 User’s Guide...
Page 121: Ipsec Vpn
Figure 76 IPSec VPN: Overview VPN Tunnel The VPN tunnel connects the NBG5715 (X) and the remote IPSec router (Y). These routers then connect the local network (A) and remote network (B). 18.2 What You Can Do in this Chapter •...
Page 122: What You Need To Know
IP Addresses of the NBG5715 and Remote IPSec Router In the NBG5715, you have to specify the IP addresses of the NBG5715 and the remote IPSec router to establish an IKE SA.
Page 123: Ipsec Sa (Ike Phase 2) Overview
Local Network and Remote Network In an IPSec SA, the local network consists of devices connected to the NBG5715 and may be called the local policy. Similarly, the remote network consists of the devices connected to the remote IPSec router and may be called the remote policy.
Page 124: Edit Vpn Rule
Allow Through Select this check box to send NetBIOS packets through the VPN connection. IPSec Tunnel Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to begin configuring this screen afresh. 18.5 Edit VPN Rule Click on a policy’s Edit icon in the IPSec VPN >...
Page 125: Ikekey Setup
Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended. You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN >...
Page 126 Select Enable to activate this VPN policy. Keep Alive Select this check box to have the NBG5715 automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic. The remote IPSec router must also have keep alive enabled in order for this feature to work.
Page 127 IPSec router. Authentication Method My IP Address Enter the NBG5715's static WAN IP address (if it has one) or leave the field set to 0.0.0.0. The NBG5715 uses its current WAN IP address (static or dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0.
Page 128 When you select Domain Name or E-mail in the Local ID Type field, type a domain name or e-mail address by which to identify this NBG5715 in the Local Content field. Use up to 31 ASCII characters including spaces, although trailing spaces are truncated.
Page 129 For IP, type the IP address of the computer with which you will make the VPN connection. If you configure this field to 0.0.0.0 or leave it blank, the NBG5715 will use the address in the Secure Gateway Address field (refer to the Secure Gateway Address field description).
Page 130: Manual Key Setup
DES - a 56-bit key with the DES encryption algorithm 3DES - a 168-bit key with the DES encryption algorithm The NBG5715 and the remote IPSec router must use the same algorithms and key , which can be used to encrypt and decrypt the message or to generate and verify a message authentication code.
Page 131: Configuring Manual Key
IPSec SA. In IPSec SAs using manual keys, the NBG5715 and remote IPSec router do not establish an IKE SA. They only establish an IPSec SA. As a result, an IPSec SA using manual keys has some characteristics of IKE SA and some characteristics of IPSec SA.
Page 132 If there is a private DNS server that services the VPN, type its IP address here. IPSec VPN) The NBG5715 assigns this additional DNS server to the NBG5715's DHCP clients that have IP addresses in this IPSec rule's range of local addresses.
Page 133 NBG5715. For a specific range of IP addresses, enter the beginning (static) IP address, in a range of computers on your LAN behind your NBG5715. To specify IP addresses on a network by their subnet mask, enter a (static) IP address on the LAN behind your NBG5715.
Page 134 LABEL DESCRIPTION My IP Address Enter the NBG5715's static WAN IP address (if it has one) or leave the field set to 0.0.0.0. The NBG5715 uses its current WAN IP address (static or dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0. If the WAN connection goes down, the NBG5715 uses the dial backup IP address for the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect.
Page 135: The Sa Monitor Screen
Authentication Algorithm fields (described below). Back Click Back to return to the previous screen. Apply Click Apply to save your changes back to the NBG5715. Cancel Click Cancel to restore your previous settings. 18.6 The SA Monitor Screen In the Web Configurator, click Security > IPSec VPN > SA Monitor. Use this screen to display and manage active VPN connections.
Page 136: Ipsec Architecture
Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. 18.7.2 Encapsulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. At the time of writing, the NBG5715 supports Tunnel mode only. NBG5715 User’s Guide...
Page 137: Ike Phases
There are two phases to every IKE (Internet Key Exchange) negotiation – phase 1 (Authentication) and phase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSec. NBG5715 User’s Guide...
Page 138: Negotiation Mode
• Set the IPSec SA lifetime. This field allows you to determine how long the IPSec SA should stay up before it times out. The NBG5715 automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic.
Page 139: Ipsec And Nat
18.7.5 IPSec and NAT Read this section if you are running IPSec on a host computer behind the NBG5715. NAT is incompatible with the AH protocol in both Transport and Tunnel mode. An IPSec VPN using the AH protocol digitally signs the outbound packet, both data payload and headers, with a hash value appended to the packet.
Page 140: Id Type And Content
NBG5715 to distinguish between multiple rules for SAs that connect from remote IPSec routers that have dynamic WAN IP addresses. Regardless of the ID type and content configuration, the NBG5715 does not allow you to save multiple active rules with overlapping local and remote IP addresses.
Page 141: Pre-Shared Key
Remote ID content: tom@yourcompany.com The two NBG5715s in this example cannot complete their negotiation because NBG5715 B’s Local ID type is IP, but NBG5715 A’s Remote ID type is set to E-mail. An “ID mismatched” message displays in the IPSEC LOG.
Page 142 Chapter 18 IPSec VPN NBG5715 User’s Guide...
Page 143: Bandwidth Management
The sum of the bandwidth allotments that apply to the WAN interface (LAN to WAN, WLAN to WAN) must be less than or equal to the Upstream Bandwidth that you configure in the Bandwidth Management Advanced screen (Section 19.5 on page 144). NBG5715 User’s Guide...
Page 144: General Screen
You can also use this screen to configure bandwidth management rule for other services or applications that are not on the pre-defined list of NBG5715. Additionally, you can define the source and destination IP addresses and port for a service or application.
Page 145 This is traffic from WAN to LAN/WLAN. Application List Use this table to allocate specific amounts of bandwidth based on a pre-defined service. This is the number of an individual bandwidth management rule. NBG5715 User’s Guide...
Page 146: Rule Configuration: User Defined Service Rule Configuration
Category This is the category where a service belongs. Service This is the name of the service. Select the check box to have the NBG5715 apply this bandwidth management rule. User-defined Service User-defined Use this table to allocate specific amounts of bandwidth to specific applications Service or services you specify.
Page 147 Table 65 Bandwidth MGMT Rule Configuration: User-defined Service LABEL DESCRIPTION Destination Address Enter the IP address of the destination computer.The NBG5715 applies bandwidth management to the service or application that is entering this computer. Destination Subnet Enter the subnet netmask of the destination of the traffic for which the Netmask bandwidth management rule applies.
Page 148 Chapter 19 Bandwidth Management NBG5715 User’s Guide...
Page 149: Remote Management
Note: The NBG5715 is managed using the Web Configurator. 20.2 What You Can Do in this Chapter • Use the WWW screen to define the interface/s from which the NBG5715 can be managed remotely using the web and specify a secure client that can manage the NBG5715 (Section 20.4...
Page 150: System Timeout
There is a default system management idle timeout of five minutes (three hundred seconds). The NBG5715 automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling. You can change the timeout period in the System screen 20.4 WWW Screen...
Page 151 Select the interface(s) through which a computer may access the NBG5715 using this service. Secured Client IP Select All to allow all computes to access the NBG5715. Address Otherwise, check Selected and specify the IP address of the computer that can access the NBG5715.
Page 152 Chapter 20 Remote Management NBG5715 User’s Guide...
Page 153: Universal Plug-And-Play (Upnp)
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG5715 allows multicast messages on the LAN only. NBG5715 User’s Guide...
Page 154: Upnp Screen
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG5715. Make sure the computer is connected to a LAN port of the NBG5715. Turn on your computer and the NBG5715.
Page 155 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 95 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. Figure 96 Internet Connection Properties: Advanced Settings NBG5715 User’s Guide...
Page 156: Web Configurator Easy Access
21.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG5715 without finding out the IP address of the NBG5715 first. This comes helpful if you do not know the IP address of the NBG5715.
Page 157 Figure 100 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG5715 and select Invoke. The web configurator login screen displays. Figure 101 Network Connections: My Network Places Right-click on the icon for your NBG5715 and select Properties.
Page 158 Chapter 21 Universal Plug-and-Play (UPnP) Figure 102 Network Connections: My Network Places: Properties: Example NBG5715 User’s Guide...
Page 159: Maintenance
• Use the Password screen to change your NBG5715’s system password (Section 22.4 on page 160). • Use the Time screen to change your NBG5715’s time and date (Section 22.5 on page 161). • Use the Firmware Upgrade screen to upload firmware to your NBG5715 (Section 22.6 on page...
Page 160: Password Screen
Click Cancel to begin configuring this screen afresh. 22.4 Password Screen It is strongly recommended that you change your NBG5715's password. If you forget your NBG5715's password (or IP address), you will need to reset the device. See Section 22.7 on page 163 for details.
Page 161: Time Setting Screen
Chapter 22 Maintenance 22.5 Time Setting Screen Use this screen to configure the NBG5715’s time based on your local time zone. To change your NBG5715’s time and date, click Maintenance > Time. The screen appears as shown. Figure 105 Maintenance > Time The following table describes the labels in this screen.
Page 162: Firmware Upgrade Screen
Table 71 Maintenance > Time (continued) LABEL DESCRIPTION Get from Time Select this radio button to have the NBG5715 get the time and date from the Server time server you specified below. User Defined Time Select User Defined Time Server Address and enter the IP address or URL Server Address (up to extended ASCII characters in length) of your time server.
Page 163: Backup/Restore Screen
Firmware Upgrade screen. 22.7 Backup/Restore Screen Backup configuration allows you to back up (save) the NBG5715’s current configuration to a file on your computer. Once your NBG5715 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 164 RESET button. Note: If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG5715 IP address (192.168.1.2). See...
Page 165: The Language Screen
22.8 The Language Screen Use this screen to change the language for the Web Configurator. Select the language you prefer and click Apply. The Web Configurator language changes after a while without restarting the NBG5715. Figure 109 NBG5715 User’s Guide...
Page 166 Chapter 22 Maintenance NBG5715 User’s Guide...
Page 167: Troubleshooting
Disconnect and re-connect the power adaptor or cord to the NBG5715. Make sure the LED button on the side panel of the NBG5715 is at the ON position. If the LED button is turned off, the Power LED should be still on for you to determin if the NBG5715 is receiving power.
Page 168: Nbg5715 Access And Login
The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the NBG5715 by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start >...
Page 169 You cannot log in to the Web Configurator while someone is using Telnet to access the NBG5715. Log out of the NBG5715 in the other session, or ask the person who is logged in to log out. This can happen when you fail to log out properly from your last session. Try logging in again after 5 minutes.
Page 170: Internet Access
Internet, especially peer-to-peer applications. Check the signal strength. If the signal strength is low, try moving the NBG5715 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on).
Page 171: Resetting The Nbg5715 To Its Factory Defaults
I cannot access the NBG5715 or ping any computer from the WLAN. Make sure the wireless LAN is enabled on the NBG5715. Check if the WLAN button is at the ON position. Or you can enable the wireless LAN in the Network > Wireless LAN 2.4G/5G >...
Page 172: Usb Device Problems
Chapter 23 Troubleshooting Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG5715. Make sure you allow the NBG5715 to be remotely accessed through the WLAN interface. Check your remote management settings.
Page 173: Zyxel Netusb Share Center Utility Problems
If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG5715 and try to connect to it again with your computer.
Page 174 Chapter 23 Troubleshooting NBG5715 User’s Guide...
Page 175: Appendix A Pop-Up Windows, Javascript And Java Permissions
You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. NBG5715 User’s Guide...
Page 176 Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. Select Settings…to open the Pop-up Blocker Settings screen. NBG5715 User’s Guide...
Page 177 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. Click Add to move the IP address to the list of Allowed sites. Figure 113 Pop-up Blocker Settings NBG5715 User’s Guide...
Page 178 Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). Click OK to close the window. NBG5715 User’s Guide...
Page 179 From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. Click OK to close the window. NBG5715 User’s Guide...
Page 180 JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. Click OK to close the window. Figure 117 Java (Sun) NBG5715 User’s Guide...
Page 181 You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 118 Mozilla Firefox: TOOLS > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 119 Mozilla Firefox Content Security NBG5715 User’s Guide...
Page 182 Open all pop-ups. Figure 120 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the left- side menu. Select the check boxes as shown in the following screen. NBG5715 User’s Guide...
Page 183 Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 121 Opera: Enabling Java To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 122 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply. NBG5715 User’s Guide...
Page 184 Appendix A Pop-up Windows, JavaScript and Java Permissions NBG5715 User’s Guide...
Page 185: Appendix B Ip Addresses And Subnetting
Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. NBG5715 User’s Guide...
Page 186 Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. NBG5715 User’s Guide...
Page 187 For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. The following table shows some possible subnet masks using both notations. Table 77 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.0 0000 0000 255.255.255.128 1000 0000 255.255.255.192 1100 0000 NBG5715 User’s Guide...
Page 188 The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub- networks, A and B. NBG5715 User’s Guide...
Page 189 Table 78 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.1 192.168.1.0 Broadcast Address: Highest Host ID: 192.168.1.62 192.168.1.63 NBG5715 User’s Guide...
Page 190 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 82 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS NBG5715 User’s Guide...
Page 191 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 NBG5715 User’s Guide...
Page 192 Network Address Translation (NAT) on the NBG5715. Once you have decided on the network number, pick an IP address for your NBG5715 that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 193 More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. NBG5715 User’s Guide...
Page 194 Appendix B IP Addresses and Subnetting Figure 128 Conflicting Computer and Router IP Addresses Example NBG5715 User’s Guide...
Page 195: Appendix C Setting Up Your Computer's Ip Address
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific NBG5715 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 196 Appendix C Setting Up Your Computer’s IP Address In the Control Panel, click the Network Connections icon. Right-click Local Area Connection and then select Properties. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NBG5715 User’s Guide...
Page 197 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. NBG5715 User’s Guide...
Page 198 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG5715 User’s Guide...
Page 199 Appendix C Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. Click the Network and Sharing Center icon. Click Manage network connections. NBG5715 User’s Guide...
Page 200 Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG5715 User’s Guide...
Page 201 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG5715 User’s Guide...
Page 202 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG5715 User’s Guide...
Page 203 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. Click Change adapter settings. Double click Local Area Connection and then select Properties. NBG5715 User’s Guide...
Page 204 Appendix C Setting Up Your Computer’s IP Address Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG5715 User’s Guide...
Page 205 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG5715 User’s Guide...
Page 206 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. The IP settings are displayed as follows. NBG5715 User’s Guide...
Page 207 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. In the System Preferences window, click the Network icon. NBG5715 User’s Guide...
Page 208 Appendix C Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. NBG5715 User’s Guide...
Page 209 • In the Router field, type the IP address of your device. Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. NBG5715 User’s Guide...
Page 210 Figure 129 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. In System Preferences, click the Network icon. NBG5715 User’s Guide...
Page 211 Appendix C Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. NBG5715 User’s Guide...
Page 212 • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NBG5715. Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications >...
Page 213 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. NBG5715 User’s Guide...
Page 214 Appendix C Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. In the Network Settings window, select the connection that you want to configure, then click Properties. NBG5715 User’s Guide...
Page 215 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. NBG5715 User’s Guide...
Page 216 Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. NBG5715 User’s Guide...
Page 217 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). NBG5715 User’s Guide...
Page 218 Appendix C Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. NBG5715 User’s Guide...
Page 219 Appendix C Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. When the Network Card Setup window opens, click the Address tab NBG5715 User’s Guide...
Page 220 Click Next to save the changes and close the Network Card Setup window. If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. NBG5715 User’s Guide...
Page 221 Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 133 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. NBG5715 User’s Guide...
Page 222 Appendix C Setting Up Your Computer’s IP Address Figure 134 openSUSE: Connection Status - KNetwork Manager NBG5715 User’s Guide...
Page 223: Appendix D Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. NBG5715 User’s Guide...
Page 224 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. NBG5715 User’s Guide...
Page 225 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. NBG5715 User’s Guide...
Page 226 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. NBG5715 User’s Guide...
Page 227 Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NBG5715 are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NBG5715 identity.
Page 228 Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the NBG5715 and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features.
Page 229 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. NBG5715 User’s Guide...
Page 230 The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. NBG5715 User’s Guide...
Page 231 Cipher block chaining Message authentication code Protocol (CCMP). TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication server. AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit mathematical algorithm NBG5715 User’s Guide...
Page 232 WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. NBG5715 User’s Guide...
Page 233 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NBG5715 User’s Guide...
Page 234: Security Parameters Summary
An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. NBG5715 User’s Guide...
Page 235 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. NBG5715 User’s Guide...
Page 236 Appendix D Wireless LANs For directional antennas, point the antenna in the direction of the desired coverage area. NBG5715 User’s Guide...
Page 237: Appendix E Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. NBG5715 User’s Guide...
Page 238 REXEC Remote Execution Daemon. RLOGIN Remote Login. RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP Simple File Transfer Protocol. NBG5715 User’s Guide...
Page 239 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. NBG5715 User’s Guide...
Page 240 Appendix E Common Services NBG5715 User’s Guide...
Page 241: Appendix F Legal Information
This publication is subject to change without notice. Trademarks NetUSB is a trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Page 242: Zyxel Limited Warranty
Por medio de la presente ZyXEL declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ ZyXEL ΔΗΛΩΝΕΙ ΟΤΙ εξοπλισμός ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕC. NBG5715 User’s Guide...
Page 243 Indoor and Outdoor (EIRP) (mW) 2400-2483.5 5150-5350 5470-5725 1000 Belgium The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http://www.bipt.be for more details. NBG5715 User’s Guide...
Page 244 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NBG5715 User’s Guide...
Page 245: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. NBG5715 User’s Guide...
Page 246 Appendix F Legal Information NBG5715 User’s Guide...
Page 247: Index
Dynamic DNS Dynamic Host Configuration Protocol dynamic WEP key exchange Certificate Authority DynDNS See CA. DynDNS see also DDNS certifications notices viewing channel 76, 225 interference Configuration EAP Authentication restore encapsulation copyright encryption 77, 231 CPU usage NBG5715 User’s Guide...
Page 248 IKE SA is disconnected IPSec SA. See also VPN. IPSec. See also VPN. hidden node IP pool setup IANA LAN overview IBSS LAN setup ID type and content LAN TCP/IP IEEE 802.11g Link type NBG5715 User’s Guide...
Page 249 Network Address Translation message types server messages server sets shared secret key traversal RADIUS server NAT Traversal registration Navigation Panel product navigation panel related documentation negotiation mode Remote management Network Address Translation and NAT 99, 102 limitations system timeout NBG5715 User’s Guide...
Page 250 Wireless station status System General Setup WAN (Wide Area Network) WAN MAC address warranty note Web Configurator TCP/IP configuration how to access Temporal Key Integrity Protocol (TKIP) Overview Time setting web configurator trademarks WEP Encryption 82, 83 transport mode NBG5715 User’s Guide...
Page 251 WPA-PSK wireless client supplicant with RADIUS application example WPA compatible WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK 231, 232 application example WPA-PSK 231, 232 application example NBG5715 User’s Guide...
Page 252 Index NBG5715 User’s Guide...

ZyXEL Communications NBG5715 User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 The WPS Button

Chapter 3 Zyxel Netusb Share Center Utility

Chapter 4 Introducing the Web Configurator

Chapter 5 Monitor and Summary

Chapter 6 NBG5715 Modes

Chapter 7 Easy Mode

Chapter 8 Router Mode

Chapter 9 Tutorials

Part II: Technical Reference

Technical Reference

Chapter 10 WAN

Chapter 11 Wireless LAN

Chapter 12 LAN

Chapter 13 DHCP Server

Chapter 14 NAT

Chapter 15 Dynamic DNS

Chapter 16 Static Route

Chapter 17 Firewall

Chapter 18 Ipsec VPN

Chapter 19 Bandwidth Management

Chapter 20 Remote Management

Chapter 21 Universal Plug-And-Play (Upnp)

Chapter 22 Maintenance

Chapter 23 Troubleshooting

Appendix A Pop-Up Windows, Javascript and Java Permissions

Appendix B IP Addresses and Subnetting

Appendix C Setting up Your Computer's IP Address

Appendix D Wireless Lans

Appendix E Common Services

Appendix F Legal Information

Index

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications NBG5715

Summary of Contents for ZyXEL Communications NBG5715