Page 2
• Nebula Control Center (NCC) User’s Guide Go to support.zyxel.com to get this User’s Guide on how to manage and provision the NSG using the NCC.More Information Go to support.zyxel.com to find other information on the NSG NSG Series User’s Guide...
Page 4
7.5 Network Tool Screen ........................35 Chapter 8 Troubleshooting..........................37 8.1 Resetting the NSG ........................... 39 8.2 Getting More Troubleshooting Help ..................... 39 Appendix A Customer Support ....................... 40 Appendix B Legal Information ......................46 Index ..............................54 NSG Series User’s Guide...
H A P T E R Introduction 1.1 Overview This chapter introduces the main features and applications of the NSG. The NSG Series consists of the following models: • NSG50 • NSG100 • NSG200 • NSG300 The NSG (Nebula Security Gateway) comes with one or two USB ports for storing the packet capture files and/or diagnostic information in the connected USB storage devices.
Page 6
This User's Guide shows you how to use the web configurator. Access the NSG’s built-in Web Configurator to: • Check the Internet connection if the NSG can’t be managed by the NCC • Check the system status • Configure WAN connection settings • Collect diagnostic information NSG Series User’s Guide...
• Change the NSG’s system password through the NCC occasionally. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. NSG Series User’s Guide...
DESCRIPTION Reset Press the button to return the NSG to the factory defaults. Connect a USB storage device to the USB port to store the following: • Packet capture files • Diagnostic information • System logs NSG Series User’s Guide...
Connect your computer to the CONSOLE port using an Ethernet or DB-9 cable to manage the NSG using CLI commands. You will be prompted to enter your user name and password. 2.1.1 LEDs (Lights) The following are LED descriptions for the NSG series models. Table 3 NSG50/100/200/300 LED Descriptions COLOR...
Page 10
The fans are for cooling the NSG. Make sure they are not obstructed to allow maximum ventilation. Lock Attach a lock-and-cable from the Kensington lock (the small, metal-reinforced, oval hole) to a permanent object, such as a pole, to secure the NSG in place. NSG Series User’s Guide...
Click Login. After you log in for the first time using the default user name and password, you must change the default admin password in the Update Admin Info screen. Type a new password of up to 63 printable characters without spaces, then click Apply. NSG Series User’s Guide...
The title bar icons in the upper right corner provide the following functions. Table 5 Title Bar: Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of the Web Configurator. Help Click this to open the help page for the current screen. NSG Series User’s Guide...
3.0.4 Tables and Lists Web Configurator tables and lists are flexible with several options for how to display their entries. Click a column heading to sort the table’s entries according to that column’s criteria. NSG Series User’s Guide...
Page 14
Figure 13 Resizing a Table Column Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. NSG Series User’s Guide...
Page 15
In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list. Figure 17 Working with Lists NSG Series User’s Guide...
Set the interval for refreshing the information displayed in the widget. Setting (C) Refresh Now (D) Click this to update the widget’s information immediately. Close Widget (E) Click this to close the widget. Use Widget Settings to re-open it. NSG Series User’s Guide...
Page 17
This field displays none if no device is detected. Ready - A USB storage device connected to the NSG is ready for the NSG to use. Unused - The NSG is unable to mount a USB storage device connected to the NSG. NSG Series User’s Guide...
Unknown if the file system of the USB storage device is not supported by the NSG, such as NTFS. Use a USB storage device that supports the FAT16, FAT32, EXT2, or EXT3 file system. Speed This field displays the connection speed the USB storage device supports. NSG Series User’s Guide...
Page 19
OutofSpace - the available disk space is less than the disk space full threshold. • Mounting - the NSG is mounting the USB storage device. • Removing - the NSG is unmounting the USB storage device. • none - the USB device is not connected. NSG Series User’s Guide...
This field displays the name of the interface. IP Address This field displays the current IP address of the interface. If the IP address is 0.0.0.0 (in the IPv4 network), the interface does not have an IP address yet. NSG Series User’s Guide...
Figure 21 Configuration > Interface > Ethernet > Edit (DHCP) Ethernet Fixed IP Select Ethernet Fixed IP if your ISP assigned you a fixed IP address and DNS server information. Specify the IP address, subnet mask, gateway and DNS server address manually. NSG Series User’s Guide...
Page 22
• Select Nailed-Up if you do not want the connection to time out. Configuration > Network > Interface > Ethernet > Edit (Internal Type) Figure 23 Configuration > Network > Interface > Ethernet > Edit (PPPoE) NSG Series User’s Guide...
Figure 24 SSH Communication Over the WAN Example 6.3.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. Figure 25 How SSH v1 Works Example NSG Series User’s Guide...
NSG over SSH. 6.3.4 Configuring SSH Click Configuration > SSH to change your NSG’s Secure Shell settings. Use this screen to specify from which IP address the access can come. Figure 26 Configuration > SSH NSG Series User’s Guide...
Enter “telnet 192.168.1.1 22” at a terminal prompt and press [ENTER]. The computer attempts to connect to port 22 on the NSG (using the default IP address of 192.168.1.1). A message displays indicating the SSH protocol version supported by the NSG. NSG Series User’s Guide...
NSG's password. To access this screen, click Configuration > User. Note: The NSG’s login password is overwritten with what you have configured in the NCC when the NSG is managed by the NCC. Figure 30 Configuration > User NSG Series User’s Guide...
If the USB storage device runs out of space, the NSG will stop storing the packet capture files and diagnostic information on the USB storage device. Save traffic log Select this to store traffic and system logs on the connected USB storage device. data to USB storage NSG Series User’s Guide...
Page 28
Chapter 6 Configuration Table 14 Configuration > USB Storage (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the NSG. Reset Click Reset to return the screen to its last-saved settings. NSG Series User’s Guide...
This is the size of the most recently created diagnostic file. Copy the diagnostic file to Select this to have the NSG create an extra copy of the diagnostic file to a USB storage (if ready) connected USB storage device. NSG Series User’s Guide...
File Name This column displays the label that identifies the file. Size This column displays the size (in bytes) of a file. Last Modified This column displays the date and time that the individual files were saved. NSG Series User’s Guide...
Enabled interfaces (except for virtual interfaces) appear under Available Interfaces. Select interfaces for which to capture packets and click the right arrow button to move them to the Capture Interfaces list. Use the [Shift] and/or [Ctrl] key to select multiple objects. Filter NSG Series User’s Guide...
Page 32
Save data to onboard Select this to have the NSG only store packet capture entries on the NSG. The available storage only storage size is displayed as well. Note: The NSG reserves some onboard storage space as a buffer. NSG Series User’s Guide...
NSG or a connected USB storage device. You can download the files to your computer where you can study them using a packet analyzer (also known as a network or protocol analyzer) such as Wireshark. NSG Series User’s Guide...
This screen lists the files of NSG system logs stored on a connected USB storage device. The files are in comma separated value (csv) format. You can download them to your computer and open them in a tool like Microsoft’s Excel. Figure 36 Maintenance > Diagnostics > System Log NSG Series User’s Guide...
This column displays the date and time that the individual files were saved. 7.5 Network Tool Screen Use this screen to ping or traceroute an IP address. Click Maintenance > Diagnostics > Network Tool to display this screen. Figure 37 Maintenance > Diagnostics > Network Tool NSG Series User’s Guide...
Page 36
Test Click this button to start to ping or run a traceroute. Stop Click this button to terminate the current ping operation or traceroute. Reset Click this button to return the screen to its last-saved settings. NSG Series User’s Guide...
(such as a DSL modem) is working properly. • Make sure that you enter the correct settings in the Configuration > Interface > Ethernet screen. Use the same case as provided by your ISP. NSG Series User’s Guide...
Page 38
• Open your web browser and go to https://portal.myzyxel.com. Sign in with the correct email and password. Click Not a Member Yet if you don't have a myZyxel.com account and create an account. • Then go to https://nebula.zyxel.com using a supported web browser. The NSG can’t be managed by the NCC. NSG Series User’s Guide...
Release the RESET button, and wait for the NSG to restart. You should be able to access the NSG using the default settings. 8.2 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NSG Series User’s Guide...
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 42
Appendix A Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 43
• Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
Page 44
Appendix A Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
Page 45
Appendix A Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NSG Series User’s Guide...
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 47
- For PLUGGABLE EQUIPMENT, the socket-outlet shall be installed near the equipment and shall be easily accessible. • CLASS 1 LASER PRODUCT • APPAREIL À LASER DE CLASS 1 • PRODUCT COMPLIES WITH 21 CFR 1040.10 AND 1040.11. • PRODUIT CONFORME SELON 21 CFR 1040.10 ET 1040.11. NSG Series User’s Guide...
Page 49
You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. Regulatory Notice and Statement (Class B) Model List: NSG50 & NSG100 NSG Series User’s Guide...
Page 50
The following information applies if you use the product within Canada area Innovation, Science and Economic Development Canada ICES Statement CAN ICES-3 (B)/NMB-3(B) EUROPEAN UNION The following information applies if you use the product within the European Union. NSG Series User’s Guide...
Page 51
(Energy-related Products directive) as well as ecodesign requirement laid down in applicable implementing measures, power consumption has satisfied regulation requirements which are: • Network standby power consumption < 8W, and/or • Off mode power consumption < 0.5W, and/or • Standby mode power consumption < 0.5W. NSG Series User’s Guide...
Page 52
Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NSG Series User’s Guide...
Page 53
This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. NSG Series User’s Guide...
LED troubleshooting copyright LEDs current date/time logout customer support Web Configurator device access MAC address troubleshooting range diagnostics managing the device disclaimer good habits model name Firefox firmware Netscape Navigator current version NSG Series User’s Guide...
Page 55
Telnet how connection is established versions with Linux with Microsoft Windows status supported browsers system uptime Telnet with SSH troubleshooting 29, 37 device access Internet access LEDs NSG Series User’s Guide...
Need help?
Do you have a question about the NSG Series and is the answer not in the manual?
Questions and answers