ZyXEL Communications Nebula LTE3301-PLUS User Manual

ZyXEL Communications Nebula LTE3301-PLUS User Manual

Hide thumbs Also See for Nebula LTE3301-PLUS:
Table of Contents

Advertisement

Quick Links

User's Guide
Nebula Mobile Router
Nebula LTE3301-PLUS/Nebula NR5101/Nebula NR7101/Nebula
LTE7461-M602
Default Login Details
LAN IP Address
User Name
Password
Copyright © 2022 Zyxel and/or its affiliates. All Rights Reserved.
http://192.168.1.1
admin
See the Zyxel Device label
Version 1.00 Ed 2, 7/2022

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Nebula LTE3301-PLUS and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for ZyXEL Communications Nebula LTE3301-PLUS

  • Page 1 User’s Guide Nebula Mobile Router Nebula LTE3301-PLUS/Nebula NR5101/Nebula NR7101/Nebula LTE7461-M602 Default Login Details Version 1.00 Ed 2, 7/2022 LAN IP Address http://192.168.1.1 User Name admin Password See the Zyxel Device label Copyright © 2022 Zyxel and/or its affiliates. All Rights Reserved.
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in product features or web configurator brand style.
  • Page 3: Document Conventions

    Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 4: Contents Overview

    Contents Overview Contents Overview User’s Guide ............................15 Introduction ............................16 Hardware Panels ..........................24 Web Configurator ..........................35 Quick Start ............................. 45 Tutorials ..............................48 Technical Reference ........................86 Connection Status ..........................87 Broadband ............................101 Wireless ..............................123 Home Networking ..........................153 Routing ..............................
  • Page 5 Contents Overview Diagnostic ............................296 Troubleshooting and Appendices ....................298 Troubleshooting ..........................299 Nebula Mobile Router User’s Guide...
  • Page 6: Table Of Contents

    Document Conventions ........................3 Contents Overview ..........................4 Part I: User’s Guide..................15 Chapter 1 Introduction ............................16 1.1 Overview ............................16 1.1.1 Feature Differences ......................16 1.1.2 NCC Management ....................... 17 1.1.3 Register Your Zyxel Device Using the Nebula Web Portal ..........18 1.2 Applications for the Zyxel Device ....................
  • Page 7 5.1 Overview ............................48 5.2 Wired Network Setup ........................48 5.2.1 Setting Up an Ethernet Connection ..................48 5.3 WiFi Network Setup ......................... 50 5.3.1 Changing Security on a WiFi Network ................51 5.3.2 Connecting to the Zyxel Device’s WiFi Network Using WPS ..........53 5.3.3 Setting Up a Guest Network ....................
  • Page 8 Chapter 7 Broadband............................101 7.1 Overview ............................101 7.1.1 What You Can Do in this Chapter ..................101 7.1.2 What You Need to Know ....................102 7.1.3 Before You Begin ......................... 102 7.2 Broadband ............................ 102 7.2.1 Add or Edit Internet Connection ..................103 7.3 Ethernet WAN ..........................
  • Page 9 8.9.6 WiFi Protected Setup (WPS) ....................147 Chapter 9 Home Networking ..........................153 9.1 Overview ............................153 9.1.1 What You Can Do in this Chapter ..................153 9.1.2 What You Need To Know ....................153 9.2 LAN Setup ............................154 9.3 Static DHCP ........................... 159 9.3.1 Before You Begin .........................
  • Page 10 11.3.1 Add or Edit Port Triggering Rule ..................191 11.4 DMZ .............................. 192 11.5 ALG ............................... 193 11.6 Technical Reference ........................194 11.6.1 NAT Definitions ........................194 11.6.2 What NAT Does ......................... 195 11.6.3 How NAT Works ........................195 11.6.4 NAT Application ........................ 196 Chapter 12 DNS ..............................198 12.1 DNS Overview ..........................
  • Page 11 16.1 Nebula Overview ........................215 16.2 Nebula ............................215 Chapter 17 Firewall ..............................217 17.1 Overview ............................. 217 17.1.1 What You Need to Know About Firewall ................ 217 17.2 Firewall ............................218 17.2.1 What You Can Do in this Chapter ................... 218 17.3 Firewall General Settings ......................
  • Page 12 20.7 Certificates Technical Reference ..................... 243 20.7.1 Verify a Certificate ......................244 Chapter 21 Log ..............................246 21.1 Log Overview ..........................246 21.1.1 What You Can Do in this Chapter ................... 246 21.1.2 What You Need To Know ....................246 21.2 System Log ..........................247 21.3 Security Log ..........................
  • Page 13 Chapter 28 User Account............................266 28.1 User Account Overview ......................266 28.2 User Account ..........................266 28.2.1 User Account Add or Edit ....................267 Chapter 29 Remote Management ........................269 29.1 Overview ............................. 269 29.1.1 What You Can Do in this Chapter ................... 269 29.2 MGMT Services ..........................
  • Page 14 34.3 Module Upgrade ........................290 Chapter 35 Backup/Restore ..........................292 35.1 Backup/Restore Overview ......................292 35.2 Backup/Restore .......................... 292 35.3 Reboot ............................294 35.4 Schedule Reboot ........................295 Chapter 36 Diagnostic............................296 36.1 Diagnostic Overview ........................296 36.1.1 What You Can Do in this Chapter ................... 296 36.2 Ping/TraceRoute/Nslookup Test/ Speed Test ................
  • Page 15: Part I: User's Guide

    User’s Guide...
  • Page 16: Chapter 1 Introduction

    H A P T E R Introduction 1.1 Overview Zyxel Device refers to the following models: • Nebula LTE3301-PLUS (4G LTE-A Indoor Router) • Nebula NR5101(5G NR Indoor IAD) • Nebula NR7101(5G New Radio Outdoor Router) • Nebula LTE7461-M602(4G LTE-A Outdoor Router) 1.1.1 Feature Differences...
  • Page 17: Ncc Management

    Chapter 1 Introduction Table 1 Feature Differences (continued) NEBULA LTE3301- NEBULA LTE7461- FEATURE/MODEL NEBULA NR5101 NEBULA NR7101 PLUS M602 IGMP Proxy MLD Proxy Fullcone NAT Latency Settings DHCPv6 Neighbor Cells Speed Test XMPP TR-069 Client See the Quick Start Guide for how to do the hardware installation, mounting, and Internet setup. 1.1.2 NCC Management You can manage the Zyxel Device with the Zyxel Nebula Cloud Center.
  • Page 18: Register Your Zyxel Device Using The Nebula Web Portal

    Chapter 1 Introduction Figure 1 NCC Example Network Topology 1.1.3 Register Your Zyxel Device Using the Nebula Web Portal After logging into https://nebula.zyxel.com, the following screen appears. Click GO to start the NCC wizard. Nebula Mobile Router User’s Guide...
  • Page 19 Chapter 1 Introduction The welcome screen displays when you are creating the first organization under your account. Click Let’s Start to begin. Enter a descriptive name for your organization and site. Both names must consist of 1 to 64 characters. Select the time zone of your location.
  • Page 20 Chapter 1 Introduction Enter your Zyxel Device MAC address and serial number. Click the +Add button to register and add the Zyxel Device to the site. You can register multiple Zyxel Device at a time. Click Next to proceed to setting up your WiFi network and guest WiFi network. Note: Your default web configurator login password will be changed when you register your Zyxel Device at NCC.
  • Page 21: Applications For The Zyxel Device

    Chapter 1 Introduction 1.2 Applications for the Zyxel Device See the above table for which applications are supported by your Zyxel Device. Wireless WAN The Zyxel Device can connect to the Internet through a 4G/5G SIM card to access a wireless WAN connection.
  • Page 22 Chapter 1 Introduction Figure 3 Zyxel Device’s Wireless LAN Carrier Aggregation Carrier Aggregation (CA) is a technology to deliver high downlink data rates by combining more than one carrier in the same or different bands together. Figure 4 Zyxel Device’s CA Application Ethernet WAN If you have another broadband modem or router available, you can use the Ethernet WAN port and then connect it to the broadband modem or router.
  • Page 23: How To Manage Your Zyxel Device

    Chapter 1 Introduction Figure 5 Zyxel Device’s Internet Access Application: Ethernet WAN 1.3 How to Manage your Zyxel Device You can use the following way to manage your Zyxel Device. • Web Configurator. This is recommended for everyday management of Zyxel Device using a (supported) web browser.
  • Page 24: Chapter 2 Hardware Panels

    Hardware Panels 2.1 Overview This chapter describes the LEDs and port panels of the Zyxel Device. 2.2 LEDs The following figures show the Zyxel Device LED indicators. Figure 6 Nebula LTE3301-PLUS Figure 7 Nebula NR5101 Nebula Mobile Router User’s Guide...
  • Page 25 Chapter 2 Hardware Panels Figure 8 Nebula NR7101 Figure 9 Nebula LTE7641-M602 None of the LEDs are on if the Zyxel Device is not receiving power. Table 3 Nebula LTE3301-PLUS LED Behavior COLOR STATUS DESCRIPTION POWER White The Zyxel Device is receiving power and ready for use.
  • Page 26 Chapter 2 Hardware Panels Table 3 Nebula LTE3301-PLUS LED Behavior (continued) COLOR STATUS DESCRIPTION WLAN Green The 2.4G wireless network is activated. Blinking The Zyxel Device is setting up a WPS connection with a 2.4G (slow) wireless client. Blinking The Zyxel Device is communicating with 2.4G wireless clients.
  • Page 27: Panel Ports And Buttons

    The Zyxel Device is connected to the Internet. Amber Blinking The Zyxel Device WiFi is on. 2.3 Panel Ports and Buttons The following figures show the panel ports and bottons of the Zyxel Device. Figure 10 Nebula LTE3301-PLUS Nebula Mobile Router User’s Guide...
  • Page 28 Figure 11 Nebula NR5101 Figure 12 Nebula NR7101 Figure 13 Nebula LTE7461-M602 The following table describes the items on the Zyxel Device ports and buttons. Table 7 Nebula LTE3301-PLUS Panel Ports and Buttons LABELS DESCRIPTION ANT1-ANT2 Install the external antennas to strengthen the cellular signal.
  • Page 29 Chapter 2 Hardware Panels Table 8 Nebula NR5101 Panel Ports and Buttons LABELS DESCRIPTION ANT1-ANT2 / Antenna Install the external antennas to strengthen the cellular signal. Note: To use the external antennas, you must set the INT/EXT switch to EXT. The USB port of the Zyxel Device is used for file sharing.
  • Page 30: Wifi/Wps Button

    Use the WiFi/WPS button on the Zyxel Device to turn on or turn off the WiFi network or quickly build a WiFi connection with a WiFi client. 2.3.1.1 Nebula LTE3301-PLUS Follow the steps below to activate WiFi or WPS for Nebula LTE3301-PLUS. Activating WiFi Make sure the power is on.
  • Page 31 Chapter 2 Hardware Panels Press the WiFi/WPS button for more than 5 seconds and release it. Press the WPS button on another WPS-enabled device that is within range of the Zyxel Device. After a WiFi connection is established, the WiFi/WPS LED blinks green. Figure 15 Nebula NR5101 WiFi/WPS Button 2.3.1.3 Nebula NR7101 Follow the steps below to activate WiFi or WPS for Nebula NR7101.
  • Page 32 Chapter 2 Hardware Panels Activating WPS You can quickly set up a secure wireless connection between the Zyxel Device and a WPS-compatible client by adding one device at a time. Ensure WiFi is turned on. Press the WiFi/WPS button for more than 1 second but less than 5 seconds and release it. Please note that pressing more than 5 seconds will turn off WiFi.
  • Page 33: Reset Button

    The password will be reset to the default (see the Zyxel Device label) and the IP address will be reset to 192.168.1.1. Figure 18 Nebula LTE3301-PLUS) Figure 19 Nebula NR5101 Figure 20 Nebula NR7101 Nebula Mobile Router User’s Guide...
  • Page 34 Chapter 2 Hardware Panels Figure 21 Nebula LTE7461-M602 Make sure the Zyxel Device is connected to power and the POWER LED is on. Using a thin object, press the RESET button for more than 5 seconds. Note: If you press the RESET button for less than 5 seconds, the Zyxel Device will reboot. Nebula Mobile Router User’s Guide...
  • Page 35: Chapter 3 Web Configurator

    H A P T E R Web Configurator 3.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is 1024 by 768 pixels.
  • Page 36 Chapter 3 Web Configurator Figure 22 Password Screen Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number.
  • Page 37: Web Configurator Layout

    Chapter 3 Web Configurator Figure 23 Connection Status 3.2 Web Configurator Layout As illustrated above, the main screen is divided into these parts: • A – Settings Icon (Navigation Panel and Side Bar) • B – Layout Icon • C – Main Window Nebula Mobile Router User’s Guide...
  • Page 38: Settings Icon

    Chapter 3 Web Configurator Figure 24 Screen Layout 3.2.1 Settings Icon Click this icon ( to see the side bar and navigation panel. 3.2.1.1 Side Bar The side bar provides some icons on the right hand side. Nebula Mobile Router User’s Guide...
  • Page 39 Chapter 3 Web Configurator Figure 25 Side Bar The icons provide the following functions. Table 11 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Device’s time zone and wireless settings.
  • Page 40 Chapter 3 Web Configurator Figure 26 Navigation Panel Table 12 Navigation Panel Summary LINK FUNCTION Home Use this screen to configure basic Internet access and wireless settings. This screen also shows the network status of the Zyxel Device and computers/devices connected to it. Network Setting Broadband Broadband...
  • Page 41 Chapter 3 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Wireless General Use this screen to configure the wireless LAN settings and WLAN authentication or security settings. Guest/More AP Use this screen to configure multiple BSSs on the Zyxel Device. Use this screen to block or allow wireless traffic from wireless devices of Authentication certain SSIDs and MAC addresses to the Zyxel Device.
  • Page 42 Chapter 3 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Parental Parental Control Use this screen to define time periods and days during which the Zyxel Control Device performs parental control and/or block web sites with the specific URL. Certificates Local Certificates Use this screen to view a summary list of certificates and manage...
  • Page 43: Widget And Check Icons

    Chapter 3 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION TR-069 Client TR-069 Client Use this screen to configure your Zyxel Device to be managed remotely by an Auto Configuration Server (ACS) using TR-069. Time Time Use this screen to change your Zyxel Device’s time and date. E-mail E-mail Use this screen to configure up to two mail servers and sender addresses...
  • Page 44 Chapter 3 Web Configurator Figure 27 Widget and Check Icons Nebula Mobile Router User’s Guide...
  • Page 45: Chapter 4 Quick Start

    H A P T E R Quick Start 4.1 Overview Use the Wizard screens to configure the Zyxel Device’s time zone and wireless settings. Note: See the technical reference chapters for background information on the features in this chapter. 4.2 Quick Start Setup You can click the Wizard icon in the side bar to open the Wizard screens.
  • Page 46: Quick Start Setup - Wifi

    Chapter 4 Quick Start Figure 29 Wizard – Time Zone 4.4 Quick Start Setup – WiFi Turn WiFi on or off. If you keep it on, record the WiFi Name and Password in this screen so you can configure your wireless clients to connect to the Zyxel Device. If you want to show or hide your WiFi password, click the Eye icon ( Click the Keep 2.4G and 5G the same check box to use the same SSID for 2.4G and 5G WiFi networks.
  • Page 47: Quick Start Setup - Finish

    Chapter 4 Quick Start 4.5 Quick Start Setup – Finish Your Zyxel Device saves your WiFi settings and attempts to connect to the Internet. Nebula Mobile Router User’s Guide...
  • Page 48: Chapter 5 Tutorials

    H A P T E R Tutorials 5.1 Overview This chapter shows you how to use the Zyxel Device’s various features. • Wired Network Setup • WiFi Network Setup • Cellular Network Setup • USB Applications • Network Security • Internet Calls •...
  • Page 49 Chapter 5 Tutorials In this example, configure the following information for the Ethernet connection. General Name My ETH Connection Type Ethernet Connection Mode Routing Encapsulation IPoE IPv6/IPv4 Mode IPv4 Only Enter the General settings provided by your Internet service provider. Enter a Name to identify your WAN connection.
  • Page 50: Wifi Network Setup

    Chapter 5 Tutorials Go to the Network Setting > Broadband screen to view the established Ethernet connection. The new connection is displayed on the Broadband screen. 5.3 WiFi Network Setup In this example, you want to set up a WiFi network so that you can use your notebook to access the Internet.
  • Page 51: Changing Security On A Wifi Network

    Chapter 5 Tutorials Figure 31 WiFi Network Setup See the label on the Zyxel Device for the WiFi network settings and then connect manually to the Zyxel Device. Alternatively, you can set up a WiFi network using WPS. See Section 5.3.2 on page 5.3.1 Changing Security on a WiFi Network This example changes the default security settings of a WiFi network to the following: SSID...
  • Page 52 Chapter 5 Tutorials Go to the Wireless > Others screen. Set 802.11 Mode to 802.11b/g/n Mixed, and then click Apply. Nebula Mobile Router User’s Guide...
  • Page 53: Connecting To The Zyxel Device's Wifi Network Using Wps

    Chapter 5 Tutorials You can now use the WPS feature to establish a WiFi connection between your notebook and the Zyxel Device (see Section 5.3.2 on page 53). Now use the new security settings to connect to the Internet through the Zyxel Device using WiFi. 5.3.2 Connecting to the Zyxel Device’s WiFi Network Using WPS This section shows you how to connect a WiFi device to the Zyxel Device’s WiFi network using WPS.
  • Page 54 Chapter 5 Tutorials In Windows 10, click on the Network icon in the system tray to open the list of available WiFi networks. Locate the WiFi network of the Zyxel Device. The default WiFi network name is “Zyxel_XXXX” (2.4G) or “Zyxel_XXXX_5G”...
  • Page 55 Chapter 5 Tutorials The Zyxel Device sends the WiFi network settings to Windows using WPS. Windows displays “Getting settings from the router”. Nebula Mobile Router User’s Guide...
  • Page 56 Chapter 5 Tutorials The WiFi device is then able to connect to the WiFi network securely. 5.3.2.2 WPS PIN Configuration The WPS PIN (Personal Identification Number) method is a more secure version of WPS, used by WiFi- enabled devices such as printers. To use this connection method, you need to log into the Zyxel Device’s Web Configurator.
  • Page 57: Setting Up A Guest Network

    Chapter 5 Tutorials Within 2 minutes, enable WPS on the WiFi device. The Zyxel Device authenticates the WiFi device using the PIN, and then sends the WiFi network settings to the device using WPS. This process may take up to 2 minutes. The WiFi device is then able to connect to the WiFi network securely.
  • Page 58 Chapter 5 Tutorials • Employees using the General WiFi network group will have access to the local network and the Internet. • Visitors using the Guest WiFi network group with a different SSID and password will have access to the Internet only.
  • Page 59 Chapter 5 Tutorials Go to the Network Setting > Wireless > Guest/More AP screen. Click the Modify icon to configure the second WiFi network group. On the Guest/More AP screen, click the Modify icon to configure the other Guest WiFi network group. Configure the screen using the provided parameters and click OK.
  • Page 60 Chapter 5 Tutorials Check the status of Guest in the Guest/More AP screen. A yellow bulb under Status means the SSID is active and ready for WiFi access. Nebula Mobile Router User’s Guide...
  • Page 61: Setting Up Two Guest Wifi Networks On Different Wifi Bands

    Chapter 5 Tutorials 5.3.4 Setting Up Two Guest WiFi Networks on Different WiFi Bands In this example, a company wants to create two Guest WiFi networks: one for the Guest group and the other for the VIP group as shown in the following figure. Each network will have its SSID and security mode to access the internet.
  • Page 62 Chapter 5 Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. Nebula Mobile Router User’s Guide...
  • Page 63 Chapter 5 Tutorials The 2.4G Guest WiFi network is now configured. Go to the Wireless > General screen and set Band to 5GHz to configure the 5G Guest WiFi settings for VIP. Click OK. Nebula Mobile Router User’s Guide...
  • Page 64 Chapter 5 Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. Nebula Mobile Router User’s Guide...
  • Page 65 Chapter 5 Tutorials The 5G VIP WiFi network is now configured. Nebula Mobile Router User’s Guide...
  • Page 66: Cellular Network Setup

    Chapter 5 Tutorials 5.4 Cellular Network Setup 5.4.1 Setting up a Cellular Network Connection This section gives you an example on how to connect to the Internet using over a cellular connection. Insert a SIM Card into your Zyxel Device SIM slot. Make sure this SIM has an active data plan with your Internet Service Provider (ISP).
  • Page 67 Chapter 5 Tutorials Click Add New Share to add a new share. Nebula Mobile Router User’s Guide...
  • Page 68 Chapter 5 Tutorials The Add New Share screen appears. Select your USB device from the Volume drop-down list box. Enter a Description name for the added share to identify the device. Click Browse and the Browse Directory screen appears. On the Browse Directory screen, select the folder that you want to add as a share. In this example, select BobShare and then click OK.
  • Page 69 Chapter 5 Tutorials In Access Level, select Public to let the share to be accessed by all users connected to the Zyxel Device. Otherwise, select Security to let the share to be accessed by specific users to access only. Click OK to save the settings. To set Access level to Security, you need to create one or more users accounts.
  • Page 70 Chapter 5 Tutorials 5.5.1.2 Accessing Your Shared Files From a Computer You can use Windows Explorer to access the USB storage devices connected to the Zyxel Device. Note: This example shows you how to use Microsoft Windows 10 to browse shared files in a share called (usb1_sda)Zoeys file.
  • Page 71: Network Security

    Chapter 5 Tutorials 5.6 Network Security This section shows you how to configure a Firewall rule, Parental Control rule, and MAC Filter rule. 5.6.1 Configuring a Firewall Rule You can enable the firewall to protect your LAN computers from malicious attacks from the Internet. Go to the Security >...
  • Page 72: Parental Control

    Chapter 5 Tutorials Click Add New Rule and use the following fields to configure and apply a new ACL (Access Control List) rule. Filter Name: Enter a name to identify the firewall rule. Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service.
  • Page 73 Chapter 5 Tutorials Note: The style and features of your parental control vary depending on the Zyxel Device you are using. 5.6.2.1 Configuring Parental Control Schedule and Filter Parental Control Profile (PCP) allows you to set up a rule for: •...
  • Page 74 Chapter 5 Tutorials Add New PCP Screen Under General: Select Enable to enable the rule you are configuring. Enter the Parental Control Profile Name given in the above parameter. Select an user this rule applies to in Home Network User, then click Add. You will see the MAC address of the user you just select in Rule List.
  • Page 75 Chapter 5 Tutorials Use the parameter give above to configure the time settings of your schedule. Under Network Service: In Network Service Setting, select Block. Click Add New Service, then use the parameter given above to configure settings for the Internet service you are blocking.
  • Page 76 Chapter 5 Tutorials This example shows you how to block an user from accessing the Internet during time for studying. Use the parameter below to configure a schedule rule. PROFILE NAME START BLOCKING END BLOCKING REPEAT ON Study 8:00 am 11:00 am from Monday to Friday 1:00 pm...
  • Page 77: Configuring A Mac Address Filter

    Chapter 5 Tutorials 5.6.3 Configuring a MAC Address Filter You can use a MAC address filter to exclusively allow or permanently block someone from the WiFi network. This example shows that computer B is not allowed access to the WiFi network. Figure 32 Configure a MAC Address Filter Example Nebula Mobile Router User’s Guide...
  • Page 78: Internet Calls

    Chapter 5 Tutorials Go to the Security > MAC Filter > MAC Filter screen. Under MAC Address Filter, select Enable. Click Add New Rule to add a new entry. Select Active, and then enter the Host Name and MAC Address of computer B.
  • Page 79: Adding A Sip Account

    Chapter 5 Tutorials Enter SIP Service Provider Name of up to 64 ASCII printable characters. Enter SIP Proxy Server Address, SIP REGISTRAR Server Address, and SIP Service Domain provided by your SIP service provider. Click OK to save your settings. 5.7.3 Adding a SIP Account The SIP account must be associated with the SIP service provider configured above.
  • Page 80: Configuring A Phone

    Chapter 5 Tutorials Under General, select Enable SIP Account, and then enter the SIP Account Number. Under Authentication, enter Username and Password. Leave the other settings as default. Click OK to save your settings. 5.7.4 Configuring a Phone You must now configure the phone port to use the SIP account you just configured. Go to the VoiceVoIP >...
  • Page 81: Making A Voip Call

    Chapter 5 Tutorials Click the Modify icon of PHONE1 to configure PHONE1 on your Zyxel Device. The following screen appears. Under SIP1 SIP Account to Make Outgoing Call, select SIP1 to have the phone connected to the first phone port use the registered SIP1 account to make outgoing calls. Under SIP Account(s) to Receive Incoming Call, select SIP1 to have the phone connected to the first phone port receive phone calls for the SIP1 account.
  • Page 82: Making A Volte Phone Call

    Chapter 5 Tutorials Pick up the phone receiver. Dial the VoIP phone number you want to call. 5.7.6 Making a VoLTE Phone Call Follow these steps to make a phone calling using Voice over LTE (VoLTE). Make sure that your SIM card supports VoLTE or Vo3G. Log into the Web Configurator.
  • Page 83: Backing Up The Device Configuration

    Chapter 5 Tutorials This process may take up to 2 minutes to finish. After 2 minutes, log in again and check your new firmware version in the Connection Status screen. 5.8.2 Backing up the Device Configuration Back up a configuration file allows you to return to your previous settings. Go to the Maintenance >...
  • Page 84: Restoring The Device Configuration

    Chapter 5 Tutorials 5.8.3 Restoring the Device Configuration This section shows you how to restore a previously-saved configuration file from your computer to your Zyxel Device. Go to the Maintenance > Backup/Restore screen. Under Restore Configuration, click Browse/Choose File, and then select the configuration file that you want to upload.
  • Page 85 Chapter 5 Tutorials The Zyxel Device automatically restarts after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. Go to the Connection Status page to check the firmware version after the reboot. Nebula Mobile Router User’s Guide...
  • Page 86: Part Ii: Technical Reference

    Part II Technical Reference Technical Reference Nebula Mobile Router User’s Guide...
  • Page 87: Chapter 6 Connection Status

    H A P T E R Connection Status 6.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and wireless settings in this screen. It also shows the network status of the Zyxel Device and computers or devices connected to it.
  • Page 88: Icon And Device Name

    Chapter 6 Connection Status 6.1.2 Icon and Device Name Select an icon and/or enter a name in the Device Name field for a connected device. Click Save to save your changes. Figure 35 Connectivity: Edit 6.1.3 System Info Use this screen to view the basic system information of the Zyxel Device. Figure 36 System Info Click the Arrow icon ( ) to view more information on the status of your firewall and interfaces (WAN,...
  • Page 89 Chapter 6 Connection Status Figure 37 System Info: Detailed Information Each field is described in the following table. Table 14 System Info: Detailed Information LABEL DESCRIPTION Host Name This field displays the Zyxel Device system name. It is used for identification. Model Name This shows the model number of your Zyxel Device.
  • Page 90: Cellular Info

    Chapter 6 Connection Status Table 14 System Info: Detailed Information (continued) LABEL DESCRIPTION Primary DNSv6 This field displays the first DNS server IPv6 address assigned by the ISP. server Secondary This field displays the second DNS server IPv6 address assigned by the ISP. DNSv6 server LAN Information IP Address...
  • Page 91 Chapter 6 Connection Status Figure 38 Cellular Info Click the Arrow icon ( ) to view the more information on the cellular connection. Figure 39 Cellular Info: Detailed Information The following table describes the labels in this screen. Table 15 Cellular Info: Detailed Information LABEL DESCRIPTION Module Information...
  • Page 92 Chapter 6 Connection Status Table 15 Cellular Info: Detailed Information (continued) LABEL DESCRIPTION SIM Card Status This displays the SIM card status: None – the Zyxel Device does not detect that there is a SIM card inserted. Available – the SIM card could either have or does not have PIN code security. Locked –...
  • Page 93 Chapter 6 Connection Status Table 15 Cellular Info: Detailed Information (continued) LABEL DESCRIPTION Band This displays the current cellular band of your Zyxel Device (WCDMA2100). RSSI This displays the strength of the cellular signal between an associated cellular station and the Zyxel Device.
  • Page 94 Chapter 6 Connection Status Table 15 Cellular Info: Detailed Information (continued) LABEL DESCRIPTION RSCP This displays the Received Signal Code Power, which measures the power of channel used by the Zyxel Device. The received signal level, in dBm, is of the CPICH channel (Ref. 3GPP TS 25.133). An undetectable signal is indicated by the lower limit, example –120 dBm.
  • Page 95: Cloud Control Status

    Chapter 6 Connection Status Table 15 Cellular Info: Detailed Information (continued) LABEL DESCRIPTION This displays the Precoding Matrix Indicator (PMI). PMI is for transmission modes 4 (closed loop spatial multiplexing), 5 (multi-user MIMO), and 6 (closed loop spatial multiplexing using a single layer). PMI determines how cellular data are encoded for the antennas to improve downlink rate.
  • Page 96: Wifi Settings

    Chapter 6 Connection Status Each field is described in the following table. Table 16 Cloud Control Status LABEL DESCRIPTION Nebula Discovery Enable this to have the Zyxel Device connect to the NCC and change to the NCC management mode if the Zyxel Device is connected to the Internet and has been registered on the NCC.
  • Page 97: Guest Wifi Settings

    Chapter 6 Connection Status Click the Arrow icon ( ) to configure the SSIDs and/or passwords for your main wireless networks. Click the Eye icon ( ) to display the characters as you enter the WiFi Password. Scanning the QR code is an alternative way to connect your WiFi client to the WiFi network. Select Keep 2.4G and 5G the same to use the same SSID for 2.4 GHz and 5 GHz bands.
  • Page 98 Chapter 6 Connection Status network name) and passwords from this screen. If you want to show or hide your WiFi passwords, click the Eye icon. Figure 43 Guest WiFi Settings Click the Arrow icon ( ) to open the following screen. Use this screen configure the SSIDs and/or passwords for your guest wireless networks.
  • Page 99: Lan

    Chapter 6 Connection Status Table 18 WiFi Settings: Configuration (continued) LABEL DESCRIPTION Hide WiFi network Select this check box to hide the SSID in the outgoing beacon frame so a station cannot name obtain the SSID through scanning using a site survey tool. Note: Disable WPS in the Network Setting >...
  • Page 100 Chapter 6 Connection Status Table 19 Status Screen (continued) LABEL DESCRIPTION Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default). Your Zyxel Device automatically computes the subnet mask based on the IP Address you enter, so do not change this field unless you are instructed to do so.
  • Page 101: Chapter 7 Broadband

    H A P T E R Broadband 7.1 Overview This chapter discusses the Zyxel Device’s Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
  • Page 102: What You Need To Know

    Chapter 7 Broadband • Use the Cellular SMS screen to send and receive SMS messages from the Zyxel Device (Section 7.11 on page 121). Table 20 WAN Setup Overview LAYER-2 INTERFACE INTERNET CONNECTION CONNECTION DSL LINK TYPE MODE ENCAPSULATION CONNECTION SETTINGS Ethernet Routing IPoE...
  • Page 103: Add Or Edit Internet Connection

    Chapter 7 Broadband Figure 48 Network Setting > Broadband The following table describes the labels in this screen. Table 21 Network Setting > Broadband LABEL DESCRIPTION This is the index number of the entry. Name This is the service name of the connection. Type This shows whether it is a cellular or Ethernet connection.
  • Page 104 Chapter 7 Broadband Figure 49 Network Setting > Broadband > Add or Edit New WAN Interface The following table describes the labels in this screen. Table 22 Network Setting > Broadband > Add or Edit New WAN Interface LABEL DESCRIPTION General Click this switch to enable or disable the interface.
  • Page 105 Chapter 7 Broadband Table 22 Network Setting > Broadband > Add or Edit New WAN Interface (continued) LABEL DESCRIPTION IPv4/IPv6 Mode This shows IPv4 IPv6 DualStack. IPv4 IPv6 DualStack allows the Zyxel Device to run IPv4 and IPv6 at the same time. VLAN Click this switch to enable or disable VLAN on this WAN interface.
  • Page 106 Chapter 7 Broadband Table 22 Network Setting > Broadband > Add or Edit New WAN Interface (continued) LABEL DESCRIPTION DHCPC Options Request Options Select Option 43 to have the Zyxel Device get vendor specific information from DHCP packets sent from the DHCP server. Select Option 120 to have the Zyxel Device get an IP address or a fully-qualified domain name of a SIP server from DHCP packets sent from the DHCP server.
  • Page 107: Ethernet Wan

    Chapter 7 Broadband 7.3 Ethernet WAN Use this screen to have a LAN port act as an Ethernet WAN port. When the switch goes to the right, the LAN port acts as an Ethernet WAN port. Otherwise, the LAN port remains as a LAN port. Click Apply to save your changes back to the Zyxel Device.
  • Page 108 Chapter 7 Broadband Figure 51 Network Setting > Broadband > Cellular WAN The following table describes the fields in this screen. Table 23 Network Setting > Broadband > Cellular WAN LABEL DESCRIPTION Antenna Antenna Select Select between External or Internal Antenna for your Zyxel Device. Roaming Data Roaming Click this to enable (...
  • Page 109: Cellular Apn

    Chapter 7 Broadband Table 23 Network Setting > Broadband > Cellular WAN (continued) LABEL DESCRIPTION Network Use this field to allow Zyxel Device to try reconnecting to the base station if the cellular Monitoring connection is lost. After the third try, the Zyxel Device will reboot to try to reconnect with the base station.
  • Page 110: Edit Cellular Apn1/Apn2

    Chapter 7 Broadband Note: This feature is only available on certain models. For details, see the features comparison table at Section 1.1 on page Figure 52 Network Setting > Broadband > Cellular APN The following table describes the labels in this screen. Table 24 Network Setting >...
  • Page 111 Chapter 7 Broadband Figure 53 Network Setting > Broadband > Cellular APN > Edit APN The following table describes the fields in this screen. Table 25 Network Setting > Broadband > Cellular APN > Edit APN LABEL DESCRIPTION Enable Click this to enable ( ) the APN on the Zyxel Device APN Manual Mode Disable this to have the Zyxel Device configure the APN (Access Point Name) of a...
  • Page 112: Using Separate Apns For Data And Management Traffic

    Chapter 7 Broadband Table 25 Network Setting > Broadband > Cellular APN > Edit APN LABEL DESCRIPTION Authentication Type Select the type of authentication method peers use to connect to the Zyxel Device in cellular connections. In Password Authentication Protocol (PAP) peers identify themselves with a user name and password.
  • Page 113 Chapter 7 Broadband Go to Maintenance > Remote Management > MGMT Services. Set WAN Interface used for services to Multi_WAN, and then select Cellular WAN 2. Nebula Mobile Router User’s Guide...
  • Page 114: Cellular Sim Configuration

    Chapter 7 Broadband Go to Maintenance > TR-069 Client. Set WAN Interface used by TR-069 Client to Multi_WAN, and then select Cellular WAN 2. 7.6 Cellular SIM Configuration Use this screen to enter a PIN for your SIM card, in order to prevent others from using it. Entering the wrong PIN code 3 consecutive times locks the SIM card, after which you need a PUK (Personal Unlocking Key) from the service provider to unlock it.
  • Page 115 Chapter 7 Broadband Click Network Setting > Broadband > Cellular SIM. The following screen opens. Figure 54 Network Setting > Broadband > Cellular SIM Note: The PIN is automatically saved in the Zyxel Device. Entering the wrong PIN exceeding a set number of times will lock the SIM card. The following table describes the fields in this screen.
  • Page 116: Cellular Band Configuration

    Chapter 7 Broadband 7.7 Cellular Band Configuration Either select Auto to have the Zyxel Device connect to an available network using the default settings on the SIM card or select the type of the network (NR5G, 4G, 3G) to which you want the Zyxel Device to connect.
  • Page 117: Cellular Plmn Configuration

    Chapter 7 Broadband 7.8 Cellular PLMN Configuration Each service provider has its own unique Public Land Mobile Network (PLMN) number. Either select PLMN Auto Selection to have the Zyxel Device connect to the service provider using the default settings on the SIM card, or manually view available PLMNs and select your service provider.
  • Page 118 Chapter 7 Broadband Figure 58 Network Setting > Broadband > Cellular PLMN > Manual Scan The following table describes the labels in this screen. Table 29 Network Setting > Broadband > Cellular PLMN > Manual Scan LABEL DESCRIPTION Click the radio button so the Zyxel Device connects to this ISP. Status This shows Current to show the ISP the Zyxel Device is currently connected to.
  • Page 119: Cellular Ip Passthrough

    Chapter 7 Broadband 7.9 Cellular IP Passthrough Enable IP Passthrough to allow Internet traffic to go to a LAN computer behind the Zyxel Device without going through NAT. Click Network Setting > Broadband > Cellular IP Passthrough to display the following screen. Note: This screen is not available when the fourth LAN port acts as an Ethernet WAN port.
  • Page 120: Cellular Lock

    Chapter 7 Broadband Table 30 Network Setting > Broadband > Cellular IP Passthrough (continued) LABEL DESCRIPTION Passthrough Select Dynamic to allow traffic to be forwarded to the first LAN computer on the local network of Mode the Zyxel Device. Select Fixed to allow traffic to be forwarded to a specific computer (for example, Client A) by entering its MAC address.
  • Page 121: Cellular Sms

    Chapter 7 Broadband Table 31 Cellular Lock (continued) LABEL DESCRIPTION Cancel Click this to exit this screen without saving. Apply Click this to save your changes. 7.11 Cellular SMS Use this screen to send and receive SMS messages using the SIM card installed in the Zyxel Device. Click Network Setting >...
  • Page 122: Send New Message Screen

    Chapter 7 Broadband 7.11.1 Send New Message Screen Use this screen to send an SMS message from the Zyxel Device. Go to Network Setting > Broadband > Cellular SMS and click Add New Message to view this screen. Figure 63 Send New Message The following table describes the fields in this screen.
  • Page 123: Wireless

    H A P T E R Wireless 8.1 Overview This chapter describes the Zyxel Device’s Network Setting > Wireless screens. Use these screens to set up your Zyxel Device’s WiFi network and security settings. 8.1.1 What You Can Do in this Chapter This section describes the Zyxel Device’s Wireless screens.
  • Page 124: Wireless General Settings

    Chapter 8 Wireless WiFi6 / IEEE 802.11ax WiFi6 is backwards compatible with IEEE 802.11a/b/g/n/ac and is most suitable in areas with a high concentration of users. WiFi6 devices support Target Wakeup Time (TWT) allowing them to automatically power down when they are inactive. The following table displays the comparison of the different WiFi standards.
  • Page 125 Chapter 8 Wireless Figure 64 Network Setting > Wireless > General The following table describes the general WiFi labels in this screen. Table 35 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Wireless Select Keep the same settings for 2.4G and 5G wireless networks and the 2.4 GHz and 5 GHz wireless networks will use the same SSID and wireless security settings.
  • Page 126: No Security

    Chapter 8 Wireless Table 35 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Bandwidth A standard 20 MHz channel offers transfer speeds of up to 150 Mbps whereas a 40 MHz channel uses two standard channels and offers speeds of up to 300 Mbps. 40 MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase throughput.
  • Page 127: More Secure (Recommended)

    Chapter 8 Wireless Note: If you do not enable any security on your Zyxel Device, your network is accessible to WiFi any wireless networking device that is within range. Figure 65 Wireless > General: No Security The following table describes the labels in this screen. Table 36 Wireless >...
  • Page 128 Chapter 8 Wireless Figure 66 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK Figure 67 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK The following table describes the labels in this screen. Table 37 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK LABEL DESCRIPTION Security Level Select More Secure to enable data encryption.
  • Page 129: Guest/More Ap Screen

    Chapter 8 Wireless Table 37 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK (continued) LABEL DESCRIPTION Generate Select this option to have the Zyxel Device automatically generate a password. The password password field will not be configurable when you select this option. automatically Password Select Generate password automatically or enter a Password.
  • Page 130: The Edit Guest/More Ap Screen

    Chapter 8 Wireless Click Network Setting > Wireless > Guest/More AP. The following screen displays. The following table introduces the supported wireless networks. Table 39 Supported Wireless Networks WIRELESS NETWORKS WHERE TO CONFIGURE Main/1 Network Setting > Wireless > General screen Guest/3 Network Setting >...
  • Page 131 Chapter 8 Wireless Figure 69 Network Setting > Wireless > Guest/More AP > Edit The following table describes the fields in this screen. Table 41 Network Setting > Wireless > Guest/More AP > Edit LABEL DESCRIPTION Wireless Network Setup Wireless Click this switch to enable or disable the wireless LAN in this field.
  • Page 132 Chapter 8 Wireless Table 41 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. Guest WLAN Select this to create Guest WLANs for home and external clients.
  • Page 133: Mac Authentication

    Chapter 8 Wireless Table 41 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving. Click OK to save your changes. 8.4 MAC Authentication Use this screen to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the Zyxel Device (Deny), based on the MAC address of each device.
  • Page 134: Wps

    Chapter 8 Wireless Table 42 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION Add new MAC This field is available when you select Deny or Allow in the MAC Restrict Mode field. address Click this if you want to add a new MAC address entry to the MAC filter list below. WiFi Enter the MAC addresses of the devices that are allowed or denied access to the Zyxel...
  • Page 135 Chapter 8 Wireless Figure 71 Network Setting > Wireless > WPS Figure 72 Network Setting > Wireless > WPS Nebula Mobile Router User’s Guide...
  • Page 136: Wmm

    Chapter 8 Wireless The following table describes the labels in this screen. Table 43 Network Setting > Wireless > WPS LABEL DESCRIPTION General Click to enable ( ) and have the Zyxel Device activate WPS. Otherwise, it is disabled. Add a new device with WPS Method Method 1 PBC Use this section to set up a WPS WiFi network using Push Button Configuration (PBC).
  • Page 137: Others Screen

    Chapter 8 Wireless Figure 73 Network Setting > Wireless > WMM Note: WMM cannot be disabled if 802.11 mode includes 802.11n or 802.11ac. Note: APSD only affects SSID1. For SSID2-SSID4, APSD is always enabled. The following table describes the labels in this screen. Table 44 Network Setting >...
  • Page 138 Chapter 8 Wireless Figure 74 Network Setting > Wireless > Others The following table describes the labels in this screen. Table 45 Network Setting > Wireless > Others LABEL DESCRIPTION RTS/CTS Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS (Clear Threshold To Send) handshake.
  • Page 139 Chapter 8 Wireless Table 45 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION 802.11 Mode For 2.4 GHz frequency WiFi devices: • Select 802.11b Only to allow only IEEE 802.11b compliant WiFi devices to associate with the Zyxel Device. •...
  • Page 140 Chapter 8 Wireless Table 45 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION 802.11 Mode For 2.4 GHz frequency WiFi devices: • Select 802.11b Only to allow only IEEE 802.11b compliant WiFi devices to associate with the Zyxel Device. •...
  • Page 141: Wlan Scheduler

    Chapter 8 Wireless 8.8 WLAN Scheduler Use the WLAN Scheduler screen to create rules to schedule the times to permit Internet traffic from each wireless network interfaces. Select a specific time and day of a week for scheduling. You can also create a rule to automatically switch off all the WLAN together.
  • Page 142: Add Or Edit Rules

    Chapter 8 Wireless Note: If you enable a rule for a specific SSID, you will not be able to connect to other wireless networks. 8.8.1 Add or Edit Rules Click Add New Rule in the WLAN Scheduler screen, or click the Edit icon next to a scheduling rule, and the following screen displays.
  • Page 143: Technical Reference

    Chapter 8 Wireless 8.9 Technical Reference This section discusses wireless LANs in depth. 8.9.1 WiFi Network Overview WiFi networks consist of WiFi clients, access points and bridges. • A WiFi client is a radio connected to a user’s computer. • An access point is a radio with a wired connection to a network, which can connect with numerous WiFi clients and let them access the network.
  • Page 144: Additional Wireless Terms

    Chapter 8 Wireless • If two WiFi networks overlap, they should use a different channel. Like radio stations or television channels, each WiFi network uses a specific channel, or frequency, to send and receive information. • Every device in the same WiFi network must use security compatible with the AP. Security stops unauthorized devices from using the WiFi network.
  • Page 145 Chapter 8 Wireless Because of the damage that can be done by a malicious attacker, it is not just people who have sensitive information on their network who should use security. Everybody who uses any WiFi network should ensure that effective security is in place. A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random and does not include real words.
  • Page 146: Signal Problems

    Chapter 8 Wireless The types of encryption you can choose depend on the type of authentication. (See Section 8.9.3.3 on page 145 for information about this.) Table 49 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA-PSK...
  • Page 147: Wifi Protected Setup (Wps)

    Chapter 8 Wireless 8.9.6 WiFi Protected Setup (WPS) Your Zyxel Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure WiFi network. WPS is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a WiFi network with strong security, without having to configure security settings manually.
  • Page 148 Chapter 8 Wireless device, it presents its PIN to the second device. If the PIN matches, one device sends the network and security information to the other, allowing it to join the network. Take the following steps to set up a WPS connection between an access point or wireless router (referred to here as the AP) and a client device using the PIN method.
  • Page 149 Chapter 8 Wireless Figure 78 Example WPS Process: PIN Method 8.9.6.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
  • Page 150 Chapter 8 Wireless Figure 79 How WPS Works The roles of registrar and enrollee last only as long as the WPS setup process is active (2 minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake;...
  • Page 151 Chapter 8 Wireless Figure 80 WPS: Example Network Step 1 In step 2, you add another WiFi client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network.
  • Page 152 Chapter 8 Wireless Figure 82 WPS: Example Network Step 3 8.9.6.5 Limitations of WPS WPS has some limitations of which you should be aware. • When you use WPS, it works between two devices only. You cannot enroll multiple devices simultaneously, you must enroll one after the other.
  • Page 153: Chapter 9 Home Networking

    H A P T E R Home Networking 9.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
  • Page 154: Lan Setup

    Chapter 9 Home Networking DHCP DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at start-up from a server. This Zyxel Device has a built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa.
  • Page 155 Chapter 9 Home Networking Follow these steps to configure your LAN settings. Enter an IP address into the IP Address field. The IP address must be in dotted decimal notation. This will become the IP address of your Zyxel Device. Enter the IP subnet mask into the IP Subnet Mask field.
  • Page 156 Chapter 9 Home Networking Figure 84 Network Setting > Home Networking > LAN Setup Nebula Mobile Router User’s Guide...
  • Page 157 Chapter 9 Home Networking The following table describes the fields in this screen. Table 50 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name This displays the name of the group that your Zyxel Device belongs to. LAN IP Setup IP Address Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation,...
  • Page 158 Chapter 9 Home Networking Table 50 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION Link Local Address A link-local address uniquely identifies a device on the local network (the LAN). It is similar to Type a “private IP address” in IPv6. You can have the same link-local address on multiple interfaces on a device.
  • Page 159: Static Dhcp

    Chapter 9 Home Networking Table 50 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION IPv6 DNS Server Specify the IP addresses up to three DNS servers for the DHCP clients to use. Use one of the 1 – 3 following ways to specify these IP addresses.
  • Page 160 Chapter 9 Home Networking Figure 85 Network Setting > Home Networking > Static DHCP The following table describes the labels in this screen. Table 51 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Static DHCP Click this to configure a static DHCP entry. Configuration This is the index number of the entry.
  • Page 161: Upnp

    Chapter 9 Home Networking The following table describes the labels in this screen. Table 52 Static DHCP: Static DHCP Configuration LABEL DESCRIPTION Active Select Enable to activate static DHCP in your Zyxel Device Group Name The Group Name is normally Default. IP Type The IP Type is normally IPv4 (non-configurable).
  • Page 162: Technical Reference

    Chapter 9 Home Networking Figure 87 Network Setting > Home Networking > UPnP The following table describes the labels in this screen. Table 53 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP State UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator).
  • Page 163: Dhcp Setup

    Chapter 9 Home Networking LANs, WANs and the Zyxel Device The actual physical connection determines whether the Zyxel Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
  • Page 164: Lan Tcp/Ip

    Chapter 9 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation.
  • Page 165: Turn On Upnp In Windows 10 Example

    Chapter 9 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
  • Page 166 Chapter 9 Home Networking Click Change advanced sharing settings. Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer.
  • Page 167: Auto-Discover Your Upnp-Enabled Network Device

    Chapter 9 Home Networking 9.6.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. Make sure your computer is connected to the LAN port of the Zyxel Device. Open File Explorer and click Network.
  • Page 168 Chapter 9 Home Networking Figure 89 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 90 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. Nebula Mobile Router User’s Guide...
  • Page 169 Chapter 9 Home Networking Figure 91 Internet Connection Properties: Advanced Settings Figure 92 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 93 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network &...
  • Page 170: Web Configurator Easy Access In Windows 10

    Chapter 9 Home Networking Figure 94 Internet Connection Status 9.7 Web Configurator Easy Access in Windows 10 Follow the steps below to access the Web Configurator. Open File Explorer. Click Network. Nebula Mobile Router User’s Guide...
  • Page 171 Chapter 9 Home Networking Figure 95 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 96 Network Connections: Network Infrastructure Right-click the icon for your Zyxel Device and select Properties.
  • Page 172: Dhcp Setup

    Chapter 9 Home Networking Figure 97 Network Connections: Network Infrastructure: Properties: Example 9.7.1 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Zyxel Device as a DHCP server or disable it.
  • Page 173: Lan Tcp/Ip

    Chapter 9 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation.
  • Page 174 Chapter 9 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
  • Page 175: Chapter 10 Routing

    H A P T E R Routing 10.1 Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes.
  • Page 176: Add Or Edit Static Route

    Chapter 10 Routing Figure 99 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 54 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Click this to set up a new static route on the Zyxel Device. Route This is the number of an individual static route.
  • Page 177 Chapter 10 Routing Figure 100 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 55 Network Setting > Routing > Static Route > Add New Static Route LABEL DESCRIPTION Active...
  • Page 178 Chapter 10 Routing In the following figure, router R is connected to the Zyxel Device’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network) to computer B (in N2 network), the traffic is sent to the Zyxel Device’s WAN default gateway by default. In this case, B will never receive the traffic.
  • Page 179 Chapter 10 Routing This tutorial uses the following example IP settings: Table 56 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Zyxel Device’s WAN 172.16.1.1 The Zyxel Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL 192.168.1.34 R’s N1 192.168.1.253 R’s N2...
  • Page 180: Dns Route

    Chapter 10 Routing 10.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting >...
  • Page 181: Add Or Edit Dns Route

    Chapter 10 Routing Table 57 Network Setting > Routing > DNS Route (continued) LABEL DESCRIPTION Subnet Mask This parameter specifies the IP network subnet mask. Modify Click the Edit icon to configure a DNS route on the Zyxel Device. Click the Delete icon to remove a DNS route from the Zyxel Device. 10.3.1 Add or Edit DNS Route You can manually add the Zyxel Device’s DNS route entry.
  • Page 182: Add Or Edit Policy Route

    Chapter 10 Routing through specific connections or distribute traffic across multiple paths for load sharing. Policy-based routing is applied to outgoing packets before the default routing rules are applied. The Policy Route screen let you view and configure routing policies on the Zyxel Device. Click Network Setting >...
  • Page 183 Chapter 10 Routing Figure 104 Network Setting > Routing > Policy Route: Add or Edit The following table describes the labels in this screen. Table 60 Policy Route: Add or Edit LABEL DESCRIPTION Active Click this to enable (turns blue) activation of the policy route. Otherwise, click to disable (turns gray).
  • Page 184: Rip Overview

    Chapter 10 Routing 10.5 RIP Overview Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows the Zyxel Device to exchange routing information with other routers. To activate RIP for the WAN interface, select the supported RIP version and operation. 10.5.1 RIP Click Network Setting >...
  • Page 185: Network Address Translation (Nat)

    H A P T E R Network Address Translation (NAT) 11.1 Overview NAT (Network Address Translation – NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
  • Page 186: Port Forwarding

    Chapter 11 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
  • Page 187: Add Or Edit Port Forwarding

    Chapter 11 Network Address Translation (NAT) Note: TCP port 7547 is reserved for system use. Figure 107 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 62 Network Setting > NAT > Port Forwarding LABEL DESCRIPTION Add New Rule...
  • Page 188 Chapter 11 Network Address Translation (NAT) Figure 108 Network Setting > NAT > Port Forwarding: Add or Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields.
  • Page 189: Port Triggering

    Chapter 11 Network Address Translation (NAT) Table 63 Network Setting > NAT > Port Forwarding: Add or Edit (continued) LABEL DESCRIPTION Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field.
  • Page 190 Chapter 11 Network Address Translation (NAT) Figure 109 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Zyxel Device to record Jane’s computer IP address. The Zyxel Device associates Jane's computer IP address with the "open"...
  • Page 191: Add Or Edit Port Triggering Rule

    Chapter 11 Network Address Translation (NAT) Table 64 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the Zyxel Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN.
  • Page 192: Dmz

    Chapter 11 Network Address Translation (NAT) The following table describes the labels in this screen. Table 65 Network Setting > NAT > Port Triggering: Add or Edit LABEL DESCRIPTION Active Click to enable (blue switch) or disable (gray switch) to activate or deactivate the rule. Service Name Enter a name to identify this rule using keyboard characters (A –...
  • Page 193: Alg

    Chapter 11 Network Address Translation (NAT) Figure 112 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 66 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not Address specified in the Port Forwarding screen.
  • Page 194: Technical Reference

    Chapter 11 Network Address Translation (NAT) Figure 113 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 67 Network Setting > NAT > ALG LABEL DESCRIPTION SIP ALG Click this (switch turns blue) to make sure SIP (VoIP) works correctly with port-forwarding and address-mapping rules.
  • Page 195: What Nat Does

    Chapter 11 Network Address Translation (NAT) NAT never changes the IP address (either local or global) of an outside host. 11.6.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side.
  • Page 196: Nat Application

    Chapter 11 Network Address Translation (NAT) 11.6.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the Zyxel Device can communicate with three distinct WAN networks. Figure 115 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table.
  • Page 197 Chapter 11 Network Address Translation (NAT) Table 69 Services and Port Numbers SERVICES PORT NUMBER SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 Port Forwarding Example Let's say you want to assign ports 21 – 25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
  • Page 198: Dns

    H A P T E R 12.1 DNS Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
  • Page 199: What You Need To Know

    Chapter 12 DNS 12.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.
  • Page 200: Add Or Edit Dns Entry

    Chapter 12 DNS 12.2.1 Add or Edit DNS Entry You can manually add or edit the Zyxel Device’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
  • Page 201 Chapter 12 DNS Figure 119 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 72 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box.
  • Page 202: Chapter 13 Vlan Group

    H A P T E R VLAN Group 13.1 Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.
  • Page 203: Vlan Group Settings

    Chapter 13 VLAN Group 13.2 VLAN Group Settings This screen shows the VLAN groups created on the Zyxel Device. Click Network Setting > VLAN Group to open the following screen. Figure 121 Network Setting > VLAN Group The following table describes the fields in this screen. Table 73 Network Setting >...
  • Page 204 Chapter 13 VLAN Group Figure 122 Add or Edit VLAN Group The following table describes the fields in this screen. Table 74 Add or Edit VLAN Group LABEL DESCRIPTION VLAN Group Enter a name to identify this group. You can enter up to 30 characters. You can use letters, Name numbers, hyphens (–) and underscores (_).
  • Page 205: Chapter 14 Interface Grouping

    H A P T E R Interface Grouping 14.1 Interface Grouping Overview By default, all LAN and WAN interfaces on the Zyxel Device are in the same group and can communicate with each other. Create interface groups to have the Zyxel Device assign IP addresses in different domains to different groups.
  • Page 206: Interface Group Configuration

    Chapter 14 Interface Grouping You can use this screen to create new user-defined interface groups or modify existing ones. Interfaces that do not belong to any user-defined group always belong to the default group. Click Network Setting > Interface Grouping to open the following screen. Figure 124 Network Setting >...
  • Page 207 Chapter 14 Interface Grouping Figure 125 Interface Group Configuration The following table describes the fields in this screen. Table 76 Interface Group Configuration LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (–) and underscores (_).
  • Page 208: Interface Grouping Criteria

    Chapter 14 Interface Grouping Table 76 Interface Group Configuration (continued) LABEL DESCRIPTION Automatically Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware. See Section 14.2.2 on page 208 for more information.
  • Page 209 Chapter 14 Interface Grouping Figure 127 Interface Grouping Criteria The following table describes the fields in this screen. Table 77 Interface Grouping Criteria LABEL DESCRIPTION Source MAC Enter the source MAC address of the packet. Address DHCP Option 60 Select this option and enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware.
  • Page 210: Usb Service

    H A P T E R USB Service 15.1 USB Service Overview You can share files on a USB memory stick or hard drive connected to your Zyxel Device with users on your network. The following figure is an overview of the Zyxel Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Zyxel Device.
  • Page 211: Before You Begin

    Chapter 15 USB Service each partition will be allocated a share. You can also configure a “share” to be a sub-folder or file on the USB device. File Systems A file system is a way of storing and organizing files on your hard drive and storage device. Often different operating systems such as Windows or Linux have different file systems.
  • Page 212 Chapter 15 USB Service Figure 129 Network Setting > USB Service Note: The Share Directory List is only visible when you connect a USB device. Each field is described in the following table. Table 78 Network Setting > USB Service > File Sharing LABEL DESCRIPTION Information...
  • Page 213: Add New Share

    Chapter 15 USB Service Table 78 Network Setting > USB Service > File Sharing (continued) LABEL DESCRIPTION Share Path This field displays the location in the USB of the file you shared. Share This field displays a description of the file you shared. Description Modify Click the Edit icon to change the settings of an existing share.
  • Page 214: Add New User Screen

    Chapter 15 USB Service The following table describes the labels in this menu. Table 79 Network Setting > USB Service > File Sharing LABEL DESCRIPTION Volume Select the volume in the USB storage device that you want to add as a share in the Zyxel Device.
  • Page 215: Chapter 16 Nebula

    H A P T E R Nebula 16.1 Nebula Overview You can manage the Zyxel Device through the Nebula Control Center (NCC), see Section 1.1.2 on page 17 for more information. 16.2 Nebula Use this screen to: • Enable Nebula Discovery to have the Zyxel Device to try to connect to the NCC. •...
  • Page 216 Chapter 16 Nebula Each field is described in the following table. Table 80 Network Setting > Nebula LABEL DESCRIPTION Nebula Slide the switch to the right to enable Nebula Discovery to have the Zyxel Device try to connect Discovery to the NCC. Once the Zyxel Device is connected to and has registered in the NCC, it’ll go into the Nebula cloud management mode.
  • Page 217: Chapter 17 Firewall

    H A P T E R Firewall 17.1 Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall: •...
  • Page 218: Firewall

    Chapter 17 Firewall Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources.
  • Page 219: Firewall General Settings

    Chapter 17 Firewall • Use the Protocol screen to add or remove predefined Internet services and configure firewall rules (Section 17.4 on page 220). • Use the Access Control screen to view and configure incoming or outgoing filtering rules (Section 17.5 on page 221).
  • Page 220: Protocol (Customized Services)

    Chapter 17 Firewall The following table describes the labels in this screen. Table 81 Security > Firewall > General LABEL DESCRIPTION IPv4 Enable firewall protection when using IPv4 (Internet Protocol version 4). Firewall IPv6 Enable firewall protection when using IPv6 (Internet Protocol version 6). Firewall High This setting blocks all traffic to and from the Internet.
  • Page 221: Add Customized Service

    Chapter 17 Firewall Table 82 Security > Firewall > Protocol (continued) LABEL DESCRIPTION Ports/ This shows the port number or range and the IP protocol that defines your customized service. Protocol Number Modify Click this to edit a customized service. 17.4.1 Add Customized Service Add a customized rule or edit an existing rule by specifying the protocol and the port numbers.
  • Page 222: Add New Acl Rule

    Chapter 17 Firewall Figure 136 Security > Firewall > Access Control The following table describes the labels in this screen. Table 84 Security > Firewall > Access Control LABEL DESCRIPTION Rules Storage Space This read-only bar shows how much of the Zyxel Device's memory is in use for recording Usage firewall rules.
  • Page 223 Chapter 17 Firewall Figure 137 Security > Firewall > Access Control > Add New ACL Rule Nebula Mobile Router User’s Guide...
  • Page 224 Chapter 17 Firewall Figure 138 Security > Firewall > Access Control > Add New ACL Rule The following table describes the labels in this screen. Table 85 Security > Firewall > Access Control > Add New ACL Rule LABEL DESCRIPTION Filter Name Type a unique name for your filter rule.
  • Page 225: Dos

    Chapter 17 Firewall Table 85 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL DESCRIPTION Custom Source Port This is a single port number or the starting port number of a range that defines your rule. Custom Destination This is a single port number or the ending port number of a range that defines your rule.
  • Page 226: Firewall Technical Reference

    Chapter 17 Firewall The following table describes the labels in this screen. Table 86 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass Blocking maximum thresholds. Apply Click this to save your changes.
  • Page 227: Guidelines For Security Enhancement With Your Firewall

    Chapter 17 Firewall • WAN to Router By default the Zyxel Device stops computers on the WAN from managing the Zyxel Device. You could configure one of these rules to allow a WAN computer to manage the Zyxel Device. Note: You also need to configure the remote management settings to allow a WAN computer to manage the Zyxel Device.
  • Page 228 Chapter 17 Firewall Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC (Internet Relay Chat) is blocked, are there users that require this service? Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? Does a rule that allows Internet users access to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the LAN, Internet users may be able to...
  • Page 229: Chapter 18 Mac Filter

    H A P T E R MAC Filter 18.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. Every Ethernet device has a unique MAC (Media Access Control) address.
  • Page 230: Add New Rule

    Chapter 18 MAC Filter Table 87 Security > MAC Filter (continued) LABEL DESCRIPTION Add New Rule Click the Add button to create a new entry. This is the index number of the MAC address. Active Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode.
  • Page 231: Chapter 19 Parental Control

    H A P T E R Parental Control 19.1 Parental Control Overview Parental control allows you to limit the time a user can access the Internet and prevent users from viewing inappropriate content or participating in specified online activities. 19.2 Parental Control Schedule and URL Filter Use this screen to enable parental control and view parental control rules and schedules.
  • Page 232: Add Or Edit A Parental Control Profile

    Chapter 19 Parental Control The following table describes the fields in this screen. Table 89 Security > Parental Control LABEL DESCRIPTION General Parental Control Select Enable to activate parental control on the Zyxel Device. Parental Control Profile (PCP) Add new PCP Click this if you want to configure a new Parental Control Profile (PCP).
  • Page 233 Chapter 19 Parental Control Figure 143 Security > Parental Control > Add or Edit PCP (General, Rule List & Internet Access Schedule) Nebula Mobile Router User’s Guide...
  • Page 234 Chapter 19 Parental Control Figure 144 Security > Parental Control > Add or Edit PCP (Network Service & Site/URL Keyword) The following table describes the fields in this screen. Table 90 Security > Parental Control >Add or Edit PCP LABEL DESCRIPTION General Active...
  • Page 235 Chapter 19 Parental Control Table 90 Security > Parental Control >Add or Edit PCP (continued) LABEL DESCRIPTION Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. Site/URL Keyword Block or Allow If you select Block the Web URLs, the Zyxel Device prohibits the users from viewing the Web sites...
  • Page 236 Chapter 19 Parental Control Table 91 Security > Parental Control > Add or Edit PCP > Add New Service (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving any changes. Click OK to save your changes. Add Site/URL Keyword Click Add in the Site/URL Keyword section of the Edit or Add new PCP screen to open the following screen.
  • Page 237: Chapter 20 Certificates

    H A P T E R Certificates 20.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.
  • Page 238 Chapter 20 Certificates Figure 147 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 93 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is Select the check box and enter the private key into the text box to store it on the Zyxel Device.
  • Page 239: Create Certificate Request

    Chapter 20 Certificates 20.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Zyxel Device generate a certification request. To create a certificate signing request, you need to enter a common name, organization name, state or province name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate.
  • Page 240 Chapter 20 Certificates authentication and must be safely stored. The Signing Request contains the certificate signing request value that you will copy upon submitting the certificate request to the CA (certificate authority). Click the View icon in the Local Certificates screen to open the following screen. Figure 149 Certificate Request: View The following table describes the fields in this screen.
  • Page 241: Trusted Ca

    Chapter 20 Certificates Table 95 Certificate Request: View (continued) LABEL DESCRIPTION Certificate This read-only text box displays the certificate in Privacy Enhanced Mail (PEM) format. PEM uses base 64 to convert the binary certificate into a printable form. You can copy and paste the certificate into an email to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution.
  • Page 242: Import Trusted Ca Certificate

    Chapter 20 Certificates Table 96 Security > Certificates > Trusted CA (continued) LABEL DESCRIPTION Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate. Modify Click the View icon to open a screen with an in-depth list of information about the certificate (or certification request).
  • Page 243: View Trusted Ca Certificate

    Chapter 20 Certificates 20.6 View Trusted CA Certificate Use this screen to view in-depth information about the certification authority’s certificate. The certificate text box is read-only and can be distributed to others. Click Security > Certificates > Trusted CA to open the Trusted CA screen. Click the View icon to open the View Certificate screen.
  • Page 244: Verify A Certificate

    Chapter 20 Certificates Certification Authorities A Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner. There are commercial certification authorities like CyberTrust or VeriSign and government certification authorities. Public and Private Keys When using public-key cryptology for authentication, each host has two keys. One key is public and can be made openly available;...
  • Page 245 Chapter 20 Certificates You can use a certificate’s fingerprint to verify it. A certificate’s fingerprint is a message digest calculated using the MD5 or SHA1 algorithms. The following procedure describes how to check a certificate’s fingerprint to verify that you have the actual certificate. Browse to where you have the certificate saved on your computer.
  • Page 246: Chapter 21 Log

    H A P T E R 21.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server.
  • Page 247: System Log

    Chapter 21 Log Table 99 Syslog Severity Levels (continued) CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 21.2 System Log Use the System Log screen to see the system logs.
  • Page 248: Security Log

    Chapter 21 Log 21.3 Security Log Use the Security Log screen to see the security-related logs for the categories that you select. You can filter the entries by selecting a severity level and/or category. Click System Monitor > Log > Security Log to open the following screen.
  • Page 249: Chapter 22 Traffic Status

    H A P T E R Traffic Status 22.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces and NAT. 22.1.1 What You Can Do in this Chapter •...
  • Page 250: Lan Status

    Chapter 22 Traffic Status The following table describes the fields in this screen. Table 102 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Connected This shows the name of the WAN interface that is currently connected. Interface Packets Sent Data...
  • Page 251 Chapter 22 Traffic Status Figure 158 System Monitor > Traffic Status > LAN The following table describes the fields in this screen. Table 103 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Interface This shows the LAN or WLAN interface.
  • Page 252: Arp Table

    H A P T E R ARP Table 23.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network.
  • Page 253 Chapter 23 ARP Table Figure 159 System Monitor > ARP Table The following table describes the labels in this screen. Table 104 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4 / IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to a port. Address MAC Address This is the MAC address of the device with the listed IP address.
  • Page 254: Chapter 24 Routing Table

    H A P T E R Routing Table 24.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 24.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is ‘255.255.255.255’ for a host destination and ‘0.0.0.0’...
  • Page 255 Chapter 24 Routing Table Figure 160 System Monitor > Routing Table The following table describes the labels in this screen. Table 105 System Monitor > Routing Table LABEL DESCRIPTION IPv4 / IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic.
  • Page 256 Chapter 24 Routing Table Table 105 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U–Up: The route is up. !–Reject: The route is blocked and will force a route lookup to fail. G–Gateway: The route uses a gateway to forward traffic. H–Host: The target of the route is a host.
  • Page 257: Chapter 25 Wlan Station Status

    H A P T E R WLAN Station Status 25.1 WLAN Station Status Overview Click System Monitor > WLAN Station Status to open the following screen. Use this screen to view information and status of the wireless stations (wireless clients) that are currently associated with the Zyxel Device.
  • Page 258 Chapter 25 WLAN Station Status Table 106 System Monitor > WLAN Station Status (continued) LABEL DESCRIPTION The Signal-to-Noise Ratio (SNR) is the ratio between the received signal power and the received noise power. The greater the number, the better the quality of WiFi. The normal range is 15 to 40.
  • Page 259: Chapter 26 Cellular Wan Status

    H A P T E R System 27.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 27.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network.
  • Page 260 Chapter 27 System Table 108 Maintenance > System (continued) LABEL DESCRIPTION Cancel Click Cancel to abandon this screen without saving. Apply Click Apply to save your changes. Nebula Mobile Router User’s Guide...
  • Page 261: Chapter 28 User Account

    H A P T E R User Account 28.1 User Account Overview In the User Account screen, you can view the settings of the “admin” and other user accounts that you use to log into the Zyxel Device to manage it. 28.2 User Account Click Maintenance >...
  • Page 262: User Account Add Or Edit

    Chapter 28 User Account Table 109 Maintenance > User Account (continued) LABEL DESCRIPTION Group This field displays whether this user has Administrator or User privileges. Remote This field displays whether this user can access the Zyxel Device with HTTP, Telnet or SSH through Privilege the WAN, LAN or LAN/WAN.
  • Page 263 Table 110 Maintenance > User Account > Add or Edit (continued) LABEL DESCRIPTION Retry Times Enter the number of times consecutive wrong passwords can be entered for this account. 0 means there is no limit. Idle Timeout Enter the length of inactive time before the Zyxel Device will automatically log the user out of the Web Configurator.
  • Page 264: Overview

    H A P T E R Remote Management 29.1 Overview Remote management controls through which interfaces, which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 29.1.1 What You Can Do in this Chapter •...
  • Page 265: Mgmt Services For Ip Passthrough

    Chapter 29 Remote Management Figure 167 Maintenance > Remote Management > MGMT Services The following table describes the fields in this screen. Table 111 Maintenance > Remote Management > MGMT Services> MGMT Services LABEL DESCRIPTION WAN Interface Select Any_WAN to have the Zyxel Device automatically activate the remote management used for services service when any WAN connection is up.
  • Page 266: Trust Domain

    Chapter 29 Remote Management Device. IP Passthrough allows Internet traffic to go to a LAN computer behind the Zyxel Device without going through NAT. Make sure to enable IP Passthrough in Network Setting > Broadband > Cellular IP Passthrough. Click Maintenance > Remote Management > MGMT Services for IP Passthrough to open the following screen.
  • Page 267: Add Trust Domain

    Chapter 29 Remote Management Figure 169 Maintenance > Remote Management > Trust Domain The following table describes the fields in this screen. Table 113 Maintenance > Remote Management > Trust Domain LABEL DESCRIPTION Add Trust Click this to add a trusted host IP address. Domain IP Address This field shows a trusted host IP address.
  • Page 268: Trust Domain For Ip Passthrough

    Chapter 29 Remote Management Table 114 Maintenance > Remote Management > Trust Domain > Add Trust Domain (continued) LABEL DESCRIPTION Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to restore your previously saved settings. 29.6 Trust Domain for IP Passthrough Use this screen to view a list of public IP addresses/complete domain names which are allowed to access the Zyxel Device in IP Passthrough mode.
  • Page 269: Chapter 29 Remote Management

    Chapter 29 Remote Management Figure 172 Maintenance > Remote Management > Trust Domain for IP Passthrough > Add Trust Domain The following table describes the fields in this screen. Table 116 Maintenance > Remote Management > Trust Domain for IP Passthrough > Add Trust Domain LABEL DESCRIPTION IP Address...
  • Page 270 H A P T E R TR-069 Client 30.1 Overview This chapter explains how to configure the Zyxel Device’s TR-069 auto-configuration settings. 30.2 TR-069 Client TR-069 is a protocol that defines how your Zyxel Device can be managed through a management server.
  • Page 271: Chapter 30 Tr-069 Client

    Chapter 30 TR-069 Client Figure 174 Maintenance > TR-069 Client The following table describes the fields in this screen. Table 117 Maintenance > TR-069 Client LABEL DESCRIPTION CWMP Active CPE WAN Management Protocol (CWMP) enables the Zyxel Device to be remotely configured through a WAN link.
  • Page 272: Client

    Chapter 30 TR-069 Client Table 117 Maintenance > TR-069 Client (continued) LABEL DESCRIPTION WAN Interface Select a WAN interface through which the TR-069 traffic passes. used by TR-069 If you select Any_WAN, the Zyxel Device automatically passes the TR-069 traffic when any WAN client connection is up.
  • Page 273: Chapter 31 Time Settings

    H A P T E R Time Settings 31.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system date and time. This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval.
  • Page 274 Chapter 31 Time Settings Figure 175 Maintenance > Time The following table describes the fields in this screen. Table 118 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device.
  • Page 275 Chapter 31 Time Settings Table 118 Maintenance > Time (continued) LABEL DESCRIPTION First – Fifth Time Select an NTP time server from the drop-down list box. Server Address Otherwise, select Other and enter the IP address or URL (up to 29 extended ASCII characters in length) of your time server.
  • Page 276: Email Notification Overview

    H A P T E R Email Notification 32.1 Email Notification Overview A mail server is an application or a computer that can receive, forward and deliver email messages. To have the Zyxel Device send reports, logs or notifications through email, you must specify an email server and the email addresses of the sender and receiver.
  • Page 277: E-Mail Notification Edit

    Chapter 32 Email Notification The following table describes the labels in this screen. Table 119 Maintenance > E-mail Notification LABEL DESCRIPTION Add New e-mail Click this button to create a new entry (up to 32 can be created). Mail Server This displays the server name or the IP address of the mail server.
  • Page 278 Chapter 32 Email Notification Table 120 Maintenance > Email Notification > Add (continued) LABEL DESCRIPTION Authentication Enter the user name (up to 32 characters). This is usually the user name of a mail account you Username specified in the Account email Address field. Authentication Enter the password associated with the user name above.
  • Page 279: Chapter 33 Log Setting

    H A P T E R Log Setting 33.1 Log Setting Overview You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. 33.2 Log Setting Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records.
  • Page 280 Chapter 33 Log Setting Figure 178 Maintenance > Log Setting The following table describes the fields in this screen. Table 121 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Click the switch (it will turn blue) to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server.
  • Page 281: Chapter 32 Email Notification

    Chapter 33 Log Setting Table 121 Maintenance > Log Setting (continued) LABEL DESCRIPTION Syslog Server Enter the server name or IP address of the syslog server that will log the selected categories of logs. UDP Port Enter the port number used by the syslog server. E-mail Log Settings E-mail Log Click the switch (it will turn blue) to allow the sending through email the system and security logs...
  • Page 282 Chapter 33 Log Setting Figure 179 Email Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 |<1,00> 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |default policy |forward...
  • Page 283: Chapter 34 Firmware Upgrade

    H A P T E R Firmware Upgrade 34.1 Overview This chapter explains how to upload new firmware to your Zyxel Device. You can download new firmware releases from your nearest Zyxel FTP site (or www.zyxel.com), or check for new firmware online, to use to upgrade your Zyxel Device’s performance.
  • Page 284 Chapter 34 Firmware Upgrade Figure 181 Maintenance > Firmware Upgrade The following table describes the labels in this screen. Table 122 Maintenance > Firmware Upgrade LABEL DESCRIPTION Upgrade Firmware Restore Select this to enable this option that restores the factory-default to the Zyxel Device after Default upgrading the firmware.
  • Page 285: Module Upgrade

    Chapter 34 Firmware Upgrade Figure 182 Firmware Uploading The Zyxel Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 183 Network Temporarily Disconnected After 2 minutes, log in again and check your new firmware version in the Connection Status screen. If the upload was not successful, an error screen will appear.
  • Page 286 Chapter 34 Firmware Upgrade Click Maintenance > Firmware Upgrade > Module Upgrade to open the following screen. Do NOT turn off the Zyxel Device while module firmware upload is in progress! Figure 185 Maintenance > Firmware Upgrade > Module Upgrade The following table describes the labels in this screen.
  • Page 287: Chapter 35 Backup/Restore

    H A P T E R Backup/Restore 35.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore previous device configurations. 35.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
  • Page 288 Chapter 35 Backup/Restore Click Backup to save the Zyxel Device’s current configuration to your computer. Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Table 124 Restore Configuration LABEL DESCRIPTION File Path...
  • Page 289: Reboot

    Chapter 35 Backup/Restore Figure 189 Reset Warning Message Figure 190 Reset In Process Message You can also press the RESET button on the panel to reset the factory defaults of your Zyxel Device. 35.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example.
  • Page 290: Schedule Reboot

    Chapter 35 Backup/Restore 35.4 Schedule Reboot Use the Schedule Reboot screen to schedule the date and time to reboot the Zyxel Device remotely without turning the power off. You can also select a specific day of the week and time to periodically reboot the Zyxel Device remotely.
  • Page 291: Chapter 36 Diagnostic

    H A P T E R Diagnostic 36.1 Diagnostic Overview The Diagnostic screen displays information to help you identify problems with the Zyxel Device. 36.1.1 What You Can Do in this Chapter • The Diagnostic screen lets you ping an IP address or trace the route packets take to a host (Section 36.2 on page 296).
  • Page 292 Chapter 36 Diagnostic Figure 193 Maintenance > Diagnostic > Ping/Trace Route/Nslookup The following table describes the fields n this screen. Table 126 Maintenance > Diagnostic LABEL DESCRIPTION Ping/TraceRoute Test The result of tests is shown here in the info area. TCP/IP Address Type the IP address of a computer that you want to perform ping, traceroute, or nslookup in...
  • Page 293: Part Iii: Troubleshooting And Appendices

    Troubleshooting and Appendices Appendices contain general information. Some information may not apply to your Zyxel Device.
  • Page 294: Overview

    H A P T E R Troubleshooting 37.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Problems • Device Access Problems • Cellular Problems •...
  • Page 295 Chapter 37 Troubleshooting Make sure the power source is turned on. Turn the Zyxel Device off and on. If the problem continues, contact the vendor. The LED does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 2.2 on page Check the hardware connections.
  • Page 296: What You Can Do In This Chapter

    Chapter 37 Troubleshooting Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. • If you changed the IP address (Section 9.2 on page 154), use the new IP address. • If you changed the IP address and have forgotten the new address, see the troubleshooting suggestions for I do not know the IP address of the Zyxel Device.
  • Page 297 Chapter 37 Troubleshooting To use this feature, you have to apply for DDNS service at www.dyndns.org. Note: If you have a private WAN IP address, then you cannot use DDNS. Here are the three steps to use a domain name to log in the Web Configurator: Step 1 Register for a DDNS Account on www.dyndns.org Open a browser and type http://www.dyndns.org.
  • Page 298: Cellular Problems

    Chapter 37 Troubleshooting I cannot connect to the Zyxel Device using FTP, Telnet, SSH, or Ping. See the Remote Management section for details on allowing web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) to access the Zyxel Device. Check the server Port number field for the web service in the Maintenance >...
  • Page 299: Chapter 37 Troubleshooting

    Chapter 37 Troubleshooting Note: It is best to test towards more than one cellular site, as the nearest site / line-of-sight is not always the best due to the terrain, interference, density of usage, and so on. All of these factors influence the stability, availability and throughput of the link to the Zyxel Device Position the Zyxel Device towards a direction where coverage is expected (example the nearest town).
  • Page 300: Device Access Problems

    Chapter 37 Troubleshooting If you are trying to access the Internet wirelessly, make sure that you enabled the WiFi in the Zyxel Device and your wireless client and that the WiFi settings in the wireless client are the same as the settings in the Zyxel Device.
  • Page 301: Wifi Problems

    Chapter 37 Troubleshooting Turn the Zyxel Device off and on. If the problem continues, contact the network administrator or vendor, or try the advanced suggestions I cannot access the Web Configurator login screen.. Note: If your Zyxel Device is an outdoor-type, inclement weather like rain and hot weather may affect cellular signals.
  • Page 302: Upnp Problems

    Chapter 37 Troubleshooting Reconnect your USB device to the Zyxel Device. 37.8 UPnP Problems My computer cannot detect UPnP settings from the Zyxel Device. Make sure that UPnP is enabled in your computer. For Windows 10, see Section 9.6 on page 165.
  • Page 303 In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. For Zyxel Communications offices, see https://service-provider.zyxel.com/global/en/contact-us for the latest information. For Zyxel Networks offices, see https://www.zyxel.com/index.shtml for the latest information.
  • Page 304 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th/ Vietnam • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Europe Belarus • Zyxel BY • https://www.zyxel.by Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/...
  • Page 305 Appendix A Customer Support Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France • Zyxel France • https://www.zyxel.fr Germany • Zyxel Deutschland GmbH • https://www.zyxel.com/de/de/ Hungary •...
  • Page 306 Appendix A Customer Support • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland • Studerus AG •...
  • Page 307 • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ South America • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Middle East Israel • Zyxel Communications Corporation • http://il.zyxel.com/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ Nebula Mobile Router User’s Guide...
  • Page 308: Appendix A Customer Support

    P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
  • Page 309 Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
  • Page 310 Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 – 10, A – F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
  • Page 311 Appendix B IPv6 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.
  • Page 312 Appendix B IPv6 receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache.
  • Page 313: Appendix B Ipv6

    Appendix B IPv6 Click the Search icon ( ) and then type “cmd” in the search box.. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix...
  • Page 314 P P E N D I X Legal Information Copyright Copyright © 2022 by Zyxel and/or its affiliates. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel and/or its affiliates.
  • Page 315 Appendix C Legal Information • This radio transmitter (2468C-LTE7461M602) has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list that have, a gain greater than the maximum gain indicated for any type listed, are strictly prohibited for use with this device.
  • Page 316: Appendix D Legal Information

    Appendix C Legal Information Industry Canada radiation exposure statement This device complies with ISED radiation exposure limits set forth for an uncontrolled environment. This device should be installed and operated with a minimum distance of 30 cm between the radiator and your body. Déclaration d’exposition aux radiations: Cet équipement est conforme aux limites d’exposition aux rayonnements ISED établies pour un environnement non contrôlé.
  • Page 317 Appendix C Legal Information • The band 3300 – 3800 MHz is 26 dBm • The band 3300 – 4200 MHz is 26 dBm • WiFi • The band 2400 – 2483.5 MHz is 95.16 mW • The band 5150 – 5350 MHz is 177.42 mW •...
  • Page 318 Appendix C Legal Information Italiano (Italian) Con la presente Zyxel dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 2014/53/UE. National Restrictions • This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy.
  • Page 319: Appendix C Legal Information

    Appendix C Legal Information List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria Liechtenstein Belgium Lithuania Bulgaria Luxembourg Croatia Malta Cyprus Netherlands Czech Republic Norway Denmark Poland Estonia Portugal Finland Romania France Serbia Germany Slovakia...
  • Page 320 Appendix C Legal Information Entsorgung wird die getrennte Sammlung von Produkt und/oder seiner Batterie dazu beitragen, natürliche Ressourcen zu sparen und die Umwelt und die menschliche Gesundheit zu schützen. El símbolo de abajo indica que según las regulaciones locales, su producto y/o su batería deberán depositarse como basura separada de la doméstica.
  • Page 321 Appendix C Legal Information Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. Zyxel shall in no event be held liable for indirect or consequential damages of any kind to the purchaser.
  • Page 322: Index

    Index Index access troubleshooting Cellular Band screen Access Control (Rules) screen Cellular SIM screen Cellular WAN activation TR-069 traffic firewalls Cellular WAN screen 107, 109 SSID certificate Address Resolution Protocol details Any_WAN factory default Remote Management file format TR-069 traffic file path import 238, 241...
  • Page 323 Index Create Certificate Request screen creating certificates CTS threshold 138, 144 factory defaults reset customer support filters customized service MAC address 133, 145 Finger services customized services firewall enhancing security LAND attack security considerations traffic rule direction data fragment threshold 138, 144 Firewall DoS screen Data Roaming...
  • Page 324 Index IPv6 firewall HTTP client list DHCP 163, 172 ICMP 163, 172 IEEE 802.11ax IP address 164, 173 MAC address 141, 160 status 90, 99 Import Certificate screen subnet mask 155, 164, 173 importing trusted CAs LAN IP address Inside Global Address, see IGA LAN IPv6 Mode Setup Inside Local Address, see ILA LAN Setup screen...
  • Page 325 Index models XS1930 module firmware password Multi_WAN admin Remote Management good habit TR-069 traffic lost user Multiple BSS, see MBSSID PIN Protection PIN, WPS example Ping of Death 194, 195 Ping test applications IP alias Ping/TraceRoute/Nslookup screen default server PLMN Configuration screen DMZ host Point-to-Point Tunneling Protocol, see PPTP example...
  • Page 326 Index remote management SSID TR-069 activation MBSSID Remote Procedure Calls, see RPCs static DHCP RESET Button configuration reset to factory defaults Static DHCP screen restart system static route 175, 184 restore default settings configuration after firmware upgrade status restoring configuration firmware version RFC 1058, see RIP 90, 99...
  • Page 327 Index Trace Route test Wireless General screen troubleshooting wireless LAN authentication Trust Domain example fragmentation threshold 138, 144 Trust Domain screen limitations Trusted CA certificate MAC address filter 133, 145 view preamble 140, 144 Trusted CA screen RTS/CTS threshold 138, 144 Turning on UPnP security Windows 7 example...

This manual is also suitable for:

Nebula nr5101Nebula nr7101Nebula lte7461-m602

Table of Contents