Page 2
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a series User’s Guide. Screenshots and graphics in this book may differ slightly from what you see due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Table of Contents Table of Contents Document Conventions ........................3 Contents Overview ..........................4 Table of Contents ..........................6 Part I: User’s Guide..................17 Chapter 1 Introducing the Zyxel Device ......................18 1.1 Overview ............................18 1.1.1 Multi-Gigabit Ethernet ......................20 1.2 Example Applications ........................20 1.2.1 Internet Access ........................
Page 7
Table of Contents 3.4.1 Successful Internet Connection ..................53 3.4.2 Unsuccessful Internet Connection ..................54 3.5 Quick Start Setup – WiFi ......................... 54 3.6 Quick Start Setup – Finish ....................... 54 Chapter 4 Tutorials ...............................55 4.1 Overview ............................55 4.2 Wired Network Setup ........................55 4.2.1 Setting Up a DSL Connection ....................
Page 8
Table of Contents 5.2.1 LAN ............................90 Chapter 6 Broadband............................93 6.1 Overview ............................93 6.1.1 What You Can Do in this Chapter ..................93 6.1.2 What You Need to Know ..................... 94 6.1.3 Before You Begin ........................97 6.2 Broadband Settings (for DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) ....97 6.2.1 Add or Edit Internet Connection ..................
Page 9
Table of Contents Chapter 8 Home Networking ..........................160 8.1 Overview ............................160 8.1.1 What You Can Do in this Chapter ..................160 8.1.2 What You Need To Know ....................160 8.1.3 Before You Begin ......................... 162 8.2 LAN Setup ............................162 8.3 Static DHCP ...........................
Page 10
Table of Contents 10.4 Queue Setup ..........................201 10.5 QoS Classification Setup ......................203 10.5.1 Add or Edit QoS Class ....................... 204 10.6 QoS Shaper Setup ........................208 10.6.1 Add or Edit a QoS Shaper ....................209 10.7 QoS Policer Setup ........................209 10.7.1 Add or Edit a QoS Policer ....................
Page 11
Table of Contents 13.1.1 What You Can Do in this Chapter ................... 238 13.2 VLAN Group Settings ........................239 13.2.1 Add or Edit a VLAN Group ....................239 Chapter 14 Interface Grouping ..........................241 14.1 Interface Grouping Overview ....................241 14.1.1 What You Can Do in this Chapter ................... 241 14.2 Interface Grouping ........................
Page 12
Table of Contents 17.2 MAC Filter ............................ 265 17.2.1 Add New Rule ........................266 Chapter 18 Parental Control ..........................267 18.1 Parental Control Overview ......................267 18.2 Parental Control Settings For DX/EX3300, DX/EX3301, EX5300, EX5301, DX5301-B2/B3 and DX/ EX5401 ............................267 18.2.1 Add or Edit a Parental Control Profile ................
Page 13
Table of Contents 21.4 Phone ............................299 21.4.1 Phone Device ........................299 21.4.2 Phone Device Edit ......................300 21.5 Phone Region ..........................301 21.6 Call Rule ............................302 21.7 Call History ........................... 302 21.8 Technical Reference ........................303 21.8.1 Quality of Service (QoS) ....................311 21.8.2 Phone Services Overview ....................
Page 14
Table of Contents 27.1 Overview ............................. 331 27.2 xDSL Statistics ..........................331 Chapter 28 WLAN Station Status .........................334 28.1 WLAN Station Status Overview ....................334 Chapter 29 Cellular Statistics ..........................336 29.1 Cellular Statistics Overview ......................336 29.2 Cellular Statistics Settings ......................336 Chapter 30 System...............................338 30.1 System Overview ........................
Page 16
Table of Contents Appendix A Customer Support ..................... 379 Appendix B IPv6..........................385 Appendix C Legal Information ...................... 391 Index ..............................397 AX/DX/EX/PX Series User’s Guide...
H A P T E R Introducing the Zyxel Device 1.1 Overview Zyxel Device refers to these models as outlined below. • AX7501-B0 • DX5401-B0 • EX5401-B0 • DX3300-T0 • EX3300-T0 • EX5501-B0 • DX3301-T0 • EX3301-T0 • PX7501-B0 • DX5301-B2 •...
Page 19
Chapter 1 Introducing the Zyxel Device Table 1 Zyxel Device Comparison Table (continued) AX7501-B0 DX3300-T0 DX3301-T0 DX5301-B2 DX5301-B3 DX5401-B0 2.5 Gbe LAN 10 Gbe LAN 1G AON (SFP) 1G Ethernet (SFP) 2.5G GPON (SFP) 10G AON (SFP) 10G Ethernet (SFP) 10G XGPON (SFP+) USB Port for...
Chapter 1 Introducing the Zyxel Device Table 2 Zyxel Device Comparison Table (continued) EX5501- PX7501 EX3300-T0 EX3301-T0 EX5300-B3 EX5301-B3 EX5401-B0 10G XGPON (SFP+) USB Port for USB 2.0 USB 2.0 USB 3.0 USB 3.0 USB 3.0 USB 3.0 USB 3.0 Cellular Backup, File Sharing and...
Chapter 1 Introducing the Zyxel Device 1.2.1 Internet Access The AX7501-B0, PX7501-B0, DX5401-B0 and EX5401-B0 provides shared Internet access by connecting a fiber cable provided by the ISP to the FIBRE port. It supports OMCI (ONU Management and Control Interface) to connect to the ISP’s OLT (Optical Line Terminal). The DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0 provide Internet access by connecting the WAN port to your ISP through DSL cables.
Chapter 1 Introducing the Zyxel Device The Zyxel Device is a dual-band gateway that can use both 2.4G and 5G networks at the same time. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.
Chapter 1 Introducing the Zyxel Device Figure 5 VoIP Application 1.3 Ways to Manage the Zyxel Device Use any of the following methods to manage the Zyxel Device. • Web Configurator. This is recommended for management of the Zyxel Device using a (supported) web browser.
Chapter 1 Introducing the Zyxel Device 1.5.1 Top or Front Panel The LED indicators are located on the top or front panel. Figure 6 LED Indicators (AX7501-B0 / PX7501-B0) Figure 7 LED Indicators (DX3300-T0 / DX3301-T0 / EX3300-T0 / EX3301-T0) AX/DX/EX/PX Series User’s Guide...
Page 25
Chapter 1 Introducing the Zyxel Device Figure 8 LED Indicators (DX5301-B2 / DX5301-B3 / EX5301-B3) AX/DX/EX/PX Series User’s Guide...
Page 26
Chapter 1 Introducing the Zyxel Device Figure 9 LED Indicators (EX5300-B3) Figure 10 LED Indicators (DX5401-B0 / EX5401-B0) AX/DX/EX/PX Series User’s Guide...
Page 27
Chapter 1 Introducing the Zyxel Device Figure 11 LED Indicators (EX5501-B0) None of the LEDs are on if the Zyxel Device is not receiving power. Table 4 LED Descriptions (AX7501, EX5501 and PX7501) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing.
Page 28
Chapter 1 Introducing the Zyxel Device Table 4 LED Descriptions (AX7501, EX5501 and PX7501) (continued) COLOR STATUS DESCRIPTION 10G LAN (for Green The Zyxel Device has a successful 10/100/10000 Mbps Ethernet connection AX7501-B0/ with a device on the Local Area Network (LAN) through the 10G LAN port. PX7501-B0) Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/100/...
Page 29
Chapter 1 Introducing the Zyxel Device Table 5 LED Descriptions (DX3300-T0 / EX3300-T0) COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
Page 30
Chapter 1 Introducing the Zyxel Device Table 6 LED Descriptions (DX3301-T0 / EX3301-T0) (continued) COLOR STATUS DESCRIPTION DSL / Green The VDSL / ADSL link is up. Ethernet Slow Blinking The Zyxel Device is looking for a VDSL / ADSL link. Fast Blinking The Zyxel Device is initializing the VDSL / ADSL link.
Page 31
Chapter 1 Introducing the Zyxel Device Table 7 LED Descriptions (DX5301-B2/B3, EX5300-B3 and EX5301-B3) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
Page 32
Chapter 1 Introducing the Zyxel Device Table 7 LED Descriptions (DX5301-B2/B3, EX5300-B3 and EX5301-B3) (continued) COLOR STATUS DESCRIPTION WiFi 2.4G Green The 2.4G wireless network is activated. Blinking The Zyxel Device is communicating with 2.4G wireless clients. The 2.4G wireless network is not activated. Amber Blinking The Zyxel Device is setting up a WPS connection with a 2.4G wireless...
Chapter 1 Introducing the Zyxel Device Table 8 LED Descriptions (DX5401-B0 / EX5401-B0) (continued) COLOR STATUS DESCRIPTION LAN1 – 4 Green The Zyxel Device has a successful 10/100/1000 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/ 100/1000 Mbps.
Page 34
Chapter 1 Introducing the Zyxel Device Figure 13 DX3300-T0 Back Panel Figure 14 DX3301-T0 Back Panel AX/DX/EX/PX Series User’s Guide...
Page 35
Chapter 1 Introducing the Zyxel Device Figure 15 DX5301-B2 / DX5301-B3 Back Panel Figure 16 DX5401-B0 Back Panel AX/DX/EX/PX Series User’s Guide...
Page 36
Chapter 1 Introducing the Zyxel Device Figure 17 EX3300-T0 Back Panel Figure 18 EX3301-T0 Back Panel AX/DX/EX/PX Series User’s Guide...
Page 37
Chapter 1 Introducing the Zyxel Device Figure 19 EX5300-B3 Back Panel AX/DX/EX/PX Series User’s Guide...
Page 38
Chapter 1 Introducing the Zyxel Device Figure 20 EX5301-B3 Back Panel Figure 21 EX5401-B0 Back Panel AX/DX/EX/PX Series User’s Guide...
Page 39
Chapter 1 Introducing the Zyxel Device Figure 22 EX5501-B0 Bottom Panel Figure 23 PX7501-B0 Bottom Panel The following table describes the items on the bottom and side panels of EX5501, AX7501 and PX7501. Table 9 Panel Ports and Buttons LABEL DESCRIPTION 2.5G WAN For EX5501...
Page 40
Chapter 1 Introducing the Zyxel Device Table 10 Panel Ports and Buttons (continued) LABEL DESCRIPTION The USB port is used for cellular WAN backup, file-sharing, and media server. For DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0, connect a DSL cable to the DSL port for Internet connection.
Page 41
Chapter 1 Introducing the Zyxel Device Figure 26 Connecting the Fiber Cables Transceiver Removal Use the following steps to remove an SFP transceiver. Attach an ESD preventive wrist strap to your wrist and to a bare metal surface on the chassis. Remove the fiber cables from the transceiver.
Chapter 1 Introducing the Zyxel Device 1.5.3 WPS Button You can use the WPS button to quickly set up a secure wireless connection between the Zyxel Device and a WPS-compatible client by adding one device at a time. To activate WPS: Make sure the POWER LED is on and not blinking.
H A P T E R Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is 1024 by 768 pixels.
Page 44
Chapter 2 Web Configurator Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number. The Connection Status screen appears. Use this screen to configure basic Internet access and wireless settings.
Chapter 2 Web Configurator 2.2 Web Configurator Layout Figure 32 Screen Layout As illustrated above, the main screen is divided into these parts: • A – Settings Icon (Navigation Panel and Side Bar) • B – Layout Icon • C – Main Window 2.2.1 Settings Icon Click this icon ( to see the side bar and navigation panel.
Page 46
Chapter 2 Web Configurator Figure 33 Side Bar The icons provide the following functions. Table 11 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Device’s time zone and wireless settings.
Page 47
Chapter 2 Web Configurator Figure 34 Navigation Panel Table 12 Navigation Panel Summary LINK FUNCTION Connection Status Use this screen to configure basic Internet access, wireless settings, and parental control settings. This screen also shows the network status of the Zyxel Device and computers/devices connected to it.
Page 48
Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION UPnP Use this screen to turn UPnP and UPnP NAT-T on or off. Additional Use this screen to configure IP alias and public static IP. Subnet STB Vendor ID Use this screen to configure the Vendor IDs of the connected Set Top Box (STB) devices, which have the Zyxel Device automatically create static DHCP entries for the STB devices when they request IP addresses.
Page 49
Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Use this screen to activate protection against Denial of Service (DoS) attacks. MAC Filter MAC Filter Use this screen to block or allow traffic from devices of certain MAC addresses to the Zyxel Device.
Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Cellular Cellular Statistics Use this screen to look at the cellular Internet connection status. Statistics GPON Status GPON Status Use this screen to view the fiber transceiver’s TX power and RX power level and its temperature.
Page 51
Chapter 2 Web Configurator Figure 35 Screen Order AX/DX/EX/PX Series User’s Guide...
H A P T E R Quick Start 3.1 Overview Use the Wizard screens to configure the Zyxel Device’s time zone and wireless settings. Note: See the technical reference chapters for background information on the features in this chapter. 3.2 Quick Start Setup You can click the Wizard icon in the side bar to open the Wizard screens.
Chapter 3 Quick Start Figure 37 Wizard – Time Zone 3.4 Quick Start Setup – Internet Connection Select the Internet connection mode of the Zyxel Device. Click Next to continue. Figure 38 Wizard – Internet 3.4.1 Successful Internet Connection The Zyxel Device has Internet access. Figure 39 Wizard –...
Chapter 3 Quick Start 3.4.2 Unsuccessful Internet Connection The Zyxel Device did not detect a WAN connection. Figure 40 Wizard – Internet Connection is Down 3.5 Quick Start Setup – WiFi Turn WiFi on or off. If you keep it on, record the WiFi Name and Password in this screen so you can configure your wireless clients to connect to the Zyxel Device.
H A P T E R Tutorials 4.1 Overview This chapter shows you how to use the Zyxel Device’s various features. • Wired Network Setup • WiFi Network Setup • USB Applications • Network Security • Internet Calls • Device Maintenance 4.2 Wired Network Setup This section shows you how to set up a DSL or Ethernet connection.
Page 56
Chapter 4 Tutorials In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL over ATM Connection Mode Routing Encapsulation PPPoE IPv6/IPv4 Mode IPv4 ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode LLC/SNAP-Bridging Service Category UBR without PCR Account Information PPP User Name 1234@DSL-Ex.com...
Page 57
Chapter 4 Tutorials Try to connect to a website to see if you have correctly set up your Internet connection. AX/DX/EX/PX Series User’s Guide...
Chapter 4 Tutorials The new connection is displayed on the Broadband screen. 4.2.2 Setting Up an Ethernet Connection If you connect to the Internet through an Ethernet connection, you need to connect a broadband modem or router with Internet access to the WAN Ethernet port on the Zyxel Device. You need to configure the Internet settings from the broadband modem or router on the Zyxel Device.
Page 59
Chapter 4 Tutorials In this example, configure the following information for the Ethernet connection. General Name My ETH Connection Type Ethernet Connection Mode Routing Encapsulation IPoE IPv6/IPv4 Mode IPv4 Only Enter the General settings provided by your Internet service provider. Enter a Name to identify your WAN connection.
Chapter 4 Tutorials Go to the Network Setting > Broadband screen to view the established Ethernet connection. The new connection is displayed on the Broadband screen. 4.3 WiFi Network Setup In this example, you want to set up a WiFi network so that you can use your notebook to access the Internet.
Chapter 4 Tutorials 4.3.1 Changing Security on a WiFi Network This example changes the default security settings of a WiFi network to the following: SSID Example Security Mode WPA2-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed Go to the Network Setting > Wireless > General screen. Select More Secure as the security level and WPA2-PSK as the security mode.
Page 62
Chapter 4 Tutorials AX/DX/EX/PX Series User’s Guide...
Chapter 4 Tutorials Go to the Wireless > Others screen. Set 802.11 Mode to 802.11b/g/n Mixed, and then click Apply. You can now use the WPS feature to establish a WiFi connection between your notebook and the Zyxel Device (see Section 4.3.2 on page 63).
Page 64
Chapter 4 Tutorials In Windows 10, click on the Network icon in the system tray to open the list of available WiFi networks. Locate the WiFi network of the Zyxel Device. The default WiFi network name is “Zyxel_XXXX” (2.4G) or “Zyxel_XXXX_5G”...
Page 65
Chapter 4 Tutorials The Zyxel Device sends the WiFi network settings to Windows using WPS. Windows displays “Getting settings from the router”. AX/DX/EX/PX Series User’s Guide...
Page 66
Chapter 4 Tutorials The WiFi device is then able to connect to the WiFi network securely. 4.3.2.2 WPS PIN Configuration The WPS PIN (Personal Identification Number) method is a more secure version of WPS, used by WiFi- enabled devices such as printers. To use this connection method, you need to log into the Zyxel Device’s Web Configurator.
Chapter 4 Tutorials Within 2 minutes, enable WPS on the WiFi device. The Zyxel Device authenticates the WiFi device using the PIN, and then sends the WiFi network settings to the device using WPS. This process may take up to 2 minutes. The WiFi device is then able to connect to the WiFi network securely.
Page 68
Chapter 4 Tutorials Connect your USB device to the USB port of the Zyxel Device. Go to the Network Setting > USB Service > File Sharing screen. Enable File Sharing Services and click Apply to activate the file sharing function. The Zyxel Device automatically adds your USB device to the Information table.
Page 69
Chapter 4 Tutorials The Add New Share screen appears. Select your USB device from the Volume drop-down list box. Enter a Description name for the added share to identify the device. Click Browse and the Browse Directory screen appears. On the Browse Directory screen, select the folder that you want to add as a share. In this example, select BobShare and then click OK.
Page 70
Chapter 4 Tutorials In Access Level, select Public to let the share to be accessed by all users connected to the Zyxel Device. Otherwise, select Security to let the share to be accessed by specific users to access only. Click OK to save the settings. To set Access level to Security, you need to create one or more users accounts.
Page 71
Chapter 4 Tutorials File sharing is now configured. You can see the USB storage device listed in the table below. 4.4.1.2 Accessing Your Shared Files From a Computer You can use Windows Explorer to access the USB storage devices connected to the Zyxel Device. Note: This example shows you how to use Microsoft Windows 10 to browse shared files in a share called (usb1_sda)Zoeys file.
Chapter 4 Tutorials 4.4.2 Using FTP This section shows how to use an FTP program to access files on an USB storage device connected to the Zyxel Device. Note: This example uses the FileZilla FTP program to browse your shared files. In FileZilla, enter the IP address of the Zyxel Device (The default IP is 192.168.1.1), your account’s Username, Password and Port number, and then click Quickconnect.
Chapter 4 Tutorials Select IPv4 Firewall/IPv6 Firewall to enable the firewall, and then click Apply. Open the Access Control screen to create a rule. Click Add New ACL Rule to set up a rule. Filter Name: Enter a name to identify the firewall rule. Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service.
Page 74
Chapter 4 Tutorials 4.5.2.1 Configuring a Parental Control Schedule Parental Control Profile allows you to set up a schedule rule for Internet usage. Use this feature to limit the days and times a user can access the Internet. This example shows you how to block an user from accessing the Internet during time for studying. Use the parameter below to configure a schedule rule.
Chapter 4 Tutorials Use this screen to edit the Parental Control schedule. Click Add New Schedule to add a second schedule. Use the parameter given above to configure the time settings of your schedules. Click Save to save the settings. 4.5.3 Configuring a MAC Address Filter You can use a MAC address filter to exclusively allow or permanently block someone from the WiFi network.
Chapter 4 Tutorials Go to the Security > MAC Filter > MAC Filter screen. Under MAC Address Filter, select Enable. Click Add New Rule to add a new entry. Select Active, and then enter the Host Name and MAC Address of computer B.
Chapter 4 Tutorials Go to the VoIP > SIP > SIP Service Provider screen. Click the Add New Provider button to add the SIP Service Provider. Figure 41 VoIP > SIP > SIP Service Provider On the Add New Provider screen, select Enable SIP Service Provider. Enter SIP Service Provider Name of up to 64 ASCII printable characters.
Page 78
Chapter 4 Tutorials Open the Web Configurator. Go to the VoIP > SIP > SIP Account screen. Click the Add New Account button on the SIP Account screen to add a SIP account and map it to a phone port. Figure 43 VoIP >...
Chapter 4 Tutorials 4.6.4 Configuring a Phone You must now configure the phone port to use the SIP account you just configured. Go to the VoIP > Phone > Phone Device screen. Click the Modify icon of PHONE1 to configure PHONE1 on your Zyxel Device. The following screen appears.
Chapter 4 Tutorials 4.6.5 Making a VoIP Call Follow these steps to make a phone calling using Voice over IP (VoIP). Make sure you connect a telephone to phone port 1 on the Zyxel Device. Make sure the Zyxel Device is turned on and connected to the Internet. Pick up the phone receiver.
Chapter 4 Tutorials 4.7.3 Restoring the Device Configuration This section shows you how to restore a previously-saved configuration file from your computer to your Zyxel Device. Go to the Maintenance > Backup/Restore screen. Under Restore Configuration, click Browse/Choose File, and then select the configuration file that you want to upload.
Page 82
Chapter 4 Tutorials The Zyxel Device automatically restarts after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. Go to the Connection Status page to check the firmware version after the reboot. AX/DX/EX/PX Series User’s Guide...
H A P T E R Connection Status 5.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and wireless settings in this screen. It also shows the network status of the Zyxel Device and computers or devices connected to it.
Chapter 5 Connection Status 5.1.2 System Info Use this screen to view the basic system information of the Zyxel Device. Figure 49 System Info Click the Arrow icon ( ) to view more information on the status of your firewall and interfaces (WAN, LAN, and WLAN).
Page 86
Chapter 5 Connection Status Figure 50 System Info: Detailed Information Each field is described in the following table. Table 13 System Info: Detailed Information LABEL DESCRIPTION Host Name This field displays the Zyxel Device system name. It is used for identification. Model Name This shows the model number of your Zyxel Device.
Page 87
Chapter 5 Connection Status Table 13 System Info: Detailed Information (continued) LABEL DESCRIPTION Interface Status Virtual ports are shown here. You can see the ports in use and their transmission rate. WAN Information (These fields display when you have an Ethernet WAN connection.) Name This field displays the name given to the Internet connection.
Chapter 5 Connection Status Table 13 System Info: Detailed Information (continued) LABEL DESCRIPTION 802.11 Mode This displays the type of 802.11 mode the WiFi interface is using in the WLAN. This displays whether WPS is activated on the WiFi interface. 5.1.3 WiFi Settings Use this screen to enable or disable the main wireless network.
Chapter 5 Connection Status Table 14 WiFi Settings: Configuration (continued) LABEL DESCRIPTION Hide WiFi network Select this check box to hide the SSID in the outgoing beacon frame so a station cannot name obtain the SSID through scanning using a site survey tool. Note: Disable WPS in the Network Setting >...
Chapter 5 Connection Status To assign different SSIDs to the 2.4G and 5G guest wireless networks, clear the Keep 2.4G and 5G the same check box in the WiFi Settings screen, and the Guest WiFi Settings screen will change. Note: Keep 2.4G and 5G the same check box cannot be turned off if MESH is enabled (see Network Settings >...
Page 91
Chapter 5 Connection Status Figure 55 LAN Click the Arrow icon ( ) to configure the LAN IP settings and DHCP setting for your Zyxel Device. Figure 56 LAN Setup Each field is described in the following table. Table 16 Status Screen LABEL DESCRIPTION LAN IP Setup...
Page 92
Chapter 5 Connection Status Table 16 Status Screen (continued) LABEL DESCRIPTION DHCP Server This is the period of time a DHCP-assigned address is valid, before it expires. Lease Time When a client connects to the Zyxel Device, DHCP automatically assigns the client an IP addresses from the IP address pool.
H A P T E R Broadband 6.1 Overview This chapter discusses the Zyxel Device’s Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Chapter 6 Broadband Table 17 WAN Setup Overview LAYER-2 INTERNET CONNECTION INTERFACE CONNECTION MODE ENCAPSULATION CONNECTION SETTINGS Ethernet Routing PPPoE PPP user name and password, WAN IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE WAN IPv4/IPv6 IP address, NAT, DNS server and routing feature Bridge VLAN Note: This table is for EX3300-T0, EX3301-T0, EX5300, EX5301, EX5401-B0, EX5501, AX7501 and PX7501.
Page 95
Chapter 6 Broadband If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP addresses. Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed.
Page 96
Chapter 6 Broadband IPv6 Rapid Deployment Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4 network. When the Zyxel Device has an IPv4 WAN address and you set IPv6/IPv4 Mode to IPv4 Only, you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Chapter 6 Broadband Figure 59 Dual Stack Lite 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 6.2 Broadband Settings (for DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) Use this screen to change your Zyxel Device’s Internet access settings.
Page 98
Chapter 6 Broadband Figure 60 Network Setting > Broadband The following table describes the labels in this screen. Table 19 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this button to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection.
Chapter 6 Broadband 6.2.1 Add or Edit Internet Connection Click Add New WAN Interface in the Broadband screen or the Edit icon next to an existing WAN interface to open the following screen. Use this screen to configure a WAN connection. The screen varies depending on the mode, encapsulation, and IPv6 or IPv4 mode you select.
Page 100
Chapter 6 Broadband Figure 61 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) AX/DX/EX/PX Series User’s Guide...
Page 101
Chapter 6 Broadband The following table describes the labels in this screen. Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable or disable the interface. When the switch goes to the right , the function is enabled.
Page 102
Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION 802.1p IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service.
Page 103
Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION The 6RD (IPv6 rapid deployment) fields display when you set the IPv6/IPv4 Mode field to IPv4 Only. See IPv6 Rapid Deployment on page 96 for more information.
Page 104
Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Primary DNS Enter the first IPv6 DNS server address assigned by the ISP. Server Secondary DNS Enter the second IPv6 DNS server address assigned by the ISP. Server IPv6 Routing Feature (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.
Page 105
Chapter 6 Broadband Bridge Mode Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. The following example screen displays when you select Bridge mode. Figure 62 Network Setting >...
Chapter 6 Broadband Table 21 Network Setting > Broadband > Add/Edit New WAN Interface (Bridge Mode) (continued) LABEL DESCRIPTION ATM PVC Configuration (This is available only when it shows ADSL over ATM in the Type field.) VPI [0–255] The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. VCI [32–...
Page 107
Chapter 6 Broadband Figure 63 Network Setting > Broadband (EX3300 and EX3301) Figure 64 Network Setting > Broadband (EX5300, EX5301, EX5401 and EX5501) Figure 65 Network Setting > Broadband (AX7501 and PX7501) The following table describes the labels in this screen. Table 22 Network Setting >...
Chapter 6 Broadband Table 22 Network Setting > Broadband (for EX3300, EX3301, EX5300, EX5301, EX5401, EX5501, AX7501 and PX7501) (continued) LABEL DESCRIPTION 802.1p This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. 802.1q This indicates the VLAN ID number assigned to traffic sent through this connection.
Page 109
Chapter 6 Broadband Figure 66 Network Setting > Broadband > Add or Edit New WAN Interface (EX3300, EX3301, EX5300, EX5301, EX5401-B0 and EX5501 – Routing Mode) AX/DX/EX/PX Series User’s Guide...
Page 110
Chapter 6 Broadband Figure 67 Network Setting > Broadband > Add or Edit New WAN Interface (AX7501 and PX7501 – Routing Mode) AX/DX/EX/PX Series User’s Guide...
Page 111
Chapter 6 Broadband The following table describes the labels in this screen. Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable or disable the interface. When the switch goes to the right , the function is enabled.
Page 112
Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION IP Address (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) Obtain an IP A static IP address is a fixed IP that your ISP gives you.
Page 113
Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION option 61 Select this and enter any string that identifies the device. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number.
Page 114
Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Select Manually Configured if you have the IPv4 address of the relay server. Otherwise, select Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP.
Chapter 6 Broadband Table 24 Network Setting > Broadband > Add or Edit New WAN Interface (Bridge Mode) (continued) LABEL DESCRIPTION Mode Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN ports.
Page 116
Chapter 6 Broadband Note: If you select Drop in the Current Cellular Connection field, the will drop the Zyxel Device cellular WAN connection when the Time Budget or Data Budget is reached. It may take some time for the cellular WAN connection to be disconnected when the Time Budget or Data Budget is reached.
Page 117
Chapter 6 Broadband Figure 71 Network > Broadband > Cellular Backup (Budget Setup) The following table describes the labels in this screen. Table 25 Network Setting > Broadband > Cellular Backup LABEL DESCRIPTION General Cellular Backup Click this switch to have the Zyxel Device use the cellular connection as your WAN or a backup when the wired WAN connection fails.
Page 118
Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Ping the Host Select this to have the Zyxel Device ping the particular host name or IP address you typed in this field. Cellular Connection Settings Card This field displays the manufacturer and model name of your cellular card if you inserted one in description...
Page 119
Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Mail Account Select an email address you have configured in Maintenance > E-mail Notification. The Zyxel Device uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance >...
Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Data Budget Select the check boxes and enter a number from 1 to 99 in the percentage fields. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. % of time budget/data budget...
Page 121
Chapter 6 Broadband Note: If the settings in the screen are changed, the Zyxel Device will re-establish the DSL connections. Table 26 VDSL Profiles MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 8.832 2048 4.3125...
Page 123
Chapter 6 Broadband The following table describes the labels in this screen. Table 27 Network Setting > Broadband > Advanced LABEL DESCRIPTION DSL Capabilities PhyR US Enable or disable PhyR US (upstream) for upstream transmission to the WAN. PhyR US should be enabled if data being transmitted upstream is sensitive to noise.
Chapter 6 Broadband Table 27 Network Setting > Broadband > Advanced (continued) LABEL DESCRIPTION 8a, 8b, 8c, 8d, The G.993.2 VDSL standard defines a wide range of profiles that can be used in different VDSL 12a, 12b, 17a, deployment settings, such as in a central office, a street cabinet or a building. 35b US0 The Zyxel Device must comply with at least one profile specified in G.993.2.
Page 125
Chapter 6 Broadband Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the Zyxel Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the Zyxel Device does that part of the task.
Page 126
Chapter 6 Broadband The following figure illustrates the relationship between PCR, SCR and MBS. Figure 73 Example of Traffic Shaping ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent.
Page 127
Chapter 6 Broadband IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP.
Page 128
Chapter 6 Broadband Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236.
H A P T E R Wireless 7.1 Overview This chapter describes the Zyxel Device’s Network Setting > Wireless screens. Use these screens to set up your Zyxel Device’s WiFi network and security settings. 7.1.1 What You Can Do in this Chapter This section describes the Zyxel Device’s Wireless screens.
Chapter 7 Wireless WiFi6 / IEEE 802.11ax WiFi6 is backwards compatible with IEEE 802.11a/b/g/n/ac and is most suitable in areas with a high concentration of users. WiFi6 devices support Target Wakeup Time (TWT) allowing them to automatically power down when they are inactive. The following table displays the comparison of the different WiFi standards.
Page 131
Chapter 7 Wireless Figure 74 Network Setting > Wireless > General The following table describes the general WiFi labels in this screen. Table 29 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Wireless Select Keep the same settings for 2.4G and 5G wireless networks and the 2.4 GHz and 5 GHz wireless networks will use the same SSID and wireless security settings.
Page 132
Chapter 7 Wireless Table 29 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Wireless Network Setup Band This shows the wireless band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n/ax wireless clients while 5GHz is used by IEEE 802.11a/n/ac/ax wireless clients. Wireless Click this switch to enable or disable WiFi in this field.
Chapter 7 Wireless Table 29 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Mode Select More Secure (Recommended) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the Zyxel Device.
Page 134
Chapter 7 Wireless Figure 76 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK The following table describes the labels in this screen. Table 31 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK LABEL DESCRIPTION Security Level Select More Secure to enable WPA3-SAE/WPA2-PSK data encryption. Security Mode Select WPA3-SAE/WPA2-PSK from the drop-down list box.
Chapter 7 Wireless 7.3 Guest/More AP Use this screen to configure a guest wireless network that allows access to the Internet through the Zyxel Device. Click Network Setting > Wireless > Guest/More AP. The screen appears as shown. This allows you to use one access point to provide several BSSs simultaneously.
Page 136
Chapter 7 Wireless Click the Modify icon in the More AP screen. The following screen displays. Figure 78 Network Setting > Wireless > More AP Edit The following table describes the fields in this screen. Table 34 Network Setting > Wireless > Guest/More AP > Edit LABEL DESCRIPTION Wireless Network Setup...
Page 137
Chapter 7 Wireless Table 34 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Wireless The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Network Name Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for WiFi.
Chapter 7 Wireless Table 34 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving any changes. Click OK to save your changes. 7.5 MAC Authentication Use this screen to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the Zyxel Device (Deny), based on the MAC address of each device.
Chapter 7 Wireless Table 35 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION Add new MAC This field is available when you select Deny or Allow in the MAC Restrict Mode field. address Click this if you want to add a new MAC address entry to the MAC filter list below. WiFi Enter the MAC addresses of the devices that are allowed or denied access to the Zyxel...
Page 140
Chapter 7 Wireless Figure 80 Network Setting > Wireless > WPS The following table describes the labels in this screen. Table 36 Network Setting > Wireless > WPS LABEL DESCRIPTION General Click to enable ( ) and have the Zyxel Device activate WPS. Otherwise, it is disabled. Add a new device with WPS Method Method 1 PBC Use this section to set up a WPS WiFi network using Push Button Configuration (PBC).
Chapter 7 Wireless Table 36 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Method 3 Use this section to set up a WPS WiFi network by entering the PIN of the Zyxel Device into the client. Click this switch to make it turn blue. Click Apply to activate WPS method 3 on the Zyxel Device.
Chapter 7 Wireless The following table describes the labels in this screen. Table 37 Network Setting > Wireless > WMM LABEL DESCRIPTION WiFi WMM of SSID Select On to have the Zyxel Device automatically give the network (SSIDx) a priority level WiFi according to the ToS value in the IP header of packets it sends.
Page 143
Chapter 7 Wireless The following table describes the labels in this screen. Table 38 Network Setting > Wireless > Others LABEL DESCRIPTION RTS/CTS Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS (Clear Threshold To Send) handshake.
Chapter 7 Wireless Table 38 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION 802.11 Protection Enabling this feature can help prevent collisions in mixed-mode networks (networks with both IEEE 802.11b and IEEE 802.11g traffic). Select Auto to have the wireless devices transmit data after a RTS/CTS handshake. This helps improve IEEE 802.11g performance.
Chapter 7 Wireless Figure 83 Network Setting > Wireless > Channel Status 7.10 MESH Use this screen to enable or disable MPro Mesh for MPro Mesh-supported devices. MPro Mesh is the Zyxel implantation of WiFi-Alliance Easy Mesh. It supports AP steering, band steering, auto-configuration and other advances for your wireless network.
Page 146
Chapter 7 Wireless Figure 84 Mesh Application A controller can automatically configure WiFi settings on extenders in the network as well as optimize bandwidth usage. The controller optimizes bandwidth usage by directing wireless clients to an extender (AP steering) or 2.4G or 5G band (band steering) that is less busy. AP Steering AP steering allows wireless clients to roam seamlessly between Mesh supported devices in your Mesh network by using the same SSID and WiFi password.
Page 147
Chapter 7 Wireless Figure 86 Band Steering Application Note: For AP steering and band steering to work, the controller and all the APs in the network need to have the same SSID and password. Therefore, we recommend using the controller to change the SSID and password. When MPro Mesh is enabled: •...
Chapter 7 Wireless Figure 87 Network > Wireless > MESH Press the WPS button for more than 5 seconds on the Zyxel Device. Click Add Extender in the MPro Mesh App. Install from Google Play or the Apple App store. 7.11 Technical Reference This section discusses wireless LANs in depth.
Page 149
Chapter 7 Wireless Figure 88 Example of a WiFi Network The WiFi network is the part in the blue circle. In this WiFi network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your Zyxel Device is the Every WiFi network must follow these basic guidelines.
Chapter 7 Wireless 7.11.2 Additional Wireless Terms The following table describes some WiFi network terms and acronyms used in the Zyxel Device’s Web Configurator. Table 39 Additional WiFi Terms TERM DESCRIPTION RTS/CTS Threshold In a WiFi network which covers a large area, WiFi devices are sometimes not aware of each other’s presence.
Page 151
Chapter 7 Wireless Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of WiFi security you can set up in the WiFi network. 7.11.3.1 SSID Normally, the Zyxel Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the Zyxel Device does not broadcast the SSID.
Chapter 7 Wireless The types of encryption you can choose depend on the type of authentication. (See Section 7.11.3.3 on page 151 for information about this.) Table 40 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA-PSK...
Chapter 7 Wireless Figure 89 Basic Service Set 7.11.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The Zyxel Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously.
Chapter 7 Wireless Use short preamble if you are sure all WiFi devices on the network support it, and to provide more efficient communications. Use the dynamic setting to automatically use short preamble when all WiFi devices on the network support it, otherwise the Zyxel Device uses long preamble.
Page 155
Chapter 7 Wireless Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
Page 156
Chapter 7 Wireless Figure 90 Example WPS Process: PIN Method 7.11.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
Page 157
Chapter 7 Wireless Figure 91 How WPS Works The roles of registrar and enrollee last only as long as the WPS setup process is active (2 minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake;...
Page 158
Chapter 7 Wireless Figure 92 WPS: Example Network Step 1 In step 2, you add another WiFi client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network.
Page 159
Chapter 7 Wireless Figure 94 WPS: Example Network Step 3 7.11.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • When you use WPS, it works between two devices only. You cannot enroll multiple devices simultaneously, you must enroll one after the other.
H A P T E R Home Networking 8.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
Page 161
Chapter 8 Home Networking Subnet Mask The subnet mask specifies the network number portion of an IP address. Your Zyxel Device will compute the subnet mask automatically based on the IP address that you entered. You do not need to change the subnet mask computed by the Zyxel Device unless you are instructed to do otherwise.
Chapter 8 Home Networking Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. When a UPnP device joins a network, it announces its presence with a multicast message.
Page 163
Chapter 8 Home Networking Figure 96 Network Setting > Home Networking > LAN Setup AX/DX/EX/PX Series User’s Guide...
Page 164
Chapter 8 Home Networking The following table describes the fields in this screen. Table 41 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name This displays the name of the group that your Zyxel Device belongs to. LAN IP Setup IP Address Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation,...
Page 165
Chapter 8 Home Networking Table 41 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION Link Local Address A link-local address uniquely identifies a device on the local network (the LAN). It is similar to Type a “private IP address” in IPv6. You can have the same link-local address on multiple interfaces on a device.
Chapter 8 Home Networking Table 41 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DNS Query Scenario Select how the Zyxel Device handles clients’ DNS information requests. IPv4/IPv6 DNS Server: The Zyxel Device forwards the requests to both the IPv4 and IPv6 DNS servers and sends clients the first DNS information it receives.
Page 167
Chapter 8 Home Networking The following table describes the labels in this screen. Table 42 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Static DHCP Click this to configure a static DHCP entry. Configuration This is the index number of the entry. Status This field displays whether the client is connected to the Zyxel Device.
Chapter 8 Home Networking Table 43 Static DHCP: Static DHCP Configuration LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify if you select Manual Input in the previous field. Click OK to save your changes.
Chapter 8 Home Networking The following table describes the labels in this screen. Table 44 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP State UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator).
Page 170
Chapter 8 Home Networking Figure 100 Network Setting > Home Networking > Additional Subnet The following table describes the labels in this screen. Table 45 Network Setting > Home Networking > Additional Subnet LABEL DESCRIPTION IP Alias Setup Group Name Select the interface group name for which you want to configure the IP alias settings.
Chapter 8 Home Networking Table 45 Network Setting > Home Networking > Additional Subnet (continued) LABEL DESCRIPTION IPv4 Address Enter the public IP address provided by your ISP. Subnet Mask Enter the public IPv4 subnet mask provided by your ISP. Offer Public IP Click this switch to enable or disable the Zyxel Device to provide public IP addresses by DHCP by DHCP...
Chapter 8 Home Networking 8.7 Wake on LAN Wake on LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature the remote hardware (for example the network adapter on a computer) must support Wake On LAN using the ‘Magic Packet’...
Chapter 8 Home Networking Click Network Setting > Home Networking > TFTP Server Name to open this screen. Figure 103 Network Setting > Home Networking > TFTP Server Name The following table describes the labels in this screen. Table 48 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION TFTP Server...
Chapter 8 Home Networking Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems.
Chapter 8 Home Networking Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. 8.10.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer.
Page 176
Chapter 8 Home Networking Open Windows Explorer and click Network. Right-click the Zyxel Device icon and select Properties. Figure 105 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 106 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. AX/DX/EX/PX Series User’s Guide...
Page 177
Chapter 8 Home Networking Figure 107 Internet Connection Properties: Advanced Settings Figure 108 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 109 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network and Sharing Center.
Chapter 8 Home Networking Figure 110 Internet Connection Status 8.11 Turn on UPnP in Windows 10 Example This section shows you how to use the UPnP feature in Windows 10. UPnP server is installed in Windows 10. Activate UPnP on the Zyxel Device by clicking Network Setting > Home Networking > UPnP. Make sure the computer is connected to the LAN port of the Zyxel Device.
Page 179
Chapter 8 Home Networking Click Change advanced sharing settings. Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer.
Chapter 8 Home Networking 8.11.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. Make sure your computer is connected to the LAN port of the Zyxel Device. Open File Explorer and click Network.
Page 181
Chapter 8 Home Networking Figure 111 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 112 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. AX/DX/EX/PX Series User’s Guide...
Page 182
Chapter 8 Home Networking Figure 113 Internet Connection Properties: Advanced Settings Figure 114 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 115 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network &...
Chapter 8 Home Networking Figure 116 Internet Connection Status 8.12 Web Configurator Easy Access in Windows 7 With UPnP, you can access the Web-based Configurator on the Zyxel Device without needing to find out the IP address of the Zyxel Device first. This comes helpful if you do not know the IP address of the Zyxel Device.
Page 184
Chapter 8 Home Networking Figure 117 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 118 Network Connections: My Network Places Right-click the icon for your Zyxel Device and select Properties.
Chapter 8 Home Networking Figure 119 Network Connections: My Network Places: Properties: Example 8.13 Web Configurator Easy Access in Windows 10 Follow the steps below to access the Web Configurator. Open File Explorer. Click Network. AX/DX/EX/PX Series User’s Guide...
Page 186
Chapter 8 Home Networking Figure 120 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 121 Network Connections: Network Infrastructure Right-click the icon for your Zyxel Device and select Properties.
Chapter 8 Home Networking Figure 122 Network Connections: Network Infrastructure: Properties: Example 8.13.1 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Zyxel Device as a DHCP server or disable it.
Chapter 8 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation.
Page 189
Chapter 8 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
H A P T E R Routing 9.1 Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes.
Chapter 9 Routing Figure 124 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 49 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Click this to set up a new static route on the Zyxel Device. Route This is the number of an individual static route.
Page 192
Chapter 9 Routing Figure 125 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 50 Network Setting > Routing > Static Route > Add New Static Route LABEL DESCRIPTION Active...
Chapter 9 Routing 9.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting >...
Chapter 9 Routing The following table describes the labels in this screen. Table 52 Network Setting > Routing > DNS Route > Add New DNS Route LABEL DESCRIPTION Active Enable DNS route in your Zyxel Device Domain Name Enter the domain name you want to resolve. You can use the wildcard character, an “*”...
Chapter 9 Routing Table 53 Network Setting > Routing > Policy Route (continued) LABEL DESCRIPTION Source MAC This is the source MAC address. Source This is the interface from which the matched traffic is sent. Interface WAN Interface This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy.
Chapter 9 Routing Table 54 Policy Route: Add or Edit (continued) LABEL DESCRIPTION Protocol Select the transport layer protocol (TCP, UDP, or None). Source Port Enter the source port number. Source MAC Enter the source MAC address. Source Interface Type the name of the interface from which the matched traffic is sent. (ex: br0 or LAN1 –...
Page 197
Chapter 9 Routing Table 55 Network Setting > Routing > RIP LABEL DESCRIPTION Version The RIP version controls the format and the broadcasting method of the RIP packets that the Zyxel Device sends (it recognizes both formats when receiving). RIPv1 is universally supported but RIPv2 carries more information.
H A P T E R Quality of Service (QoS) 10.1 QoS Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
Page 199
Chapter 10 Quality of Service (QoS) QoS versus CoS QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class.
Chapter 10 Quality of Service (QoS) The Zyxel Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions which are performed on the colored packets. See Section 10.8 on page 212 for more information on each metering algorithm.
Chapter 10 Quality of Service (QoS) Figure 131 Network > QoS > General The following table describes the labels in this screen. Table 56 Network Setting > QoS > General LABEL DESCRIPTION Select the Enable check box to turn on QoS to improve your network performance. WAN Managed Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using Upstream...
Page 202
Chapter 10 Quality of Service (QoS) Use this screen to configure QoS queue assignment to decide the priority on WAN or LAN interfaces. Traffic with higher priority gets through faster than those with lower priority. Low-priority traffic is dropped first when the network is congested. Note: Configure the priority level for a QoS queue from 1 to 8.
Chapter 10 Quality of Service (QoS) Table 57 Network Setting > QoS > Queue Setup (continued) LABEL DESCRIPTION Weight This shows the weight of this queue. Buffer This shows the queue management algorithm used for this queue. Management Queue management algorithms determine how the Zyxel Device should handle packets when it receives too many (network congestion).
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 58 Network Setting > QoS > Classification Setup LABEL DESCRIPTION Add New Click this to create a new classifier. Classification Order This is the index number of the entry. The classifiers are applied in order of their numbering. Status This field displays whether the classifier is active or not.
Page 205
Chapter 10 Quality of Service (QoS) Figure 134 Classification Setup: Add or Edit AX/DX/EX/PX Series User’s Guide...
Page 206
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 59 Classification Setup: Add or Edit LABEL DESCRIPTION Step1: Class Configuration Active Click this switch to enable or disable the classifier. When the switch turns blue , the function is enabled.
Page 207
Chapter 10 Quality of Service (QoS) Table 59 Classification Setup: Add or Edit (continued) LABEL DESCRIPTION Service This field is available only when you select IP in the Ether Type field. This field simplifies classifier configuration by allowing you to select a predefined application. When you select a predefined application, you do not configure the rest of the filter fields.
Chapter 10 Quality of Service (QoS) Table 59 Classification Setup: Add or Edit (continued) LABEL DESCRIPTION 802.1P Mark Select a priority level with which the Zyxel Device replaces the IEEE 802.1p priority field in the packets. If you select Unchange, the Zyxel Device keep the 802.1p priority field in the packets. Step4: Class Routing Forward to Select a WAN interface through which traffic of this class will be forwarded out.
Chapter 10 Quality of Service (QoS) Table 60 Network Setting > QoS > Shaper Setup (continued) LABEL DESCRIPTION Rate Limit This shows the average rate limit of traffic bursts for this shaper. Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper.
Chapter 10 Quality of Service (QoS) Figure 137 Network Setting > QoS > Policer Setup The following table describes the labels in this screen. Table 62 Network Setting > QoS > Policer Setup LABEL DESCRIPTION Add new Policer Click this to create a new entry. This is the index number of the entry.
Page 211
Chapter 10 Quality of Service (QoS) Figure 138 Policer Setup: Add or Edit The following table describes the labels in this screen. Table 63 Policer Setup: Add/Edit LABEL DESCRIPTION Active Click this switch to enable or disable the policer. When the switch turns blue , the function is enabled.
Chapter 10 Quality of Service (QoS) Table 63 Policer Setup: Add/Edit (continued) LABEL DESCRIPTION Committed Specify the committed burst size for packet bursts. This must be equal to or less than the peak Burst Size burst size (two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm.
Page 213
Chapter 10 Quality of Service (QoS) IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network.
Page 214
Chapter 10 Quality of Service (QoS) different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. IP Precedence Similar to IEEE 802.1p prioritization at layer-2, you can use IP precedence to prioritize packets in a layer-3 network.
Page 215
Chapter 10 Quality of Service (QoS) Table 65 Internal Layer2 and Layer3 QoS Mapping (continued) LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE TOS (IP IP PACKET LENGTH PRIORITY (ETHERNET DSCP PRECEDENCE) (BYTE) PRIORITY) 100110 100100 100010 100000 101110 101000 110000 111000...
Page 216
Chapter 10 Quality of Service (QoS) The srTCM evaluates incoming packets and marks them with one of three colors which refer to packet loss priority levels. High packet loss priority level is referred to as red, medium is referred to as yellow and low is referred to as green.
H A P T E R Network Address Translation (NAT) 11.1 Overview NAT (Network Address Translation – NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
Chapter 11 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
Chapter 11 Network Address Translation (NAT) Note: TCP port 7547 is reserved for system use. Figure 140 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 66 Network Setting > NAT > Port Forwarding LABEL DESCRIPTION Add New Rule...
Page 220
Chapter 11 Network Address Translation (NAT) Figure 141 Port Forwarding: Add or Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields.
Chapter 11 Network Address Translation (NAT) Table 67 Port Forwarding: Add or Edit (continued) LABEL DESCRIPTION Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field.
Page 222
Chapter 11 Network Address Translation (NAT) Figure 142 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Zyxel Device to record Jane’s computer IP address. The Zyxel Device associates Jane's computer IP address with the "open"...
Chapter 11 Network Address Translation (NAT) Table 68 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This field displays the name of the service used by this rule.
Chapter 11 Network Address Translation (NAT) The following table describes the labels in this screen. Table 69 Port Triggering: Add or Edit LABEL DESCRIPTION Active Click to enable (blue switch) or disable (gray switch) to activate or deactivate the rule. Service Name Enter a name to identify this rule using keyboard characters (A –...
Chapter 11 Network Address Translation (NAT) Figure 145 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 70 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not Address specified in the Port Forwarding screen.
Chapter 11 Network Address Translation (NAT) Figure 146 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 71 Network Setting > NAT > ALG LABEL DESCRIPTION NAT ALG Enable this to make sure applications such as FTP and file transfer in IM applications work correctly with port-forwarding and address-mapping rules.
Chapter 11 Network Address Translation (NAT) Figure 147 Network Setting > NAT > Address Mapping The following table describes the fields in this screen. Table 72 LABEL DESCRIPTION Rule Name This is the name of the rule. Local Start IP This is the starting Inside Local IP Address (ILA).
Page 228
Chapter 11 Network Address Translation (NAT) Figure 148 Network Setting > NAT > Address Mapping > Add New Rule The following table describes the fields in this screen. Table 73 Network Setting > NAT > Address Mapping > Add New Rule LABEL DESCRIPTION Rule Name...
Chapter 11 Network Address Translation (NAT) 11.7 Sessions Use this screen to limit the number of concurrent NAT sessions a client can use, to ensure that no single client uses up too many available NAT sessions. Some applications, such as P2P file sharing, demand a greater number of NAT sessions in order to get a better uploading and downloading rate.
Chapter 11 Network Address Translation (NAT) 11.8.1 NAT Definitions Inside or outside denotes where a host is located relative to the Zyxel Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Chapter 11 Network Address Translation (NAT) 11.8.3 How NAT Works Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN.
Page 232
Chapter 11 Network Address Translation (NAT) Figure 151 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT.
Page 233
Chapter 11 Network Address Translation (NAT) Port Forwarding Example Let's say you want to assign ports 21 – 25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
H A P T E R 12.1 DNS Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
Chapter 12 DNS 12.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.
Chapter 12 DNS 12.2.1 Add or Edit DNS Entry You can manually add or edit the Zyxel Device’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
Page 237
Chapter 12 DNS Figure 155 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 79 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box.
H A P T E R VLAN Group 13.1 Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.
Chapter 13 VLAN Group 13.2 VLAN Group Settings This screen shows the VLAN groups created on the Zyxel Device. Click Network Setting > VLAN Group to open the following screen. Figure 157 Network Setting > VLAN Group The following table describes the fields in this screen. Table 80 Network Setting >...
Page 240
Chapter 13 VLAN Group Figure 158 Add or Edit VLAN Group The following table describes the fields in this screen. Table 81 Add/Edit VLAN Group LABEL DESCRIPTION VLAN Group Enter a name to identify this group. You can enter up to 30 characters. You can use letters, Name numbers, hyphens (–) and underscores (_).
H A P T E R Interface Grouping 14.1 Interface Grouping Overview By default, all LAN and WAN interfaces on the Zyxel Device are in the same group and can communicate with each other. Create interface groups to have the Zyxel Device assign IP addresses in different domains to different groups.
Chapter 14 Interface Grouping You can use this screen to create new user-defined interface groups or modify existing ones. Interfaces that do not belong to any user-defined group always belong to the default group. Click Network Setting > Interface Grouping to open the following screen. Figure 160 Network Setting >...
Page 243
Chapter 14 Interface Grouping Figure 161 Interface Group Configuration (DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) AX/DX/EX/PX Series User’s Guide...
Page 244
Chapter 14 Interface Grouping Figure 162 Interface Group Configuration (EX3300-T0, EX3301-T0, EX5300, EX5301, EX5401-B0, and EX5501) AX/DX/EX/PX Series User’s Guide...
Page 245
Chapter 14 Interface Grouping Figure 163 Interface Group Configuration (AX7501 and PX7501) The following table describes the fields in this screen. Table 83 Interface Group Configuration LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (–) and underscores (_).
Chapter 14 Interface Grouping Table 83 Interface Group Configuration (continued) LABEL DESCRIPTION Automatically Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware. See Section 14.2.2 on page 246 for more information.
Page 247
Chapter 14 Interface Grouping The following table describes the fields in this screen. Table 84 Interface Grouping Criteria LABEL DESCRIPTION Source MAC Enter the source MAC address of the packet. Address DHCP Option 60 Select this option and enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware.
H A P T E R USB Service 15.1 USB Service Overview You can share files on a USB memory stick or hard drive connected to your Zyxel Device with users on your network. The following figure is an overview of the Zyxel Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Zyxel Device.
Chapter 15 USB Service Shares When settings are set to default, each USB device connected to the Zyxel Device is given a folder, called a “share”. If a USB hard drive connected to the Zyxel Device has more than one partition, then each partition will be allocated a share.
Page 250
Chapter 15 USB Service Figure 166 Network Setting > USB Service Note: The Share Directory List is only visible when you connect a USB device. Each field is described in the following table. Table 85 Network Setting > USB Service > File Sharing LABEL DESCRIPTION Information...
Chapter 15 USB Service Table 85 Network Setting > USB Service > File Sharing (continued) LABEL DESCRIPTION Share Path This field displays the location in the USB of the file you shared. Share This field displays a description of the file you shared. Description Modify Click the Edit icon to change the settings of an existing share.
Chapter 15 USB Service The following table describes the labels in this menu. Table 86 Network Setting > USB Service > Media Server LABEL DESCRIPTION Volume Select the volume in the USB storage device that you want to add as a share in the Zyxel Device.
Page 253
Chapter 15 USB Service To change your Zyxel Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 168 Network Setting > USB Service > Media Server The following table describes the labels in this menu. Table 87 Network Setting >...
H A P T E R Firewall 16.1 Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall: •...
Chapter 16 Firewall to network resources. The Zyxel Device is pre-configured to automatically detect and thwart all known DoS attacks. DoS Thresholds For DoS attacks, the Zyxel Device uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions. You can use the default threshold values, or you can change them to values more suitable to your security requirements.
Chapter 16 Firewall • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (Section 16.6 on page 261). 16.3 Firewall General Settings Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it.
Chapter 16 Firewall Table 88 Security > Firewall > General (continued) LABEL DESCRIPTION High This setting blocks all traffic to and from the Internet. Only local network traffic and LAN to WAN service (Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting.
Chapter 16 Firewall 16.4.1 Add Customized Service Add a customized rule or edit an existing rule by specifying the protocol and the port numbers. Click Add New Protocol Entry in the Protocol screen to display the following screen. Figure 172 Security > Firewall > Protocol: Add New Protocol Entry The following table describes the labels in this screen.
Chapter 16 Firewall Figure 173 Security > Firewall > Access Control The following table describes the labels in this screen. Table 91 Security > Firewall > Rules LABEL DESCRIPTION Rules Storage Space This read-only bar shows how much of the Zyxel Device's memory for recording firewall Usage rules it is currently using.
Page 260
Chapter 16 Firewall Figure 174 Security > Firewall > Access Control > Add New ACL Rule The following table describes the labels in this screen. Table 92 Security > Firewall > Access Control > Add New ACL Rule LABEL DESCRIPTION Active Click the Active button to enable this ACL rule.
Chapter 16 Firewall Table 92 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL DESCRIPTION MAC Address Enter the MAC addresses of the wireless or LAN clients that are allowed access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
Chapter 16 Firewall The following table describes the labels in this screen. Table 93 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass Blocking maximum thresholds. Apply Click this to save your changes.
Chapter 16 Firewall • WAN to Router By default the Zyxel Device stops computers on the WAN from managing the Zyxel Device. You could configure one of these rules to allow a WAN computer to manage the Zyxel Device. Note: You also need to configure the remote management settings to allow a WAN computer to manage the Zyxel Device.
Page 264
Chapter 16 Firewall Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC (Internet Relay Chat) is blocked, are there users that require this service? Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? Does a rule that allows Internet users access to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the LAN, Internet users may be able to...
H A P T E R MAC Filter 17.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. Every Ethernet device has a unique MAC (Media Access Control) address.
Chapter 17 MAC Filter Table 94 Security > MAC Filter (continued) LABEL DESCRIPTION Active Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode. Host Name Enter the host name of the wireless or LAN clients that are allowed access to the Zyxel Device.
H A P T E R Parental Control 18.1 Parental Control Overview Parental control allows you to limit the time a user can access the Internet and prevent users from viewing inappropriate content or participating in specified online activities. 18.2 Parental Control Settings For DX/EX3300, DX/EX3301, EX5300, EX5301, DX5301-B2/B3 and DX/EX5401 Use this screen to enable parental control and view parental control rules and schedules.
Chapter 18 Parental Control The following table describes the fields in this screen. Table 96 Security > Parental Control LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. When the switch goes to the right ( the function is enabled.
Chapter 18 Parental Control Figure 180 Parental Control: Scheduled Profile The following table describes the fields in this screen. Table 98 Parental Control: Add more Profile LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. When the switch goes to the right ( the function is enabled.
Chapter 18 Parental Control Figure 181 Parental Control > Add more Profile: Schedule The following table describes the fields in this screen. Table 99 Parental Control: Add more Profile LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile. Internet Click this switch to enable or disable Internet access.
Page 271
Chapter 18 Parental Control Click Security > Parental Control to open the following screen. Figure 182 Security > Parental Control The following table describes the fields in this screen. Table 100 Security > Parental Control LABEL DESCRIPTION General Parental Control Select Enable to activate parental control on the Zyxel Device.
Chapter 18 Parental Control 18.3.1 Add or Edit a Parental Control Profile Click Add new PCP in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites.
Page 273
Chapter 18 Parental Control Figure 184 Security > Parental Control > Add or Edit PCP (Network Service & Site/URL Keyword) The following table describes the fields in this screen. Table 101 Security > Parental Control >Add or Edit PCP LABEL DESCRIPTION General Active...
Page 274
Chapter 18 Parental Control Table 101 Security > Parental Control >Add or Edit PCP (continued) LABEL DESCRIPTION Service Name This shows the name of the rule. Protocol:Port This shows the protocol and the port of the rule. Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule.
Page 275
Chapter 18 Parental Control Figure 186 Security > Parental Control > Add or Edit PCP > Add New Service The following table describes the fields in this screen. Table 102 Security > Parental Control > Add or Edit PCP > Add New Service LABEL DESCRIPTION Add New...
Page 276
Chapter 18 Parental Control The following table describes the fields in this screen. Table 103 Security > Parental Control > Add or Edit PCP > Add Keyword LABEL DESCRIPTION Site/URL Enter a keyword and click OK to have the Zyxel Device block access to the website URLs that Keyword contain the keyword.
H A P T E R Scheduler Rule 19.1 Scheduler Rule Overview A Scheduler Rule allows you to define time periods and days during which the Zyxel Device allows certain actions. 19.2 Scheduler Rule Settings Use this screen to view, add, or edit time schedule rules. A scheduler rule is a reusable object that is applied to other features, such as Firewall Access Control.
Page 278
Chapter 19 Scheduler Rule Figure 189 Scheduler Rule: Add or Edit The following table describes the fields in this screen. Table 105 Scheduler Rule: Add or Edit LABEL DESCRIPTION Rule Name Enter a name (up to 31 printable English keyboard characters, not including spaces) for this schedule.
H A P T E R Certificates 20.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.
Chapter 20 Certificates Figure 190 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 106 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is Select the check box and enter the private key into the text box to store it on the Zyxel Device.
Chapter 20 Certificates name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate. Figure 191 Create Certificate Request The following table describes the labels in this screen. Table 107 Create Certificate Request LABEL DESCRIPTION...
Page 282
Chapter 20 Certificates Figure 192 Certificate Request: View The following table describes the fields in this screen. Table 108 Certificate Request: View LABEL DESCRIPTION Name This field displays the identifying name of this certificate. Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate.
Chapter 20 Certificates Table 108 Certificate Request: View (continued) LABEL DESCRIPTION Signing Request This field displays the CSR (Certificate Signing Request) information of this certificate. The CSR will be provided to a certificate authority, and it includes information about the public key, organization name, domain name, location, and country of this certificate.
Chapter 20 Certificates 20.5 Import Trusted CA Certificate Click Import Certificate in the Trusted CA screen to open the Import Certificate screen. The Zyxel Device trusts any valid certificate signed by any of the imported trusted CA certificates. Certificates should be in one of the following formats: Binary X.509, PEM (base-64) encoded, Binary PKCS#7, or PEM (base-64) encoded PKCS#7.
Chapter 20 Certificates Figure 195 Trusted CA: View The following table describes the labels in this screen. Table 111 Trusted CA: View LABEL DESCRIPTION Name This field displays the identifying name of this certificate. This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format.
Chapter 20 Certificates Public and Private Keys When using public-key cryptology for authentication, each host has two keys. One key is public and can be made openly available; the other key is private and must be kept secure. Public-key encryption in general works as follows.
Page 287
Chapter 20 Certificates Make sure that the certificate has a “.cer” or “.crt” file name extension. Figure 196 Certificates on Your Computer Double-click the certificate’s icon to open the Certificate window. Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 197 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields.
H A P T E R VoIP 21.1 Overview You can make calls over the Internet using VoIP technology. For this, you first need to set up a SIP account with a SIP service provider. Use this chapter to: • Connect an analog phone to the Zyxel Device. •...
Chapter 21 VoIP SIP stands for Session Initiation Protocol. SIP is a signaling standard that lets one network device (like a computer or the Zyxel Device) send messages to another. In VoIP, these messages are about phone calls over the network. For example, when you dial a number on your Zyxel Device, it sends a SIP message over the network asking the other device (the number you dialed) to take part in the call.
Chapter 21 VoIP Figure 198 VoIP > SIP > SIP Account. The following table describes the labels in this screen. Table 112 VoIP > SIP > SIP Account LABEL DESCRIPTION Add New Account Click this to configure a SIP account. This is the index number of the entry.
Page 291
Chapter 21 VoIP Figure 199 VoIP > SIP > SIP Account > Add New Account or Edit AX/DX/EX/PX Series User’s Guide...
Page 292
Chapter 21 VoIP The following table describes the labels in this screen. Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit LABEL DESCRIPTION SIP Account Selection SIP Account Selection This field displays ChangeMe if you are creating a new SIP account or the SIP account you are modifying.
Page 293
Chapter 21 VoIP Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Listening Volume Control Select the loudness that the Zyxel Device uses for speech that it receives from the peer device. Choices are Minimum, Middle, and Maximum. Enable G.
Chapter 21 VoIP Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Hot Line / Warm Line Enter the number of the hot line or warm line that you want the Zyxel Device to dial. Number Warm Line Timer Enter a number of seconds that the Zyxel Device waits before dialing the warm line...
Chapter 21 VoIP 21.3.3 Provider Entry Add or Edit Use this screen to configure the SIP server information, the numbers for certain phone functions and dialing plan for a SIP service provider. Click VoIP > SIP > SIP Service Provider and then click the Modify icon next to a profile of SIP service provider settings to open the following screen.
Page 296
Chapter 21 VoIP Figure 201 VoIP > SIP > SIP Service Provider: Add New Provider or Edit AX/DX/EX/PX Series User’s Guide...
Page 297
Chapter 21 VoIP The following table describes the labels in this screen. Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit LABEL DESCRIPTION SIP Service Provider Selection Service Provider Selection This field displays ADD_NEW if you are creating a new SIP service provider profile or the SIP service provider name you are modifying.
Page 298
Chapter 21 VoIP Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Bound Interface Name If you select AnyWAN, the Zyxel Device automatically activates the VoIP service when any WAN connection is up. If you select MultiWAN, you also need to select the pre-configured WAN connections.
Chapter 21 VoIP Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Min-SE Enter the minimum number of seconds the Zyxel Device lets a SIP session remain idle (without traffic) before it automatically disconnects the session. When two SIP devices start a SIP session, they must agree on an expiration time for idle sessions.
Chapter 21 VoIP Table 116 VoIP > Phone > Phone Device LABEL DESCRIPTION Incoming SIP This field displays the SIP address that you use to receive calls on this phone port. Number Outgoing SIP This field displays the SIP address that you use to make calls on this phone port. Number Modify Click the Edit icon to configure the SIP account.
Chapter 21 VoIP Table 117 VoIP > Phone > Phone Device > Edit LABEL DESCRIPTION Immediate Dial Select this if you want to use the pound key (#) to tell the Zyxel Device to make the Enable phone call immediately, instead of waiting for the number of second you selected in the Dialog Interval Selection field of the VoIP >...
Chapter 21 VoIP 21.6 Call Rule Use this screen to add, edit, or remove speed-dial numbers for outgoing calls. Speed dial provides shortcuts for dialing frequently-used (VoIP) phone numbers. You also have to create speed-dial entries if you want to call SIP numbers that contain letters. Once you have configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number.
Chapter 21 VoIP Figure 206 VoIP > Call History Each field is described in the following table. Table 120 VoIP > Call History > Call History LABEL DESCRIPTION Clear Click this button to remove all entries from the call history list. Refresh Click this button to renew the call history list.
Page 304
Chapter 21 VoIP VoIP VoIP is the sending of voice signals over Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network. You can also use servers to run telephone service applications like PBX services and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service.
Page 305
Chapter 21 VoIP A SIP registration has a limited lifespan. The User Agent Client must renew its registration within this lifespan. If it does not do so, the registration data will be deleted from the SIP registrar's database and the connection broken. The Zyxel Device attempts to register all enabled subscriber ports when it is switched on.
Page 306
Chapter 21 VoIP Figure 208 SIP Proxy Server SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server.
Page 307
Chapter 21 VoIP When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer. See RFC 1889 for details on RTP. Pulse Code Modulation Pulse Code Modulation (PCM) measures analog signal amplitudes at regular time intervals and converts them into bits.
Page 308
Chapter 21 VoIP The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). Figure 210 SIP Call Through Proxy Servers The following table shows the SIP call progression.
Page 309
Chapter 21 VoIP User Agent 2 sends a response back to Proxy 2 indicating that the phone is ringing. The response is relayed back to User Agent 1 through Proxy 1. User Agent 2 sends an OK response to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 through Proxy 1.
Page 310
Chapter 21 VoIP Custom Tones (IVR) IVR (Interactive Voice Response) is a feature that allows you to use your telephone to interact with the Zyxel Device. The Zyxel Device allows you to record custom tones for the Early Media and Music On Hold functions.
Chapter 21 VoIP You can continue to add, listen to, or delete tones, or you can hang up the receiver when you are done. 21.8.1 Quality of Service (QoS) Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to provide bandwidth for real-time multimedia applications.
Page 312
Chapter 21 VoIP • Call Return • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding • Three-Way Conference • Internal Calls • Call Park and Pickup • Do not Disturb • IVR •...
Page 313
Chapter 21 VoIP Table 124 European Flash Key Commands COMMAND SUB-COMMAND DESCRIPTION Flash 1. Switch back and forth between two calls. 2. Put a current call on hold to answer an incoming call. 3. Separate the current three-way conference call into two individual calls (one is on-line, the other is on hold).
Page 314
Chapter 21 VoIP European Three-Way Conference Use the following steps to make three-way conference calls. When you are on the phone talking to someone, press the flash key to put the caller on hold and get a dial tone. Dial a phone number directly to make another call. When the second call is answered, press the flash key and press “3”...
Page 315
Chapter 21 VoIP Press the flash key to put the caller on hold. When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. USA Three-Way Conference Use the following steps to make three-way conference calls.
H A P T E R 22.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server.
Chapter 22 Log Table 127 Syslog Severity Levels (continued) CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 22.2 System Log Use the System Log screen to see the system logs.
Page 318
Chapter 22 Log Figure 213 System Monitor > Log > Security Log The following table describes the fields in this screen. Table 129 System Monitor > Log > Security Log LABEL DESCRIPTION Level Select a severity level from the drop-down list box. This filters search results according to the severity level you have selected.
H A P T E R Traffic Status 23.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces and NAT. 23.1.1 What You Can Do in this Chapter •...
Chapter 23 Traffic Status The following table describes the fields in this screen. Table 130 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Connected This shows the name of the WAN interface that is currently connected. Interface Packets Sent Data...
Chapter 23 Traffic Status Figure 215 System Monitor > Traffic Status > LAN The following table describes the fields in this screen. Table 131 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Interface This shows the LAN or WLAN interface.
Page 322
Chapter 23 Traffic Status Figure 216 System Monitor > Traffic Status > NAT The following table describes the fields in this screen. Table 132 System Monitor > Traffic Status > NAT LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Device Name This displays the name of the connected host.
H A P T E R VoIP Status 24.1 VoIP Status Screen Click System Monitor > VoIP Status to open the following screen. You can view the Voice over IP (VoIP) registration, current call status and phone numbers in this screen. Figure 217 System Monitor >...
Page 324
Chapter 24 VoIP Status Table 133 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Registration Time This field displays the last time the Device successfully registered the SIP account. The field is blank if the Device has never successfully registered this account. This field displays the account number and service domain of the SIP account.
Page 325
Chapter 24 VoIP Status Table 133 System Monitor > VoIP Status (continued) LABEL DESCRIPTION To Phone Port Type This field displays the phone ports type used to receive the current VoIP call. Three possible type Type values will be displayed here: SIP – For the current call which is categorized as Outgoing Call in the Call Type field, this field will show the type SIP.
H A P T E R ARP Table 25.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network.
Page 327
Chapter 25 ARP Table Figure 218 System Monitor > ARP Table The following table describes the labels in this screen. Table 134 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4 / IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to a port. Address MAC Address This is the MAC address of the device with the listed IP address.
H A P T E R Routing Table 26.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 26.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is ‘255.255.255.255’ for a host destination and ‘0.0.0.0’...
Page 329
Chapter 26 Routing Table Figure 219 System Monitor > Routing Table The following table describes the labels in this screen. Table 135 System Monitor > Routing Table LABEL DESCRIPTION IPv4 / IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic.
Page 330
Chapter 26 Routing Table Table 135 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U–Up: The route is up. !–Reject: The route is blocked and will force a route lookup to fail. G–Gateway: The route uses a gateway to forward traffic. H–Host: The target of the route is a host.
H A P T E R xDSL Statistics 27.1 Overview You can view information about DSL statistics, such as port details, in this screen. 27.2 xDSL Statistics Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen.
Page 332
Chapter 27 xDSL Statistics The following table describes the labels in this screen. Table 136 Status > xDSL Statistics LABEL DESCRIPTION Type Select the type of DSL line for refreshing statistics. Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display.
Page 333
Chapter 27 xDSL Statistics Table 136 Status > xDSL Statistics (continued) LABEL DESCRIPTION This is the number of Errored Seconds meaning the number of seconds containing at least one error block or at least one defect. This is the number of Severely Errored Seconds meaning the number of seconds containing 30% or more error blocks or at least one defect.
H A P T E R WLAN Station Status 28.1 WLAN Station Status Overview Click System Monitor > WLAN Station Status to open the following screen. Use this screen to view information and status of the wireless stations (wireless clients) that are currently associated with the Zyxel Device.
Page 335
Chapter 28 WLAN Station Status Table 137 System Monitor > WLAN Station Status (continued) LABEL DESCRIPTION The Signal-to-Noise Ratio (SNR) is the ratio between the received signal power and the received noise power. The greater the number, the better the quality of WiFi. The normal range is 15 to 40.
H A P T E R Cellular Statistics 29.1 Cellular Statistics Overview Use the Cellular Statistics screens to look at cellular Internet connection status. By default, a cellular WAN connection is used as a backup for the wired DSL or Ethernet WAN connections. 29.2 Cellular Statistics Settings To open this screen, click System Monitor >...
Page 337
Chapter 29 Cellular Statistics The following table describes the labels in this screen. Table 138 System Monitor > Cellular Statistics LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Select None to stop refreshing.
H A P T E R System 30.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 30.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network.
H A P T E R User Account 31.1 User Account Overview In the User Account screen, you can view the settings of the “admin” and other user accounts that you use to log into the Zyxel Device to manage it. 31.2 User Account Click Maintenance >...
Chapter 31 User Account Table 140 Maintenance > User Account (continued) LABEL DESCRIPTION Group This field displays whether this user has Administrator or User privileges. Remote This field displays whether this user can access the Zyxel Device with HTTP, Telnet or SSH through Privilege the WAN, LAN or LAN/WAN.
Page 341
Chapter 31 User Account Table 141 Maintenance > User Account > Add or Edit (continued) LABEL DESCRIPTION Password Type your new system password (up to 256 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the Zyxel Device.
H A P T E R Remote Management 32.1 Overview Remote management controls through which interfaces, which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 32.1.1 What You Can Do in this Chapter •...
Page 343
Chapter 32 Remote Management Figure 226 Maintenance > Remote Management > MGMT Services The following table describes the fields in this screen. Table 142 Maintenance > Remote Management LABEL DESCRIPTION WAN Interface Select Any_WAN to have the Zyxel Device automatically activate the remote management used for services service when any WAN connection is up.
Chapter 32 Remote Management 32.3 Trust Domain Use this screen to view a list of public IP addresses which are allowed to access the Zyxel Device through the services configured in the Maintenance > Remote Management > MGMT Services screen. Click Maintenance >...
Page 345
Chapter 32 Remote Management The following table describes the fields in this screen. Table 144 Maintenance > Remote Management > Trust Domain > Add Trust Domain LABEL DESCRIPTION IP Address Enter a public IPv4/IPv6 IP address which is allowed to access the service on the Zyxel Device from the WAN.
H A P T E R SNMP 33.1 Overview This chapter explains how to configure the SNMP settings on the Zyxel Device. Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network.
Chapter 33 SNMP • Get – Allows the manager to retrieve an object variable from the agent. • GetNext – Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations.
Page 348
Chapter 33 SNMP Table 145 Maintenance > SNMP (continued) LABEL DESCRIPTION Trap Community Enter the Trap Community, which is the password sent with each trap to the SNMP manager. The default is public and allows all requests. System Name Enter the SNMP system name. System Location Enter the SNMP system location.
H A P T E R Time Settings 34.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system date and time. 34.2 Time For effective scheduling and logging, the Zyxel Device system time must be accurate. Use this screen to configure the Zyxel Device’s time based on your local time zone.
Page 350
Chapter 34 Time Settings Figure 231 Maintenance > Time The following table describes the fields in this screen. Table 146 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device.
Page 351
Chapter 34 Time Settings Table 146 Maintenance > Time (continued) LABEL DESCRIPTION First – Fifth Time Select an NTP time server from the drop-down list box. Server Address Otherwise, select Other and enter the IP address or URL (up to 29 extended ASCII characters in length) of your time server.
H A P T E R Email Notification 35.1 Email Notification Overview A mail server is an application or a computer that can receive, forward and deliver email messages. To have the Zyxel Device send reports, logs or notifications through email, you must specify an email server and the email addresses of the sender and receiver.
Chapter 35 Email Notification Table 147 Maintenance > E-mail Notification (continued) LABEL DESCRIPTION E-mail Address This field displays the email address that you want to be in the from or sender line of the email that the Zyxel Device sends. Remove Click this button to delete the selected entries.
Page 354
Chapter 35 Email Notification Table 148 E-mail Notification > Add (continued) LABEL DESCRIPTION Cancel Click this button to begin configuring this screen afresh. Click this button to save your changes and return to the previous screen. AX/DX/EX/PX Series User’s Guide...
H A P T E R Log Setting 36.1 Log Setting Overview You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. 36.2 Log Settings Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records.
Chapter 36 Log Setting The following table describes the fields in this screen. Table 149 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Click the switch (it will turn blue) to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server. Select Local File to have the Zyxel Device save the log file on the Zyxel Device itself.
Page 358
Chapter 36 Log Setting • ‘End of Log’ message shows that a complete log has been sent. Figure 235 Email Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP...
H A P T E R Firmware Upgrade 37.1 Overview This chapter explains how to upload new firmware to your Zyxel Device. You can download new firmware releases from your nearest Zyxel FTP site (or www.zyxel.com) to use to upgrade your Zyxel Device’s performance.
Page 360
Chapter 37 Firmware Upgrade The following table describes the labels in this screen. Table 150 Maintenance > Firmware Upgrade LABEL DESCRIPTION Upgrade Firmware Restore Click to enable this option that restores the factory-default to the Zyxel Device after upgrading Default the firmware.
H A P T E R Backup/Restore 38.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore previous device configurations. 38.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
Page 362
Chapter 38 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Table 151 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Choose File / Browse to find it. Choose File Click this to find the file you want to upload.
Chapter 38 Backup/Restore 38.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example. This does not affect the Zyxel Device's configuration.
H A P T E R Diagnostic 39.1 Diagnostic Overview The Diagnostic screens display information to help you identify problems with the Zyxel Device. The route between an Ethernet switch and one of its Customer-Premises Equipment (CPE) may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.
Chapter 39 Diagnostic 39.3 Ping/TraceRoute/Nslookup Test Use this screen to ping, traceroute, or nslookup for troubleshooting. Ping and traceroute are used to test whether a particular host is reachable. After entering an IP address and clicking one of the buttons to start a test, the results will be shown in the Ping/Traceroute Test area.
Chapter 39 Diagnostic 39.4 802.1ag (CFM) Click Maintenance > Diagnostic > 802.1ag to open the following screen. Use this screen to configure and perform Connectivity Fault Management (CFM) actions as defined by the IEEE 802.1ag standard. CFM protocols include Continuity Check Protocol (CCP), Link Trace (LT), and Loopback (LB). Figure 243 Maintenance >...
Chapter 39 Diagnostic Table 153 Maintenance > Diagnostic > 802.1ag (continued) LABEL DESCRIPTION Maintenance Select a level (0 – 7) under which you want to create an MA. Domain (MD) Level MD Name Enter a descriptive name for the MD (Maintenance Domain). This field only appears if the Y.1731 field is disabled.
Chapter 39 Diagnostic Figure 244 Maintenance > Diagnostic > 802.3ah The following table describes the labels in this screen. Table 154 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION IEEE 802.3ah Ethernet OAM Click this switch to enable or disable the Ethernet OAM on the specified interface. When the switch goes to the right , the function is enabled.
Page 369
Chapter 39 Diagnostic B3 sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the DX5301-B2/B3. The test result then displays in the text box. ATM sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: •...
Page 370
Chapter 39 Diagnostic Figure 246 Maintenance > Diagnostic > OAM Ping The following table describes the labels in this screen. Table 155 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test. F4 segment Press this to perform an OAM F4 segment loopback test.
H A P T E R Troubleshooting 40.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Problems • Device Access Problems • Internet Problems •...
Chapter 40 Troubleshooting If the problem continues, contact the vendor. 40.3 Device Access Problems I do not know the IP address of the Zyxel Device. The default IP address is 192.168.1.1. If you changed the IP address, you might be able to find the IP address of the Zyxel Device by looking up the IP address of your computer’s default gateway.
Page 373
Chapter 40 Troubleshooting If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Make sure you have logged out of any earlier management sessions using the same user account even if they were through a different interface or using a different browser. •...
Page 374
Chapter 40 Troubleshooting Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. Log into www.dyndns.org using your account. Add a new DDNS host name. This tutorial uses the following settings as an example. •...
Chapter 40 Troubleshooting 40.4 Internet Problems I cannot access the Internet. Check the hardware connections and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure you entered your ISP account information correctly on the Network Setting > Broadband screen.
Chapter 40 Troubleshooting The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. • Building Materials: metal doors, aluminum studs. • Electrical devices: microwaves, monitors, electric motors, cordless phones, and other wireless devices. To optimize the speed and quality of your wireless connection, you can: •...
Page 377
Chapter 40 Troubleshooting Disconnect the Ethernet cable from the Zyxel Device’s Ethernet port or from your computer. Reconnect the Ethernet cable. Restart your computer. AX/DX/EX/PX Series User’s Guide...
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • https://www.zyxel.com/cn/zh/ India • Zyxel Technology India Pvt Ltd. • https://www.zyxel.com/in/en/ Kazakhstan •...
Page 381
Appendix A Customer Support • https://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Estonia • Zyxel Estonia • https://www.zyxel.com/ee/et/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France •...
Page 382
• Zyxel Communications Poland • https://www.zyxel.com/pl/pl/ Romania • Zyxel Romania • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland •...
Page 383
Appendix A Customer Support Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com South America Argentina • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Brazil • Zyxel Communications Brasil Ltda. • https://www.zyxel.com/br/pt/ Colombia •...
Page 384
Appendix A Customer Support Middle East • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • https://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • https://www.zyxel.com/za/en/...
P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
Page 386
Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
Page 387
Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 – 10, A – F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
Page 388
Appendix B IPv6 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.
Page 389
Appendix B IPv6 receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache.
Page 390
Appendix B IPv6 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:...
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 392
Appendix C Legal Information Български С настоящото Zyxel декларира, че това оборудване е в съответствие със съществените изисквания и другите (Bulgarian) приложими разпоредбите на Директива 2014/53/ЕC. National Restrictions • The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters.
Page 393
Appendix C Legal Information Română Prin prezenta, Zyxel declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi relevante ale (Romanian) Directivei 2014/53/UE. Slovenčina Zyxel týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 2014/53/EÚ. (Slovak) Slovenščina Zyxel izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 2014/53/EU.
Page 394
Appendix C Legal Information • CAUTION: Risk of explosion if battery is replaced by an incorrect type, dispose of used batteries according to the instruction. Dispose them at the applicable collection point for the recycling of electrical and electronic devices. For detailed information about recycling of this product, please contact your local city office, your household waste disposal service or the store where you purchased the product.
Page 396
Appendix C Legal Information Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC): AC is an electric current in which the flow of electric charge periodically reverses direction. Direct current (DC): DC if the unidirectional flow or movement of electric charge carriers. Earth;...
Index Index Numbers backup configuration Backup/Restore screen bandwidth capacity 2.5G WAN cable type 2.5G WiFi LED 28, 32 Basic Service Set, see BSS 5G WiFi LED blinking LEDs bottom panel IPv6 buttons Zyxel Device Bridge mode 105, 114 broadband Broadband screen access overview troubleshooting...
Page 398
Index import copyright 280, 283 public and private keys 213, 311 verification CoS technologies certificate request Create Certificate Request screen create creating certificates view CTS threshold 143, 150 certificates customer support advantages customized service authentication 279, 285 customized services 257, 258 creating public key replacing...
Page 399
Index DS, see differentiated services filters MAC address 138, 151 DSCP 213, 311 Finger services counters firewall port details enhancing security statistics LAND attack security considerations Dual Stack Lite traffic rule direction dual-band application Firewall DoS screen dual-band gateway Firewall General screen dynamic DNS firewall rules wildcard...
Page 400
Index ping prefix 95, 128, 385 prefix and length ICMP prefix delegation IEEE 802.11ax prefix length 95, 128, 385 IEEE 802.1Q subnet mask unspecified address IGMP IPv6 address version abbreviation method IPv6 firewall Import Certificate screen IPv6 rapid deployment importing trusted CAs iTunes server Inside Global Address, see IGA ITU-T...
Page 401
Index wireless LAN MGMT Services screen 342, 344 MTU (Multi-Tenant Unit) link trace Multi_WAN Link Trace Message, see LTM Remote Management Link Trace Response, see LTR multicast listening port multi-gigabit Local Area Network, see LAN multimedia Local Certificates screen Multiple BSS, see MBSSID Log Setting screen multiplexing LLC-based...
Page 402
Index problem troubleshooting Protocol (Customized Services) screen Packet Transfer Mode Protocol Entry parental control schedule setup 268, 269 password Push Button Configuration, see PBC admin lost push button, WPS user Peak Cell Rate (PCR) Per-Hop Behavior, see PHB 213, 311 198, 213, 311 phone functions marking...
Page 403
Index RTS threshold Trap 143, 150 versions SNMP trap srTCM security unusable network SSID wireless LAN MBSSID Security Log Static DHCP Security Parameter Index, see SPI Configuration service access control Static DHCP screen Service Set 132, 137 static route 190, 196 services configuration port forwarding...
Page 404
Index unusable USA type call service mode three-way conference USB port 314, 315 39, 40 thresholds data fragment 143, 150 RTS/CTS 143, 150 time top panel Vendor ID LED indicators Virtual Circuit (VC) Virtual Local Area Network See VLAN TPID VLAN Trace Route test Introduction...
Page 405
Index example fragmentation threshold 143, 150 limitations MAC address filter 138, 151 preamble 144, 150 RADIUS server RTS/CTS threshold 143, 150 security SSID status 154, 156 example limitations push button Wireless tutorial wizard setup Internet WLAN button WMM screen WPA2 WPA2-PSK WPA3-SAE (Simultaneous Authentication of Equals handshake)
Need help?
Do you have a question about the AX Series and is the answer not in the manual?
Questions and answers