ZyXEL Communications AX Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Network Router
  5. AX Series
  6. User manual

ZyXEL Communications AX Series User Manual

Hide thumbs Also See for AX Series:
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
Table of Contents

Advertisement

Quick Links

User's Guide
AX/DX/EX/PX Series
Default Login Details
Version 5.15-5.70 Ed 10, 8/2023
LAN IP Address
http://192.168.1.1
Login
admin
Password
See the device label
Copyright © 2023 Zyxel and/or its affiliates. All Rights Reserved.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the AX Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications AX Series

Summary of Contents for ZyXEL Communications AX Series

  • Page 1 User’s Guide AX/DX/EX/PX Series Default Login Details Version 5.15-5.70 Ed 10, 8/2023 LAN IP Address http://192.168.1.1 Login admin Password See the device label Copyright © 2023 Zyxel and/or its affiliates. All Rights Reserved.
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in product features or web configurator brand style.

  • Page 3: Document Conventions

    Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.

  • Page 4: Table Of Contents

    Contents Overview Contents Overview User’s Guide ............................18 Introducing the Zyxel Device ......................19 Hardware ............................... 29 Web Configurator ..........................65 Quick Start ............................. 77 Web Interface Tutorials ........................81 App Tutorials ............................130 Technical Reference ........................185 Connection Status ..........................186 Broadband ............................
  • Page 5 Contents Overview User Account ............................468 Remote Management ........................472 SNMP ..............................476 Time Settings ............................479 Email Notification ..........................482 Log Setting ............................485 Firmware Upgrade ..........................489 Backup/Restore ..........................492 Diagnostic ............................497 Troubleshooting and Appendices ....................504 Troubleshooting ..........................505 AX/DX/EX/PX Series User’s Guide...

  • Page 6: Table Of Contents

    Table of Contents Table of Contents Document Conventions ........................3 Contents Overview ..........................4 Table of Contents ..........................6 Part I: User’s Guide..................18 Chapter 1 Introducing the Zyxel Device ......................19 1.1 Overview ............................19 1.2 Example Applications ........................22 1.2.1 WAN Priority ........................... 22 1.2.2 Dual-Band WiFi ........................
  • Page 7 Table of Contents 2.3.4 EX3500-T0 and EX3501-T0 ...................... 56 2.3.5 EX5600-T1, EX5601-T0, and EX5601-T1 .................. 57 2.3.6 EX7501-B0 ..........................60 2.3.7 PX3321-T1 ..........................61 2.3.8 PX5531-T0 ..........................61 2.3.9 Transceiver Installation/Removal ..................62 2.3.10 WPS Button ........................... 64 2.3.11 RESET Button ......................... 64 Chapter 3 Web Configurator..........................65 3.1 Overview ............................
  • Page 8 Table of Contents 5.5 Network Security ........................... 114 5.5.1 Configuring a Firewall Rule ....................114 5.5.2 Parental Control ........................116 5.5.3 Configuring a MAC Address Filter for Wired LAN Connections ........121 5.6 Internet Calls ..........................122 5.6.1 Configuring VoIP ......................... 122 5.6.2 Adding a SIP Service Provider ...................
  • Page 9 Table of Contents Chapter 7 Connection Status..........................186 7.1 Connection Status Overview ...................... 186 7.1.1 Connectivity ........................186 7.1.2 Icon and Device Name ..................... 188 7.1.3 System Info ........................... 188 7.1.4 WiFi Settings ......................... 191 7.2 Guest WiFi Settings ........................193 7.2.1 LAN ............................
  • Page 10 Table of Contents 9.9.1 MPro Mesh ........................... 258 9.10 Technical Reference ........................259 9.10.1 WiFi Network Overview ..................... 259 9.10.2 Additional WiFi Terms ......................261 9.10.3 WiFi Security Overview ...................... 261 9.10.4 Signal Problems ......................... 263 9.10.5 BSS ............................263 9.10.6 MBSSID ..........................
  • Page 11 Table of Contents 11.4.1 Add or Edit Policy Route ....................306 11.5 RIP Overview ..........................308 11.5.1 RIP ............................308 Chapter 12 Quality of Service (QoS)........................309 12.1 QoS Overview ..........................309 12.1.1 What You Can Do in this Chapter ................... 309 12.2 What You Need to Know ......................
  • Page 12 Table of Contents 13.9.4 NAT Application ........................ 348 Chapter 14 DNS ..............................350 14.1 DNS Overview ..........................350 14.1.1 What You Can Do in this Chapter ................... 350 14.1.2 What You Need To Know ....................351 14.2 DNS Entry ............................. 351 14.2.1 Add or Edit DNS Entry ......................
  • Page 13 Table of Contents Chapter 19 Firewall ..............................374 19.1 Firewall Overview ........................374 19.1.1 What You Need to Know About Firewall ................ 374 19.2 Firewall ............................375 19.2.1 What You Can Do in this Chapter ................... 376 19.3 Firewall General Settings ......................376 19.4 Protocol (Customized Services) ....................
  • Page 14 Table of Contents Chapter 24 Certificates ............................401 24.1 Certificates Overview ........................ 401 24.1.1 What You Can Do in this Chapter ................... 401 24.2 What You Need to Know ......................401 24.3 Local Certificates ........................401 24.3.1 Create Certificate Request ..................... 403 24.3.2 View Certificate Request ....................
  • Page 15 Table of Contents Chapter 27 Traffic Status .............................446 27.1 Traffic Status Overview ....................... 446 27.1.1 What You Can Do in this Chapter ................... 446 27.2 WAN Status ..........................446 27.3 LAN Status ............................ 448 27.4 NAT Status ............................ 449 Chapter 28 VoIP Status ............................450 28.1 VoIP Status Screen ........................
  • Page 16 Table of Contents Chapter 35 System...............................467 35.1 System Overview ........................467 35.2 System ............................467 Chapter 36 User Account............................468 36.1 User Account Overview ......................468 36.2 User Account ..........................468 36.2.1 User Account Add or Edit ....................469 Chapter 37 Remote Management ........................472 37.1 Remote Management Overview .....................
  • Page 17 Table of Contents 42.1 Firmware Upgrade Overview ....................489 42.2 Firmware Upgrade ........................489 Chapter 43 Backup/Restore ..........................492 43.1 Backup/Restore Overview ......................492 43.2 Backup/Restore .......................... 492 43.3 Reboot ............................496 Chapter 44 Diagnostic............................497 44.1 Diagnostic Overview ........................497 44.1.1 What You Can Do in this Chapter ................... 497 44.2 What You Need to Know ......................

  • Page 18: User's Guide

    User’s Guide...

  • Page 19: Introducing The Zyxel Device

    1.1 Overview The Zyxel Device refers to the models listed in the tables. The AX Series are AON (Active Optical Network) routers while the PX Series are PON (Passive Optical Network) routers that connect through the Internet though a fiber cable.
  • Page 20 Chapter 1 Introducing the Zyxel Device Table 1 Zyxel Device Comparison Table (continued) AX7501-B0 AX7501-B1 DX3300-T0 DX3300-T1 DX3301-T0 DX5401-B0 DX5401-B1 Uplink Port 1G Ethernet 1G Ethernet (SFP) (SFP) 1G Ethernet 1G Ethernet 10G AON 10G AON (SFP) (SFP) (SFP) (SFP) Ethernet Ethernet (SFP)
  • Page 21 Chapter 1 Introducing the Zyxel Device Table 2 Zyxel Device Comparison Table (continued) EX3300-T0 EX3300-T1 EX3301-T0 EX3500-T0 EX3501-T0 EX5401-B0 EX5401-B1 Phone Port (VoIP) Wall Mount Table 3 Zyxel Device Comparison Table EX5600-T1 EX5601-T0 EX5601-T1 EX7501-B0 PX3321-T1 PX5311-T0 WiFi6 Wireless Standard Supported 2.4 GHz 2.4 GHz...

  • Page 22: Example Applications

    Chapter 1 Introducing the Zyxel Device 1.2 Example Applications This section shows a few examples of using the Zyxel Device in various network environments. Note that the Zyxel Device in the figure is just an example Zyxel Device and not your actual Zyxel Device. Connect the WAN port to a broadband modem or router for Internet connection.

  • Page 23: Dual-Band Wifi

    Chapter 1 Introducing the Zyxel Device 1.2.2 Dual-Band WiFi Note: Check Section Table 1 on page 19 to see if your Zyxel Device supports dual-band WiFi. When WiFi is enabled on the Zyxel Device, IEEE 802.11a/b/g/n/ac/ax compliant clients, such as notebooks, tablets, and smartphones can wirelessly connect to the Zyxel Device to access network resources.

  • Page 24: Multi-Gigabit Ethernet

    Chapter 1 Introducing the Zyxel Device Figure 4 Triple-Band Application 1.2.4 Multi-Gigabit Ethernet For Zyxel Devices that support 10 Gbps/2.5 Gbps Multi-Gigabit Ethernet (GbE) WAN/LAN ports, the port speeds are backward compatible with standard Gigabit speed. The Zyxel Devices with an SFP port can also provide Internet access through a Multi-Gigabit GPON WAN or Ethernet connection.

  • Page 25: Voip Applications

    Chapter 1 Introducing the Zyxel Device Figure 5 Multi-Gigabit Application See the following table for the cables required and distance limitation to attain the corresponding speed. Table 4 Ethernet Cable Types CABLE TRANSMISSION SPEED MAXIMUM DISTANCE BANDWIDTH CAPACITY Category 5 100 Mbps 100 m 100 MHz...
  • Page 26 Chapter 1 Introducing the Zyxel Device Cellular WAN (3G/4G) Backup Connect a supported cellular USB dongle with an active SIM card to the USB port. This adds a second WAN interface and allows the Zyxel Device to wirelessly access the Internet via a cellular network. The cellular WAN connection is a backup in case the DSL/Ethernet/Fiber connection fails.

  • Page 27: Ways To Manage The Zyxel Device

    Chapter 1 Introducing the Zyxel Device Media Server You can also use the Zyxel Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (A) connected to the Zyxel Device’s USB port (without having to copy them to another computer).
  • Page 28 Chapter 1 Introducing the Zyxel Device • Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the Zyxel Device to its factory default settings.

  • Page 29: Hardware

    H A P T E R Hardware 2.1 Hardware This section describes the front and rear panels for each model. If your model is not shown here, refer to the Zyxel Device’s Quick Start Guides to see the product drawings and how to make the hardware connections.
  • Page 30 Chapter 2 Hardware Table 5 LED Descriptions (AX7501) (continued) COLOR STATUS DESCRIPTION FIBER Green The FIBER port is connected to the ISP’s ONT and the Zyxel Device is receiving optical signals normally. Blinking The Zyxel Device’s FIBER port is trying to build a PON connection. The optical power received (the strength of optical signals transmitted on the remote optical module) is too low.
  • Page 31 Chapter 2 Hardware Table 5 LED Descriptions (AX7501) (continued) COLOR STATUS DESCRIPTION WiFi 5G Green The 5G WiFi network is activated. Blinking The Zyxel Device is communicating with 5G WiFi clients. Note: For AON and PON routers only; see Section 1.1 on page 19 for more information.

  • Page 32: Dx3300-T0, Dx3301-T0, Ex3300-T0 And Ex3301-T0

    Chapter 2 Hardware 2.2.2 DX3300-T0, DX3301-T0, EX3300-T0 and EX3301-T0 Figure 11 LED Indicators (DX3300-T0 / DX3301-T0 / EX3300-T0 / EX3301-T0) The following are the LED descriptions for your DX3300-T0 / EX3300-T0. Table 6 LED Descriptions (DX3300-T0 / EX3300-T0) COLOR STATUS DESCRIPTION Power Green...
  • Page 33 Chapter 2 Hardware Table 6 LED Descriptions (DX3300-T0 / EX3300-T0) COLOR STATUS DESCRIPTION Internet Green The Zyxel Device has an IP connection but no traffic. Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.
  • Page 34 Chapter 2 Hardware Table 7 LED Descriptions (DX3301-T0 / EX3301-T0) (continued) COLOR STATUS DESCRIPTION Internet Green The Zyxel Device has an IP connection but no traffic. Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.

  • Page 35: Dx3300-T1 And Ex3300-T1

    Chapter 2 Hardware 2.2.3 DX3300-T1 and EX3300-T1 Figure 12 DX3300-T1 AX/DX/EX/PX Series User’s Guide...
  • Page 36 Chapter 2 Hardware Figure 13 EX3300-T1 The following are the LED descriptions for your DX3300-T1 and EX3300-T1. Table 8 LED Descriptions (DX3300-T1 and EX-3300-T1) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is booting up.
  • Page 37 Chapter 2 Hardware Table 8 LED Descriptions (DX3300-T1 and EX-3300-T1) (continued) COLOR STATUS DESCRIPTION INTERNET Green The Zyxel Device has a WAN IP address (either static or assigned by a DHCP server) and the Internet connection is up. Blinking The Zyxel Device is sending or receiving traffic. The Zyxel Device attempted to obtain an WAN IP but failed.

  • Page 38: Ex3500-T0 And Ex3501-T0

    Chapter 2 Hardware 2.2.4 EX3500-T0 and EX3501-T0 Figure 14 LED Indicators (EX3500-T0 and EX3501-T0) The following are the LED descriptions for your EX3500-T0 and EX3501-T0. Table 9 LED Descriptions (EX3500-T0 and EX3501-T0) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is booting up.
  • Page 39 Chapter 2 Hardware Table 9 LED Descriptions (EX3500-T0 and EX3501-T0) (continued) COLOR STATUS DESCRIPTION LAN1-3 Green The Zyxel Device has a successful Ethernet connection with a device on the Local Area Network (LAN) port. Blinking The Zyxel Device is sending or receiving data to/from the LAN port. The Zyxel Device does not have an Ethernet connection on the LAN port.

  • Page 40: Dx5401-B0/1 And Ex5401-B0/1

    Chapter 2 Hardware 2.2.5 DX5401-B0/1 and EX5401-B0/1 Figure 15 LED Indicators (DX5401-B0 / DX5401-B1 / EX5401-B0 / EX5401-B1) Note: The phone LED is for the Zyxel Device with phone ports only; see Section 1.1 on page 19 for more information. The following are the LED descriptions for your DX5401-B0/B1 and EX5401-B0/B1.
  • Page 41 Chapter 2 Hardware Table 10 LED Descriptions (DX5401-B0/B1 and EX5401-B0/B1) (continued) COLOR STATUS DESCRIPTION Internet Green The Zyxel Device has an IP connection but no traffic. Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.

  • Page 42: Ex5600-T1, Ex5601-T0 And Ex5601-T1

    Chapter 2 Hardware 2.2.6 EX5600-T1, EX5601-T0 and EX5601-T1 Figure 16 LED Indicators (EX5600-T1) AX/DX/EX/PX Series User’s Guide...
  • Page 43 Chapter 2 Hardware Figure 17 LED Indicators (EX5601-T0) Figure 18 LED Indicators (EX5601-T1) AX/DX/EX/PX Series User’s Guide...
  • Page 44 Chapter 2 Hardware Note: The Phone LED is for the Zyxel Device with phone ports only; the SFP LED is for the Zyxel Device with an SFP port only; see Section 1.1 on page 19 for more information. The following are the LED descriptions for your EX5600-T1 / EX5601-T0/ EX5601-T1. Table 11 LED Descriptions (EX5600-T1 / EX5601-T0/ EX5601-T1) COLOR STATUS...

  • Page 45: Ex7501-B0

    Chapter 2 Hardware Table 11 LED Descriptions (EX5600-T1 / EX5601-T0/ EX5601-T1) (continued) COLOR STATUS DESCRIPTION Green The SFP port is connected to the ISP’s ONT and the Zyxel Device is receiving optical signals normally, or the SFP port’s Ethernet WAN connection is up.
  • Page 46 Chapter 2 Hardware Table 12 LED Descriptions (EX7501-B0) (continued) COLOR STATUS DESCRIPTION LAN1-4 Green The Zyxel Device has a successful Ethernet connection with a device on the LAN (Local Area Network) port. Blinking The Zyxel Device is sending or receiving data to/from the LAN port. The Zyxel Device does not have an Ethernet connection on the LAN port.

  • Page 47: Px3321-T1

    Chapter 2 Hardware 2.2.8 PX3321-T1 Figure 20 LED Indicators (PX3321-T1) The following are the LED descriptions for your PX3321-T1. Table 13 LED Descriptions (PX3321-T1) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking Slow The Zyxel Device is booting up.

  • Page 48: Px5311-T0

    Chapter 2 Hardware Table 13 LED Descriptions (PX3321-T1) (continued) COLOR STATUS DESCRIPTION LAN 1-4 Green The Zyxel Device has a successful Ethernet connection with a device on the LAN (Local Area Network) port. Blinking The Zyxel Device is sending or receiving data to/from the LAN port. The Zyxel Device does not have an Ethernet connection on the LAN port.
  • Page 49 Chapter 2 Hardware The following are the LED descriptions for your PX5531-T0. Table 14 LED Descriptions (PX5531-T0) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking Slow The Zyxel Device is booting up. Blinking Fast The Zyxel Device is trying to boot up but failed.

  • Page 50: Ports Panel

    Chapter 2 Hardware 2.3 Ports Panel The following shows the Zyxel Device ports panel and connection ports. 2.3.1 AX7501 Figure 22 AX7501-B0 Figure 23 AX7501-B1 The following table describes the items on the ports panels of AX7501. Table 15 Panel Ports and Buttons LABEL DESCRIPTION FIBER...

  • Page 51: Dx3300-T0, Dx3301-T0, Dx5401-B0/B1, Ex3300-T0, Ex3301-T0 And Ex5401-B0/B1

    Chapter 2 Hardware 2.3.2 DX3300-T0, DX3301-T0, DX5401-B0/B1, EX3300-T0, EX3301-T0 and EX5401-B0/B1 Figure 24 DX3300-T0 Figure 25 DX3301-T0 AX/DX/EX/PX Series User’s Guide...
  • Page 52 Chapter 2 Hardware Figure 26 DX5401-B0/DX5401-B1 Figure 27 EX3300-T0 AX/DX/EX/PX Series User’s Guide...
  • Page 53 Chapter 2 Hardware Figure 28 EX3301-T0 Figure 29 EX5401-B0 / EX5401-B1 AX/DX/EX/PX Series User’s Guide...

  • Page 54: Dx3300-T1 And Ex3300-T1

    Chapter 2 Hardware The following table describes the items on the ports panels of DX3300-T0, DX3301-T0, DX5401-B0/B1, EX3300-T0, EX3301-T0 and EX5401-B0/B1. Table 16 Panel Ports and Buttons LABEL DESCRIPTION For EX3300-T0, EX3301-T0 and EX5401-B0/B1, use an Ethernet cable to connect the WAN port to a gateway/modem for Internet connection.
  • Page 55 Chapter 2 Hardware Figure 31 EX3300-T1 The following table describes the items on the ports panels of DX3300-T1 and EX3300-T1. Table 17 Panel Ports and Buttons LABEL DESCRIPTION For DX3300-T1, connect a DSL cable to the DSL port for Internet connection. LAN1 –...

  • Page 56: Ex3500-T0 And Ex3501-T0

    Chapter 2 Hardware 2.3.4 EX3500-T0 and EX3501-T0 Figure 32 EX3500-T0 Figure 33 EX3501-T0 AX/DX/EX/PX Series User’s Guide...

  • Page 57: Ex5600-T1, Ex5601-T0, And Ex5601-T1

    Chapter 2 Hardware The following table describes the items on the ports panels of EX3500-T0 and EX3501-T0. Table 18 Panel Ports and Buttons LABEL DESCRIPTION Use an Ethernet cable to connect the WAN port to a gateway/modem for Internet connection. LAN1 –...
  • Page 58 Chapter 2 Hardware Figure 35 EX5601-T0/EX5601-T1 Note: See Section 1.1 on page 19 to see if your Zyxel Device supports the SFP port. Figure 36 EX5600-T1/EX5601-T0/EX5601-T1 Side Panels AX/DX/EX/PX Series User’s Guide...
  • Page 59 Chapter 2 Hardware The following table describes the items on the ports panels of EX5600-T1, EX5601-T0, and EX5601-T1. Table 19 Panel Ports and Buttons LABEL DESCRIPTION 2.5G WAN For EX5600-T1 and EX5601-T1, use an Ethernet cable to connect the 2.5G WAN port to a gateway/ modem for an (up to) 2.5 Gbps Internet connection.

  • Page 60: Ex7501-B0

    Chapter 2 Hardware 2.3.6 EX7501-B0 Figure 37 Bottom Panel Figure 38 WPS/WLAN Buttons The following table describes the items on the ports panels of EX7501-B0. Table 20 Panel Ports and Buttons LABEL DESCRIPTION 10G WAN Connect an Ethernet cable to the 10G WAN port for an (up to) 10 Gbps Ethernet connection. 10G LAN Connect computers or other Ethernet devices to the 10G LAN port for Internet access with speed up to 10 Gbps.

  • Page 61: Px3321-T1

    Chapter 2 Hardware 2.3.7 PX3321-T1 Figure 39 PX3321-T1 The following table describes the items on the ports panel of PX3321-T1. Table 21 Panel Ports and Buttons LABEL DESCRIPTION POWER Connect the power adapter and press the ON/OFF button to start the device. The USB port is used for cellular WAN backup, file-sharing, and media server.

  • Page 62: Transceiver Installation/Removal

    Chapter 2 Hardware The following table describes the items on the ports panel of PX5531-T0. Table 22 Panel Ports and Buttons LABEL DESCRIPTION POWER Connect the power adapter and press the ON/OFF button to start the device. The USB port is used for cellular WAN backup, file-sharing, and media server. LAN 1-4 Connect computers or other Ethernet devices to Ethernet ports for Internet access.
  • Page 63 Chapter 2 Hardware Figure 43 Connecting the Fiber Cables Transceiver Removal Use the following steps to remove an SFP transceiver. Attach an ESD preventive wrist strap to your wrist and to a bare metal surface on the chassis. Remove the fiber cables from the transceiver. Pull out the latch and down to unlock the transceiver (latch styles vary).

  • Page 64: Wps Button

    Chapter 2 Hardware 2.3.10 WPS Button You can use the WPS button to quickly set up a secure WiFi connection between the Zyxel Device and a WPS-compatible clientby adding one device at a time. To Activate WPS Make sure the POWER LED is on and not blinking. Press the WPS button once within 3 seconds (see the ports panel table of each Zyxel Device model in Section 2.3 on page 50 for more information) and release it.

  • Page 65: Web Configurator

    H A P T E R Web Configurator 3.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: •...
  • Page 66 Chapter 3 Web Configurator Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number. For some models, the password must contain at least one English character and one number.

  • Page 67: Web Configurator Layout

    Chapter 3 Web Configurator 3.2 Web Configurator Layout Figure 49 Screen Layout As illustrated above, the main screen is divided into these parts: • A – Settings Icon (Navigation Panel and Side Bar) • B – Layout Icon • C – Main Window 3.2.1 Settings Icon Click this icon ( ) to see the side bar and navigation panel.
  • Page 68 Chapter 3 Web Configurator Figure 50 Side Bar The icons provide the following functions. Table 23 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Device’s time zone and WiFi settings.
  • Page 69 Chapter 3 Web Configurator Table 23 Web Configurator Icons in the Title Bar (continued) ICON DESCRIPTION Restart: Click this icon to reboot the Zyxel Device without turning the power off. Logout: Click this icon to log out of the Web Configurator. 3.2.1.2 Navigation Panel Click the menu icon ( ) to display the navigation panel that contains configuration menus and icons...
  • Page 70 Chapter 3 Web Configurator Table 24 Navigation Panel Summary (continued) LINK FUNCTION Cellular Backup Use this screen to configure a cellular WAN connection as a backup to keep you online if the primary WAN connection fails. Advanced Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions.
  • Page 71 Chapter 3 Web Configurator Table 24 Navigation Panel Summary (continued) LINK FUNCTION Port Triggering Use this screen to change your Zyxel Device’s port triggering settings. Use this screen to configure a default server which receives packets from ports that are not specified in the Port Forwarding screen. Use this screen to enable the ALGs (Application Layer Gateways) in the Zyxel Device to allow applications to operate through NAT.
  • Page 72 Chapter 3 Web Configurator Table 24 Navigation Panel Summary (continued) LINK FUNCTION SIP TLS Common Use this screen to change the default TLS local port if you need to, and select a local certificate for the SIP server to verify the Zyxel Device. Phone Phone Device Use this screen to control which SIP accounts each phone uses to handle...
  • Page 73 Chapter 3 Web Configurator Table 24 Navigation Panel Summary (continued) LINK FUNCTION GPON Status GPON Status Use this screen to view the fiber transceiver’s TX power and RX power level and its temperature. Note: Not yet available as of this writing. Maintenance System System...

  • Page 74: Widget Icon

    Chapter 3 Web Configurator Figure 52 Navigation Panel 3.2.2 Widget Icon Click the Widget icon ( ) in the lower left corner to arrange the screen order. AX/DX/EX/PX Series User’s Guide...
  • Page 75 Chapter 3 Web Configurator Figure 53 Dashboard Widget The following screen appears. Select a block and hold it to move around. Click the Check icon ( ) in the lower left corner to save the changes. AX/DX/EX/PX Series User’s Guide...
  • Page 76 Chapter 3 Web Configurator Figure 54 Check Icon AX/DX/EX/PX Series User’s Guide...

  • Page 77: Quick Start

    H A P T E R Quick Start 4.1 Quick Start Overview Use the Wizard screens to configure the Zyxel Device’s time zone and WiFi settings. Note: See the technical reference chapters for background information on the features in this chapter.

  • Page 78: Quick Start Setup - Internet Connection

    Chapter 4 Quick Start Figure 56 Wizard – Time Zone 4.4 Quick Start Setup – Internet Connection The Zyxel Device detects your Internet connection status. Click Next to continue. Figure 57 Wizard – Internet 4.4.1 Successful Internet Connection The Zyxel Device has Internet access. Figure 58 Wizard –...

  • Page 79: Unsuccessful Internet Connection

    Chapter 4 Quick Start 4.4.2 Unsuccessful Internet Connection The Zyxel Device did not detect a WAN connection. See Section 45.4 on page 509 for troubleshooting the Zyxel Device WAN connection. Figure 59 Wizard – Internet Connection is Down 4.5 Quick Start Setup – WiFi Turn WiFi on or off.

  • Page 80: Quick Start Setup - Finish

    Chapter 4 Quick Start 4.6 Quick Start Setup – Finish Your Zyxel Device saves and applies your settings. AX/DX/EX/PX Series User’s Guide...

  • Page 81: Web Interface Tutorials

    H A P T E R Web Interface Tutorials 5.1 Web Interface Overview This chapter shows you how to use the Zyxel Device’s various features. • Wired Network Setup • WiFi Network Setup • USB Applications • Network Security • Internet Calls •...
  • Page 82 Chapter 5 Web Interface Tutorials To set the Zyxel Device to Routing mode, see Section 1 on page To set the Zyxel Device to Bridge mode, see Section 1 on page Routing Mode In this routing mode example, the DSL WAN connection has the following information. General Name MyDSLConnection...
  • Page 83 Chapter 5 Web Interface Tutorials Secondary DNS server 192.168.5.1 Others Authentication Method: AUTO PPPoE Passthrough: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enabled VLAN: Disabled Enter the General and ATM PVC Configuration settings as provided above. •...
  • Page 84 Chapter 5 Web Interface Tutorials Try to connect to a website to see if you have correctly set up your Internet connection. AX/DX/EX/PX Series User’s Guide...
  • Page 85 Chapter 5 Web Interface Tutorials The new connection is displayed on the Broadband screen. Bridge Mode In this bridge mode example, the DSL WAN connection has the following information. General Name MyDSLConnection Type ADSL over ATM Connection Mode Bridge ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode...

  • Page 86: Setting Up An Ethernet Connection

    Chapter 5 Web Interface Tutorials 5.2.2 Setting Up an Ethernet Connection If you connect to the Internet through an Ethernet connection, you need to connect a broadband modem or router with Internet access to the WAN Ethernet port on the Zyxel Device. You need to configure the Internet settings from the broadband modem or router on the Zyxel Device.
  • Page 87 Chapter 5 Web Interface Tutorials To set the Zyxel Device to Routing mode, see Section 1 on page To set the Zyxel Device to Bridge mode, see Section 1 on page Routing Mode In this routing mode example, configure the following information for the Ethernet WAN connection. General Name My ETH Connection...
  • Page 88 Chapter 5 Web Interface Tutorials Go to the Network Setting > Broadband screen to view the established Ethernet connection. The new connection is displayed on the Broadband screen. Bridge Mode In this bridge mode example, configure the following information for the Ethernet WAN connection. General Name My ETH Connection...

  • Page 89: Wifi Network Setup

    Chapter 5 Web Interface Tutorials For the rest of the fields, use the default settings. Click Apply to save your settings. 5.3 WiFi Network Setup For Zyxel Devices that support MPro Mesh, you can use the MPro Mesh app to configure your WiFi network.

  • Page 90: Changing Security On A Wifi Network

    Chapter 5 Web Interface Tutorials 5.3.1 Changing Security on a WiFi Network This example changes the default security settings of a WiFi network to the following: SSID Example Security Mode WPA3-SAE/WPA2-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed Go to the Network Setting > Wireless > General screen. Select More Secure as the security level and WPA3-SAE/WPA2-PSK as the security mode.
  • Page 91 Chapter 5 Web Interface Tutorials Go to the Wireless > Others screen. Set 802.11 Mode to 802.11b/g/n Mixed, and then click Apply. AX/DX/EX/PX Series User’s Guide...

  • Page 92: Connecting To The Zyxel Device's Wifi Network Using Wps

    Chapter 5 Web Interface Tutorials You can now use the WPS feature to establish a WiFi connection between your notebook and the Zyxel Device (see Section 5.3.2 on page 92). Now use the new security settings to connect to the Internet through the Zyxel Device using WiFi.
  • Page 93 Chapter 5 Web Interface Tutorials In Windows 10, click on the Network icon in the system tray to open the list of available WiFi networks. Locate the WiFi network of the Zyxel Device. The default WiFi network name is “Zyxel_XXXX” (2.4G) or “Zyxel_XXXX_5G”...
  • Page 94 Chapter 5 Web Interface Tutorials The Zyxel Device sends the WiFi network settings to Windows using WPS. Windows displays “Getting settings from the router”. AX/DX/EX/PX Series User’s Guide...
  • Page 95 Chapter 5 Web Interface Tutorials The WiFi device is then able to connect to the WiFi network securely. 5.3.2.2 WPS PIN Configuration The WPS PIN (Personal Identification Number) method is a more secure version of WPS, used by WiFi- enabled devices such as printers. To use this connection method, you need to log into the Zyxel Device’s Web Configurator.

  • Page 96: Setting Up A Guest Network

    Chapter 5 Web Interface Tutorials Within 2 minutes, enable WPS on the WiFi device. 5.3.3 Setting Up a Guest Network The Zyxel Device authenticates the WiFi device using the PIN, and then sends the WiFi network settings to the device using WPS. This process may take up to 2 minutes. The WiFi device is then able to connect to the WiFi network securely.A company wants to create two WiFi networks for different groups of users as shown in the following figure.
  • Page 97 Chapter 5 Web Interface Tutorials • Employees using the General WiFi network group will have access to the local network and the Internet. • Visitors using the Guest WiFi network group with a different SSID and password will have access to the Internet only.
  • Page 98 Chapter 5 Web Interface Tutorials Go to the Network Setting > Wireless > Guest/More AP screen. Click the Modify icon to configure the second WiFi network group. On the Guest/More AP screen, click the Modify icon to configure the other Guest WiFi network group. Configure the screen using the provided parameters and click OK.
  • Page 99 Chapter 5 Web Interface Tutorials Check the status of Guest in the Guest/More AP screen. A yellow bulb under Status means the SSID is active and ready for WiFi access. AX/DX/EX/PX Series User’s Guide...

  • Page 100: Setting Up Two Guest Wifi Networks On Different Wifi Bands

    Chapter 5 Web Interface Tutorials 5.3.4 Setting Up Two Guest WiFi Networks on Different WiFi Bands In this example, a company wants to create two Guest WiFi networks: one for the Guest group and the other for the VIP group as shown in the following figure. Each network will have its SSID and security mode to access the internet.
  • Page 101 Chapter 5 Web Interface Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. AX/DX/EX/PX Series User’s Guide...
  • Page 102 Chapter 5 Web Interface Tutorials The 2.4 GHz Guest WiFi network is now configured. Go to the Wireless > General screen and set Band to 5GHz to configure the 5G Guest WiFi settings for VIP. Click OK. AX/DX/EX/PX Series User’s Guide...
  • Page 103 Chapter 5 Web Interface Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. AX/DX/EX/PX Series User’s Guide...
  • Page 104 Chapter 5 Web Interface Tutorials The 5G VIP WiFi network is now configured. AX/DX/EX/PX Series User’s Guide...

  • Page 105: Usb Applications

    Chapter 5 Web Interface Tutorials 5.4 USB Applications This section shows you how to set up a cellular backup network, access shared folders and play files through Window Media using a USB device. 5.4.1 File Sharing This section shows you how to create a shared folder on your Zyxel Device through a USB device and allow others to access the shared folder with File Sharing services.
  • Page 106 Chapter 5 Web Interface Tutorials The Add New Share screen appears. • Select your USB device from the Volume drop-down list box. • Enter a Description name for the added share to identify the device. • Click Browse and the Browse Directory screen appears. •...
  • Page 107 Chapter 5 Web Interface Tutorials • In Access Level, select Public to let the share to be accessed by all users connected to the Zyxel Device. Otherwise, select Security to let the share to be accessed by specific users to access only. Click OK to save the settings.

  • Page 108: Media Server

    Chapter 5 Web Interface Tutorials 5.4.1.2 Accessing Your Shared Files From a Computer You can use Windows Explorer to access the USB storage devices connected to the Zyxel Device. Note: This example shows you how to use Microsoft Windows 10 to browse shared files in a share called (usb1_sda)Zoeys file.
  • Page 109 Chapter 5 Web Interface Tutorials This section shows you how the media server feature works using the following: • Microsoft (MS) Windows Media Player Media Server works with Windows 10. Make sure your computer is able to play media files (music, videos and pictures).
  • Page 110 Chapter 5 Web Interface Tutorials 5.4.2.2 Playing Media Using Windows Media Player on Windows 10 This section shows you how to play the media files on the USB storage device connected to your Zyxel Device using Windows Media Player. Open Windows Media Player. It automatically detects the Zyxel Device. If you cannot see the Zyxel Device in the left panel as shown above, go to Organize >...
  • Page 111 Chapter 5 Web Interface Tutorials Select the shared folder, and then click Add to add it to your Media Library. Click OK to save the settings. In the right panel, you can browse and play the files available in the USB storage device based on the category (Music, Video, Pictures, Recorded TV) you selected.
  • Page 112 Chapter 5 Web Interface Tutorials 5.4.2.3 Using a Digital Media Player This section shows you how you can use the Zyxel Device with a hardware digital media player to play media files stored in the USB storage device on your TV screen. Note: For this tutorial, your digital media player is already connected to the TV.

  • Page 113: Using Ftp

    Chapter 5 Web Interface Tutorials The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button on the remote control. 5.4.3 Using FTP This section shows how to use an FTP program to access files on an USB storage device connected to the Zyxel Device.

  • Page 114: Network Security

    Chapter 5 Web Interface Tutorials Note: This example uses the FileZilla FTP program to browse your shared files. In FileZilla, enter the IP address of the Zyxel Device (The default IP is 192.168.1.1), your account’s Username, Password and Port number, and then click Quickconnect. A screen asking for password authentication appears.
  • Page 115 Chapter 5 Web Interface Tutorials Open the Access Control screen, click Add New ACL Rule to create a rule. Use the following fields to configure and apply a new ACL (Access Control List) rule. AX/DX/EX/PX Series User’s Guide...

  • Page 116: Parental Control

    Chapter 5 Web Interface Tutorials • Filter Name: Enter a name to identify the firewall rule. • Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service. • Destination IP Address: Enter the IP address of the computer to which traffic for the application or service is entering.
  • Page 117 Chapter 5 Web Interface Tutorials • Websites and URL keyword blocking. Use this feature to: • Limit the days and times a user can access the Internet. • Limit the websites a user can access on the Internet. This example shows you how to block a user from accessing the Internet during time for studying. It also shows you how to stop a user from accessing specific websites.
  • Page 118 Chapter 5 Web Interface Tutorials Add New PCP Screen Go to Parental Control > Add New PCP. Under General: • Select Enable to enable the rule you are configuring. • Enter the Parental Control Profile Name given in the above parameter. •...
  • Page 119 Chapter 5 Web Interface Tutorials Under Site / URL Keyword: • Select Block the web URLs in Block or Allow the Web Site. • Click Add, then use the parameter given above to configure settings for the URL keyword you are blocking.
  • Page 120 Chapter 5 Web Interface Tutorials Use this screen to add a Parental Control rule. • Enter the Profile Name given in the above parameter. • Click on the switch to enable Profile Active. • Select a device, and then click Next to proceed. Use this screen to edit the Parental Control schedule.

  • Page 121: Configuring A Mac Address Filter For Wired Lan Connections

    Chapter 5 Web Interface Tutorials 5.5.3 Configuring a MAC Address Filter for Wired LAN Connections You can use a MAC address filter to exclusively allow or permanently block someone from the wired LAN network. This example shows that computer B is not allowed access to the wired LAN network. Figure 62 Configure a MAC Address Filter Example AX/DX/EX/PX Series User’s Guide...

  • Page 122: Internet Calls

    Chapter 5 Web Interface Tutorials Go to the Security > MAC Filter > MAC Filter screen. Under MAC Address Filter, select Enable. Click Add New Rule to add a new entry. Select Active, and then enter the Host Name and MAC Address of computer B.

  • Page 123: Adding A Sip Service Provider

    Chapter 5 Web Interface Tutorials 5.6.2 Adding a SIP Service Provider Follow the steps below to add a SIP service provider. Make sure your Zyxel Device is connected to the Internet. Open the Web Configurator. Go to the VoIP > SIP > SIP Service Provider screen. Click the Add New Provider button to add the SIP Service Provider.

  • Page 124: Adding A Sip Account

    Chapter 5 Web Interface Tutorials 5.6.3 Adding a SIP Account The SIP account must be associated with the SIP service provider configured above. You may configure several SIP accounts for the same service provider. Follow the steps below to set up your SIP account: Make sure your Zyxel Device is connected to the Internet.

  • Page 125: Configuring A Phone

    Chapter 5 Web Interface Tutorials 5.6.4 Configuring a Phone You must now configure the phone port to use the SIP account you just configured. Go to the VoIP > Phone > Phone Device screen. Click the Modify icon of PHONE1 to configure PHONE1 on your Zyxel Device. The following screen appears.

  • Page 126: Making A Voip Call

    Chapter 5 Web Interface Tutorials 5.6.5 Making a VoIP Call Follow these steps to make a phone call using Voice over IP (VoIP). Make sure you connect a telephone to phone port 1 on the Zyxel Device. Make sure the Zyxel Device is turned on and connected to the Internet. Pick up the phone receiver.

  • Page 127: Backing Up The Device Configuration

    Chapter 5 Web Interface Tutorials Download the correct firmware file from the download library at the Zyxel website. The model code for the Zyxel Device in this example is v5.13(ABLZ.1) Note the model code for your Zyxel Device. Unzip the file.

  • Page 128: Restoring The Device Configuration

    Chapter 5 Web Interface Tutorials 5.7.3 Restoring the Device Configuration This section shows you how to restore a previously-saved configuration file from your computer to your Zyxel Device. Go to the Maintenance > Backup/Restore screen. Under Restore Configuration, click Browse/Choose File, and then select the configuration file that you want to upload.
  • Page 129 Chapter 5 Web Interface Tutorials The Zyxel Device automatically restarts after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. Go to the Connection Status page to check the firmware version after the reboot. AX/DX/EX/PX Series User’s Guide...

  • Page 130: App Tutorials

    H A P T E R App Tutorials 6.1 App Tutorials Overview This part shows you how to use the MPro Mesh app to manage the Zyxel Device and the MPro Mesh network. Note: To enjoy the latest features of the MPro Mesh app, make sure you have installed the latest version on your smartphone or tablet.

  • Page 131: Mpro Mesh Network

    Chapter 6 App Tutorials • Finding the Best Location for the Extenders • Checking Your Network Topology • Changing the Default Home WiFi Network Name and Password • Letting WiFi Clients Connect to the WiFi Network • Blocking Internet Access at Specific Times •...
  • Page 132 Chapter 6 App Tutorials Figure 64 MPro Mesh Network The following table describes the icons used in the figure. Table 27 Icons used in MPro Mesh Network ICON DESCRIPTION Zyxel Device – MPro Mesh Router or Non-MPro Mesh Router Note: Your router must have an Internet connection. MPro Mesh Extender in AP (Access Point) mode.
  • Page 133 Chapter 6 App Tutorials Extender with a strong signal. MPro Mesh Router (ZD) MPro Mesh Extenders (E1, E2) Figure 65 AP Steering Application • Band steering allows 2.4 GHz/5 GHz dual-band WiFi clients to move from one band to another. For example, if the 2.4 GHz channel is congested, WiFi clients that support 5 GHz can move to the 5 GHz band.

  • Page 134: Mpro Mesh Network Connection

    Chapter 6 App Tutorials 6.4 MPro Mesh Network Connection If you are setting up the MPro Mesh network with an MPro Mesh Router and an MPro Mesh Extender, you can connect your MPro Mesh Router (ZD) with an MPro Mesh Extender (E) using a WiFi or wired connection.

  • Page 135: Setting Up An Mpro Mesh Router And Mpro Mesh Extender With A Wifi Or Wired Connection

    Chapter 6 App Tutorials Enable MPro Mesh on the MPro Mesh Extender: Turn on your MPro Mesh Extender. Enable MPro Mesh in the MPro Mesh Extender’s Web Configurator. See your MPro Mesh Extender’s User’s Guide for how to enable MPro Mesh. 6.4.2 Setting up an MPro Mesh Router and MPro Mesh Extender with a WiFi or Wired Connection Follow the steps below to set up your MPro Mesh Router with an MPro Mesh Extender.
  • Page 136 Chapter 6 App Tutorials The Home screen displays. The Controller (MPro Mesh Router) displays on top of the Home screen. AX/DX/EX/PX Series User’s Guide...
  • Page 137 Chapter 6 App Tutorials Tap the Add ( ) icon in the Mesh Devices field to add an MPro Mesh Extender to the Mesh network. AX/DX/EX/PX Series User’s Guide...
  • Page 138 Chapter 6 App Tutorials Select a connection scenario to pair the MPro Mesh Extender to the MPro Mesh Router (Controller). In this example, select the Use WiFi scenario. AX/DX/EX/PX Series User’s Guide...
  • Page 139 Chapter 6 App Tutorials Follow the instructions and tap the WPS button on the MPro Mesh Extender. Within 2 minutes, tap Start Pairing to start pairing the MPro Mesh Extender to the MPro Mesh Router (Controller). A 2-minute countdown starts after you tap Start Pairing. AX/DX/EX/PX Series User’s Guide...
  • Page 140 Chapter 6 App Tutorials The following screen displays when the pairing process is done. Tap Done to finish pairing. AX/DX/EX/PX Series User’s Guide...
  • Page 141 Chapter 6 App Tutorials You can now check and manage the paired MPro Mesh Extender on the Home screen. AX/DX/EX/PX Series User’s Guide...

  • Page 142: Setting Up A Non-Mpro Mesh Router And Mpro Mesh Extender With A Wired Connection

    Chapter 6 App Tutorials 10 Place the MPro Mesh Extender where you need to extend WiFi coverage. Use the app to see if the extender is too far from the router; see Section 6.5 on page 150 for more information. 6.4.3 Setting up a non-MPro Mesh Router and MPro Mesh Extender with a Wired Connection This scenario describes the process to create an MPro Mesh network with a wired connection from the...
  • Page 143 Chapter 6 App Tutorials Make sure the non-MPro Mesh router is connected to the Internet. The first extender must be connected to your router using an Ethernet cable. Then, connect the second extender wirelessly to the first extender Follow the steps below to set up your non-MPro Mesh router with the Zyxel MPro Mesh extender. Table 29 Device Role DEVICE ROLE...
  • Page 144 Chapter 6 App Tutorials The Home screen displays. The Controller (Extender 1) displays on top of the screen. AX/DX/EX/PX Series User’s Guide...
  • Page 145 Chapter 6 App Tutorials Tap the Add ( ) icon in the Mesh Devices field to add Extender 2 to the Mesh network. AX/DX/EX/PX Series User’s Guide...
  • Page 146 Chapter 6 App Tutorials Select a connection scenario to pair Extender 2 to Extender 1 (Controller). In this example, select the Use WiFi scenario. AX/DX/EX/PX Series User’s Guide...
  • Page 147 Chapter 6 App Tutorials Follow the instructions and press the WPS button on the Extender 2. Within 2 minutes, tap Start Pairing to start pairing Extender 2 to Extender 1 (Controller). A 2-minute countdown starts after you tap Start Pairing. AX/DX/EX/PX Series User’s Guide...
  • Page 148 Chapter 6 App Tutorials The following screen displays when the pairing process is done. Tap Done to finish pairing. AX/DX/EX/PX Series User’s Guide...
  • Page 149 Chapter 6 App Tutorials 10 You can now check and manage the paired Extender 2 on the Home screen. AX/DX/EX/PX Series User’s Guide...

  • Page 150: Finding The Best Location For The Extenders

    Chapter 6 App Tutorials 11 Place Extender 2 where you need to extend WiFi coverage. Use the app to see if Extender 2 is too far from Extender 1; see Section 6.5 on page 150 for more information. 6.5 Finding the Best Location for the Extenders Follow the steps below to check the signal icons to see which extenders are too far from or too close to the Controller.
  • Page 151 Chapter 6 App Tutorials Tap on Home in the navigation panel. Home Look for the extender with a red WiFi signal icon ( ) or amber WiFi signal icon ( ) in front of it. Move the extender closer to or farther from the Zyxel Device according to the WiFi signal icon. See the link quality table below.

  • Page 152: Checking Your Network Topology

    Chapter 6 App Tutorials Table 30 Link Quality ICON CONNECTION TYPE CONNECTION STATUS ACTION TO DO Wireless Too Far from the Router • Move the Extender closer to the Router/uplink Extender. • Avoid obstacles, such as walls or doors in between.
  • Page 153 Chapter 6 App Tutorials The number of connected clients display near the Zyxel Device icon. Tap a Zyxel Device icon to check and manage its connected clients. AX/DX/EX/PX Series User’s Guide...
  • Page 154 Chapter 6 App Tutorials Tap the ( ) icon of a client to see the client’s detailed information. AX/DX/EX/PX Series User’s Guide...

  • Page 155: Changing The Default Home Wifi Network Name And Password

    Chapter 6 App Tutorials 6.7 Changing the Default Home WiFi Network Name and Password It is advisable to change the default WiFi settings as they are printed on the label on the Controller. Note that you need to reconnect your phone to this network with the new settings. Changing Home WiFi Settings Change the SSID and key for your Home WiFi for better security.
  • Page 156 Chapter 6 App Tutorials For the WiFi password, you can use 8 – 63 alphanumeric (0-9, a-z, A-Z) and single-byte special characters and spaces. Table 31 Home WiFi Settings Parameters Example HOME WIFI SSID Company Password company123 Setting Up Home WiFi Follow the steps below to change your Home WiFi settings.

  • Page 157: Letting Wifi Clients Connect To The Wifi Network

    Chapter 6 App Tutorials Note: It takes 2-3 minutes for the Zyxel Device to apply the new WiFi settings to the whole MPro Mesh network. You will need to reconnect to the WiFi network using the new SSID and password. 6.7.1 Letting WiFi Clients Connect to the WiFi Network Take a screenshot of the QR code and share it with the WiFi clients that you want to access the WiFi network.
  • Page 158 Chapter 6 App Tutorials AX/DX/EX/PX Series User’s Guide...

  • Page 159: Blocking Internet Access At Specific Times

    Chapter 6 App Tutorials 6.8 Blocking Internet Access at Specific Times Use the Parental Control screen to configure Internet access schedule profiles to limit the days and times current client devices can access the Internet. You can create up to 20 schedules in a profile. Clients in a profile will be blocked from the Internet during the time periods you schedule.
  • Page 160 Chapter 6 App Tutorials Tap Parental Control in the navigation panel. Tap the add icon ( ) or Create Profile to create a parental control profile. Enter the Profile Name. Tap Add Schedule to add a schedule for this profile. AX/DX/EX/PX Series User’s Guide...
  • Page 161 Chapter 6 App Tutorials Configure the first schedule using the parameters given above. Tap Save. AX/DX/EX/PX Series User’s Guide...
  • Page 162 Chapter 6 App Tutorials Tap Add schedule to add the second schedule. AX/DX/EX/PX Series User’s Guide...
  • Page 163 Chapter 6 App Tutorials Configure the second schedule using the parameters given above. Tap Save. AX/DX/EX/PX Series User’s Guide...
  • Page 164 Chapter 6 App Tutorials Tap Add Device to select the client devices for which you want to apply this profile. AX/DX/EX/PX Series User’s Guide...
  • Page 165 Chapter 6 App Tutorials Tap the ( ) icon of the client devices you want to select. Tap Add. AX/DX/EX/PX Series User’s Guide...
  • Page 166 Chapter 6 App Tutorials 10 Tap Create to finish creating the parental control profile. AX/DX/EX/PX Series User’s Guide...
  • Page 167 Chapter 6 App Tutorials 11 Tap the switch to enable Parental Control. The profiles are active when you enable Parental Control. If a profile is currently blocking clients from Internet access during the scheduled period, the status displays Block from Internet. Otherwise, it displays Allow to Internet. AX/DX/EX/PX Series User’s Guide...

  • Page 168: Seeing Currently Connected Client Devices

    Chapter 6 App Tutorials 6.9 Seeing Currently Connected Client Devices Follow the steps below to view clients that are currently connected to your MPro Mesh network and their link quality and device details, such as the IP address, MAC address, and the connection status of a client device.
  • Page 169 Chapter 6 App Tutorials Table 33 Client Device Connection Status ICON CONNECTION TYPE CONNECTION STATUS ACTION TO DO Wired Wired Connection None. Wireless Good to Go None. Wireless Too Far from the Zyxel • Move the client device closer to the Zyxel Device.

  • Page 170: Changing The Client Device Names

    Chapter 6 App Tutorials Tap to select a client device to view the device’s IP address, MAC address, Internet access schedule profile, and the connection status. 6.10 Changing the Client Device Names Follow the steps below to change your client device’s name displayed on the app. Tap the Devices icon in the navigation panel.
  • Page 171 Chapter 6 App Tutorials Tap the edit icon ( ) to edit the device name. Enter a descriptive name for the device and tap the ( ) icon. You can use 1 – 20 alphanumeric (0-9, a-z, A-Z) and single-byte special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed.

  • Page 172: Blocking Internet Access For Specific Clients Immediately

    Chapter 6 App Tutorials 6.11 Blocking Internet Access for Specific Clients Immediately Follow the steps below to block a specific client named Laura from accessing the Internet using the Pause Internet function. Note: If you enable Pause Internet for a client device, the client device will be blocked from the Internet immediately regardless of your Parental Control profile schedules.
  • Page 173 Chapter 6 App Tutorials Tap the search icon ( ). Enter Laura in the field. Tap the ( ) icon to show the Device Detail screen. AX/DX/EX/PX Series User’s Guide...
  • Page 174 Chapter 6 App Tutorials Devices Tap to enable the switch in the Pause Internet field. Laura will not be able to access the Internet until you disable Pause Internet. AX/DX/EX/PX Series User’s Guide...

  • Page 175: Setting Up The Guest Wifi Network

    Chapter 6 App Tutorials 6.12 Setting Up the Guest WiFi Network You can set up a Guest WiFi network for your Zyxel Device. Company A wants to create a different WiFi network group for different types of users as shown in the following figure. This group has its own SSID and password.
  • Page 176 Chapter 6 App Tutorials Figure 70 Visiting Guests Blocked from Company Network Use the following parameters to set up the Guest WiFi network group. For the SSID, you can use 1 – 32 alphanumeric (0-9, a-z, A-Z), single-byte special characters and spaces. For the WiFi password, you can use 8 –...
  • Page 177 Chapter 6 App Tutorials Your phone will temporarily disconnect from the Main WiFi network when you enable Guest WiFi. It takes 2 – 3 minutes for the Zyxel Device to apply the new settings to the whole MPro Mesh network. Make sure your phone reconnects to the Zyxel Main WiFi network.
  • Page 178 Chapter 6 App Tutorials Tap the edit icon ( ) to edit the Guest WiFi network. AX/DX/EX/PX Series User’s Guide...
  • Page 179 Chapter 6 App Tutorials Set the Guest WiFi group SSID and password using the parameters given above. Tap Done to save and apply the settings. Your phone will temporarily disconnect from the Main WiFi network when you change the Guest WiFi settings. Make sure it reconnects to the Zyxel Main WiFi network. AX/DX/EX/PX Series User’s Guide...

  • Page 180: Letting Wifi Clients Only Connect To The Internet Through The Guest Wifi Network

    Chapter 6 App Tutorials 6.12.1 Letting WiFi Clients Only Connect to the Internet Through the Guest WiFi Network Tap the WiFi icon in the navigation panel. Tap the ( ) icon to show the QR code. AX/DX/EX/PX Series User’s Guide...
  • Page 181 Chapter 6 App Tutorials Swipe to the left to see the Share Guest WiFi QR code for connecting to the Zyxel Device Guest WiFi. Take a screenshot of the QR code and share it with the WiFi clients that you let access the Internet (only) through this WiFi network.

  • Page 182: Viewing More App Information And The Online Help

    Chapter 6 App Tutorials 6.13 Viewing More App Information and the Online Help You can view the following information about the app: • The app online help page • The app version • The privacy policy. AX/DX/EX/PX Series User’s Guide...

  • Page 183: Logging Out Of The Controller Device

    Chapter 6 App Tutorials 6.13.1 Logging Out of the Controller Device To log out of the current Controller device (the MPro Mesh router or extender) of this MPro Mesh network: Tap the Account icon in the navigation panel. Tap Logout, then tap YES. AX/DX/EX/PX Series User’s Guide...
  • Page 184 Chapter 6 App Tutorials AX/DX/EX/PX Series User’s Guide...

  • Page 185: Technical Reference

    Technical Reference AX/DX/EX/PX Series User’s Guide...

  • Page 186: Connection Status

    H A P T E R Connection Status 7.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and WiFi settings in this screen. It also shows the network status of the Zyxel Device and computers or devices connected to it.
  • Page 187 Chapter 7 Connection Status Use the Topology view screen to display an overview of your Mesh network. Figure 73 Connectivity: Connected Devices: Topology View Use the List view screen to view IP addresses and MAC addresses of the WiFi and wired devices connected to the Zyxel Device.

  • Page 188: Icon And Device Name

    Chapter 7 Connection Status 7.1.2 Icon and Device Name Select an icon and/or enter a name in the Device Name field for a connected device. Click to enable ) Internet Blocking (or Active) for a connected WiFi client. Click Save to save your changes. Figure 75 Connectivity: Edit 7.1.3 System Info Use this screen to view the basic system information of the Zyxel Device.
  • Page 189 Chapter 7 Connection Status Figure 77 System Info: Detailed Information Each field is described in the following table. Table 35 System Info: Detailed Information LABEL DESCRIPTION Host Name This field displays the Zyxel Device system name. It is used for identification. Model Name This shows the model number of your Zyxel Device.
  • Page 190 Chapter 7 Connection Status Table 35 System Info: Detailed Information (continued) LABEL DESCRIPTION Interface Up Time/ This field displays the length of time of the Ethernet WAN connection. WAN Interface Uptime CPU Usage This displays the current CPU usage percentage. Memory Usage This displays the current RAM usage percentage.

  • Page 191: Wifi Settings

    Chapter 7 Connection Status Table 35 System Info: Detailed Information (continued) LABEL DESCRIPTION Security This displays the type of security mode the WiFi interface is using in the WLAN. 802.11 Mode This displays the type of 802.11 mode the WiFi interface is using in the WLAN. This displays whether WPS is activated on the WiFi interface.
  • Page 192 Chapter 7 Connection Status Figure 79 WiFi Settings: Configuration Each field is described in the following table. Table 36 WiFi Settings: Configuration LABEL DESCRIPTION Keep 2.4G, 5G and Select this and the 2.4 GHz, 5 GHz and 6GHz wireless networks will use the same SSID. 6G the same If you deselect this, the screen will change.

  • Page 193: Guest Wifi Settings

    Chapter 7 Connection Status 7.2 Guest WiFi Settings Use this screen to enable or disable the guest 2.4 GHz / 5 GHz /6GHz WiFi networks. When the switch goes to the right ( ), the function is enabled. Otherwise, it is not. You can check their SSIDs (WiFi network name) and passwords from this screen.

  • Page 194: Lan

    Chapter 7 Connection Status Figure 82 Guest WiFi Settings: Different SSIDs Each field is described in the following table. Table 37 WiFi Settings: Configuration LABEL DESCRIPTION 2.4G/5G/6G WiFi Click this switch to enable or disable the 2.4 GHz / 5 GHz / 6GHz WiFi networks. When the switch goes to the right , the function is enabled.
  • Page 195 Chapter 7 Connection Status Figure 83 LAN Click the Arrow icon ( ) to configure the LAN IP settings and DHCP setting for your Zyxel Device. Figure 84 LAN Setup Each field is described in the following table. Table 38 LAN Setup LABEL DESCRIPTION LAN IP Setup...

  • Page 196: The Parental Control Screen

    Chapter 7 Connection Status Table 38 LAN Setup (continued) LABEL DESCRIPTION DHCP Server State DHCP Server This is the period of time a DHCP-assigned address is valid, before it expires. Lease Time When a client connects to the Zyxel Device, DHCP automatically assigns the client an IP addresses from the IP address pool.

  • Page 197: Create A Parental Control Profile

    Chapter 7 Connection Status 7.3.1 Create a Parental Control Profile Click Add more Profile to create a profile. Use this screen to add a devices in a profile and block Internet access on the profile devices. Figure 87 Parental Control: Add More Profile Each field is described in the following table.
  • Page 198 Chapter 7 Connection Status Each field is described in the following table. Table 41 Parental Control: Schedule LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile. You can use up to 17 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. Profile Active Click this switch to enable this profile.

  • Page 199: Broadband

    H A P T E R Broadband 8.1 Broadband Overview This chapter discusses the Zyxel Device’s Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A Wide Area Network (WAN) connection is an outside connection to another network or the Internet. It connects your private networks, such as a Local Area Network (LAN) and other networks, so that a computer in one location can communicate with computers in other locations.

  • Page 200: What You Need To Know

    Chapter 8 Broadband Table 42 WAN Setup Overview LAYER-2 INTERNET CONNECTION INTERFACE CONNECTION MODE ENCAPSULATION CONNECTION SETTINGS Ethernet Routing PPPoE PPP user name and password, WAN IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE WAN IPv4/IPv6 IP address, NAT, DNS server and routing feature Bridge VLAN Note: This table is for the Ethernet, AON and PON routers.
  • Page 201 Chapter 8 Broadband If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP addresses. Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed.
  • Page 202 Chapter 8 Broadband IPv6 Rapid Deployment Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4 network. When the Zyxel Device has an IPv4 WAN address and you set IPv6/IPv4 Mode to IPv4 Only, you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.

  • Page 203: Before You Begin

    Chapter 8 Broadband Figure 92 Dual Stack Lite 8.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 8.2 Broadband Settings for DSL Routers Use this screen to change your Zyxel Device’s Internet access settings. The summary table shows you the configured WAN services (connections) on the Zyxel Device.

  • Page 204: Add Or Edit Internet Connection

    Chapter 8 Broadband The following table describes the labels in this screen. Table 44 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this button to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection.
  • Page 205 Chapter 8 Broadband Figure 94 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 206 Chapter 8 Broadband The following table describes the labels in this screen. Table 45 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click the switch to enable this WAN interface. Name Specify a descriptive name for this connection. You can use up to 15 alphanumeric (0-9, a-z, A- Z) and special characters except [ "...
  • Page 207 Chapter 8 Broadband Table 45 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Encapsulation Select the method of multiplexing used by your ISP from the drop-down list box. Choices are: • LLC/SNAP-BRIDGING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header.
  • Page 208 Chapter 8 Broadband Table 45 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Primary DNS Enter the first DNS server address assigned by the ISP. Server Secondary DNS Enter the second DNS server address assigned by the ISP. Server Routing Feature (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) Click this switch to activate NAT on this connection.
  • Page 209 Chapter 8 Broadband Table 45 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION option 60 Select this and enter the device identity you want the Zyxel Device to add in the DHCP discovery packets that go to the DHCP server.
  • Page 210 Chapter 8 Broadband Table 45 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Manually Select Manually Configured if you have the IPv6 address of the relay server. Otherwise, select Configured Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP.
  • Page 211 Chapter 8 Broadband Figure 95 Network Setting > Broadband > Add or Edit New WAN Interface (Bridge Mode) The following table describes the fields in this screen. Table 46 Network Setting > Broadband > Add/Edit New WAN Interface (Bridge Mode) LABEL DESCRIPTION General...

  • Page 212: Broadband Settings For Ethernet, Aon And Pon Routers

    Chapter 8 Broadband Table 46 Network Setting > Broadband > Add/Edit New WAN Interface (Bridge Mode) (continued) LABEL DESCRIPTION VCI [32– The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). 65535] Enter the VCI assigned to you.
  • Page 213 Chapter 8 Broadband Figure 96 Network Setting > Broadband (Ethernet Routers) Figure 97 Network Setting > Broadband (AON and PON Routers) The following table describes the labels in this screen. Table 47 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this button to create a new connection.

  • Page 214: Add Or Edit Internet Connection

    Chapter 8 Broadband Table 47 Network Setting > Broadband (continued) LABEL DESCRIPTION MLD Proxy This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection.
  • Page 215 Chapter 8 Broadband Figure 98 Network Setting > Broadband > Add or Edit New WAN Interface (Ethernet Routers Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 216 Chapter 8 Broadband Figure 99 Network Setting > Broadband > Add or Edit New WAN Interface (AON and PON Routers Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 217 Chapter 8 Broadband The following table describes the labels in this screen. Table 48 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable the WAN interface. Name Specify a descriptive name for this connection. You can use up to 15 alphanumeric (0-9, a-z, A- Z) and special characters except [ "...
  • Page 218 Chapter 8 Broadband Table 48 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Enter the MTU (Maximum Transfer Unit) size for traffic through this connection. IP Address (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) Obtain an IP A static IP address is a fixed IP that your ISP gives you.
  • Page 219 Chapter 8 Broadband Table 48 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Request Options Select Option 42 to have the Zyxel Device get NTP time server information from DHCP packets sent from the DHCP server. Select Option 43 to have the Zyxel Device get vendor specific information from DHCP packets sent from the DHCP server.
  • Page 220 Chapter 8 Broadband Table 48 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION DS-Lite This is available only when you select IPv6 Only in the IPv4/IPv6 Mode field. Enable Dual Stack Lite to let local computers use IPv4 through an ISP’s IPv6 network. See Dual Stack Lite on page for more information.

  • Page 221: Cellular Backup

    Chapter 8 Broadband Figure 100 Network Setting > Broadband > Add or Edit New WAN Interface (Bridge Mode) The following table describes the fields in this screen. Table 49 Network Setting > Broadband > Add or Edit New WAN Interface (Bridge Mode) LABEL DESCRIPTION General...
  • Page 222 Chapter 8 Broadband backup to keep you online if the primary WAN connection fails for Consecutive Fail times. Consult your cellular service provider to configure the settings in this screen. Disconnect the Fiber port to use the cellular dongle as your primary WAN connection, as the Zyxel Device automatically uses a wired WAN connection when available.
  • Page 223 Chapter 8 Broadband Note: If you select Drop in the Current Cellular Connection field, the will drop the Zyxel Device cellular WAN connection when the Time Budget or Data Budget is reached. It may take some time for the cellular WAN connection to be disconnected when the Time Budget or Data Budget is reached.
  • Page 224 Chapter 8 Broadband Figure 103 Network > Broadband > Cellular Backup (Budget Setup) The following table describes the labels in this screen. Table 50 Network Setting > Broadband > Cellular Backup LABEL DESCRIPTION General Cellular Backup Click this switch to have the Zyxel Device use the cellular connection as your WAN or a backup when the wired WAN connection fails.
  • Page 225 Chapter 8 Broadband Table 50 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Ping Host Select this to have the Zyxel Device ping the particular host name or IP address you typed in this field. Cellular Connection Settings Card This field displays the manufacturer and model name of your cellular card if you inserted one in Description...
  • Page 226 Chapter 8 Broadband Table 50 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Secondary Enter the second DNS server address assigned by the ISP. DNS Server Enable e-mail Select this to enable the email notification function. The Zyxel Device will email you a notification Notification when the cellular connection is up.

  • Page 227: Broadband Advanced Screen

    Chapter 8 Broadband Table 50 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Data Budget Select the check boxes and enter a number from 1 to 99 in the percentage fields. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. % of time budget/data budget...
  • Page 228 Chapter 8 Broadband Note: If the settings in the screen are changed, the Zyxel Device will re-establish the DSL connections. Table 51 VDSL Profiles MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 8.832 2048 4.3125...
  • Page 229 Chapter 8 Broadband Figure 104 Network Setting > Broadband > Advanced AX/DX/EX/PX Series User’s Guide...
  • Page 230 Chapter 8 Broadband The following table describes the labels in this screen. Table 52 Network Setting > Broadband > Advanced LABEL DESCRIPTION DSL Capabilities PhyR US Enable or disable PhyR US (upstream) for upstream transmission to the WAN. PhyR US should be enabled if data being transmitted upstream is sensitive to noise.

  • Page 231: Backup Wan

    Chapter 8 Broadband Table 52 Network Setting > Broadband > Advanced (continued) LABEL DESCRIPTION Annex M/J Annex M and Annex J are specified in ITU-T recommendations G.992.3 (ADSL2) and G.992.5 (ADSL2+). Annex M and Annex J enhance the capabilities of Annex A and Annex B by increasing the upstream transmission data rate, but slightly reduce the downstream data rates as a trade-off.

  • Page 232: Technical Reference

    Chapter 8 Broadband Figure 105 Network Setting > Broadband > Backup WAN The following table describes the fields in this screen. Table 53 Network Setting > Broadband > Backup WAN LABEL DESCRIPTION State: Click this switch to enable backup WAN to have the LAN/WAN port act as an Ethernet WAN port. Otherwise, the LAN/WAN port remains as a LAN port.
  • Page 233 Chapter 8 Broadband PPP over Ethernet (PPPoE) Point-to-Point Protocol over Ethernet (PPPoE) provides access control and billing functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, WiFi, and so on) connection. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS).
  • Page 234 Chapter 8 Broadband speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the line speed. Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the maximum average rate at which cells can be sent over the virtual connection.
  • Page 235 Chapter 8 Broadband The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
  • Page 236 Chapter 8 Broadband used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094. TPID User Priority VLAN ID 2 Bytes 3 Bits 1 Bit 12 Bits Multicast IP packets are transmitted in either one of two ways – Unicast (1 sender – 1 recipient) or Broadcast (1 sender –...
  • Page 237 Chapter 8 Broadband • Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15. IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address.

  • Page 238: Wireless

    H A P T E R Wireless 9.1 Wireless Overview This chapter describes the Zyxel Device’s Network Setting > Wireless screens. Use these screens to set up your Zyxel Device’s WiFi network and security settings. 9.1.1 What You Can Do in this Chapter This section describes the Zyxel Device’s Wireless screens.

  • Page 239: Wireless General Settings

    Chapter 9 Wireless WiFi6 / IEEE 802.11ax WiFi6 is backwards compatible with IEEE 802.11a/b/g/n/ac and is most suitable in areas with a high concentration of users. WiFi6 devices support Target Wakeup Time (TWT) allowing them to automatically power down when they are inactive. The following table displays the comparison of the different WiFi standards.
  • Page 240 Chapter 9 Wireless Note: Setting a maximum upstream or downstream bandwidth will significantly decrease wireless performance. Note: Keep the same settings for 2.4G, 5G and 6G wireless networks is enabled and cannot be disabled when you enable MPro Mesh in the Network > Wireless > MESH screen. Click Network Setting >...
  • Page 241 Chapter 9 Wireless Figure 107 Network Setting > Wireless > General AX/DX/EX/PX Series User’s Guide...
  • Page 242 Chapter 9 Wireless The following table describes the general WiFi labels in this screen. Table 55 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Wireless Select Keep the same settings for 2.4G, 5G and 6G wireless networks and the 2.4 GHz, 5 GHz and 6 GHz WiFi networks will use the same SSID and wireless security settings.

  • Page 243: No Security

    Chapter 9 Wireless Table 55 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Level Security Mode Select More Secure (Recommended) to add security on this WiFi network. The WiFi clients which want to associate to this network must have same WiFi security settings as the Zyxel Device. When you select to use a security, additional options appears in this screen.
  • Page 244 Chapter 9 Wireless Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA3-SAE from the Security Mode list if your WiFi client supports it. If you are not sure, select WPA3-SAE/WPA2-PSK or WPA2-PSK.

  • Page 245: Guest/More Ap Screen

    Chapter 9 Wireless Table 57 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK (continued) LABEL DESCRIPTION Encryption AES is the default data encryption type, which uses a 128-bit key. Select the encryption type (AES or TKIP+AES) for data encryption. Select AES if your WiFi clients can all use AES. Select TKIP+AES to allow the WiFi clients to use either TKIP or AES.

  • Page 246: The Edit Guest/More Ap Screen

    Chapter 9 Wireless Table 59 Network Setting > Wireless > Guest/More AP (continued) LABEL DESCRIPTION SSID An SSID profile is the set of parameters relating to one of the Zyxel Device’s BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated. This field displays the name of the wireless profile on the network.
  • Page 247 Chapter 9 Wireless Figure 111 Network Setting > Wireless > Guest/More AP > Edit The following table describes the fields in this screen. Table 60 Network Setting > Wireless > Guest/More AP > Edit LABEL DESCRIPTION WiFi/Wireless Network Setup WiFi/Wireless Click this switch to enable or disable the WiFi in this field.
  • Page 248 Chapter 9 Wireless Table 60 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. Guest WLAN Select this to create Guest WLANs for home and external clients.

  • Page 249: Mac Authentication

    Chapter 9 Wireless Table 60 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving. Click OK to save your changes. 9.4 MAC Authentication Use this screen to give exclusive access to specific connected devices (Allow) or exclude specific devices from accessing the Zyxel Device (Deny), based on the MAC address of each connected device.

  • Page 250: Wps

    Chapter 9 Wireless Table 61 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION MAC Restrict Define the filter action for the list of MAC addresses in the MAC Address table. Mode Select Disable to turn off MAC filtering. Select Deny to block access to the Zyxel Device.
  • Page 251 Chapter 9 Wireless Note: The WPS switch is unavailable if the WiFi is disabled. If WPS is enabled, UPnP will automatically be turned on. Click Network Setting > Wireless > WPS. The following screen displays. Click this switch and it will turn blue. Click Apply to activate the WPS function.

  • Page 252: Wmm

    Chapter 9 Wireless Table 62 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Method 1 PBC Use this section to set up a WPS WiFi network using Push Button Configuration (PBC). Click this switch to make it turn blue. Click Apply to activate WPS method 1 on the Zyxel Device. Click this button to add another WPS-enabled WiFi device (within WiFi range of the Zyxel Device) to your WiFi network.
  • Page 253 Chapter 9 Wireless Figure 114 Network Setting > Wireless > WMM Note: WMM cannot be disabled if 802.11 mode includes 802.11n or 802.11ac. Note: APSD only affects SSID1. For SSID2-SSID4, APSD is always enabled. Note: This screen is not available when MPro Mesh is enabled in the Network Setting > Wireless >...

  • Page 254: Others Screen

    Chapter 9 Wireless 9.7 Others Screen Use this screen to configure advanced WiFi settings, such as additional security settings, power saving, and data transmission settings. Click Network Setting > Wireless > Others. The screen appears as shown. Note: This screen is not available when MPro Mesh is enabled in the Network Setting > Wireless >...
  • Page 255 Chapter 9 Wireless Table 64 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION Beacon Interval When a wirelessly networked device sends a beacon, it includes with it a beacon interval. This specifies the time period before the device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low power mode before waking up to handle the beacon.

  • Page 256: Channel Status

    Chapter 9 Wireless Table 64 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION Protected WiFi with Protected Management Frames (PMF) provides protection for unicast and multicast Management management action frames. Unicast management action frames are protected from both Frames eavesdropping and forging, and multicast management action frames are protected from forging.
  • Page 257 Chapter 9 Wireless Figure 116 Network Setting > Wireless > Channel Status AX/DX/EX/PX Series User’s Guide...

  • Page 258: Mesh

    Chapter 9 Wireless The following table describes the labels in this screen. Table 65 Network Setting > Wireless > Channel Status LABEL DESCRIPTION Channel Monitor Wireless Network Setup Band Select a 2.4GHz or 5GHz frequency band on which you want to conduct a channel scan. Scan WiFi LAN Click the Scan button to scan WiFi channels.

  • Page 259: Technical Reference

    Chapter 9 Wireless Figure 117 Network Setting > Wireless > MESH The following table describes the labels in this screen. Table 66 Network Setting > Wireless > MESH LABEL DESCRIPTION MPro Mesh Click the button (to the right) to enable the MPro Mesh feature on the Zyxel Device and set up your MPro Mesh network.
  • Page 260 Chapter 9 Wireless Figure 118 Example of a WiFi Network The WiFi network is the part in the blue circle. In this WiFi network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your Zyxel Device is the Every WiFi network must follow these basic guidelines.

  • Page 261: Additional Wifi Terms

    Chapter 9 Wireless 9.10.2 Additional WiFi Terms The following table describes some WiFi network terms and acronyms used in the Zyxel Device’s Web Configurator. Table 67 Additional WiFi Terms TERM DESCRIPTION RTS/CTS Threshold In a WiFi network which covers a large area, WiFi devices are sometimes not aware of each other’s presence.
  • Page 262 Chapter 9 Wireless Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of WiFi security you can set up in the WiFi network. 9.10.3.1 SSID Normally, the Zyxel Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the Zyxel Device does not broadcast the SSID.

  • Page 263: Signal Problems

    Chapter 9 Wireless For example, if the WiFi network has a RADIUS server, you can choose WPA, WPA2, or WPA3. If users do not log in to the WiFi network, you can choose no encryption, WPA2-PSK, or WPA3-SAE. Note: It is recommended that WiFi networks use WPA3-SAE, WPA2-PSK, or stronger encryption. The other types of encryption are better than none at all, but it is still possible for unauthorized WiFi devices to figure out the original information pretty quickly.

  • Page 264: Mbssid

    Chapter 9 Wireless Figure 119 Basic Service Set 9.10.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The Zyxel Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously.

  • Page 265: Wifi Protected Setup (Wps)

    Chapter 9 Wireless Use short preamble if you are sure all WiFi devices on the network support it, and to provide more efficient communications. Use the dynamic setting to automatically use short preamble when all WiFi devices on the network support it, otherwise the Zyxel Device uses long preamble.
  • Page 266 Chapter 9 Wireless Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
  • Page 267 Chapter 9 Wireless Figure 120 Example WPS Process: PIN Method 9.10.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
  • Page 268 Chapter 9 Wireless Figure 121 How WPS Works The roles of registrar and enrollee last only as long as the WPS setup process is active (2 minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake;...
  • Page 269 Chapter 9 Wireless Figure 122 WPS: Example Network Step 1 In step 2, you add another WiFi client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network.
  • Page 270 Chapter 9 Wireless Figure 124 WPS: Example Network Step 3 9.10.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • When you use WPS, it works between two devices only. You cannot enroll multiple devices simultaneously, you must enroll one after the other.

  • Page 271: Home Networking

    H A P T E R Home Networking 10.1 Home Networking Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
  • Page 272 Chapter 10 Home Networking 10.1.2.1 About LAN IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address. Subnet Mask The subnet mask specifies the network number portion of an IP address.

  • Page 273: Before You Begin

    Chapter 10 Home Networking • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
  • Page 274 Chapter 10 Home Networking Figure 126 Network Setting > Home Networking > LAN Setup AX/DX/EX/PX Series User’s Guide...
  • Page 275 Chapter 10 Home Networking Figure 127 Network Setting > Home Networking > LAN Setup (Continued) The following table describes the fields in this screen. Table 69 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name Select the interface group that you want to configure its LAN settings.
  • Page 276 Chapter 10 Home Networking Table 69 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION IP Address Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation, for example, 192.168.1.1 (factory default). Subnet Mask Enter the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
  • Page 277 Chapter 10 Home Networking Table 69 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION The Zyxel Device supports DNS proxy by default. The Zyxel Device sends out its own LAN IP address to the DHCP clients as the first DNS server address. DHCP clients use this first DNS server to send domain-name queries to the Zyxel Device.
  • Page 278 Chapter 10 Home Networking Table 69 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION MLD Mode Select Standard Mode to forward multicast packets to a port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports. Select Blocking Mode to block all unknown multicast packets from the WAN.

  • Page 279: Static Dhcp

    Chapter 10 Home Networking Table 69 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DNS Query Scenario Select how the Zyxel Device handles clients’ DNS information requests. IPv4/IPv6 DNS Server: The Zyxel Device forwards the requests to both the IPv4 and IPv6 DNS servers and sends clients the first DNS information it receives.
  • Page 280 Chapter 10 Home Networking The following table describes the labels in this screen. Table 70 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Static DHCP Click this to configure a static DHCP entry. Configuration This is the index number of the entry. Status This field displays whether the client is connected to the Zyxel Device.

  • Page 281: Upnp

    Chapter 10 Home Networking Table 71 Network Setting > Home Networking > Static DHCP: Static DHCP Configuration (continued) LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify if you select Manual Input in the previous field.

  • Page 282: Lan Additional Subnet

    Chapter 10 Home Networking The following table describes the labels in this screen. Table 72 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP State UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator).
  • Page 283 Chapter 10 Home Networking Figure 131 Network Setting > Home Networking > Additional Subnet The following table describes the labels in this screen. Table 73 Network Setting > Home Networking > Additional Subnet LABEL DESCRIPTION IP Alias Setup Group Name Select the interface group name for which you want to configure the IP alias settings.

  • Page 284: Stb Vendor Id

    Chapter 10 Home Networking Table 73 Network Setting > Home Networking > Additional Subnet (continued) LABEL DESCRIPTION Subnet Mask Enter the public IPv4 subnet mask provided by your ISP. Offer Public IP Click this switch to enable the Zyxel Device to provide public IP addresses by DHCP server. by DHCP Otherwise, click to disable.

  • Page 285: Wake On Lan

    Chapter 10 Home Networking 10.7 Wake on LAN Wake on LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature, the remote hardware (for example the network adapter on a computer) must support Wake on LAN using the ‘Magic Packet’...

  • Page 286: Apas

    Chapter 10 Home Networking Figure 134 Network Setting > Home Networking > TFTP Server Name The following table describes the labels in this screen. Table 76 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION TFTP Server Enter the IP address or the host name of a single TFTP server. Name Cancel Click Cancel to restore your previously saved settings.
  • Page 287 Chapter 10 Home Networking Note: You must configure a Bridge WAN interface in advance. As APAS allows incoming traffic from any port to access any service on a configured LAN device, it may be difficult to distinguish between appropriate and malicious traffic going to the LAN device. Make sure to properly configure firewall rules to protect the LAN device, and monitor network traffic for suspicious activity.

  • Page 288: Add Apas

    Chapter 10 Home Networking 10.9.1 Add APAS Use this screen to create a new MAC rule. Click Network Setting > Home Networking > APAS > Add New MAC Rule to open the following screen. Figure 135 Network Setting > Home Networking > APAS > Add New MAC Rule The following table describes the labels in this screen.

  • Page 289: Dhcp Setup

    Chapter 10 Home Networking LANs, WANs and the Zyxel Device The actual physical connection determines whether the Zyxel Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.

  • Page 290: Lan Tcp/Ip

    Chapter 10 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation.

  • Page 291: Turn On Upnp In Windows 10 Example

    Chapter 10 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
  • Page 292 Chapter 10 Home Networking Click Change advanced sharing settings. Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer.

  • Page 293: Auto-Discover Your Upnp-Enabled Network Device

    Chapter 10 Home Networking 10.11.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. Make sure your computer is connected to the LAN port of the Zyxel Device. Open File Explorer and click Network.
  • Page 294 Chapter 10 Home Networking Figure 137 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 138 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. AX/DX/EX/PX Series User’s Guide...
  • Page 295 Chapter 10 Home Networking Figure 139 Internet Connection Properties: Advanced Settings Figure 140 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 141 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network &...

  • Page 296: Web Configurator Access With Upnp In Windows 10

    Chapter 10 Home Networking Figure 142 Internet Connection Status 10.12 Web Configurator Access with UPNP in Windows 10 Follow the steps below to access the Web Configurator. Open File Explorer. Click Network. AX/DX/EX/PX Series User’s Guide...
  • Page 297 Chapter 10 Home Networking Figure 143 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 144 Network Connections: Network Infrastructure Right-click the icon for your Zyxel Device and select Properties.
  • Page 298 Chapter 10 Home Networking Figure 145 Network Connections: Network Infrastructure: Properties: Example AX/DX/EX/PX Series User’s Guide...

  • Page 299: Routing

    H A P T E R Routing 11.1 Routing Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes.

  • Page 300: Add Or Edit Static Route

    Chapter 11 Routing Figure 147 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 79 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Click this to set up a new static route on the Zyxel Device. Route This is the number of an individual static route.
  • Page 301 Chapter 11 Routing Figure 148 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 80 Network Setting > Routing > Static Route > Add New Static Route LABEL DESCRIPTION Active...
  • Page 302 Chapter 11 Routing computer B (in N2 network), the traffic is sent to the Zyxel Device’s WAN default gateway by default. In this case, B will never receive the traffic. You need to specify a static routing rule on the Zyxel Device to specify R as the router in charge of forwarding traffic to N2.
  • Page 303 Chapter 11 Routing This tutorial uses the following example IP settings: Table 81 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Zyxel Device’s WAN 172.16.1.1 The Zyxel Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface Default 192.168.1.34 R’s N1 192.168.1.253 R’s N2...

  • Page 304: Dns Route

    Chapter 11 Routing 11.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting >...

  • Page 305: Add Or Edit Dns Route

    Chapter 11 Routing Table 82 Network Setting > Routing > DNS Route (continued) LABEL DESCRIPTION Status This field indicates whether the rule is active (yellow bulb) or not (gray bulb). Domain Name This is the domain name to which the DNS route applies. WAN Interface This is the WAN interface through which the matched DNS request is routed.

  • Page 306: Policy Route

    Chapter 11 Routing 11.4 Policy Route By default, the Zyxel Device routes packets based on the shortest path to the destination address. Policy routes allow you to override the default behavior and route packets based on other criteria, such as the source address.
  • Page 307 Chapter 11 Routing Figure 152 Network Setting > Routing > Policy Route: Add or Edit The following table describes the labels in this screen. Table 85 Network Setting > Routing > Policy Route: Add or Edit LABEL DESCRIPTION Active Click this switch to activate this policy route. Otherwise, click to disable. Route Name Enter a descriptive name of this policy route.

  • Page 308: Rip Overview

    Chapter 11 Routing 11.5 RIP Overview Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows the Zyxel Device to exchange routing information with other routers. To activate RIP for the WAN interface, select the supported RIP version and operation. 11.5.1 RIP Click Network Setting >...

  • Page 309: Quality Of Service (Qos)

    H A P T E R Quality of Service (QoS) 12.1 QoS Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
  • Page 310 Chapter 12 Quality of Service (QoS) QoS versus CoS QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class.

  • Page 311: Quality Of Service General Settings

    Chapter 12 Quality of Service (QoS) The Zyxel Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions which are performed on the colored packets. See Section 12.9 on page 326 for more information on each metering algorithm.
  • Page 312 Chapter 12 Quality of Service (QoS) Figure 154 Network > QoS > General The following table describes the labels in this screen. Table 87 Network Setting > QoS > General LABEL DESCRIPTION Click this switch to enable QoS to improve your network performance. WAN Managed Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using Upstream...

  • Page 313: Queue Setup

    Chapter 12 Quality of Service (QoS) 12.4 Queue Setup Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment to decide the priority on WAN or LAN interfaces. Traffic with higher priority gets through faster than those with lower priority.

  • Page 314: Add A Qos Queue

    Chapter 12 Quality of Service (QoS) Table 88 Network Setting > QoS > Queue Setup (continued) LABEL DESCRIPTION Discipline This shows the discipline of the queue. The discipline is changed according to the option chosen in Queue Setting. If you choose SP, the discipline will be SP. If you choose SP+WRR, the discipline of the first and second queue will be SP, and the third and fourth queue will be WRR.

  • Page 315: Qos Classification Setup

    Chapter 12 Quality of Service (QoS) The following table describes the labels in this screen. Table 89 Network Setting > QoS > Queue Setup > Add New Queue/Edit LABEL DESCRIPTION Active Click this switch to enable the queue. Name Enter a descriptive name for this queue. You can use up to 32 printable characters except [ " ], [ ` ], [ ' ], [ <...

  • Page 316: Add Or Edit Qos Class

    Chapter 12 Quality of Service (QoS) Figure 157 Network Setting > QoS > Classification Setup The following table describes the labels in this screen. Table 90 Network Setting > QoS > Classification Setup LABEL DESCRIPTION Add New Click this to create a new classifier. Classification Order This is the index number of the entry.
  • Page 317 Chapter 12 Quality of Service (QoS) Figure 158 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step1 Figure 159 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step2 AX/DX/EX/PX Series User’s Guide...
  • Page 318 Chapter 12 Quality of Service (QoS) Figure 160 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step3 Figure 161 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step4 Figure 162 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step5 The following table describes the labels in this screen.
  • Page 319 Chapter 12 Quality of Service (QoS) Table 91 Network Setting > QoS > Classification Setup > Add New Classification/Edit (continued) LABEL DESCRIPTION Address Select the check box and enter the source IP address in dotted decimal notation. A blank source IP address means any source IP address. Subnet Mask This field is available only when you select IP in the Ether Type field.
  • Page 320 Chapter 12 Quality of Service (QoS) Table 91 Network Setting > QoS > Classification Setup > Add New Classification/Edit (continued) LABEL DESCRIPTION DHCP This field is available only when you select IP in the Ether Type field. Select this option and select a DHCP option. If you select Vendor Class ID (DHCP Option 60), enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware.

  • Page 321: Qos Shaper Setup

    Chapter 12 Quality of Service (QoS) Table 91 Network Setting > QoS > Classification Setup > Add New Classification/Edit (continued) LABEL DESCRIPTION To Queue Index Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. Cancel Click Cancel to exit this screen without saving any changes.

  • Page 322: Add Or Edit A Qos Shaper

    Chapter 12 Quality of Service (QoS) 12.6.1 Add or Edit a QoS Shaper Click Add New Shaper in the Shaper Setup screen or the Edit icon next to a shaper to show the following screen. Figure 164 Network Setting > QoS > Shaper Setup > Add New Shaper/Edit The following table describes the labels in this screen.

  • Page 323: Add Or Edit A Qos Policer

    Chapter 12 Quality of Service (QoS) The following table describes the labels in this screen. Table 94 Network Setting > QoS > Policer Setup LABEL DESCRIPTION Add New Click this to create a new entry. Policer This is the index number of the entry. Status This field displays whether the policer is active or not.
  • Page 324 Chapter 12 Quality of Service (QoS) Figure 166 Network Setting > QoS > Policer Setup > Add New Policer/Edit The following table describes the labels in this screen. Table 95 Network Setting > QoS > Policer Setup > Add New Policer/Edit LABEL DESCRIPTION Active...

  • Page 325: Qos Monitor

    Chapter 12 Quality of Service (QoS) Table 95 Network Setting > QoS > Policer Setup > Add New Policer/Edit (continued) LABEL DESCRIPTION Committed Specify the committed burst size for packet bursts. This must be equal to or less than the peak Burst Size burst size (two rate three color) or excess burst size (single rate three color) if it is also configured.

  • Page 326: Technical Reference

    Chapter 12 Quality of Service (QoS) Figure 167 Network Setting > QoS > Monitor The following table describes the labels in this screen. Table 96 Network Setting > QoS > Monitor LABEL DESCRIPTION Refresh Interval Select how often you want theZyxel Device to update this screen. Select None to stop refreshing Interface Monitor This is the index number of the entry.
  • Page 327 Chapter 12 Quality of Service (QoS) IEEE 802.1p specifies the user priority field and defines up to eight separate traffic types. The following table describes the traffic types defined in the IEEE 802.1d standard (which incorporates the 802.1p). Table 97 IEEE 802.1p Priority Level and Traffic Type PRIORITY LEVEL TRAFFIC TYPE Level 7...
  • Page 328 Chapter 12 Quality of Service (QoS) are eight classes of services (ranging from zero to seven) in IP precedence. Zero is the lowest priority level and seven is the highest. Automatic Priority Queue Assignment If you enable QoS on the Zyxel Device, the Zyxel Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class.
  • Page 329 Chapter 12 Quality of Service (QoS) Token Bucket The token bucket algorithm uses tokens in a bucket to control when traffic can be transmitted. The bucket stores tokens, each of which represents one byte. The algorithm allows bursts of up to b bytes which is also the bucket size, so the bucket can hold up to b tokens.
  • Page 330 Chapter 12 Quality of Service (QoS) • If there are not enough tokens in the CBS bucket, the Zyxel Device checks the EBS bucket. The packet is marked yellow if there are sufficient tokens in the EBS bucket. Otherwise, the packet is marked red. No tokens are removed if the packet is dropped.

  • Page 331: Network Address Translation (Nat)

    H A P T E R Network Address Translation (NAT) 13.1 NAT Overview NAT (Network Address Translation – NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

  • Page 332: Port Forwarding

    Chapter 13 Network Address Translation (NAT) side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.

  • Page 333: Port Forwarding

    Chapter 13 Network Address Translation (NAT) 13.2.1 Port Forwarding Click Network Setting > NAT to open the Port Forwarding screen. Note: TCP port 7547 is reserved for system use. Figure 169 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 99 Network Setting >...
  • Page 334 Chapter 13 Network Address Translation (NAT) Figure 170 Network Setting > NAT > Port Forwarding: Add or Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields.

  • Page 335: Port Triggering

    Chapter 13 Network Address Translation (NAT) Table 100 Network Setting > NAT > Port Forwarding: Add or Edit (continued) LABEL DESCRIPTION Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field.
  • Page 336 Chapter 13 Network Address Translation (NAT) Figure 171 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Zyxel Device to record Jane’s computer IP address. The Zyxel Device associates Jane's computer IP address with the "open"...

  • Page 337: Add Or Edit Port Triggering Rule

    Chapter 13 Network Address Translation (NAT) Table 101 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION Service Name This field displays the name of the service used by this rule. WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the Zyxel Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN.

  • Page 338: Dmz

    Chapter 13 Network Address Translation (NAT) The following table describes the labels in this screen. Table 102 Network Setting > NAT > Port Triggering: Add or Edit LABEL DESCRIPTION Active Click this switch to activate this rule. Service Name Enter a name to identify this rule. You can use up to 256 printable characters except [ " ], [ ` ], [ ' ], [ <...

  • Page 339: Alg

    Chapter 13 Network Address Translation (NAT) Figure 174 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 103 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not Address specified in the Port Forwarding screen.

  • Page 340: Address Mapping

    Chapter 13 Network Address Translation (NAT) Figure 175 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 104 Network Setting > NAT > ALG LABEL DESCRIPTION NAT ALG Enable this to make sure applications such as FTP and file transfer in IM applications work correctly with port-forwarding and address-mapping rules.

  • Page 341: Add New Rule Screen

    Chapter 13 Network Address Translation (NAT) Figure 176 Network Setting > NAT > Address Mapping The following table describes the fields in this screen. Table 105 Network Setting > NAT > Address Mapping LABEL DESCRIPTION Add New Rule Click this to create a new rule. Rule Name This is the name of the rule.
  • Page 342 Chapter 13 Network Address Translation (NAT) Figure 177 Network Setting > NAT > Address Mapping > Add New Rule The following table describes the fields in this screen. Table 106 Network Setting > NAT > Address Mapping > Add New Rule LABEL DESCRIPTION Rule Name...

  • Page 343: Sessions

    Chapter 13 Network Address Translation (NAT) 13.7 Sessions Use this screen to limit the number of concurrent NAT sessions a client can use, to ensure that no single client uses up too many available NAT sessions. Some applications, such as P2P file sharing, demand a greater number of NAT sessions in order to get a better uploading and downloading rate.
  • Page 344 Chapter 13 Network Address Translation (NAT) Example Applications • Some remote access applications, such as remote desktop or SSH, require incoming traffic to be routed to the user's device in order to establish a remote connection. Use PCP to dynamically map incoming traffic to the user's device, allowing them to establish remote connections.

  • Page 345: Add New Rule Screen

    Chapter 13 Network Address Translation (NAT) Figure 179 Network Setting > NAT > PCP The following table describes the fields in this screen. Table 108 Network Setting > NAT > PCP LABEL DESCRIPTION Add New Rule Click this to add a new PCP rule. This is the index number of the rule.

  • Page 346: Technical Reference

    Chapter 13 Network Address Translation (NAT) Figure 180 Network Setting > NAT > PCP > Add New Rule The following table describes the fields in this screen. Table 109 Network Setting > NAT > PCP > Add New Rule LABEL DESCRIPTION Required Internal Port Enter an internal port number that the PCP server maps to, from the external port.

  • Page 347: What Nat Does

    Chapter 13 Network Address Translation (NAT) host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host in a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side.

  • Page 348: Nat Application

    Chapter 13 Network Address Translation (NAT) Figure 181 How NAT Works 13.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the Zyxel Device can communicate with three distinct WAN networks. Figure 182 NAT Application With IP Alias AX/DX/EX/PX Series User’s Guide...
  • Page 349 Chapter 13 Network Address Translation (NAT) Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT.

  • Page 350: Dns

    H A P T E R 14.1 DNS Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.

  • Page 351: What You Need To Know

    Chapter 14 DNS 14.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.

  • Page 352: Add Or Edit Dns Entry

    Chapter 14 DNS 14.2.1 Add or Edit DNS Entry You can manually add or edit the Zyxel Device’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
  • Page 353 Chapter 14 DNS Figure 186 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 114 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box.
  • Page 354 Chapter 14 DNS Table 114 Network Setting > DNS > Dynamic DNS (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving. Apply Click Apply to save your changes. AX/DX/EX/PX Series User’s Guide...

  • Page 355: Igmp/Mld

    H A P T E R IGMP/MLD 15.1 IGMP/MLD Overview Multicast delivers IP packets to a group of hosts on the network defined by multicast groups. Membership to these multicast groups are established using IGMP/MLD. Use the IGMP/MLD screen to configure IGMP/MLD group settings. 15.1.1 What You Need To Know Multicast and IGMP Multicast on page 236...
  • Page 356 Chapter 15 IGMP/MLD Note: Some models might only support IGMP/MLD Default Version configuration. Figure 187 Network Setting > IGMP/MLD The following table describes the labels in this screen. Table 115 Network Setting > IGMP/MLD LABEL DESCRIPTION IGMP/MLD Configuration Default Version Enter the version of IGMP (1~3) and MLD (1~2) that you want the Zyxel Device to use on the WAN.
  • Page 357 Chapter 15 IGMP/MLD Table 115 Network Setting > IGMP/MLD (continued) LABEL DESCRIPTION Query Interval Enter the number of seconds the Zyxel Device sends a query message to hosts to get the group membership information. Query Response Enter the maximum number of seconds the Zyxel Device can wait for receiving a General Query Interval message.

  • Page 358: Vlan Group

    H A P T E R VLAN Group 16.1 VLAN Group Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.

  • Page 359: Vlan Group Settings

    Chapter 16 VLAN Group 16.2 VLAN Group Settings This screen shows the VLAN groups created on the Zyxel Device. Click Network Setting > VLAN Group to open the following screen. Figure 189 Network Setting > VLAN Group The following table describes the fields in this screen. Table 116 Network Setting >...
  • Page 360 Chapter 16 VLAN Group Figure 190 Network Setting > VLAN Group > Add New VLAN Group/Edit The following table describes the fields in this screen. Table 117 Network Setting > VLAN Group > Add New VLAN Group/Edit LABEL DESCRIPTION VLAN ID Enter a unique ID number, from 1 to 4,094, to identify this VLAN group.

  • Page 361: Interface Grouping

    H A P T E R Interface Grouping 17.1 Interface Grouping Overview By default, all LAN and WAN interfaces on the Zyxel Device are in the same group and can communicate with each other. Create interface groups to have the Zyxel Device assign IP addresses in different domains to different groups.

  • Page 362: Interface Group Configuration

    Chapter 17 Interface Grouping You can use this screen to create new user-defined interface groups or modify existing ones. Interfaces that do not belong to any user-defined group always belong to the default group. Click Network Setting > Interface Grouping to open the following screen. Figure 192 Network Setting >...
  • Page 363 Chapter 17 Interface Grouping Figure 193 Network Setting > Interface Grouping > Add New Interface Group (for DSL routers) AX/DX/EX/PX Series User’s Guide...
  • Page 364 Chapter 17 Interface Grouping Figure 194 Network Setting > Interface Grouping > Add New Interface Group (for Ethernet routers) AX/DX/EX/PX Series User’s Guide...
  • Page 365 Chapter 17 Interface Grouping Figure 195 Network Setting > Interface Grouping > Add New Interface Group (for AON and PON routers) The following table describes the fields in this screen. Table 119 Network Setting > Interface Grouping > Add New Interface Group/Edit LABEL DESCRIPTION Group Name...

  • Page 366: Interface Grouping Criteria

    Chapter 17 Interface Grouping Table 119 Network Setting > Interface Grouping > Add New Interface Group/Edit (continued) LABEL DESCRIPTION Automatically Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware.
  • Page 367 Chapter 17 Interface Grouping The following table describes the fields in this screen. Table 120 Network Setting > Interface Grouping > Interface Group Configuration: Add LABEL DESCRIPTION Source MAC Enter the source MAC address of the packet. Address APAS MAC Filter Select this option and enter the MAC address of the matched LAN host.

  • Page 368: Usb Service

    H A P T E R USB Service 18.1 USB Service Overview You can share files on a USB memory stick or hard drive connected to your Zyxel Device with users on your network. The following figure is an overview of the Zyxel Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Zyxel Device.

  • Page 369: Before You Begin

    Chapter 18 USB Service Shares When settings are set to default, each USB device connected to the Zyxel Device is given a folder, called a “share”. If a USB hard drive connected to the Zyxel Device has more than one partition, then each partition will be allocated a share.
  • Page 370 Chapter 18 USB Service Figure 198 Network Setting > USB Service Note: The Share Directory List is only visible when you connect a USB device. Each field is described in the following table. Table 121 Network Setting > USB Service LABEL DESCRIPTION Information...

  • Page 371: Add New Share

    Chapter 18 USB Service Table 121 Network Setting > USB Service (continued) LABEL DESCRIPTION Share Name This field displays the name of the file you shared. Share Path This field displays the location in the USB of the file you shared. Share This field displays a description of the file you shared.

  • Page 372: Add New User Screen

    Chapter 18 USB Service The following table describes the labels in this menu. Table 122 Network Setting > USB Service > Add New Share LABEL DESCRIPTION Volume Select the volume in the USB storage device that you want to add as a share in the Zyxel Device.
  • Page 373 Chapter 18 USB Service To change your Zyxel Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 200 Network Setting > USB Service > Media Server The following table describes the labels in this menu. Table 123 Network Setting >...

  • Page 374: Firewall

    H A P T E R Firewall 19.1 Firewall Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall: •...

  • Page 375: Firewall

    Chapter 19 Firewall Denial-of-Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The Zyxel Device is pre-configured to automatically detect and thwart all known DoS attacks.

  • Page 376: What You Can Do In This Chapter

    Chapter 19 Firewall 19.2.1 What You Can Do in this Chapter • Use the General screen to configure the security level of the firewall on the Zyxel Device (Section 19.3 on page 376). • Use the Protocol screen to add or remove predefined Internet services and configure firewall rules (Section 19.4 on page 377).

  • Page 377: Protocol (Customized Services)

    Chapter 19 Firewall The following table describes the labels in this screen. Table 124 Security > Firewall > General LABEL DESCRIPTION IPv4 Enable firewall protection when using IPv4 (Internet Protocol version 4). Firewall IPv6 Enable firewall protection when using IPv6 (Internet Protocol version 6). Firewall High This setting blocks all traffic to and from the Internet.

  • Page 378: Add Customized Service

    Chapter 19 Firewall Table 125 Security > Firewall > Protocol (continued) LABEL DESCRIPTION Ports/Protocol Number This shows the port number or range and the IP protocol (TCP or UDP) that defines your customized service. Modify Click this to edit a customized service. 19.4.1 Add Customized Service Add a customized rule or edit an existing rule by specifying the protocol and the port numbers.

  • Page 379: Add New Acl Rule

    Chapter 19 Firewall Note: The ordering of your rules is very important as rules are applied in turn. Figure 205 Security > Firewall > Access Control The following table describes the labels in this screen. Table 127 Security > Firewall > Access Control LABEL DESCRIPTION Rules Storage Space...
  • Page 380 Chapter 19 Firewall Figure 206 Security > Firewall > Access Control > Add New ACL Rule The following table describes the labels in this screen. Table 128 Security > Firewall > Access Control > Add New ACL Rule LABEL DESCRIPTION Active Click this switch to enable this ACL rule.

  • Page 381: Dos

    Chapter 19 Firewall Table 128 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL DESCRIPTION MAC Address Enter the MAC addresses of the WiFi or wired LAN clients that are allowed access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.

  • Page 382: Firewall Technical Reference

    Chapter 19 Firewall Figure 207 Security > Firewall > DoS The following table describes the labels in this screen. Table 129 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass Blocking maximum thresholds.

  • Page 383: Guidelines For Security Enhancement With Your Firewall

    Chapter 19 Firewall • LAN to WAN These rules specify which computers on the LAN can access which computers or services on the WAN. By default, the Zyxel Device’s stateful packet inspection drops packets traveling in the following directions: • WAN to LAN These rules specify which computers on the WAN can access which computers or services on the LAN.

  • Page 384: Security Considerations

    Chapter 19 Firewall Protect against IP spoofing by making sure the firewall is active. Keep the firewall in a secured (locked) room. 19.7.3 Security Considerations Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the Zyxel Device and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them.

  • Page 385: Mac Filter

    H A P T E R MAC Filter 20.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired connections. Every Ethernet device has a unique MAC (Media Access Control) address.

  • Page 386: Add New Rule

    Chapter 20 MAC Filter The following table describes the labels in this screen. Table 130 Security > MAC Filter LABEL DESCRIPTION MAC Address Filter Select Enable to activate the MAC filter function. MAC Restrict Mode Select Allow to only permit the listed MAC addresses access to the Zyxel Device. Select Deny to permit anyone access to the Zyxel Device except the listed MAC addresses.
  • Page 387 Chapter 20 MAC Filter Table 131 Security > MAC Filter > Add New Rule (continued) LABEL DESCRIPTION Delete Click the Delete icon to delete an existing rule. Cancel Click Cancel to restore your previously saved settings. Apply Click Apply to save your changes. AX/DX/EX/PX Series User’s Guide...

  • Page 388: Home Security

    Chapter 21 Home Security Chapter 21 Home Security 21.1 Home Security Overview The Zyxel Device supports URL (Uniform Resource Locator) filtering that allows you to block user access to specific websites containing inappropriate or harmful content. Users on your network will not be able to enter the websites with URL domain names, keywords or full URLs you specify.
  • Page 389 Chapter 21 Home Security The following table describes the labels in this screen. Table 132 Security > Home Security LABEL DESCRIPTION Enter Website URL Enter the URL of a website or URL keyword to which the Zyxel Device blocks access. Click Block to add the website to the Block List.

  • Page 390: Parental Control

    H A P T E R Parental Control 22.1 Parental Control Overview Parental control allows you to limit the time a user can access the Internet and prevent users from viewing inappropriate content or participating in specified online activities. Your parental control screens may be different depending on the model you’re using. Some Zyxel Devices support scheduling, some support scheduling and URL filtering.

  • Page 391: Add Or Edit A Parental Control Profile

    Chapter 22 Parental Control The following table describes the fields in this screen. Table 133 Security > Parental Control LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. Scheduled This screen shows all the created profiles. Profile Add more Click this button to create a new profile.

  • Page 392: Define A Schedule

    Chapter 22 Parental Control 22.2.2 Define a Schedule This screen allow you to define time periods and days during which Internet access is blocked on the profile devices. Finish the settings in the Select Device step and click Next to access this screen. Figure 213 Parental Control >...

  • Page 393: Parental Control Schedule And Url Filter

    Chapter 22 Parental Control Figure 214 Parental Control > Scheduled Profile The following table describes the fields in this screen. Table 136 Parental Control > Scheduled Profile LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. When the switch goes to the right ( the function is enabled.
  • Page 394 Chapter 22 Parental Control Figure 215 Security > Parental Control The following table describes the fields in this screen. Table 137 Security > Parental Control LABEL DESCRIPTION General Parental Control Select Enable to activate parental control on the Zyxel Device. Parental Control Profile (PCP) Add new PCP Click this if you want to configure a new Parental Control Profile (PCP).

  • Page 395: Add Or Edit A Parental Control Profile

    Chapter 22 Parental Control 22.3.1 Add or Edit a Parental Control Profile Click Add new PCP in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites.
  • Page 396 Chapter 22 Parental Control Figure 217 Security > Parental Control > Add or Edit PCP (Network Service & Site/URL Keyword) The following table describes the fields in this screen. Table 138 Security > Parental Control >Add or Edit PCP LABEL DESCRIPTION General Active...
  • Page 397 Chapter 22 Parental Control Table 138 Security > Parental Control >Add or Edit PCP (continued) LABEL DESCRIPTION Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. Site/URL Keyword Block or Allow If you select Block the Web URLs, the Zyxel Device prohibits the users from viewing the Web sites...
  • Page 398 Chapter 22 Parental Control Table 139 Security > Parental Control > Add or Edit PCP > Add New Service (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving any changes. Click OK to save your changes. Add Site/URL Keyword Click Add in the Site/URL Keyword section of the Edit or Add new PCP screen to open the following screen.

  • Page 399: Scheduler Rule

    H A P T E R Scheduler Rule 23.1 Scheduler Rule Overview A Scheduler Rule allows you to define time periods and days during which the Zyxel Device allows certain actions. 23.2 Scheduler Rule Settings Use this screen to view, add, or edit time schedule rules. A scheduler rule is a reusable object that is applied to other features, such as Firewall Access Control.

  • Page 400: Add Or Edit A Schedule Rule

    Chapter 23 Scheduler Rule 23.2.1 Add or Edit a Schedule Rule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. Figure 221 Security >...

  • Page 401: Certificates

    H A P T E R Certificates 24.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.
  • Page 402 Chapter 24 Certificates Figure 222 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 143 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is Select the check box and enter the private key into the text box to store it on the Zyxel Device.

  • Page 403: Create Certificate Request

    Chapter 24 Certificates 24.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Zyxel Device generate a certification request. To create a certificate signing request, you need to enter a common name, organization name, state or province name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate.

  • Page 404: View Certificate Request

    Chapter 24 Certificates 24.3.2 View Certificate Request Use this screen to view in-depth information about the certificate request. The Certificate is used to verify the authenticity of the certification authority. The Private Key serves as your digital signature for authentication and must be safely stored. The Signing Request contains the certificate signing request value that you will copy upon submitting the certificate request to the CA (certificate authority).

  • Page 405: Trusted Ca

    Chapter 24 Certificates The following table describes the fields in this screen. Table 145 Security > Certificates > Local Certificates: View Certificates LABEL DESCRIPTION Name This field displays the identifying name of this certificate. Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate.

  • Page 406: Import Trusted Ca Certificate

    Chapter 24 Certificates The following table describes the labels in this screen. Table 146 Security > Certificates > Trusted CA LABEL DESCRIPTION Import Certificate Click this to open a screen where you can save the certificate of a certification authority that you trust to the Zyxel Device.

  • Page 407: View Trusted Ca Certificate

    Chapter 24 Certificates The following table describes the labels in this screen. Table 147 Security > Certificates > Trusted CA > Import Certificate LABEL DESCRIPTION Certificate File Enter the location of the file you want to upload in this field or click Choose File/Browse to find it. Path Choose File/ Click this to find the certificate file you want to upload.

  • Page 408: Certificates Technical Reference

    Chapter 24 Certificates The following table describes the labels in this screen. Table 148 Security > Certificates > Trusted CA > View Certificate LABEL DESCRIPTION Name This field displays the identifying name of this certificate. This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format.

  • Page 409: Verify A Certificate

    Chapter 24 Certificates Advantages of Certificates Certificates offer the following benefits. • The Zyxel Device only has to store the certificates of the certification authorities that you decide to trust, no matter how many devices you need to authenticate. • Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys.
  • Page 410 Chapter 24 Certificates Figure 229 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary based on your situation. Possible examples would be over the telephone or through an HTTPS connection. AX/DX/EX/PX Series User’s Guide...

  • Page 411: Voice

    H A P T E R Voice 25.1 Voice Overview You can make calls over the Internet using VoIP technology. For this, you first need to set up a SIP account with a SIP service provider. Use this chapter to: •...

  • Page 412: Before You Begin

    Chapter 25 Voice SIP stands for Session Initiation Protocol. SIP is a signaling standard that lets one network device (like a computer or the Zyxel Device) send messages to another. In VoIP, these messages are about phone calls over the network. For example, when you dial a number on your Zyxel Device, it sends a SIP message over the network asking the other device (the number you dialed) to take part in the call.

  • Page 413: Add Or Edit Sip Account

    Chapter 25 Voice Figure 230 VoIP > SIP > SIP Account The following table describes the labels in this screen. Table 149 VoIP > SIP > SIP Account LABEL DESCRIPTION Add New Account Click this to configure a SIP account. This is the index number of the entry.
  • Page 414 Chapter 25 Voice Figure 231 VoIP > SIP > SIP Account > Add Account or Edit AX/DX/EX/PX Series User’s Guide...
  • Page 415 Chapter 25 Voice Figure 232 VoIP > SIP > SIP Account > Add Account or Edit (Call Features) AX/DX/EX/PX Series User’s Guide...
  • Page 416 Chapter 25 Voice VoIPThe following table describes the labels in this screen. Table 150 VoIP > SIP > SIP Account > SIP Account Entry Edit LABEL DESCRIPTION SIP Account Selection SIP Account Selection This field displays ChangeMe if you are creating a new SIP account or the SIP account you are modifying.
  • Page 417 Chapter 25 Voice Table 150 VoIP > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Listening Volume Control Select the loudness that the Zyxel Device uses for speech that it receives from the peer device. Choices are Minimum, Middle, and Maximum. Enable G.

  • Page 418: Sip Service Provider

    Chapter 25 Voice Table 150 VoIP > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Hot Line / Warm Line Enter the number of the hot line or warm line that you want the Zyxel Device to dial. Number Warm Line Timer Enter a number of seconds that the Zyxel Device waits before dialing the warm line...

  • Page 419: Provider Entry Add/Edit

    Chapter 25 Voice The following table describes the labels in this screen. Table 151 VoIP > SIP > SIP Service Provider LABEL DESCRIPTION Add New Provider Click this button to add a new SIP service provider. This is the index number of the entry. SIP Service Provider Name This shows the name of the SIP service provider.
  • Page 420 Chapter 25 Voice Figure 234 VoIP > SIP > SIP Service Provider: Add New Provider or Edit AX/DX/EX/PX Series User’s Guide...
  • Page 421 Chapter 25 Voice The following table describes the labels in this screen. Table 152 VoIP > SIP > SIP Service Provider > Add New Provider or Edit LABEL DESCRIPTION SIP Service Provider Selection Service Provider Selection This field displays ADD_NEW if you are creating a new SIP service provider profile or the SIP service provider name you are modifying.
  • Page 422 Chapter 25 Voice Table 152 VoIP > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Bound Interface Name If you select AnyWAN, the Zyxel Device automatically activates the VoIP service when any WAN connection is up. If you select MultiWAN, you also need to select the pre-configured WAN connections.

  • Page 423: Sip Tls Common

    Chapter 25 Voice Table 152 VoIP > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION SIP Register Expiration Enter the number of seconds your SIP account is registered with the SIP register server Duration before it is deleted.

  • Page 424: Phone

    Chapter 25 Voice Figure 235 VoIP > SIP > SIP TLS Common The following table describes the labels in this screen. Table 153 VoIP > SIP > SIP TLS Common LABEL DESCRIPTION TLS Local Port Port 5061 is typically used for SIP over TLS. Enter the Zyxel Device’s TLS local port number if your VoIP service provider gave you one.

  • Page 425: Phone Device Edit

    Chapter 25 Voice Figure 236 VoIP > Phone > Phone Device Each field is described in the following table. Table 154 VoIP > Phone > Phone Device LABEL DESCRIPTION This displays the index number of the phone device. Phone ID This field displays the name of a phone port on the Zyxel Device.

  • Page 426: Phone Region

    Chapter 25 Voice Figure 237 VoIP > Phone > Phone Device > Edit Each field is described in the following table. Table 155 VoIP > Phone > Phone Device > Edit LABEL DESCRIPTION SIP Account to Select the SIP account you want to use when making outgoing calls with the analog Make Outgoing phone connected to this phone port.

  • Page 427: Call Rule

    Chapter 25 Voice To access this screen, click VoIP > Phone > Region. Figure 238 VoIP > Phone > Region The following table describes the labels in this screen. Table 156 VoIP > Phone > Region LABEL DESCRIPTION Region Setting Select the place in which the Zyxel Device is located.

  • Page 428: Call History

    Chapter 25 Voice Figure 239 VoIP > Call Rule The following table describes the labels in this screen. Table 157 VoIP > Call Rule LABEL DESCRIPTION Keys This field displays the speed-dial number you should dial to use this entry. Number Enter the SIP number you want the Zyxel Device to call when you dial the speed-dial number.

  • Page 429: Technical Reference

    Chapter 25 Voice Figure 240 VoIP > Call History Each field is described in the following table. Table 158 VoIP > Call History LABEL DESCRIPTION Clear Click this button to remove all entries from the call history list. Refresh Click this button to renew the call history list. Summary Date This is the date when the calls were made.
  • Page 430 Chapter 25 Voice VoIP VoIP is the sending of voice signals over Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network. You can also use servers to run telephone service applications like PBX services and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service.
  • Page 431 Chapter 25 Voice A SIP registration has a limited lifespan. The User Agent Client must renew its registration within this lifespan. If it does not do so, the registration data will be deleted from the SIP registrar's database and the connection broken. The Zyxel Device attempts to register all enabled subscriber ports when it is switched on.
  • Page 432 Chapter 25 Voice Figure 242 SIP Proxy Server SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server.
  • Page 433 Chapter 25 Voice Figure 243 SIP Redirect Server SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your user name and password when you register. When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer.
  • Page 434 Chapter 25 Voice A sends a SIP INVITE request to B. This message is an invitation for B to participate in a SIP telephone call. B sends a response indicating that the telephone is ringing. B sends an OK response after the call is answered. A then sends an ACK message to acknowledge that B has answered the call.
  • Page 435 Chapter 25 Voice The following table shows the SIP call progression. Table 160 SIP Call Progression UA 1 PROXY 1 PROXY 2 UA 2 Invite Invite 100 Trying Invite 100 Trying 180 Ringing 180 Ringing 180 Ringing 200 OK 200 OK 200 OK 200 OK User Agent 1 sends a SIP INVITE request to Proxy 1.
  • Page 436 Chapter 25 Voice • G.726 is an Adaptive Differential PCM (ADPCM) waveform codec that uses a lower bitrate than standard PCM conversion. ADPCM converts analog audio into digital signals based on the difference between each audio sample and a prediction based on previous samples. The more similar the audio sample is to the prediction, the less space needed to describe it.

  • Page 437: Quality Of Service (Qos)

    Chapter 25 Voice Pick up the phone and press “****” on your phone’s keypad and wait for the message that says you are in the configuration menu. Press a number from 1101~1105 on your phone followed by the “#” key. Play your desired music or voice recording into the receiver’s mouthpiece.

  • Page 438: Phone Services Overview

    Chapter 25 Voice This allows the intermediary DiffServ-compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state information for every flow. In addition, applications do not have to request a particular service or give advanced notice of where the traffic is going.
  • Page 439 Chapter 25 Voice Note: To take full advantage of the supplementary phone services available through the Zyxel Device's phone ports, you may need to subscribe to the services from your VoIP service provider. 25.10.2.1 The Flash Key Flashing means to press the hook for a short period of time (a few hundred milliseconds) before releasing it.
  • Page 440 Chapter 25 Voice European Call Waiting This allows you to place a call on hold while you answer another incoming call on the same telephone (directory) number. If there is a second call to a telephone number, you will hear a call waiting tone. Take one of the following actions.
  • Page 441 Chapter 25 Voice After pressing the flash key, if you do not issue the sub-command before the default sub-command timeout (2 seconds) expires or issue an invalid sub-command, the current operation will be aborted. Table 163 USA Flash Key Commands COMMAND SUB-COMMAND DESCRIPTION...
  • Page 442 Chapter 25 Voice If you want to separate the activated three-way conference into two individual connections (with party A on-line and party B on hold), press the flash key. If you want to go back to the three-way conversation, press the flash key again. If you want to separate the activated three-way conference into two individual connections again, press the flash key.

  • Page 443: Log

    H A P T E R 26.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server.

  • Page 444: System Log

    Chapter 26 Log Table 165 Syslog Severity Levels (continued) CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 26.2 System Log Use the System Log screen to see the system logs.

  • Page 445: Security Log

    Chapter 26 Log 26.3 Security Log Use the Security Log screen to see the security-related logs for the categories that you select. You can filter the entries by selecting a severity level and/or category. Click System Monitor > Log > Security Log to open the following screen.

  • Page 446: Traffic Status

    H A P T E R Traffic Status 27.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces and NAT. 27.1.1 What You Can Do in this Chapter •...
  • Page 447 Chapter 27 Traffic Status Figure 248 System Monitor > Traffic Status > WAN The following table describes the fields in this screen. Table 168 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Connected This shows the name of the WAN interface that is currently connected.

  • Page 448: Lan Status

    Chapter 27 Traffic Status Table 168 System Monitor > Traffic Status > WAN (continued) LABEL DESCRIPTION Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. 27.3 LAN Status Click System Monitor >...

  • Page 449: Nat Status

    Chapter 27 Traffic Status 27.4 NAT Status Click System Monitor > Traffic Status > NAT to open the following screen. This screen lists the devices that have received an IP address from the Zyxel Device LAN or WLAN interfaces and have ever established a session with the Zyxel Device.

  • Page 450: Voip Status

    H A P T E R VoIP Status 28.1 VoIP Status Screen Click System Monitor > VoIP Status to open the following screen. You can view the Voice over IP (VoIP) registration, current call status and phone numbers in this screen. Figure 251 System Monitor >...
  • Page 451 Chapter 28 VoIP Status Table 171 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Registration This field displays the current registration status of the SIP account. Registered - The SIP account is activated and has been registered with a SIP server. You can use it to make a VoIP call.
  • Page 452 Chapter 28 VoIP Status Table 171 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Call Type This field displays the call direction type of the current VoIP call. Outgoing Call – It is a SIP VoIP call made by local phone ports, and this SIP account is able to issue a (SIP-based) call setup to the SIP account of remote peers for a VoIP call establishment.

  • Page 453: Arp Table

    H A P T E R ARP Table 29.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network.
  • Page 454 Chapter 29 ARP Table Figure 252 System Monitor > ARP Table The following table describes the labels in this screen. Table 172 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4 / IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to the Zyxel Device. Address MAC Address This is the MAC address of the connected device with the listed IP address.

  • Page 455: Routing Table

    H A P T E R Routing Table 30.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 30.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is ‘255.255.255.255’ for a host destination and ‘0.0.0.0’...
  • Page 456 Chapter 30 Routing Table Figure 253 System Monitor > Routing Table The following table describes the labels in this screen. Table 173 System Monitor > Routing Table LABEL DESCRIPTION IPv4 / IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic.
  • Page 457 Chapter 30 Routing Table Table 173 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U–Up: The route is up. !–Reject: The route is blocked and will force a route lookup to fail. G–Gateway: The route uses a gateway to forward traffic. H–Host: The target of the route is a host.

  • Page 458: Multicast Status

    H A P T E R Multicast Status 31.1 Multicast Status Overview Use the Multicast Status screens to look at IGMP/MLD group status and traffic statistics. 31.2 The IGMP Status Screen Use this screen to look at the current list of multicast groups the Zyxel Device manages through IGMP. Configure IGMP in Network Setting >...

  • Page 459: The Mld Status Screen

    Chapter 31 Multicast Status 31.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the Zyxel Device manages through MLD. Configure MLD in Network Setting > IGMP/MLD. To open this screen, click System Monitor > Multicast Status >...

  • Page 460: Xdsl Statistics

    H A P T E R xDSL Statistics 32.1 xDSL Statistics Overview You can view information about DSL statistics, such as port details, in this screen. 32.2 xDSL Statistics Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen.
  • Page 461 Chapter 32 xDSL Statistics The following table describes the labels in this screen. Table 176 System Monitor > xDSL Statistics LABEL DESCRIPTION Monitor Type Select the type of DSL line for refreshing statistics. Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display.
  • Page 462 Chapter 32 xDSL Statistics Table 176 System Monitor > xDSL Statistics (continued) LABEL DESCRIPTION This is the number of Far End Corrected blocks. This is the number of Cyclic Redundancy Checks. This is the number of Errored Seconds meaning the number of seconds containing at least one error block or at least one defect.

  • Page 463: Wlan Station Status

    H A P T E R WLAN Station Status 33.1 WLAN Station Status Overview Click System Monitor > WLAN Station Status to open the following screen. Use this screen to view information and status of the wireless stations (WiFi clients) that are currently associated with the Zyxel Device.
  • Page 464 Chapter 33 WLAN Station Status Table 177 System Monitor > WLAN Station Status (continued) LABEL DESCRIPTION The Signal-to-Noise Ratio (SNR) is the ratio between the received signal power and the received noise power. The greater the number, the better the quality of WiFi. The normal range is 15 to 40.

  • Page 465: Cellular Statistics

    H A P T E R Cellular Statistics 34.1 Cellular Statistics Overview Use the Cellular Statistics screens to look at cellular Internet connection status. By default, a cellular WAN connection is used as a backup for the wired DSL or Ethernet WAN connections. 34.2 Cellular Statistics Settings To open this screen, click System Monitor >...
  • Page 466 Chapter 34 Cellular Statistics The following table describes the labels in this screen. Table 178 System Monitor > Cellular Statistics LABEL DESCRIPTION Monitor Refresh Interval Select how often you want the Zyxel Device to update this screen. Select None to stop refreshing.

  • Page 467: System

    H A P T E R System 35.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 35.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network.

  • Page 468: User Account

    H A P T E R User Account 36.1 User Account Overview In the User Account screen, you can view the settings of the “admin” and other user accounts that you use to log into the Zyxel Device to manage it. 36.2 User Account Click Maintenance >...

  • Page 469: User Account Add Or Edit

    Chapter 36 User Account Table 180 Maintenance > User Account (continued) LABEL DESCRIPTION Group This field displays whether this user has Administrator or User privileges. Remote This field displays whether this user can access the Zyxel Device with HTTP, Telnet or SSH through Privilege the WAN, LAN or LAN/WAN.
  • Page 470 Chapter 36 User Account Figure 262 Maintenance > User Account: Edit The following table describes the labels in this screen. Table 181 Maintenance > User Account > User Account Add/Edit LABEL DESCRIPTION Active Click to enable (switch turns blue) or disable (switch turns gray) to activate or deactivate the user account.
  • Page 471 Chapter 36 User Account Table 181 Maintenance > User Account > User Account Add/Edit (continued) LABEL DESCRIPTION Group Specify whether this user will have Administrator or User privileges. An Administrator account can access all Web Configurator menus. A User account can only access Monitor and Maintenance menus.

  • Page 472: Remote Management

    H A P T E R Remote Management 37.1 Remote Management Overview Remote management controls through which interfaces, which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 37.1.1 What You Can Do in this Chapter •...

  • Page 473: Trust Domain

    Chapter 37 Remote Management The following table describes the fields in this screen. Table 182 Maintenance > Remote Management > MGMT Services LABEL DESCRIPTION Service Control WAN Interface Select Any_WAN to have the Zyxel Device automatically activate the remote management used for services service when any WAN connection is up.

  • Page 474: Add Trust Domain

    Chapter 37 Remote Management Figure 264 Maintenance > Remote Management > Trust Domain The following table describes the fields in this screen. Table 183 Maintenance > Remote Management > Trust Domain LABEL DESCRIPTION Add Trust Click this to add a trusted host IP address. Domain IP Address This field shows a trusted host IP address.
  • Page 475 Chapter 37 Remote Management AX/DX/EX/PX Series User’s Guide...

  • Page 476: Snmp

    H A P T E R SNMP 38.1 SNMP Overview This chapter explains how to configure the SNMP settings on the Zyxel Device. Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network.

  • Page 477: Snmp Settings

    Chapter 38 SNMP • Get – Allows the manager to retrieve an object variable from the agent. • GetNext – Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations.
  • Page 478 Chapter 38 SNMP Table 185 Maintenance > SNMP (continued) LABEL DESCRIPTION System Contact Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the Zyxel Device. Cancel Click this to restore your previously saved settings.

  • Page 479: Time Settings

    H A P T E R Time Settings 39.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system date and time. 39.2 Time For effective scheduling and logging, the Zyxel Device system time must be accurate. Use this screen to configure the Zyxel Device’s time based on your local time zone.
  • Page 480 Chapter 39 Time Settings Figure 268 Maintenance > Time The following table describes the fields in this screen. Table 186 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device.
  • Page 481 Chapter 39 Time Settings Table 186 Maintenance > Time (continued) LABEL DESCRIPTION First – Fifth Time Select an NTP time server from the drop-down list box. Server Address Otherwise, select Other and enter the IP address or URL (up to 29 printable characters in length) of your time server.

  • Page 482: Email Notification

    H A P T E R Email Notification 40.1 Email Notification Overview A mail server is an application or a computer that can receive, forward and deliver email messages. To have the Zyxel Device send reports, logs or notifications through email, you must specify an email server and the email addresses of the sender and receiver.

  • Page 483: E-Mail Notification Edit

    Chapter 40 Email Notification The following table describes the labels in this screen. Table 187 Maintenance > E-mail Notification LABEL DESCRIPTION Add New e-mail Click this button to create a new entry (up to 32 can be created). Mail Server This displays the server name or the IP address of the mail server.
  • Page 484 Chapter 40 Email Notification Table 188 Maintenance > E-mail Notification > Add (continued) LABEL DESCRIPTION Authentication Enter the password associated with the user name above. Password Account e-mail Enter the email address that you want to be in the from or sender line of the email notification Address that the Zyxel Device sends.

  • Page 485: Log Setting

    H A P T E R Log Setting 41.1 Log Setting Overview You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. 41.2 Log Setting Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records.
  • Page 486 Chapter 41 Log Setting Figure 271 Maintenance > Log Setting AX/DX/EX/PX Series User’s Guide...
  • Page 487 Chapter 41 Log Setting The following table describes the fields in this screen. Table 189 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Slide the switch to the right to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server. Select Local File to have the Zyxel Device save the log file on the Zyxel Device itself.

  • Page 488: Example Email Log

    Chapter 41 Log Setting 41.2.1 Example Email Log An ‘End of Log’ message displays for each mail in which a complete log has been sent. The following is an example of a log sent by email. • You may edit the subject title. •...

  • Page 489: Firmware Upgrade

    H A P T E R Firmware Upgrade 42.1 Firmware Upgrade Overview This chapter explains how to upload new firmware to your Zyxel Device if you get new firmware releases from your service provider. 42.2 Firmware Upgrade This screen lets you upload new firmware to your Zyxel Device. Get the latest firmware from your service provider.
  • Page 490 Chapter 42 Firmware Upgrade The following table describes the labels in this screen. Table 190 Maintenance > Firmware Upgrade LABEL DESCRIPTION Upgrade Firmware Restore Select this to reset all your configurations, including Mesh WiFi settings, to the factory defaults Default after firmware upgrade.
  • Page 491 Chapter 42 Firmware Upgrade Figure 274 Firmware Uploading The Zyxel Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 275 Network Temporarily Disconnected After 2 minutes, log in again and check your new firmware version in the Connection Status screen. If the upload was not successful, an error screen will appear.

  • Page 492: Backup/Restore

    H A P T E R Backup/Restore 43.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore Zyxel Device’s previous configurations. 43.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
  • Page 493 Chapter 43 Backup/Restore Figure 277 Maintenance > Backup/Restore Backup Configuration Backup Configuration allows you to back up (save) the Zyxel Device’s current configuration to a file on your computer. Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes.
  • Page 494 Chapter 43 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Table 191 Maintenance > Backup/Restore: Restore Configuration LABEL DESCRIPTION File Path Enter in the location of the file you want to upload in this field or click Choose File / Browse to find it. Choose File Click this to find the file you want to upload.
  • Page 495 Chapter 43 Backup/Restore Figure 280 Reset Warning Message Figure 281 Reset In Progress You can also press the RESET button on the panel to reset the factory defaults of your Zyxel Device. Reset All Settings Except Mesh Click the Reset All Except Mesh button to clear all user-entered configuration information and return the Zyxel Device to its factory defaults except for Mesh WiFi settings.

  • Page 496: Reboot

    Chapter 43 Backup/Restore Figure 283 Reset In Process 43.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example. This does not affect the Zyxel Device's configuration.

  • Page 497: Diagnostic

    H A P T E R Diagnostic 44.1 Diagnostic Overview The Diagnostic screen displays information to help you identify problems with the Zyxel Device. The route between an Ethernet switch and one of its Customer-Premises Equipment (CPE) may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.

  • Page 498: Diagnostic

    Chapter 44 Diagnostic 44.3 Diagnostic Use this screen to ping, traceroute, nslookup, or speed test for troubleshooting. Ping and traceroute are used to test whether a particular host is reachable. After entering an IP address and clicking one of the buttons to start a test, the results will be shown in the Ping/Traceroute Test area.

  • Page 499: Ag (Cfm)

    Chapter 44 Diagnostic 44.4 802.1ag (CFM) Click Maintenance > Diagnostic > 802.1ag to open the following screen. Use this screen to configure and perform Connectivity Fault Management (CFM) actions as defined by the IEEE 802.1ag standard. CFM protocols include Continuity Check Protocol (CCP), Link Trace (LT), and Loopback (LB). Figure 286 Maintenance >...

  • Page 500: Ah (Oam)

    Chapter 44 Diagnostic Table 193 Maintenance > Diagnostic > 802.1ag (continued) LABEL DESCRIPTION Maintenance Select a level (0 – 7) under which you want to create an MA. Domain (MD) Level MD Name Enter a descriptive name for the MD (Maintenance Domain). This field only appears if the Y.1731 field is disabled.

  • Page 501: Oam Ping

    Chapter 44 Diagnostic Figure 287 Maintenance > Diagnostic > 802.3ah The following table describes the labels in this screen. Table 194 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION IEEE 802.3ah Ethernet OAM Click this switch to enable or disable the Ethernet OAM on the specified interface. When the switch goes to the right , the function is enabled.
  • Page 502 Chapter 44 Diagnostic B3 sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the DX5301-B2/B3. The test result then displays in the text box. ATM sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: •...
  • Page 503 Chapter 44 Diagnostic Figure 289 Maintenance > Diagnostic > OAM Ping The following table describes the labels in this screen. Table 195 Maintenance > Diagnostics > OAM Ping LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test. F4 segment Press this to perform an OAM F4 segment loopback test.

  • Page 504: Troubleshooting And Appendices

    Troubleshooting and Appendices Appendices contain general information. Some information may not apply to your Zyxel Device.

  • Page 505: Troubleshooting

    H A P T E R Troubleshooting 45.1 Troubleshooting Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Problems • Device Access Problems • Internet Problems •...

  • Page 506: Device Access Problems

    Chapter 45 Troubleshooting Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Zyxel Device off and on. If the problem continues, contact the vendor. 45.3 Device Access Problems I do not know the IP address of the Zyxel Device. The default IP address is 192.168.1.1 If you changed the IP address, you might be able to find the IP address of the Zyxel Device by looking up the IP address of your computer’s default gateway.
  • Page 507 Chapter 45 Troubleshooting Reset the Zyxel Device to its factory default, and try to access the Zyxel Device with the default IP address. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions •...
  • Page 508 Chapter 45 Troubleshooting Step 1 Register for a DDNS Account on www.dyndns.org Open a browser and enter http://www.dyndns.org. Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. Log into www.dyndns.org using your account. Add a new DDNS host name.

  • Page 509: Internet Problems

    Chapter 45 Troubleshooting The SIM card cannot be detected. Disconnect the Zyxel Device from the power supply. Remove the SIM card from its slot. Clean the SIM card slot of any loose debris using compressed air. Clean the gold connectors on the SIM card with a clean lint-free cloth. Insert the SIM card into its slot and connect the Zyxel Device to the power supply to restart it.
  • Page 510 Chapter 45 Troubleshooting Make sure you configured a proper Ethernet WAN interface (Network Setting > Broadband screen) with the Internet account information provided by your ISP and that it is enabled. Check that the WAN interface you are connected to is in the same interface group as the Ethernet connection (Network Setting >...

  • Page 511: Wifi Problems

    Chapter 45 Troubleshooting There might be a lot of traffic on the network. If the Zyxel Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. Check the signal strength. Look at the LEDs, and check the LED section for more information. If the signal strength is low, try moving the Zyxel Device closer to the ISP’s base station if possible, and look around to see if there are any devices that might be interfering with the wireless network (such as microwaves, other wireless networks).

  • Page 512: Usb Problems

    Chapter 45 Troubleshooting • Move your wireless device closer to the AP if the signal strength is low. • Reduce wireless interference that may be caused by other WiFi networks or surrounding wireless electronics such as cordless phones. • Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and the WiFi client.

  • Page 513: Upnp Problems

    Chapter 45 Troubleshooting Make sure your SIP account is registered and your SIP service plan is valid. Use the System Monitor > VoIP Status screen to check the account Registration status. Make sure your SIP server settings (in the VoIP > SIP > SIP Service Provider and the VoIP > SIP > SIP Account screens) use the correct information from your SIP service provider.

  • Page 514: Appendix A Customer Support

    • Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com Asia China • Zyxel Communications Corporation–China Office •...
  • Page 515 • https://www.zyxel.com/global/en Philippines • Zyxel Communications Corp. • https://www.zyxel.com/global/en Singapore • Zyxel Communications Corp. • https://www.zyxel.com/global/en Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com/tw/zh Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th Vietnam • Zyxel Communications Corporation–Vietnam Office • https://www.zyxel.com/vn/vi...
  • Page 516 Appendix A Customer Support • https://www.zyxel.com/bg/bg Czech Republic • Zyxel Communications Czech s.r.o. • https://www.zyxel.com/cz/cs Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da Finland • Zyxel Communications • https://www.zyxel.com/fi/fi France • Zyxel France • https://www.zyxel.com/fr/fr Germany • Zyxel Deutschland GmbH. • https://www.zyxel.com/de/de Hungary •...
  • Page 517 • Zyxel Communications A/S • https://www.zyxel.com/se/sv Switzerland • Studerus AG • https://www.zyxel.com/ch/de-ch • https://www.zyxel.com/fr/fr Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en-gb Ukraine • Zyxel Ukraine • https://www.zyxel.com/ua/uk-ua South America Argentina • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Brazil •...
  • Page 518 Ecuador • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co South America • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Middle East Israel • Zyxel Communications Corp. • https://il.zyxel.com North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en-us AX/DX/EX/PX Series User’s Guide...

  • Page 519: Appendix B Wireless Lans

    P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
  • Page 520 Appendix B Wireless LANs Figure 291 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).
  • Page 521 Appendix B Wireless LANs Figure 292 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a channel different from an adjacent AP (access point) to reduce interference.
  • Page 522 Appendix B Wireless LANs Figure 293 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
  • Page 523 Appendix B Wireless LANs If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. IEEE 802.11g Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard.
  • Page 524 Appendix B Wireless LANs • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the WiFi clients.
  • Page 525 Appendix B Wireless LANs In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged is also encrypted to protect the network from unauthorized access.
  • Page 526 Appendix B Wireless LANs PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication.
  • Page 527 Appendix B Wireless LANs gateway and WiFi client. As long as the passwords match, a WiFi client will be granted access to a WLAN. If the AP or the WiFi clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not.
  • Page 528 Appendix B Wireless LANs Key caching allows a WiFi client to store the PMK it derived through a successful authentication with an AP. The WiFi client uses the PMK when it tries to connect to the same AP and does not need to go with the authentication process again.
  • Page 529 Appendix B Wireless LANs WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. First enter identical passwords into the AP and all WiFi clients. The Pre-Shared Key (PSK) must consist of between 8 to 63 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces. The AP checks each WiFi client's password and allows it to join the network only if the password matches.
  • Page 530 Appendix B Wireless LANs Table 199 Wireless Security Relational Matrix (continued) AUTHENTICATION METHOD/ ENCRYPTION ENTER MANUAL KEY MANAGEMENT IEEE 802.1X METHOD PROTOCOL TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable Antenna Overview An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air.
  • Page 531 Appendix B Wireless LANs • Directional antennas concentrate the RF signal in a beam, like a flashlight does with the light from its bulb. The angle of the beam determines the width of the coverage pattern. Angles typically range from 20 degrees (very directional) to 120 degrees (less directional). Directional antennas are ideal for hallways and outdoor point-to-point applications.

  • Page 532: Appendix C Ipv6

    P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
  • Page 533 Appendix C IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
  • Page 534 Appendix C IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 – 10, A – F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
  • Page 535 Appendix C IPv6 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.
  • Page 536 Appendix C IPv6 receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache.
  • Page 537 Appendix C IPv6 Click the Search icon ( ) and then enter “cmd” in the search box.. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix...

  • Page 538: Appendix D Services

    P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
  • Page 539 Appendix D Services Table 205 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined The IPSEC AH (Authentication Header) tunneling protocol uses this service. 5190 AOL’s Internet Messenger service. AUTH Authentication protocol used by some servers. Border Gateway Protocol. BOOTP_CLIENT DHCP Client.
  • Page 540 Appendix D Services Table 205 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION 2049 Network File System - NFS is a client/server distributed file service that provides transparent file sharing for network environments. NNTP Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service.
  • Page 541 Appendix D Services Table 205 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TACACS Login Host Protocol used for (Terminal Access Controller Access Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks.

  • Page 542: Appendix E Legal Information

    P P E N D I X Legal Information Copyright Copyright © 2023 by Zyxel and/or its affiliates. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel and/or its affiliates.
  • Page 543 Appendix E Legal Information • 698.23 mW for the 5,470 to 5,725 MHz band • EX3500-T0 / EX3501-T0 • 97.72 mW for the 2,400 to 2,483.5 MHz band • 191.43 mW for the 5,150 to 5,350 MHz band • 916.22 mW for the 5,470 to 5,725 MHz band •...
  • Page 544 Appendix E Legal Information Italiano (Italian) Con la presente Zyxel dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 2014/53/UE. National Restrictions • This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy.
  • Page 545 Appendix E Legal Information List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria Liechtenstein Belgium Lithuania Bulgaria Luxembourg Croatia Malta Cyprus Netherlands Czech Republic Norway Denmark Poland Estonia Portugal Finland Romania France Serbia Germany Slovakia...
  • Page 546 Appendix E Legal Information Important Safety Instructions • Caution! The RJ-45 jacks are not used for telephone line connection. • Caution! Do not use this product near water, for example a wet basement or near a swimming pool. • Caution! Avoid using this product (other than a cordless type) during an electrical storm. There may be a remote risk of electric shock from lightning.
  • Page 547 Appendix E Legal Information • 本機限在不干擾合法電台與不被干擾保障條件下於室內使用。本產品使用時建議應距離人體 20 cm 以上。 • 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信；如造成干擾，應立即停用， 俟無干擾之虞，始得繼續使用。 • 無線資訊傳輸設備的製造廠商應確保頻率穩定性，如依製造廠商使用手冊上所述正常操作， 發射的信號應維持於操作頻帶中 • 使用無線產品時，應避免影響附近雷達系統之操作。 • 高增益指向性天線只得應用於固定式點對點系統。 以下訊息僅適用於產品屬於專業安裝並銷售至台灣地區 • 本器材須經專業工程人員安裝及設定，始得設置使用，且不得直接販售給⼀般消費者。 安全警告 - 為了您的安全，請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸 : – 任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 – 灰塵及污物 - 切勿接觸灰塵、污物、沙土、食物或其他不合適的材料。 • 雷雨天氣時，不要安裝或維修此設備。有遭受電擊的風險。...
  • Page 548 Appendix E Legal Information have indications of failure due to faulty workmanship and/or materials, Zyxel will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition.
  • Page 549 Index backup configuration Numbers backup configuration Backup/Restore screen 2.5G WiFi LED bandwidth capacity 5G WiFi LED cable type Basic Service Set, See BSS IPv6 Basic Service Set, see BSS blinking LEDs bottom panel buttons 54, 55, 57, 61, 62 Bridge mode 210, 220 access broadband...
  • Page 550 details restoring factory default static route file format connection status screen file path Connectivity Check Messages, see CCMs import 402, 406 contact information public and private keys copyright verification 327, 437 Certificate Authority CoS technologies See CA. Create Certificate Request screen certificate request creating certificates create...
  • Page 551 Domain Name Extended Service Set IDentification 242, 247 domain name system, see DNS Extended Service Set, See ESS thresholds DoS protection blocking enable DS field 327, 438 factory defaults DS, see differentiated services reset DSCP 327, 437 factory-default configuration reload counters Fast Leave port details...
  • Page 552 flash key Inside Local Address, see ILA flashing interface group fragmentation threshold Internet 254, 261, 522 no access 27, 332, 349 wizard setup unusable Internet access wizard setup Internet access application Ethernet WAN Internet Blocking G.168 Internet connection General wireless LAN screen add or edit 204, 214 Guide...
  • Page 553 IPv6 rapid deployment Log Setting screen iTunes server login password ITU-T Login screen no access logs 443, 446, 458, 465, 485 Loop Back Response, see LBR loopback key combinations keypad client list MAC address DHCP 250, 280 filter 249, 262 IP address MAC address MAC Authentication screen...
  • Page 554 multi-gigabit Pairwise Master Key (PMK) 527, 529 multimedia parental control schedule setup 391, 393 Multiple BSS, see MBSSID password multiplexing admin LLC-based lost VC-based user multiprotocol encapsulation Peak Cell Rate (PCR) Per-Hop Behavior, see PHB 327, 438 phone functions 346, 347 PHONE port 50, 54, 57 applications...
  • Page 555 Protocol (Customized Services) screen Protocol Entry Push Button Configuration, see PBC push button, WPS 309, 327, 437 marking setup tagging versus CoS Quality of Service, see QoS Quick Start Guide RADIUS message types messages shared secret key Real time Transport Protocol, see RTP Reboot screen reset RESET button...
  • Page 556 threshold 521, 522 RTS threshold 254, 261 security network wireless LAN Security Log Security Parameter Index, see SPI service access control Service Set 242, 247 services port forwarding Session Initiation Protocol, see SIP setup firewalls static route SFP+ transceiver silence suppression Simple Network Management Protocol, see SNMP Single Rate Three Color Marker, see srTCM account...
  • Page 557 Trap versions SNMP trap srTCM unusable SSID activation MBSSID static DHCP configuration Static DHCP screen static route 299, 308 configuration status 190, 195 wireless LAN status indicators subnet mask supplementary services Sustained Cell Rate (SCR) SYN attack syslog protocol severity levels syslog logging enable syslog server...
  • Page 558 unusable three-way conference 440, 441 thresholds data fragment 254, 261 RTS/CTS 254, 261 time TPID Trace Route test traffic shaping transmission speed cable type troubleshooting trTCM Trust Domain Trust Domain screen Trusted CA certificate view Trusted CA screen Two Rate Three Color Marker, see trTCM TWT (Target Wakeup Time) Type of Service, see ToS unicast...
  • Page 559 Cellular Backup USB port 50, 54, 55, 57 Vendor ID Virtual Circuit (VC) Virtual Local Area Network See VLAN VLAN Introduction VLAN ID VLAN tag voice activity detection voice coding VoIP Wake on LAN status Wide Area Network, see WAN WAN IP address warranty note...
  • Page 560 example example fragmentation threshold 254, 261 limitations MAC address filter 249, 262 preamble 255, 261 RTS/CTS threshold 254, 261 security SSID activation status 265, 267 example limitations push button wireless security Wireless tutorial wizard setup Internet WLAN interference security parameters WLAN button WMM screen 243, 526...
  • Page 561 example push button WPS button 50, 54, 55, 57, 59, 60 using WPS LED WPS screen WWAN package version check Zyxel Device managing AX/DX/EX/PX Series User’s Guide...

This manual is also suitable for:

Dx seriesEx seriesPx seriesAx7501-b0Ax7501-b1Dx3300-t0 ... Show all

Table of Contents

Save PDF