Intended Audience This manual is intended for home and small business network administrators who want to install and configure the ZyXEL Device. This guide assumes that the administrators who are familiar with basic network configuration. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get up and running right away.
Syntax Conventions • The NBG-510S may be referred to as the “ZyXEL Device”, the “device” or the “system” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 5
Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Server Telephone Broadband modem or router NBG-510S User’s Guide Computer Notebook computer...
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. • If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. Safety Warnings NBG-510S User’s Guide...
Page 7
Safety Warnings This product is recyclable. Dispose of it properly. NBG-510S User’s Guide...
Page 14
15.1.1 How Do I Know If I'm Using UPnP? ... 105 15.1.2 NAT Traversal ... 105 15.1.3 Cautions with UPnP ... 105 15.1.4 UPnP and ZyXEL ... 106 15.2 Configuring UPnP ... 106 15.3 Installing UPnP in Windows Example ... 106 15.3.1 Installing UPnP in Windows Me ...
Page 15
20.1 Configuring the Secure Remote Access Title ... 135 Chapter 21 Secure Remote Access User Info... 137 21.1 Overview ... 137 21.2 User Info Screen ... 137 21.2.1 Add/Edit User Info Screen ... 137 21.3 Copy User Views Screen ... 138 NBG-510S User’s Guide ...119 Table of Contents...
Page 17
26.1 Power, Hardware Connections, and LEDs ... 165 26.2 ZyXEL Device Access and Login ... 166 26.3 Internet Access ... 167 26.4 Reset the ZyXEL Device to Its Factory Defaults ... 168 Appendix A Product Specifications... 171 Appendix B Common Services... 177 Appendix C Wireless LANs ...
Page 18
Table of Contents NBG-510S User’s Guide...
This chapter introduces the main applications of the ZyXEL Device. 1.1 Overview The NBG-510S Wireless SSL Remote Access Gateway provides wireless connectivity, shared Internet access, and firewall protection. It also provides easy, secure remote user access for file sharing and management of home network computers.
Use the web configurator for everyday management of the ZyXEL Device with a (supported) web browser. Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that is not easy to guess and that consists of different types of characters, such as numbers and letters.
This chapter describes the port connections and LEDs. 2.1 Ports and Connectors This section describes the ports and connectors on the ZyXEL Device. Refer to the Quick Start Guide for information on connecting the ZyXEL Device for initial setup and basic configuration.
Chapter 2 Hardware Connection 2.2 LEDs The following table describes the LEDs (lights) on the ZyXEL Device. Figure 4 LEDs Table 2 LEDs COLOR Green LAN/WAN Yellow Green WLAN Green STATUS DESCRIPTION The ZyXEL Device is receiving power. The ZyXEL Device is not receiving power.
• Java permissions (enabled by default). 3.2 Logging into the ZyXEL Device 1 Make sure you have properly connected the ZyXEL Device to your network. See the Quick Start Guide. 2 Open your web browser, and go to http://192.168.1.1 (the default LAN IP address).
This prevents anyone from obtaining information from the browser cache. • If you are using your computer to access the ZyXEL Device, select I am connecting via my own computer. Your web browser cache will not be cleaned after you log out.
• The ZyXEL Device automatically forwards secure remote access sessions to its HTTPS server on TCP port 443. If the ZyXEL Device is behind a firewall or NAT router, make sure you configure port forwarding or a firewall rule to allow traffic to the ZyXEL Device on TCP port 8443 for administration connections and TCP port 443 for secure remote access connections.
The Status screen is the main screen and it is the first screen that displays every time you access the web configurator as an administrator. Figure 10 Main Screen The main screen is divided into these parts: • A - title bar NBG-510S User’s Guide...
Click this icon to log out of the web configurator. 3.3.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure ZyXEL Device features. The following tables describe each menu item. Table 4 Menu Summary...
Check the status bar when you click Apply or OK to verify that the configuration has been updated. FUNCTION UPnP provides simple peer-to-peer network connectivity between devices. Use static routes to tell the ZyXEL Device about networks beyond the directly connected ones. Configure the ZyXEL Device’s administrative settings. Configure the ZyXEL Device’s time and date settings.
It is highly recommended that you change the default administrator login password in the Change Password screen after the first successful login. Click Maintenance > General to display the configuration screen (see NBG-510S User’s Guide Chapter 3 The Web Configurator Figure 12 on page 37).
Confirm fields. Click OK to save the changes. 3.6 Device Reset You can reset the ZyXEL Device using the RESET button. You need to reset your ZyXEL Device to the factory default settings if • you have changed the default administrator login password and have now forgotten it.
ZyXEL Device. 4.1 Status Screen Use the Status screen to look at the ZyXEL Device’s general device information, system status, system resource usage, licensed service status, and interface status. To access this screen, click Status in the navigation panel.
Page 40
This field displays how long the ZyXEL Device has been running since it last restarted or was turned on. Current Date/ This field displays the current date and time in the ZyXEL Device. The format is Time yyyy-mm-dd hh:mm:ss. System...
1 To display the setup wizard, click Setup Wizard in the initial main screen. Figure 14 Wizard Welcome Screen 2 Create a new administrator password. Enter a unique password (up to 31 printable ASCII characters with no spaces allowed). Figure 15 Wizard: Administration Settings NBG-510S User’s Guide Setup Wizard...
You cannot use the admin account to access network resources. 3 Select the ZyXEL Device’s time zone and whether or not you use Daylight Saving Time. You can select a time server from the list or select Custom and enter another time server.
ISP uses and enter the Internet access settings exactly as the ISP provided them. Figure 18 Wizard: Internet Access 6 Wait while the ZyXEL Device applies your Internet access settings. Then click Next. Figure 19 Wizard: Applying Internet Settings 7 Click Close in the final wizard screen.
This example is for a Windows computer. 1 Use Windows Explorer to share out the computer folders that the remote users can access. 2 Open your Internet browser (Internet Explorer for example) and log into the ZyXEL Device (see Section 3.2 on page 31 (Chapter 20 on page 3 Use the User Portal >...
OK. This allows any of the computer’s administrator user accounts to remotely control the computer. If you want to manage which accounts can remotely control the computer, click Select Remote Users. Figure 22 My Computer > Properties > Remote NBG-510S User’s Guide...
6.2.2 Configure the ZyXEL Device You configure policies for the LAN computers to be managed in the ZyXEL Device’s User Portal > Desktop Links screens. 1 Log into the ZyXEL Device and click User Portal > Desktop Links. Click Manage View for the user you want to let control the LAN computer (bob in this example).
Figure 26 Secure Remote Access Login 2 Click Desktop to open the following screen. Click RemoteDesktopAccess to open a screen with links for the LAN computers you can manage. Section 25.2 on page 155 for more login details. NBG-510S User’s Guide...
6.3 Wireless Tutorial The following sections give examples of how to set up the ZyXEL Device and wireless client for wireless communication using the following parameters. The wireless clients can access the Internet through the ZyXEL Device wirelessly. See ZyXEL Device’s wireless LAN configuration.
802.11 mode IEEE 802.11b/g In this chapter, the ZyXEL Device is also referred to as an access point (AP). A computer with a wireless network card or USB/PCI adapter is referred to here as a “wireless client”. This chapter uses the M-302 utility screens as an example for the wireless client. The screens may vary for different models.
This section describes how to connect the wireless client to a network. 6.6.1 Connecting to a Wireless LAN The following sections show you how to join a ZyXEL wireless client (not included) to the wireless network. This example uses the ZyXEL utility that comes with a ZyXEL wireless client.
Site Survey screen. 1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown next. 2 The wireless client automatically searches for available wireless networks. Click Scan if you want to search again.
Chapter 6 Tutorials Figure 34 ZyXEL Utility: Confirm Save 5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless network using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
1 Open the ZyXEL utility and click the Profile tab to open the screen shown next. Click Add to configure a new profile. Figure 36 ZyXEL Utility: Profile 2 The Add New Profile screen appears. The wireless client automatically searches for available wireless networks, which are displayed in the Scan Info box.
5 This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Figure 39 ZyXEL Utility: Profile Encryption 6 In the next screen, leave both boxes checked.
Only one profile can be activated and used at any given time. Figure 42 Profile: Activate 9 When you activate the new profile, the ZyXEL utility returns to the Link Info screen while it connects to the AP using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines.
When you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the ZyXEL Device.
7.3 Wireless LAN Screen If you are configuring the ZyXEL Device from a computer connected to the wireless LAN and you change the ZyXEL Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm.
Select No Security to allow wireless stations to communicate with the wireless clients without any data encryption. If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range.
Both the wireless stations and the access points must use the same WEP key. Your ZyXEL Device allows you to configure up to four WEP keys but only one key can be enabled at any one time.
The preceding "0x", that identifies a hexadecimal key, is entered automatically. Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
This check box is available only when you select WPA2-PSK or WPA2 in the Server Type field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2-PSK or WPA2. Pre-Shared Key The encryption mechanisms used for WPA/WPA2 and WPA-PSK/WPA2-PSK are the same.
Enter a password (up to 64 alphanumeric characters) as the key to be shared between the external authentication server and the ZyXEL Device. The key must be the same on the external authentication server and your ZyXEL Device. The key is not sent over the network.
8.1 WAN IP Address Assignment Every computer on the Internet must have a unique IP address. The ZyXEL Device can get an IP address automatically if your ISP gives them out. If you have a static (fixed) IP address from the ISP, you can manually assign it to the ZyXEL Device’s WAN port.
Internet access. Enter the MAC address using colons, for example, 00:A0:C5:00:00:02. Once it is successfully configured, the address will be copied to the ZyXEL Device’s configuration file. It will not change unless you change the setting or upload a different configuration file. This MAC address also displays in the Status screen.
Internet access. Enter the MAC address using colons, for example, 00:A0:C5:00:00:02. Once it is successfully configured, the address will be copied to the ZyXEL Device’s configuration file. It will not change unless you change the setting or upload a different configuration file. This MAC address also displays in the Status screen.
Connection to be connection. always on? Maximum idle Set how long the Internet connection can be idle before ZyXEL Device disconnects Time it. This only applies if you set the Internet connection to not be always on. WAN MAC The MAC address section allows users to configure the WAN port's MAC address Address by either using the ZyXEL Device’s MAC address, cloning a computer’s IP address,...
Do you want the Select Yes if you do not want the connection to time out. If you select No, you can Internet configure a maximum idle time before the ZyXEL Device disconnects the Internet Connection to be connection. always on? NBG-510S User’s Guide...
- it is not used to carry user data. When you have multicast enabled, the ZyXEL Device queries all directly connected networks when it starts up to gather group membership. After that, the ZyXEL Device periodically updates this information.
Select None to turn off multicasting on the ZyXEL Device. If any of the LAN computers are using applications that use multicasting, select IGMP-v3 to have the ZyXEL Device proxy multicast traffic. This is especially useful for multimedia conferences over the Internet.
9.1.1 Factory LAN Defaults The LAN parameters of the ZyXEL Device are preset in the factory with an IP address of 192.168.1.1 and a subnet mask of 255.255.255.0 (24 bits) These parameters should work for the majority of installations.
H A P T E R This chapter describes the DHCP screen you use to configure the DHCP server on the ZyXEL Device. 10.1 DHCP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
(computers) to obtain TCP/IP configuration at startup from a server. Select this option to enable this feature on the ZyXEL Device and configure the fields below. When configured as a server, the ZyXEL Device provides TCP/IP configuration for the clients.
Internet) to your LAN. • For secure connections from the Internet to the LAN computers, use the secure remote user portal (see part • To set which services/protocols can access the ZyXEL Device from the WAN (the Internet), see Section 19.4 on page the ZyXEL Device.
Figure 57 Multiple Servers Behind NAT Example 11.3 Port Forwarding Screen Port forwarding allows traffic from the WAN to be forwarded through the ZyXEL Device. To change your ZyXEL Device’s port forwarding settings, click Network > NAT > Port Forwarding. The screen appears as shown. Use this screen to define the local servers to which to forward incoming services.
Enable this option to be able to assign a default host. If you do not assign a default host, the ZyXEL Device discards all packets received for ports that are not specified in the port forwarding list or remote management.
System the IP address of a LAN computer. Local Service Select what port number the ZyXEL Device when forwarding the service’s traffic to the LAN. If the LAN computer uses the same port for the service as the incoming packet’s source port, select Same as Incoming Service.
1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Device to record Jane’s computer IP address. The ZyXEL Device associates Jane's computer IP address with the "incoming"...
This name identifies the trigger port rule. Trigger Ports The trigger port range of ports causes (triggers) the ZyXEL Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Incoming Ports This is the range of ports that a server on the WAN uses when it sends out a service’s traffic.
Underscores (_) and hyphens (-) are also allowed but other special characters and spaces are not. Outgoing The trigger port range of ports causes (triggers) the ZyXEL Device to record the IP (Trigger) Port address of the LAN computer that sent the traffic to a server on the WAN.
Page 88
Chapter 11 NAT and Firewall (WAN to LAN) NBG-510S User’s Guide...
Click Network > DDNS to open the following screen. This screen displays the DDNS records configured on the ZyXEL Device for using DDNS domain names. The ZyXEL Device must have a public WAN IP address to use DDNS. Figure 63 Network > DDNS The following table describes the labels in this screen.
Click the Add or Edit icon in the Network > DDNS screen to open this screen. Use this screen to configure the ZyXEL Device to use domain names with a dynamic WAN IP address. The ZyXEL Device must have a public WAN IP address to use DDNS.
Internet) to your LAN. • For secure connections from the Internet to the LAN computers, use the secure remote user portal (see part • To set which services/protocols can access the ZyXEL Device from the WAN (the Internet), see Section 19.4 on page the ZyXEL Device.
File transfers (like FTP) since they should not affect other applications and users. 13.3 Firewall Overview The ZyXEL Device acts as a secure gateway for all data passing between the Internet and the LAN. The ZyXEL Device can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Chapter 13 Access Control Access control applies to outgoing access (sessions initiated from the LAN and going to the WAN). All outgoing sessions are allowed by default. Figure 67 Security > Access Control NBG-510S User’s Guide...
Note that subsequent firewall rules move up by one when you take this action. Action Select whether the ZyXEL Device should forward (Allowed) or drop (Denied) outgoing traffic that matches this rule. The rest of the screen lists pre-configured rules for common applications.
Priority Select the priority you want to give to the traffic that matches this firewall rule. Should be Select whether the ZyXEL Device should forward (Allowed) or drop (Denied) outgoing traffic that matches this rule. During the Access Select a time schedule to apply the rule only during the schedule’s times. You Schedule must have already configured the schedule.
13.7 Schedules Add/Edit Screen Click the Add or Edit icon in the Security > Schedules screen to open this screen. Use this screen to configure a firewall schedule. Figure 70 Security > Schedules > Add/Edit NBG-510S User’s Guide...
You may add a Sunday to Saturday from 10:30 PM to 11:59 PM as time period 1, and Sunday to Saturday from 12:00 Midnight to 6:00 AM as time period 2. NBG-510S User’s Guide Chapter 13 Access Control Section 13.7.1 on page 99...
Page 100
Chapter 13 Access Control NBG-510S User’s Guide...
Java A programming language and development environment for building downloadable Web components or Internet and intranet business applications of all kinds. Cookies Used by Web servers to track usage and provide service based on ID. NBG-510S User’s Guide Content Filtering...
Page 102
URL http://www.website.com/notbad.html would be blocked. Select this check box to enable this feature. Keyword blocking has the ZyXEL Device check all of the characters in the URL. Type a keyword in this field. You may use any character (up to 64 characters).
H A P T E R This chapter introduces the Universal Plug and Play feature. This chapter is only applicable when the ZyXEL Device is in router mode. 15.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices.
All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 15.1.4 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device).
Universal Plug and Play check box in the Components selection box. 4 Click OK to go back to the Add/ Remove Programs Properties window and click Next. 5 Restart the computer when prompted. NBG-510S User’s Guide Chapter 15 UPnP...
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL device. Make sure the computer is connected to a LAN port of the ZyXEL device. Turn on your computer and the ZyXEL device.
3 In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. NBG-510S User’s Guide Chapter 15 UPnP You may edit or delete the port mappings or click Add to manually add port mappings.
15.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device.
Page 111
3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke. The web configurator login screen displays. NBG-510S User’s Guide Chapter 15 UPnP...
Page 112
Chapter 15 UPnP 6 Right-click the icon for your ZyXEL device and select Properties. A properties window displays with basic information about the ZyXEL device. NBG-510S User’s Guide...
Device knows about network N2 in the following figure through remote node Router 1. However, the ZyXEL Device is unable to route a packet to network N3 because it doesn't know that there is a route through the same remote node Router 1 (via gateway Router 2). The static routes are for you to tell the ZyXEL Device about the networks beyond the remote nodes.
Action Click the Edit icon to go to the screen where you can set up a static route on the ZyXEL Device. No matter which edit icon you click, the entry is added in the first available row. Click the Delete icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route.
1 and 15. In practice, 2 or 3 is usually a good number. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. NBG-510S User’s Guide Chapter 16 Static Route...
17.1 System Overview See the chapter about wizard setup for more information on the next few screens. 17.2 System General Screen Click Maintenance > System to display the following screen. Figure 76 Maintenance > System > General NBG-510S User’s Guide System...
17.3 Time Setting Screen To change your ZyXEL Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. DESCRIPTION System Name is a unique name to identify the ZyXEL Device in an Ethernet network.
Select Custom to be able to specify another time server. Select Internet Select the time server the ZyXEL Device uses from the drop-down list. This is Time Server available when you select Standard for the Time Server. Manual Entry of...
Page 122
Chapter 17 System Table 35 Maintenance > System > Time Setting LABEL Date (MM:DD:YYYY) Configure Time DESCRIPTION Enter the new date in these fields. Click Configure Time to have the ZyXEL Device start using the time you manually configured. NBG-510S User’s Guide...
ZyXEL Device’s logs. Refer to the appendices for example log message explanations. 18.1 Logs Screen The web configurator allows you to look at all of the ZyXEL Device’s logs in one location. Click Maintenance > Logs to open the Logs screen.
Page 124
If the log was caused by an incoming packet, this field lists the packet’s source IP address and port number. If the log was caused by an incoming packet, this field lists the packet’s destination IP address and port number. NBG-510S User’s Guide...
Find firmware at www.zyxel.com "*.bin" extension, e.g., "ZyXEL Device.bin". The upload process uses HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) and may take up to two minutes. After a successful upload, the system will reboot.
3 A status bar displays to indicate that the file transfer process is in progress. Figure 81 Firmware Upload: Progress Status 4 After the file transfer is complete, the ZyXEL Device automatically reboots, in this time causing a temporary network disconnect. A warning screen displays as shown. Do NOT restart the ZyXEL Device at this point.
Figure 83 Maintenance > Tools > Configuration 19.2.1 Backup Configuration You can back up (save) the ZyXEL Device’s current configuration to a file on your computer. Once your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
4 After the ZyXEL Device finishes rebooting, the login screen displays (you may need to refresh your browser to get it to appear). You may need to change the IP address of your computer to be in the same subnet as that of the ZyXEL Device LAN IP address (192.168.1.1).
3 After the ZyXEL Device finishes rebooting, the login screen displays (you may need to refresh your browser to get it to appear). You may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device LAN IP address (192.168.1.1).
Select the diagnostic application that you want to use. Ping checks whether or not the ZyXEL Device can reach a device or website on the Internet. If you select this, enter the IP address of the device or domain name of the website.
Note: Previous results display along with the current results. You may Status The Status icon displays whether or not the service is allowed to access the ZyXEL Device from the Internet. Click it to activate or deactivate the service. 19.5.1 Diagnostic Tools Ping Results When the packets transmitted and packets received fields are greater than zero, there is a connection to the target IP address or domain name.
Chapter 19 Tools 19.5.3 Diagnostic Tools DNS Resolve Results The DNS resolve results show which IP address the target domain name is using. Figure 93 Maintenance > Tools > Diagnostic Tools > DNS Resolve Results NBG-510S User’s Guide...
Enter the name to be displayed on the top left corner of the user portal. Apply Changes Click Apply Changes to save your changes. Cancel Click Cancel to begin configuring this screen afresh. NBG-510S User’s Guide Section 6.2 on page 45 for an overview of the...
Click the Add or Edit icon in the Portal User > User Info screen to open this screen. Use this screen to create a new or edit an existing user account. NBG-510S User’s Guide Chapter 23 on page 143 to configure the collection of...
Click Portal User > Copy User Views to open the following screen. Use this screen to copy a user’s view (or sections of the view) to another user. Figure 97 User Portal > Copy User Views ), the at sign (@), or dashes (-), but the first character cannot be a NBG-510S User’s Guide...
Sections to be Select which parts of the portal user’s view you want to copy to the other portal copied user. Submit Click Submit to modify the portal user’s view. NBG-510S User’s Guide Chapter 21 Secure Remote Access User Info...
Page 140
Chapter 21 Secure Remote Access User Info NBG-510S User’s Guide...
A user account allows a remote user to access resources on the LAN. Use the Manage Servers screens to list the servers that remote users can use after logging into the ZyXEL Device. A server can be a LAN computer or network access storage device. For example: •...
Click Apply Changes to create or edit the server entry and return to the previous screen. Cancel Click Cancel to return to the previous screen without saving your changes. ), the at sign (@), ), the at sign (@), NBG-510S User’s Guide...
Click the Manage View icon to go to the screen where you can edit the user’s view. Click the Delete All References icon to remove a user’s view (stop the user from using any of the portal’s resources). NBG-510S User’s Guide Manage User Access Permissions...
Click Back to return to the previous screen. 23.4 Add a Category From the screen for managing a user’s view, click Add a ... Category to open the following screen. Use this screen to create a new category. NBG-510S User’s Guide...
You must have already manually added the server in the Manage manually. Server screen (see File Servers This field displays the host names of computers that the ZyXEL Device detects on the network. NBG-510S User’s Guide Chapter 23 Manage User Access Permissions ), the at sign (@), or dashes (-), but the Section 22.2 on page 141...
When adding a reference, you can click a file server’s link to browse the computer’s shared folders. Use this screen to configure the user name and password for logging into the server’s shared folder. Section 22.2 on page 141 for details). NBG-510S User’s Guide...
File Servers This field displays the host names of computers on the network that you have configured as servers for the ZyXEL Device. Click a computer’s link to browse the computer’s shared contents. Login Click Login to have the ZyXEL Device try to log into the server.
Click this to go to the next higher layer in the shared folder’s tree. Directory This lists the folders and files in the shared folder. Click a sub-folder’s link to see its Contents contents. Select the files that you want to add for the user. NBG-510S User’s Guide...
Page 149
This lists the date and time that a folder was created or a file was last modified. Create Shortcut Select the check boxes next to the files that you want to add and click Create Shortcut to make them accessible to the portal user. NBG-510S User’s Guide Chapter 23 Manage User Access Permissions...
LAN computer to be managed and the client software must be on the remote user’s computer. In the following figure, user A uses his user account to log into the ZyXEL Device. Then he uses the Real VNC client on his computer to manage LAN computer B. The connection between the remote user and the ZyXEL Device is secured by an SSL tunnel.
Click the Add new policy icon to go to the screen where you can add a desktop link. Click the Delete icon to remove a desktop link entry. Back Click Back to return to the previous screen. NBG-510S User’s Guide...
Intranet Port This is the listening port of the LAN computer running the server version of the remote desktop software. The ZyXEL Device uses this port number to send traffic to the LAN computer that is being remotely managed. Client Port This is the sending port of the authorized remote computer with the client version of the remote desktop software installed.
H A P T E R Secure Remote Access Screens This chapter describes how to access and use the ZyXEL Device secure remote access screens (also called the secure remote access portal or user portal). 25.1 Secure Remote Access Screens Remote users use the secure remote access portal screens to access shared files, upload files, or manage LAN computers.
Chapter 25 Secure Remote Access Screens • If you are on the ZyXEL Device’s LAN, enter the ZyXEL Device’s LAN IP address (http://192.168.1.1 default). • If you are connecting through the Internet, enter the ZyXEL Device’s WAN IP address or domain name (DDNS lets the ZyXEL Device use a domain name even with a dynamic WAN IP address).
Figure 113 Login: Enter Account Information The ZyXEL Device logs you out if your secure remote access session is idle for longer than the idle timeout set for your account (see page 137). Just log back in if this happens.
This example shows how the remote user can navigate through the files to which he has access. Click Sharing > Photos to open the following screen. Figure 116 Secure Remote User File Browsing users with an account (not guest users). ) are visible from most screens. NBG-510S User’s Guide...
Click Browse. and select the file you want to upload. Then click Upload to upload the file. Figure 119 Sharing > Folders > Folder > Folder NBG-510S User’s Guide Chapter 25 Secure Remote Access Screens DESCRIPTION Click this to go up one level in the folder tree.
25.7 Desktop Screen Click the Desktop link at the top of the screen to open the main Desktop screen. The remote user uses this screen to find information on the LAN computers behind the ZyXEL Device that he can manage.
Enter the loopback IP address and port number in his VNC or RDP client program. • Stay logged into the ZyXEL Device’s secure remote access portal. • Make sure his computer is not running a remote desktop server on the...
Troubleshooting and Appendices • Troubleshooting (165) • Product Specifications (171) • Common Services (177) • Legal Information (195) • Customer Support (199) • Index (205)
1 Make sure you are using the power adaptor or cord included with the ZyXEL Device. 2 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source. Make sure the power source is turned on.
JavaScripts and Java enabled. 4 Make sure your computer is in the same subnet as the ZyXEL Device. (If you know that there are routers between your computer and the ZyXEL Device, skip this step.) •...
Advanced Suggestions • Try to access the ZyXEL Device using another service, such as Telnet. If you can access the ZyXEL Device, check the remote management settings, firewall rules, and filters to find out why the ZyXEL Device does not respond to HTTP.
Chapter 26 Troubleshooting 2 If you deploy the ZyXEL Device as a new gateway, make sure you entered your ISP account information correctly in the wizard. These fields are case-sensitive, so make sure [Caps Lock] is not on. 3 If you connect the ZyXEL Device behind another gateway, make sure the WAN connection is up.
Page 169
2 Use a pointed object to press the RESET button in for five seconds and release it. If the ZyXEL Device restarts automatically, wait for the ZyXEL Device to finish restarting, and log in to the web configurator. The LAN IP address is 192.168.1.1. The user name is “admin”.
Use the web configurator to easily configure the rich range of features on the ZyXEL Device. Download new firmware (when available) from the ZyXEL web site and use the web configurator, an FTP or a TFTP tool to put it on the ZyXEL Device. Note: Only upload firmware for your specific model!
DHCP (Dynamic Host Configuration Protocol) Time and Date Logging and Tracing PPPoE Firewall Remote Management The following list, which is not exhaustive, illustrates the standards supported in the ZyXEL Device. Table 63 Standards Supported STANDARD RFC 867 RFC 868 RFC 1305...
Page 173
4 Make sure the screws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. 5 Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws.
6 OTD - 30-112-122204B AC 120 Volts AC 12 Volts/ 1 A 12 W UL and CSA 30-123-122001B AC 230 Volts AC 12 Volts/ 1 A (Switch) 1 IRD + 2 IRD - 3 OTD 6 OTD - NBG-510S User’s Guide...
Page 175
Table 66 EU Power Adaptor Specifications Power Consumption Safety Standards NBG-510S User’s Guide Appendix A Product Specifications 12 W ITS, GS, and CE...
Page 176
Appendix A Product Specifications NBG-510S User’s Guide...
AUTH BOOTP_CLIENT BOOTP_SERVER CU-SEEME TCP/UDP User-Defined (IPSEC_TUNNEL) FINGER NBG-510S User’s Guide Common Services PORT(S) DESCRIPTION The IPSEC AH (Authentication Header) tunneling protocol uses this service. 5190 AOL’s Internet Messenger service. It is also used as a listening port by ICQ.
Page 178
PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data over public networks. This is the data channel. Remote Command Service. 7070 A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login. NBG-510S User’s Guide...
Page 179
SQL-NET TCP/UDP STRM WORKS SYSLOG TACACS TELNET TFTP VDOLIVE NBG-510S User’s Guide Appendix B Common Services PORT(S) DESCRIPTION Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. Simple File Transfer Protocol.
Page 180
Appendix B Common Services NBG-510S User’s Guide...
A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. NBG-510S User’s Guide Wireless LANs...
An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. NBG-510S User’s Guide...
(AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. NBG-510S User’s Guide Appendix C Wireless LANs...
AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. NBG-510S User’s Guide...
Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. The wireless devices MUST use the same preamble mode in order to communicate.
Appendix C Wireless LANs Wireless security methods available on the ZyXEL Device are data encryption, wireless client authentication, restricting access by device MAC address and hiding the ZyXEL Device identity. The following figure shows the relative effectiveness of these wireless security methods available on your ZyXEL Device.
EAP to interact with an EAP-compatible RADIUS server, an access point helps a wireless station and a RADIUS server perform authentication. The type of authentication you use depends on the RADIUS server and an intermediary AP(s) that supports IEEE 802.1x. . NBG-510S User’s Guide Appendix C Wireless LANs...
Page 188
However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. NBG-510S User’s Guide...
If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not. Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is less secure than WPA or WPA2. NBG-510S User’s Guide EAP-MD5 EAP-TLS EAP-TTLS...
Page 190
AP and does not need to go with the authentication process again. Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it. NBG-510S User’s Guide...
(PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 2 The AP checks each wireless client's password and allows it to join the network only if the password matches. NBG-510S User’s Guide Appendix C Wireless LANs...
The angle of the beam determines the width of the coverage pattern. Angles typically range from 20 degrees (very directional) to 120 degrees (less directional). Directional antennas are ideal for hallways and outdoor point-to-point applications. NBG-510S User’s Guide Appendix C Wireless LANs...
Page 194
For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. NBG-510S User’s Guide...
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
Page 196
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications 1 Go to http://www.zyxel.com. 2 Select your product on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page. NBG-510S User’s Guide...
Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 198
Appendix D Legal Information NBG-510S User’s Guide...
61, 183 interference channel ID contact information cookies copyright CTS (Clear to Send) current date/time NBG-510S User’s Guide Index customer support daylight saving default IP address 31, 155 defaults DHCP desktop links 151, 160 edit...
Page 206
32, 156 option 32, 156 timeout token key logout icon MAC address 39, 40, 69 managing the device, good habits Media Access Control. See MAC address. Message Integrity Check (MIC) metric model name overview port forwarding server sets NBG-510S User’s Guide...
Page 207
PPTP encapsulation preamble mode Pre-Shared Key product registration public computer 32, 156 Quality of Service , See QOS RADIUS NBG-510S User’s Guide message types messages shared secret key registration product related documentation remote user screens See also portal reset device...
Page 208
WPA-PSK wireless client supplicant with RADIUS application example WPA compatible WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example 31, 155 32, 156 65, 66 62, 185 189, 190 NBG-510S User’s Guide...
Page 209
Index WPA-PSK 189, 190 application example NBG-510S User’s Guide...
Need help?
Do you have a question about the NBG-510S and is the answer not in the manual?
Questions and answers