Page 1 NBG4115 Wireless N-lite 3G Home Router Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 1.0 Edition 3, 04/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
Page 3: About This User's Guide
Tips for Reading User’s Guides On-Screen When reading a ZyXEL User’s Guide On-Screen, keep the following in mind: • If you don’t already have the latest version of Adobe Reader, you can download it from http://www.adobe.com.
Page 4 • Knowledge Base If you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well.
Page 5 Should problems arise that cannot be solved by the methods listed above, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following information ready when you contact an office.
Page 6: Document Conventions
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 7 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The NBG4115 icon is not an exact representation of your device. NBG4115 Computer Notebook computer Server DSLAM Firewall Telephone Switch Router Modem NBG4115 User’s Guide...
Page 8: Safety Warnings
Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. •...
Page 9: Table Of Contents
Contents Overview Contents Overview Introduction ..........................19 Introduction ..........................21 The WPS Button ........................25 ZyXEL Share Center Utility ......................27 The Web Configurator ....................... 37 Connection Wizard ........................49 AP Mode ............................ 65 Tutorials ............................. 73 Network ........................... 89 Wireless LAN ..........................
Page 10 Contents Overview NBG4115 User’s Guide...
Page 11: Table Of Contents
ZyXEL Share Center Utility ....................27 3.1 Overview ..........................27 3.1.1 Quick Setup ........................ 28 3.1.2 Installing ZyXEL Share Center Utility ................. 28 3.2 The ZyXEL Share Center Utility ..................29 3.2.1 The Menus ......................... 30 3.2.2 The Share Center Configuration Window ..............31 3.2.3 The Auto-Connect Printer List Window ..............
Page 12 Table of Contents 4.1 Overview ..........................37 4.2 Accessing the Web Configurator ..................37 4.3 Resetting the NBG4115 ....................... 39 4.3.1 Procedure to Use the Reset Button ................39 4.4 Navigating the Web Configurator ..................39 4.5 The Status Screen in Router Mode ..................40 4.5.1 Navigation Panel ......................
Page 13 Table of Contents Chapter 7 Tutorials ........................... 73 7.1 Overview ..........................73 7.2 Set Up a 3G Connection ...................... 73 7.3 Set Up the NBG4115 for Gaming ..................75 7.4 Set Up a Wireless Network with WPS ................. 78 7.4.1 Push Button Configuration (PBC) ................78 7.4.2 PIN Configuration .......................
Page 14 Table of Contents 9.3.2 PPPoE ........................116 9.3.3 PPTP .........................118 9.3.4 Mobile 3G ......................... 121 9.4 Advanced ........................... 123 Chapter 10 LAN............................125 10.1 Overview .......................... 125 10.1.1 What You Can Do in this Chapter ................125 10.2 What You Need To Know ....................125 10.3 IP .............................
Page 15 Table of Contents Part III: Security..................149 Chapter 14 Firewall........................... 151 14.1 Overview ........................151 14.1.1 What You Can Do in this Chapter ................151 14.1.2 What You Need To Know ..................152 14.2 General ......................... 154 14.3 Services ......................... 154 Chapter 15 Content Filtering ........................
Page 16 Table of Contents Chapter 18 Remote Management......................175 18.1 Overview .......................... 175 18.1.1 What You Can Do in this Chapter ................175 18.1.2 What You Need To Know ..................175 18.2 WWW ........................... 176 Chapter 19 UPnP ............................179 19.1 Overview ......................... 179 19.1.1 What You Can Do in this Chapter ................
Page 17 26.4 Internet Access ........................ 216 26.5 Resetting the NBG4115 to Its Factory Defaults ............... 218 26.6 Wireless Router/AP Troubleshooting ................218 26.7 ZyXEL Share Center Utility Problems ................220 Part VI: Appendices and Index ............221 Appendix A Product Specifications..................223 Appendix B Pop-up Windows, JavaScripts and Java Permissions ........
Page 18 Table of Contents 26.7.3 WPA(2) with RADIUS Application Example ............273 Appendix F Services ......................275 Appendix G Legal Information....................279 Index............................287 NBG4115 User’s Guide...
Page 19: Introduction
Introduction Introduction (21) The WPS Button (25) ZyXEL Share Center Utility (27) The Web Configurator (37) Connection Wizard (49) AP Mode (65) Tutorials (73)
Page 21: Introduction
Internet computing. Note: Be sure to install the Share Center Utility (for NetUSB functionality) from the included disc, or download the latest version from the zyxel.com website. 1.2 Applications Your can create the following networks using the NBG4115: • Wired. You can connect network devices via the Ethernet ports of the NBG4115 so that they can communicate with each other and access the Internet.
Page 22: Ways To Manage The Nbg4115
• WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web Configurator to set up a wireless network with your ZyXEL Device. • Web Configurator. This is recommended for everyday management of the NBG4115 using a (supported) web browser.
Page 23 Chapter 1 Introduction The following table describes the LEDs and the WPS button. Table 1 Front Panel LEDs and WPS Button COLOR STATUS DESCRIPTION POWER Green The NBG4115 is receiving power and functioning properly. The NBG4115 is not receiving power. WLAN Green The NBG4115 is ready, but is not sending/...
Page 24 Chapter 1 Introduction NBG4115 User’s Guide...
Page 25: The Wps Button
H A P T E R The WPS Button 2.1 Overview Your NBG4115 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually.
Page 26 Chapter 2 The WPS Button NBG4115 User’s Guide...
Page 27: Zyxel Share Center Utility
ZyXEL Share Center Utility 3.1 Overview The ZyXEL Share Center Utility allows you to work with the USB devices that are connected directly to the NBG4115 as if they are connected directly to your computer. This allows you to easily share USB-based devices such as printers,...
Page 28: Quick Setup
Chapter 3 ZyXEL Share Center Utility with a ZyXEL Share Center Utility installed on it and which is connected to the NBG4115’s LAN ports can access these devices. Note: A USB hub attached to the NBG4115 requires its own power adapter.
Page 29: The Zyxel Share Center Utility
Chapter 3 ZyXEL Share Center Utility 3.2 The ZyXEL Share Center Utility This section describes the ZyXEL Share Center Utility main window. Figure 3 ZyXEL Share Center Utility Main Window The following table describes the icons in this window. Table 2 ZyXEL Share Center Utility Main Window Icons...
Page 30: The Menus
Chapter 3 ZyXEL Share Center Utility Table 2 ZyXEL Share Center Utility Main Window Icons (continued) ICON DESCRIPTION Disconnect Select a device to which your computer is connected and then click this button to disconnect from it. Request to Connect Some USB devices may not allow automatic connections over the network.
Page 31: The Share Center Configuration Window
Basic Select this to run the utilty automatically when you log into or start up Windows. Language Select a language for the ZyXEL Share Center Utility. You must restart the utility for the change to take effect. NBG4115 User’s Guide...
Page 32: The Auto-Connect Printer List Window
This section describes the utility’s auto-connect printer list window. You can open it by clicking the Tools > Auto-Connect Printer List menu command. Figure 6 ZyXEL Share Center Utility Auto-Connect Printer List Window The following table describes the labels in this screen.
Page 33: Manually Connecting To Usb Devices
3.3 Manually Connecting to USB Devices This example shows you how to connect to a USB device over your NBG4115 network. Makes sure that you have first installed the ZyXEL Share Center Utility on the computer to which you want to connect the USB devices.
Page 34: Automatically Connecting To A Usb Printer
This example shows you how to set your computer to automatically connect to a shared USB printer over your NBG4115 network each time you log into your computer. Makes sure that you have first installed the ZyXEL Share Center Utility. Connect a USB printer to the NBG4115.
Page 35 Chapter 3 ZyXEL Share Center Utility Open the ZyXEL Sharing Center Utility on the computer that you want to use to connect to the printer. Click the Connect button. You may be prompted to install a printer driver or to configure other settings.
Page 36 Chapter 3 ZyXEL Share Center Utility NBG4115 User’s Guide...
Page 37: The Web Configurator
H A P T E R The Web Configurator 4.1 Overview This chapter describes how to access the NBG4115 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG4115 via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions or Safari 2.0 or later versions.
Page 38 Chapter 4 The Web Configurator Type "1234" (default) as the password and click Login. In some versions, the default password appears automatically - if this is the case, click Login. You should see a screen asking you to change your password (highly recommended) as shown next.
Page 39: Resetting The Nbg4115
Chapter 4 The Web Configurator • Select a language to go to the basic Web Configurator in that language. To change to the advanced configurator see Chapter 25 on page 211. Figure 8 Selecting the setup mode 4.3 Resetting the NBG4115 If you forget your password or IP address, or you cannot access the Web Configurator, you will need to use the RESET button at the back of the NBG4115 to reload the factory-default configuration file.
Page 40: The Status Screen In Router Mode
Chapter 4 The Web Configurator 4.5 The Status Screen in Router Mode Click on Status. The screen below shows the status screen in Router Mode. (For information on the status screen in AP Mode see Chapter 6 on page 66.) Figure 9 Web Configurator Status Screen The following table describes the icons shown in the Status screen.
Page 41 Chapter 4 The Web Configurator The following table describes the labels shown in the Status screen. Table 7 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen.
Page 42: Navigation Panel
Chapter 4 The Web Configurator Table 7 Web Configurator Status Screen (continued) LABEL DESCRIPTION - Memory Usage This shows what percentage of the heap memory the NBG4115 is using. System Setting - Firewall This shows whether the firewall is active or not. - Bandwidth This shows whether bandwidth management is enabled or not.
Page 43 Chapter 4 The Web Configurator Table 8 Screens Summary LINK FUNCTION Wireless LAN General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115.
Page 44: Summary: Dhcp Table
Chapter 4 The Web Configurator Table 8 Screens Summary LINK FUNCTION Bandwidth General Use this screen to use pre-configured bandwidth Management management profiles for how your NBG4115 manages incoming and outgoing data. Advanced Use this screen to create your own bandwidth management profile for how your NBG4115 manages incoming and outgoing data.
Page 45: Summary: Packet Statistics
Chapter 4 The Web Configurator DHCP client information (including IP Address, Host Name and MAC Address) of all network clients using the NBG4115’s DHCP server. Figure 10 Summary: DHCP Table The following table describes the labels in this screen. Table 9 Summary: DHCP Table LABEL DESCRIPTION This is the index number of the host computer.
Page 46: Summary: Wlan Station Status
Chapter 4 The Web Configurator The following table describes the labels in this screen. Table 10 Summary: Packet Statistics LABEL DESCRIPTION Port This is the NBG4115’s port type. Status For the LAN ports, this displays the port speed and duplex setting or Down when the line is disconnected.
Page 47 Chapter 4 The Web Configurator The following table describes the labels in this screen. Table 11 Summary: Wireless Association List LABEL DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the NBG4115’s WLAN network.
Page 48 Chapter 4 The Web Configurator NBG4115 User’s Guide...
Page 49: Connection Wizard
H A P T E R Connection Wizard 5.1 Overview This chapter provides information on the wizard setup screens in the Web Configurator. 5.2 Wizard Setup The Web Configurator’s wizard setup helps you configure your device to access the Internet. Refer to your ISP (Internet Service Provider) checklist in the Quick Start Guide to know what to enter in each field.
Page 50: Step 1: System Information
Chapter 5 Connection Wizard Choose a language by clicking on the language’s button. The screen will update. Click the Next button to proceed to the next screen. Figure 14 Select a Language Read the on-screen information and click Next. Figure 15 Welcome to the Connection Wizard 5.3 STEP 1: System Information System Information contains administrative and system-related information.
Page 51: Domain Name
Chapter 5 Connection Wizard 5.3.2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the NBG4115 via DHCP.
Page 52: Step 2: Wireless Lan
Chapter 5 Connection Wizard 5.4 STEP 2: Wireless LAN Set up your wireless LAN using the following screen. Figure 17 Wizard Step 2: Wireless LAN The following table describes the labels in this screen. Table 13 Wizard Step 2: Wireless LAN LABEL DESCRIPTION Name...
Page 53: Extend (Wpa-Psk Or Wpa2-Psk) Security
Chapter 5 Connection Wizard Note: The wireless stations and NBG4115 must use the same SSID, channel ID, WPA-PSK (if WPA-PSK is enabled) or WPA2-PSK (if WPA2-PSK is enabled) for wireless communication. 5.4.1 Extend (WPA-PSK or WPA2-PSK) Security Choose Extend (WPA-PSK) or Extend (WPA2-PSK) security in the Wireless LAN setup screen to set up a Pre-Shared Key.
Page 54: Ethernet Connection
Chapter 5 Connection Wizard Note: When you select Mobile 3G, then all WAN connections are made through this. Check with your ISP to make sure you use the correct type. This wizard screen varies according to the connection type that you select. Figure 19 Wizard Step 3: ISP Parameters.
Page 55: Pppoe Connection
Chapter 5 Connection Wizard 5.5.2 PPPoE Connection Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet Engineering Task Force) standard specifying how a host personal computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
Page 56: Pptp Connection
Chapter 5 Connection Wizard Table 16 Wizard Step 3: PPPoE Connection LABEL DESCRIPTION Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. 5.5.3 PPTP Connection Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks.
Page 57 Chapter 5 Connection Wizard Table 17 Wizard Step 3: PPTP Connection LABEL DESCRIPTION User Name Type the user name given to you by your ISP. Password Type the password associated with the User Name above. PPTP Configuration Server IP Type the IP address of the PPTP server. Address Connection ID/ Enter the connection ID or connection name in this field.
Page 58: Mobile 3G
Chapter 5 Connection Wizard 5.5.4 Mobile 3G Mobile 3G is a set of international “third generation” standards for the sending and receiving of voice, video, and wireless data in a mobile environment. For the NBG4115, this type of wireless connection requires a connected 3G-compatible USB device (see the included Quick Start Guide for installation information), and a 3G account with your local ISP.
Page 59: Your Ip Address
Chapter 5 Connection Wizard 5.5.5 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG4115 an automatically assigned IP address depending on your ISP. Figure 24 Wizard Step 3: Your IP Address The following table describes the labels in this screen Table 19 Wizard Step 3: Your IP Address LABEL...
Page 60: Ip Address And Subnet Mask
5.5.8 DNS Server Address Assignment Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it.
Page 61: Wan Ip And Dns Server Address Assignment
Chapter 5 Connection Wizard The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the Wizard and/or WAN > Internet Connection screen.
Page 62: Wan Mac Address
Chapter 5 Connection Wizard Table 21 Wizard Step 3: WAN IP and DNS Server Addresses LABEL DESCRIPTION First DNS Server Enter the DNS server's IP address in the fields provided. Second DNS Server If you do not configure a system DNS server, you must use IP addresses when configuring DDNS and the time server.
Page 63: Connection Wizard Complete
Chapter 5 Connection Wizard The following table describes the fields in this screen. Table 23 Wizard Step 3: WAN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assigned default MAC address. Clone the Select this option and enter the IP address of the computer on the computer’s MAC LAN whose MAC you are cloning.
Page 64 Chapter 5 Connection Wizard NBG4115 User’s Guide...
Page 65: Ap Mode
H A P T E R AP Mode 6.1 Overview This chapter discusses how to configure settings while your NBG4115 is set to AP Mode. Many screens that are available in Router Mode are not available in AP Mode. Note: See Chapter 7 on page 73 for an example of setting up a wireless network in AP mode.
Page 66: The Status Screen In Ap Mode
Chapter 6 AP Mode To set your NBG4115 to AP Mode, go to Maintenance > Sys OP Mode > General and select Access Point. Figure 29 Maintenance > Sys OP Mode > General A pop-up appears providing information on this mode. Click OK in the pop-up message window.
Page 67 Chapter 6 AP Mode The following table describes the labels shown in the Status screen. Table 24 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen.
Page 68: Navigation Panel
Chapter 6 AP Mode Table 24 Web Configurator Status Screen (continued) LABEL DESCRIPTION Rate For the LAN ports, this displays the port speed and duplex setting or N/A when the line is disconnected. For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and N/A when the WLAN is disabled.
Page 69: Lan Settings
Chapter 6 AP Mode Table 25 Screens Summary LINK FUNCTION Wireless General Use this screen to configure wireless LAN. MAC Filter Use the MAC filter screen to configure the NBG4115 to block access to devices or block the devices from accessing the NBG4115.
Page 70: Wlan And Maintenance Settings
Chapter 6 AP Mode Note: If you change the IP address of the NBG4115 in the screen below, you will need to log into the NBG4115 again using the new IP address. Figure 32 Network > LAN > IP The table below describes the labels in the screen. Table 26 Network >...
Page 71: Logging In While In Ap Mode
Chapter 6 AP Mode 6.6 Logging in while in AP Mode Connect your computer to the LAN port of the NBG4115. The default IP address of the NBG4115 is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”.
Page 72 Chapter 6 AP Mode NBG4115 User’s Guide...
Page 73: Tutorials
H A P T E R Tutorials 7.1 Overview This chapter provides tutorials for setting up your NBG4115. 7.2 Set Up a 3G Connection This section shows you how to make a 3G connection with your NBG4115. There are two ways to set up your 3G options. Use the Wizard, which was introduced in the Quick Start Guide.
Page 74 Chapter 7 Tutorials FIELD DESCRIPTION EXAMPLE User Name This is your account user name. dcmchale 0b1ken@kashiik.org Password This is your account user name’s ***** password. To set up a 3G connection: Connect to the Web Configurator, as described in the Quick Start Guide. When presented with the option to choose either Wizard or Advanced, click Go to Advanced setup.
Page 75: Set Up The Nbg4115 For Gaming
Chapter 7 Tutorials From the Connection Type menu, select Mobile 3G then configure your 3G settings when the screen updates itself.f Click Apply to save your changes, then exit the Web Configurator. Note: Once you set up and enable a 3G device, all incoming and outgoing network connections are made through it and not the WAN port on your NBG4115.
Page 76 Chapter 7 Tutorials Bandwidth management allows you to set up custom parameters on the NBG4115 so that whenever you play a game, the QoS is automatically upgraded to the highest priority in order to ensure your game data packets are plucked first from the pool of incoming information and sent on ahead of lower priority packets.
Page 77 Chapter 7 Tutorials Enable the Gaming check box and set its Priority to High. The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in the Management > Bandwidth MGMT > Advanced screen: Table 27 Preconfigured Gaming Ports APPLICATION TCP PORTS...
Page 78: Set Up A Wireless Network With Wps
Chapter 7 Tutorials To create a custom QoS setting for a specific game, enter the following information in the first available custom Priority Queue line: Service: This is the name by which your custom service is labled. It can be anything with the limitation that it cannot be longer than 10 characters.
Page 79 The following figure shows you an example to set up wireless network and security by pressing a button on both NBG4115 and wireless client (the NWD210N in this example). Figure 33 Example WPS Process: PBC Method ZyXEL Device Wireless Client WITHIN 2 MINUTES SECURITY INFO COMMUNICATION NBG4115 User’s Guide...
Page 80: Pin Configuration
The following figure shows you the example to set up wireless network and security on NBG4115 and wireless client (ex. NWD210N in this example) by using PIN method. Figure 34 Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES NBG4115 User’s Guide...
Page 81: Configure Wireless Security Without Wps
Chapter 7 Tutorials 7.5 Configure Wireless Security without WPS This example shows you how to configure wireless security settings with the following parameters on your NBG4115. SSID SSID_Example3 Channel Security WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) Follow the steps below to configure the wireless settings on your NBG4115. The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see...
Page 82: Configure Your Notebook
Figure 36 Tutorial: Status Screen 7.5.1 Configure Your Notebook Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG4115 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients.
Page 83 Chapter 7 Tutorials Select SSID_Example3 and click Connect. Figure 37 Connecting a Wireless Client to a Wireless Network t Select WPA-PSK and type the security key in the following screen. Click Next. Figure 38 Security Settings The Confirm Save window appears. Check your settings and click Save to continue.
Page 84: Bandwidth Management
7.6 Bandwidth Management This section shows you how to configure the bandwidth management feature on the NBG4115 to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you to specify bandwidth management rules based on an application or subnet.
Page 85: Custom Bandwidth Management
Chapter 7 Tutorials In the following screen, you set the priorities for VoIP and e-mail. Figure 41 Tutorial: Priority Queue Click Enable for the VoIP (SIP) service and set priority to High. Do the same for E-mail. For the rest of the applications, click Enable if you need these services and set the priority to Low.
Page 86: Bandwidth Management By Ip Or Ip Range
Chapter 7 Tutorials Click Enable in one of the fields for additional services. Add MSN as the service name. Set the priority for this to High. For the port, choose TCP from the drop-down menu and enter 1863 in the Specific Port field.
Page 87 Chapter 7 Tutorials Enter the following values for each service you want to add. For this tutorial, you need to add each of the following service (see table below) and click Apply. Table 28 SERVICES FIELDS REAL AUDIO RTSP VDO LIVE Active Check this to turn on this bandwidth management rule.
Page 88 Chapter 7 Tutorials NBG4115 User’s Guide...
Page 89: Network
Network Wireless LAN (91) WAN (111) LAN (125) DHCP Server (129) NAT (135) DDNS (145)
Page 91: Wireless Lan
H A P T E R Wireless LAN 8.1 Overview This chapter discusses how to configure the wireless network settings in your NBG4115. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Figure 45 Example of a Wireless Network The wireless network is the part in the blue circle.
Page 92: What You Can Do In This Chapter
Chapter 8 Wireless LAN 8.1.1 What You Can Do in this Chapter • Use the General screen (Section 8.2 on page 95) to enable the Wireless LAN, enter the SSID and select the wireless security mode. • Use the MAC Filter screen (Section 8.3 on page 100) to allow or deny wireless stations based on their MAC addresses from connecting to the NBG4115.
Page 93 Chapter 8 Wireless LAN This type of security is fairly weak, however, because there are ways for unauthorized devices to get the SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network. MAC Address Filter Every wireless client has a unique identification number, called a MAC address.
Page 94 Chapter 8 Wireless LAN Local user databases also have an additional limitation that is explained in the next section. Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message.
Page 95: General
Chapter 8 Wireless LAN Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every wireless client in the wireless network must have the same key. WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance.
Page 96 Chapter 8 Wireless LAN The following table describes the general wireless LAN labels in this screen. Table 30 Network > Wireless LAN > General LABEL DESCRIPTION Enable Click the check box to activate wireless LAN. Wireless LAN Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless station is associated.
Page 97: No Security
Chapter 8 Wireless LAN 8.2.1 No Security Select No Security to allow wireless stations to communicate with the access points without any data encryption. Note: If you do not enable any wireless security on your NBG4115, your network is accessible to any wireless networking device that is within range. Figure 47 Network >...
Page 98 Keep this setting at Auto or Open System unless you want to force a key verification before communication between the wireless client and the ZyXEL Device occurs. Select Shared Key to force the clients to provide the WEP key prior to communication.
Page 99: Wpa-Psk/Wpa2-Psk
Chapter 8 Wireless LAN Table 32 Network > Wireless LAN > General: Static WEP LABEL DESCRIPTION Select this option in order to enter hexadecimal characters as a WEP key. The preceding "0x", that identifies a hexadecimal key, is entered automatically. Key 1 to Key The WEP keys are used to encrypt data.
Page 100: Mac Filter
Chapter 8 Wireless LAN The following table describes the labels in this screen. Table 33 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK LABEL DESCRIPTION This check box is available only when you select WPA2-PSK in the Compatible Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the NBG4115 even when the NBG4115 is using WPA2-PSK.
Page 101 Chapter 8 Wireless LAN To change your NBG4115’s MAC filter settings, click Network > Wireless LAN > MAC Filter. The screen appears as shown. Figure 50 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu. Table 34 Network >...
Page 102: Advanced
Chapter 8 Wireless LAN 8.4 Advanced Click Network > Wireless LAN > Advanced. The screen appears as shown. Figure 51 Network > Wireless LAN > Advanced The following table describes the labels in this screen. Table 35 Network > Wireless LAN > Advanced LABEL DESCRIPTION Wireless Advanced Setup...
Page 103 Chapter 8 Wireless LAN Table 35 Network > Wireless LAN > Advanced LABEL DESCRIPTION When set to None, the NBG4115 protects wireless communication against Protection interference. When set to Always, the NBG4115 improves performance within mixed wireless modes. Select Auto to let the NBG4115 determine whether to turn this feature on or off in the current environment.
Page 104: Qos
Chapter 8 Wireless LAN 8.5 QoS The QoS screen allows you to automatically give a service (such as e-mail, VoIP or FTP) a priority level. Click Network > Wireless LAN > QoS. The following screen appears. Figure 52 Network > Wireless LAN > QoS The following table describes the labels in this screen.
Page 105: Application Priority Configuration
Chapter 8 Wireless LAN Table 36 Network > Wireless LAN > QoS (continued) LABEL DESCRIPTION Dest Port This field displays the destination port number to which the application sends traffic. Priority This field displays the priority of the application. Highest - Typically used for voice or video that should be high- quality.
Page 106 Chapter 8 Wireless LAN Network > Wireless LAN > QoS: Application Priority Configuration (continued) LABEL DESCRIPTION Service The following is a description of the applications you can prioritize with WMM QoS. Select a service from the drop-down list box. • E-Mail Electronic mail consists of messages sent through a computer network to specific groups or individuals.
Page 107: Wps
Chapter 8 Wireless LAN 8.6 WPS Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS status. To open this screen, click Network > Wireless LAN > WPS tab. Figure 54 WPS The following table describes the labels in this screen. Table 37 WPS LABEL DESCRIPTION...
Page 108: Wps Station
Chapter 8 Wireless LAN Table 37 WPS LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Refresh Click Refresh to get this screen information afresh. 8.7 WPS Station Use this screen when you want to add a wireless station using WPS. To open this screen, click Network >...
Page 109: Scheduling
Chapter 8 Wireless LAN 8.8 Scheduling Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Network >...
Page 110 Chapter 8 Wireless LAN Table 39 Scheduling LABEL DESCRIPTION Except for the Select a begin time using the first set of hour and minute (min) drop following times down boxes and select an end time using the second set of hour and (24-Hour minute (min) drop down boxes.
Page 111: Wan
H A P T E R 9.1 Overview This chapter discusses the NBG4115’s WAN screens. Use these screens to configure your NBG4115 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 112: What You Need To Know
DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it.
Page 113 Chapter 9 WAN WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address.
Page 114 Chapter 9 WAN up services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls. However it may sometimes be necessary to allow NetBIOS packets to pass through to the WAN in order to find a computer on the WAN. Auto-Bridge In the rear panel of your NBG4115, you can see four LAN ports (1 to 2) and one WAN port.
Page 115: Internet Connection
Chapter 9 WAN 9.3 Internet Connection Use this screen to change your NBG4115’s Internet access settings. Click Network > WAN. The screen differs according to the connection you choose. 9.3.1 Ethernet This screen displays when you select the Ethernet connection type. Figure 59 Network >...
Page 116: Pppoe
Chapter 9 WAN Table 40 Network > WAN > Internet Connection: Ethernet LABEL DESCRIPTION IP Address Enter your WAN IP address in this field if you selected Use Fixed IP Address. IP Subnet Enter the IP Subnet Mask in this field. Mask Gateway IP Enter a Gateway IP Address (if your ISP gave you one) in this field.
Page 117 Chapter 9 WAN One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals. Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site.
Page 118: Pptp
Chapter 9 WAN Table 41 Network > WAN > Internet Connection: PPPoE LABEL DESCRIPTION Password Type the password associated with the user name above. Retype to Type your password again to make sure that you have entered is Confirm correctly. Nailed-Up Select Nailed-Up Connection if you do not want the connection to time Connection...
Page 119 Chapter 9 WAN This screen displays when you select the PPTP connection type. Figure 61 Network > WAN > Internet Connection: PPTP The following table describes the labels in this screen. Table 42 Network > WAN > Internet Connection: PPTP LABEL DESCRIPTION ISP Parameters for Internet Access...
Page 120 Chapter 9 WAN Table 42 Network > WAN > Internet Connection: PPTP LABEL DESCRIPTION Password Type the password associated with the User Name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-up Select Nailed-Up Connection if you do not want the connection to Connection...
Page 121: Mobile 3G
Chapter 9 WAN Table 42 Network > WAN > Internet Connection: PPTP LABEL DESCRIPTION Clone the Select Clone the computer's MAC address - IP Address and computer’s MAC enter the IP address of the computer on the LAN whose MAC you address - IP are cloning.
Page 122 Chapter 9 WAN The following table describes the labels in this screen. Table 43 Network > WAN > Internet Connection: Mobile 3G LABEL DESCRIPTION ISP Parameters for Internet Access Connection Type 3G is . To configure a Mobile 3G client, you must configure the User Name and Password fields as well as PIN Code, APN Code, and Dial Number.
Page 123: Advanced
Chapter 9 WAN Table 43 Network > WAN > Internet Connection: Mobile 3G LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. 9.4 Advanced Use this screen to enable Multicast, allow Windows Networking and enable Auto-bridge.
Page 124 Chapter 9 WAN Table 44 WAN > Advanced LABEL DESCRIPTION Allow between LAN Select this check box to forward NetBIOS packets from the LAN to and WAN the WAN and from the WAN to the LAN. If your firewall is enabled with the default policy set to block WAN to LAN traffic, you also need to enable the default WAN to LAN firewall rule that forwards NetBIOS traffic.
Page 125: Lan
H A P T E R 10.1 Overview This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building.
Page 126 Chapter 10 LAN LAN and WAN IP Addresses The actual physical connection determines whether the NBG4115 ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 64 LAN and WAN IP Addresses The LAN parameters of the NBG4115 are preset in the factory with the following values:...
Page 127 Chapter 10 LAN 10.3 IP Use this screen to change your basic LAN settings. Click Network > LAN. Figure 65 Network > LAN > IP The following table describes the labels in this screen. Table 45 Network > LAN > IP LABEL DESCRIPTION IP Address...
Page 128 Chapter 10 LAN NBG4115 User’s Guide...
Page 129: Dhcp Server
H A P T E R DHCP Server 11.1 Overview DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients.
Page 130: General
Chapter 11 DHCP Server 11.2 General Use this screen to enable the DHCP server. Click Network > DHCP Server. The following screen displays. Figure 66 Network > DHCP Server > General The following table describes the labels in this screen. Table 46 Network >...
Page 131: Advanced
Chapter 11 DHCP Server 11.3 Advanced This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. You can also use this screen to configure the DNS server information that the NBG4115 sends to the DHCP clients.
Page 132: Client List
Chapter 11 DHCP Server Table 47 Network > DHCP Server > Advanced LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the Second DNS right displays the (read-only) DNS server IP address that the ISP Server assigns.
Page 133 Chapter 11 DHCP Server The following screen displays. Figure 68 Network > DHCP Server > Client List The following table describes the labels in this screen. Table 48 Network > DHCP Server > Client List LABEL DESCRIPTION This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above.
Page 134 Chapter 11 DHCP Server NBG4115 User’s Guide...
Page 135: Nat
H A P T E R 12.1 Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network.
Page 136: What You Can Do In This Chapter
Chapter 12 NAT 12.1.1 What You Can Do in this Chapter • Use the General (Section 12.2 on page 138) screen to enable NAT and set a default server. • Use the Application (Section 12.3 on page 139) screen to change your NBG4115’s port forwarding settings.
Page 137 Chapter 12 NAT What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
Page 138: General
Chapter 12 NAT 12.2 General Use this screen to enable NAT and set a default server. Click Network > NAT to open the General screen. Figure 71 Network > NAT > General The following table describes the labels in this screen. Table 50 Network >...
Page 139: Application
Chapter 12 NAT 12.3 Application Port forwarding allows you to define the local servers to which the incoming services will be forwarded. To change your NBG4115’s port forwarding settings, click Network > NAT > Application. The screen appears as shown. Note: If you do not assign a Default Server IP address in the NAT >...
Page 140 Chapter 12 NAT Table 51 NAT Application (continued) LABEL DESCRIPTION Local Port Enter the start and end port(s) to be forwarded. Range Public Port Range Server IP Type the inside IP address of the server that receives packets from the Address port(s) specified in the Port field.
Page 141: Advanced
Chapter 12 NAT 12.4 Advanced To change your NBG4115’s trigger port settings, click Network > NAT > Advanced. The screen appears as shown. Note: Only one LAN computer can use a trigger port (range) at a time. Figure 73 Network > NAT > Advanced The following table describes the labels in this screen.
Page 142: Technical Reference
Chapter 12 NAT Table 52 Network > NAT > Advanced LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. 12.5 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter.
Page 143: Trigger Port Forwarding
Chapter 12 NAT addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 74 Multiple Servers Behind NAT Example 12.5.3 Trigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side.
Page 144: Trigger Port Forwarding Example
Chapter 12 NAT 12.5.4 Trigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 75 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the NBG4115 to record Jane’s computer IP address.
Page 145: Ddns
H A P T E R DDNS 13.1 Overview DDNS services let you use a domain name with a dynamic IP address. 13.1.1 What You Can Do in this Chapter Use the DDNS screen (Section 13.2 on page 146) to enable DDNS and configure the DDNS settings on the NBG4115.
Page 146: General
Chapter 13 DDNS 13.2 General To change your NBG4115’s DDNS, click Network > DDNS. The screen appears as shown. Figure 76 Dynamic DNS The following table describes the labels in this screen. Table 53 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Enable Dynamic Select this check box to use dynamic DNS.
Page 147 Chapter 13 DDNS Table 53 Dynamic DNS LABEL DESCRIPTION Enable off line This option is available when CustomDNS is selected in the DDNS option Type field. Check with your Dynamic DNS service provider to have traffic redirected to a URL (that you can specify) while you are off line.
Page 148 Chapter 13 DDNS NBG4115 User’s Guide...
Page 149: Security
Security Firewall (151) Content Filtering (157)
Page 151: Firewall
H A P T E R Firewall 14.1 Overview Use these screens to enable and configure the firewall that protects your NBG4115 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 152: What You Need To Know
Chapter 14 Firewall 14.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. What is a Firewall? Originally, the term “firewall” referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall"...
Page 153 Chapter 14 Firewall The NBG4115 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet. The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world.
Page 154: General
Chapter 14 Firewall 14.2 General Use this screen to enable or disable the NBG4115’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 78 Security > Firewall > General l The following table describes the labels in this screen. Table 54 Security >...
Page 155 Chapter 14 Firewall Click Security > Firewall > Services. The screen appears as shown next. Figure 79 Security > Firewall > Services l The following table describes the labels in this screen. Table 55 Security > Firewall > Services LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-...
Page 156 Chapter 14 Firewall NBG4115 User’s Guide...
Page 157: Content Filtering
The NBG4115 checks the URL’s domain name (or IP address) and file path separately when performing keyword blocking. The URL’s domain name or IP address is the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is www.zyxel.com.tw. NBG4115 User’s Guide...
Page 158: Filter
For example, with the URL www.zyxel.com.tw/news/pressroom.php, the NBG4115 would find “tw” in the domain name (www.zyxel.com.tw). It would also find “news” in the file path (news/pressroom.php) but it would not find “tw/news”.
Page 159: Technical Reference
Chapter 15 Content Filtering The following table describes the labels in this screen. Table 56 Security > Content Filter > Filter LABEL DESCRIPTION Enable URL The NBG4115 can block Web sites with URLs that contain certain Keyword keywords in the domain name or IP address. For example, if the Blocking keyword "bad"...
Page 160 Full path URL checking has the NBG4115 check the characters that come before the last slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/. Use the ip urlfilter customize actionFlags 6 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's full path.
Page 161: Management
Management Static Route (163) Bandwidth Management (167) Remote Management (175) UPnP (179) NetUSB (189)
Page 163: Static Route
H A P T E R Static Route 16.1 Overview This chapter shows you how to configure static routes for your NBG4115. The NBG4115 usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the NBG4115 send data to devices not reachable through the default gateway, use static routes.
Page 164: Ip Static Route
Chapter 16 Static Route 16.2 IP Static Route Use this screen to view existing static route rules. Click Management > Static Route to open the IP Static Route screen. The following screen displays. Figure 82 Management > Static Route > IP Static Route The following table describes the labels in this screen.
Page 165: Static Route Setup Screen
Chapter 16 Static Route 16.2.1 Static Route Setup Screen To edit a static route, click the edit icon under Modify. The following screen displays. Fill in the required information for each static route. Figure 83 Management > Static Route > IP Static Route: Static Route Setup The following table describes the labels in this screen.
Page 166 Chapter 16 Static Route NBG4115 User’s Guide...
Page 167: Bandwidth Management
This chapter contains information about configuring bandwidth management and editing rules. ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application. In the figure below, uplink traffic goes from the LAN device (A) to the WAN device (B).
Page 168: General
Chapter 17 Bandwidth Management Bandwidth Limiting You can limit an application’s uplink or downlink bandwidth. This limit keeps the traffic from using up too much of the out-going interface’s bandwidth. This way you can make sure there is bandwidth for other applications. Use the following guidelines: •...
Page 169: Advanced
Chapter 17 Bandwidth Management The following table describes the labels in this screen. Table 59 Management > Bandwidth MGMT > General LABEL DESCRIPTION Service Management Bandwidth This field allows you to have NBG4115 apply bandwidth management. Management Select Priority Queue or Bandwidth Allocation to enable Type bandwidth management.
Page 170 Chapter 17 Bandwidth Management Click Management > Bandwidth MGMT > Advanced to open the bandwidth management Advanced screen. Figure 86 Management > Bandwidth MGMT > Advanced The following table describes the labels in this screen. Table 60 Management > Bandwidth MGMT > Advanced LABEL DESCRIPTION Priority Queue...
Page 171 Chapter 17 Bandwidth Management Table 60 Management > Bandwidth MGMT > Advanced (continued) LABEL DESCRIPTION Service This is the name of the service. You can also enter the name (up to 10 keyboard characters) of a service you want to add in the priority queue (for example, Messenger). Priority Select a priority from the drop down list box.
Page 172: Pre-Configured Gaming Ports
Chapter 17 Bandwidth Management 17.3.1 Pre-Configured Gaming Ports The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in this screen: Table 61 Preconfigured Gaming Ports APPLICATION TCP PORTS UDP PORTS XBox 360 3074, 3390, 3932, 5555 1900, 3776, 7777, 88, 3074...
Page 173: Predefined Bandwidth Management Services
Chapter 17 Bandwidth Management Table 62 Management > Bandwidth MGMT > Advanced: Allocation Setup LABEL DESCRIPTION Active Select this check box to turn on this bandwidth management rule. Direction Enter whether you want to apply the rule to uplink or downlink traffic. To LAN applies bandwidth management to traffic from WAN to LAN/ WLAN (i.e., downlink).
Page 174: Services And Port Numbers
Chapter 17 Bandwidth Management Table 63 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION E-Mail Electronic mail consists of messages sent through a computer network to specific groups or individuals. Here are some default ports for e-mail: POP3 - port 110 SMTP - port 25 VoIP (SIP) Sending voice signals over the Internet is called Voice over IP or VoIP.
Page 175: Remote Management
H A P T E R Remote Management 18.1 Overview This chapter provides information on the Remote Management screens. Remote management allows you to determine which services/protocols can access which NBG4115 interface (if any) from which computers. You may manage your NBG4115 from a remote location via: •...
Page 176: Www
Chapter 18 Remote Management Remote Management and NAT When NAT is enabled: • Use the NBG4115’s WAN IP address when configuring from the WAN. • Use the NBG4115’s LAN IP address when configuring from the LAN. System Timeout There is a default system management idle timeout of five minutes (three hundred seconds).
Page 177 Chapter 18 Remote Management LABEL DESCRIPTION Secured Client A secured client is a “trusted” computer that is allowed to communicate IP Address with the NBG4115 using this service. Select All to allow any computer to access the NBG4115 using this service.
Page 178 Chapter 18 Remote Management NBG4115 User’s Guide...
Page 179: Upnp
H A P T E R UPnP 19.1 Overview This chapter introduces the UPnP feature in the Web Configurator. Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
Page 180: General
Chapter 19 UPnP • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
Page 181: Technical Reference
Chapter 19 UPnP The following table describes the labels in this screen. Table 65 Management > UPnP > General LABEL DESCRIPTION Enable the Universal Plug Select this check box to activate UPnP. Be aware that anyone and Play (UPnP) Feature could use a UPnP application to open the Web Configurator's login screen without entering the NBG4115's IP address (although you must still enter the password to access the Web...
Page 182: Using Upnp In Windows Xp Example
Chapter 19 UPnP The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 91 Windows Optional Networking Components Wizard In the Networking Services window, select the Universal Plug and Play check box.
Page 183 Chapter 19 UPnP Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Figure 93 Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Page 184 Chapter 19 UPnP You may edit or delete the port mappings or click Add to manually add port mappings. Figure 95 Internet Connection Properties: Advanced Settings Figure 96 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Page 185 Chapter 19 UPnP Double-click on the icon to display your current Internet connection status. Figure 98 Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG4115 without finding out the IP address of the NBG4115 first. This comes helpful if you do not know the IP address of the NBG4115.
Page 186 Chapter 19 UPnP Select My Network Places under Other Places. Figure 99 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG4115 and select Invoke. The Web Configurator login screen displays. Figure 100 Network Connections: My Network Places NBG4115 User’s Guide...
Page 187 Chapter 19 UPnP Right-click on the icon for your NBG4115 and select Properties. A properties window displays with basic information about the NBG4115. Figure 101 Network Connections: My Network Places: Properties: Example NBG4115 User’s Guide...
Page 188 Chapter 19 UPnP NBG4115 User’s Guide...
Page 189: Netusb
NBG4115 with the rest of the network. NetUSB supports both standard USB devices and 3G USB devices. This ZyXEL device supports both USB v1.0 and v2.0. Mobile 3G 3G is an International Telecommunication Union (ITU) mobile networking standard that provides high-speed connectivity, greater network capacity, and a significantly improved broadcast range to compatible devices.
Page 190: General
Chapter 20 NetUSB For more information on configuring 3G, see Chapter 9 on page 111. 20.2 General Use this screen to configure your NetUSB settings. Click the Management > NetUSB to open the following screen. Figure 102 Management > NetUSB > General The following table describes the labels in this screen.
Page 191: Maintenance And Troubleshooting
Maintenance and Troubleshooting System (193) Logs (199) Tools (201) Sys OP Mode (207) Language (211) Troubleshooting (213)
Page 193: System
H A P T E R System 21.1 Overview This chapter provides information on the System screens. See the chapter about wizard setup for more information on the next few screens. 21.1.1 What You Can Do in this Chapter • Use the General screen (Section 21.2 on page 193) to enter a name to identify the NBG4115 in the network and set the password.
Page 194 Chapter 21 System The following table describes the labels in this screen. Table 67 Maintenance > System > General LABEL DESCRIPTION System Setup System Name System Name is a unique name to identify the NBG4115 in an Ethernet network. It is recommended you enter your computer’s “Computer name”...
Page 195: Time Setting
Chapter 21 System 21.3 Time Setting To change your NBG4115’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the NBG4115’s time based on your local time zone. Figure 104 Maintenance > System > Time Setting he following table describes the labels in this screen.
Page 196 Chapter 21 System Table 68 Maintenance > System > Time Setting LABEL DESCRIPTION New Time This field displays the last updated time from the time server or the last time configured manually. (hh:mm:ss) When you set Time and Date Setup to Manual, enter the new time in this field and then click Apply.
Page 197 Chapter 21 System Table 68 Maintenance > System > Time Setting LABEL DESCRIPTION End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Savings. The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time ends in the United States on the last Sunday of October.
Page 198 Chapter 21 System NBG4115 User’s Guide...
Page 199: Logs
H A P T E R Logs 22.1 Overview This chapter contains information about configuring general log settings and viewing the NBG4115’s logs. Refer to the appendices for example log message explanations. The Web Configurator allows you to look at all of the NBG4115’s logs in one location.
Page 200 Chapter 22 Logs Click Maintenance > Logs to open the View Log screen. Figure 105 Maintenance > Logs > View Log The following table describes the labels in this screen. Table 69 Maintenance > Logs > View Log LABEL DESCRIPTION Refresh Click Refresh to renew the log screen.
Page 201: Tools
H A P T E R Tools 23.1 Overview This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the NBG4115. 23.1.1 What You Can Do in this Chapter • Use the Firmware screen (Section 23.2 on page 202) to upload firmware to your NBG4115.
Page 202: Firmware
Chapter 23 Tools 23.2 Firmware Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a “*.bin” extension, e.g., “NBG4115.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Page 203 Chapter 23 Tools After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG4115 again. Figure 107 Upload Warning The NBG4115 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Page 204: Configuration
Chapter 23 Tools 23.3 Configuration Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 110 Maintenance > Tools > Configuration 23.3.1 Backup Configuration Backup configuration allows you to back up (save) the NBG4115’s current configuration to a file on your computer.
Page 205: Restore Configuration
Chapter 23 Tools 23.3.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your NBG4115. Table 71 Maintenance Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse...
Page 206: Back To Factory Defaults
Chapter 23 Tools If the upload was not successful, the following screen will appear. Click Return to go back to the Configuration screen. Figure 113 Configuration Restore Error 23.3.3 Back to Factory Defaults Pressing the Reset button in this section clears all user-entered configuration information and returns the NBG4115 to its factory defaults.
Page 207: Sys Op Mode
H A P T E R Sys OP Mode 24.1 Overview The Sys OP Mode (System Operation Mode) function lets you configure whether your NBG4115 is a router or AP. You can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device.
Page 208: General
Chapter 24 Sys OP Mode An AP extends one network and so has just one IP address. All Ethernet ports on the AP have the same IP address. To connect to the Internet, another device, such as a router, is required. Figure 116 IP Address in AP Mode 1 IP Internet...
Page 209 Chapter 24 Sys OP Mode • In this mode there are both LAN and WAN ports. The LAN Ethernet and WAN Ethernet ports have different IP addresses. • The DHCP server on your device is enabled and allocates IP addresses to other devices on your local network.
Page 210 Chapter 24 Sys OP Mode NBG4115 User’s Guide...
Page 211: Language
H A P T E R Language 25.1 Overview This chapter shows you how to change the Web Configurator’s display language. 25.2 Language Use this screen to change the language for the Web Configurator display. Click the language you prefer. The Web Configurator language changes after a while without restarting the NBG4115.
Page 212 Chapter 25 Language NBG4115 User’s Guide...
Page 213: Troubleshooting
• Wireless Router/AP Troubleshooting • ZyXEL Share Center Utility Problems 26.2 Power, Hardware Connections, and LEDs The NBG4115 does not turn on. None of the LEDs turn on. Make sure you are using the power adaptor or cord included with the NBG4115.
Page 214: Nbg4115 Access And Login
Chapter 26 Troubleshooting Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adaptor to the NBG4115.
Page 215 Chapter 26 Troubleshooting I forgot the password. The default password is 1234. If this does not work, you have to reset the device to its factory defaults. See Section 26.5 on page 218. I cannot see or access the Login screen in the Web Configurator. Make sure you are using the correct IP address.
Page 216: Internet Access
Chapter 26 Troubleshooting • If your computer is connected to the WAN port or is connected wirelessly, use a computer that is connected to a LAN/ETHERNET port. I can see the Login screen, but I cannot log in to the NBG4115. Make sure you have entered the password correctly.
Page 217 Chapter 26 Troubleshooting • Select Router if your device routes traffic between a local network and another network such as the Internet. • Select Access Point if your device bridges traffic between clients on the same network. If the problem continues, contact your ISP. I cannot access the Internet anymore.
Page 218: Resetting The Nbg4115 To Its Factory Defaults
Chapter 26 Troubleshooting 26.5 Resetting the NBG4115 to Its Factory Defaults If you reset the NBG4115, you lose all of the changes you have made. The NBG4115 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again. You will lose all of your changes when you push the RESET button.
Page 219 Chapter 26 Troubleshooting Check that both the NBG4115 and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG4115. Make sure you allow the NBG4115 to be remotely accessed through the WLAN interface.
Page 220: Zyxel Share Center Utility Problems
I cannot install the ZyXEL Share Center Utility. Make sure that the set up program is one required for your operating system. Install the latest patches and updates for your operating system. Check the zyxel.com download site for a newer version of the utility. NBG4115 User’s Guide...
Page 221: Appendices And Index
Appendices and Index Product Specifications (223) Pop-up Windows, JavaScripts and Java Permissions (227) IP Addresses and Subnetting (235) Setting up Your Computer’s IP Address (245) Wireless LANs (263) Services (275) Legal Information (279) Index (287)
Page 223: Appendix A Product Specifications
P P E N D I X Product Specifications The following tables summarize the NBG4115’s hardware and firmware features. Table 73 Hardware Features Dimensions 140 mm (W) x 110 mm (D) x 30 mm (H) Weight 190 g (without a 3G card installed) SDRAM 32 MB Flash Memory...
Page 224 Bluetooth enabled devices, and other wireless LANs. Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the Web Configurator to put it on the NBG4115. Note: Only upload firmware for your specific model! Configuration Backup &...
Page 225 IP default gateway and DNS servers to computers on your network. Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can use a fixed URL, www.zyxel.com for example, with a dynamic IP address. You must register for this service with a Dynamic DNS service provider. IP Multicast IP Multicast is used to send traffic to a specific group of computers.
Page 226 Appendix A Product Specifications NBG4115 User’s Guide...
Page 227: Appendix B Pop-Up Windows, Javascripts And Java Permissions
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the Web Configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Page 228 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 122 Internet Options: Privacy Click Apply to save this setting.
Page 229 Appendix B Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 123 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. NBG4115 User’s Guide...
Page 230 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 124 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the Web Configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 231 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 125 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Page 232: Java Permissions
Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 126 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Page 233 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 127 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. NBG4115 User’s Guide...
Page 234 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 128 Java (Sun) NBG4115 User’s Guide...
Page 235: Appendix C Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 236: Subnet Masks
Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 129 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Page 237 Appendix C IP Addresses and Subnetting Table 75 Subnet Mask - Identifying Network Number OCTET: OCTET: OCTET: OCTET (192) (168) Network Number 11000000 10101000 00000001 Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits.
Page 238 Appendix C IP Addresses and Subnetting As these two IP addresses cannot be used for individual hosts, calculate the maximum number of possible hosts in a network as follows: Table 77 Maximum Host Numbers MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0...
Page 239 Appendix C IP Addresses and Subnetting Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons. In this example, the company network address is 192.168.1.0.
Page 240 Appendix C IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 131 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of –...
Page 241 Appendix C IP Addresses and Subnetting Each subnet contains 6 host ID bits, giving 2 - 2 or 62 hosts for each subnet (a host ID of all zeroes is the subnet itself, all ones is the subnet’s broadcast address). Table 79 Subnet 1 LAST OCTET BIT IP/SUBNET MASK...
Page 242 Appendix C IP Addresses and Subnetting Table 82 Subnet 4 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111).
Page 243 Appendix C IP Addresses and Subnetting The following table is a summary for subnet planning on a network with a 16-bit network number. Table 85 16-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK HOST BITS SUBNETS SUBNET 255.255.128.0 (/17) 32766...
Page 244 Appendix C IP Addresses and Subnetting that you entered. You don't need to change the subnet mask computed by the NBG4115 unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
Page 245: Appendix D Setting Up Your Computer's Ip Address
P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
Page 246 Appendix D Setting up Your Computer’s IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 132 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks.
Page 247 Appendix D Setting up Your Computer’s IP Address Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers.
Page 248 Appendix D Setting up Your Computer’s IP Address Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 134 Windows 95/98/Me: TCP/IP Properties: DNS Configuration Click the Gateway tab.
Page 249 Appendix D Setting up Your Computer’s IP Address Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 135 Windows XP: Start Menu NBG4115 User’s Guide...
Page 250 Appendix D Setting up Your Computer’s IP Address In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT). Figure 136 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 137 Windows XP: Control Panel: Network Connections: Properties NBG4115 User’s Guide...
Page 251 Appendix D Setting up Your Computer’s IP Address Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 138 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Page 252 Appendix D Setting up Your Computer’s IP Address • Click Advanced. Figure 139 Windows XP: Internet Protocol (TCP/IP) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Page 253 Appendix D Setting up Your Computer’s IP Address • Click OK when finished. Figure 140 Windows XP: Advanced TCP/IP Properties In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 254 Appendix D Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 141 Windows XP: Internet Protocol (TCP/IP) Properties Click OK to close the Internet Protocol (TCP/IP) Properties window. Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window.
Page 255 Appendix D Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 142 Macintosh OS 8/9: Apple Menu NBG4115 User’s Guide...
Page 256 Appendix D Setting up Your Computer’s IP Address Select Ethernet built-in from the Connect via list. Figure 143 Macintosh OS 8/9: TCP/IP For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: •...
Page 257: Macintosh Os X
Appendix D Setting up Your Computer’s IP Address Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 144 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. •...
Page 258 Appendix D Setting up Your Computer’s IP Address For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. •...
Page 259 Appendix D Setting up Your Computer’s IP Address Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 147 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list.
Page 260 Appendix D Setting up Your Computer’s IP Address Click the Devices tab. Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 149 Red Hat 9.0: KDE: Network Configuration: Activate After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen.
Page 261 Appendix D Setting up Your Computer’s IP Address • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
Page 262: Verifying Settings
Appendix D Setting up Your Computer’s IP Address 26.7.1 Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 154 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500...
Page 263: Appendix E Wireless Lans
P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS).
Page 264 Appendix E Wireless LANs with each other. When Intra-BSS is disabled, wireless station A and B can still access the wired network but cannot communicate with each other. Figure 156 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network.
Page 265 Appendix E Wireless LANs An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless stations within the same ESS must have the same ESSID in order to communicate. Figure 157 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area.
Page 266 Appendix E Wireless LANs wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. Figure 158 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel.
Page 267: Fragmentation Threshold
Appendix E Wireless LANs Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference.
Page 268 Appendix E Wireless LANs several intermediate rate steps between the maximum and minimum data rates. The IEEE 802.11g data rate and modulation are as follows: Table 86 IEEE 802.11g DATA RATE MODULATION (MBPS) DBPSK (Differential Binary Phase Shift Keyed) DQPSK (Differential Quadrature Phase Shift Keying) 5.5 / 11 CCK (Complementary Code Keying) 6/9/12/18/24/36/...
Page 269: Types Of Authentication
Appendix E Wireless LANs Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. •...
Page 270 Appendix E Wireless LANs However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the authentication server may access the password file. In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication.
Page 271 Appendix E Wireless LANs If this feature is enabled, it is not necessary to configure a default encryption key in the Wireless screen. You may still configure and store keys here, but they will not be used while Dynamic WEP is enabled. Note: EAP-MD5 cannot be used with dynamic WEP key exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption.
Page 272 Appendix E Wireless LANs TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
Page 273: Wpa(2)-Psk Application Example
Appendix E Wireless LANs 26.7.2 WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters (including spaces and symbols).
Page 274: Security Parameters Summary
Appendix E Wireless LANs Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features. Table 88 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY...
Page 275: Appendix F Services
A popular videoconferencing solution from White Pines Software. TCP/UDP 24032 TCP/UDP Domain Name Server, a service that matches web names (e.g. www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation (IPSEC_TUNNEL) Security Protocol) tunneling protocol uses this service. FINGER Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
Page 276 Appendix F Services Table 89 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world...
Page 277 Appendix F Services Table 89 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). POP3S This is a more secure version of POP3 that runs over SSL.
Page 278 Appendix F Services Table 89 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server.
Page 279: Appendix G Legal Information
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice.
Page 280 Appendix G Legal Information harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this device does cause harmful interference to radio/television reception, which can be determined by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna.
Page 281 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications Go to http://www.zyxel.com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. NBG4115 User’s Guide...
Page 282: Zyxel Limited Warranty
Appendix G Legal Information ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should...
Page 283 Software as long as this License Agreement remains in full force and effect. Ownership of the Software, Documentation and all intellectual property rights therein shall remain at all times with ZyXEL. Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement.
Page 284 Software (ftp://opensource.zyxel.com), and your use of such material is governed by their respective terms. ZyXEL has provided, as part of the Software package, access to certain third party software as a convenience.
Page 285 Appendix G Legal Information IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, INDIRECT, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES FOR LOSS OF BUSINESS, LOSS OF PROFITS, BUSINESS INTERRUPTION, OR LOSS OF BUSINESS...
Page 286 Software and Documentation shall not be assigned by you without the prior written consent of ZyXEL. Any waiver or modification of this License Agreement shall only be effective if it is in writing and signed by both parties hereto.
Page 287: Index
Index Index content filtering by keyword (in URL) copyright Address Assignment CPU usage alternative subnet mask notation 41, 67 CTS (Clear to Send) AP (Access Point) AP Mode menu overview status screen Daylight saving AP+Bridge DDNS Auto-bridge see also Dynamic DNS service providers DHCP 44, 129...
Page 288 Internet connection guidelines Ethernet ICMP packets PPPoE. see also PPP over Ethernet network security PPTP Stateful inspection WAN connection ZyXEL device firewall Internet connection wizard firewall Internet Group Multicast Protocol stateful inspection IP Address 127, 138, 139 Firmware upload IP address...
Page 289 Index and encryption Local Area Network Operating Channel 41, 67 operating mode MAC address 93, 113 cloning 62, 113 MAC address filter peer-to-peer MAC address filtering Point-to-Point Protocol over Ethernet 55, 116 MAC filter Point-to-Point Tunneling Protocol 56, 118 managing the device Pool Size good habits Port forwarding...
Page 290 Index registration syntax conventions product Sys Op Mode related documentation System General Setup Remote management System Name and NAT System name limitations vs computer name system timeout System restart Reset button 39, 206 Reset the device Restore configuration RF (Radio Frequency) Roaming TCP/IP configuration RTS (Request To Send)
Page 291 Index WAN (Wide Area Network) WPA, WPA2 WAN advanced WAN IP address 106, 173 WAN IP address assignment WAN MAC address warranty note Web Configurator Xbox Live how to access Overview Web configurator navigating web configurator WEP Encryption WEP encryption WEP key Wildcard Wireless association list...
Page 292 Index NBG4115 User’s Guide...

This manual is also suitable for:

Nbg4115

ZyXEL Communications NBG4115 - V1.0 Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

Introduction

PART I Introduction

Chapter 1 Introduction

Chapter 2 The WPS Button

Chapter 3 Zyxel Share Center Utility

Chapter 4

The Web Configurator

Chapter 5 Connection Wizard

Chapter 6 AP Mode

Chapter 7 Tutorials

Network

Part II: Network

Chapter 8 Wireless LAN

Chapter 9 WAN

Chapter 10 LAN

Chapter 11 DHCP Server

Chapter 12 NAT

Chapter 13 DDNS

Part III: Security

Security

Chapter 14 Firewall

Chapter 15 Content Filtering

Part IV: Management

Management

Chapter 16 Static Route

Chapter 17 Bandwidth Management

Chapter 18 Remote Management

Chapter 19 Upnp

Chapter 20 Netusb

Part V: Maintenance and Troubleshooting

Maintenance and Troubleshooting

Chapter 21 System

Chapter 22 Logs

Chapter 23 Tools

Chapter 24 Sys OP Mode

Chapter 25 Language

Chapter 26 Troubleshooting

Part VI: Appendices and Index

Appendices and Index

Appendix A Product Specifications

Appendix B Pop-Up Windows, Javascripts and Java Permissions

Appendix C IP Addresses and Subnetting

Appendix D Setting up Your Computer's IP Address

Appendix E Wireless Lans

Appendix F Services

Appendix G Legal Information

Index

Quick Links

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications NBG4115 - V1.0

Summary of Contents for ZyXEL Communications NBG4115 - V1.0