Page 1 NBG-417N Wireless N-lite Home Router Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 1.0 Edition 4, 10/2011 www.zyxel.com www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...
Page 3: About This User's Guide
User’s Guide PDF. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG-417N up and running right away. It contains information on setting up your network and configuring for Internet access. • Supporting Disc The embedded Web Help contains descriptions of individual screens and supplementary information.
Page 4 If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following information ready when you contact an office. • Product model and serial number. • Warranty Information. • Date that you received your device. NBG-417N User’s Guide...
Page 5: Document Conventions
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”. Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The NBG-417N icon is not an exact representation of your device.
Page 6 Document Conventions Server Modem Firewall Telephone Switch Router NBG-417N User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. NBG-417N User’s Guide...
Page 8 Safety Warnings NBG-417N User’s Guide...
Page 9: Table Of Contents
Contents Overview Contents Overview User’s Guide ............................19 Getting to Know Your NBG-417N ......................21 The WPS Button .............................24 Introducing the Web Configurator ......................25 Connection Wizard ..........................35 AP Mode ..............................49 Tutorials ..............................55 Technical Reference ..........................67 Wireless LAN ............................69 WAN ................................91 LAN ...............................103 DHCP Server ............................107...
Page 10 Contents Overview NBG-417N User’s Guide...
Page 11: Table Of Contents
Chapter 1 Getting to Know Your NBG-417N ......................21 1.1 Overview ............................21 1.2 Applications ............................21 1.3 Ways to Manage the NBG-417N .......................22 1.4 Good Habits for Managing the NBG-417N ..................22 1.5 LEDs ..............................22 Chapter 2 The WPS Button..........................24 2.1 Overview ............................24 Chapter 3 Introducing the Web Configurator ....................25...
Page 12 6.1 Overview ............................55 6.2 How to Connect to the Internet from an AP ..................55 6.2.1 Configure Wireless Security Using WPS on both your NBG-417N and Wireless Client ..55 6.2.2 Enable and Configure Wireless Security without WPS on your NBG-417N ......59 6.3 Bandwidth Management for your Network ..................62...
Page 13 8.4.3 PPTP Encapsulation ........................98 8.5 Advanced WAN Screen ........................100 Chapter 9 LAN ..............................103 9.1 Overview ............................103 9.2 What You Can Do ...........................103 9.3 What You Need To Know ........................104 9.3.1 IP Pool Setup .........................104 9.3.2 LAN TCP/IP ...........................104 NBG-417N User’s Guide...
Page 14 12.4 Dynamic DNS Screen .........................122 Chapter 13 Firewall ..............................125 13.1 Overview .............................125 13.2 What You Can Do .........................125 13.3 What You Need To Know ......................126 13.3.1 About the NBG-417N Firewall .....................126 13.4 General Firewall Screen ......................126 13.5 Services Screen .........................127 Chapter 14 Content Filtering ..........................129...
Page 15 18.1 Overview ............................146 18.2 What You Can Do .........................146 18.3 What You Need to Know .......................146 18.4 UPnP Screen ..........................147 18.5 Technical Reference ........................148 18.5.1 Using UPnP in Windows XP Example .................148 18.5.2 Web Configurator Easy Access ...................150 NBG-417N User’s Guide...
Page 16 23.1 Language Screen ..........................167 Chapter 24 Troubleshooting..........................169 24.1 Power, Hardware Connections, and LEDs ..................169 24.2 NBG-417N Access and Login .......................170 24.3 Internet Access ..........................171 24.4 Resetting the NBG-417N to Its Factory Defaults ................173 24.5 Wireless Router/AP Troubleshooting ....................173 NBG-417N User’s Guide...
Page 17 Appendix A IP Addresses and Subnetting..................179 Appendix B Pop-up Windows, JavaScripts and Java Permissions..........189 Appendix C Setting Up Your Computer’s IP Address ..............201 Appendix D Wireless LANs......................229 Appendix E Services........................243 Appendix F Open Software Announcements...................247 Appendix G Legal Information ......................273 Index ..............................281 NBG-417N User’s Guide...
Page 18 Table of Contents NBG-417N User’s Guide...
Page 19: User's Guide
User’s Guide...
Page 21: Getting To Know Your Nbg-417N
1.2 Applications Your can create the following networks using the NBG-417N: • Wired. You can connect network devices via the Ethernet ports of the NBG-417N so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG-417N to access network resources.
Page 22: Ways To Manage The Nbg-417N
If you forget your password, you will have to reset the NBG-417N to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG-417N.
Page 23 LAN. Blinking The NBG-417N is sending/receiving data through the wireless LAN. The NBG-417N is negotiating a WPS connection with a wireless client. The wireless LAN is not ready or has failed. Green The NBG-417N has a successful 10/100MB WAN connection.
Page 24: The Wps Button
The WPS Button 2.1 Overview Your NBG-417N supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually.
Page 25: Introducing The Web Configurator
H A PT ER Introducing the Web Configurator 3.1 Overview This chapter describes how to access the NBG-417N Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG-417N via Internet browser.
Page 26 • Click Go to Wizard Setup to use the Configuration Wizard for basic Internet and Wireless setup. • Click Go to Advanced Setup to view and configure all the NBG-417N’s settings. • Select a language to go to the basic Web Configurator in that language. To change to the...
Page 27: Resetting The Nbg-417N
Make sure the power LED is on. Press the RESET button for longer than 1 second to restart/reboot the NBG-417N. Press the RESET button for longer than five seconds to set the NBG-417N back to its factory- default configurations. 3.4 Navigating the Web Configurator The following summarizes how to navigate the Web Configurator from the Status screen in Router Mode and AP Mode.
Page 28 LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen. It is for identification purposes. Firmware Version This is the firmware version and the date created. NBG-417N User’s Guide...
Page 29 This displays what percentage of the NBG-417N’s processing ability is currently used. When this percentage is close to 100%, the NBG-417N is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications.
Page 30: Navigation Panel
Use this screen to view the wireless stations that are currently associated to the NBG-417N. 3.5.1 Navigation Panel Use the sub-menus on the navigation panel to configure NBG-417N features. The following table describes the sub-menus. Table 4 Screens Summary LINK...
Page 31: Summary: Dhcp Table
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG-417N’s LAN as a DHCP server or disable it. When configured as a server, the NBG-417N provides the TCP/IP configuration for the clients.
Page 32: Summary: Packet Statistics
Click the DHCP Table (Details...) hyperlink in the Status screen. Read-only information here relates to your DHCP status. The DHCP table shows current DHCP client information (including IP Address, Host Name and MAC Address) of all network clients using the NBG-417N’s DHCP server.
Page 33: Summary: Wlan Station Status
Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG-417N in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings.
Page 34 Chapter 3 Introducing the Web Configurator NBG-417N User’s Guide...
Page 35: Connection Wizard
Leave a field blank if you don’t have that information. After you access the NBG-417N Web Configurator, click the Go to Wizard setup hyperlink. You can click Go to Advanced setup hyperlink to skip this wizard setup and configure basic or advanced features accordingly.
Page 36: Connection Wizard: Step 1: System Information
The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the NBG-417N via DHCP. NBG-417N User’s Guide...
Page 37: Connection Wizard: Step 2: Wireless Lan
DESCRIPTION System Name System Name is a unique name to identify the NBG-417N in an Ethernet network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted.
Page 38: Extend (Wpa-Psk Or Wpa2-Psk) Security
Name (SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the NBG-417N, make sure all wireless stations use the same SSID in order to access the network. Security Select a Security level from the drop-down list box.
Page 39: Connection Wizard: Step 3: Internet Configuration
Click Exit to close the wizard screen without saving. 4.4 Connection Wizard: STEP 3: Internet Configuration The NBG-417N offers three Internet connection types. They are Ethernet, PPP over Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box.
Page 40: Ethernet Connection
By implementing PPPoE directly on the NBG-417N (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG-417N does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Page 41: Pptp Connection
PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. Refer to the appendix for more information on PPTP. Note: The NBG-417N supports one PPTP server connection at any given time. Figure 18 Wizard Step 3: PPTP Connection NBG-417N User’s Guide...
Page 42: Your Ip Address
Click Exit to close the wizard screen without saving. 4.4.4 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG-417N an automatically assigned IP address depending on your ISP. Figure 19 Wizard Step 3: Your IP Address...
Page 43: Wan Ip Address Assignment
Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to NBG-417N User’s Guide...
Page 44: Dns Server Address Assignment
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your NBG-417N, but make sure that no other device on your network is using that IP address.
Page 45: Wan Mac Address
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG-417N uses a system DNS server (in the order you specify here) to resolve domain names for DDNS and the time server.
Page 46 Select this option and enter the MAC address you want to use. Address Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. NBG-417N User’s Guide...
Page 47: Connection Wizard Complete
Chapter 4 Connection Wizard 4.5 Connection Wizard Complete Click Finish to complete the wizard setup. Figure 22 Connection Wizard Complete Well done! You have successfully set up your NBG-417N to operate on your network and access the Internet. NBG-417N User’s Guide...
Page 48 Chapter 4 Connection Wizard NBG-417N User’s Guide...
Page 49: Ap Mode
AP mode. Use your NBG-417N as an AP if you already have a router or gateway on your network. In this mode your device bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example.
Page 50: Status Screen (Ap Mode)
Chapter 5 AP Mode To set your NBG-417N to AP Mode, go to Maintenance > Sys OP Mode > General and select Access Point. Figure 24 Maintenance > Sys OP Mode > General A pop-up appears providing information on this mode. Click OK in the pop-up message window.
Page 51 - 802.11 Mode This shows the IEEE 802.11 standard that the NBG-417N supports. Wireless clients must support the same standard in order to be able to connect to the NBG-417N - WPS This shows the WPS (WiFi Protected Setup) Status. Click the status to display Network >...
Page 52: Navigation Panel
Use this screen to view the wireless stations that are currently associated to the NBG-417N. 5.3.1 Navigation Panel Use the menu in the navigation panel to configure NBG-417N features in AP Mode. The following screen and table show the features you can configure in AP Mode. Figure 26 Menu: AP Mode The following table describes the sub-menus.
Page 53: Configuring Your Settings
5.4.1 LAN Settings Click Network > LAN to see the screen below. Note: If you change the IP address of the NBG-417N in the screen below, you will need to log into the NBG-417N again using the new IP address.
Page 54: Wlan And Maintenance Settings
5.5 Logging in to the Web Configurator in AP Mode Connect your computer to the LAN port of the NBG-417N. The default IP address of the NBG-417N is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”.
Page 55: Tutorials
This section gives you an example of how to set up wireless network using WPS. This example uses the NBG-417N as the AP and NWD210N as the wireless client which connects to a notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCI card).
Page 56 Log into NBG-417N’s Web Configurator and press the Push Button button in the Network > Wireless Client > WPS Station screen. Note: Your NBG-417N has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other.
Page 57 SECURITY INFO COMMUNICATION 6.2.1.2 PIN Configuration When you use the PIN configuration method, you need to use both NBG-417N’s configuration interface and the client’s utilities. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
Page 58 Chapter 6 Tutorials The following figure shows you the example to set up wireless network and security on NBG-417N and wireless client (ex. NWD210N in this example) by using PIN method. Figure 30 Example WPS Process: PIN Method Wireless Client...
Page 59: Enable And Configure Wireless Security Without Wps On Your Nbg-417N
WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) Follow the steps below to configure the wireless settings on your NBG-417N. The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 3.2 on page...
Page 60 Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG-417N supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 61 Figure 33 Connecting a Wireless Client to a Wireless Network t Select WPA-PSK and type the security key in the following screen. Click Next. Figure 34 Security Settings The Confirm Save window appears. Check your settings and click Save to continue. Figure 35 Confirm Save NBG-417N User’s Guide...
Page 62: Bandwidth Management For Your Network
6.3 Bandwidth Management for your Network This section shows you how to configure the bandwidth management feature on the NBG-417N to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you to specify bandwidth management rules based on an application or subnet.
Page 63: Configuring Bandwidth Management By Custom Application
Enable if you need these services and set the priority to Low. Note: You can also leave the Enable field blank for the rest of the applications. In doing so, the NBG-417N does not apply bandwidth management to these services. 6.3.2 Configuring Bandwidth Management by Custom Application Aside from the VOIP and e-mail services, you need to set the priority for MSN Messenger.
Page 64: Configuring Bandwidth Allocation By Ip Or Ip Range
Check this to turn on this bandwidth management rule. Direction Select Both applies bandwidth management to traffic that the Select To WAN NBG-417N forwards to both the LAN and the WAN. LAN IP Range Enter 192.168.1.1 ~ 192.168.1.33. Enter 192.168.1.34...
Page 65 Note: The Policy column displays either Max (maximum) or Min (minimum). This is directly directed to the value in the Rate column. For example, you selected Min and entered 30M as the rate for the VoIP service. The NBG-417N allocates at least 30 megabytes for the VoIP service.
Page 66 Chapter 6 Tutorials NBG-417N User’s Guide...
Page 67: Technical Reference
Technical Reference...
Page 69: Wireless Lan
H A PT ER Wireless LAN 7.1 Overview This chapter discusses how to configure the wireless network settings in your NBG-417N. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network.
Page 70: What You Should Know
• Use the WDS screen (Section 7.11 on page 85) to set the operating mode of your NBG-417N to AP + Bridge or Bridge Only and establish wireless links with other APs. 7.3 What You Should Know Every wireless network must follow these basic guidelines.
Page 71 Static WEP, WPA-PSK, or WPA2-PSK. Usually, you should set up the strongest encryption that every wireless client in the wireless network supports. For example, suppose the AP does not have a local user database, and you do NBG-417N User’s Guide...
Page 72: General Wireless Lan Screen
When you select WPA2 or WPA2-PSK in your NBG-417N, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the NBG-417N.
Page 73 Channel Channel Width Select whether the NBG-417N uses a wireless channel width of 20 or 40 MHz. A standard 20 MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps.
Page 74: No Security
Both the wireless stations and the access points must use the same WEP key. Your NBG-417N allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time.
Page 75 ASCII Select this option in order to enter ASCII characters as WEP key. Select this option in order to enter hexadecimal characters as a WEP key. The preceding "0x", that identifies a hexadecimal key, is entered automatically. NBG-417N User’s Guide...
Page 76: Wpa-Psk/Wpa2-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NBG-417N and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 77: Mac Filter
Click Reset to reload the previous configuration for this screen. 7.5 MAC Filter The MAC filter screen allows you to configure the NBG-417N to give exclusive access to up to 16 devices (Allow) or exclude up to 16 devices from accessing the NBG-417N (Deny). Every Ethernet device has a unique MAC (Media Access Control) address.
Page 78: Wireless Lan Advanced Screen
Filter Action Define the filter action for the list of MAC addresses in the MAC Address table. Select Deny to block access to the NBG-417N, MAC addresses not listed will be allowed to access the NBG-417N Select Allow to permit access to the NBG-417N, MAC addresses not listed will be denied access to the NBG-417N.
Page 79: Quality Of Service (Qos) Screen
When set to Always, the NBG-417N improves performance within mixed wireless modes. Select Auto to let the NBG-417N determine whether to turn this feature on or off in the current environment. Tx Power This field controls the transmission power of the NBG-417N. When using the NBG- 417N with a notebook computer, select a lower transmission power level when you are close to the AP in order to conserve battery power.
Page 80 DESCRIPTION WMM QoS Policy Select Default to have the NBG-417N automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Page 81: Application Priority Configuration
Click the Remove icon to delete an application entry. Apply Click Apply to save your changes to the NBG-417N. 7.7.1 Application Priority Configuration Use this screen to edit a WMM QoS application entry. Click the edit icon under Modify. The following screen displays.
Page 82 Priority Select a priority from the drop-down list box. Apply Click Apply to save your changes back to the NBG-417N. Cancel Click Cancel to return to the previous screen. NBG-417N User’s Guide...
Page 83: Wps Screen
PIN number. WPS Status Status This displays Configured when the NBG-417N has connected to a wireless network using WPS or when Enable WPS is selected and wireless or wireless security settings have been changed. The current wireless and wireless security settings also appear in the screen.
Page 84 PIN number wireless station’s wireless settings. See Section 6.2.1.2 on page Type the same PIN number generated in the wireless station’s utility. Then click Start to associate to each other and perform the wireless security information synchronization. NBG-417N User’s Guide...
Page 85: Scheduling Screen
Click Reset to reload the previous configuration for this screen. 7.11 WDS Screen A Wireless Distribution System is a wireless connection between two or more APs. Use this screen to set the operating mode of your NBG-417N to AP + Bridge or Bridge Only and establish NBG-417N User’s Guide...
Page 86 This is the MAC address of your NBG-417N. Address Remote MAC This is the MAC address of the peer device that your NBG-417N wants to make a Address bridge connection with. You can connect to up to 4 peer devices.
Page 87: Security Mode: Static Wep
Click Refresh to reload the previous configuration for this screen. 7.11.1 Security Mode: Static WEP Use this screen to configure the Static WEP security for your NBG-417N when it is in AP + Bridge or Bridge Only mode. Figure 54 Network > Wireless LAN > WDS (Static WEP)
Page 88: Security Mode: Wpa-Psk/Wpa2-Psk
The default key is key 1. 7.11.2 Security Mode: WPA-PSK/WPA2-PSK Use this screen to configure the WPA-PSK or WPA2-PSK security for your NBG-417N when it is in AP + Bridge or Bridge Only mode. Figure 55 Network > Wireless LAN > WDS (WPA-PSK/WPA2-PSK)
Page 89 Table 35 on page 86 for descriptions of other fields in this screen. Table 37 Network > Wireless LAN > WDS (WPA-PSK/WPA2-PSK) LABEL DESCRIPTION Pre-Shared Key Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces and symbols). NBG-417N User’s Guide...
Page 90 Chapter 7 Wireless LAN NBG-417N User’s Guide...
Page 91: Wan
H A PT ER 8.1 Overview This chapter discusses the NBG-417N’s WAN screens. Use these screens to configure your NBG- 417N for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 92: Configuring Your Internet Connection
(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG-417N, which makes it accessible from an outside network. It is used by the NBG-417N to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG-417N tries to access the Internet.
Page 93: Multicast
A and D. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The NBG-417N supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
Page 94: Auto-Bridge
8.3.4 Auto-Bridge In the rear panel of your NBG-417N, you can see four LAN ports (1 to 4) and one WAN port. The WAN port is for your Internet access connection, and the LAN ports are for your network devices.
Page 95 Enter your WAN IP address in this field if you selected Use Fixed IP Address. IP Subnet Enter the IP Subnet Mask in this field. Mask Gateway IP Enter a Gateway IP Address (if your ISP gave you one) in this field. Address DNS Servers NBG-417N User’s Guide...
Page 96: Pppoe Encapsulation
By implementing PPPoE directly on the NBG-417N (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG-417N does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 97 Nailed-Up Select Nailed-Up Connection if you do not want the connection to time out. Connection Idle Timeout This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. DNS Servers NBG-417N User’s Guide...
Page 98: Pptp Encapsulation
DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG-417N's WAN IP address). The field to the right displays the (read-only) DNS Second DNS server IP address that the ISP assigns. Server Select User-Defined if you have the IP address of a DNS server.
Page 99 Virtual Private Network (VPN) using TCP/IP-based networks. PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. The NBG-417N supports only one PPTP server connection at any given time. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection.
Page 100: Advanced Wan Screen
DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG-417N's WAN IP address). The field to the right displays the Second DNS Server (read-only) DNS server IP address that the ISP assigns.
Page 101 Chapter 8 WAN Note: The three categories shown in this screen are independent of each other. To change your NBG-417N’s advanced WAN settings, click Network > WAN > Advanced. The screen appears as shown. Figure 62 Network > WAN > Advanced The following table describes the labels in this screen.
Page 102 Chapter 8 WAN NBG-417N User’s Guide...
Page 103: Lan
Figure 63 LAN Setup The LAN screens can help you configure a LAN DHCP server and manage IP addresses. 9.2 What You Can Do Use the IP screen (Section 9.4 on page 105) to change your basic LAN settings. NBG-417N User’s Guide...
Page 104: What You Need To Know
Figure 64 LAN and WAN IP Addresses The LAN parameters of the NBG-417N are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) • DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
Page 105: Lan Ip Screen
Table 42 Network > LAN > IP LABEL DESCRIPTION IP Address Type the IP address of your NBG-417N in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your NBG-417N will automatically calculate the subnet mask based on the IP address that you assign.
Page 106 Chapter 9 LAN NBG-417N User’s Guide...
Page 107: Dhcp Server
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG-417N’s LAN as a DHCP server or disable it. When configured as a server, the NBG-417N provides the TCP/IP configuration for the clients.
Page 108: General Screen
Leave the Enable DHCP Server check box selected unless your ISP instructs you to do otherwise. Clear it to disable the NBG- 417N acting as a DHCP server. When configured as a server, the NBG-417N provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured.
Page 109 Chapter 10 DHCP Server To change your NBG-417N’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays. Figure 67 Network > DHCP Server > Advanced The following table describes the labels in this screen. Table 44 Network > DHCP Server > Advanced...
Page 110: Client List Screen
LAN IP address displays in the field to the right (read-only). The NBG-417N tells the DHCP clients on the LAN that the NBG-417N itself is the DNS server. When a computer on the LAN sends a DNS query to the NBG-417N, the NBG- 417N forwards the query to the NBG-417N's system DNS server (configured in the WAN >...
Page 111 Reserve Select this check box in the DHCP Setup section to have the NBG-417N always assign the IP address(es) to the MAC address(es) (and host name(s)). After you click Apply, the MAC address and IP address also display in the Advanced screen (where you can edit them).
Page 112 Chapter 10 DHCP Server NBG-417N User’s Guide...
Page 113: Network Address Translation (Nat)
It replaces the original IP source address in each packet and then forwards it to the Internet. The NBG-417N keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Page 114: General Nat Screen
Application screen. If you do not assign a Default Server IP address, the NBG-417N discards all packets received for ports that are not specified in the Application screen or remote management.
Page 115 Application. The screen appears as shown. Note: If you do not assign a Default Server IP address in the NAT > General screen, the NBG-417N discards all packets received for ports that are not specified in this screen or remote management.
Page 116 This field displays the inside IP address of the server. Modify Click the Edit icon to display and modify an existing rule setting in the fields under Add Application Rule. Click the Remove icon to delete a rule. NBG-417N User’s Guide...
Page 117: Nat Advanced Screen
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The NBG-417N records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the NBG-417N's WAN port receives a response with a specific port number and protocol ("incoming"...
Page 118: Trigger Port Forwarding Example
Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the NBG-417N to record Jane’s computer IP address. The NBG-417N associates Jane's computer IP address with the "incoming" port range of 6970-7170.
Page 119 Chapter 11 Network Address Translation (NAT) If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it. NBG-417N User’s Guide...
Page 120 Chapter 11 Network Address Translation (NAT) NBG-417N User’s Guide...
Page 121: Dynamic Dns
Use the Dynamic DNS screen (Section 12.4 on page 122) to enable DDNS and configure the DDNS settings on the NBG-417N. 12.3 What You Need To Know Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.).
Page 122: Dynamic Dns Screen
Chapter 12 Dynamic DNS 12.4 Dynamic DNS Screen To change your NBG-417N’s DDNS, click Network > DDNS. The screen appears as shown. Figure 74 Network > Dynamic DNS The following table describes the labels in this screen. Table 49 Network > Dynamic DNS...
Page 123 Type the IP address of the host name(s). Use this if you have a static IP Address address. Apply Click Apply to save your changes back to the NBG-417N. Reset Click Reset to begin configuring this screen afresh. NBG-417N User’s Guide...
Page 124 Chapter 12 Dynamic DNS NBG-417N User’s Guide...
Page 125: Firewall
Firewall 13.1 Overview Use these screens to enable and configure the firewall that protects your NBG-417N and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 126: What You Need To Know
Service attacks when activated (click the General tab under Firewall and then click the Enable Firewall check box). The NBG-417N's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG-417N can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 127: Services Screen
Click Reset to start configuring this screen again. 13.5 Services Screen If an outside user attempts to probe an unsupported port on your NBG-417N, an ICMP response packet is automatically returned. This allows the outside user to know the NBG-417N exists. Use this screen to prevent the ICMP response packet from being sent.
Page 128 Select this option to prevent hackers from finding the NBG-417N by probing for requests for unused ports. If you select this option, the NBG-417N will not respond to port unauthorized request(s) for unused ports, thus leaving the unused ports and the NBG-417N services unseen.
Page 129: Content Filtering
14.3.1 Content Filtering Profiles A content filtering profile conveniently stores your custom settings for the following features. Restrict Web Features The NBG-417N can disable web proxies and block web features such as ActiveX controls, Java applets and cookies. Keyword Blocking URL Checking The NBG-417N checks the URL’s domain name (or IP address) and file path separately when...
Page 130: Filter Screen
Chapter 14 Content Filtering Since the NBG-417N checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the NBG-417N would find “tw” in the domain name (www.zyxel.com.tw). It would also find “news”...
Page 131: Technical Reference
By default, the NBG-417N checks the URL’s domain name or IP address when performing keyword blocking. This means that the NBG-417N checks the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw.
Page 132 Chapter 14 Content Filtering NBG-417N User’s Guide...
Page 133: Static Route
NBG-417N has no knowledge of the networks beyond. For instance, the NBG-417N knows about network N2 in the following figure through remote node Router 1. However, the NBG-417N is unable to route a packet to network N3 because it doesn't know that there is a route through the same remote node Router 1 (via gateway Router 2).
Page 134: Ip Static Route Screen
This is the IP address of the gateway. The gateway is an immediate neighbor of your NBG-417N that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG-417N; over the WAN, the gateway must be the IP address of one of the remote nodes.
Page 135: Static Route Setup Screen
Enter the IP address of the gateway. The gateway is an immediate neighbor of Address your NBG-417N that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG-417N; over the WAN, the gateway must be the IP address of one of the Remote Nodes.
Page 136: Bandwidth Management
• Use the General screen (Section 16.4 on page 137) to enable bandwidth management and assign uplink/downlink limits. • Use the Advanced screen (Section 16.5 on page 138) to configure bandwidth management rules for the pre-defined services and applications. NBG-417N User’s Guide...
Page 137: What You Need To Know
Note: You cannot apply both bandwidth management types at the same time. Click Management > Bandwidth MGMT to open the bandwidth management General screen. Figure 83 Management > Bandwidth MGMT > General NBG-417N User’s Guide...
Page 138: Advanced Configuration
Table 55 Management > Bandwidth MGMT > General LABEL DESCRIPTION Service Management Bandwidth This field allows you to have NBG-417N apply bandwidth management. Management Type Select Priority Queue or Bandwidth Allocation to enable bandwidth management. • Select Priority Queue to allocate bandwidth based on the pre-defined priority assigned to an application.
Page 139 Use this table to allocate specific amounts of bandwidth based on the pre- defined service. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG-417N apply this bandwidth management rule. Service This is the name of the service.
Page 140: Priority Levels
Traffic with a higher priority gets through faster while traffic with a lower priority is dropped if the network is congested. The following describes the priorities that you can apply to traffic that the NBG-417N forwards out through an interface.
Page 141: User Defined Service Rule Configuration
To WAN applies bandwidth management to traffic from LAN/WLAN to WAN (i.e., uplink). Select Both applies bandwidth management to traffic that the NBG-417N forwards to both the LAN and the WAN. LAN IP Range Specify the range of IP addresses for which the bandwidth management rule applies.
Page 142: Predefined Bandwidth Management Services
Online gaming services lets you play multiplayer games on the Internet via broadband technology. One example is Microsoft’s Xbox Live, which uses port 3074. As of this writing, your NBG-417N supports Xbox, Playstation, Battlenet and MSN Game Zone. 16.5.4 Services and Port Numbers Appendix E on page 243 for commonly used services and port numbers.
Page 143: Remote Management
This chapter provides information on the Remote Management screens. Remote management allows you to determine which services/protocols can access which NBG- 417N interface (if any) from which computers. You may manage your NBG-417N from a remote location via: • LAN only •...
Page 144: Remote Management Limitations
There is a default system management idle timeout of five minutes (three hundred seconds). The NBG-417N automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling. You can change the timeout period in the System screen 17.4 WWW Screen...
Page 145 A secured client is a “trusted” computer that is allowed to communicate with the Address NBG-417N using this service. Select All to allow any computer to access the NBG-417N using this service. Choose Selected to just allow the computer with the IP address that you specify to access the NBG-417N using this service.
Page 146: Universal Plug-And-Play (Upnp)
18.2 What You Can Do Use the UPnP screen (Section 18.4 on page 147) to enable UPnP on the NBG-417N. 18.3 What You Need to Know How do I know if I'm using UPnP? UPnP hardware is identified as an icon in the Network Connections folder (Windows XP). Each UPnP compatible device installed on your network will appear as a separate icon.
Page 147: Cautions With Upnp
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG-417N allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration.
Page 148: Technical Reference
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG-417N. Make sure the computer is connected to a LAN port of the NBG-417N. Turn on your computer and the NBG-417N.
Page 149 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 90 Internet Connection Properties: Advanced Settings Figure 91 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. NBG-417N User’s Guide...
Page 150: Web Configurator Easy Access
18.5.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG-417N without finding out the IP address of the NBG-417N first. This comes helpful if you do not know the IP address of the NBG- 417N.
Page 151 Figure 94 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG-417N and select Invoke. The Web Configurator login screen displays. Figure 95 Network Connections: My Network Places...
Page 152 Chapter 18 Universal Plug-and-Play (UPnP) Right-click on the icon for your NBG-417N and select Properties. A properties window displays with basic information about the NBG-417N. Figure 96 Network Connections: My Network Places: Properties: Example NBG-417N User’s Guide...
Page 153: System
155) to change your NBG-417N’s time and date. 19.3 System General Screen Use this screen to enter a name to identify the NBG-417N in the network and set the password. Click Maintenance > System. The following screen displays. Figure 97 Maintenance > System > General...
Page 154 System Setup System Name System Name is a unique name to identify the NBG-417N in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name).
Page 155: Time Setting Screen
19.4 Time Setting Screen To change your NBG-417N’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the NBG-417N’s time based on your local time zone. Figure 98 Maintenance > System > Time Setting he following table describes the labels in this screen.
Page 156 When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the NBG-417N get the time and date from the Server time server you specified below.
Page 157: Logs
This chapter contains information about configuring general log settings and viewing the NBG- 417N’s logs. The Web Configurator allows you to look at all of the NBG-417N’s logs in one location. 20.2 What You Can Do Use the View Log screen (Section 20.4 on page...
Page 158 This is the index number of the log entry. Time This field displays the time the log was recorded. See the chapter on system maintenance and information to configure the NBG-417N’s time and date. Message This field states the reason for the log.
Page 159: Tools
(usually) uses the system model name with a “*.bin” extension, e.g., “NBG-417N.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Page 160 After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG-417N again. Figure 101 Upload Warning The NBG-417N automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 102 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
Page 161: Configuration Screen
Figure 104 Maintenance > Tools > Configuration 21.4.1 Backup Configuration Backup configuration allows you to back up (save) the NBG-417N’s current configuration to a file on your computer. Once your NBG-417N is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 162: Back To Factory Defaults
Figure 106 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG-417N IP address (192.168.1.1). See Appendix C on page 201 for details on how to set up your computer’s IP address.
Page 163: Restart Screen
21.5 Restart Screen System restart allows you to reboot the NBG-417N without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the NBG-417N reboot. This does not affect the NBG-417N's configuration. Figure 108 Maintenance > Tools > Restart...
Page 164: Sys Op Mode
Sys OP Mode 22.1 Overview The Sys OP Mode (System Operation Mode) function lets you configure whether your NBG-417N is a router or AP. You can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device.
Page 165: General Screen
• The LAN IP address of the device on the local network is set to 192.168.1.1. • You can configure the IP address settings on your WAN port. Contact your ISP or system administrator for more information on appropriate settings. NBG-417N User’s Guide...
Page 166 Select Access Point if your device bridges traffic between clients on the same network. Apply Click Apply to save your settings. Reset Click Reset to return your settings to the default (Router) Note: If you select the incorrect System Operation Mode you cannot connect to the Internet. NBG-417N User’s Guide...
Page 167: Language
HAPTER Language 23.1 Language Screen Use this screen to change the language for the Web Configurator display. Click the language you prefer. The Web Configurator language changes after a while without restarting the NBG-417N. Figure 114 Language NBG-417N User’s Guide...
Page 168 Chapter 23 Language NBG-417N User’s Guide...
Page 169: Troubleshooting
Make sure you are using the power adaptor or cord included with the NBG-417N. Make sure the power adaptor or cord is connected to the NBG-417N and plugged in to an appropriate power source. Make sure the power source is turned on.
Page 170: Nbg-417N Access And Login
The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the NBG-417N by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start >...
Page 171: Internet Access
Appendix B on page 189. Make sure your computer is in the same subnet as the NBG-417N. (If you know that there are routers between your computer and the NBG-417N, skip this step.) • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address.
Page 172 AP. • Go to Network > Wireless LAN > General > WDS and check if the NBG-417N is set to bridge mode. Select Disable and try to connect to the Internet again.
Page 173: Resetting The Nbg-417N To Its Factory Defaults
24.4 Resetting the NBG-417N to Its Factory Defaults If you reset the NBG-417N, you lose all of the changes you have made. The NBG-417N re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Page 174 When you change from router mode to AP mode, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”. Refer to Appendix C on page 201 for instructions on how to change your computer’s IP address. NBG-417N User’s Guide...
Page 175: Product Specifications
MDI-X support) to connect multiple computers or servers (for example, game servers) in your network to the NBG-417N. You can add up to four computers to the NBG-417N without the cost of a hub when connecting to the Internet through the WAN port. You can add up to five computers to the NBG-417N when you connect to the Internet in AP mode.
Page 176 Web Configurator to put it on the NBG-417N. Note: Only upload firmware for your specific model! Configuration Backup & Make a copy of the NBG-417N’s configuration and put it back on the Restoration NBG-417N later if you decide you want to revert back to an earlier configuration.
Page 177 Point-to-Point Tunneling Protocol (PPTP) enables secure transfer of data through a Virtual Private Network (VPN). The NBG-417N supports one PPTP connection at a time. Universal Plug and Play The NBG-417N can communicate with other UPnP enabled devices in a (UPnP) network. NBG-417N User’s Guide...
Page 178 Chapter 25 Product Specifications NBG-417N User’s Guide...
Page 179: Appendix A Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. NBG-417N User’s Guide...
Page 180 Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. NBG-417N User’s Guide...
Page 181 For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. The following table shows some possible subnet masks using both notations. Table 72 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.0 0000 0000 255.255.255.128 1000 0000 255.255.255.192 1100 0000 NBG-417N User’s Guide...
Page 182 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. NBG-417N User’s Guide...
Page 183 Table 73 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 NBG-417N User’s Guide...
Page 184 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). NBG-417N User’s Guide...
Page 185 NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 NBG-417N User’s Guide...
Page 186 Network Address Translation (NAT) on the NBG-417N. Once you have decided on the network number, pick an IP address for your NBG-417N that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 187 WAN addresses must be on different subnets. In the following example, the LAN and WAN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 119 Conflicting Router IP Addresses Example NBG-417N User’s Guide...
Page 188 LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 120 Conflicting Computer and Router IP Addresses Example NBG-417N User’s Guide...
Page 189: Appendix B Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 121 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. NBG-417N User’s Guide...
Page 190 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. NBG-417N User’s Guide...
Page 191 Select Settings…to open the Pop-up Blocker Settings screen. Figure 123 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. NBG-417N User’s Guide...
Page 192 Figure 124 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. NBG-417N User’s Guide...
Page 193 Figure 125 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). NBG-417N User’s Guide...
Page 194 Figure 126 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. NBG-417N User’s Guide...
Page 195 Click OK to close the window. Figure 127 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. NBG-417N User’s Guide...
Page 196 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary slightly. The steps below apply to Mozilla Firefox 3.0 as well. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 129 Mozilla Firefox: TOOLS > Options NBG-417N User’s Guide...
Page 197 Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 130 Mozilla Firefox Content Security Opera Opera 10 screens are used here. Screens for other versions may vary slightly. NBG-417N User’s Guide...
Page 198 Figure 131 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the left- side menu. Select the check boxes as shown in the following screen. Figure 132 Opera: Enabling Java NBG-417N User’s Guide...
Page 199 Appendix B Pop-up Windows, JavaScripts and Java Permissions To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 133 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply. NBG-417N User’s Guide...
Page 200 Appendix B Pop-up Windows, JavaScripts and Java Permissions NBG-417N User’s Guide...
Page 201: Appendix C Setting Up Your Computer's Ip Address
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific NBG-417N may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 202 Appendix C Setting Up Your Computer’s IP Address Click Start > Control Panel. In the Control Panel, click the Network Connections icon. Right-click Local Area Connection and then select Properties. NBG-417N User’s Guide...
Page 203 Appendix C Setting Up Your Computer’s IP Address On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NBG-417N User’s Guide...
Page 204 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG-417N User’s Guide...
Page 205 Appendix C Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. Click the Network and Sharing Center icon. NBG-417N User’s Guide...
Page 206 Appendix C Setting Up Your Computer’s IP Address Click Manage network connections. Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. NBG-417N User’s Guide...
Page 207 Appendix C Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG-417N User’s Guide...
Page 208 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG-417N User’s Guide...
Page 209 Appendix C Setting Up Your Computer’s IP Address Windows 7 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. Click Change adapter settings. NBG-417N User’s Guide...
Page 210 Appendix C Setting Up Your Computer’s IP Address Double click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. NBG-417N User’s Guide...
Page 211 Appendix C Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG-417N User’s Guide...
Page 212 Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. NBG-417N User’s Guide...
Page 213 Appendix C Setting Up Your Computer’s IP Address The IP settings are displayed as follows. Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. NBG-417N User’s Guide...
Page 214 Appendix C Setting Up Your Computer’s IP Address In the System Preferences window, click the Network icon. When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. NBG-417N User’s Guide...
Page 215 • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. Click Apply Now and close the window. NBG-417N User’s Guide...
Page 216 Network Interface from the Info tab. Figure 134 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. NBG-417N User’s Guide...
Page 217 In System Preferences, click the Network icon. When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: NBG-417N User’s Guide...
Page 218 • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NBG-417N. Click Apply and close the window. NBG-417N User’s Guide...
Page 219 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: Click System > Administration > Network. NBG-417N User’s Guide...
Page 220 Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. In the Authenticate window, enter your admin account name and password then click the Authenticate button. NBG-417N User’s Guide...
Page 221 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. NBG-417N User’s Guide...
Page 222 Appendix C Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Click the Close button to apply the changes. NBG-417N User’s Guide...
Page 223 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: NBG-417N User’s Guide...
Page 224 Appendix C Setting Up Your Computer’s IP Address Click K Menu > Computer > Administrator Settings (YaST). When the Run as Root - KDE su dialog opens, enter the admin password and click OK. NBG-417N User’s Guide...
Page 225 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. NBG-417N User’s Guide...
Page 226 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. NBG-417N User’s Guide...
Page 227 Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 138 openSUSE 10.3: KNetwork Manager NBG-417N User’s Guide...
Page 228 Appendix C Setting Up Your Computer’s IP Address When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 139 openSUSE: Connection Status - KNetwork Manager NBG-417N User’s Guide...
Page 229: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is NBG-417N User’s Guide...
Page 230 APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. NBG-417N User’s Guide...
Page 231 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they NBG-417N User’s Guide...
Page 232 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. NBG-417N User’s Guide...
Page 233 Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NBG-417N are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NBG-417N identity.
Page 234 Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the NBG-417N and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features.
Page 235 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. NBG-417N User’s Guide...
Page 236 The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. NBG-417N User’s Guide...
Page 237 Cipher block chaining Message authentication code Protocol (CCMP). TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication server. AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit mathematical algorithm NBG-417N User’s Guide...
Page 238 WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. NBG-417N User’s Guide...
Page 239 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NBG-417N User’s Guide...
Page 240: Security Parameters Summary
An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. NBG-417N User’s Guide...
Page 241 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. NBG-417N User’s Guide...
Page 242 Appendix D Wireless LANs For directional antennas, point the antenna in the direction of the desired coverage area. NBG-417N User’s Guide...
Page 243: Appendix E Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. NBG-417N User’s Guide...
Page 244 Point-to-Point Tunneling Protocol enables secure transfer of data over public networks. This is the control channel. PPTP_TUNNEL (GRE) User-Defined PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data over public networks. This is the data channel. RCMD Remote Command Service. NBG-417N User’s Guide...
Page 245 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined NBG-417N User’s Guide...
Page 246 Appendix E Services NBG-417N User’s Guide...
Page 247: Appendix F Open Software Announcements
Open Software Announcements End-User License Agreement for "NBG-417N" WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS LICENSE AGREEMENT. PLEASE READ THE TERMS CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AS INSTALLING THE SOFTWARE WILL INDICATE YOUR ASSENT TO THEM.
Page 248 ALLOW THE WAIVER OR EXCLUSION OF IMPLIED WARRANTIES SO THEY MAY NOT APPLY TO YOU. IF THIS EXCLUSION IS HELD TO BE UNENFORCEABLE BY A COURT OF COMPETENT JURISDICTION, THEN ALL EXPRESS AND IMPLIED WARRANTIES SHALL BE LIMITED IN DURATION TO A PERIOD OF NBG-417N User’s Guide...
Page 249 License Agreement shall constitute the entire Agreement between the parties hereto. This License Agreement, the rights granted hereunder, the Software and Documentation shall not be assigned by you without the prior written consent of ZyXEL. Any waiver or modification of this License NBG-417N User’s Guide...
Page 250 No part may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, except the express written permission of ZyXEL Communications Corporation. This Product includes Linux Kernel, Busybox, Igmpproxy, Dnsmasq, Iproute, Rp-pppoe, Iptables,...
Page 251 License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. NBG-417N User’s Guide...
Page 252 However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the NBG-417N User’s Guide...
Page 253 License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and NBG-417N User’s Guide...
Page 254 This Product includes Libesmtp and Uclibc under the LGPL License. GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Copyright (C) 1991, 1999 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA NBG-417N User’s Guide...
Page 255 When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally speaking a combined work, a derivative of the original library. The ordinary General Public License therefore permits such linking only if the entire combination fits its NBG-417N User’s Guide...
Page 256 Library (independent of the use of the Library in a tool for writing it). Whether that is true depends on what the Library does and what the program that uses the Library does. NBG-417N User’s Guide...
Page 257 5. A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a "work that uses the Library". Such a work, NBG-417N User’s Guide...
Page 258 It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an executable that you distribute. NBG-417N User’s Guide...
Page 259 In such case, this License incorporates the limitation as if written in the body of this License. NBG-417N User’s Guide...
Page 260 Copyright (c) [dates as appropriate to package] The Regents of the University of California. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: NBG-417N User’s Guide...
Page 261 2.Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3.This notice may not be removed or altered from any source distribution. Jean-loup Gailly jloup@gzip.org NBG-417N User’s Guide...
Page 262 This Product includes Gcc under the license by GPL v3 GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright ? 2007 Free Software Foundation, Inc. <http://fsf.org/> Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. NBG-417N User’s Guide...
Page 263 To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS NBG-417N User’s Guide...
Page 264 However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding NBG-417N User’s Guide...
Page 265 License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. NBG-417N User’s Guide...
Page 266 If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the NBG-417N User’s Guide...
Page 267 License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. NBG-417N User’s Guide...
Page 268 (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. NBG-417N User’s Guide...
Page 269 License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. NBG-417N User’s Guide...
Page 270 GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. NBG-417N User’s Guide...
Page 271 Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS NBG-417N User’s Guide...
Page 272 Appendix F Open Software Announcements NBG-417N User’s Guide...
Page 274 This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. 率輻理率不更率率更率不 NBG-417N User’s Guide...
Page 275 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/ support_warranty_info.php. NBG-417N User’s Guide...
Page 276: Regulatory Information
és az 1999/5/EK irányelv egyéb elõírásainak. [Polish] Niniejszym ZyXEL oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. [Portuguese] ZyXEL declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/EC. NBG-417N User’s Guide...
Page 277: National Restrictions
The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:. Overview of Regulatory Requirements for Wireless LANs Frequency Band (MHz) Max Power Level Indoor ONLY Indoor and Outdoor (EIRP) (mW) NBG-417N User’s Guide...
Page 278 “general authorization.” Please check http:// www.sviluppoeconomico.gov.it/ for more details. Questo prodotto è conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato all 'interno del proprio NBG-417N User’s Guide...
Page 279 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NBG-417N User’s Guide...
Page 280 Appendix G Legal Information NBG-417N User’s Guide...
Page 281: Index
104, 107 Basic Service Set, See BSS DHCP table 32, 110 BitTorrent DHCP client information Bridge/Repeater DHCP status Dimensions disclaimer 44, 109 DNS server see also Domain name system DNS Server Certificate Authority DNS server See CA. NBG-417N User’s Guide...
Page 282 IP Address 105, 114, 115 ZyXEL device firewall IP address firewall dynamic stateful inspection IP Pool Firmware upload file extension using HTTP firmware version 28, 51 fragmentation threshold FTP. see also File Transfer Program IP pool setup NBG-417N User’s Guide...
Page 283 Quality of Service (QoS) 113, 114, 186 how it works overview see also Network Address Translation NAT traversal RADIUS Navigation Panel 30, 52 message types navigation panel 30, 52 messages NetBIOS shared secret key see also Network Basic Input/Output System NBG-417N User’s Guide...
Page 284 (user) database Session Initiated Protocol RADIUS server User Name SSID 29, 51, 70, 73 stateful inspection firewall Static DHCP Static Route Status VoIP subnet Subnet Mask subnet mask 44, 180 subnetting Summary DHCP table Packet statistics NBG-417N User’s Guide...
Page 285 Wireless network basic guidelines Xbox Live channel encryption example MAC address filter overview security SSID Wireless security overview type wireless security 173, 233 Wireless tutorial 49, 55 Wizard setup complete Internet connection system information wireless LAN WLAN interference NBG-417N User’s Guide...
Page 286 Index NBG-417N User’s Guide...

ZyXEL Communications NBG-417N User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Getting to Know Your NBG-417N

Chapter 2 The WPS Button

Chapter 3 Introducing the Web Configurator

Chapter 4 Connection Wizard

Chapter 5 AP Mode

Chapter 6 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 7 Wireless LAN

Chapter 8 WAN

Chapter 9 LAN

Chapter 10 DHCP Server

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS

Chapter 13 Firewall

Chapter 14 Content Filtering

Chapter 15 Static Route

Chapter 16 Bandwidth Management

Chapter 17 Remote Management

Chapter 18 Universal Plug-And-Play (Upnp)

Chapter 19 System

Chapter 20 Logs

Chapter 21 Tools

Chapter 22 Sys OP Mode

Chapter 23 Language

Chapter 24 Troubleshooting

Chapter 25 Product Specifications

Appendix A IP Addresses and Subnetting

Appendix B Pop-Up Windows, Javascripts and Java Permissions

Appendix C Setting up Your Computer's IP Address

Appendix D Wireless Lans

Appendix E Services

Appendix F Open Software Announcements

Appendix G Legal Information

Index

Quick Links

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications NBG-417N

Summary of Contents for ZyXEL Communications NBG-417N