Page 1 Wireless N-lite 3G Home Router IMPORTANT! READ CAREFULLY Default Login Details BEFORE USE. LAN IP https://192.168.1.1 Address KEEP THIS GUIDE FOR FUTURE User Name admin REFERENCE. Password 1234 IMPORTANT! Version 1.00 Edition 5, 4/2012 www.zyxel.com www.zyxel.com Copyright © 2012 ZyXEL Communications Corporation...
Page 2 Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the NBG4115 and configure it using the Web Configurator wizard. NBG4115 User’s Guide...
Page 3: Table Of Contents
NAT ...............................123 DDNS ..............................133 Firewall ..............................135 Content Filtering ............................139 Static Route ............................143 Bandwidth Management ........................146 Remote Management ..........................154 UPnP ..............................156 WoL ...............................164 NetUSB ..............................166 System ..............................169 Logs ..............................174 Tools ..............................176 Sys OP Mode ............................181 Language ..............................184 Troubleshooting ............................185 NBG4115 User’s Guide...
Page 4 Contents Overview NBG4115 User’s Guide...
Page 5: Table Of Contents
Chapter 1 Introduction............................15 1.1 Overview ............................15 1.2 Applications ............................15 1.3 Ways to Manage the NBG4115 ......................15 1.4 Good Habits for Managing the NBG4115 ..................16 1.5 LEDs ..............................16 1.6 The WPS Button ..........................17 1.7 Wall Mounting ...........................18 Chapter 2 ZyXEL NetUSB Share Center Utility....................19 2.1 Overview ............................19...
Page 6 4.6 Connection Wizard Complete ......................54 Chapter 5 AP Mode ..............................55 5.1 Overview ............................55 5.2 Setting your NBG4115 to AP Mode ....................55 5.3 The Status Screen in AP Mode ......................56 5.3.1 Navigation Panel ........................58 5.4 LAN Settings .............................59 5.5 WLAN and Maintenance Settings .....................60 5.6 Logging in while in AP Mode ......................60...
Page 7 8.2.1 What You Need To Know ......................98 8.3 The General Screen ........................100 8.4 The WAN1 Internet Connection Screen ..................102 8.4.1 Ethernet ..........................103 8.4.2 PPPoE ...........................104 8.4.3 PPTP .............................106 8.4.4 Mobile 3G ..........................108 8.5 The Advanced Screen ........................110 Chapter 9 LAN ..............................113 NBG4115 User’s Guide...
Page 8 12.2 General ............................133 Chapter 13 Firewall ..............................135 13.1 Overview .............................135 13.1.1 What You Can Do in this Chapter ..................135 13.1.2 What You Need To Know .....................135 13.2 General ............................137 13.3 Services ............................137 Chapter 14 Content Filtering ..........................139 NBG4115 User’s Guide...
Page 9 Chapter 18 UPnP ..............................156 18.1 Overview ............................156 18.1.1 What You Can Do in this Chapter ..................156 18.1.2 What You Need to Know ......................156 18.2 General ............................157 18.3 Technical Reference ........................158 18.3.1 Installing UPnP in Windows XP ...................158 NBG4115 User’s Guide...
Page 10 23.3.2 Restore Configuration ......................178 23.3.3 Back to Factory Defaults .....................179 23.4 Restart ............................180 Chapter 24 Sys OP Mode.............................181 24.1 Overview ............................181 24.1.1 What You Can Do in this Chapter ..................181 24.1.2 What You Need to Know ......................181 24.2 General ............................182 NBG4115 User’s Guide...
Page 11 26.2 Power, Hardware Connections, and LEDs ..................185 26.3 NBG4115 Access and Login ......................186 26.4 Internet Access ..........................188 26.5 Resetting the NBG4115 to Its Factory Defaults ................189 26.6 Wireless Router/AP Troubleshooting ....................189 26.7 ZyXEL NetUSB Share Center Utility Problems ................190 Appendix A Pop-up Windows, JavaScripts and Java Permissions..........193 Appendix B IP Addresses and Subnetting..................205...
Page 12 Table of Contents NBG4115 User’s Guide...
Page 13: User's Guide
User’s Guide...
Page 15: Introduction
1.2 Applications Your can create the following networks using the NBG4115: • Wired. You can connect network devices via the Ethernet ports of the NBG4115 so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG4115 to access network resources.
Page 16: Good Habits For Managing The Nbg4115
If you forget your password, you will have to reset the NBG4115 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG4115.
Page 17: The Wps Button
120 seconds for a successful connection. 1.6 The WPS Button Your NBG4115 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
Page 18: Wall Mounting
Make sure the screws are fastened well enough to hold the weight of the NBG4115 with the connection cables. Align the holes on the back of the NBG4115 with the screws on the wall. Hang the NBG4115 on the screws.
Page 19: Zyxel Netusb Share Center Utility
The ZyXEL NetUSB Share Center Utility allows you to work with the USB devices that are connected directly to the NBG4115 as if they are connected directly to your computer. This allows you to easily share USB-based devices such as printers, scanners, portable hard disks, MP3 players, faxes, and digital cameras (to name a few) with all the other people in your home or office as long as they are connected to the NBG4115 and have the ZyXEL NetUSB Share Center Utility installed.
Page 20: Quick Setup
Install the ZyXEL NetUSB Share Center Utility on each computer connected to the NBG4115. Connect a USB device to the USB port on the NBG4115. Note: If you are connecting multiple devices to the NBG4115, first connect a USB hub to the NBG4115 then connect your other USB devices to it.
Page 21: The Zyxel Netusb Share Center Utility
Table 3 ZyXEL NetUSB Share Center Utility Main Window Icons ICON DESCRIPTION Configure Server Click to open the NBG4115’s built-in Web Configurator, which you can use to set up the NBG4115 (see Chapter 3 on page 29 for details). Auto-Connect Printer Click this if you want to automatically connect to the printer each time your start your computer.
Page 22: The Menus
Note: You first must install the appropriate drivers for the printer that you intend to use. Delete Auto-Connect Printer This removes the auto-connect option from the selected printer. NBG4115 User’s Guide...
Page 23: The Share Center Configuration Window
This section describes the utility’s configuration window, which allows you to set certain options for the utility. These options do not apply to the USB devices connected to the NBG4115. You can open it by clicking the Tools > Configuration menu command.
Page 24: The Auto-Connect Printer List Window
2.3 Manually Connecting to USB Devices This example shows you how to connect to a USB device over your NBG4115 network. Makes sure that you have first installed the ZyXEL NetUSB Share Center Utility on the computer to which you want to connect the USB devices.
Page 25 Chapter 2 ZyXEL NetUSB Share Center Utility Connect a USB device to the NBG4115. In the ZyXEL NetUSB Share Center Utility, select the device and click Connect. NBG4115 User’s Guide...
Page 26: Automatically Connecting To A Usb Printer
This example shows you how to set your computer to automatically connect to a shared USB printer over your NBG4115 network each time you log into your computer. Makes sure that you have first installed the ZyXEL NetUSB Share Center Utility.
Page 27 Open the ZyXEL Sharing Center Utility on the computer that you want to use to connect to the printer. Click the Connect button. You may be prompted to install a printer driver or to configure other settings. Finally, click the Auto-Connect Printer menu and select Set Auto-Connect Printer from the menu. NBG4115 User’s Guide...
Page 28 Chapter 2 ZyXEL NetUSB Share Center Utility NBG4115 User’s Guide...
Page 29: The Web Configurator
H A PT ER The Web Configurator 3.1 Overview This chapter describes how to access the NBG4115 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG4115 via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions or Safari 2.0 or later versions.
Page 30 • Click Go to Wizard Setup to use the Configuration Wizard for basic Internet and Wireless setup. • Click Go to Advanced Setup to view and configure all the NBG4115’s settings. • Select a language to go to the basic Web Configurator in that language. To change to the...
Page 31: Resetting The Nbg4115
Make sure the power LED is on. Press the RESET button for longer than 1 second to restart/reboot the NBG4115. Press the RESET button for longer than five seconds to set the NBG4115 back to its factory-default configurations. 3.4 Navigating the Web Configurator The following summarizes how to navigate the Web Configurator from the Status screen in Router Mode and AP Mode.
Page 32 Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics. Click this button to refresh the status screen statistics. NBG4115 User’s Guide...
Page 33 This displays what percentage of the NBG4115’s processing ability is currently used. When this percentage is close to 100%, the NBG4115 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications.
Page 34 3G USB dongle to the USB port. 3G Connection Status This displays the type of the 3G network (such as WCDMA) to which the NBG4115 is connected when the 3G connection is up or No Service when the 3G connection is down or not activated.
Page 35: Navigation Panel
Chapter 3 The Web Configurator 3.5.1 Navigation Panel Use the sub-menus on the navigation panel to configure NBG4115 features. The following table describes the sub-menus. Table 9 Screens Summary LINK FUNCTION Status This screen shows the NBG4115’s general device, system and interface status information.
Page 36 General Use this screen to enable Wake on LAN to remotely turn on a device on the local network. NetUSB General Use this screen to configure how the NBG4115 uses 3G wireless access. Maintenance System General Use this screen to view and change administrative settings such as system and domain names, password and inactivity timer.
Page 37: Summary: Dhcp Table
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients.
Page 38: Summary: Packet Statistics
Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG4115 in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has...
Page 39 MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the NBG4115’s WLAN network. Refresh Click Refresh to reload the list. NBG4115 User’s Guide...
Page 40 Chapter 3 The Web Configurator NBG4115 User’s Guide...
Page 41: Connection Wizard
Leave a field blank if you don’t have that information. After you access the NBG4115 Web Configurator, click the Go to Wizard setup hyperlink. You can click Go to Advanced setup hyperlink to skip this wizard setup and configure basic or advanced features accordingly.
Page 42: Step 1: System Information
• In Windows XP, click Start > My Computer > View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the NBG4115 System Name. 4.3.2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN.
Page 43: Step 2: Wireless Lan
DESCRIPTION System Name System Name is a unique name to identify the NBG4115 in an Ethernet network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted.
Page 44: Extend (Wpa-Psk Or Wpa2-Psk) Security
Name (SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the NBG4115, make sure all wireless stations use the same SSID in order to access the network. Security Select a Security level from the drop-down list box.
Page 45: Step 3: Internet Configuration
Click Exit to close the wizard screen without saving. 4.5 STEP 3: Internet Configuration The NBG4115 offers four Internet connection types. They are Ethernet, PPP over Ethernet, PPTP or Mobile 3G. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box.
Page 46: Ethernet Connection
This enables the service provider to easily create and offer new IP services for specific users. Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it requires no specific configuration of the broadband modem at the subscriber’s site. NBG4115 User’s Guide...
Page 47: Pptp Connection
By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Page 48 Select this radio button if your ISP did not assign you a fixed IP address. from ISP Use fixed IP Select this radio button, provided by your ISP to give the NBG4115 a fixed, address unique IP address. My IP Address Type the (static) IP address assigned to you by your ISP.
Page 49: Mobile 3G
Mobile 3G is a set of international “third generation” standards for the sending and receiving of voice, video, and wireless data in a mobile environment. For the NBG4115, this type of wireless connection requires a connected 3G-compatible USB device (see the included Quick Start Guide for installation information), and a 3G account with your local ISP.
Page 50: Your Ip Address
Chapter 4 Connection Wizard 4.5.5 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG4115 an automatically assigned IP address depending on your ISP or network administrator. Figure 25 Wizard Step 3: Your IP Address...
Page 51: Ip Address And Subnet Mask
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your NBG4115, but make sure that no other device on your network is using that IP address.
Page 52: Wan Ip And Dns Server Address Assignment
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG4115 uses a system DNS server (in the order you specify here) to resolve domain names for DDNS and the time server.
Page 53: Wan Mac Address
Gateway (or default route) 192.168.1.1(NBG4115 LAN IP) This screen allows users to configure the WAN port's MAC address by either using the NBG4115’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address.
Page 54: Connection Wizard Complete
Chapter 4 Connection Wizard 4.6 Connection Wizard Complete Click Finish to complete the wizard setup. Figure 28 Connection Wizard Complete You have successfully set up your NBG4115 to operate on your network and access the Internet. NBG4115 User’s Guide...
Page 55: Ap Mode
AP mode. Use your NBG4115 as an AP if you already have a router or gateway on your network. In this mode your device bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example.
Page 56: The Status Screen In Ap Mode
Chapter 5 AP Mode To set your NBG4115 to AP Mode, go to Maintenance > Sys OP Mode > General and select Access Point. Figure 30 Maintenance > Sys OP Mode > General A pop-up appears providing information on this mode. Click OK in the pop-up message window.
Page 57 - 802.11 Mode This shows the IEEE 802.11 standard that the NBG4115 supports. Wireless clients must support the same standard in order to be able to connect to the NBG4115 - WPS This shows the WPS (WiFi Protected Setup) Status. Click the status to display Network >...
Page 58: Navigation Panel
Use this screen to view the wireless stations that are currently associated to the NBG4115. 5.3.1 Navigation Panel Use the menu in the navigation panel to configure NBG4115 features in AP Mode. The following screen and table show the features you can configure in AP Mode. Figure 32 Menu: AP Mode The following table describes the sub-menus.
Page 59: Lan Settings
Use this section to configure your LAN settings while in AP Mode. Click Network > LAN to see the screen below. Note: If you change the IP address of the NBG4115 in the screen below, you will need to log into the NBG4115 again using the new IP address.
Page 60: Wlan And Maintenance Settings
5.6 Logging in while in AP Mode Connect your computer to the LAN port of the NBG4115. The default IP address of the NBG4115 is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”.
Page 61: Tutorials
This chapter provides tutorials for setting up your NBG4115. 6.2 Set Up a 3G Connection This section shows you how to make a 3G connection with your NBG4115. There are two ways to set up your 3G options. Use the Wizard, which was introduced in the Quick Start Guide. The wizard is good for getting up and running in as little time as possible.
Page 62 Chapter 6 Tutorials When presented with the option to choose either Wizard or Advanced, click Go to Advanced setup. Expand the Network submenu on the navigation pane, then click WAN. NBG4115 User’s Guide...
Page 63: Set Up The Nbg4115 For Gaming
Quality of Service (QoS) prioritization. If the data packets from a game are assigned a lower priority by the NBG4115, then they may take longer to reach their destination; but if they are given a higher priority, then they should arrive at their destination marginally faster.
Page 64 Select the Advanced tab. Enable the Gaming check box and set its Priority to High. The following gaming ports are preconfigured on your NBG4115 and are enabled when you select the ‘gaming’ Service in the Management > Bandwidth MGMT > Advanced screen:...
Page 65: Set Up A Wireless Network With Wps
This section gives you an example of how to set up wireless network using WPS. This example uses the NBG4115 as the AP and NWD210N as the wireless client which connects to a notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCI card).
Page 66: Push Button Configuration (Pbc)
Log into NBG4115’s Web Configurator and press the Push Button button in the Network > Wireless Client > WPS Station screen. Note: Your NBG4115 has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other.
Page 67: Pin Configuration
SECURITY INFO COMMUNICATION 6.4.2 PIN Configuration When you use the PIN configuration method, you need to use both NBG4115’s configuration interface and the client’s utilities. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
Page 68: Configure Wireless Security Without Wps
Chapter 6 Tutorials The following figure shows you the example to set up wireless network and security on NBG4115 and wireless client (ex. NWD210N in this example) by using PIN method. Figure 35 Example WPS Process: PIN Method Wireless Client...
Page 69 Figure 36 Tutorial: Network > Wireless LAN > General Open the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. Figure 37 Tutorial: Status Screen NBG4115 User’s Guide...
Page 70: Configure Your Notebook
Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG4115 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 71: Bandwidth Management
6.6 Bandwidth Management This section shows you how to configure the bandwidth management feature on the NBG4115 to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you to specify bandwidth management rules based on an application or subnet.
Page 72: Custom Bandwidth Management
Enable if you need these services and set the priority to Low. Note: You can also leave the Enable field blank for the rest of the applications. In doing so, the NBG4115 does not apply bandwidth management to these services. 6.6.2 Custom Bandwidth Management Aside from the VOIP and e-mail services, you need to set the priority for MSN Messenger.
Page 73: Bandwidth Management By Ip Or Ip Range
REAL AUDIO RTSP VDO LIVE Active Check this to turn on this bandwidth management rule. Direction Select Both applies bandwidth management to traffic that the Select To WAN NBG4115 forwards to both the LAN and the WAN. NBG4115 User’s Guide...
Page 74 Note: The Policy column displays either Max (maximum) or Min (minimum). This is directly directed to the value in the Rate column. For example, you selected Min and entered 30M as the rate for the VoIP service. The NBG4115 allocates at least 30 megabytes for the VoIP service.
Page 75: Technical Reference
Technical Reference...
Page 77: Wireless Lan
H A PT ER Wireless LAN 7.1 Overview This chapter discusses how to configure the wireless network settings in your NBG4115. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network.
Page 78: What You Should Know
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG4115 User’s Guide...
Page 79 RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA. Therefore, you should set up Static WEP in the wireless network. NBG4115 User’s Guide...
Page 80: General
When you select WPA2 or WPA2-PSK in your NBG4115, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the NBG4115.
Page 81 Channel Channel Width Select whether the NBG4115 uses a wireless channel width of 20 or 40 MHz. A standard 20 MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps.
Page 82: No Security
Select No Security to allow wireless stations to communicate with the access points without any data encryption. Note: If you do not enable any wireless security on your NBG4115, your network is accessible to any wireless networking device that is within range.
Page 83: Wep Encryption
Both the wireless stations and the access points must use the same WEP key. Your NBG4115 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time.
Page 84 The preceding "0x", that identifies a hexadecimal key, is entered automatically. Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NBG4115 and the wireless stations must use the same WEP key for data transmission.
Page 85: Wpa-Psk/Wpa2-Psk
This check box is available only when you select WPA2-PSK in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the NBG4115 even when the NBG4115 is using WPA2-PSK. Pre-Shared Key WPA-PSK/WPA2-PSK uses a simple common password for authentication.
Page 86: Mac Filter
Chapter 7 Wireless LAN 7.3 MAC Filter The MAC filter screen allows you to configure the NBG4115 to give exclusive access to up to 16 devices (Allow) or exclude up to 16 devices from accessing the NBG4115 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address.
Page 87: Advanced
Table 35 Network > Wireless LAN > MAC Filter LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen. 7.4 Advanced Click Network > Wireless LAN > Advanced. The screen appears as shown.
Page 88 When set to Always, the NBG4115 improves performance within mixed wireless modes. Select Auto to let the NBG4115 determine whether to turn this feature on or off in the current environment. Tx Power This field controls the transmission power of the NBG4115. When using the NBG4115 with a notebook computer, select a lower transmission power level when you are close to the AP in order to conserve battery power.
Page 89: Qos
DESCRIPTION WMM QoS Policy Select Default to have the NBG4115 automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Page 90: Application Priority Configuration
Click the Remove icon to delete an application entry. Apply Click Apply to save your changes to the NBG4115. 7.5.1 Application Priority Configuration Use this screen to edit a WMM QoS application entry. Click the edit icon under Modify. The following screen displays.
Page 91 Priority Select a priority from the drop-down list box. Apply Click Apply to save your changes back to the NBG4115. Cancel Click Cancel to return to the previous screen. NBG4115 User’s Guide...
Page 92: Wps
PIN number. WPS Status Status This displays Configured when the NBG4115 has connected to a wireless network using WPS or when Enable WPS is selected and wireless or wireless security settings have been changed. The current wireless and wireless security settings also appear in the screen.
Page 93: Wps Station
PIN number wireless station’s wireless settings. See Section 6.4.2 on page Type the same PIN number generated in the wireless station’s utility. Then click Start to associate to each other and perform the wireless security information synchronization. NBG4115 User’s Guide...
Page 94: Scheduling
Note: Entering the same begin time and end time will mean the whole day. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to reload the previous configuration for this screen.
Page 95 Chapter 7 Wireless LAN NBG4115 User’s Guide...
Page 96 Chapter 7 Wireless LAN NBG4115 User’s Guide...
Page 97: Wan
The NBG4115 also supports a 3G WAN connection. You can use 3G as your primary WAN or use the 3G WAN connection as a backup.
Page 98: What You Need To Know
(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG4115, which makes it accessible from an outside network. It is used by the NBG4115 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG4115 tries to access the Internet.
Page 99 Auto-Bridge In the rear panel of your NBG4115, you can see two LAN ports (1 to 2) and one WAN port. The WAN port is for your Internet access connection, and the LAN ports are for your network devices. The WAN port has a different IP address from the LAN ports.
Page 100: The General Screen
Auto-IP-Change When the NBG4115 gets a WAN IP address which is in the same subnet as the LAN IP address 192.168.1.1, Auto-IP-Change allows the NBG4115 to change its LAN IP address to 10.0.0.1 automatically. If the NBG4115’s original LAN IP address is 10.0.0.1 and the WAN IP address is in the same subnet, such as 10.0.0.3, the NBG4115 switches to use 192.168.1.1 as its LAN IP...
Page 101 USB port on the NBG4115. Operation Mode Active/Passive(Fail The NBG4115 uses the second highest priority WAN interface as a back up. This Over) Mode means that the NBG4115 will normally use the highest priority (primary) WAN interface (depending on the priority you configure in the Primary WAN fields).
Page 102: The Wan1 Internet Connection Screen
Allow more time if your destination IP address handles lots of traffic. Check Timeout Type the number of seconds (1 to 10) for your NBG4115 to wait for a response to the ping before considering the check to have failed. This setting must be less than the Check Period.
Page 103: Ethernet
Enter your WAN IP address in this field if you selected Use Fixed IP Address. IP Subnet Enter the IP Subnet Mask in this field. Mask Gateway IP Enter a Gateway IP Address in this field. Address DNS Servers NBG4115 User’s Guide...
Page 104: Pppoe
By implementing PPPoE directly on the NBG4115 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4115 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 105 Nailed-Up Select Nailed-Up Connection if you do not want the connection to time out. Connection Idle Timeout This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. DNS Servers NBG4115 User’s Guide...
Page 106: Pptp
DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the (read-only) DNS Second DNS server IP address that the ISP assigns. Server Select User-Defined if you have the IP address of a DNS server.
Page 107 Virtual Private Network (VPN) using TCP/IP-based networks. PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. The NBG4115 supports only one PPTP server connection at any given time. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection.
Page 108: Mobile 3G
DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the Second DNS Server (read-only) DNS server IP address that the ISP assigns.
Page 109 Enter the Access Point Name (APN) given to you by your ISP. Dial Number Enter the phone number that must be dialed in order to login to your 3G account from the NBG4115. User Name Type the user name given to you by your ISP.
Page 110: The Advanced Screen
DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4115's WAN IP address). The field to the right displays the Second DNS Server (read-only) DNS server IP address that the ISP assigns.
Page 111 Auto-Subnet Configuration None Select this option to have the NBG4115 do nothing when it gets a WAN IP address in the range of 192.168.x.y (where x and y are from zero to nine) or in the same subnet as the LAN IP address.
Page 112 LABEL DESCRIPTION Enable Auto-IP- Select this option to have the NBG4115 change its LAN IP address to Change mode 10.0.0.1 or 192.168.1.1 accordingly when the NBG4115 gets a dynamic WAN IP address in the same subnet as the LAN IP address 192.168.1.1 or 10.0.0.1.
Page 113: Lan
9.1.1 What You Can Do in this Chapter Use the IP (Section 9.3 on page 114) screen to change your basic LAN settings. 9.2 What You Need To Know The following terms and concepts may help as you read through this chapter. NBG4115 User’s Guide...
Page 114 Figure 67 LAN and WAN IP Addresses The LAN parameters of the NBG4115 are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) • DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
Page 115 Chapter 9 LAN Table 47 Network > LAN > IP LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. NBG4115 User’s Guide...
Page 116 Chapter 9 LAN NBG4115 User’s Guide...
Page 117: Dhcp Server
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4115’s LAN as a DHCP server or disable it. When configured as a server, the NBG4115 provides the TCP/IP configuration for the clients.
Page 118: General
Chapter 10 DHCP Server LAN TCP/IP The NBG4115 has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. Refer to the Section 4.5.8 on page 51 section for information on System DNS Servers.
Page 119: Advanced
MAC addresses. You can also use this screen to configure the DNS server information that the NBG4115 sends to the DHCP clients. To change your NBG4115’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays.
Page 120: Client List
LAN IP address displays in the field to the right (read-only). The NBG4115 tells the DHCP clients on the LAN that the NBG4115 itself is the DNS server. When a computer on the LAN sends a DNS query to the NBG4115, the NBG4115 forwards the query to the NBG4115's system DNS server (configured in the WAN >...
Page 121 Reserve Select this check box in the DHCP Setup section to have the NBG4115 always assign the IP address(es) to the MAC address(es) (and host name(s)). After you click Apply, the MAC address and IP address also display in the Advanced screen (where you can edit them).
Page 122 Chapter 10 DHCP Server NBG4115 User’s Guide...
Page 123: Nat
You assign the LAN IP addresses to the devices (A to D) connected to your NBG4115. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the NBG4115, which is 192.168.1.1.
Page 124: What You Need To Know
The following terms and concepts may help as you read through this chapter. Inside/Outside This denotes where a host is located relative to the NBG4115, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 125: General
IP source address in each packet and then forwards it to the Internet. The NBG4115 keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Page 126: Application
Application screen. If you do not assign a Default Server IP address, the NBG4115 discards all packets received for ports that are not specified in the Application screen or remote management.
Page 127 Port fields to the previous one. Application Rules Summary This is the number of an individual port forwarding server entry. Active This icon is turned on when the rule is enabled. Name This field displays a name to identify this rule. NBG4115 User’s Guide...
Page 128 This field displays the inside IP address of the server. Modify Click the Edit icon to display and modify an existing rule setting in the fields under Add Application Rule. Click the Remove icon to delete a rule. NBG4115 User’s Guide...
Page 129: Advanced
Type a port number or the ending port number in a range of port numbers. Trigger The trigger port is a port (or a range of ports) that causes (or triggers) the NBG4115 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Start Port Type a port number or the starting port number in a range of port numbers.
Page 130: Technical Reference
Chapter 11 NAT 11.5 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter. 11.5.1 NATPort Forwarding: Services and Port Numbers A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Page 131: Trigger Port Forwarding Example
(Transfer Control Protocol/Internet Protocol). 11.5.5 Two Points To Remember About Trigger Ports Trigger events only happen on data that is going coming from inside the NBG4115 and going to the outside. If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it.
Page 132 Chapter 11 NAT NBG4115 User’s Guide...
Page 133: Ddns
IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the NBG4115 or a server in your network. Note: The NBG4115 must have a public global IP address and you should have your registered DDNS account information on hand.
Page 134 Type the IP address of the host name(s). Use this if you have a static IP Address address. Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. NBG4115 User’s Guide...
Page 135: Firewall
Firewall 13.1 Overview Use these screens to enable and configure the firewall that protects your NBG4115 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 136 (click the General tab under Firewall and then click the Enable Firewall check box). The NBG4115's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG4115 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 137: General
Keep the firewall in a secured (locked) room. 13.2 General Use this screen to enable or disable the NBG4115’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 81 Security > Firewall > General l The following table describes the labels in this screen.
Page 138 NBG4115 services unseen. By default this option is not selected and the NBG4115 will reply with an ICMP Port Unreachable packet for a port probe on its unused UDP ports, and a TCP Reset packet for a port probe on its unused TCP ports.
Page 139: Content Filtering
The file path is the characters that come after the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. Since the NBG4115 checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/...
Page 140: Filter
LABEL DESCRIPTION Enable URL The NBG4115 can block Web sites with URLs that contain certain keywords in Keyword Blocking the domain name or IP address. For example, if the keyword "bad" was enabled, all sites containing this keyword in the domain name or IP address will be blocked, e.g., URL http://www.website.com/bad.html would be blocked.
Page 141: Technical Reference
For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw. Full Path URL Checking Full path URL checking has the NBG4115 check the characters that come before the last slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/.
Page 142 Chapter 14 Content Filtering NBG4115 User’s Guide...
Page 143: Static Route
This chapter shows you how to configure static routes for your NBG4115. The NBG4115 usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the NBG4115 send data to devices not reachable through the default gateway, use static routes.
Page 144: Ip Static Route
This is the IP address of the gateway. The gateway is an immediate neighbor of your NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the remote nodes.
Page 145: Static Route Setup Screen
Enter the IP address of the gateway. The gateway is an immediate neighbor of Address your NBG4115 that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your NBG4115; over the WAN, the gateway must be the IP address of one of the Remote Nodes.
Page 146: Bandwidth Management
You can limit an application’s uplink or downlink bandwidth. This limit keeps the traffic from using up too much of the out-going interface’s bandwidth. This way you can make sure there is bandwidth for other applications. Use the following guidelines: NBG4115 User’s Guide...
Page 147: General
Table 61 Management > Bandwidth MGMT > General LABEL DESCRIPTION Service Management Bandwidth This field allows you to have NBG4115 apply bandwidth management. Management Type Select Priority Queue or Bandwidth Allocation to enable bandwidth management. Select Priority Queue to allocate bandwidth based on the pre-defined priority assigned to an application.
Page 148: Advanced
Note: This screen contains the Priority Queue and Bandwidth Allocation tables. Though both tables are described in this section, you can only apply the rules in one table. Fill out the table of the Bandwidth Management Type you selected in Section 16.2 on page 147 NBG4115 User’s Guide...
Page 149 Use this table to allocate specific amounts of bandwidth based on the pre- defined service. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. NBG4115 User’s Guide...
Page 150 IP or IP range. This is the number of an individual bandwidth management rule. Enable Select this check box to have the NBG4115 apply this bandwidth management rule. LAN IP Range This displays the range of IP addresses for which the bandwidth management rule applies.
Page 151: Pre-Configured Gaming Ports
Traffic with a higher priority gets through faster while traffic with a lower priority is dropped if the network is congested. The following describes the priorities that you can apply to traffic that the NBG4115 forwards out through an interface.
Page 152: Predefined Bandwidth Management Services
To WAN applies bandwidth management to traffic from LAN/WLAN to WAN (i.e., uplink). Select Both applies bandwidth management to traffic that the NBG4115 forwards to both the LAN and the WAN. LAN IP Range Specify the range of IP addresses for which the bandwidth management rule applies.
Page 153: Services And Port Numbers
Online gaming services lets you play multiplayer games on the Internet via broadband technology. One example is Microsoft’s Xbox Live, which uses port 3074. As of this writing, your NBG4115 supports Xbox, Playstation, Battlenet and MSN Game Zone. 16.3.5 Services and Port Numbers Appendix E on page 257 for commonly used services and port numbers.
Page 154: Remote Management
Remote Management 17.1 Overview This chapter provides information on the Remote Management screens. Remote management allows you to determine which services/protocols can access which NBG4115 interface (if any) from which computers. You may manage your NBG4115 from a remote location via: •...
Page 155: Www
There is a default system management idle timeout of five minutes (three hundred seconds). The NBG4115 automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling. You can change the timeout period in the System screen 17.2 WWW...
Page 156: Upnp
18.1.1 What You Can Do in this Chapter Use the UPnP screen (Section 18.2 on page 157) to enable UPnP on the NBG4115. 18.1.2 What You Need to Know The following terms and concepts may help as you read through this chapter.
Page 157: General
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG4115 allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration.
Page 158: Technical Reference
Chapter 18 UPnP 18.3 Technical Reference The following section contains additional technical information about the NBG4115 features described in this chapter. 18.3.1 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel.
Page 159 This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG4115. Make sure the computer is connected to a LAN port of the NBG4115. Turn on your computer and the NBG4115.
Page 160 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 98 Internet Connection Properties: Advanced Settings Figure 99 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. NBG4115 User’s Guide...
Page 161 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG4115 without finding out the IP address of the NBG4115 first. This comes helpful if you do not know the IP address of the NBG4115. Follow the steps below to access the Web Configurator.
Page 162 Figure 102 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG4115 and select Invoke. The Web Configurator login screen displays. Figure 103 Network Connections: My Network Places...
Page 163 Chapter 18 UPnP Right-click on the icon for your NBG4115 and select Properties. A properties window displays with basic information about the NBG4115. Figure 104 Network Connections: My Network Places: Properties: Example NBG4115 User’s Guide...
Page 164: Wol
164) to enable Wake on LAN and remotely turn on a device on the local network. 19.2 The WoL General Screen Use this screen to remotely turn on a device on the network.Click the Management > WoL to open the following screen. Figure 105 Management > WoL NBG4115 User’s Guide...
Page 165 A MAC address consists of six hexadecimal character pairs. Start Click this to have the NBG4115 generate a WoL packet and forward it to turn the specified device on. A screen pops up displaying MAC address error if you input the MAC address incorrectly.
Page 166: Netusb
NetUSB 20.1 Overview NetUSB allows you to connect a USB device or USB to the NBG4115 and then share it across your network. You can also connect a wireless 3G USB dongle to the NBG4115 and share high speed 3G access to the Internet across both your LAN or WLAN.
Page 167: The Netusb General Screen
Select this to allow the NBG4115 to support both 3G wireless and NetUSB functionality through its USB port. If you connect a USB hub and then a 3G USB dongle, the NBG4115 can support both concurrently. Fixed 3G Router Mode Select this to allow the NBG4115 to only support 3G wireless through its USB port.
Page 168 Chapter 20 NetUSB NBG4115 User’s Guide...
Page 169: System
171) to change your NBG4115’s time and date. 21.2 General Use this screen to enter a name to identify the NBG4115 in the network and set the password. Click Maintenance > System. The following screen displays. Figure 107 Maintenance > System > General...
Page 170 System Setup System Name System Name is a unique name to identify the NBG4115 in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name).
Page 171: Time Setting
21.3 Time Setting To change your NBG4115’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the NBG4115’s time based on your local time zone. Figure 108 Maintenance > System > Time Setting he following table describes the labels in this screen.
Page 172 When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the NBG4115 get the time and date from the Server time server you specified below.
Page 173 Chapter 21 System Table 71 Maintenance > System > Time Setting LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4115. Reset Click Reset to begin configuring this screen afresh. NBG4115 User’s Guide...
Page 174: Logs
This chapter contains information about configuring general log settings and viewing the NBG4115’s logs. Refer to the appendices for example log message explanations. The Web Configurator allows you to look at all of the NBG4115’s logs in one location. 22.1.1 What You Can Do in this Chapter Use the View Log screen (Section 22.2 on page...
Page 175 This is the index number of the log entry. Time This field displays the time the log was recorded. See the chapter on system maintenance and information to configure the NBG4115’s time and date. Message This field states the reason for the log.
Page 176: Tools
(usually) uses the system model name with a “*.bin” extension, e.g., “NBG4115.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Page 177 After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG4115 again. Figure 111 Upload Warning The NBG4115 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 112 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
Page 178: Configuration
Figure 114 Maintenance > Tools > Configuration 23.3.1 Backup Configuration Backup configuration allows you to back up (save) the NBG4115’s current configuration to a file on your computer. Once your NBG4115 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 179: Back To Factory Defaults
Figure 116 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG4115 IP address (192.168.1.1). See Appendix C on page 215 for details on how to set up your computer’s IP address.
Page 180: Restart
23.4 Restart System restart allows you to reboot the NBG4115 without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the NBG4115 reboot. This does not affect the NBG4115's configuration. Figure 118 Maintenance > Tools > Restart...
Page 181: Sys Op Mode
Sys OP Mode 24.1 Overview The Sys OP Mode (System Operation Mode) function lets you configure whether your NBG4115 is a router or AP. You can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device. See Section 1.1 on page 15...
Page 182: General
• In this mode there are both LAN and WAN ports. The LAN Ethernet and WAN Ethernet ports have different IP addresses. • The DHCP server on your device is enabled and allocates IP addresses to other devices on your local network. NBG4115 User’s Guide...
Page 183 Select Access Point if your device bridges traffic between clients on the same network. Apply Click Apply to save your settings. Reset Click Reset to return your settings to the default (Router) Note: If you select the incorrect System Operation Mode you cannot connect to the Internet. NBG4115 User’s Guide...
Page 184: Language
This chapter shows you how to change the Web Configurator’s display language. 25.2 Language Use this screen to change the language for the Web Configurator display. Click the language you prefer. The Web Configurator language changes after a while without restarting the NBG4115. Figure 124 Language NBG4115 User’s Guide...
Page 185: Troubleshooting
Make sure you are using the power adaptor or cord included with the NBG4115. Make sure the power adaptor or cord is connected to the NBG4115 and plugged in to an appropriate power source. Make sure the power source is turned on.
Page 186: Nbg4115 Access And Login
The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the NBG4115 by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start >...
Page 187 You cannot log in to the Web Configurator while someone is using Telnet to access the NBG4115. Log out of the NBG4115 in the other session, or ask the person who is logged in to log out. This can happen when you fail to log out properly from your last session. Try logging in again after 5 minutes.
Page 188: Internet Access
AP. • Go to Network > Wireless LAN > General > WDS and check if the NBG4115 is set to bridge mode. Select Disable and try to connect to the Internet again.
Page 189: Resetting The Nbg4115 To Its Factory Defaults
26.5 Resetting the NBG4115 to Its Factory Defaults If you reset the NBG4115, you lose all of the changes you have made. The NBG4115 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Page 190: Zyxel Netusb Share Center Utility Problems
Check that both the NBG4115 and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG4115. Make sure you allow the NBG4115 to be remotely accessed through the WLAN interface. Check your remote management settings.
Page 191 If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG4115 and try to connect to it again with your computer.
Page 192 Chapter 26 Troubleshooting NBG4115 User’s Guide...
Page 193: Appendix A Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 125 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. NBG4115 User’s Guide...
Page 194 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. NBG4115 User’s Guide...
Page 195 Select Settings…to open the Pop-up Blocker Settings screen. Figure 127 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. NBG4115 User’s Guide...
Page 196 Figure 128 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. NBG4115 User’s Guide...
Page 197 Figure 129 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). NBG4115 User’s Guide...
Page 198 Figure 130 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. NBG4115 User’s Guide...
Page 199 Click OK to close the window. Figure 131 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. NBG4115 User’s Guide...
Page 200 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary slightly. The steps below apply to Mozilla Firefox 3.0 as well. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 133 Mozilla Firefox: TOOLS > Options NBG4115 User’s Guide...
Page 201 Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 134 Mozilla Firefox Content Security Opera Opera 10 screens are used here. Screens for other versions may vary slightly. NBG4115 User’s Guide...
Page 202 Figure 135 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the left- side menu. Select the check boxes as shown in the following screen. Figure 136 Opera: Enabling Java NBG4115 User’s Guide...
Page 203 Appendix A Pop-up Windows, JavaScripts and Java Permissions To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 137 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply. NBG4115 User’s Guide...
Page 204 Appendix A Pop-up Windows, JavaScripts and Java Permissions NBG4115 User’s Guide...
Page 205: Appendix B Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. NBG4115 User’s Guide...
Page 206 Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. NBG4115 User’s Guide...
Page 207 For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. The following table shows some possible subnet masks using both notations. Table 79 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.0 0000 0000 255.255.255.128 1000 0000 255.255.255.192 1100 0000 NBG4115 User’s Guide...
Page 208 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. NBG4115 User’s Guide...
Page 209 Table 80 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 NBG4115 User’s Guide...
Page 210 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). NBG4115 User’s Guide...
Page 211 NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 NBG4115 User’s Guide...
Page 212 Network Address Translation (NAT) on the NBG4115. Once you have decided on the network number, pick an IP address for your NBG4115 that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 213 WAN addresses must be on different subnets. In the following example, the LAN and WAN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 142 Conflicting Router IP Addresses Example NBG4115 User’s Guide...
Page 214 LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 143 Conflicting Computer and Router IP Addresses Example NBG4115 User’s Guide...
Page 215: Appendix C Setting Up Your Computer's Ip Address
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific NBG4115 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 216 Appendix C Setting Up Your Computer’s IP Address Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. In the Control Panel, click the Network Connections icon. NBG4115 User’s Guide...
Page 217 Appendix C Setting Up Your Computer’s IP Address Right-click Local Area Connection and then select Properties. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NBG4115 User’s Guide...
Page 218 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG4115 User’s Guide...
Page 219 Appendix C Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. Click the Network and Sharing Center icon. NBG4115 User’s Guide...
Page 220 Appendix C Setting Up Your Computer’s IP Address Click Manage network connections. Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. NBG4115 User’s Guide...
Page 221 Appendix C Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG4115 User’s Guide...
Page 222 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG4115 User’s Guide...
Page 223 Appendix C Setting Up Your Computer’s IP Address Windows 7 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. Click Change adapter settings. NBG4115 User’s Guide...
Page 224 Appendix C Setting Up Your Computer’s IP Address Double click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. NBG4115 User’s Guide...
Page 225 Appendix C Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG4115 User’s Guide...
Page 226 Click Advanced if you want to configure advanced settings for IP, DNS and WINS. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. NBG4115 User’s Guide...
Page 227 In the Command Prompt window, type "ipconfig" and then press [ENTER]. The IP settings are displayed as follows. Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. NBG4115 User’s Guide...
Page 228 Appendix C Setting Up Your Computer’s IP Address In the System Preferences window, click the Network icon. When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. NBG4115 User’s Guide...
Page 229 • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. Click Apply Now and close the window. NBG4115 User’s Guide...
Page 230 Network Interface from the Info tab. Figure 144 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. NBG4115 User’s Guide...
Page 231 Appendix C Setting Up Your Computer’s IP Address In System Preferences, click the Network icon. When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. NBG4115 User’s Guide...
Page 232 • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NBG4115. Click Apply and close the window. NBG4115 User’s Guide...
Page 233 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: Click System > Administration > Network. NBG4115 User’s Guide...
Page 234 Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. In the Authenticate window, enter your admin account name and password then click the Authenticate button. NBG4115 User’s Guide...
Page 235 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. NBG4115 User’s Guide...
Page 236 Appendix C Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Click the Close button to apply the changes. NBG4115 User’s Guide...
Page 237 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: NBG4115 User’s Guide...
Page 238 Appendix C Setting Up Your Computer’s IP Address Click K Menu > Computer > Administrator Settings (YaST). When the Run as Root - KDE su dialog opens, enter the admin password and click OK. NBG4115 User’s Guide...
Page 239 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. NBG4115 User’s Guide...
Page 240 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. NBG4115 User’s Guide...
Page 241 Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 148 openSUSE 10.3: KNetwork Manager NBG4115 User’s Guide...
Page 242 Appendix C Setting Up Your Computer’s IP Address When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 149 openSUSE: Connection Status - KNetwork Manager NBG4115 User’s Guide...
Page 243: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is NBG4115 User’s Guide...
Page 244 APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. NBG4115 User’s Guide...
Page 245 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they NBG4115 User’s Guide...
Page 246 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. NBG4115 User’s Guide...
Page 247 Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NBG4115 are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NBG4115 identity.
Page 248 Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the NBG4115 and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features.
Page 249 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. NBG4115 User’s Guide...
Page 250 The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. NBG4115 User’s Guide...
Page 251 Cipher block chaining Message authentication code Protocol (CCMP). TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication server. AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit mathematical algorithm NBG4115 User’s Guide...
Page 252 WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. NBG4115 User’s Guide...
Page 253 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NBG4115 User’s Guide...
Page 254: Security Parameters Summary
An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. NBG4115 User’s Guide...
Page 255 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. NBG4115 User’s Guide...
Page 256 Appendix D Wireless LANs For directional antennas, point the antenna in the direction of the desired coverage area. NBG4115 User’s Guide...
Page 257: Appendix E Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. NBG4115 User’s Guide...
Page 258 REXEC Remote Execution Daemon. RLOGIN Remote Login. RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP Simple File Transfer Protocol. NBG4115 User’s Guide...
Page 259 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. NBG4115 User’s Guide...
Page 260 Appendix E Common Services NBG4115 User’s Guide...
Page 261: Appendix F Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 262 God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any NBG4115 User’s Guide...
Page 263 1999/5/EC. [Hungarian] Alulírott, ZyXEL nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EK irányelv egyéb elõírásainak. [Polish] Niniejszym ZyXEL oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. NBG4115 User’s Guide...
Page 264 The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:. Overview of Regulatory Requirements for Wireless LANs Frequency Band (MHz) Max Power Level Indoor ONLY Indoor and Outdoor (EIRP) (mW) 2400-2483.5 5150-5350 5470-5725 1000 Belgium NBG4115 User’s Guide...
Page 265 The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http://www.esd.lv for more details. 2.4 GHz frekvenèu joslas izmantoðanai ârpus telpâm nepiecieðama atïauja no Elektronisko sakaru direkcijas. Vairâk informâcijas: http://www.esd.lv. NBG4115 User’s Guide...
Page 266 • Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it from the power outlet. NBG4115 User’s Guide...
Page 267 Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. NBG4115 User’s Guide...
Page 268 Appendix F Legal Information NBG4115 User’s Guide...
Page 269: Index
Basic Service Set, See BSS DHCP status BitTorrent disclaimer Bridge/Repeater 51, 119 DNS server see also Domain name system DNS Server DNS server documentation related Certificate Authority Domain name See CA. vs host name. see also system name certifications NBG4115 User’s Guide...
Page 270 Internet connection wizard firewall stateful inspection Internet Group Multicast Protocol Firmware upload IP Address 114, 126 file extension IP address using HTTP dynamic firmware version 33, 57 IP Pool fragmentation threshold FTP. see also File Transfer Program NBG4115 User’s Guide...
Page 271 34, 57 IGMP PPPoE 46, 104 benefits dial-up connection see also Point-to-Point Protocol over Ethernet PPTP 47, 106 see also Point-to-Point Tunneling Protocol 123, 126, 212 global preamble mode how it works product registration inside local outside overview NBG4115 User’s Guide...
Page 272 Service and port numbers user authentication Service Set local (user) database Service Set IDentification RADIUS server Service Set IDentity. See SSID. Session Initiated Protocol SSID 33, 57, 78, 81 stateful inspection firewall VoIP Static DHCP Static Route Status NBG4115 User’s Guide...
Page 273 Wireless LAN wizard Xbox Live Wireless network basic guidelines channel encryption example MAC address filter overview security SSID Wireless security overview type wireless security 189, 247 Wireless tutorial 55, 65 Wizard setup complete Internet connection system information wireless LAN NBG4115 User’s Guide...
Page 274 Index NBG4115 User’s Guide...

ZyXEL Communications NBG4115 User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 Zyxel Netusb Share Center Utility

Chapter 3 The Web Configurator

Chapter 4 Connection Wizard

Chapter 5 AP Mode

Chapter 6 Tutorials

Part II: Technical Reference

Technical Reference

Chapter 7 Wireless LAN

Chapter 8 WAN

Chapter 9 LAN

Chapter 10 DHCP Server

Chapter 11 NAT

Chapter 12 DDNS

Chapter 13 Firewall

Chapter 14 Content Filtering

Chapter 15 Static Route

Chapter 16 Bandwidth Management

Chapter 17 Remote Management

Chapter 18 Upnp

Chapter 19 Wol

Chapter 20 Netusb

Chapter 21 System

Chapter 22 Logs

Chapter 23 Tools

Chapter 24 Sys OP Mode

Chapter 25 Language

Chapter 26 Troubleshooting

Appendix A Pop-Up Windows, Javascripts and Java Permissions

Appendix B IP Addresses and Subnetting

Appendix C Setting up Your Computer's IP Address

Appendix D Wireless Lans

Appendix E Common Services

Appendix F Legal Information

Index

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications NBG4115

Summary of Contents for ZyXEL Communications NBG4115