Page 1 NBG4615 Wireless N Gigabit NetUSB Router Default Login Details IMPORTANT! LAN IP http://192.168.1.1 READ CAREFULLY Address BEFORE USE. Password 1234 KEEP THIS GUIDE FOR FUTURE Firmware Version 1.0 REFERENCE. Edition 3, 04/2012 www.zyxel.com www.zyxel.com Copyright © 2012 ZyXEL Communications Corporation...
Page 2 Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG4615 up and running right away. It contains information on setting up your network and configuring for Internet access. NBG4615 User’s Guide...
Page 3: Table Of Contents
The WPS Button .............................19 ZyXEL NetUSB Share Center Utility .......................21 Connection Wizard ..........................29 Introducing the Web Configurator ......................39 Monitor ..............................45 NBG4615 Modes .............................51 Easy Mode ..............................53 Router Mode ............................65 Access Point Mode ..........................73 Universal Repeater Mode ........................81 WISP Mode .............................89 WISP + UR Mode ............................99...
Page 4 Contents Overview NBG4615 User’s Guide...
Page 5: Table Of Contents
Part I: User’s Guide ..................13 Chapter 1 Introduction............................15 1.1 Overview ............................15 1.2 Applications ............................15 1.3 Ways to Manage the NBG4615 ......................15 1.4 Good Habits for Managing the NBG4615 ..................16 1.5 LEDs ..............................16 1.6 Wall Mounting ...........................17 Chapter 2 The WPS Button..........................19 2.1 Overview ............................19 Chapter 3 ZyXEL NetUSB Share Center Utility....................21...
Page 6 5.1 Overview ............................39 5.2 Accessing the Web Configurator .......................39 5.2.1 Login Screen ...........................39 5.2.2 Password Screen ........................40 5.2.3 Home Screen ...........................41 5.3 Resetting the NBG4615 ........................43 5.3.1 How to Use the RESET Button ....................43 Chapter 6 Monitor..............................45 6.1 Overview ............................45 6.2 What You Can Do ..........................45...
Page 7 11.1 Overview ............................81 11.2 What You Can Do ..........................81 11.3 What You Need to Know .........................82 11.4 Setting your NBG4615 to Universal Repeater Mode ...............82 11.5 Universal Repeater Mode Status Screen ..................83 11.6 Universal Repeater Screen ......................85 11.6.1 No Security ..........................86 11.6.2 Static WEP ..........................87...
Page 8 14.4 Using Multiple SSIDs on the NBG4615 ..................111 14.4.1 Configuring Security Settings of Multiple SSIDs ..............112 14.5 Connecting the NBG4615 (in Universal Repeater Mode) to an AP or Wireless Router ....115 14.6 Connecting to USB Storage with the ZyXEL NetUSB Share Center Utility ........119 14.6.1 Multiple Connections to the USB Device ................
Page 9 17.5 Advanced WAN Screen ........................159 17.6 IGMP Snooping Screen ........................160 Chapter 18 LAN ..............................163 18.1 Overview ............................163 18.2 What You Can Do .........................163 18.3 What You Need To Know ......................163 18.3.1 IP Pool Setup ........................164 18.3.2 LAN TCP/IP .........................164 NBG4615 User’s Guide...
Page 10 21.1 Overview ............................181 21.1.1 What You Need To Know .....................181 21.2 General ............................181 Chapter 22 Static Route ............................183 22.1 Overview ............................183 22.2 IP Static Route Screen .........................183 Chapter 23 RIP..............................185 23.1 Overview ............................185 23.2 RIP Screen ..........................185 NBG4615 User’s Guide...
Page 11 27.2.1 Remote Management and NAT ...................205 27.2.2 System Timeout ........................205 27.3 WWW Screen ..........................206 Chapter 28 Universal Plug-and-Play (UPnP)......................207 28.1 Overview ............................207 28.2 What You Need to Know .......................207 28.2.1 NAT Traversal ........................207 28.2.2 Cautions with UPnP ......................207 28.3 UPnP Screen ..........................208 NBG4615 User’s Guide...
Page 12 30.2 Power, Hardware Connections, and LEDs ..................223 30.3 NBG4615 Access and Login ......................224 30.4 Internet Access ..........................226 30.5 Resetting the NBG4615 to Its Factory Defaults ................227 30.6 Wireless Router/AP Troubleshooting ....................227 30.7 USB Device Problems ........................229 30.8 ZyXEL Share Center Utility Problems ...................230 Appendix A Pop-up Windows, JavaScript and Java Permissions ...........233...
Page 13: User's Guide
User’s Guide...
Page 15: Introduction
1.2 Applications Your can create the following networks using the NBG4615: • Wired. You can connect network devices via the Ethernet ports of the NBG4615 so that they can communicate with each other and access the Internet. • Wireless. Wireless clients can connect to the NBG4615 to access network resources.
Page 16: Good Habits For Managing The Nbg4615
If you forget your password, you will have to reset the NBG4615 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG4615.
Page 17: Wall Mounting
Make sure the screws are fastened well enough to hold the weight of the NBG4615 with the connection cables. Align the holes on the back of the NBG4615 with the screws on the wall. Hang the NBG4615 on the screws.
Page 18 Chapter 1 Introduction Figure 2 Wall Mounting Example NBG4615 User’s Guide...
Page 19: The Wps Button
The WPS Button 2.1 Overview Your NBG4615 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually.
Page 20 Chapter 2 The WPS Button NBG4615 User’s Guide...
Page 21: Zyxel Netusb Share Center Utility
The ZyXEL NetUSB Share Center Utility allows you to work with the USB devices that are connected directly to the NBG4615 as if they are connected directly to your computer. This allows you to easily share USB-based devices such as printers, scanners, portable hard disks, MP3 players, faxes, and digital cameras (to name a few) with all the other people in your home or office as long as they are connected to the NBG4615 and have the ZyXEL NetUSB Share Center Utility installed.
Page 22: The Zyxel Netusb Share Center Utility
To open the ZyXEL NetUSB Share Center Utility, double-click its system tray icon. 3.2 The ZyXEL NetUSB Share Center Utility This section describes the ZyXEL NetUSB Share Center Utility main window. Figure 3 ZyXEL NetUSB Share Center Utility Main Window NBG4615 User’s Guide...
Page 23: The Menus
Table 3 ZyXEL NetUSB Share Center Utility Main Window Icons ICON DESCRIPTION Configure Server Click to open the NBG4615’s built-in Web Configurator, which you can use to set up the NBG4615 (see Chapter 5 on page 39 for details). Auto-Connect Printer You can set the selected printer to ‘auto-connect’...
Page 24 This opens the ZyXEL NetUSB Share Center Utility configuration window. Auto-Connect Printer List This opens the list window that displays all of the printing devices connected to the NBG4615. Help About This opens the about window, which provides information of the utility software and driver versions.
Page 25: The Zyxel Netusb Share Center Configuration Window
This section describes the utility’s configuration window, which allows you to set certain options for the utility. These options do not apply to the USB devices connected to the NBG4615. You can open it by clicking the Tools > Configuration menu command.
Page 26: Exit The Zyxel Netusb Share Center Utility
If you want to exit the ZyXEL NetUSB Share Center Utility when your computer is not connected to any USB device, follow the steps below: Click System > Exit on the Utility screen. The Utility will automatically close. Or you can close the Utlity screen first, then exit: NBG4615 User’s Guide...
Page 27 Chapter 3 ZyXEL NetUSB Share Center Utility Click the X on the upper-right corner of the Utility: This will close the Utility screen to an icon at the system tray of your computer. Right-click on the Utility’s icon and click Exit. NBG4615 User’s Guide...
Page 28 Chapter 3 ZyXEL NetUSB Share Center Utility NBG4615 User’s Guide...
Page 29: Connection Wizard
Launch your web browser and type "http://192.168.1.1" as the website address. Type "1234" (default) as the password and click Login. Note: The Wizard appears when the NBG4615 is accessed for the first time or when you reset the NBG4615 to its default factory settings.
Page 30: Connection Type: Dhcp
The following screen depends on your Internet connection type. Enter the details provided by your Internet Service Provider (ISP) in the fields (if any). Internet Connection Type Figure 9 Your NBG4615 detects the following Internet Connection type. Table 7 Internet Connection Type CONNECTION TYPE DESCRIPTION...
Page 31: Connection Type: Static Ip
Internet Connection Type Select the Static IP option. IP Address Enter the IP address provided by your ISP. Subnet Mask Enter the IP subnet mask in this field. Default Gateway Enter the gateway IP address in this field. NBG4615 User’s Guide...
Page 32: Connection Type: Pppoe
By implementing PPPoE directly on the NBG4615 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4615 does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Page 33: Connection Type: Pptp
Dynamic IP Select this radio button if your ISP did not assign you a fixed IP address. Static IP Select this radio button, provided by your ISP to give the NBG4615 a fixed, unique IP address. IP Address Type the name of your service provider.
Page 34: Connection Type: L2Tp
Dynamic IP Select this radio button if your ISP did not assign you a fixed IP address. Static IP Select this radio button, provided by your ISP to give the NBG4615 a fixed, unique IP address. PPTP Address Type the (static) IP address assigned to you by your ISP.
Page 35: Router Password
Table 11 Internet Connection Type: L2TP (continued) LABEL DESCRIPTION Static IP Select this radio button, provided by your ISP to give the NBG4615 a fixed, unique IP address. L2TP Address Type the (static) IP address assigned to you by your ISP.
Page 36: Wireless Security
Figure 16 Router Password 4.5 Wireless Security Configure Wireless Settings. Configure the wireless network settings on your NBG4615 in the following screen. The fields that show up depend on the kind of security you select. 4.5.1 Wireless Security: No Security Choose No Security in the Wireless Security screen to let wireless devices within range access your wireless network.
Page 37: Wireless Security: Wpa-Psk/Wpa2-Psk
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless Network LAN. Name (SSID) If you change this field on the NBG4615, make sure all wireless stations use the same SSID in order to access the network. Security mode Select a Security level from the drop-down list box.
Page 38 You can also click GO to open the Easy Mode Web Configurator of your NBG4615. You have successfully set up your NBG4615 to operate on your network and access the Internet. You are now ready to connect wirelessly to your NBG4615 and access the Internet.
Page 39: Introducing The Web Configurator
H A PT ER Introducing the Web Configurator 5.1 Overview This chapter describes how to access the NBG4615 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the NBG4615 via Internet browser.
Page 40: Password Screen
215. The time is in 24-hour format, for example 15:00 is 3:00 PM. 5.2.2 Password Screen You should see a screen asking you to change your password (highly recommended) as shown next. Figure 21 Change Password Screen NBG4615 User’s Guide...
Page 41: Home Screen
Administrator Inactivity Timer field expires (default five minutes; go to Chapter 29 on page 213 to change this). Simply log back into the NBG4615 if this happens. 5.2.3 Home Screen If you have previously logged into the Web Configurator but did not click Logout, you may be redirected to the Home screen.
Page 42: Weather Edit
5.2.3.2 Time/Date Edit One timezone can cover more than one country. You can choose a particular country in which the NBG4615 is located and have the NBG4615 display and use the current time and date for its logs. Click the icon to change the Weather display.
Page 43: Resetting The Nbg4615
Make sure the power LED is on. Press the RESET button for longer than 1 second to restart/reboot the NBG4615. Press the RESET button for longer than 5 seconds to set the NBG4615 back to its factory-default configurations. NBG4615 User’s Guide...
Page 44 Chapter 5 Introducing the Web Configurator NBG4615 User’s Guide...
Page 45: Monitor
• Use the WLAN Station Status screen to view the wireless stations that are currently associated to the NBG4615 (Section 6.7 on page 49). 6.3 The Log Screen The Web Configurator allows you to look at all of the NBG4615’s logs in one location. NBG4615 User’s Guide...
Page 46: View Log
6.3.1 View Log Use the View Log screen to see the logged messages for the NBG4615. The log wraps around and deletes the old entries after it fills. Select what logs you want to see from the Display drop list. The log choices depend on your settings in the Log Settings screen.
Page 47: Bw Mgmt Monitor
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4615’s LAN as a DHCP server or disable it. When configured as a server, the NBG4615 provides the TCP/IP configuration for the clients.
Page 48: Packet Statistics
Click the Packet Statistics (Details...) hyperlink in the Status screen. Read-only information here includes port status, packet specific statistics and the "system up time". The Poll Interval(s) field is configurable and is used for refreshing the screen. Figure 29 Summary: Packet Statistics NBG4615 User’s Guide...
Page 49: Wlan Station Status
Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the NBG4615 in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings.
Page 50 MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the NBG4615’s WLAN network. Refresh Click Refresh to reload the list. NBG4615 User’s Guide...
Page 51: Nbg4615 Modes
Status screen in this mode. • WISP + UR: In this mode, the NBG4615 has the same function as in WISP mode. In addition, it can provide WiFi function to the clients on the LAN side. Go to Section 13.4 on page 101...
Page 52 Chapter 7 NBG4615 Modes For more information on these modes and to change the mode of your NBG4615, refer to Chapter 29 on page 221. The menu for changing device modes is available in Expert mode only. Note: Choose your Device Mode carefully to avoid having to change it later.
Page 53: Easy Mode
The Web Configurator is set to Easy Mode by default. You can configure several key features of the NBG4615 in this mode. This mode is useful to users who are not fully familiar with some features that are usually intended for network administrators.
Page 54: What You Can Do
• Use this Navigation Panel to opt out of the Easy mode (Section 8.4 on page 55). • Use the Network Map screen to check if your NBG4615 can ping the gateway and whether it is connected to the Internet (Section 8.5 on page 55).
Page 55: Navigation Panel
Note: The Network MAP is viewable by Windows XP (need to install patch), Windows Vista and Windows 7 users only. For Windows XP (Service Pack 2) users, you can see the network devices connected to the NBG4615 by downloading the LLTD (Link Layer Topology Discovery) patch from the Microsoft Website.
Page 56: Control Panel
Chapter 8 Easy Mode The line connecting the NBG4615 to the gateway becomes green when the NBG4615 is able to ping the gateway. It becomes red when the ping initiating from the NBG4615 does not get a response from the gateway. The same rule applies to the line connecting the gateway to the Internet.
Page 57: Game Engine
Use this screen to set the day of the week and time of the day when your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. Disabling the wireless capability lowers the energy consumption of the of the NBG4615. NBG4615 User’s Guide...
Page 58: Content Filter
In this time format, midnight is 00:00 and progresses up to 24:00. For example, 6:00 PM is 18:00. Apply Click Apply to save your changes back to the NBG4615. Reset Click Reset to begin configuring this screen afresh. 8.6.3 Content Filter Use this screen to restrict access to certain websites, based on keywords contained in URLs, to which you do not want users in your network to open.
Page 59: Bandwidth Mgmt
Use this screen to set bandwidth allocation to pre-defined services and applications for bandwidth allocation. The NBG4615 uses bandwidth management for incoming and outgoing traffic. Rank the services and applications by dragging them accordingly from High to Low and click Apply. Click Cancel to close the screen.
Page 60: Firewall
8.6.5 Firewall Enable this feature to protect the network from Denial of Service (DoS) attacks. The NBG4615 blocks repetitive pings from the WAN that can otherwise cause systems to slow down or hang. Figure 40 Firewall Click OK to close this screen.
Page 61: Wps
Verify Type the password again to confirm. password Apply Click Apply to save your changes back to the NBG4615. Cancel Click Cancel to close this screen. Click this to configure the WPS screen. You can transfer the wireless settings configured here (Wireless Security screen) to another wireless device that supports WPS.
Page 62: Status Screen In Easy Mode
Register to associate to each other and perform the wireless security information synchronization. Exit Click Exit to close this screen. 8.7 Status Screen in Easy Mode In the Network Map screen, click Status to view read-only information about the NBG4615. NBG4615 User’s Guide...
Page 63 The following table describes the labels in this screen. Table 28 Status Screen in Easy Mode ITEM DESCRIPTION Name This is the name of the NBG4615 in the network. You can change this in the Maintenance > General screen in Section 29.3 on page 213. Time This is the current system date and time.
Page 64 Chapter 8 Easy Mode NBG4615 User’s Guide...
Page 65: Router Mode
Router Mode 9.1 Overview The NBG4615 is set to router mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the NBG4615 connects the local network (LAN1 ~ LAN4) to the Internet.
Page 66 Click this button to refresh the status screen statistics. Click this icon to see the Status page. The information in this screen depends on the device mode you select. Click this icon to see the Monitor navigation menu. NBG4615 User’s Guide...
Page 67 This shows the channel number which you select manually. - Operating Channel This shows the channel number which the NBG4615 is currently using over the wireless LAN. - Security Mode This shows the level of wireless security the NBG4615 is using.
Page 68: Navigation Panel
This displays what percentage of the NBG4615’s processing ability is currently used. When this percentage is close to 100%, the NBG4615 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Page 69 Table 31 Navigation Panel: Router Mode LINK FUNCTION Status This screen shows the NBG4615’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. MONITOR Use this screen to view the list of activities recorded by your NBG4615.
Page 70 Snooping that subscribe to multicast services. Use this screen to configure LAN IP address and subnet mask. IP Alias Use this screen to have the NBG4615 apply IP alias to create LAN subnets. DHCP Server General Use this screen to enable the NBG4615’s DHCP server.
Page 71 Monitor Use this screen to view the amount of network bandwidth that applications running in the network are using. Remote Use this screen to be able to access the NBG4615 from the LAN, Management WAN or both. UPnP General Use this screen to enable UPnP on the NBG4615.
Page 72 Chapter 9 Router Mode NBG4615 User’s Guide...
Page 73: Access Point Mode
Access Point Mode 10.1 Overview Use your NBG4615 as an access point (AP) if you already have a router or gateway on your network. In this mode your NBG4615 bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example.
Page 74: Setting Your Nbg4615 To Ap Mode
Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. To use your NBG4615 as an access point, go to Maintenance > Sys OP Mode > General and select Access Point mode.
Page 75: Configuring Your Wlan, Bandwidth Management And Maintenance Settings
Chapter 26 on page 197 for information on configuring your Bandwidth Management screen. • See Chapter 29 on page 213 for information on configuring your Maintenance settings. 10.4 AP Mode Status Screen Click to open the Status screen. NBG4615 User’s Guide...
Page 76 This shows the wireless adapter MAC Address of your device. - Status This shows the current status of the Wireless LAN - ON or OFF. - Name (SSID) This shows a descriptive name used to identify the NBG4615 in the wireless LAN. NBG4615 User’s Guide...
Page 77: Navigation Panel
This displays what percentage of the NBG4615’s processing ability is currently used. When this percentage is close to 100%, the NBG4615 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Page 78: Lan Screen
Use this section to configure your LAN settings while in Access Point mode. Click Network > LAN to see the screen below. Note: If you change the IP address of the NBG4615 in the screen below, you will need to log into the NBG4615 again using the new IP address.
Page 79 Also when you select this, you cannot enter an IP address for your NBG4615 in the field below. Use Defined LAN IP Click this if you want to specify the IP address of your NBG4615. Or if your Address ISP or network administrator gave you a static IP address to access the network or the Internet.
Page 80 Chapter 10 Access Point Mode NBG4615 User’s Guide...
Page 81: Universal Repeater Mode
• Use the Status screen to view read-only information about your NBG4615 (Section 11.5 on page 83). • Use the LAN screen to set the IP address for your NBG4615 acting as an access point (Section 10.5 on page 78).
Page 82: What You Need To Know
11.4 Setting your NBG4615 to Universal Repeater Mode Connect your computer to the LAN port of the NBG4615. The default IP address of the NBG4615 is “192.168.1.2”. In this case, your computer must have an IP address in the range between “192.168.1.3” and “192.168.1.254”.
Page 83: Universal Repeater Mode Status Screen
Note: The Universal Repeater mode IP address is always the same as the Access Point mode IP address. If you changed the IP address of your NBG4615 while in Access Point mode, use this IP address in Universal Repeater mode.
Page 84 This displays what percentage of the NBG4615’s processing ability is currently used. When this percentage is close to 100%, the NBG4615 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Page 85: Universal Repeater Screen
For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and N/ A when the WLAN is disabled. 11.5.0.1 Navigation Panel Use the menu in the navigation panel to configure NBG4615 features in Universal Repeater mode. The following screen and table show the features you can configure in Universal Repeater mode.
Page 86: No Security
(B) through the NBG4615 (A) in universal repeater mode, you must set the channel number in the Wireless LAN > General screen to be the same as the one on the wireless router or AP to which the NBG4615 wants to connect.
Page 87: Static Wep
Select a default WEP key to use for data encryption. WEP Key 1 ~ The WEP keys are used to encrypt data. Both the NBG4615 and the access point WEP Key 4 must use the same WEP key for data transmission.
Page 88: Wpa(2)-Psk
LABEL DESCRIPTION Universal Repeater Parameters Enable Select this option to have the NBG4615 connect to the specified access point. SSID Enter the name of the access point to which you are connecting. MAC Address Enter the MAC address of the access point to which you are connecting.
Page 89: Wisp Mode
Use this mode if you already have an access point or router in your network. In the example below, one NBG4615 (A) is configured as a wireless client and another is used as an access point (B). The wireless client has two clients that need to connect to the Internet. The NBG4615 wirelessly connects to the available access point (B).
Page 90: Setting Your Nbg4615 To Wisp Mode
Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. To set your NBG4615 to WISP Mode, go to Maintenance > Sys OP Mode > General and select WISP Mode.
Page 91: Wisp Mode Status Screen
Chapter 12 WISP Mode The default IP address of the NBG4615 is “192.168.1.1”. If you did not change this, you can use the same IP address in WISP Mode. Open a web browser such as Internet Explorer and type “192.168.1.1” as the web address in your web browser.
Page 92 This displays what percentage of the NBG4615’s processing ability is currently used. When this percentage is close to 100%, the NBG4615 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Page 93 A when the WLAN is disabled. 12.4.0.1 Navigation Panel Use the menu in the navigation panel to configure NBG4615 features in WISP mode. The following screen and table show the features you can configure in Access Point mode. Figure 65 Menu: WISP Mode...
Page 94: Wireless Lan General Screen
Chapter 12 WISP Mode 12.5 Wireless LAN General Screen Use this screen to configure the wireless LAN settings of your NBG4615. Go to Configuration > Wireless LAN > General to open the following screen. Figure 66 WISP Mode: Wireless LAN > General The following table describes the labels in this screen.
Page 95: Static Wep
A passphrase functions like a password. In WEP security mode, it is further converted by the NBG4615 into a complicated string that is referred to as the “key”. This key is requested from all devices wishing to connect to a wireless network.
Page 96: Wpa(2)-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NBG4615 and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 97: Site Survey Screen
SSID This displays the SSID of the wireless device. indicates the wireless device is added to an activated profile and the NBG4615 is connecting to it. BSSID This displays the MAC address of the wireless device.
Page 98 Chapter 12 WISP Mode NBG4615 User’s Guide...
Page 99: Wisp + Ur Mode
WISP + UR Mode 13.1 Overview In WISP + UR mode, the NBG4615 has the same function as in WISP mode. In addition, it can provide WiFi function to the clients on the LAN side. In the example below, one NBG4615 (A) is configured as WISP +UR mode and another is used as an access point (B).
Page 100: Setting Your Nbg4615 To Wisp + Ur Mode
Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. To set your NBG4615 to WISP + UR Mode Mode, go to Maintenance > Sys OP Mode > General and select WISP + UR Mode.
Page 101: Wisp + Ur Mode Status Screen
Chapter 13 WISP + UR Mode The default IP address of the NBG4615 is “192.168.1.1”. If you did not change this, you can use the same IP address in WISP + UR Mode. Open a web browser such as Internet Explorer and type “192.168.1.1”...
Page 102 This displays what percentage of the NBG4615’s processing ability is currently used. When this percentage is close to 100%, the NBG4615 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Page 103 A when the WLAN is disabled. 13.4.0.1 Navigation Panel Use the menu in the navigation panel to configure NBG4615 features in WISP + UR mode. The following screen and table show the features you can configure in Access Point mode.
Page 104 Chapter 13 WISP + UR Mode Figure 75 Menu: WISP +UR Mode Refer to Table 31 on page 69 for descriptions of the labels shown in the Navigation panel. NBG4615 User’s Guide...
Page 105: Tutorials
14.2.1 Push Button Configuration (PBC) Make sure that your NBG4615 is turned on. Make sure the WLAN switch (at the back panel of the NBG4615) is set to ON, and that the device is placed within range of your computer.
Page 106: Pin Configuration
Log into NBG4615’s Web Configurator and press the Push Button in the Configuration > Network > Wireless Client > WPS Station screen. Note: Your NBG4615 has a WPS button located on its back panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other.
Page 107: Configure Wireless Security Without Wps
This may take up to two minutes. Then the wireless client is able to communicate with the NBG4615 securely. The following figure shows you the example to set up wireless network and security on NBG4615 and wireless client (ex. NWD210N in this example) by using PIN method.
Page 108 Section 5.2 on page 39). Make sure the WLAN switch (at the back panel of the NBG4615) is set to ON. Open the Configuration > Wireless LAN > General screen in the AP’s Web Configurator. Confirm that the status of wireless LAN is ON.
Page 109: Configure Your Notebook
Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. The NBG4615 supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 110 Chapter 14 Tutorials Select SSID_Example3 and click Connect. Select WPA-PSK and type the security key in the following screen. Click Next. The Confirm Save window appears. Check your settings and click Save to continue. NBG4615 User’s Guide...
Page 111: Using Multiple Ssids On The Nbg4615
14.4 Using Multiple SSIDs on the NBG4615 You can configure more than one SSID on a NBG4615 when it is operating in access point or universal repeater mode. This allows you to configure multiple independent wireless networks on the NBG4615 as if there were multiple APs (virtual APs).
Page 112: Configuring Security Settings Of Multiple Ssids
SSID_VoIP SSID_Guest 14.4.1 Configuring Security Settings of Multiple SSIDs The NBG4615 is in access point mode by default. If you want to use multiple SSIDs when the NBG4615 is in universal repeater mode, see Chapter 11 on page 81 for how to set the NBG4615 to universal repeater mode.
Page 113 Click the Security tab to configure security settings for each SSID. Select SSID_Worker from the SSID drop-down list. Configure the screen as follows. Click Apply. 10 Select SSID_Guest from the SSID drop-down list. Configure the screen as follows. Click Apply. NBG4615 User’s Guide...
Page 114 SSID_VoIP from the SSID drop-down list and select Allow in the Policy field. Enter the VoIP device’s MAC address in the Add a station Mac Address field and click Apply to allow only the VoIP device to associate with the NBG4615 using this SSID. NBG4615 User’s Guide...
Page 115: Connecting The Nbg4615 (In Universal Repeater Mode) To An Ap Or Wireless Router
AP or wireless router through the NBG4615, set the NBG4615 to Universal Repeater mode and then associate the NBG4615 with the AP or wireless router. The NBG4615 must be within the transmission range of the AP or wireless router.
Page 116 10 Go to Configuration > Network > Wireless LAN > Universal Repeater to connect the NBG4615 wirelessly to an AP. Select Enable. Enter the SSID of the existing AP or wireless router to which you want to connect (“SSIDofMyAP” in this example). Enter the wireless security settings which are the same as those on the existing AP or wireless router to access it (WPA-PSK and “KeyofMyWirelessNetwork”...
Page 117 Chapter 14 Tutorials 12 Go to the Status screen. If the NBG4615 has successfully connected to an AP or wireless router, it displays the SSID and MAC address of the AP or wireless router in the field next to WLAN Station Status under Device Information.
Page 118 Chapter 14 Tutorials To check whether a wireless client is currently connecting to the NBG4615, click the WLAN Station Status (Details...) hyperlink under Summary in the Status screen or Monitor > WLAN Station Status. See Chapter 6 on page 45 for more information.
Page 119: Connecting To Usb Storage With The Zyxel Netusb Share Center Utility
14.6 Connecting to USB Storage with the ZyXEL NetUSB Share Center Utility This tutorial shows you how to connect to a USB device over your NBG4615 network by using the ZyXEL NetUSB Share Center Utility. Install the ZyXEL NetUSB Share Center Utility on the computer to which you want to connect the USB device.
Page 120 The Utility is still connected. Do not exit the Utility until the USB device is disconnected via the Utility or until you receive a request to disconnect. See Chapter 3 on page 26 for details on how to exit the Utility. NBG4615 User’s Guide...
Page 121: Automatically Connecting To A Usb Printer
Chapter 3 on page 22 details on the installation. Connect a USB printer to one of the USB ports of the NBG4615. Open the ZyXEL NetUSB Sharing Center Utility on your computer. The name of the USB printer automatically shows in the Utility screen.
Page 122 The printer will be automatically added to your printer list. The Utility supports one connection to the NBG4615’s USB device at a time. If more than one computer is using the printer and are all auto-connected to the USB device, the second computer automatically starts printing after the first computer finishes its printing task.
Page 123: Technical Reference
Technical Reference...
Page 125: Wireless Lan
HAPTER Wireless LAN 15.1 Overview This chapter discusses how to configure the wireless network settings in your NBG4615. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Figure 78 Example of a Wireless Network The wireless network is the part in the blue circle.
Page 126: What You Should Know
• Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 15.9 on page 139). • Use the WDS screen to configure Wireless Distribution System on your NBG4615 (Section 15.10 on page 140).
Page 127 The types of encryption you can choose depend on the type of user authentication. (See page 127 for information about this.) Table 45 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security Static WEP WPA-PSK Strongest WPA2-PSK WPA2 NBG4615 User’s Guide...
Page 128: General Wireless Lan Screen
When you select WPA2 or WPA2-PSK in your NBG4615, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the NBG4615.
Page 129: Guest Wlan
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG4615 (Z), but not other networks connected to the Z. In the following figure, a guest user can access the Internet from the guest wireless network A via Z but not the home or company network Note: The home or company network N and Guest WLAN network are independent networks.
Page 130 Chapter 15 Wireless LAN Figure 80 Example: Bandwidth for Different Networks 600 kbps 300 kbps 100 kbps Click Network > Wireless LAN to open the General screen. Figure 81 Network > Wireless LAN > General NBG4615 User’s Guide...
Page 131 Wireless LAN This shows whether the wireless LAN is ON or OFF. You can enable or disable the wireless LAN by using the WLAN switch located on the back panel of the NBG4615. Network The SSID (Service Set IDentity) identifies the Service Set with which a wireless Name(SSID) client is associated.
Page 132: Wireless Security Screen
Both the wireless stations and the access points must use the same WEP key. Your NBG4615 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time.
Page 133 A passphrase functions like a password. In WEP security mode, it is further converted by the NBG4615 into a complicated string that is referred to as the “key”. This key is requested from all devices wishing to connect to a wireless network.
Page 134: Wpa-Psk/Wpa2-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NBG4615 and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 135: Mac Filter
Chapter 15 Wireless LAN 15.4 MAC Filter The MAC filter screen allows you to configure the NBG4615 to give exclusive access to devices (Allow) or exclude devices from accessing the NBG4615 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Page 136: Wireless Lan Advanced Screen
256 and 2346. Output Power Set the output power of the NBG4615 in this field. If there is a high density of APs in an area, decrease the output power of the NBG4615 to reduce interference with other APs. Select one of the following 100%, 90%, 75%, 50%, 25% or 10%.
Page 137: Quality Of Service (Qos) Screen
Select Auto to increase data throughput. However, this may make data transfer more prone to errors. Select Long to prioritize data integrity. This may be because your wireless network is busy and congested or the NBG4615 is located in an environment prone to radio interference. Extension This is set to Auto by default.
Page 138 This is the 802.11 mode used. Only compliant WLAN devices can associate with the NBG4615. SSID This is the name of the wireless network (the NBG4615’s first SSID). Security This is the type of wireless security employed by the network.
Page 139: Wps Station Screen
Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Network > Wireless LAN > Scheduling tab. NBG4615 User’s Guide...
Page 140: Wds Screen
A Wireless Distribution System (WDS) is a wireless connection between two or more APs. Use this screen to set the operating mode of your NBG4615 to AP + Bridge or Bridge and establish wireless links with other APs. You need to know the MAC address of the peer device, which also must be in bridge mode.
Page 141 This field is not available when you select Disable in the Basic Setting field. Remote MAC This is the MAC address of the peer device that your NBG4615 wants to make a Address bridge connection with.
Page 142 The Encryp Key is used to encrypt data. Peers must use the same key for data transmission. Apply Click Apply to save your changes to NBG4615. Cancel Click Cancel to reload the previous configuration for this screen. NBG4615 User’s Guide...
Page 143: Ipv6
Every IPv6 device is able to generate its own and unique IP address automatically when IPv6 is initiated on its interface. It combines the prefix and the interface ID (generated from its own Ethernet MAC address) to form a complete IPv6 address. NBG4615 User’s Guide...
Page 144: The Ipv6 Screen
When IPv6 is enabled on a device, its interface automatically generates a link-local address (beginning with fe80). When the interface is connected to a network with a router and the NBG4615 is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which combines its interface ID and global and subnet information advertised from the router.
Page 145 LAN IPv6 Address Setup LAN IPv6 address Enter a valid IPv6 address for the LAN using colon (:) hexadecimal notation. LAN IPv6 Link-local This shows the IPv6 link-local address that the NBG4615 generates Address automatically. Address Autoconfiguration Setup Enable Address Select the checkbox to enable Address Autoconfiguration on the NBG4615.
Page 146: Ipv6 Connection: Dhcpv6
IPv6 prefix and DNS information. Apply Click Apply to save your changes back to the NBG4615. Cancel Click Cancel to reload the previous configuration for this screen.
Page 147: Ipv6 Connection: Link-Local Only
Click Cancel to reload the previous configuration for this screen. 16.2.3 IPv6 Connection: Link-local only Use the Link-local only connection mode for the NBG4615 to communicate with other IPv6 devices on the LAN side. If you choose this mode, the LAN IPv6 Link-local Address will be shown in the screen.
Page 148 Chapter 16 IPv6 NBG4615 User’s Guide...
Page 149: Wan
HAPTER 17.1 Overview This chapter discusses the NBG4615’s WAN screens. Use these screens to configure your NBG4615 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 150: Configuring Your Internet Connection
(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG4615, which makes it accessible from an outside network. It is used by the NBG4615 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG4615 tries to access the Internet.
Page 151: Multicast
A and D. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The NBG4615 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
Page 152 _@$./ characters, and it can be up to 31 characters long. Password Type the password associated with the user name above. Use up to 64 ASCII characters except [, ] and ?. This field can be blank. Retype to Type your password again for confirmation. Confirm NBG4615 User’s Guide...
Page 153: Pppoe Encapsulation
WAN DNS Assignment First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4615's WAN IP address). The field to the right displays the (read-only) Second DNS DNS server IP address that the ISP assigns.
Page 154 By implementing PPPoE directly on the NBG4615 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG4615 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 155: Pptp Encapsulation
WAN DNS Assignment First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4615's WAN IP address). The field to the right displays the (read-only) DNS Second DNS server IP address that the ISP assigns.
Page 156 Type the password associated with the User Name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out. NBG4615 User’s Guide...
Page 157: L2Tp Encapsulation
WAN DNS Assignment First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the NBG4615's WAN IP address). The field to the right displays the Second DNS Server (read-only) DNS server IP address that the ISP assigns.
Page 158 Get automatically Select this option If your ISP did not assign you a fixed IP address. This is from ISP the default selection. Use Fixed IP Address Select this option If the ISP assigned a fixed IP address. NBG4615 User’s Guide...
Page 159: Advanced Wan Screen
Use this screen to enable Multicast and enable Auto-bridge. Note: The categories shown in this screen are independent of each other. To change your NBG4615’s advanced WAN settings, click Network > WAN > Advanced. The screen appears as shown. NBG4615 User’s Guide...
Page 160: Igmp Snooping Screen
Auto-Subnet Configuration None Select this option to have the NBG4615 do nothing when it gets a WAN IP address in the range of 192.168.x.y (where x and y are from zero to nine) or in the same subnet as the LAN IP address.
Page 161 Table 64 Network > WAN > IGMP Snooping LABEL DESCRIPTION Enable IGMP Snooping Select this option to have the NBG4615 use IGMP snooping. Check the LAN port/s to which IGMP snooping applies. Apply Click Apply to save your changes back to the NBG4615.
Page 162 Chapter 17 WAN NBG4615 User’s Guide...
Page 163: Lan
18.2 What You Can Do • Use the IP screen to change the IP address for your (Section 18.4 on page 164). • Use the IP Alias screen to have the NBG4615 apply IP alias to create LAN subnets (Section 18.5 on page 165).
Page 164: Ip Pool Setup
Ethernet interface. The NBG4615 supports three logical LAN interfaces via its single physical Ethernet interface with the NBG4615 itself as the gateway for each LAN network. 18.4 LAN IP Screen Use this screen to change the IP address for your NBG4615. Click Network > LAN > IP. NBG4615 User’s Guide...
Page 165: Ip Alias Screen
Cancel Click Cancel to begin configuring this screen afresh. 18.5 IP Alias Screen Use this screen to have the NBG4615 apply IP alias to create LAN subnets. Click LAN IP Alias. Figure 106 Network > LAN > IP Alias The following table describes the labels in this screen.
Page 166 Chapter 18 LAN Table 66 Network > LAN > IP Alias (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG4615. Cancel Click Cancel to begin configuring this screen afresh. NBG4615 User’s Guide...
Page 167: Dhcp Server
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the NBG4615’s LAN as a DHCP server or disable it. When configured as a server, the NBG4615 provides the TCP/IP configuration for the clients.
Page 168: Advanced
MAC addresses. You can also use this screen to configure the DNS server information that the NBG4615 sends to the DHCP clients. To change your NBG4615’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays.
Page 169 Type the LAN IP address of a computer on your LAN. DNS Server DNS Servers The NBG4615 passes a DNS (Domain Name System) server IP address (in the Assigned by DHCP order you specify here) to the DHCP clients. The NBG4615 only passes this...
Page 170 LAN IP address displays in the field to the right (read-only). The NBG4615 tells the DHCP clients on the LAN that the NBG4615 itself is the DNS server. When a computer on the LAN sends a DNS query to the NBG4615, the NBG4615 forwards the query to the NBG4615's system DNS server (configured in the WAN >...
Page 171: Nat
You assign the LAN IP addresses to the devices (A to D) connected to your NBG4615. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the NBG4615, which is 192.168.1.1.
Page 172: What You Need To Know
The following terms and concepts may help as you read through this chapter. Inside/Outside This denotes where a host is located relative to the NBG4615, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 173: General
IP source address in each packet and then forwards it to the Internet. The NBG4615 keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Page 174: Application
Application screen. If you do not assign a Default Server IP address, the NBG4615 discards all packets received for ports that are not specified in the Application screen or remote management.
Page 175 Click the Edit icon to display and modify an existing rule setting in the fields under Add Application Rule. Click the Remove icon to delete a rule. Apply Click Apply to save your changes back to the NBG4615. Cancel Click Cancel to begin configuring this screen afresh. NBG4615 User’s Guide...
Page 176: Advanced
Type a port number or the ending port number in a range of port numbers. Trigger The trigger port is a port (or a range of ports) that causes (or triggers) the NBG4615 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Port Type a port number or the starting port number in a range of port numbers.
Page 177: Technical Reference
Chapter 20 NAT 20.5 Technical Reference The following section contains additional technical information about the NBG4615 features described in this chapter. 20.5.1 NATPort Forwarding: Services and Port Numbers A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Page 178: Trigger Port Forwarding
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The NBG4615 records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the NBG4615's WAN port receives a response with a specific port number and protocol ("incoming"...
Page 179: Two Points To Remember About Trigger Ports
Chapter 20 NAT 20.5.5 Two Points To Remember About Trigger Ports Trigger events only happen on data that is going coming from inside the NBG4615 and going to the outside. If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it.
Page 180 Chapter 20 NAT NBG4615 User’s Guide...
Page 181: Ddns
IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the NBG4615 or a server in your network. Note: The NBG4615 must have a public global IP address and you should have your registered DDNS account information on hand.
Page 182 (","). User Name Enter your user name. Password Enter the password assigned to you. Apply Click Apply to save your changes back to the NBG4615. Cancel Click Cancel to begin configuring this screen afresh. NBG4615 User’s Guide...
Page 183: Static Route
N3 because it doesn't know that there is a route through the same remote node Router 1 (via gateway Router 2). The static routes are for you to tell the NBG4615 about the networks beyond the remote nodes.
Page 184 Metric This is the number assigned to the route. Delete Click the Delete icon to remove a static route from the NBG4615. A window displays asking you to confirm that you want to delete the route. Cancel Click Cancel to begin configuring this screen afresh.
Page 185: Rip
The following table describes the labels in this screen. Table 75 Network > RIP LABEL DESCRIPTION Select the RIPv1 or RIPv2 you want the NBG4615 to use. Otherwise select None. Apply Click Apply to save your changes back to the NBG4615.
Page 186 Chapter 23 RIP NBG4615 User’s Guide...
Page 187: Firewall
Firewall 24.1 Overview Use these screens to enable and configure the firewall that protects your NBG4615 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 188 (click the General tab under Firewall and then click the Enable Firewall check box). The NBG4615's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG4615 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 189: General
Keep the firewall in a secured (locked) room. 24.2 General Use this screen to enable or disable the NBG4615’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 121 Security > Firewall > General l The following table describes the labels in this screen.
Page 190 Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Respond to Ping The NBG4615 will not respond to any incoming Ping requests when Disable is selected. Select WAN to reply to incoming WAN Ping requests. Apply Click Apply to save the settings.
Page 191 Drop - Traffic matching the conditions of the firewall rule are stopped. Delete Click Delete to remove the firewall rule. Cancel Click Cancel to start configuring this screen again. Appendix E on page 295 for commonly used services and port numbers. NBG4615 User’s Guide...
Page 192 Chapter 24 Firewall NBG4615 User’s Guide...
Page 193: Content Filtering
The file path is the characters that come after the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. Since the NBG4615 checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/...
Page 194 WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server. Enable URL The NBG4615 can block Web sites with URLs that contain certain keywords in Keyword Blocking the domain name or IP address. For example, if the keyword "bad" was enabled, all sites containing this keyword in the domain name or IP address will be blocked, e.g., URL http://www.website.com/bad.html would be blocked.
Page 195: Technical Reference
For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw. Full Path URL Checking Full path URL checking has the NBG4615 check the characters that come before the last slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/.
Page 196 For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/ news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename. NBG4615 User’s Guide...
Page 197: Bandwidth Management
• Use the Advanced screen to configure bandwidth managements rule for the pre-defined services and applications (Section 26.5 on page 198). • Use the Monitor screen to view the amount of network bandwidth that applications running in the network are using (Section 26.6 on page 203). NBG4615 User’s Guide...
Page 198: What You Need To Know
You can also use this screen to configure bandwidth management rule for other services or applications that are not on the pre-defined list of NBG4615. Additionally, you can define the source and destination IP addresses and port for a service or application.
Page 199 This is traffic from LAN/WLAN to WAN. Downstream Select the total amount of bandwidth (from 64 Kilobits to 32 Megabits) that you Bandwidth want to dedicate to uplink traffic. This is traffic from WAN to LAN/WLAN. NBG4615 User’s Guide...
Page 200: Rule Configuration: Application Rule Configuration
This is the category where a service belongs. Service This is the name of the service. Select the check box to have the NBG4615 apply this bandwidth management rule. Advanced Setting Click the Edit icon to open the Rule Configuration screen where you can modify the rule.
Page 201: Rule Configuration: User Defined Service Rule Configuration
Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through the NBG4615 and be managed by bandwidth management. Bandwidth Select Maximum Bandwidth or Minimum Bandwidth and specify the maximum or minimum bandwidth allowed for the rule in kilobits per second.
Page 202 Source Address Start Enter the starting IP address of the computer that initializes traffic for the application or service. The NBG4615 applies bandwidth management to traffic initiating from this computer. Source Address End Enter the ending IP address of the computer that initializes traffic for the application or service.
Page 203: Monitor Screen
VoIP. SIP is an application-layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet. SIP is transported primarily over UDP but can also be transported over TCP. NBG4615 User’s Guide...
Page 204 Gaming Online gaming services lets you play multiplayer games on the Internet via broadband technology. As of this writing, your NBG4615 supports Xbox, Playstation, Battlenet and MSN Game Zone. NBG4615 User’s Guide...
Page 205: Remote Management
(Section 27.3 on page 206) does not match the client IP address. If it does not match, the NBG4615 will disconnect the session immediately. There is already another remote management session. You may only have one remote management session running at one time.
Page 206: Www Screen
Chapter 27 Remote Management 27.3 WWW Screen To change your NBG4615’s remote management settings, click Management > Remote Management > WWW. Figure 130 Management > Remote Management > WWW The following table describes the labels in this screen. Table 84 Management > Remote Management > WWW...
Page 207: Universal Plug-And-Play (Upnp)
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG4615 allows multicast messages on the LAN only. NBG4615 User’s Guide...
Page 208: Upnp Screen
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the NBG4615. Make sure the computer is connected to a LAN port of the NBG4615. Turn on your computer and the NBG4615.
Page 209 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 133 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. Figure 134 Internet Connection Properties: Advanced Settings NBG4615 User’s Guide...
Page 210: Web Configurator Easy Access
28.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the NBG4615 without finding out the IP address of the NBG4615 first. This comes helpful if you do not know the IP address of the NBG4615.
Page 211 Figure 138 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your NBG4615 and select Invoke. The web configurator login screen displays. Figure 139 Network Connections: My Network Places Right-click on the icon for your NBG4615 and select Properties.
Page 212 Chapter 28 Universal Plug-and-Play (UPnP) Figure 140 Network Connections: My Network Places: Properties: Example NBG4615 User’s Guide...
Page 213: Maintenance
• Use the Reset/Restart screen to reboot the NBG4615 without turning the power off (Section 29.8 on page 219). • Use the Sys OP Mode screen to select how you want to use your NBG4615 (Section 29.10 on page 221).
Page 214: Password Screen
Click Cancel to begin configuring this screen afresh. 29.4 Password Screen It is strongly recommended that you change your NBG4615's password. If you forget your NBG4615's password (or IP address), you will need to reset the device. See Section 29.8 on page 219 for details.
Page 215: Time Setting Screen
Chapter 29 Maintenance 29.5 Time Setting Screen Use this screen to configure the NBG4615’s time based on your local time zone. To change your NBG4615’s time and date, click Maintenance > Time. The screen appears as shown. Figure 143 Maintenance > Time The following table describes the labels in this screen.
Page 216 When you select Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the NBG4615 get the time and date from the Server time server you specified below. Auto...
Page 217: Firmware Upgrade Screen
After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG4615 again. The NBG4615 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Page 218: Configuration Backup/Restore Screen
Firmware Upgrade screen. 29.7 Configuration Backup/Restore Screen Backup configuration allows you to back up (save) the NBG4615’s current configuration to a file on your computer. Once your NBG4615 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 219: Reset/Restart Screen
RESET button. Note: If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG4615 IP address (192.168.1.2). See...
Page 220 An access point enabled all ethernet ports to be bridged together and be in the same subnet. To connect to the Internet, another device, such as a router, is required. Figure 149 Access Point Mode Universal Repeater NBG4615 in Universal Repeater mode work as an access point and wireless client simultaneously. NBG4615 User’s Guide...
Page 221: Sys Op Mode Screen
A WISP client connects to an existing access point wirelessly. It acts just like a wireless client in notebooks/computers. Figure 151 IP Address in WISP Mode Wireless Client Access Point 29.10 Sys OP Mode Screen Use this screen to select how you want to use your NBG4615. Figure 152 Maintenance > Sys OP Mode NBG4615 User’s Guide...
Page 222: To The Internet
The IP address of the device on the local network is set to 192.168.1.2. Universal Repeater Mode Select Universal Repeater Mode if you want to have wireless clients associate with the NBG4615 and also want to connect the NBG4615 to an existing access point. •...
Page 223: Troubleshooting
Make sure you are using the power adaptor or cord included with the NBG4615. Make sure the power adaptor or cord is connected to the NBG4615 and plugged in to an appropriate power source. Make sure the power source is turned on.
Page 224: Nbg4615 Access And Login
The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the NBG4615 by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start >...
Page 225 You cannot log in to the Web Configurator while someone is using Telnet to access the NBG4615. Log out of the NBG4615 in the other session, or ask the person who is logged in to log out. This can happen when you fail to log out properly from your last session. Try logging in again after 5 minutes.
Page 226: Internet Access
AP. • Go to Network > Wireless LAN > General > WDS and check if the NBG4615 is set to bridge mode. Select Disable and try to connect to the Internet again.
Page 227: Resetting The Nbg4615 To Its Factory Defaults
30.5 Resetting the NBG4615 to Its Factory Defaults If you reset the NBG4615, you lose all of the changes you have made. The NBG4615 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Page 228 Check that both the NBG4615 and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG4615. Make sure you allow the NBG4615 to be remotely accessed through the WLAN interface. Check your remote management settings.
Page 229: Usb Device Problems
If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG4615 and try to connect to it again with your computer.
Page 230: Zyxel Share Center Utility Problems
If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG4615 and try to connect to it again with your computer.
Page 231 If A does not disconnect the USB storage, B should click Request to Connect in the Utility to request A to disconnect. B cannot access the USB storage until A disconnects. • See Chapter 14 on page 119 for more details on connecting to USB storage by the Utility. NBG4615 User’s Guide...
Page 232 Chapter 30 Troubleshooting NBG4615 User’s Guide...
Page 233: Appendix A Pop-Up Windows, Javascript And Java Permissions
You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. NBG4615 User’s Guide...
Page 234 Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. Select Settings…to open the Pop-up Blocker Settings screen. NBG4615 User’s Guide...
Page 235 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. Click Add to move the IP address to the list of Allowed sites. Figure 156 Pop-up Blocker Settings NBG4615 User’s Guide...
Page 236 Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). Click OK to close the window. NBG4615 User’s Guide...
Page 237 From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. Click OK to close the window. NBG4615 User’s Guide...
Page 238 JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. Click OK to close the window. Figure 160 Java (Sun) NBG4615 User’s Guide...
Page 239 You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 161 Mozilla Firefox: TOOLS > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 162 Mozilla Firefox Content Security NBG4615 User’s Guide...
Page 240 Open all pop-ups. Figure 163 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the left- side menu. Select the check boxes as shown in the following screen. NBG4615 User’s Guide...
Page 241 Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 164 Opera: Enabling Java To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 165 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply. NBG4615 User’s Guide...
Page 242 Appendix A Pop-up Windows, JavaScript and Java Permissions NBG4615 User’s Guide...
Page 243: Appendix B Ip Addresses And Subnetting
Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. NBG4615 User’s Guide...
Page 244 Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. NBG4615 User’s Guide...
Page 245 For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. The following table shows some possible subnet masks using both notations. Table 95 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.0 0000 0000 255.255.255.128 1000 0000 255.255.255.192 1100 0000 NBG4615 User’s Guide...
Page 246 The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub- networks, A and B. NBG4615 User’s Guide...
Page 247 Table 96 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.1 192.168.1.0 Broadcast Address: Highest Host ID: 192.168.1.62 192.168.1.63 NBG4615 User’s Guide...
Page 248 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 100 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS NBG4615 User’s Guide...
Page 249 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 NBG4615 User’s Guide...
Page 250 Network Address Translation (NAT) on the NBG4615. Once you have decided on the network number, pick an IP address for your NBG4615 that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 251 More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. NBG4615 User’s Guide...
Page 252 Appendix B IP Addresses and Subnetting Figure 171 Conflicting Computer and Router IP Addresses Example NBG4615 User’s Guide...
Page 253: Appendix C Setting Up Your Computer's Ip Address
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific NBG4615 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 254 Appendix C Setting Up Your Computer’s IP Address In the Control Panel, click the Network Connections icon. Right-click Local Area Connection and then select Properties. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NBG4615 User’s Guide...
Page 255 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. NBG4615 User’s Guide...
Page 256 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG4615 User’s Guide...
Page 257 Appendix C Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. Click the Network and Sharing Center icon. Click Manage network connections. NBG4615 User’s Guide...
Page 258 Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG4615 User’s Guide...
Page 259 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG4615 User’s Guide...
Page 260 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. NBG4615 User’s Guide...
Page 261 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. Click Change adapter settings. Double click Local Area Connection and then select Properties. NBG4615 User’s Guide...
Page 262 Appendix C Setting Up Your Computer’s IP Address Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG4615 User’s Guide...
Page 263 Appendix C Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG4615 User’s Guide...
Page 264 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. The IP settings are displayed as follows. NBG4615 User’s Guide...
Page 265 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. In the System Preferences window, click the Network icon. NBG4615 User’s Guide...
Page 266 Appendix C Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. NBG4615 User’s Guide...
Page 267 • In the Router field, type the IP address of your device. Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. NBG4615 User’s Guide...
Page 268 Figure 172 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. In System Preferences, click the Network icon. NBG4615 User’s Guide...
Page 269 Appendix C Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. NBG4615 User’s Guide...
Page 270 • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NBG4615. Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications >...
Page 271 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. NBG4615 User’s Guide...
Page 272 Appendix C Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. In the Network Settings window, select the connection that you want to configure, then click Properties. NBG4615 User’s Guide...
Page 273 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. NBG4615 User’s Guide...
Page 274 Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. NBG4615 User’s Guide...
Page 275 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). NBG4615 User’s Guide...
Page 276 Appendix C Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. NBG4615 User’s Guide...
Page 277 Appendix C Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. When the Network Card Setup window opens, click the Address tab NBG4615 User’s Guide...
Page 278 Click Next to save the changes and close the Network Card Setup window. If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. NBG4615 User’s Guide...
Page 279 Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 176 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. NBG4615 User’s Guide...
Page 280 Appendix C Setting Up Your Computer’s IP Address Figure 177 openSUSE: Connection Status - KNetwork Manager NBG4615 User’s Guide...
Page 281: Appendix D Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. NBG4615 User’s Guide...
Page 282 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. NBG4615 User’s Guide...
Page 283 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. NBG4615 User’s Guide...
Page 284 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. NBG4615 User’s Guide...
Page 285 Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NBG4615 are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NBG4615 identity.
Page 286 Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the NBG4615 and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features.
Page 287 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. NBG4615 User’s Guide...
Page 288 The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. NBG4615 User’s Guide...
Page 289 Cipher block chaining Message authentication code Protocol (CCMP). TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication server. AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit mathematical algorithm NBG4615 User’s Guide...
Page 290 WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. NBG4615 User’s Guide...
Page 291 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NBG4615 User’s Guide...
Page 292: Security Parameters Summary
An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. NBG4615 User’s Guide...
Page 293 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. NBG4615 User’s Guide...
Page 294 Appendix D Wireless LANs For directional antennas, point the antenna in the direction of the desired coverage area. NBG4615 User’s Guide...
Page 295: Appendix E Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. NBG4615 User’s Guide...
Page 296 REXEC Remote Execution Daemon. RLOGIN Remote Login. RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP Simple File Transfer Protocol. NBG4615 User’s Guide...
Page 297 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. NBG4615 User’s Guide...
Page 298 Appendix E Common Services NBG4615 User’s Guide...
Page 299: Appendix F Ipv6
“private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 108 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits NBG4615 User’s Guide...
Page 300: Global Address
All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 110 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 NBG4615 User’s Guide...
Page 301 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If NBG4615 User’s Guide...
Page 302 Prefix delegation enables an IPv6 router to use the IPv6 prefix (network address) received from the ISP (or a connected uplink router) for its LAN. The NBG4615 uses the received IPv6 prefix (for example, 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the NBG4615 passes the IPv6 prefix information to its LAN hosts.
Page 303 When the NBG4615 needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the NBG4615 uses the prefix list to determine whether the destination address is on-link and can be reached directly without passing through a router.
Page 304 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. NBG4615 User’s Guide...
Page 305 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. NBG4615 User’s Guide...
Page 306 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NBG4615 User’s Guide...
Page 307: Appendix G Legal Information
This publication is subject to change without notice. Trademarks NetUSB is a trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Page 308: Zyxel Limited Warranty
Hiermit erklärt ZyXEL, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EU befindet. [Estonian] Käesolevaga kinnitab ZyXEL seadme seadmed vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele. NBG4615 User’s Guide...
Page 309 (LANs). Later in this document you will find an overview of countries inwhich additional restrictions or requirements or both are applicable. The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2,4- and 5-GHz wireless LANs. NBG4615 User’s Guide...
Page 310 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NBG4615 User’s Guide...
Page 311: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. NBG4615 User’s Guide...
Page 312 Appendix G Legal Information NBG4615 User’s Guide...
Page 313: Index
DHCP status BitTorrent disclaimer Bridge/Repeater bridged APs, security DNS Server DNS server documentation related Domain Name System Domain Name System. See DNS. duplex setting 68, 77, 93, 103 Certificate Authority Dynamic DNS See CA. Dynamic Host Configuration Protocol NBG4615 User’s Guide...
Page 314 HTTP Neighbor Discovery Protocol firmware version ping fragmentation threshold prefix 143, 299 prefix length FTP. see also File Transfer Program 143, 299 stateless autoconfiguration unspecified address General wireless LAN screen Guest WLAN Java Guest WLAN Bandwidth NBG4615 User’s Guide...
Page 315 Message Integrity Check (MIC) port speed mode 68, 77, 85, 93, 103 PPPoE Multicast dial-up connection IGMP PPTP preamble mode product registration 171, 174, 250 global how it works inside local Quality of Service (QoS) outside overview port forwarding NBG4615 User’s Guide...
Page 316 Service Set IDentity. See SSID. local (user) database RADIUS server Session Initiated Protocol User Name SSID 61, 67, 76, 84, 92, 102, 126, 131 stateful inspection firewall Static DHCP Static Route VoIP Status subnet Subnet Mask subnet mask subnetting NBG4615 User’s Guide...
Page 317 MAC address filter overview security SSID Wireless security overview type wireless security 227, 285 Wireless tutorial WISP Mode status screen 91, 101 Wizard setup WLAN interference security parameters World Wide Web key caching pre-authentication user authentication NBG4615 User’s Guide...
Page 318 Index NBG4615 User’s Guide...

ZyXEL Communications NBG4615 User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 The WPS Button

Chapter 3 Zyxel Netusb Share Center Utility

Chapter 4 Connection Wizard

Chapter 5 Introducing the Web Configurator

Chapter 6 Monitor

Chapter 7 NBG4615 Modes

Chapter 8 Easy Mode

Chapter 9 Router Mode

Chapter 10 Access Point Mode

Chapter 11 Universal Repeater Mode

Chapter 12 WISP Mode

Chapter 13 WISP + UR Mode

Chapter 14 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 15 Wireless LAN

Chapter 16 Ipv6

Chapter 17 WAN

Chapter 18 LAN

Chapter 19 DHCP Server

Chapter 20 NAT

Chapter 21 DDNS

Chapter 22 Static Route

Chapter 23 RIP

Chapter 24 Firewall

Chapter 25 Content Filtering

Chapter 26 Bandwidth Management

Chapter 27 Remote Management

Chapter 28 Universal Plug-And-Play (Upnp)

Chapter 29 Maintenance

Chapter 30 Troubleshooting

Appendix A Pop-Up Windows, Javascript and Java Permissions

Appendix B IP Addresses and Subnetting

Appendix C Setting up Your Computer's IP Address

Appendix D Wireless Lans

Appendix E Common Services

Appendix F Ipv6

Appendix G Legal Information

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications NBG4615

Summary of Contents for ZyXEL Communications NBG4615