ZyXEL NBG420N Manuel d'utilisateur

www.zyxel.comNBG420NWireless N RouterUser’s GuideVersion 3.603/2008Edition 1DEFAULT LOGINIP Address http://192.168.1.1Password 1234

Contents OverviewNBG420N User’s Guide10

Chapter 7 Wireless LANNBG420N User’s Guide100Figure 65 Network > Wireless LAN > General: WPA/WPA2The following table describes the labels in t

Chapter 7 Wireless LANNBG420N User’s Guide1017.6 MAC FilterThe MAC filter screen allows you to configure the NBG420N to give exclusive access to up

Chapter 7 Wireless LANNBG420N User’s Guide102Figure 66 Network > Wireless LAN > MAC FilterThe following table describes the labels in this men

Chapter 7 Wireless LANNBG420N User’s Guide103Figure 67 Network > Wireless LAN > AdvancedThe following table describes the labels in this scre

Chapter 7 Wireless LANNBG420N User’s Guide104Figure 68 Network > Wireless LAN > QoS The following table describes the labels in this screen. T

Chapter 7 Wireless LANNBG420N User’s Guide1057.8.1 Application Priority ConfigurationUse this screen to edit a WMM QoS application entry. Click the

Chapter 7 Wireless LANNBG420N User’s Guide1067.9 WiFi Protected SetupWiFi Protected Setup (WPS) is an industry standard specification, defined by the

Chapter 7 Wireless LANNBG420N User’s Guide1077.9.2 WPS Station ScreenUse this screen when you want to add a wireless station using WPS. To open this

Chapter 7 Wireless LANNBG420N User’s Guide108Figure 72 SchedulingThe following table describes the labels in this screen.7.10 iPod Touch Web Config

Chapter 7 Wireless LANNBG420N User’s Guide1091 Make sure the Wireless LAN on the NBG420N is enabled and that you know the security settings (if any).

Table of ContentsNBG420N User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 7 Wireless LANNBG420N User’s Guide1107.10.2 System StatusAfter successfully logging into the iPod Touch web configurator the System Status sc

Chapter 7 Wireless LANNBG420N User’s Guide111Figure 74 System Status screenThe following table describes the labels in this screen.Table 41 Syste

Chapter 7 Wireless LANNBG420N User’s Guide1127.10.3 WPS in ProgressAfter pressing Push Button in the System Status screen the WPS in Progress screen

Chapter 7 Wireless LANNBG420N User’s Guide113Figure 75 WPS In Progress7.10.4 Port ForwardingAfter pressing the Details button in the System Status

Chapter 7 Wireless LANNBG420N User’s Guide114Figure 76 Port ForwardingThe following table describes the labels in this screen.7.11 Accessing the iP

Chapter 7 Wireless LANNBG420N User’s Guide115" If you have not configured your wireless settings yet you can do so by using the Wizard in the we

Chapter 7 Wireless LANNBG420N User’s Guide116V If the login screen does not display properly, check that you are accessing the correct IP address. Als

NBG420N User’s Guide117CHAPTER 8 WANThis chapter describes how to configure WAN settings.8.1 WAN OverviewSee the chapter about the connection wizard

Chapter 8 WANNBG420N User’s Guide118The NBG420N supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the NBG420N queries

Chapter 8 WANNBG420N User’s Guide119The following table describes the labels in this screen.8.4.2 PPPoE EncapsulationThe NBG420N supports PPPoE (Poi

Table of ContentsNBG420N User’s Guide123.5.2 Summary: Any IP Table ...

Chapter 8 WANNBG420N User’s Guide120For the service provider, PPPoE offers an access and authentication method that works with existing access control

Chapter 8 WANNBG420N User’s Guide121The following table describes the labels in this screen.Table 44 Network > WAN > Internet Connection: PPP

Chapter 8 WANNBG420N User’s Guide1228.4.3 PPTP EncapsulationPoint-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transf

Chapter 8 WANNBG420N User’s Guide123Figure 80 Network > WAN > Internet Connection: PPTP EncapsulationThe following table describes the labels

Chapter 8 WANNBG420N User’s Guide124Password Type the password associated with the User Name above.Retype to Confirm Type your password again to make

Chapter 8 WANNBG420N User’s Guide1258.5 Advanced WAN ScreenTo change your NBG420N’s advanced WAN settings, click Network > WA N > Advanced. T

Chapter 8 WANNBG420N User’s Guide126Enable Auto-bridge modeSelect this option to have the NBG420N switch to bridge mode automatically when the NBG420N

NBG420N User’s Guide127CHAPTER 9 LANThis chapter describes how to configure LAN settings.9.1 LAN OverviewA Local Area Network (LAN) is a shared comm

Chapter 9 LANNBG420N User’s Guide1289.2.2 IP Address and Subnet MaskRefer to the IP address and subnet mask section in the Connection Wizard chapter

Chapter 9 LANNBG420N User’s Guide129Figure 82 Any IP ExampleThe Any IP feature does not apply to a computer using either a dynamic IP address or a

Table of ContentsNBG420N User’s Guide136.1.1 How to Connect to the Internet from an AP ...

Chapter 9 LANNBG420N User’s Guide1309.3 LAN IP ScreenUse this screen to change your basic LAN settings. Click Network > LAN.Figure 83 Network &g

Chapter 9 LANNBG420N User’s Guide131Figure 84 Network > LAN > IP Alias The following table describes the labels in this screen.9.5 Advanced

Chapter 9 LANNBG420N User’s Guide132The following table describes the labels in this screen.Table 49 Network > LAN > AdvancedLABEL DESCRIPTION

NBG420N User’s Guide133CHAPTER 10 DHCP10.1 DHCPDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain

Chapter 10 DHCPNBG420N User’s Guide13410.3 DHCP Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual co

Chapter 10 DHCPNBG420N User’s Guide13510.4 Client List ScreenThe DHCP table shows current DHCP client information (including IP Address, Host Name a

Chapter 10 DHCPNBG420N User’s Guide136Figure 88 Network > DHCP > Client List The following table describes the labels in this screen.Table 52

NBG420N User’s Guide137CHAPTER 11 Network Address Translation(NAT)This chapter discusses how to configure NAT on the NBG420N.11.1 NAT Overview NAT

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide138" Many residential broadband ISP accounts do not allow you to run any server p

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide139The following table describes the labels in this screen.11.4 NAT Application Scre

Table of ContentsNBG420N User’s Guide147.11 Accessing the iPod Touch Web Configurator ...

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide140Figure 91 Network > NAT > Application The following table describes the lab

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide14111.4.1 Game List ExampleHere is an example game list text file. The index number,

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide142Figure 92 Game List Example11.5 Trigger Port Forwarding Some services use a dedi

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide143Figure 93 Trigger Port Forwarding Process: Example1 Jane requests a file from th

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide144Figure 94 Network > NAT > Advanced The following table describes the labels

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide145Incoming Incoming is a port (or a range of ports) that a server on the WAN uses wh

Chapter 11 Network Address Translation (NAT)NBG420N User’s Guide146

NBG420N User’s Guide147CHAPTER 12 Dynamic DNS12.1 Dynamic DNS Introduction Dynamic DNS allows you to update your current dynamic IP address with one

Chapter 12 Dynamic DNSNBG420N User’s Guide148Figure 95 Dynamic DNSThe following table describes the labels in this screen.Table 56 Dynamic DNSLABE

Chapter 12 Dynamic DNSNBG420N User’s Guide149Apply Click Apply to save your changes back to the NBG420N.Reset Click Reset to begin configuring this s

Table of ContentsNBG420N User’s Guide1511.4.1 Game List Example ...

Chapter 12 Dynamic DNSNBG420N User’s Guide150

151PART IIISecurityFirewall (153)Content Filtering (161)IPSec VPN (165)

152

NBG420N User’s Guide153CHAPTER 13 FirewallThis chapter gives some background information on firewalls and explains how to get started with the NBG42

Chapter 13 FirewallNBG420N User’s Guide154The NBG420N is installed between the LAN and a broadband modem connecting to the Internet. This allows it to

Chapter 13 FirewallNBG420N User’s Guide1551 A computer on the LAN initiates a connection by sending a SYN packet to a receiving server on the WAN.2 T

Chapter 13 FirewallNBG420N User’s Guide15613.4 Services ScreenClick Security > Firewall > Services. The screen appears as shown next. If an ou

Chapter 13 FirewallNBG420N User’s Guide15713.4.1 The Add Firewall Rule ScreenIf you click Add or the Modify icon on an existing rule, the Add Firewa

Chapter 13 FirewallNBG420N User’s Guide158Figure 99 Security > Firewall > Services > Adding a Rule The following table describes the labels

Chapter 13 FirewallNBG420N User’s Guide159Available Services This is a list of pre-defined services (ports) you may prohibit your LAN computers from

Table of ContentsNBG420N User’s Guide1615.1 IPSec VPN Overview ...

Chapter 13 FirewallNBG420N User’s Guide160

NBG420N User’s Guide161CHAPTER 14 Content FilteringThis chapter provides a brief overview of content filtering using the embedded web GUI.14.1 Intro

Chapter 14 Content FilteringNBG420N User’s Guide162Figure 100 Security > Content Filter > Filter The following table describes the labels in t

Chapter 14 Content FilteringNBG420N User’s Guide16314.5 ScheduleUse this screen to set the day(s) and time you want the NBG420N to use content filte

Chapter 14 Content FilteringNBG420N User’s Guide16414.6 Customizing Keyword Blocking URL CheckingYou can use commands to set how much of a website’s

NBG420N User’s Guide165CHAPTER 15 IPSec VPN15.1 IPSec VPN OverviewA virtual private network (VPN) provides secure communications between sites witho

Chapter 15 IPSec VPNNBG420N User’s Guide16615.1.2 What You Need To Know About IPSec VPNA VPN tunnel is usually established in two phases. Each phase

Chapter 15 IPSec VPNNBG420N User’s Guide167You can usually provide a static IP address or a domain name for the remote IPSec router as well. Sometime

Chapter 15 IPSec VPNNBG420N User’s Guide168The following table describes the fields in this screen.15.2.1 VPN Rule Setup (Basic)Click the Edit icon i

Chapter 15 IPSec VPNNBG420N User’s Guide169Figure 105 IPSec Fields Summary Use this screen to configure a VPN rule.Figure 106 Security > VPN

Table of ContentsNBG420N User’s Guide1718.1.2 Remote Management and NAT ...

Chapter 15 IPSec VPNNBG420N User’s Guide170The following table describes the labels in this screen. Table 63 SECURITY > VPN > Rule Setup: IKE

Chapter 15 IPSec VPNNBG420N User’s Guide171Remote Policy Remote IP addresses must be static and correspond to the remote IPSec router's configur

Chapter 15 IPSec VPNNBG420N User’s Guide172Secure Gateway AddressType the WAN IP address or the domain name (up to 31 characters) of the IPSec router

Chapter 15 IPSec VPNNBG420N User’s Guide17315.2.2 VPN Rule Setup (Advanced)Click the Advanced... button in the Rule Setup screen to open this screen

Chapter 15 IPSec VPNNBG420N User’s Guide174Figure 107 Security > VPN > General > Rule Setup: IKE (Advanced)

Chapter 15 IPSec VPNNBG420N User’s Guide175The following table describes the labels in this screen. Table 64 Security > VPN > Rule Setup: IKE

Chapter 15 IPSec VPNNBG420N User’s Guide176Local Address End /MaskWhen the local IP address is a single address, type it a second time here. When the

Chapter 15 IPSec VPNNBG420N User’s Guide177Local Content When you select IP in the Local ID Type field, type the IP address of your computer in the L

Chapter 15 IPSec VPNNBG420N User’s Guide178IKE Phase 1Negotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting

Chapter 15 IPSec VPNNBG420N User’s Guide17915.2.3 VPN Rule Setup (Manual)Use this screen to configure VPN rules (tunnels) that use manual keys. Manu

Table of ContentsNBG420N User’s Guide18Chapter 23Configuration Mode...

Chapter 15 IPSec VPNNBG420N User’s Guide18015.2.3.3 Authentication and the Security Parameter Index (SPI)For authentication, the NBG420N and remote I

Chapter 15 IPSec VPNNBG420N User’s Guide181IPSec Keying ModeSelect IKE or Manual from the drop-down list box. IKE provides more protection so it is g

Chapter 15 IPSec VPNNBG420N User’s Guide182Remote Address For a single IP address, enter a (static) IP address on the network behind the remote IPSec

Chapter 15 IPSec VPNNBG420N User’s Guide18315.3 The SA Monitor ScreenIn the web configurator, click Security > VPN > SA Monitor. Use this scre

Chapter 15 IPSec VPNNBG420N User’s Guide184The following table describes the labels in this screen. 15.4 VPN and Remote ManagementYou can allow someo

Chapter 15 IPSec VPNNBG420N User’s Guide18515.5 IPSec VPN Technical ReferenceIKE SA ProposalThe IKE SA proposal is used to identify the encryption a

Chapter 15 IPSec VPNNBG420N User’s Guide186AuthenticationBefore the NBG420N and remote IPSec router establish an IKE SA, they have to verify each othe

Chapter 15 IPSec VPNNBG420N User’s Guide187In the following example, the ID type and content do not match so the authentication fails and the NBG420N

Chapter 15 IPSec VPNNBG420N User’s Guide188Figure 114 VPN/NAT ExampleIf router A does NAT, it might change the IP addresses, port numbers, or both.

Chapter 15 IPSec VPNNBG420N User’s Guide189These modes are illustrated below.In tunnel mode, the NBG420N uses the IPSec protocol to encapsulate the e

List of FiguresNBG420N User’s Guide19List of FiguresFigure 1 Secure Wireless Internet Access in Router Mode ...

Chapter 15 IPSec VPNNBG420N User’s Guide190Additional IPSec VPN TopicsThis section discusses other IPSec VPN topics that apply to either IKE SAs or IP

Chapter 15 IPSec VPNNBG420N User’s Guide191The following figure depicts an example where one VPN tunnel is created from an NBG420N at branch office (

Chapter 15 IPSec VPNNBG420N User’s Guide192

193PART IVManagementStatic Route Screens (195)Bandwidth Management (199)Remote Management (209)Universal Plug-and-Play (UPnP) (215)

194

NBG420N User’s Guide195CHAPTER 16 Static Route ScreensThis chapter shows you how to configure static routes for your NBG420N.16.1 Static Route Overv

Chapter 16 Static Route ScreensNBG420N User’s Guide196Figure 118 Management > Static Route > IP Static RouteThe following table describes the

Chapter 16 Static Route ScreensNBG420N User’s Guide197Figure 119 Management > Static Route > IP Static Route: Static Route SetupThe following

Chapter 16 Static Route ScreensNBG420N User’s Guide198

NBG420N User’s Guide199CHAPTER 17 Bandwidth ManagementThis chapter contains information about configuring bandwidth management, editing rules and vie

List of FiguresNBG420N User’s Guide20Figure 39 Status: AP Mode ...

Chapter 17 Bandwidth ManagementNBG420N User’s Guide200The following figure shows LAN subnets. You could configure one bandwidth class for subnet A and

Chapter 17 Bandwidth ManagementNBG420N User’s Guide20117.6 Predefined Bandwidth Management ServicesThe following is a description of the services th

Chapter 17 Bandwidth ManagementNBG420N User’s Guide20217.7 Default Bandwidth Management Classes and PrioritiesIf you enable bandwidth management but

Chapter 17 Bandwidth ManagementNBG420N User’s Guide203The following table describes the labels in this screen.17.9 Bandwidth Management Advanced Con

Chapter 17 Bandwidth ManagementNBG420N User’s Guide204The following table describes the labels in this screen.Table 76 Management > Bandwidth MGM

Chapter 17 Bandwidth ManagementNBG420N User’s Guide20517.9.1 Rule Configuration with the Pre-defined Service To edit a bandwidth management rule

Chapter 17 Bandwidth ManagementNBG420N User’s Guide206Figure 124 Management > Bandwidth MGMT > Advanced: User-defined Service Rule Configurati

Chapter 17 Bandwidth ManagementNBG420N User’s Guide207Figure 125 Management > Bandwidth MGMT > Monitor

Chapter 17 Bandwidth ManagementNBG420N User’s Guide208

NBG420N User’s Guide209CHAPTER 18 Remote ManagementThis chapter provides information on the Remote Management screens. 18.1 Remote Management Overvi

List of FiguresNBG420N User’s Guide21Figure 82 Any IP Example ...

Chapter 18 Remote ManagementNBG420N User’s Guide2101 You have disabled that service in one of the remote management screens.2 The IP address in the Se

Chapter 18 Remote ManagementNBG420N User’s Guide21118.3 TelnetYou can use Telnet to access the NBG420N’s command line interface. Specify which inter

Chapter 18 Remote ManagementNBG420N User’s Guide21218.5 FTP ScreenYou can use FTP (File Transfer Protocol) to upload and download the NBG420N’s firmw

Chapter 18 Remote ManagementNBG420N User’s Guide213Figure 129 Management > Remote MGMT > DNS The following table describes the labels in this

Chapter 18 Remote ManagementNBG420N User’s Guide214

NBG420N User’s Guide215CHAPTER 19 Universal Plug-and-Play (UPnP)This chapter introduces the UPnP feature in the web configurator.19.1 Introducing Un

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide216When a UPnP device joins a network, it announces its presence with a multicast message

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide21719.4 Installing UPnP in Windows ExampleThis section shows how to install UPnP in Win

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide218Figure 132 Add/Remove Programs: Windows Setup: Communication: Components4 Click OK t

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide219Figure 134 Windows Optional Networking Components Wizard5 In the Networking Service

List of FiguresNBG420N User’s Guide22Figure 125 Management > Bandwidth MGMT > Monitor ...

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide22019.4.0.2 Using UPnP in Windows XP ExampleThis section shows you how to use the UPnP f

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide221Figure 137 Internet Connection Properties 4 You may edit or delete the port mapping

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide222Figure 138 Internet Connection Properties: Advanced SettingsFigure 139 Internet Co

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide223Figure 140 System Tray Icon7 Double-click on the icon to display your current Inter

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide224Figure 142 Network Connections4 An icon with the description for each UPnP-enabled d

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide225Figure 143 Network Connections: My Network Places6 Right-click on the icon for your

Chapter 19 Universal Plug-and-Play (UPnP)NBG420N User’s Guide226

227PART VMaintenance and TroubleshootingSystem (229)Logs (233)Tools (251)Configuration Mode (257)Sys Op Mode (259)Language (263)Troubleshooting

228

NBG420N User’s Guide229CHAPTER 20 SystemThis chapter provides information on the System screens. 20.1 System OverviewSee the chapter about wizard se

List of FiguresNBG420N User’s Guide23Figure 168 Pop-up Blocker ...

Chapter 20 SystemNBG420N User’s Guide23020.3 Time Setting ScreenTo change your NBG420N’s time and date, click Maintenance > System > Time Setti

Chapter 20 SystemNBG420N User’s Guide231The following table describes the labels in this screen.Table 85 Maintenance > System > Time SettingL

Chapter 20 SystemNBG420N User’s Guide232End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Savings. The o&apo

NBG420N User’s Guide233CHAPTER 21 LogsThis chapter contains information about configuring general log settings and viewing the NBG420N’s logs. Refer

Chapter 21 LogsNBG420N User’s Guide234The following table describes the labels in this screen.21.2 Log SettingsYou can configure the NBG420N’s genera

Chapter 21 LogsNBG420N User’s Guide235Figure 148 Maintenance > Logs > Log Settings The following table describes the labels in this screen.Ta

Chapter 21 LogsNBG420N User’s Guide236Send Alerts To Alerts are real-time notifications that are sent as soon as an event, such as a DoS attack, syst

Chapter 21 LogsNBG420N User’s Guide23721.3 Log DescriptionsThis section provides descriptions of example log messages. Table 88 System Maintenance

Chapter 21 LogsNBG420N User’s Guide238 Table 89 System Error LogsLOG MESSAGE DESCRIPTION%s exceeds the max. number of session per host!This attempt

Chapter 21 LogsNBG420N User’s Guide239 Firewall session time out, sent TCP RSTThe router sent a TCP reset packet when a dynamic firewall session tim

List of FiguresNBG420N User’s Guide24

Chapter 21 LogsNBG420N User’s Guide240 Table 94 CDR LogsLOG MESSAGE DESCRIPTIONboard%d line%d channel%d, call%d,%s C01 Outgoing Call dev=%x ch=%x

Chapter 21 LogsNBG420N User’s Guide241 %s: Proxy mode detectedThe router detected proxy mode in the packet.%s The content filter server responded tha

Chapter 21 LogsNBG420N User’s Guide242 teardrop UDP The firewall detected an UDP teardrop attack.teardrop ICMP (type:%d, code:%d)The firewall detect

Chapter 21 LogsNBG420N User’s Guide243Verifying Local ID failed: The connection failed during IKE phase 2 because the router and the peer’s Local/Rem

Chapter 21 LogsNBG420N User’s Guide244No known phase 1 ID type foundThe router could not find a known phase 1 ID in the connection attempt.ID type mis

Chapter 21 LogsNBG420N User’s Guide245 Rule [%d] Phase 1 ID mismatch The listed rule’s IKE phase 1 ID did not match between the router and the peer.R

Chapter 21 LogsNBG420N User’s Guide246 Rcvd user cert: <subject name>The router received a user certificate, with subject name as recorded, fro

Chapter 21 LogsNBG420N User’s Guide247 User logout because of user deassociation.The router logged out a user who ended the session.User logout becau

Chapter 21 LogsNBG420N User’s Guide248 5 Source route failed4 Source Quench0 A gateway may discard internet datagrams if it does not have the buffer s

Chapter 21 LogsNBG420N User’s Guide249The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for deta

List of TablesNBG420N User’s Guide25List of TablesTable 1 Features Available in Router Mode vs. AP Mode ...

Chapter 21 LogsNBG420N User’s Guide250

NBG420N User’s Guide251CHAPTER 22 ToolsThis chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the

Chapter 22 ToolsNBG420N User’s Guide252Figure 150 Upload WarningThe NBG420N automatically restarts in this time causing a temporary network disconne

Chapter 22 ToolsNBG420N User’s Guide253Figure 153 Maintenance > Tools > Configuration 22.2.1 Backup ConfigurationBackup configuration allows

Chapter 22 ToolsNBG420N User’s Guide254Figure 154 Configuration Restore SuccessfulThe NBG420N automatically restarts in this time causing a temporar

Chapter 22 ToolsNBG420N User’s Guide255Click Maintenance > Tools > Restart. Click Restart to have the NBG420N reboot. This does not affect the

Chapter 22 ToolsNBG420N User’s Guide256

NBG420N User’s Guide257CHAPTER 23 Configuration ModeClick Maintenance > Config Mode to open the following screen. This screen allows you to hide o

Chapter 23 Configuration ModeNBG420N User’s Guide258Table 111 Advanced Configuration Options " In AP Mode many screens will not be available.

NBG420N User’s Guide259CHAPTER 24 Sys Op Mode24.1 OverviewThe Sys Op Mode (System Operation Mode) function lets you configure whether your NBG420N i

List of TablesNBG420N User’s Guide26Table 39 Scheduling ...

Chapter 24 Sys Op ModeNBG420N User’s Guide260Figure 161 IP Address in AP Mode24.2 Selecting System Operation ModeUse this screen to select how you

Chapter 24 Sys Op ModeNBG420N User’s Guide261Figure 164 Maintenance > Sys Op Mode > General: AP •In AP Mode all Ethernet ports have the same

Chapter 24 Sys Op ModeNBG420N User’s Guide262

NBG420N User’s Guide263CHAPTER 25 LanguageUse this screen to change the language for the web configurator display.25.1 Language ScreenClick the lang

Chapter 25 LanguageNBG420N User’s Guide264

NBG420N User’s Guide265CHAPTER 26 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potential problems a

Chapter 26 TroubleshootingNBG420N User’s Guide26626.2 NBG420N Access and LoginV I don’t know the IP address of my NBG420N.1 The default IP address is

Chapter 26 TroubleshootingNBG420N User’s Guide2672 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Sta

Chapter 26 TroubleshootingNBG420N User’s Guide268See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurat

Chapter 26 TroubleshootingNBG420N User’s Guide269interfering with the wireless network (for example, microwaves, other wireless networks, and so on).

List of TablesNBG420N User’s Guide27Table 82 Management > Remote MGMT > DNS ...

Chapter 26 TroubleshootingNBG420N User’s Guide2704 Make sure your computer (with a wireless adapter installed) is within the transmission range of the

271PART VIAppendices and IndexProduct Specifications and Wall-Mounting Instructions (273)Pop-up Windows, JavaScripts and Java Permissions (279)IP Ad

272

NBG420N User’s Guide273APPENDIX A Product Specifications and Wall-Mounting InstructionsThe following tables summarize the NBG420N’s hardware and firm

Appendix A Product Specifications and Wall-Mounting InstructionsNBG420N User’s Guide274Table 114 Firmware FeaturesFEATURE DESCRIPTIONDefault IP Addr

Appendix A Product Specifications and Wall-Mounting InstructionsNBG420N User’s Guide275IPSec VPN This allows you to establish a secure Virtual Privat

Appendix A Product Specifications and Wall-Mounting InstructionsNBG420N User’s Guide276The following list, which is not exhaustive, illustrates the st

Appendix A Product Specifications and Wall-Mounting InstructionsNBG420N User’s Guide2771 Be careful to avoid damaging pipes or cables located inside

Appendix A Product Specifications and Wall-Mounting InstructionsNBG420N User’s Guide278Figure 167 Masonry Plug and M4 Tap Screw

NBG420N User’s Guide279APPENDIX B Pop-up Windows, JavaScriptsand Java PermissionsIn order to use the web configurator you need to allow:• Web browser

List of TablesNBG420N User’s Guide28Table 125 Eight Subnets ...

Appendix B Pop-up Windows, JavaScripts and Java PermissionsNBG420N User’s Guide2802 Clear the Block pop-ups check box in the Pop-up Blocker section of

Appendix B Pop-up Windows, JavaScripts and Java PermissionsNBG420N User’s Guide281Figure 170 Internet Options: Privacy3 Type the IP address of your

Appendix B Pop-up Windows, JavaScripts and Java PermissionsNBG420N User’s Guide2825 Click Close to return to the Privacy screen. 6 Click Apply to save

Appendix B Pop-up Windows, JavaScripts and Java PermissionsNBG420N User’s Guide283Figure 173 Security Settings - Java ScriptingJava Permissions1 Fr

Appendix B Pop-up Windows, JavaScripts and Java PermissionsNBG420N User’s Guide284JAVA (Sun)1 From Internet Explorer, click Too ls, Internet Options a

NBG420N User’s Guide285APPENDIX C IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses identify individual

Appendix C IP Addresses and SubnettingNBG420N User’s Guide286Figure 176 Network Number and Host IDHow much of the IP address is the network number a

Appendix C IP Addresses and SubnettingNBG420N User’s Guide287Subnet masks are expressed in dotted decimal notation just like IP addresses. The follow

Appendix C IP Addresses and SubnettingNBG420N User’s Guide288SubnettingYou can use subnetting to divide one network into multiple sub-networks. In the

Appendix C IP Addresses and SubnettingNBG420N User’s Guide289Figure 178 Subnetting Example: After SubnettingIn a 25-bit subnet the host ID has 7 bi

29PART IIntroductionGetting to Know Your NBG420N (31)The WPS Button (35)Introducing the Web Configurator (37)Connection Wizard (49)AP Mode (65)Tu

Appendix C IP Addresses and SubnettingNBG420N User’s Guide290Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets (000, 001, 010

Appendix C IP Addresses and SubnettingNBG420N User’s Guide291Subnet PlanningThe following table is a summary for subnet planning on a network with a

Appendix C IP Addresses and SubnettingNBG420N User’s Guide292Configuring IP AddressesWhere you obtain your network number depends on your particular s

NBG420N User’s Guide293APPENDIX D Setting up Your Computer’s IPAddressAll computers must have a 10M or 100M Ethernet adapter card and TCP/IP installe

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide294Figure 179 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe N

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide295Configuring 1 In the Network window Configuration tab, select your network ada

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide296Figure 181 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide297Figure 182 Windows XP: Start Menu2 In the Control Panel, double-click Networ

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide298Figure 184 Windows XP: Control Panel: Network Connections: Properties4 Select

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide299Figure 186 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not

About This User's GuideNBG420N User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want to configu

30

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide300Figure 187 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol T

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide301Figure 188 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK to cl

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide302Figure 189 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in from the Co

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide303•From the Configure box, select Manually.• Type your IP address in the IP Addr

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide304Figure 192 Macintosh OS X: Network4 For statically assigned settings, do the

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide305" Make sure you are logged in as the root administrator. Using the K Desk

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide306Figure 194 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide307Figure 196 Red Hat 9.0: KDE: Network Configuration: Activate 7 After the net

Appendix D Setting up Your Computer’s IP AddressNBG420N User’s Guide3082 If you know your DNS server IP address(es), enter the DNS server information

NBG420N User’s Guide309APPENDIX E Wireless LANsWireless LAN TopologiesThis section discusses ad-hoc and infrastructure wireless LAN topologies.Ad-hoc

NBG420N User’s Guide31CHAPTER 1 Getting to Know Your NBG420NThis chapter introduces the main features and applications of the NBG420N.1.1 OverviewTh

Appendix E Wireless LANsNBG420N User’s Guide310Figure 203 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of overlapping BSSs

Appendix E Wireless LANsNBG420N User’s Guide311Figure 204 Infrastructure WLANChannelA channel is the radio frequency(ies) used by IEEE 802.11a/b/g

Appendix E Wireless LANsNBG420N User’s Guide312Figure 205 RTS/CTSWhen station A sends data to the AP, it might not know that the station B is alrea

Appendix E Wireless LANsNBG420N User’s Guide313If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then t

Appendix E Wireless LANsNBG420N User’s Guide314• User based identification that allows for roaming.• Support for RADIUS (Remote Authentication Dial In

Appendix E Wireless LANsNBG420N User’s Guide315In order to ensure network security, the access point and the RADIUS server use a shared secret key, w

Appendix E Wireless LANsNBG420N User’s Guide316PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a sec

Appendix E Wireless LANsNBG420N User’s Guide317Key differences between WPA(2) and WEP are improved data encryption and user authentication.

Appendix E Wireless LANsNBG420N User’s Guide31826.6.2 WPA(2)-PSK Application ExampleA WPA(2)-PSK application looks as follows.1 First enter identical

Appendix E Wireless LANsNBG420N User’s Guide319Security Parameters SummaryRefer to this table to see what other security parameters you should config

Chapter 1 Getting to Know Your NBG420NNBG420N User’s Guide321.3 AP ModeSelect AP Mode if you already have a router or gateway on your network which p

Appendix E Wireless LANsNBG420N User’s Guide320

NBG420N User’s Guide321APPENDIX F ServicesThe following table lists some commonly-used services and their associated protocols and port numbers.• Nam

Appendix F ServicesNBG420N User’s Guide322H.323 TCP 1720 NetMeeting uses this protocol.HTTP TCP 80 Hyper Text Transfer Protocol - a client/server prot

Appendix F ServicesNBG420N User’s Guide323PPTP_TUNNEL (GRE)User-Defined 47 PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data o

Appendix F ServicesNBG420N User’s Guide324TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses th

NBG420N User’s Guide325APPENDIX G Legal InformationCopyrightCopyright © 2008 by ZyXEL Communications Corporation.The contents of this publication may

Appendix G Legal InformationNBG420N User’s Guide326If this device does cause harmful interference to radio/television reception, which can be determin

Appendix G Legal InformationNBG420N User’s Guide3273 Select the certification you wish to view from this page.ZyXEL Limited WarrantyZyXEL warrants to

Appendix G Legal InformationNBG420N User’s Guide328

NBG420N User’s Guide329APPENDIX H Customer SupportIn the event of problems that cannot be solved by using this manual, you should contact your vendor

Chapter 1 Getting to Know Your NBG420NNBG420N User’s Guide331.5 Ways to Manage the NBG420NUse any of the following methods to manage the NBG420N.• W

Appendix H Customer SupportNBG420N User’s Guide330• Address: 1005F, ShengGao International Tower, No.137 XianXia Rd., Shanghai• Web: http://www.zyxel.

Appendix H Customer SupportNBG420N User’s Guide331Germany• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +49-2405-6909-6

Appendix H Customer SupportNBG420N User’s Guide332Malaysia• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +603-80

Appendix H Customer SupportNBG420N User’s Guide333Singapore• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +65-6

Appendix H Customer SupportNBG420N User’s Guide334Turkey• Support E-mail: [email protected]• Telephone: +90 212 222 55 22• Fax: +90-212-220-2526• Web:

IndexNBG420N User’s Guide335IndexAactive protocol 188AH 188and encapsulation 189ESP 188ActiveX 162address resolution protocol (ARP) 129AH 188and trans

IndexNBG420N User’s Guide336DNS serversee also Domain name systemDNS (Domain Name System) 212DNS ServerFor VPN Host 190DNS server 135Domain name 51vs

IndexNBG420N User’s Guide337SA life time 190IKE SA. See also VPN.Independent Basic Service Set 309Install UPnP 217Windows Me 217Windows XP 218Internet

IndexNBG420N User’s Guide338and VPN 187overview 137port forwarding 137see also Network Address Translationserver sets 137NAT session 144NAT Traversal

IndexNBG420N User’s Guide339Scheduling 107security associations. See VPN.Security Parameters 319Service and port numbers 201Service Set 95Service Set

Chapter 1 Getting to Know Your NBG420NNBG420N User’s Guide34LAN 1-4 Green On The NBG420N has a successful 10MB Ethernet connection. Blinking The NBG4

IndexNBG420N User’s Guide340Overview 37Web configuratornavigating 39web configurator 33Web Proxy 162WEP Encryption 97WEP encryption 96WEP key 97Wi-Fi

NBG420N User’s Guide35CHAPTER 2 The WPS Button2.1 OverviewYour NBG420N supports WiFi Protected Setup (WPS), which is an easy way to set up a secure

Chapter 2 The WPS ButtonNBG420N User’s Guide36

NBG420N User’s Guide37CHAPTER 3 Introducing the WebConfiguratorThis chapter describes how to access the NBG420N web configurator and provides an over

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide384 Type "1234" (default) as the password and click Login. In some versions, t

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide39Figure 5 Selecting the setup mode3.3 Resetting the NBG420NIf you forget your pas

Document ConventionsNBG420N User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guide. 1 Warn

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide40Figure 6 Web Configurator Status Screen The following table describes the icons show

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide41WAN Information- MAC Address This shows the WAN Ethernet adapter MAC Address of your

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide423.5.1 Navigation PanelUse the sub-menus on the navigation panel to configure NBG420N

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide43LAN IP Use this screen to configure LAN IP address and subnet mask.IP Alias Use this

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide443.5.2 Summary: Any IP TableThis screen displays the IP address of each computer that

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide45Figure 8 Summary: BW MGMT Monitor3.5.4 Summary: DHCP Table DHCP (Dynamic Host C

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide463.5.5 Summary: Packet Statistics Click the Packet Statistics (Details...) hyperlink

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide473.5.6 Summary: VPN MonitorClick the VPN Monitor (Details...) hyperlink in the Status

Chapter 3 Introducing the Web ConfiguratorNBG420N User’s Guide48The following table describes the labels in this screen.Table 9 Summary: Wireless As

NBG420N User’s Guide49CHAPTER 4 Connection WizardThis chapter provides information on the wizard setup screens in the web configurator.4.1 Wizard Se

Document ConventionsNBG420N User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The NBG420N icon is n

Chapter 4 Connection WizardNBG420N User’s Guide50Figure 14 Select a Language3 Read the on-screen information and click Next.Figure 15 Welcome to t

Chapter 4 Connection WizardNBG420N User’s Guide514.2.2 Domain NameThe Domain Name entry is what is propagated to the DHCP clients on the LAN. If you

Chapter 4 Connection WizardNBG420N User’s Guide52Figure 17 Wizard Step 2: Wireless LANThe following table describes the labels in this screen."

Chapter 4 Connection WizardNBG420N User’s Guide534.3.1 Basic (WEP) SecurityChoose Basic (WEP) to setup WEP Encryption parameters.Figure 18 Wizard

Chapter 4 Connection WizardNBG420N User’s Guide544.3.2 Extend (WPA-PSK or WPA2-PSK) SecurityChoose Extend (WPA-PSK) or Extend (WPA2-PSK) security in

Chapter 4 Connection WizardNBG420N User’s Guide55Figure 20 Wizard Step 3: ISP Parameters.The following table describes the labels in this screen,4.

Chapter 4 Connection WizardNBG420N User’s Guide56One of the benefits of PPPoE is the ability to let end users access one of multiple network services,

Chapter 4 Connection WizardNBG420N User’s Guide57" The NBG420N supports one PPTP server connection at any given time.Figure 23 Wizard Step 3:

Chapter 4 Connection WizardNBG420N User’s Guide584.4.4 Your IP AddressThe following wizard screen allows you to assign a fixed IP address or give the

Chapter 4 Connection WizardNBG420N User’s Guide59You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network.

Safety WarningsNBG420N User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.• Do NOT use thi

Chapter 4 Connection WizardNBG420N User’s Guide602 If the ISP did not give you DNS server information, leave the DNS Server fields set to 0.0.0.0 in t

Chapter 4 Connection WizardNBG420N User’s Guide614.4.9 WAN MAC AddressEvery Ethernet device has a unique MAC (Media Access Control) address. The MAC

Chapter 4 Connection WizardNBG420N User’s Guide624.5 Connection Wizard: STEP 4: Bandwidth managementBandwidth management allows you to control the am

Chapter 4 Connection WizardNBG420N User’s Guide63Figure 28 Connection Wizard Save Follow the on-screen instructions and click Finish to complete th

Chapter 4 Connection WizardNBG420N User’s Guide64

NBG420N User’s Guide65CHAPTER 5 AP ModeThis chapter discusses how to configure settings while your NBG420N is set to AP Mode. Many screens that are a

Chapter 5 AP ModeNBG420N User’s Guide66Figure 31 Maintenance > Sys OP Mode > General3 A pop-up appears providing information on this mode. Cli

Chapter 5 AP ModeNBG420N User’s Guide67The following table describes the labels shown in the Status screen.Table 23 Web Configurator Status ScreenL

Chapter 5 AP ModeNBG420N User’s Guide685.3.1 Navigation PanelUse the menu in the navigation panel to configure NBG420N features in AP Mode.The follow

Chapter 5 AP ModeNBG420N User’s Guide695.4 Configuring Your Settings5.4.1 LAN SettingsUse this section to configure your LAN settings while in AP M

Safety WarningsNBG420N User’s Guide7

Chapter 5 AP ModeNBG420N User’s Guide70" If you change the IP address of the NBG420N in the screen below, you will need to log into the NBG420N a

Chapter 5 AP ModeNBG420N User’s Guide715.4.2 WLAN and Maintenance SettingsThe configuration of wireless and maintenance settings in AP Mode is the s

Chapter 5 AP ModeNBG420N User’s Guide72

NBG420N User’s Guide73CHAPTER 6 Tutorials6.1 Wireless Tutorials6.1.1 How to Connect to the Internet from an APThis section gives you an example of

Chapter 6 TutorialsNBG420N User’s Guide746.1.2.1 Push Button Configuration (PBC)1 Make sure that your NBG420N is turned on and that it is within rang

Chapter 6 TutorialsNBG420N User’s Guide75Figure 36 Example WPS Process: PBC Method6.1.2.2 PIN ConfigurationWhen you use the PIN configuration meth

Chapter 6 TutorialsNBG420N User’s Guide76Figure 37 Example WPS Process: PIN Method6.1.3 Enable and Configure Wireless Security without WPS on your

Chapter 6 TutorialsNBG420N User’s Guide77Follow the steps below to configure the wireless settings on your NBG420N.The instructions require that your

Chapter 6 TutorialsNBG420N User’s Guide78Figure 39 Status: AP Mode6.1.4 Configure Your Notebook" We use the ZyXEL M-302 wireless adapter utili

Chapter 6 TutorialsNBG420N User’s Guide79Figure 40 Connecting a Wireless Client to a Wireless Network t5 Select WPA-PSK and type the security key i

Safety WarningsNBG420N User’s Guide8

Chapter 6 TutorialsNBG420N User’s Guide80Figure 43 Link Status 8 If your connection is successful, open your Internet browser and enter http://www.z

Chapter 6 TutorialsNBG420N User’s Guide816.2.1 Configuring Bob’s NBG420N VPN SettingsTo configure these settings Bob uses the NBG420N web configurat

Chapter 6 TutorialsNBG420N User’s Guide82End/Mask text box. This value is the same as Jack only wants Bob to access this single IP address.Figure 47

Chapter 6 TutorialsNBG420N User’s Guide83Figure 50 VPN Summary6.2.2 Configuring Jack’s NBG420N VPN SettingsTo configure these settings Jack uses t

Chapter 6 TutorialsNBG420N User’s Guide846 Select IP as the Local ID Type. This is the type of content that will be used to identify Jack’s NBG420N. E

Chapter 6 TutorialsNBG420N User’s Guide85Figure 57 Pinging Jack’s Local IP AddressPinging is successful which means a VPN tunnel has been establish

Chapter 6 TutorialsNBG420N User’s Guide86

87PART IINetworkWireless LAN (89)WA N ( 11 7 )LAN (127)DHCP (133)Network Address Translation (NAT) (137)Dynamic DNS (147)

88

NBG420N User’s Guide89CHAPTER 7 Wireless LANThis chapter discusses how to configure the wireless network settings in your NBG420N. See the appendices

Contents OverviewNBG420N User’s Guide9Contents OverviewIntroduction ...

Chapter 7 Wireless LANNBG420N User’s Guide90• Every wireless client in the same wireless network must use security compatible with the AP.Security sto

Chapter 7 Wireless LANNBG420N User’s Guide91If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot set

Chapter 7 Wireless LANNBG420N User’s Guide92When you select WPA2 or WPA2-PSK in your NBG420N, you can also select an option (WPA Compatible) to suppor

Chapter 7 Wireless LANNBG420N User’s Guide93Figure 60 Roaming ExampleThe steps below describe the roaming process.1 Wireless station Y moves from t

Chapter 7 Wireless LANNBG420N User’s Guide947.4.1 WMM QoSWMM (Wi-Fi MultiMedia) QoS (Quality of Service) ensures quality of service in wireless netwo

Chapter 7 Wireless LANNBG420N User’s Guide95Figure 61 Network > Wireless LAN > General The following table describes the general wireless LAN

Chapter 7 Wireless LANNBG420N User’s Guide96See the rest of this chapter for information on the other labels in this screen. 7.5.1 No SecuritySelect

Chapter 7 Wireless LANNBG420N User’s Guide97Your NBG420N allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enable

Chapter 7 Wireless LANNBG420N User’s Guide987.5.3 WPA-PSK/WPA2-PSKClick Network > Wireless LAN to display the General screen. Select WPA-PSK or WP

Chapter 7 Wireless LANNBG420N User’s Guide99The following table describes the labels in this screen.7.5.4 WPA/WPA2Click Network > Wireless LAN to