Manuale d’uso / di manutenzione del prodotto NBG420N del fabbricante ZyXEL Communications
Vai alla pagina of 340
www .zyxel.com NBG420N Wireless N Router User ’ s Guide V ersion 3.60 3/2008 Edition 1 DEFAULT LOGIN IP Address http://1 92 .168.1.1 Password 1234.
.
About This User's Guide NBG420N User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who wa nt to configure the NBG420N using th e web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology .
Document Conventions NBG420N User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions NBG420N User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the follo wing generic icons. The NBG420N icon is not an exact representation of yo ur device.
Safety Warnings NBG420N User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
Safety Warnings NBG420N User’s Guide 7.
Safety Warnings NBG420N User’s Guide 8.
Contents Overview NBG420N User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 29 Getting to Know Y our NB G420N .............. .
Contents Overview NBG420N User’s Guide 10.
Table of Contents NBG420N User’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions.............................
Table of Contents NBG420N User’s Guide 12 3.5.2 Summary: Any I P T able ....... ................ ................ ................ ................ ................ ....... 44 3.5.3 Summary: Bandwidth Management Monitor ....... ................ ....
Table of Contents NBG420N User’s Guide 13 6.1.1 How to Connect to t he Internet from an AP .. ............. ................ ................ ................ 73 6.1.2 Configure Wireless Security Using W PS on both your NBG420 N and Wireless Client 73 6.
Table of Contents NBG420N User’s Guide 14 7.1 1 Acc essing the iPod T ouc h Web Configurator . ................ .................... ................ ............... 1 14 7.1 1.1 Acc essing the iPod T ouch Web Configurator .... ................ ....
Table of Contents NBG420N User’s Guide 15 1 1.4.1 Game List Ex ample ........ ................ ... .......... ................ ................ ................ ........... 141 1 1.5 T rigger Port Forw arding . .......... ............ ..............
Table of Contents NBG420N User’s Guide 16 15.1 IPSec VPN Ov erview ........ ................ ................ ................. ................ ................ .............. 165 15.1.1 What Y ou Can Do in the IPSec VPN Screens ... ...............
Table of Contents NBG420N User’s Guide 17 18.1.2 Remote Management and NA T ............ .................... ................ ................ .............. 210 18.1.3 System Timeout ..... ................ .......... ...... ................. .....
Table of Contents NBG420N User’s Guide 18 Chapter 23 Configuration Mode ................................................................................... .......................... .2 5 7 Chapter 24 Sys Op Mode ....................................
List of Figures NBG420N User’s Guide 19 List of Figures Figure 1 Secure Wireless Internet Access in R outer Mode ............... ................ ................. ................ ... 31 Figure 2 Wireless Internet Access in AP Mode ....... ........
List of Figure s NBG420N User’s Guide 20 Figure 39 S tatus: AP Mode .................... ................ ................ ................. ............ ................. ... ................ 78 Figure 40 Connecting a Wireless Client to a Wire less Netw ork t .
List of Figures NBG420N User’s Guide 21 Figure 82 Any IP Example ............... ................ ................ ................ ................ ................ ....... ............. . 129 Figure 83 Network > LAN > IP ........... ........
List of Figure s NBG420N User’s Guide 22 Figure 125 Management > Bandwidth MGMT > Monito r .................. ............. ................ ................ ..... 207 Figure 126 Management > Remote MGMT > WWW .. ...... ............. ...
List of Figures NBG420N User’s Guide 23 Figure 168 Pop-up Blocker ................. ................ ................ ................ .................... ................ ... ........... 279 Figure 169 Internet Options: Privacy ..... .......... ..
List of Figure s NBG420N User’s Guide 24.
List of Tables NBG420N User’s Guide 25 List of Tables T able 1 Features Available in Router Mode vs. AP Mo de ........... ............. ................ ................ ............. 32 T able 2 Front Panel LED s ............... ................ ..
List of Tables NBG420N User’s Guide 26 T able 39 Scheduling ............. ................ ................ ................ ................. ................ ............ .......... ........ 108 T able 40 Login Screen ... ................. .......
List of Tables NBG420N User’s Guide 27 T able 82 Management > Remote MGMT > DNS .. ................ ................. ................ ................... ........... 213 T able 83 Management > UPnP > General ......... ................ .
List of Tables NBG420N User’s Guide 28 T able 125 Eight Subnets ....................... ................ ................ ................. ................ .............. ........... ..... 290 T able 126 24-bit Network Number Subnet Planning ......
29 P ART I Introduction Getting to Know Y our NBG420N (31) The WPS Button (35) Introducing the W eb Configurator (37) Connection W izard (49) AP Mode (65) T utorials (73).
30.
NBG420N User’s Guide 31 C HAPTER 1 Getting to Know Your NBG420N This chapter introduces the main feat ures and applications of the NBG420N. 1.1 Overview The NBG420N acts as either an access point (AP) or a secure broadband router for all data passing between the Internet and y our local network.
Chapter 1 Getting to Know Your NBG420N NBG420N User’s Guide 32 1.3 AP Mode Select AP Mode if you already have a router o r ga teway on your network which provides network services such as a firewall or bandwidth management. The following figure shows computers in a WLAN connecting to the NBG420N, which acts as an access point ( A ).
Chapter 1 Getting to Know Your NBG 420N NBG420N User’s Guide 33 1.5 W ays to Manage the NBG420N Use any of the following meth ods to manage the NBG420N. • W eb Configurator . This is recommended for everyday management of the NBG420N using a (s upported) web browser .
Chapter 1 Getting to Know Your NBG420N NBG420N User’s Guide 34 LAN 1-4 Green On The NBG420N has a successful 10MB Ethernet connection. Blinking The NBG420N is sending/receiving da ta. Amber On The NBG420N has a successful 100MB Etherne t connection.
NBG420N User’s Guide 35 C HAPTER 2 The WPS Button 2.1 Overview Y our NBG420N su pports W iFi Protected Setup (WPS), which is an easy way to set up a secure wireless network.
Chapter 2 The WPS Button NBG420N User’s Guide 36.
NBG420N User’s Guide 37 C HAPTER 3 Introducing the Web Configurator This chapter describes how to access the NB G420N web configurator and provides an overview of its screens. 3.1 W eb Configurator Overview The web configur ator is an HTML-based manage ment interface that allows easy setup and management of the NBG420 N via Internet browser .
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 38 4 T ype "1234" (default) as the password and click Login . In some versions, the default password appears automatically - if this is the case, click Login . 5 Y ou should see a screen askin g you to change your password (highl y recommended) as shown next.
Chapter 3 Introducing the Web Configurator NBG420N User’s Guide 39 Figure 5 Selecting the setup mode 3.3 Resetting the NBG420N If you forget your password or IP address, or you cannot access the web configurator , you will need to use the RESET button at the back of the NBG420 N to reload the factory-default configuration file.
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 40 Figure 6 Web Configur ator S tatus Screen The following table describ es the icons shown in the St a t u s screen. The following table describes the labels shown in the St a t u s screen.
Chapter 3 Introducing the Web Configurator NBG420N User’s Guide 41 W AN Information - MAC Address This shows the WAN Etherne t adapter MAC Address of your device. - IP Address This shows the WAN port’s IP address. - IP Subnet Mask This shows the WAN port’s subnet mask.
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 42 3.5.1 Navigation Panel Use the sub-menus on the n avigation panel to configure NBG420N features. The following table describes the sub-menus. S tatus For the LAN and W AN po rts, this field displays Down (line is down) or Up (line is up or connected).
Chapter 3 Introducing the Web Configurator NBG420N User’s Guide 43 LAN IP Use this screen to configure LAN IP address and subnet mask. IP Alias Use this screen to p artition your LAN interface into subnets. Advanced Use this screen to enable other advanced properties.
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 44 3.5.2 Summary: Any IP T able This screen displays the IP addre ss of each comp uter that is using the NBG420N via the any IP feature. Any IP allows computers to acces s the Internet throug h the NBG420N without changing their network settings when NA T is enabled.
Chapter 3 Introducing the Web Configurator NBG420N User’s Guide 45 Figure 8 Summary: BW MGMT Monitor 3.5.4 Summary: DHCP T able DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a se rver .
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 46 3.5.5 Summary: Packet St atistics Click the Packet S tatistics (Details...) hyperlink in the St a t u s screen. Read-only information here includes port status, packet specific statistics and the "sys tem up time".
Chapter 3 Introducing the Web Configurator NBG420N User’s Guide 47 3.5.6 Summary: VPN Monitor Click the VPN Monitor (Details...) hyperlink in the St a t u s screen. This screen displays read- only information about the ac tive VPN connections. Click the Refr esh button to update the screen.
Chapter 3 Introducing the Web Configur ator NBG420N User’s Guide 48 The following table describes the labels in this screen. T able 9 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wire less station.
NBG420N User’s Guide 49 C HAPTER 4 Connection Wizard This chapter provides informa tion on the wizard setup screens in the web configurator . 4.1 Wizard Setup The web configurator ’ s wizard setup helps you configure your device to access the Internet.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 50 Figure 14 Select a Language 3 Read the on-screen in formation and click Next . Figure 15 Welcome to the Con nection Wizard 4.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information.
Chapter 4 Connection Wizar d NBG420N User’s Guide 51 4.2.2 Domain Name The Domain Name entry is what is propagated to th e DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is us ed.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 52 Figure 17 Wizard S tep 2: Wireless LAN The following table describes the labels in this screen. " The wireless stations and NBG420N must use.
Chapter 4 Connection Wizar d NBG420N User’s Guide 53 4.3.1 Basic (WEP) Security Choose Basic (WEP) to setup WEP Encryption parameters. Figure 18 Wizard S tep 2: Basic (WEP) Security The following table describes the labels in this screen.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 54 4.3.2 Extend (WP A-PSK or WP A2-PSK) Security Choose Extend (WP A-PSK) or Extend (WP A2-PSK) security in the W ireless LAN setup screen to set up a Pr e-Shared Key . Figure 19 Wizard S tep 2: Extend (WP A-PSK or WP A2-PSK) Security The following table describes the labels in this screen.
Chapter 4 Connection Wizar d NBG420N User’s Guide 55 Figure 20 Wizard S tep 3: ISP Parameters. The following table describes the labels in this screen, 4.4.1 Ethernet Connection Choose Ethernet when the W AN port is used a s a regular Ethernet. Continue to Section 4.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 56 One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a function known as dynamic service selec tion. This enables the service provider to easily create and offer new IP services for specific users.
Chapter 4 Connection Wizar d NBG420N User’s Guide 57 " The NBG420N supports one PP TP serv er connection at any given time. Figure 23 Wizard S tep 3: PP TP Connection The following table descri.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 58 4.4.4 Y our IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG420N an automatically assigned IP address depending on your ISP . Figure 24 Wizard S tep 3: Y our IP Address The following table describes the labels in this screen 4.
Chapter 4 Connection Wizar d NBG420N User’s Guide 59 Y ou can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization an d your Internet a ccess is through an ISP , the ISP can provide you with the Intern et addresses for your local networks.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 60 2 If the ISP did not give yo u DNS server information, leave the DNS Server fields set to 0.0.0.0 in the Wizard screen and/or set to From ISP in the WA N > I nternet Connection screen for the ISP to dynamically assign the DNS server IP addresses.
Chapter 4 Connection Wizar d NBG420N User’s Guide 61 4.4.9 W AN MAC Address Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 62 4.5 Connection Wizard: STEP 4: Bandwid th management Bandwidth management allows y o u to control the amoun t of bandwidth going out through the NBG420N’ s W AN, LAN or WLAN port and prio ritize the distribution of the bandwidth according to the traf fic type.
Chapter 4 Connection Wizar d NBG420N User’s Guide 63 Figure 28 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup. Figure 29 Connection Wizard Complete W ell done! Y ou have successfully set up y our NBG420N to operate on your network and access the Internet.
Chapter 4 Conn ection Wizard NBG420N User’s Guide 64.
NBG420N User’s Guide 65 C HAPTER 5 AP Mode This chapter discusses how to configure se ttings while your NBG420N is set to AP Mode . Many screens that are available in Router Mode are not available in AP Mode . " See Chapter 6 on page 73 for an example of setti ng up a wireless network in AP mode.
Chapter 5 AP Mode NBG420N User’s Guide 66 Figure 31 Maintenance > Sys OP Mode > General 3 A pop-up appears provi ding information on this mode. Click OK in the pop-up mess age window . (See Section 24.2 on page 260 for more information on the p op-up.
Chapter 5 AP Mode NBG420N User’s Guide 67 The following table describes the labels shown in the St a t u s screen. T able 23 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen.
Chapter 5 AP Mode NBG420N User’s Guide 68 5.3.1 Navigation Panel Use the menu in the navig a tion panel to configu re NBG420N features in AP Mode . The following screen and table show the features you can co nfigure in AP Mode . Figure 33 Menu: AP Mode The following table describes the sub-menus.
Chapter 5 AP Mode NBG420N User’s Guide 69 5.4 Configuring Y our Settings 5.4.1 LAN Settings Use this section to configur e your LAN settings while in AP Mode . Click Network > LAN to see the screen below . Wireless LAN General Use this screen to configure wireless LAN.
Chapter 5 AP Mode NBG420N User’s Guide 70 " If you change the IP addre ss of the NBG420N in the screen below , you will need to log into the NBG420N again using the new IP address. Figure 34 Network > LAN > IP The table below describes the labels in the screen.
Chapter 5 AP Mode NBG420N User’s Guide 71 5.4.2 WLAN and Maintenance Settings The configuration of wireless and maintenance settings in AP Mode is the same as for Router Mode . • See Chapter 5 on page 69 for information on the conf iguring your wireless network.
Chapter 5 AP Mode NBG420N User’s Guide 72.
NBG420N User’s Guide 73 C HAPTER 6 Tutorials 6.1 Wireless T utorials 6.1.1 How to Connect to the Internet from an AP This section gives you an example of how to set up an access point ( AP ) and wireless client (a notebook ( B ), in this example) for wireless communication.
Chapter 6 Tutorials NBG420N User’s Guide 74 6.1.2.1 Push Button Configuration (PBC) 1 Make sure that your NBG420N is turned on an d that it is within range of your computer . 2 Make sure that yo u have inst alled the wire le ss client (this example uses the NWD210N) driver and utility in your notebook.
Chapter 6 Tutorials NBG420N User’s Guide 75 Figure 36 Example WPS Process: PBC Method 6.1.2.2 PIN Configuration When you use the P IN configuration method, you need to use both NBG420N’ s configurati on interface and the client’ s utilities. 1 Launch your wireless client’ s configuration utility .
Chapter 6 Tutorials NBG420N User’s Guide 76 Figure 37 Example WPS P rocess: PIN Method 6.1.3 Enable and Configure Wirel ess Security without WPS on your NBG420N This example shows you how to configure wi rel ess security settings with the following parameters on your NB G420N.
Chapter 6 Tutorials NBG420N User’s Guide 77 Follow the steps below to configure the wireless settings on your NBG420N. The instructions require that yo ur hardware is connected (see the Quick Start Guide) and you are logged into the web configurat or through your LAN connection (see Section 3.
Chapter 6 Tutorials NBG420N User’s Guide 78 Figure 39 S tatus: AP Mode 6.1.4 Configure Y our Notebook " We use the ZyXEL M-302 wireless adapter utility scr eens as an example for the wireless client. The screens may vary for di fferent models. 1 The NBG420N supports IEEE 802.
Chapter 6 Tutorials NBG420N User’s Guide 79 Figure 40 Connecting a Wireless Client to a Wireless Network t 5 Select WP A-PSK and type the security key in the following screen. Click Next . Figure 41 Security Settings 6 The Confirm Save window appears.
Chapter 6 Tutorials NBG420N User’s Guide 80 Figure 43 Link S tatus 8 If your connection is successful, open your Internet browser and enter http:// www .zyxel.com or the URL of any other web site in the address bar . If you are able to access the web site, your wireless co nnection is successfully configured.
Chapter 6 Tutorials NBG420N User’s Guide 81 6.2.1 Configuring Bob’ s NBG420N VPN Settings T o configure these settings Bob u ses the NBG420N web configurator . 1 Log into the NBG420N web configurator and click VPN > Modify icon. This displays the VPN Ru le Setup (basic) screen.
Chapter 6 Tutorials NBG420N User’s Guide 82 End/Mask text box. This value is the same as Ja ck only wants Bob to access this single IP address. Figure 47 Remote Policy 5 Enter the IP address “1.1.1.1” in the My IP Address text box. This is Bob’ s W AN IP address.
Chapter 6 Tutorials NBG420N User’s Guide 83 Figure 50 VPN Summary 6.2.2 Configuring Jack’ s NBG420N VPN Settings T o configure these settings Jack u ses the NBG420N web configurator . 1 Log into the NBG420N web configurator and click VPN > Modify icon.
Chapter 6 Tutorials NBG420N User’s Guide 84 6 Select IP as the Local ID T ype . This is the type of content that will be used to identify Jack’ s NBG420N. Enter the IP address “2.2.2.2” in the Local Content text box. This identifies Jack’ s NBG420N to Bob’ s NBG 420N.
Chapter 6 Tutorials NBG420N User’s Guide 85 Figure 57 Pinging Jack’ s Local IP Address Pinging is successful which means a VPN tunnel has been established betw een Bob and Jack’ s NBG420Ns. Congratulations! T o ch eck this VPN connection click VPN > SA M onitor in the web configurator .
Chapter 6 Tutorials NBG420N User’s Guide 86.
87 P ART II Network W ireless LAN (89) WA N ( 1 1 7 ) LAN (127) DHCP (133) Network Address T ranslation (NA T) (137) Dynamic DNS (147).
88.
NBG420N User’s Guide 89 C HAPTER 7 Wireless LAN This chapter discusses how to configure the wireless network settings in your NBG420N. See the append ices for more detailed information about wireless networks. 7.1 Wireless Network Overview The following figure provides an exampl e of a wireless network.
Chapter 7 Wireless LAN NBG420N User’s Guide 90 • Every wireless client in the same wireless network must use security c ompatible with the AP . Security stops unauthorized devices from using the wireless network. It ca n also protect the information that is sent in the wireless network.
Chapter 7 Wireless LAN NBG420N User’s Guide 91 If your AP does not provide a local user database and if you do not have a RADIUS server , you cannot set up user names and passwords for your users. Unauthorized devices can still see th e information that is sent in the wireless network, even if they cannot use the wireless network.
Chapter 7 Wireless LAN NBG420N User’s Guide 92 When you select WP A2 or WP A2-PSK in your NBG420N, you can also select an option ( WP A Compatible ) to support WP A as we ll.
Chapter 7 Wireless LAN NBG420N User’s Guide 93 Figure 60 Roaming Example The steps below describe the roaming process. 1 W ireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2 . 2 W ireless station Y sc ans and detects the signal of access point AP 2 .
Chapter 7 Wireless LAN NBG420N User’s Guide 94 7.4.1 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks. It controls WLAN transmission priority on packets to be transmitted over the wireless network.
Chapter 7 Wireless LAN NBG420N User’s Guide 95 Figure 61 Network > Wireless LAN > General The following table describes the general wireless LAN labels in this screen. T able 29 Network > Wireless LAN > General LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN.
Chapter 7 Wireless LAN NBG420N User’s Guide 96 See the rest of this chapter for informa tion on the other labels in this screen. 7.5.1 No Security Select No Security to allow wireless stations to commun icate with the access points without any data encryption.
Chapter 7 Wireless LAN NBG420N User’s Guide 97 Y our NBG420N allows you to configure u p to four 64-bit or 12 8-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption; click Network > Wir eless LAN to display the General sc reen.
Chapter 7 Wireless LAN NBG420N User’s Guide 98 7.5.3 WP A-PSK/WP A2-PSK Click Network > W ireless LAN to display the General screen. Select WP A-PSK or WP A2- PSK from the Security Mode list. Figure 64 Network > Wireless LAN > General: WP A-PSK/WP A2-PSK Key 1 to Key 4 The WEP keys are used to encrypt data.
Chapter 7 Wireless LAN NBG420N User’s Guide 99 The following table describes the labels in this screen. 7.5.4 WP A/WP A2 Click Network > W ireless LAN to display the General screen.
Chapter 7 Wireless LAN NBG420N User’s Guide 100 Figure 65 Network > Wireless LAN > General: WP A/WP A2 The following table describes the labels in this screen.
Chapter 7 Wireless LAN NBG420N User’s Guide 101 7.6 MAC Filter The MAC filter screen allows you to configure th e NBG420N to give exclusive access to up to 32 devices (Allow) or exc lude up to 32 devices from accessing the NBG420N (Den y). Every Ethernet device has a unique MAC (Media Access Control) address.
Chapter 7 Wireless LAN NBG420N User’s Guide 102 Figure 66 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu. 7.7 Wireless LAN Advanced Screen Click Network > W ireless LAN > Advanced . The screen appears as shown.
Chapter 7 Wireless LAN NBG420N User’s Guide 103 Figure 67 Network > Wireless LAN > Advanced The following table describes the labels in this screen. 7.8 Quality of Service (QoS) Screen The QoS screen allows you to au tomatically give a service (such as e-mail, V oIP or FTP) a priority level.
Chapter 7 Wireless LAN NBG420N User’s Guide 104 Figure 68 Network > Wireless LAN > QoS The following table describes the labels in this screen.
Chapter 7 Wireless LAN NBG420N User’s Guide 105 7.8.1 Application Pr iority Configuration Use this screen to edit a WMM QoS appli cation entry . Click the edit icon under Modify .
Chapter 7 Wireless LAN NBG420N User’s Guide 106 7.9 WiFi Protected Setup W iFi Protected Setup (WPS) is an industry standard specification, defined by the W iFi Alliance. WPS allows you to quickly set up a wireless network with strong security , without having to configure security settings manually .
Chapter 7 Wireless LAN NBG420N User’s Guide 107 7.9.2 WPS St atio n Screen Use this screen when you want to add a wireless station using WPS. T o open this screen, click Network > Wir eless LAN > WPS S tation tab.
Chapter 7 Wireless LAN NBG420N User’s Guide 108 Figure 72 Scheduling The following table describes the labels in this screen. 7.10 iPod T ouch Web Configurator The iPod T ouch web configurator displays wh en you are connecting to the NBG420N wirelessly with an iPod T ouch device throug h a web browser .
Chapter 7 Wireless LAN NBG420N User’s Guide 109 1 Make sure the W ireless LAN on the NBG420N is enable d and that you know the security settings (if any). T o do this check the W ireless LAN > General screen in the web configurator from your compu ter .
Chapter 7 Wireless LAN NBG420N User’s Guide 11 0 7.10.2 System St atus After successfully logging into the iPod T ouch web configurator the System S tatus screen displays. " Y our changes in the iPod T ouch web configurator are saved automatically after pressing a button.
Chapter 7 Wireless LAN NBG420N User’s Guide 111 Figure 74 System S tatus screen The following table describes the labels in this screen. T able 41 System S tatus screen LABEL DESCRIPTION Logout Press this to logou t of the iPod T ouch web configurator .
Chapter 7 Wireless LAN NBG420N User’s Guide 11 2 7.10.3 WPS in Progress After pressing Push Button in the System S tatus screen the WPS in Progress screen will display . It can take around tw o minutes for a su ccessful WPS connection to be made. The System St a t u s screen will display after a connection has been made or if it has failed.
Chapter 7 Wireless LAN NBG420N User’s Guide 11 3 Figure 75 WPS In Progress 7.10.4 Port Forwarding After pressing the Details button in the System S tatus screen the port forwarding screen will display . Use this screen to change the status of port forwarding rules that have been set up in the web configurator from yo ur computer .
Chapter 7 Wireless LAN NBG420N User’s Guide 11 4 Figure 76 Port Forwarding The following table describes the labels in this screen. 7.1 1 Accessing the iPod T ouch W eb Configurator T o access the iPod T ouch web configurator throug h your iPod T ouch you must first c onnect it to the NBG420N’ s wirele ss network.
Chapter 7 Wireless LAN NBG420N User’s Guide 11 5 " If you have not c onfigured your wireless settings yet you can do so by using the Wizard in the web configurator yo u access from your computer . Click the Wizard icon or the Go T o W izard Setup web link you see after logging into the web configurator from your computer .
Chapter 7 Wireless LAN NBG420N User’s Guide 11 6 V If the login screen does not display properly , check that you are accessing the correct IP address. Also check your iPod T ouch web browser ’s security settings as they may affe ct how the page displays.
NBG420N User’s Guide 11 7 C HAPTER 8 WAN This chapter describes how to configure W AN settings. 8.1 W AN Overview See the chap ter about the connection w izard for more information on the fields in the W AN screens.
Chapter 8 WAN NBG420N User’s Guide 11 8 The NBG420N supports b oth IGMP version 1 ( IGMP-v1 ) and IGMP version 2 ( IGMP-v2 ). At start up, the NBG420N queries all direc tly connected networks to gather group membership. After that, the NBG4 20N periodically updates this information.
Chapter 8 WAN NBG420N User’s Guide 11 9 The following table describes the labels in this screen. 8.4.2 PPPoE Encap sulation The NBG420N supports PPP oE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.
Chapter 8 WAN NBG420N User’s Guide 120 For the service provider , PPPoE of fers an acces s and authentication method that works with existing access control systems (for example Radius). One of the benefits of PPPoE is the ability to let you access on e of multiple network services, a function known as dynamic service selection.
Chapter 8 WAN NBG420N User’s Guide 121 The following table describes the labels in this screen. T able 44 Network > W AN > Internet Co nnection: PPPoE Encap sulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up conn ection using PPPoE.
Chapter 8 WAN NBG420N User’s Guide 122 8.4.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks.
Chapter 8 WAN NBG420N User’s Guide 123 Figure 80 Network > WAN > Internet Connec tion: PPTP Encapsulation The following table describes the labels in this screen.
Chapter 8 WAN NBG420N User’s Guide 124 Password T ype the password associated w ith the User Na me above. Retype to Confirm T y pe your password again to ma ke sure that you have entered is correctly . Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out.
Chapter 8 WAN NBG420N User’s Guide 125 8.5 Advanced W AN Screen T o change your NBG420N’ s advanced W AN settings, click Networ k > WA N > Advanced . The screen appears as shown. Figure 81 Network > W AN > Advanced The following table describes the labels in this screen.
Chapter 8 WAN NBG420N User’s Guide 126 Enable Auto -bridge mode Select this opti on to have the NBG420N switch to bridge mode automaticall y when the NBG420N gets a W AN IP add ress in the range of 192.168.x.y (where x and y are from zero to nine) no matter what the LAN IP address is.
NBG420N User’s Guide 127 C HAPTER 9 LAN This chapter describes how to configure LAN settings. 9.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a bu ilding.
Chapter 9 LAN NBG420N User’s Guide 128 9.2.2 IP Address and Subnet Mask Refer to the IP address and subnet mask section in the Connection W izard chapter for this information. 9.2.3 Multicast T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Chapter 9 LAN NBG420N User’s Guide 129 Figure 82 Any IP Example The Any IP fe ature does not apply to a computer using eit her a dynamic IP address or a static IP address that is in the same subnet as the NBG420N’ s IP address. " Y ou must enable NA T to use the Any IP feature on the NBG420N.
Chapter 9 LAN NBG420N User’s Guide 130 9.3 LAN IP Screen Use this screen to change yo ur basic LAN settings. Click Network > LAN . Figure 83 Network > LAN > IP The following table describes the labels in this screen.
Chapter 9 LAN NBG420N User’s Guide 131 Figure 84 Network > LAN > IP Alias The following table describes the labels in this screen. 9.5 Advanced LAN Screen T o change your NBG420N’ s advanced IP sett ings, click Network > LAN > Advanced .
Chapter 9 LAN NBG420N User’s Guide 132 The following table describes the labels in this screen. T able 49 Network > LAN > Advanced LABEL DESCRIPTION Multicast Select IGMP V -1 or IGMP V -2 or None .
NBG420N User’s Guide 133 C HAPTER 10 DHCP 10.1 DHCP DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a se rver . Y ou can configure the NBG420N’ s LAN a s a DHCP server or disable it.
Chapter 10 DHCP NBG420N User’s Guide 134 10.3 DHCP Advanc ed Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Y ou can also use this screen to configure the DNS server information that the NBG420 N sends to the DHCP clients.
Chapter 10 DHCP NBG420N User’s Guide 135 10.4 Client List Screen The DHCP table shows current DHCP client information (including IP Address , Host Name and MAC Address ) of network clients using the NBG420N’ s DHCP servers. Configure this screen to always assign an IP addr ess to a MAC address (and host name).
Chapter 10 DHCP NBG420N User’s Guide 136 Figure 88 Network > DHCP > Client List The following table describes the labels in this screen. T able 52 Network > DHCP > Client List LABEL DESCRIPTION # This is the index numb er of the host computer .
NBG420N User’s Guide 137 C HAPTER 11 Network Address Translation (NAT) This chapter discusses how to configure NA T on the NBG420N. 1 1.1 NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet.
Chapter 11 Network Addr ess Translation (NAT) NBG420N User’s Guide 138 " Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Y our ISP may periodically check for serv ers and may suspend your a ccount if it discovers any active services at your location.
Chapter 11 N etwork Add ress Translatio n (NAT) NBG420N User’s Guide 139 The following table describes the labels in this screen. 1 1.4 NA T Application Screen Port forwarding allows you to define the local servers to which the incoming services will be forwarded.
Chapter 11 Network Addr ess Translation (NAT) NBG420N User’s Guide 140 Figure 91 Network > NA T > Application The following table describes the labels in this screen. T able 54 NA T Application LABEL DESCRIPTION Game List Update A ga me list includes the pre-defin ed se rvice name (s) and port number(s).
Chapter 11 N etwork Add ress Translatio n (NAT) NBG420N User’s Guide 141 1 1.4.1 Game List Example Here is an example game list text file. The in dex number , service name and as sociated port(s) are specified by semi-colons (no spaces). Use th e name=xxx (where xxx is the service name) to create a new service.
Chapter 11 Network Addr ess Translation (NAT) NBG420N User’s Guide 142 Figure 92 Game List Example 1 1.5 T rigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedica ted range of ports on the server side.
Chapter 11 N etwork Add ress Translatio n (NAT) NBG420N User’s Guide 143 Figure 93 T rigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes th e NBG420N to record Jane’ s computer IP address.
Chapter 11 Network Addr ess Translation (NAT) NBG420N User’s Guide 144 Figure 94 Network > NA T > Advanced The following table describes the labels in this screen.
Chapter 11 N etwork Add ress Translatio n (NAT) NBG420N User’s Guide 145 Incoming Incoming is a port (or a range of ports) that a server on the W AN use s when it sends out a particular service. The NBG420N forwards the traf fic with this port (or range of ports) to the client co mputer on the LAN tha t requested the service.
Chapter 11 Network Addr ess Translation (NAT) NBG420N User’s Guide 146.
NBG420N User’s Guide 147 C HAPTER 12 Dynamic DNS 12.1 Dynamic DNS Introduction Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in Ne tMeeting, CU-SeeMe, etc.).
Chapter 12 Dynam ic DNS NBG420N User’s Guide 148 Figure 95 Dynamic DNS The following table describes the labels in this screen. T able 56 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Prov ider Select the name of your Dynamic DN S service provider .
Chapter 12 Dynamic D NS NBG420N User’s Guide 149 Apply Click Apply to save your changes back to the NBG420N. Reset Click Reset to begin configuring this screen afresh.
Chapter 12 Dynam ic DNS NBG420N User’s Guide 150.
151 P ART III Security Firewall (153) Content Filtering (161) IPSec VPN (165).
152.
NBG420N User’s Guide 153 C HAPTER 13 Firewall This chapter gives some bac kground information on firewalls and explains how to get started with the NBG420N’ s firewa ll.
Chapter 13 Firewall NBG420N User’s Guide 154 The NBG420N is installed between the LAN and a broadband modem connectin g to the Internet. This allows it to act as a secure gatewa y for all data passing betwee n the Internet and the LAN.
Chapter 13 Firewall NBG420N User’s Guide 155 1 A computer on the LAN initiates a connectio n by sending a SYN packet to a receiving server on the W AN. 2 The NBG420N reroutes the packet to Gateway A , which is in Subnet 2 . 3 The reply from the W AN goes to the NBG420N.
Chapter 13 Firewall NBG420N User’s Guide 156 13.4 Services Screen Click Security > Fir ewall > Services . The scree n appears as shown next. If an outside user attempts to probe an unsu pported port on your NBG420N, an ICMP response packet is automatically returned.
Chapter 13 Firewall NBG420N User’s Guide 157 13.4.1 The Add Firewall Rule Screen If you click Add or the Modify icon on an ex isting rule, the Add Firewall Rule screen is displayed. Use this screen to add a fire wall rule or to modify an existing one.
Chapter 13 Firewall NBG420N User’s Guide 158 Figure 99 Security > Firewall > Services > Adding a Rule The following table describes the labels in this screen. T able 59 Security > Firewall > Services > Adding a Rule LABEL DESCRIPTION Activ e Select this check box to turn the rule on.
Chapter 13 Firewall NBG420N User’s Guide 159 Available Services This is a list of pre-defined services ( ports) you may prohibit your LAN computers from using. Select the port you want to block using the drop-down list and click Add to add the port to the Blocked Services fiel d.
Chapter 13 Firewall NBG420N User’s Guide 160.
NBG420N User’s Guide 161 C HAPTER 14 Content Filtering This chapter provides a brief overview of co ntent filtering using the embedded web GUI. 14.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to your needs.
Chapter 14 Content Filtering NBG420N User’s Guide 162 Figure 100 Security > Content Filter > Filter The following table describes the labels in this screen.
Chapter 14 Con tent Filtering NBG420N User’s Guide 163 14.5 Schedule Use this screen to set the day(s) and time you want the NBG420N to use content filtering.
Chapter 14 Content Filtering NBG420N User’s Guide 164 14.6 Customizing Keyword Blocking URL Checking Y ou can use commands to set ho w much of a website’ s URL the content filter is to check for keyword blocking. See the appendices for info rmation on how to access and use the command interpreter .
NBG420N User’s Guide 165 C HAPTER 15 IPSec VPN 15.1 IPSec VPN Overview A virtual private network (VPN) provides secu re communications between sites without the expense of leased site-to-site lines. A secure VP N is a combination of tunneling, encryption, authentication, access control and a uditing.
Chapter 15 IPSec VPN NBG420N User’s Guide 166 15.1.2 What Y ou Need T o Know About IPSec VPN A VPN tunnel is usually established in tw o phases. Each phase establishes a security association (SA), a contract indicating what sec urity parameters the NB G420N and the remote IPSec router will use.
Chapter 15 IPSec VPN NBG420N User’s Guide 167 Y ou can usually provide a static IP address or a domain name for the remote IPSec router as well. Sometimes, you might not know the IP addr ess of the remote IPSec router (for example, telecommuters).
Chapter 15 IPSec VPN NBG420N User’s Guide 168 The following table describes the fields in this screen. 15.2.1 VPN Rule Setup (Basic) Click the Edit icon in the General screen to display the Rule Setup screen. This figure helps explain the main fields.
Chapter 15 IPSec VPN NBG420N User’s Guide 169 Figure 105 IPSec Fields Summary Use this screen to configure a VPN rule. Figure 106 Security > VPN > General > Rule Setup: IKE (B asic).
Chapter 15 IPSec VPN NBG420N User’s Guide 170 The following table describes the labels in this screen. T able 63 SECURITY > VPN > Rule Setup: IKE (Basic) LABEL DESCRIPTION Property Activ e Select this check box to activate this VPN policy .
Chapter 15 IPSec VPN NBG420N User’s Guide 171 Remote Policy Remote IP addresses must be static and correspond to the remote IPSec router's configured local IP addresses. The remote fields do not apply when the Secure Gateway IP Add ress field is configured to 0.
Chapter 15 IPSec VPN NBG420N User’s Guide 172 Secure Gateway Address T ype the W AN IP address or the domain na me (up to 31 characters) of the IPSec router with which you're making the VPN connection. Set this field to 0.0.0.0 if the remote IPSec router has a dynamic W AN IP address (the IPSec Keying Mode field must be se t to IKE ).
Chapter 15 IPSec VPN NBG420N User’s Guide 173 15.2.2 VPN Rule Setup (Advanced) Click the Advanced... button in the Rule Setup screen to open this screen. Use this screen to configure a VPN rule. Pre-Shared Key T y pe your pre-shared key in this field.
Chapter 15 IPSec VPN NBG420N User’s Guide 174 Figure 107 Security > VPN > General > Rule Setup: IKE (Advanced ).
Chapter 15 IPSec VPN NBG420N User’s Guide 175 The following table describes the labels in this screen. T able 64 Security > VPN > Rule Setup: IKE (Advanced) LABEL DESCRIPTION Property Activ e Select this check box to activate this VPN policy .
Chapter 15 IPSec VPN NBG420N User’s Guide 176 Local Address End / Mask When the local IP address is a single address, type it a second time here. When the local IP address is a range, ent er the end (static) IP address, in a range of computers on the LAN behind your NBG420N.
Chapter 15 IPSec VPN NBG420N User’s Guide 177 Local Content When you select IP in the Local ID T ype field, type the IP address of your computer in the Local Content field. The NBG420N auto matically uses the IP address in the My IP Address field (refer to the My IP Address field description ) if you configure th e Local Content field to 0.
Chapter 15 IPSec VPN NBG420N User’s Guide 178 IKE Phase 1 Negotiation Mode Select Main or Aggress ive from the drop-down list box. Multiple SAs connecting through a secu re gateway mu st have the same negotia tion mode. Encryption Algori thm Select which key size and encryption algorithm to use in the IKE SA.
Chapter 15 IPSec VPN NBG420N User’s Guide 179 15.2.3 VPN Rule Setup (Manual) Use this screen to configure VPN rules (t unnels) that use manual keys. Manual key management is useful if you h ave problems with IKE key management.
Chapter 15 IPSec VPN NBG420N User’s Guide 180 15.2.3.3 Authentication and th e Security Parameter Index (SPI) For authentication, the NBG420N and remote IPSec router use the SPI, instead of pre-shared keys, ID type and conten t. The SPI is an identification number .
Chapter 15 IPSec VPN NBG420N User’s Guide 181 IPSec Keying Mode Select IKE or Manual from the drop-down list box. IKE provides mo re protection so it is generally recommended. Manual is a u seful option for tro ubleshooting if you have problems using IKE key management.
Chapter 15 IPSec VPN NBG420N User’s Guide 182 Remote Address For a single IP address, ente r a (stati c) IP address on the network behind the remote IPSec router . For a specific range of IP addresses, enter th e beginning (static) IP address, in a range of computers on the network behind the remote IPSec router .
Chapter 15 IPSec VPN NBG420N User’s Guide 183 15.3 The SA Monitor Screen In the web configurator , click Security > VPN > SA Monitor . Use this screen to display and manage active VPN connections. A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel.
Chapter 15 IPSec VPN NBG420N User’s Guide 184 The following table describes the labels in this screen. 15.4 VPN and Remote Management Y ou can allow someone to use a service (like T elnet or HTTP) through a VPN tunnel to manage the NBG420N. One of the NBG420N’ s po rts must be part of the VPN rule’ s local network.
Chapter 15 IPSec VPN NBG420N User’s Guide 185 15.5 IPSec VPN T echnical Reference IKE SA Proposal The IKE SA proposal is used to identify the encryption algorithm, au thentication algorithm, and Diffie-Hellman (DH) key group that the NBG420N and remote IPSec router use in the IKE SA.
Chapter 15 IPSec VPN NBG420N User’s Guide 186 Authentication Before the NBG420N and remote IPSec router es tablish an IKE SA, they h ave to verify each other ’ s identity .
Chapter 15 IPSec VPN NBG420N User’s Guide 187 In the following example, the ID type and content do not match so the authentication fails and the NBG420N and the remote IPSec router cannot establish an IKE SA. Negotiation Mode There are two negotiation modes: main mode and aggressive mode.
Chapter 15 IPSec VPN NBG420N User’s Guide 188 Figure 1 14 VPN/NA T Example If router A does NA T , it might change the IP addre sses, port numbers, or both. If router X and router Y try to establish a VPN tunnel, the authen tication fails because it depends on this information.
Chapter 15 IPSec VPN NBG420N User’s Guide 189 These modes are illustrated below . In tunnel mode, the NBG4 20N uses the IPSec prot ocol to encapsulate the entire IP packet.
Chapter 15 IPSec VPN NBG420N User’s Guide 190 Additional IPSec VPN T opics This section discusses other IPSec VPN topics that apply to either IKE SAs or IPSec SAs or both. Relationships between the topics are also highlighted. SA Life Time SAs have a lifetime that specifi es how long the SA lasts until it times out.
Chapter 15 IPSec VPN NBG420N User’s Guide 191 The following figure depicts an example wher e one VPN tunnel is created from an NBG420N at branch office ( B ) to head quarters ( HQ ). In order to access computers that use private domain names on the HQ network, the NBG420N at B uses the Intranet DNS server in headquarters.
Chapter 15 IPSec VPN NBG420N User’s Guide 192.
193 P ART IV Management Static Route Screens (195) Bandwidth Management (1 99) Remote Management (209) Universal Plug-and-P lay (UPnP) (215).
194.
NBG420N User’s Guide 195 C HAPTER 16 Static Route Screens This chapter shows you how to config ure static routes for your NBG420N. 16.1 S t atic Route Overview The NBG420N usually uses the default gateway to route outbou nd traffic from computers on the LAN to the Internet.
Chapter 16 Static Route Screens NBG420N User’s Guide 196 Figure 1 18 Management > S tatic Rout e > IP S tatic Route The following table describes the labels in this screen. 16.2.1 S tatic Rout e Setup Screen T o edit a static route, click the edit icon under Modify .
Chapter 16 Static Route Screens NBG420N User’s Guide 197 Figure 1 19 Management > S tatic Route > IP S t a t ic Route: S tatic Route Setup The following table describes the labels in this screen.
Chapter 16 Static Route Screens NBG420N User’s Guide 198.
NBG420N User’s Guide 199 C HAPTER 17 Bandwidth Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the NBG420 N’ s bandwidth management lo gs.
Chapter 17 Bandwid th Manageme nt NBG420N User’s Guide 200 The following figure shows LAN subnets. Y ou could configure one bandwidth class for subnet A and another for subnet B .
Chapter 17 Bandwidth Management NBG420N User’s Guide 201 17.6 Predefined Bandwid th Management Services The following is a description of the services th at you can select and to which you ca n apply media bandwidth ma nagement using th e wizard screens.
Chapter 17 Bandwid th Manageme nt NBG420N User’s Guide 202 17.7 Default Bandwid th Management Classes and Priorities If you enable bandwidth management but do not configure a rule for critical traf fic like V oIP , the voice traffic may then get de layed due to insufficient bandwi dth.
Chapter 17 Bandwidth Management NBG420N User’s Guide 203 The following table describes the labels in this screen. 17.9 Bandwid th Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth managemen t Advanced screen.
Chapter 17 Bandwid th Manageme nt NBG420N User’s Guide 204 The following table describes the labels in this screen. T able 76 Management > Bandwidth MGMT > Advanced LABEL DESCRIPTION Check my upstream bandwidth Click the Detection button to check the size of your upstream bandwidth.
Chapter 17 Bandwidth Management NBG420N User’s Guide 205 17.9.1 Rule Configuration with the Pre-defined Service T o edit a bandwidth manag ement rule for the pre-defined service in the NBG420N, click the Edit icon in the Application List table of the Advanced screen.
Chapter 17 Bandwid th Manageme nt NBG420N User’s Guide 206 Figure 124 Management > Bandwid th MGMT > Adva nced: Us er-defined Service Rule Configuration The following table describes the labels in this screen T able 78 Management > Bandwidth MGMT > Advanced: User-defin ed Service Rule Configuration 17.
Chapter 17 Bandwidth Management NBG420N User’s Guide 207 Figure 125 Management > Bandwidth MGMT > Mo nitor.
Chapter 17 Bandwid th Manageme nt NBG420N User’s Guide 208.
NBG420N User’s Guide 209 C HAPTER 18 Remote Management This chapter provides information on the Remote Management screens. 18.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which NBG420N interface (if an y) from which c omputers.
Chapter 18 Remo te Management NBG420N User’s Guide 210 1 Y ou have disabled that service in one of the remote management screens. 2 The IP address in the Secured Client IP Add ress field does not match the client IP address. If it does not match, the NBG420 N will disconnect the session immediately .
Chapter 18 Remote Manag ement NBG420N User’s Guide 21 1 18.3 T elnet Y ou can use T elne t to access the NBG420 N’ s command line interface. Specify which interfaces allow T elnet access a nd fro m which IP address the access can come.
Chapter 18 Remo te Management NBG420N User’s Guide 212 18.5 FTP Screen Y ou can use FTP (File T ransfer Protocol) to up load and download the NBG420N’ s firmware and configuration files. T o use this feature, your computer must have an FTP client.
Chapter 18 Remote Manag ement NBG420N User’s Guide 213 Figure 129 Management > Remo te MGMT > DNS The following table describes the labels in this screen. T able 82 Management > Remote MGMT > DNS LABEL DESCRIPTION Server Port The DNS service p ort number is 53 and cannot be ch anged here.
Chapter 18 Remo te Management NBG420N User’s Guide 214.
NBG420N User’s Guide 215 C HAPTER 19 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 19.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 216 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the NBG420N allows multic ast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 217 19.4 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . 19.4.0.1 Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 218 Figure 132 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Pr ograms Properties window and click Next . 5 Restart the computer when prompted.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 219 Figure 134 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 135 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next .
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 220 19.4.0.2 Using UPnP in W indows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP an d UPnP activated on the NBG42 0N.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 221 Figure 137 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 222 Figure 138 Internet Connection Properties: Adva nced Settings Figure 139 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically .
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 223 Figure 140 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet connection st atus.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 224 Figure 142 Network Connections 4 An icon with the description for e ach UPnP-enabled device display s under Local Network . 5 Right-click on the icon for your NBG420N and select Invoke .
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 225 Figure 143 Network Connections: My Network Places 6 Right-click on the icon for your NBG420N and select Properties . A properties window displays with basic inform ation about the NBG420N.
Chapter 19 Universal Plug-and-Play (UPnP) NBG420N User’s Guide 226.
227 P ART V Maintenance and T roubleshooting System (229) Logs (233) T ools (251) Configuration Mode (257) Sys Op Mode (259) Language (263) T roubleshooting (265).
228.
NBG420N User’s Guide 229 C HAPTER 20 System This chapter provides information on the System s creens. 20.1 System Overview See the chapter about wizard setup for mo re information on th e next few screens. 20.2 System General Screen Click Maintenance > System .
Chapter 20 System NBG420N User’s Guide 230 20.3 T ime Setting Screen T o change your NBG 420N’ s time and date, click Maintenance > System > T ime Setting . The screen appears as shown. Use this screen to configure the NBG420N’ s time based on your local time zone.
Chapter 20 System NBG420N User’s Guide 231 The following table describes the labels in this screen. T able 85 Maintenance > System > T ime Setting LABEL DESCRIPTION Current T ime and Date Current T ime This fiel d displays the time of you r NBG420N.
Chapter 20 System NBG420N User’s Guide 232 End Date Configure the day and time when Daylight Saving T ime ends if you selected Daylight Saving s . Th e o'clock field uses the 24 ho ur format. Here are a couple of examples: Daylight Saving Time ends in the United St ates on the last Sunday of October .
NBG420N User’s Guide 233 C HAPTER 21 Logs This chapter contains inform ation about configuring genera l log settings and viewing the NBG420N’ s logs. Refe r to the appendices for example log message explanations. 21.1 V iew Log The web confi gurator allows you to look at all of the NBG420N’ s logs in one location.
Chapter 21 Logs NBG420N User’s Guide 234 The following table describes the labels in this screen. 21.2 Log Settings Y ou can configure the NBG420N’ s ge neral log settings in one location. Click Maintenance > Logs > Log Settings to open the Log Settings screen.
Chapter 21 Lo gs NBG420N User’s Guide 235 Figure 148 Maintenance > Logs > Log Settings The following table describes the labels in this screen.
Chapter 21 Logs NBG420N User’s Guide 236 Send Alerts T o Alerts are real-time notifications that are sent as soon as an event, such as a DoS attack, system error , or forbidden web access attempt o ccurs. Enter the E- mail address where the alert messages will be sent.
Chapter 21 Lo gs NBG420N User’s Guide 237 21.3 Log Descriptions This section provides descriptio ns of example log messages. T able 88 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router h as adjusted its time based on info rmation from the time server .
Chapter 21 Logs NBG420N User’s Guide 238 T able 89 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NA T session exceeds the maximum number of NA T session table entries allowed to be created per host.
Chapter 21 Lo gs NBG420N User’s Guide 239 Firewall session time out, sent TCP RST The router sent a TCP reset pa cket when a dynamic firewall session timed out.
Chapter 21 Logs NBG420N User’s Guide 240 T able 94 CDR Logs LOG MESSAGE DESCRIPTION board%d line%d channel%d, call%d,%s C01 Outgoing Call dev=%x ch=%x%s The router received the setup requ irements for a call. “cal l” is the reference (count) numbe r of the call.
Chapter 21 Lo gs NBG420N User’s Guide 241 %s: Proxy mode detected The rout er detected proxy mode i n the packet. %s The content filter server responded t hat the web site is in the blocked category list, but it did not return the ca tegory type.
Chapter 21 Logs NBG420N User’s Guide 242 teardrop UDP The firewall detected an UDP teardrop attack. teardrop ICMP (type:%d, code:%d) The firewall dete cted an ICMP te ardrop attack. For type and code details, see T able 1 04 on page 247 . illegal command TCP The firewall dete cted a TCP illegal command attack.
Chapter 21 Lo gs NBG420N User’s Guide 243 Verifying Local ID failed: The connection failed during I KE phase 2 because the router and the peer ’s Local/Remote Ad dresses don’t match. IKE Packet Retransmit The router retra nsmitted the last packet sent because there was no response from the peer .
Chapter 21 Logs NBG420N User’s Guide 244 No known phase 1 ID type found The router could not find a known phase 1 ID in the connection attempt. ID type mismatch. Local / Peer: <Local ID type/Peer I D type> The phase 1 ID types do not ma tch. ID content mismatch The phase 1 ID contents do not match.
Chapter 21 Lo gs NBG420N User’s Guide 245 Rule [%d] Phase 1 ID mism atch The listed rule’s IKE phase 1 ID did not match between the router and the peer . Rule [%d] Phase 1 hash mismatch The listed rule’s IKE phase 1 hash did not match between the router and the peer .
Chapter 21 Logs NBG420N User’s Guide 246 Rcvd user cert: <subject name> The router received a user certificat e, with sub ject name as recorded, from the LDAP server whose IP address and port are recorded in the Source field.
Chapter 21 Lo gs NBG420N User’s Guide 247 User logout because of user deassociation. The router l ogged out a user w ho ended the session. User logout because of no authentication response from user. The router logge d out a user from which there was no authentication response.
Chapter 21 Logs NBG420N User’s Guide 248 5 Source route failed 4 Source Quench 0 A gateway may discard internet datagrams if it does not have th e buffer sp ace needed to queue the datagrams for output to the next network on th e route to the destination network.
Chapter 21 Lo gs NBG420N User’s Guide 249 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type.
Chapter 21 Logs NBG420N User’s Guide 250.
NBG420N User’s Guide 251 C HAPTER 22 Tools This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the NBG420N. 22.1 Firmware Upload Screen Find firmware at www .zyxel.co m in a file that (usually) uses the system model name with a “*.
Chapter 22 Tools NBG420N User’s Guide 252 Figure 150 Upload W arning The NBG420N automatically restar ts in this time causing a temporary network disconnect.
Chapter 22 Tools NBG420N User’s Guide 253 Figure 153 Maintenance > T o ols > Configura t ion 22.2.1 Backup Configuration Backup configuration allo ws you to back up (s ave) the NBG420N’ s current configura tion to a file on your computer .
Chapter 22 Tools NBG420N User’s Guide 254 Figure 154 Configuration Restore Su ccessful The NBG420N automatically restar ts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Chapter 22 Tools NBG420N User’s Guide 255 Click Maintenance > T ools > Restart . Click Restart to have the NBG420N reb oot. This does not affect the NBG420N's configuration. Figure 157 Maintenance > T o ols > Rest art 22.4 W a ke On LAN W ake On LAN (W oL) allows you to remotely turn on a device on the network.
Chapter 22 Tools NBG420N User’s Guide 256.
NBG420N User’s Guide 257 C HAPTER 23 Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some features or the advanced feature s, such as MAC filter or static route.
Chapter 23 Config uration Mode NBG420N User’s Guide 258 Ta b l e 1 11 Advanced Configur ation Options " In AP Mode many screens will not be available.
NBG420N User’s Guide 259 C HAPTER 24 Sys Op Mode 24.1 Overview The Sys Op Mode (System Operation Mode) function lets you config ure whether your NBG420N is a router or AP . Y ou can choose between Router Mode and AP Mode depending on your network topology and the features you require from your device.
Chapter 24 Sys Op Mod e NBG420N User’s Guide 260 Figure 161 IP Address in AP Mode 24.2 Selecting System Operation Mode Use this screen to select how you connect to the Internet. Figure 162 Maintenance > Sys OP M ode > General If you select Router Mode, the followi ng pop-up message window appears.
Chapter 24 Sys Op Mode NBG420N User’s Guide 261 Figure 164 Maintenance > Sys Op Mode > General: AP •I n AP Mode all Ethernet ports have the same IP address. • All ports on the rear panel of th e device are LAN ports, includin g the port labeled W AN.
Chapter 24 Sys Op Mod e NBG420N User’s Guide 262.
NBG420N User’s Guide 263 C HAPTER 25 Language Use this sc reen to change the langua ge for the web configurator display . 25.1 Language Screen Click the language you prefer . The web configur ator lang uage changes after a while without restarting the NBG420N.
Chapter 25 La nguage NBG420N User’s Guide 264.
NBG420N User’s Guide 265 C HAPTER 26 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories.
Chapter 26 Trou bleshooting NBG420N User’s Guide 266 26.2 NBG420N Access and Login V I don’t know the IP addr ess of my NBG420N. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP address o f the NBG420N by looking up the IP address of the default gateway for your computer .
Chapter 26 Trou bleshooting NBG420N User’s Guide 267 2 Check the hardware connections , and make su re the LEDs are be having as expected. Se e the Quick S tart Guide. 3 Make sure your Internet bro wser does not block pop-up windows and has JavaScripts and Java enabled.
Chapter 26 Trou bleshooting NBG420N User’s Guide 268 See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator . Ignore the suggestions about your bro wser . 26.3 Internet Access V I cannot access the Internet.
Chapter 26 Trou bleshooting NBG420N User’s Guide 269 interfering with the wireless network (fo r example, microwaves, other wireless networks, and so on). 3 Reboot the NBG420N. 4 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns.
Chapter 26 Trou bleshooting NBG420N User’s Guide 270 4 Make sure your computer (with a wireless ad apter installed) is within the transmission range of the NBG420N. 5 Check that both the NBG420N and your wirel ess station are using the same wireless and wireless security settings.
271 P ART VI Appendices and Index Product Specifications and W all-Mounting Instructions (273 ) Pop-up W indows, JavaScripts and Java Permissions (279) IP Addresses and Subnetting (285) Setting up Y o.
272.
NBG420N User’s Guide 273 A PPENDIX A Product S pecifications and W all- Mounting Instructions The following tables summarize the NBG420 N’ s hardware and firmware features.
Appendix A Product Specifications and Wall-Mounting Instr u ctions NBG420N User’s Guide 274 T able 1 14 Firmware Features FEATURE DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.2 55.0 (24 bits) Default Password 1234 DHCP Pool 1 92.
Appendix A Product Specificatio ns and Wall-Mounting Instructio ns NBG420N User’s Guide 275 IPSec VPN This allows you to establish a secure Virtual Private Network (VPN) tunnel to connect with business partners and branch offices using data encryption and the Internet without t he expense of leased site-to-site lines.
Appendix A Product Specifications and Wall-Mounting Instr u ctions NBG420N User’s Guide 276 The following list, which is not exhaustive, illustrates the standa rd s supported in the NBG420N. W all-mounting Instructions Do the following to hang your NBG420N on a wall.
Appendix A Product Specificatio ns and Wall-Mounting Instructio ns NBG420N User’s Guide 277 1 Be careful to avoid damaging pipes or cables located in side the wall when drilling holes for the screws. 3 Do not screw the screws all the way into th e wall.
Appendix A Product Specifications and Wall-Mounting Instr u ctions NBG420N User’s Guide 278 Figure 167 Masonry Plug and M4 T ap Screw.
NBG420N User’s Guide 279 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default).
Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions NBG420N User’s Guide 280 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have enabled . Figure 169 Internet Options: Privacy 3 Click Apply to save this setting.
Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns NBG420N User’s Guide 281 Figure 170 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.
Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions NBG420N User’s Guide 282 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed.
Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns NBG420N User’s Guide 283 Figure 173 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level.
Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions NBG420N User’s Guide 284 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted.
NBG420N User’s Guide 285 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.
Appendix C IP Addresses a nd Subnetting NBG420N User’s Guide 286 Figure 176 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Appendix C IP Addresses and Subnetting NBG420N User’s Guide 287 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks.
Appendix C IP Addresses a nd Subnetting NBG420N User’s Guide 288 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons.
Appendix C IP Addresses and Subnetting NBG420N User’s Guide 289 Figure 178 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).
Appendix C IP Addresses a nd Subnetting NBG420N User’s Guide 290 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet.
Appendix C IP Addresses and Subnetting NBG420N User’s Guide 291 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number .
Appendix C IP Addresses a nd Subnetting NBG420N User’s Guide 292 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
NBG420N User’s Guide 293 A PPENDIX D Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 294 Figure 179 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microsoft Netwo rks.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 295 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically .
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 296 Figure 181 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 297 Figure 182 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 183 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 298 Figure 184 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 299 Figure 186 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK .
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 300 Figure 187 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS server address automatically if yo u do not know your DNS server IP address(es).
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 301 Figure 188 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W i ndows 2000/NT) to close the Local Area Connecti on Properties window .
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 302 Figure 189 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 190 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 303 •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your Prestige in the Router address box.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 304 Figure 192 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 305 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 306 Figure 194 Red Hat 9.0: KDE: Ethern et Device: General • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 307 Figure 196 Red Hat 9.0: KDE: Network Config uration: Activate 7 After the network card restart proc ess is complete, make sure the St a t u s is Active in the Network Configuration screen.
Appendix D Setting up Your Computer’s IP Address NBG420N User’s Guide 308 2 If you know your DNS server IP address(es) , enter the DNS server information in the resolv.conf file in the /etc directory . The following figure shows an example where two DNS server IP addresses are specified.
NBG420N User’s Guide 309 A PPENDIX E W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless stations (A, B, C).
Appendix E Wireless LANs NBG420N User’s Guide 310 Figure 203 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Appendix E Wir eless LANs NBG420N User’s Guide 31 1 Figure 204 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices.
Appendix E Wireless LANs NBG420N User’s Guide 312 Figure 205 RTS/ CT S When station A sends data to the AP , it might no t know that the station B is already using the channel.
Appendix E Wir eless LANs NBG420N User’s Guide 313 If the Fragmentation Threshold value is smaller than the RT S /C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size.
Appendix E Wireless LANs NBG420N User’s Guide 314 • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a netw ork RADIUS server .
Appendix E Wir eless LANs NBG420N User’s Guide 315 In order to ensure network security , the access point and the RADIUS server us e a shared secret key, which is a password, they both know .
Appendix E Wireless LANs NBG420N User’s Guide 316 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods through the secured connection to authenticate the clients, thus hiding client identity .
Appendix E Wir eless LANs NBG420N User’s Guide 317 Key differences between WP A(2) and WEP are improved data encryption and user authentication. Encryption Both WP A and WP A2 improve data encryp tion by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.
Appendix E Wireless LANs NBG420N User’s Guide 318 26.6.2 WP A(2)-PSK Application Example A WP A(2)-PSK applica tion looks as follows. 1 First enter identical passwords into the AP an d all wireless c lients. The Pre-Shared Key (PSK) must co nsist of between 8 and 63 ASCII characters (including spaces and symbols).
Appendix E Wir eless LANs NBG420N User’s Guide 319 Security Parameters Summary Refer to this table to see what other secur ity parameters you should configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features.
Appendix E Wireless LANs NBG420N User’s Guide 320.
NBG420N User’s Guide 321 A PPENDIX F Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
Appendix F Services NBG420N User’s Guide 322 H.323 TCP 1720 NetMeeting uses this protocol. HTTP TCP 80 Hyper T ext T ransfer Protoco l - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce.
Appendix F Services NBG420N User’s Guide 323 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unnel ing Protocol) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service. REAL_AUDIO TCP 7070 A streami ng audio service that enables real time sound over the we b.
Appendix F Services NBG420N User’s Guide 324 TFTP UDP 69 T r ivial File T r ansfer Protocol is an Interne t file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution.
NBG420N User’s Guide 325 A PPENDIX G Legal Information Copyright Copyright © 2008 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a wh.
Appendix G Legal Information NBG420N User’s Guide 326 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna.
Appendix G Legal Information NBG420N User’s Guide 327 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to two ye ars from the date of purchase.
Appendix G Legal Information NBG420N User’s Guide 328.
NBG420N User’s Guide 329 A PPENDIX H Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor . If you cannot contact yo ur vendor , then contac t a ZyXEL office for the region in which you bought the dev ice.
Appendix H Custo mer Support NBG420N User’s Guide 330 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .zyxel.cn Cost a Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.
Appendix H Customer Support NBG420N User’s Guide 331 Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909-69 • Fax: +49-2405-6909-99 • W eb: www .zyxel.de • Re g ul a r Ma i l: ZyXEL Deut schland GmbH.
Appendix H Custo mer Support NBG420N User’s Guide 332 Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.com.my • T elephone: +603-8076-9933 • Fax: +603-8076- 9833 • W eb: http://www .zyxel.com.my • Regular Mail: ZyXEL Malaysia Sdn Bhd.
Appendix H Customer Support NBG420N User’s Guide 333 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd.
Appendix H Custo mer Support NBG420N User’s Guide 334 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 55 22 • Fax: +90-212-220-2 526 • W eb: http:www .zyxel.com.tr • Address: Kaptanpasa Mahallesi Piyalep asa Bulvari Ortadogu Plaza N:14/13 K:6 Okmeydani/Sisli Istanbul/T urkey Ukraine • Support E-mail: su pport@ua.
Index NBG420N User’s Guide 335 Index A active protocol 188 AH 188 and encapsulation 189 ESP 188 ActiveX 162 address resolution protocol (ARP) 129 AH 188 and transport mode 189 Alert 234 alternative .
Index NBG420N User’s Guide 336 DNS server see also Domain name system DNS (Domain Name System) 212 DNS Server For VPN Host 190 DNS server 135 Domain name 51 vs host name.
Index NBG420N User’s Guide 337 SA life time 190 IKE SA. See also VPN. Independent Basi c Service Set 309 Install UPnP 217 Windows Me 217 Windows XP 218 Internet Assigned Nu mbers Authority See IANA Internet connection Ethernet PPPoE.
Index NBG420N User’s Guide 338 and VPN 187 overview 137 port forwarding 137 see also Network Address T ranslation server sets 137 NA T session 144 NA T Traversal 215 NA T traversal 188 Navigation Pa.
Index NBG420N User’s Guide 339 Scheduling 107 security associations. See VPN. Security Parameters 319 Service and port numbers 201 Service Set 95 Service Set IDentifica tion 95 Service Set IDentity .
Index NBG420N User’s Guide 340 Overview 37 Web configurator navigating 39 web configurator 33 Web Proxy 162 WEP Encryption 97 WEP encryption 96 WEP key 97 Wi-Fi Multimedia QoS 94 Wildcard 147 Window.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL Communications NBG420N è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL Communications NBG420N - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL Communications NBG420N imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL Communications NBG420N ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL Communications NBG420N, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL Communications NBG420N.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL Communications NBG420N. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL Communications NBG420N insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
