ZyXEL Communications NBG-419N CHAPTER 19

NBG-419N User’s Guide 161

CHAPTER 19

Firewall

19.1 Overview

This chapter shows you how to enable and configure the firewall that protects your

NBG-419N and your LAN from unwanted or malicious traffic.

Enable the firewall to protect your LAN computers from attacks by hackers on the

Internet and control access between the LAN and WAN. By default the firewall:

• allows traffic that originates from your LAN computers to go to all of the

networks.

• blocks traffic that originates on the other networks from going to the LAN.

The following figure illustrates the default firewall action. User A can initiate an IM

(Instant Messaging) session from the LAN to the WAN (1). Return traffic for this

session is also allowed (2). However other traffic initiated from the WAN is blocked

(3 and 4).

Figure 101 Default Firewall Action

Contents

Main NBG-419N Wireless N Home Router Page About This User's Guide Intended Audience Related Documentation User Guide Feedback Customer Support Document Conventions Warnings and Notes Warnings tell you about things that could harm you or your device. Syntax Conventions Page Safety Warnings NBG-419N Users Guide 7 Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Part IV: Management ........................................................................... 171 Part V: Maintenance and Troubleshooting........................................ 195 Part VI: Appendices and Index ........................................................... 231 PART I Page CHAPTER 1 Getting to Know Your NBG-419N Figure 1 NBG-419N Network 1.1 Overview 1.2 Applications 1.3 Ways to Manage the NBG-419N 1.4 Good Habits for Managing the NBG-419N Figure 2 Front Panel 1.5 LEDs Chapter 1 Getting to Know Your NBG-419N Table 1 Front Panel LEDs and WPS Button LED COLOR STATUS DESCRIPTION Page CHAPTER 2 Connection Wizard 2.1 Overview 2.2 Accessing the Wizard 2.3 Connect to Internet 2.3.1 Connection Type: DHCP 2.3.2 Connection Type: Static IP Figure 7 Internet Connection Type: Static IP 2.3.3 Connection Type: PPPoE Figure 8 Internet Connection Type: PPPoE 2.3.4 Connection Type: PPTP Figure 9 Internet Connection Type: PPTP 2.3.5 Connection Type: L2TP Figure 10 Internet Connection Type: L2TP Page 2.4 Router Password Figure 12 Router Password Figure 13 Wireless Security: No Security 2.5 Wireless Security 2.5.1 Wireless Security: No Security 2.5.2 Wireless Security: WPA-PSK/WPA2-PSK Figure 14 Wireless Security: WPA-PSK/WPA2-PSK Table 7 Wireless Security: No Security Table 8 Wireless Security: WPA-PSK/WPA2-PSK Page CHAPTER 3 Introducing the Web Configurator 3.1 Overview 3.2 Accessing the Web Configurator 3.2.1 Login Screen 3.2.2 Password Screen 3.2.3 Home Screen Figure 18 Home Screen 3.2.3.1 Weather Edit Figure 19 Change Weather Table 11 Home Screen 3.2.3.2 Time/Date Edit Figure 20 Change Password Screen 3.3 Resetting the NBG-419N Table 12 Change Weather Table 13 Change Password Screen Page CHAPTER 4 Monitor 4.1 Overview 4.2 What You Can Do 4.3 BW MGMT Monitor 4.4 DHCP Table Figure 22 Summary: DHCP Table 4.5 Packet Statistics Figure 23 Summary: Packet Statistics Table 14 Summary: DHCP Table 4.6 WLAN Station Status Figure 24 Summary: Wireless Association List Table 15 Summary: Packet Statistics Table 16 Summary: Wireless Association List Page CHAPTER 5 NBG-419N Modes 5.1 Overview 5.1.1 Web Configurator Modes 5.1.2 Device Modes Figure 25 Device Mode Example Note: Choose your Device Mode carefully to avoid having to change it later. CHAPTER 6 Easy Mode Navigation Panel Control Panel 6.1 Overview 6.2 What You Can Do Navigation Panel Status Screen Control Panel 6.3 What You Need to Know 6.4 Navigation Panel 6.5 Network Map Figure 29 Network Map 6.6 Control Panel Figure 30 Control Panel Chapter 6 Easy Mode NBG-419N Users Guide 55 The following table describes the labels in this screen. 6.6.1 Game Engine traffic that it forwards out through an interface. Figure 31 Game Engine Table 18 Control Panel ITEM DESCRIPTION 6.6.2 Power Saving 6.6.3 Content Filter Figure 33 Content Filter Table 19 Power Saving Table 20 Content Filter Note: The NBG-419N does not recognize wildcard characters as keywords. 6.6.4 Bandwidth MGMT Figure 34 Bandwidth MGNT 6.6.5 Firewall Figure 35 Firewall Table 20 Content Filter 6.6.6 Wireless Security The following table describes the general wireless LAN labels in this screen. Table 21 Wireless Security 6.6.7 WPS 6.7 Status Screen in Easy Mode Figure 38 Status Screen in Easy Mode Table 23 Status Screen in Easy Mode Page CHAPTER 7 Router Mode 7.1 Overview 7.2 What You Can Do 7.3 Status Screen Chapter 7 Router Mode The following table describes the labels shown in the Status screen. NBG-419N Users Guide 65 Table 24 Status Screen Icon Key: Router Mode (continued) ICON DESCRIPTION Table 25 Status Screen: Router Mode network bandwidth that applications running in the network are using. 7.3.1 Navigation Panel Figure 41 Navigation Panel: Router Mode Table 25 Status Screen: Router Mode LINK TAB FUNCTION Chapter 7 Router Mode LINK TAB FUNCTION NBG-419N Users Guide 69 bandwidth that applications running in the network are using. from the LAN, WAN or both. Page CHAPTER 8 Access Point Mode 8.1 Overview Figure 42 Wireless Internet Access in Access Point Mode 8.2 What You Can Do 8.3 What You Need to Know 8.3.1 Setting your NBG-419N to AP Mode 8.3.2 Accessing the Web Configurator in Access Point Mode 8.3.3 Configuring your WLAN, Bandwidth Management and Maintenance Settings 8.4 AP Mode Status Screen Figure 45 Status Screen: Access Point Mode Table 27 Status Screen: Access Point Mode Page 8.4.0.1 Navigation Panel Figure 46 Menu: Access Point Mode 8.5 LAN Screen Table 27 Status Screen: Access Point Mode Chapter 8 Access Point Mode NBG-419N Users Guide 77 The table below describes the labels in the screen. Table 28 Network > LAN > IP Page CHAPTER 9 WISP Mode 9.1 Overview Figure 48 Wireless Client Mode 9.2 What You Can Do 9.3 What You Need to Know 9.3.1 Setting your NBG-419N to WISP Mode 9.3.2 Accessing the Web Configurator in WISP Mode 9.4 WISP Mode Status Screen Chapter 9 WISP Mode The following table describes the labels shown in the Status screen. Table 29 Status Screen: WISP Mode 9.5 Wireless LAN General Screen Figure 52 WISP Mode: LAN > General Screen Figure 53 No Security (WISP) 9.5.0.1 No Security Table 30 WISP Mode: LAN > General Screen 9.5.1 Static WEP Figure 54 WEP (WISP) Table 31 No Security (WISP) Table 32 WEP (WISP) Chapter 9 WISP Mode 9.5.2 WPA(2)-PSK Figure 55 WPA-PSK/WPA2-PSK (WISP) Table 33 WPA-PSK/WPA2-PSK (WISP) 9.5.3 Advance Screen Figure 56 Configuration > Wireless LAN > Advance Screen (WISP) Table 34 Configuration > Wireless LAN > Advance Screen (WISP) CHAPTER 10 Tutorials 10.3.1 Push Button Configuration (PBC) Figure 58 Example WPS Process: PBC Method 10.3.2 PIN Configuration Wireless Client NBG-419N Figure 59 Example WPS Process: PIN Method 10.4 Enabling and Configuring Wireless Security (No WPS) Figure 60 Tutorial: Network > Wireless LAN > General Figure 61 Tutorial: Checking Wireless Settings 10.4.1 Configure Your Notebook Page Figure 65 Link Status PART II Page CHAPTER 11 Wireless LAN 11.1 Overview 11.2 What You Can Do 11.3 What You Should Know 11.3.1 Wireless Security Overview 11.3.1.1 SSID 11.3.1.2 MAC Address Filter 11.3.1.3 Encryption 11.3.1.4 WPS 11.3.1.5 WDS Table 35 Types of Encryption for Each Type of Authentication 11.4 General Wireless LAN Screen 11.4.1 No Security 11.4.2 WEP Encryption Table 37 Network > Wireless LAN > General: No Security Figure 69 Network > Wireless LAN > General: Static WEP Table 38 Network > Wireless LAN > General: Static WEP Chapter 11 Wireless LAN Refer to Table 36 on page 103 for descriptions of the other labels in this screen. NBG-419N Users Guide 107 11.4.3 WPA-PSK/WPA2-PSK Figure 70 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK Table 39 Network > Wireless LAN > General: WPA-PSK/WPA2-PSK 11.5 MAC Filter Figure 71 Network > Wireless LAN > MAC Filter Table 40 Network > Wireless LAN > MAC Filter 11.6 Wireless LAN Advanced Screen Figure 72 Network > Wireless LAN > Advanced Table 41 Network > Wireless LAN > Advanced Chapter 11 Wireless LAN NBG-419N Users Guide 111 11.7 Quality of Service (QoS) Screen Figure 73 Network > Wireless LAN > QoS Table 41 Network > Wireless LAN > Advanced 11.8 WPS Screen Figure 74 Network > Wireless LAN > WPS Table 42 Network > Wireless LAN > QoS Table 43 Network > Wireless LAN > WPS 11.9 WPS Station Screen 11.10 Scheduling Screen Figure 76 Network > Wireless LAN > Scheduling Table 44 Network > Wireless LAN > WPS Station 11.11 WDS Screen Table 45 Network > Wireless LAN > Scheduling Figure 77 Network > Wireless LAN > WDS Table 46 Network > Wireless LAN > WDS Page Page CHAPTER 12 WAN 12.1 Overview Figure 78 LAN and WAN 12.2 What You Can Do 12.3 What You Need To Know 12.3.1 Configuring Your Internet Connection Encapsulation Method WAN IP Address DNS Server Address Assignment 12.3.2 Multicast Figure 79 Multicast Example 12.4 Internet Connection Table 47 Network > WAN > Internet Connection: Ethernet Encapsulation 12.4.2 PPPoE Encapsulation Figure 81 Network > WAN > Internet Connection: PPPoE Encapsulation Table 48 Network > WAN > Internet Connection: PPPoE Encapsulation 12.4.3 PPTP Encapsulation Table 48 Network > WAN > Internet Connection: PPPoE Encapsulation Page Table 49 Network > WAN > Internet Connection: PPTP Encapsulation Chapter 12 WAN NBG-419N Users Guide 129 12.4.4 L2TP Encapsulation Table 49 Network > WAN > Internet Connection: PPTP Encapsulation Figure 83 Network > WAN > Internet Connection: L2TP Encapsulation Table 50 Network > WAN > Internet Connection: L2TP Encapsulation 12.5 Advanced WAN Screen Note: The categories shown in this screen are independent of each other. Figure 84 Network > WAN > Advanced 12.6 IGMP Snooping Screen Table 51 Network > WAN > Advanced Figure 85 Network > WAN > IGMP Snooping Table 52 Network > WAN > IGMP Snooping Page CHAPTER 13 LAN 13.1 Overview Figure 86 LAN Example 13.2 What You Can Do 13.3 What You Need To Know Figure 87 LAN and WAN IP Addresses 13.3.1 IP Pool Setup 13.3.2 LAN TCP/IP 13.3.3 IP Alias 13.4 LAN IP Screen Figure 88 Network > LAN > IP Table 53 Network > LAN > IP 13.5 IP Alias Screen Figure 89 Network > LAN > IP Alias Table 54 Network > LAN > IP Alias CHAPTER 14 DHCP Server Figure 90 Network > DHCP Server > General 14.1 Overview 14.2 What You Can Do 14.4 Advanced Screen Figure 91 Network > DHCP Server > Advanced Table 55 Network > DHCP Server > General Chapter 14 DHCP Server NBG-419N Users Guide 141 Table 56 Network > DHCP Server > Advanced Page CHAPTER 15 Network Address Translation (NAT) 15.1 Overview Figure 92 NAT Example 15.2 What You Can Do 15.3 General NAT Screen Figure 93 Network > NAT > General Table 57 Network > NAT > General 15.4 NAT Application Screen Figure 94 Network > NAT > Application Table 58 Network > NAT > Application 15.5 NAT Advanced Screen Table 58 Network > NAT > Application (continued) Chapter 15 Network Address Translation (NAT) Table 59 Network > NAT > Advanced 15.5.1 Trigger Port Forwarding Example Figure 96 Trigger Port Forwarding Process: Example 15.5.2 Two Points To Remember About Trigger Ports Page CHAPTER 16 Dynamic DNS 16.4 Dynamic DNS Screen Figure 97 Network > DDNS Table 60 Network > DDNS CHAPTER 17 Static Route 17.1 Overview Figure 98 Example of Static Routing Topology 17.2 What You Can Do 17.3 IP Static Route Screen Figure 99 Network > Static Route Table 61 Network > Static Route Page CHAPTER 18 RIP Figure 100 Network > RIP 18.1 Overview 18.2 What You Can Do Table 62 Network > RIP Page Page CHAPTER 19 Firewall Figure 101 Default Firewall Action 19.1 Overview 19.2 What You Can Do 19.3 What You Need To Know 19.4 General Firewall Screen Figure 102 Security > Firewall > General 19.5 Services Screen Table 63 Security > Firewall > General Chapter 19 Firewall Figure 103 Security > Firewall > Services Table 64 Security > Firewall > Services Chapter 19 Firewall See Appendix E on page 281 for commonly used services and port numbers. NBG-419N Users Guide 165 Page CHAPTER 20 Content Filter 20.1 Overview 20.2 What You Can Do 20.3 What You Need To Know 20.4 Content Filter Screen Figure 104 Security > Content Filter > Content Filter Chapter 20 Content Filter NBG-419N Users Guide 169 Table 65 Security > Content Filter > Content Filter Page Page Page CHAPTER 21 Bandwidth Management 21.1 Overview 21.2 What You Can Do 21.3 What You Need To Know 21.4 General Screen Figure 106 Management > Bandwidth Management > General 21.5 Advanced Screen Note: The two tables shown in this screen can be configured and applied at the same time. Table 66 Management > Bandwidth Management > General Figure 107 Management > Bandwidth Management > Advanced Table 67 Management > Bandwidth Management > Advanced Chapter 21 Bandwidth Management NBG-419N Users Guide 177 Table 67 Management > Bandwidth Management > Advanced (continued) 21.5.1 Rule Configuration: Application Rule Configuration Figure 108 Bandwidth Management Rule Configuration: Application List Table 68 Bandwidth Management Rule Configuration: Application List 21.5.2 Rule Configuration: User Defined Service Rule Configuration Figure 109 Bandwidth Management Rule Configuration: User-defined Service Table 69 Bandwidth Management Rule Configuration: User-defined Service 21.6 Monitor Screen Figure 110 Management > Bandwidth Management > Monitor 21.6.1 Predefined Bandwidth Management Services Table 70 Media Bandwidth Management Setup: Services Page CHAPTER 22 Remote Management 22.1 Overview Note: The NBG-419N is managed using the Web Configurator. 22.2 What You Can Do 22.4 WWW Screen Figure 111 Management > Remote Management > WWW Table 71 Page Page CHAPTER 23 Universal Plug-and-Play (UPnP) 23.1 Overview 23.2 What You Can Do 23.3 What You Need to Know 23.4 UPnP Screen Figure 112 Management > UPnP 23.5 Technical Refereance 23.5.1 Using UPnP in Windows XP Example Figure 113 Network Connections 23.5.1.1 Auto-discover Your UPnP-enabled Network Device Table 72 Management > UPnP Page 23.5.2 Web Configurator Easy Access Page Page Page PART V Page CHAPTER 24 Maintenance Table 73 Maintenance > General CHAPTER 25 Password 25.1 Overview 25.2 What You Can Do 25.3 What You Need to Know 25.4 Password Screen Figure 123 Maintenance > Password Table 74 Maintenance > Password CHAPTER 26 Time Chapter 26 Time he following table describes the labels in this screen. Table 75 Maintenance > Time Chapter 26 Time NBG-419N Users Guide 203 Page CHAPTER 27 Firmware Upgrade Note: Do not turn off the NBG-419N while firmware upload is in progress! Figure 126 Network Temporarily Disconnected Table 76 Maintenance > Firmware Upgrade CHAPTER 28 Backup/Restore 28.1 Overview 28.2 What You Can Do 28.3 Configuration Screen Figure 127 Maintenance > Backup/Restore Table 77 Maintenance > Backup/Restore Page Page CHAPTER 29 Reset/Restart Page CHAPTER 30 Sys OP Mode Page WISP Figure 131 IP Address in Access Point Mode Table 78 Maintenance > Sys OP Mode 30.4 Sys Op Mode Screen Figure 132 Maintenance > Sys OP Mode Chapter 30 Sys OP Mode CHAPTER 31 Troubleshooting 31.1 Power, Hardware Connections, and LEDs The NBG-419N does not turn on. None of the LEDs turn on. One of the LEDs does not behave as expected. 31.2 NBG-419N Access and Login I dont know the IP address of my NBG-419N. I forgot the password. I cannot see or access the Login screen in the Web Configurator. I can see the Login screen, but I cannot log in to the NBG-419N. 31.3 Internet Access I cannot access the Internet. The Internet connection is slow or intermittent. 31.4 Resetting the NBG-419N to Its Factory Defaults You will lose all of your changes when you push the RESET button. 31.5 Wireless Router/AP Troubleshooting I cannot access the NBG-419N or ping any computer from the WLAN (wireless AP or router). Page Page NBG-419N Users Guide 225 CHAPTER 32 Product Specifications The following tables summarize the NBG-419Ns hardware and firmware features. Table 79 Hardware Features Chapter 32 Product Specifications Table 80 Firmware Features FEATURE DESCRIPTION Note: Only upload firmware for your specific model! Chapter 32 Product Specifications NBG-419N Users Guide 227 Table 80 Firmware Features FEATURE DESCRIPTION 32.1 Wall-mounting Instructions Figure 133 Wall-mounting Example Page Page PART VI Page APPENDIX A Pop-up Windows, JavaScripts and Java Permissions Internet Explorer Pop-up Blockers Disable pop-up Blockers Figure 136 Internet Options: Privacy Enable pop-up Blockers with Exceptions Page Page Figure 139 Internet Options: Security Page Page Page APPENDIX B IP Addresses and Subnetting Introduction to IP Addresses Structure Figure 143 Network Number and Host ID Subnet Masks Table 81 Subnet Mask - Identifying Network Number Network Size Table 82 Subnet Masks Table 81 Subnet Mask - Identifying Network Number Notation Table 83 Maximum Host Numbers Table 84 Alternative Subnet Mask Notation Subnetting Figure 144 Subnetting Example: Before Subnetting Figure 145 Subnetting Example: After Subnetting Example: Four Subnets Table 85 Subnet 1 Table 86 Subnet 2 Table 87 Subnet 3 Table 88 Subnet 4 Example: Eight Subnets Subnet Planning Table 88 Subnet 4 (continued) Table 89 Eight Subnets Table 90 24-bit Network Number Subnet Planning Configuring IP Addresses Table 91 16-bit Network Number Subnet Planning Private IP Addresses APPENDIX C Setting up Your Computers IP Address Windows 95/98/Me Figure 146 WIndows 95/98/Me: Network: Configuration Installing Components Configuring Figure 147 Windows 95/98/Me: TCP/IP Properties: IP Address Figure 148 Windows 95/98/Me: TCP/IP Properties: DNS Configuration Page Page Figure 152 Windows XP: Local Area Connection Properties Figure 153 Windows XP: Internet Protocol (TCP/IP) Properties Figure 154 Windows XP: Advanced TCP/IP Properties Figure 155 Windows XP: Internet Protocol (TCP/IP) Properties Page Figure 157 Macintosh OS 8/9: TCP/IP Page Linux Note: Make sure you are logged in as the root administrator. Figure 160 Red Hat 9.0: KDE: Network Configuration: Devices Using the K Desktop Environment (KDE) Page Figure 163 Red Hat 9.0: KDE: Network Configuration: Activate Using Configuration Files Figure 164 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 Figure 165 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 Figure 166 Red Hat 9.0: DNS Settings in resolv.conf Figure 167 Red Hat 9.0: Restart Ethernet Card 32.1.1 Verifying Settings Figure 168 Red Hat 9.0: Checking TCP/IP Properties APPENDIX D Wireless LANs Wireless LAN Topologies Ad-hoc Wireless LAN Configuration Figure 169 Peer-to-Peer Communication in an Ad-hoc Network ESS Figure 171 Infrastructure WLAN Channel RTS/CTS Figure 172 RTS/CTS Fragmentation Threshold Preamble Type Note: The AP and the wireless stations MUST use the same preamble mode in order to communicate. IEEE 802.11g Wireless LAN IEEE 802.1x RADIUS Table 92 IEEE 802.11g Types of RADIUS Messages Types of Authentication EAP-MD5 (Message-Digest Algorithm 5) EAP-TLS (Transport Layer Security) EAP-TTLS (Tunneled Transport Layer Service) PEAP (Protected EAP) LEAP Dynamic WEP Key Exchange WPA(2) Encryption Table 93 Comparison of EAP Authentication Types User Authentication 32.1.2 WPA(2)-PSK Application Example Figure 173 WPA(2)-PSK Authentication 32.1.3 WPA(2) with RADIUS Application Example Security Parameters Summary Table 94 Wireless Security Relational Matrix APPENDIX E Common Services Table 95 Commonly Used Services Appendix E Common Services NAME PROTOCOL PORT(S) DESCRIPTION Appendix E Common Services NAME PROTOCOL PORT(S) DESCRIPTION NBG-419N Users Guide 283 Page APPENDIX F Legal Information Copyright Disclaimer Certifications ! Notices Industry Canada Statement IMPORTANT NOTE: IC Radiation Exposure Statement: Viewing Certifications ZyXEL Limited Warranty Note Registration End-User License Agreement for "NBG-419N" Page Page Page Page Index A B C D E F G H I N O P Q R T U V W