Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications wireless n gigbit router zyxel manual Part, 177

Models: wireless n gigbit router zyxel

1 384

Download 384 pages 30.66 Kb

Page 177

PART III

Security

Firewall (179)

Content Filtering (189)

IPSec VPN (195)

177

Image 177

ZyXEL Communications wireless n gigbit router zyxel manual Part, 177

Contents

NBG-460N Page Intended Audience About This Users GuideRelated Documentation User Guide FeedbackAbout This Users Guide Syntax Conventions Document ConventionsIcons Used in Figures Telephone Switch Router ModemNBG-460N Computer Server DslamSafety Warnings Safety Warnings NBG-460N User’s Guide Contents Overview Contents Overview NBG-460N User’s Guide Table of Contents Chapter Connection Wizard Part II Network WAN 177 Part IV Management 235 Part V Maintenance and Troubleshooting 261 Part VI Appendices and Index Table of Contents NBG-460N User’s Guide Part Page Getting to Know Your NBG-460N OverviewApplications Router Mode Wireless ApplicationsLAN NBG460N3 AP + Bridge AP ModeAP + Bridge Application BridgeBridge Application Bridge Loop Two Bridges Connected to Hub Feature Router AP Mode Bridge Features Available in Router Mode vs. AP ModeWays to Manage the NBG-460N Router vs. AP vs. BridgeGood Habits for Managing the NBG-460N PowerLEDs Front Panel LEDsThis feature Off Device is in normal power mode Wireless LAN Off Wireless LAN is not ready or has failedWAN WlanGetting to Know Your NBG-460N NBG-460N User’s Guide WPS Button WPS Button NBG-460N User’s Guide Introducing the Web Configurator Web Configurator OverviewAccessing the Web Configurator Change Password Screen Resetting the NBG-460N Navigating the Web ConfiguratorProcedure to Use the Reset Button Status Screen in Router Mode Status Screen Icon KeyIcon Description Label Description DhcpScheduler When the line is disconnected Wlan is disabledIs enabled and N/A when the Wlan is disabled Memory UsageScreens Summary Navigation PanelLink TAB Function LANDdns NATVPN MgmtSummary Any IP Table Mode As a Router or a Access Point LanguageSummary Bandwidth Management Monitor Logs View LogSummary BW Mgmt Monitor Summary Dhcp TableHost Name field Summary Packet StatisticsIntervals field Summary VPN MonitorStop Click Stop to stop refreshing statistics This is the security association index numberThis is the index number of an associated wireless station Summary Wireless Station StatusAssociation Time NBG-460N’s Wlan networkIntroducing the Web Configurator NBG-460N User’s Guide Connection Wizard Wizard SetupSystem Name Connection Wizard System InformationUnderscores are accepted Domain NameUse the same Ssid in order to access the network Connection Wizard Wireless LANThis option is only available if WPS is not enabled SsidWizard Basic WEP Security Basic WEP SecurityWEP Extend WPA-PSK or WPA2-PSK SecurityAscii HEXPre-Shared Connection Wizard Internet ConfigurationKey Do thisPPPoE Connection Ethernet ConnectionConnection Description Type PptpPptp Connection ISP Parameter for Internet AccessWizard Pptp Connection ISP Parameters for Internet AccessWAN IP Address Assignment Your IP AddressUse fixed IP address Provided by your ISPIP Address and Subnet Mask Private IP Address Ranges10.0.0.0 172.16.0.0 192.168.0.0 WAN IP and DNS Server Address Assignment DNS Server Address AssignmentWAN MAC Address WAN IP Address AssignmentChoose an IP address Wizard WAN MAC Address Connection Wizard Bandwidth managementWizard Bandwidth Management Connection Wizard CompleteConnection Wizard Complete Connection Wizard NBG-460N User’s Guide How to Connect to the Internet from an AP TutorialsInternet Push Button Configuration NBG460N Example WPS Process PIN Method Channel Security SSIDExample3WPA-PSK Pre-Shared Key ThisismyWPA-PSKpre-sharedkeyTutorial Status AP Mode Configure Your NotebookConnecting a Wireless Client to a Wireless Network Link Status Using AP + Bridge Mode and WDSConfiguring Your Bridge Mode Settings Pre-Shared Key ThisismyWPA2-PSKpre-sharedkey WPA2-PSKSite-To-Site VPN Tunnel Settings Setting BOB’S NBG-460N JACK’S NBG-460NSite-To-Site VPN Tunnel Tutorial Tutorial Property Configuring Bob’s NBG-460N VPN SettingsTutorial Authentication Method Configuring Jack’s NBG-460N VPN SettingsTutorial Property Tutorial Authentication Method Pinging Jack’s Local IP Address Checking the VPN ConnectionBandwidth Management for your Network Configuring Bandwidth Management by ApplicationConfiguring Bandwidth Allocation by IP or IP Range Configuring Bandwidth Management by Custom ApplicationFields Services Real Audio Rtsp VDO Live FTP Refer to Appedix F on the Bandwidth Mgnt Setting your NBG-460N to AP Mode AP ModeStatus Screen Status AP ModeSystem Setting Configuration Mode Display Network Wireless LAN WPS screenThis shows the LAN port’s Dhcp role Client or None SchedulesOr connected Menu AP ModeSetting Logs View Log Maintenance System GeneralReset the factory defaults to your NBG-460N Mask or to get the LAN IP address from a Dhcp serverConfiguring Your Settings LAN SettingsSys OP General Table below describes the labels in the screen Wlan and Maintenance SettingsLogging in to the Web Configurator in AP Mode Network Page Example of a Wireless Network Wireless LANWireless Security Overview What You Can DoWhat You Should Know Ssid No Authentication Radius Server Types of Encryption for Each Type of Authentication100 Weakest Stronges tGeneral Wireless LAN Screen Printable 7-bit Ascii characters for the wireless LAN101 102 No SecurityWPA-PSK and WPA2-PSK are available in this field Select Static WEP , WPA-PSK , WPA , WPA2-PSK or WPA2 to add103 WEP EncryptionSelect 64-bit WEP or 128-bit WEP to enable data encryption 104WEP keys and displays them in the Key fields below AP or peer computer 105Correct WEP key HexSecurity Mode field Server, the reauthentication timer on the Radius server has106 Priority107 4 WPA/WPA2Server, the reauthentication timer on the Radius server 108Has priority 109 MAC Filter ScreenMAC 110Quality of Service QoS Screen Wireless LAN Advanced Screen111 RTS/CTSOn page 123 for more information 112WMM QoS Policy You want to apply WMM QoSApplication Priority Configuration Configuration screen113 114 MailUser-Defined 115 WPS ScreenScheduling Screen WPS Station Screen116 Push ButtonWhole day 117Following times fields Day118 WDS ScreenSecurity Mode Static WEP Between the NBG-460N and any wireless clients119 ASCII/HEX 120Technical Reference Security Mode WPA2-PSKRoaming 121Roaming Example 122123 Quality of ServiceIPod Touch Web Configurator WiFi Protected Setup124 WMM QoS Priorities125 Login Screen126 System StatusWAN connection is not working 127MBM 128WPS in Progress Port Forwarding129 130 Rule is turned onTurn the rule OFF Accessing the iPod Touch Web Configurator Accessing the iPod Touch Web Configurator131 132 LAN and WAN 133Configuring Your Internet Connection What You Need To Know134 Multicast 135WAN MAC Address 136 Iptv STB PortYou have one STB 137You have two STBs 192.168.1.20NetBIOS over TCP/IP Auto-Bridge138 Internet Connection Ethernet Encapsulation139 Address 140Defined changes to None after you click Apply WAN MACPPPoE Encapsulation Setting or upload a different ROM file141 Select Clone the computers MAC address IP Address and enter142 All of the LANs computers will have accessDNS Servers First DNS 143Computer’s Different ROM file144 Pptp EncapsulationPptp connection 145Advanced WAN Screen 146Select Clone the computers MAC address IP Address Select Igmp V-1,IGMP V-2 or None 147To be in Router Mode for the Iptv STB port to work When the NBG-460N gets a WAN IP address that is notIgmp 148149 LANLAN IP Screen IP Pool SetupLAN TCP/IP 150LAN IP Alias 151LAN TCP/IP Advanced LAN Screen Any IP Setup152 IP address that you assign. Unless you are implementing153 LANs, WANs and the ZyXEL Device154 Any IP155 156 157 DhcpDhcp General Screen Dhcp Advanced Screen158 Select the Enable Dhcp Server check box. When you clear Must have their DNS server addresses manually configured159 Client List Screen NBG-460Ns system DNS server configured in the WAN Internet160 Select DNS Relay to have the NBG-460N act as a DNS proxy.This is the index number of the host computer 161Host names. After you click Apply, the MAC address and IP Them162 163 Network Address Translation NATSelect the check box to enable NAT Enable NetworkDefault Server Setup General NAT Screen165 NAT Application Screen166 Wake On LAN is enabled 167Fields under Add Application Rule Configuring Servers Behind Port Forwarding Example Game List Example168 169 NAT Advanced ScreenUsers may not be able to access the Internet 170Can establish through the NBG-460N Trigger Port Forwarding Example LAN that requested the service171 Traffic to a server on the WAN172 Two Points To Remember About Trigger PortsDynamic DNS DynDNS Wildcard173 Enable Dynamic Select this check box to use dynamic DNS Dynamic DNS Screen174 WAN IP address 175176 177 Part178 179 FirewallAbout the NBG-460N Firewall Triangle Routes180 181 Triangle Routes and IP AliasServices Screen General Firewall Screen182 Icmp 183Add Firewall Rule screen 184185 Add Firewall Rule ScreenPool Single IP is selected as the Address TypeClick Clear All to empty the Blocked Services 186Address Type 187 188 Content Filtering Content Filtering Profiles189 190 Restrict Web FeaturesKeyword Blocking URL Checking Days and Times191 Filter ScreenCookies 192Web Proxy AllowedSchedule Screen Which content filtering will be enforced193 Not affected194 Customizing Keyword Blocking URL CheckingDomain Name or IP Address URL Checking Full Path URL Checking195 IPSec VPN196 IKE SA IKE Phase 1 Overview197 IPSec SA IKE Phase 2 OverviewIP Addresses of the NBG-460N and Remote IPSec Router Local Network and Remote Network198 General Screen199 VPN Rule Setup Basic200 Feature to workEnabled 201Secure Gateway Address field set to 202 Your computer in the Local Content field. The NBG-460N 203With dynamic WAN IP addresses Address field refer to the Secure Gateway Address field 204205 VPN Rule Setup Advanced206 Security VPN General Rule Setup IKE Advanced207 Select No to disable it208 209 210 211 212 VPN Rule Setup Manual 213Each IPSec SA. It is more secure but takes more time 214 Security VPN General Rule Setup Manual215 216 217 SecureSPI SA Monitor Screen 218Trailing spaces are truncated VPN and Remote Management IKE SA Proposal219 220 Diffie-Hellman DH Key ExchangeVPN Example Matching ID Type and Content Authentication221 Remote Ipsec RouterNegotiation Mode VPN Example Mismatching ID Type and Content222 223 15.6.6 VPN, NAT, and NAT TraversalIPSec Protocol Encapsulation224 Additional IPSec VPN Topics IPSec SA Proposal and Perfect Forward Secrecy225 SA Life TimeEncryption and Authentication Algorithms 226Private DNS Server Private DNS Server Example 227228 229 Management230 Static Route 231Lanwan 232 IP Static Route Screen233 Static Route Setup Screen234 235 Bandwidth ManagementFTP Chat, Email236 General Configuration Screen237 Management check boxMbps 238 Advanced ConfigurationConnected to the WAN port has an upstream speed of 10 Mbps Wlan BandwidthLow 239240 Rule Configuration with the Pre-defined ServiceWlan to WAN To Wlan241 Rule Configuration User Defined Service Rule Configuration242 Monitor ScreenMedia Bandwidth Management Setup Services Predefined Bandwidth Management ServicesService Description Technical ReferencesBandwidth Management Priority with Default Classes Default Bandwidth Management Classes and Priorities244 Class Type PriorityBandwidth Management Priorities 245Bandwidth Management Priorities 246 247 Remote ManagementRemote Management Limitations System TimeoutRemote Management and NAT 248WWW Screen Specify to access the NBG-460N using this service249 Remote managementTelnet Screen FTP Screen250 251 DNS ScreenYou specify to send DNS queries to the NBG-460N 252Universal Plug-and-Play UPnP NAT Traversal253 254 UPnP Screen255 Using UPnP in Windows XP ExampleNetwork Connections 256257 Internet Connection Properties Advanced Settings258 Web Configurator Easy AccessNetwork Connections My Network Places 259Network Connections My Network Places Properties Example 260261 Maintenance Troubleshooting262 System System General Screen263 264 265 Time Setting ScreenSelect User Defined Time Server Address and enter the IP 266267 268 269 LogsView Log Screen Log categories that you selected in the Log Settings270 DisplayLog Settings 271Time and date Mail Log Settings Mail Server 272Messages will not be sent via e-mail 273 Sent via e-mailSmtp Log Descriptions System Maintenance Logs274 LOG Message Description275 System Error LogsTCP Reset Logs Access Control Logs276 Firewall Attack Alerts screenPacket Filter Logs 277Icmp Logs 278Content Filtering Logs 279UPnP packets can pass through the firewall Attack Logs 280IPSec Logs 281IKE Logs 282283 284 285 PKI Logs802.1X Logs 286 ACL Setting NotesPacket Direction Description Type Code Description287 Icmp NotesSyslog Logs 288 RFC-2408 Isakmp Payload TypesLOG Display Payload Type Tools Firmware Upload Screen289 290 Maintenance Tools FirmwareNetwork Temporarily Disconnected Upload Error MessageBackup Configuration Configuration ScreenRestore Configuration Maintenance Restore Configuration293 Configuration Restore SuccessfulBack to Factory Defaults Restart Screen294 Wake On LAN Indicate either Ready or MAC Address errorGreen 295296 Maintenance Tools Green297 Configuration ModeAdvanced Configuration Options 298Category Link TAB 299 Sys Op ModeRouter 300301 Maintenance Sys OP Mode GeneralFirewall or bandwidth management 302Language Language Screen303 304 Troubleshooting Power, Hardware Connections, and LEDs305 306 NBG-460N Access and LoginAdvanced Suggestions 307308 Internet AccessInternet connection is slow or intermittent 309310 Resetting the NBG-460N to Its Factory Defaults311 Wireless Router/AP Troubleshooting312 Advanced FeaturesHardware Features Product Specifications and Wall- Mounting Instructions313 PWR, LAN1-4, WAN, WLAN, WPSSuch as microwave ovens, wireless phones Firmware FeaturesBluetooth enabled devices, and other wireless LANs 314315 Feature Specification Feature Specifications316 Standards SupportedWall-mounting Instructions 317Protocol MBM Media Bandwidth Management Masonry Plug and M4 Tap Screw 318319 Appendices Index320 Disable pop-up Blockers Internet Explorer Pop-up Blockers321 322 Enable pop-up Blockers with Exceptions323 Select Settings…to open the Pop-up Blocker Settings screen324 JavaScriptsInternet Options Security 325326 Java PermissionsJava Sun 327Java Sun 328Introduction to IP Addresses Structure329 330 Subnet MasksSubnet Mask Identifying Network Number 1ST 2ND 3RD 4TH OctetNetwork Size 331Subnet Masks Binary 1ST 2ND 3RD 4TH Decimal Octet332 NotationMaximum Host Numbers Alternative Subnet Mask Notation333 Subnetting334 Example Four SubnetsIP/SUBNET Mask Network Number Last Octet BIT Value 335Example Eight Subnets Subnet Planning336 337 Configuring IP Addresses16-bit Network Number Subnet Planning NO. Borrowed Subnet Mask NO. Hosts PER Host Bits SubnetsPrivate IP Addresses 338339 Setting up Your Computer’s IP AddressInstalling Components Windows 95/98/Me340 341 Configuring342 Verifying Settings343 Windows 2000/NT/XPWindows XP Control Panel 344Windows XP Local Area Connection Properties 345Windows XP Internet Protocol TCP/IP Properties 346Windows XP Advanced TCP/IP Properties 347348 349 Macintosh OS 8/9Macintosh OS 8/9 TCP/IP 350351 Macintosh OSUsing the K Desktop Environment KDE Linux352 Red Hat 9.0 KDE Ethernet Device General 353354 Using Configuration FilesRed Hat 9.0 DNS Settings in resolv.conf Red Hat 9.0 Static IP Address Setting in ifconfig-eth0356 Verifying SettingsWireless LAN Topologies Ad-hoc Wireless LAN Configuration357 358 Basic Service Set359 ChannelRTS/CTS 360Fragmentation Threshold Ieee 802.11g Wireless LANPreamble Type 361362 IeeeIeee 802.11g Data Rate Modulation Mbps363 Types of AuthenticationTypes of Radius Messages EAP-MD5 Message-Digest Algorithm364 EAP-TTLS Tunneled Transport Layer ServiceEAP-TLS Transport Layer Security Peap Protected EAPWPA2 Comparison of EAP Authentication Types365 Encryption366 User Authentication27.0.2 WPA2-PSK Application Example 27.0.3 WPA2 with Radius Application Example367 Authentication Encryptio Enter METHOD/ KEY Wireless Security Relational MatrixSecurity Parameters Summary 368369 ServicesExamples of Services 370Name Protocol Ports Description 371 372 Certifications Copyright373 DisclaimerFCC Radiation Exposure Statement 374ZyXEL Limited Warranty 375Viewing Certifications Registration 376377 IndexClasses and priorities CTS Clear to Send378 EssidEncapsulating Security Payload. See ESP IKE SA 379Ethernet PPPoE. see also PPP over Ethernet Language Link type 40380 MACMbssid QoS QoS priorities Quality of Service QoS 381Radius 382 Wireless security 98 overviewXbox Live ZyNOS 39 383384