NBG-460N
Page
About This Users Guide
Intended Audience
Related Documentation
User Guide Feedback
About This Users Guide
Document Conventions
Syntax Conventions
Telephone Switch Router Modem
Icons Used in Figures
NBG-460N Computer Server
Dslam
Safety Warnings
Safety Warnings NBG-460N User’s Guide
Contents Overview
Contents Overview NBG-460N User’s Guide
Table of Contents
Chapter Connection Wizard
Part II Network
WAN
177
Part IV Management
235
Part V Maintenance and Troubleshooting 261
Part VI Appendices and Index
Table of Contents NBG-460N User’s Guide
Part
Page
Getting to Know Your NBG-460N
Overview
Applications
Wireless Applications
Router Mode
LAN
NBG460N
AP Mode
3 AP + Bridge
Bridge
AP + Bridge Application
Bridge Application
Bridge Loop Two Bridges Connected to Hub
Features Available in Router Mode vs. AP Mode
Feature Router AP Mode Bridge
Ways to Manage the NBG-460N
Router vs. AP vs. Bridge
Power
Good Habits for Managing the NBG-460N
LEDs
Front Panel LEDs
Wireless LAN Off Wireless LAN is not ready or has failed
This feature Off Device is in normal power mode
WAN
Wlan
Getting to Know Your NBG-460N NBG-460N User’s Guide
WPS Button
WPS Button NBG-460N User’s Guide
Introducing the Web Configurator
Web Configurator Overview
Accessing the Web Configurator
Change Password Screen
Resetting the NBG-460N
Navigating the Web Configurator
Procedure to Use the Reset Button
Status Screen in Router Mode
Status Screen Icon Key
Icon Description
Label Description
Dhcp
Scheduler
Wlan is disabled
When the line is disconnected
Is enabled and N/A when the Wlan is disabled
Memory Usage
Navigation Panel
Screens Summary
Link TAB Function
LAN
NAT
Ddns
VPN
Mgmt
Mode As a Router or a Access Point Language
Summary Any IP Table
Summary Bandwidth Management Monitor
Logs View Log
Summary Dhcp Table
Summary BW Mgmt Monitor
Summary Packet Statistics
Host Name field
Summary VPN Monitor
Intervals field
Stop Click Stop to stop refreshing statistics
This is the security association index number
Summary Wireless Station Status
This is the index number of an associated wireless station
Association Time
NBG-460N’s Wlan network
Introducing the Web Configurator NBG-460N User’s Guide
Wizard Setup
Connection Wizard
Connection Wizard System Information
System Name
Domain Name
Underscores are accepted
Connection Wizard Wireless LAN
Use the same Ssid in order to access the network
This option is only available if WPS is not enabled
Ssid
Basic WEP Security
Wizard Basic WEP Security
Extend WPA-PSK or WPA2-PSK Security
WEP
Ascii
HEX
Connection Wizard Internet Configuration
Pre-Shared
Key
Do this
Ethernet Connection
PPPoE Connection
Connection Description Type
Pptp
ISP Parameter for Internet Access
Pptp Connection
ISP Parameters for Internet Access
Wizard Pptp Connection
Your IP Address
WAN IP Address Assignment
Use fixed IP address
Provided by your ISP
IP Address and Subnet Mask
Private IP Address Ranges
10.0.0.0 172.16.0.0 192.168.0.0
DNS Server Address Assignment
WAN IP and DNS Server Address Assignment
WAN MAC Address
WAN IP Address Assignment
Choose an IP address
Connection Wizard Bandwidth management
Wizard WAN MAC Address
Connection Wizard Complete
Wizard Bandwidth Management
Connection Wizard Complete
Connection Wizard NBG-460N User’s Guide
How to Connect to the Internet from an AP
Tutorials
Internet
Push Button Configuration
NBG460N
Example WPS Process PIN Method
SSIDExample3
Channel Security
WPA-PSK
Pre-Shared Key ThisismyWPA-PSKpre-sharedkey
Configure Your Notebook
Tutorial Status AP Mode
Connecting a Wireless Client to a Wireless Network
Using AP + Bridge Mode and WDS
Link Status
Configuring Your Bridge Mode Settings
WPA2-PSK
Pre-Shared Key ThisismyWPA2-PSKpre-sharedkey
Site-To-Site VPN Tunnel Settings
Setting BOB’S NBG-460N JACK’S NBG-460N
Site-To-Site VPN Tunnel Tutorial
Configuring Bob’s NBG-460N VPN Settings
Tutorial Property
Configuring Jack’s NBG-460N VPN Settings
Tutorial Authentication Method
Tutorial Property
Tutorial Authentication Method
Checking the VPN Connection
Pinging Jack’s Local IP Address
Configuring Bandwidth Management by Application
Bandwidth Management for your Network
Configuring Bandwidth Management by Custom Application
Configuring Bandwidth Allocation by IP or IP Range
Fields Services Real Audio Rtsp VDO Live FTP
Refer to Appedix F on the Bandwidth Mgnt
AP Mode
Setting your NBG-460N to AP Mode
Status AP Mode
Status Screen
Display Network Wireless LAN WPS screen
System Setting Configuration Mode
This shows the LAN port’s Dhcp role Client or None
Schedules
Menu AP Mode
Or connected
Maintenance System General
Setting Logs View Log
Reset the factory defaults to your NBG-460N
Mask or to get the LAN IP address from a Dhcp server
Configuring Your Settings
LAN Settings
Sys OP General
Wlan and Maintenance Settings
Table below describes the labels in the screen
Logging in to the Web Configurator in AP Mode
Network
Page
Wireless LAN
Example of a Wireless Network
Wireless Security Overview
What You Can Do
What You Should Know
Ssid
Types of Encryption for Each Type of Authentication
No Authentication Radius Server
100
Weakest Stronges t
General Wireless LAN Screen
Printable 7-bit Ascii characters for the wireless LAN
101
No Security
102
WPA-PSK and WPA2-PSK are available in this field
Select Static WEP , WPA-PSK , WPA , WPA2-PSK or WPA2 to add
WEP Encryption
103
Select 64-bit WEP or 128-bit WEP to enable data encryption
104
WEP keys and displays them in the Key fields below
105
AP or peer computer
Correct WEP key
Hex
Server, the reauthentication timer on the Radius server has
Security Mode field
106
Priority
4 WPA/WPA2
107
Server, the reauthentication timer on the Radius server
108
Has priority
MAC Filter Screen
109
110
MAC
Wireless LAN Advanced Screen
Quality of Service QoS Screen
111
RTS/CTS
112
On page 123 for more information
WMM QoS Policy
You want to apply WMM QoS
Application Priority Configuration
Configuration screen
113
114
Mail
User-Defined
WPS Screen
115
WPS Station Screen
Scheduling Screen
116
Push Button
117
Whole day
Following times fields
Day
WDS Screen
118
Security Mode Static WEP
Between the NBG-460N and any wireless clients
119
120
ASCII/HEX
Security Mode WPA2-PSK
Technical Reference
Roaming
121
122
Roaming Example
Quality of Service
123
WiFi Protected Setup
IPod Touch Web Configurator
124
WMM QoS Priorities
Login Screen
125
System Status
126
127
WAN connection is not working
128
MBM
WPS in Progress
Port Forwarding
129
130
Rule is turned on
Turn the rule OFF
Accessing the iPod Touch Web Configurator
Accessing the iPod Touch Web Configurator
131
132
133
LAN and WAN
Configuring Your Internet Connection
What You Need To Know
134
Multicast
135
WAN MAC Address
Iptv STB Port
136
137
You have one STB
You have two STBs
192.168.1.20
NetBIOS over TCP/IP
Auto-Bridge
138
Internet Connection
Ethernet Encapsulation
139
140
Address
Defined changes to None after you click Apply
WAN MAC
Setting or upload a different ROM file
PPPoE Encapsulation
141
Select Clone the computers MAC address IP Address and enter
All of the LANs computers will have access
142
143
DNS Servers First DNS
Computer’s
Different ROM file
Pptp Encapsulation
144
145
Pptp connection
Advanced WAN Screen
146
Select Clone the computers MAC address IP Address
147
Select Igmp V-1,IGMP V-2 or None
When the NBG-460N gets a WAN IP address that is not
To be in Router Mode for the Iptv STB port to work
Igmp
148
LAN
149
IP Pool Setup
LAN IP Screen
LAN TCP/IP
150
LAN IP Alias
151
LAN TCP/IP
Any IP Setup
Advanced LAN Screen
152
IP address that you assign. Unless you are implementing
LANs, WANs and the ZyXEL Device
153
Any IP
154
155
156
Dhcp
157
Dhcp General Screen
Dhcp Advanced Screen
158
Select the Enable Dhcp Server check box. When you clear
Must have their DNS server addresses manually configured
159
NBG-460Ns system DNS server configured in the WAN Internet
Client List Screen
160
Select DNS Relay to have the NBG-460N act as a DNS proxy.
161
This is the index number of the host computer
Host names. After you click Apply, the MAC address and IP
Them
162
Network Address Translation NAT
163
Enable Network
Select the check box to enable NAT
Default Server Setup
General NAT Screen
NAT Application Screen
165
166
Wake On LAN is enabled
167
Fields under Add Application Rule
Configuring Servers Behind Port Forwarding Example
Game List Example
168
NAT Advanced Screen
169
Users may not be able to access the Internet
170
Can establish through the NBG-460N
LAN that requested the service
Trigger Port Forwarding Example
171
Traffic to a server on the WAN
Two Points To Remember About Trigger Ports
172
Dynamic DNS
DynDNS Wildcard
173
Enable Dynamic Select this check box to use dynamic DNS
Dynamic DNS Screen
174
175
WAN IP address
176
Part
177
178
Firewall
179
About the NBG-460N Firewall
Triangle Routes
180
Triangle Routes and IP Alias
181
Services Screen
General Firewall Screen
182
183
Icmp
184
Add Firewall Rule screen
Add Firewall Rule Screen
185
Pool
Single IP is selected as the Address Type
Click Clear All to empty the Blocked Services
186
Address Type
187
188
Content Filtering
Content Filtering Profiles
189
Restrict Web Features
190
Keyword Blocking URL Checking
Days and Times
Filter Screen
191
192
Cookies
Web Proxy
Allowed
Which content filtering will be enforced
Schedule Screen
193
Not affected
Customizing Keyword Blocking URL Checking
194
Domain Name or IP Address URL Checking
Full Path URL Checking
IPSec VPN
195
IKE SA IKE Phase 1 Overview
196
IPSec SA IKE Phase 2 Overview
197
IP Addresses of the NBG-460N and Remote IPSec Router
Local Network and Remote Network
General Screen
198
VPN Rule Setup Basic
199
Feature to work
200
Enabled
201
Secure Gateway Address field set to
202
Your computer in the Local Content field. The NBG-460N
203
With dynamic WAN IP addresses
204
Address field refer to the Secure Gateway Address field
VPN Rule Setup Advanced
205
Security VPN General Rule Setup IKE Advanced
206
Select No to disable it
207
208
209
210
211
212
VPN Rule Setup Manual
213
Each IPSec SA. It is more secure but takes more time
Security VPN General Rule Setup Manual
214
215
216
217
Secure
SPI
SA Monitor Screen
218
Trailing spaces are truncated
VPN and Remote Management
IKE SA Proposal
219
Diffie-Hellman DH Key Exchange
220
Authentication
VPN Example Matching ID Type and Content
221
Remote Ipsec Router
Negotiation Mode
VPN Example Mismatching ID Type and Content
222
15.6.6 VPN, NAT, and NAT Traversal
223
IPSec Protocol
Encapsulation
224
IPSec SA Proposal and Perfect Forward Secrecy
Additional IPSec VPN Topics
225
SA Life Time
Encryption and Authentication Algorithms
226
Private DNS Server
227
Private DNS Server Example
228
Management
229
230
Static Route
231
Lanwan
IP Static Route Screen
232
Static Route Setup Screen
233
234
Bandwidth Management
235
FTP
Chat, Email
General Configuration Screen
236
237
Management check box
Mbps
Advanced Configuration
238
Connected to the WAN port has an upstream speed of 10 Mbps
Wlan Bandwidth
239
Low
Rule Configuration with the Pre-defined Service
240
Wlan to WAN
To Wlan
Rule Configuration User Defined Service Rule Configuration
241
Monitor Screen
242
Predefined Bandwidth Management Services
Media Bandwidth Management Setup Services
Service Description
Technical References
Default Bandwidth Management Classes and Priorities
Bandwidth Management Priority with Default Classes
244
Class Type Priority
Bandwidth Management Priorities
245
Bandwidth Management Priorities
246
Remote Management
247
System Timeout
Remote Management Limitations
Remote Management and NAT
248
Specify to access the NBG-460N using this service
WWW Screen
249
Remote management
Telnet Screen
FTP Screen
250
DNS Screen
251
252
You specify to send DNS queries to the NBG-460N
Universal Plug-and-Play UPnP
NAT Traversal
253
UPnP Screen
254
Using UPnP in Windows XP Example
255
256
Network Connections
Internet Connection Properties Advanced Settings
257
Web Configurator Easy Access
258
259
Network Connections My Network Places
260
Network Connections My Network Places Properties Example
Maintenance Troubleshooting
261
262
System
System General Screen
263
264
Time Setting Screen
265
266
Select User Defined Time Server Address and enter the IP
267
268
Logs
269
Log categories that you selected in the Log Settings
View Log Screen
270
Display
Log Settings
271
Time and date
Mail Log Settings Mail Server
272
Messages will not be sent via e-mail
273
Sent via e-mail
Smtp
System Maintenance Logs
Log Descriptions
274
LOG Message Description
System Error Logs
275
Access Control Logs
TCP Reset Logs
276
Firewall Attack Alerts screen
277
Packet Filter Logs
278
Icmp Logs
Content Filtering Logs
279
UPnP packets can pass through the firewall
280
Attack Logs
281
IPSec Logs
282
IKE Logs
283
284
285
PKI Logs
802.1X Logs
ACL Setting Notes
286
Packet Direction Description
Type Code Description
287
Icmp Notes
Syslog Logs
288
RFC-2408 Isakmp Payload Types
LOG Display Payload Type
Tools
Firmware Upload Screen
289
Maintenance Tools Firmware
290
Upload Error Message
Network Temporarily Disconnected
Configuration Screen
Backup Configuration
Restore Configuration
Maintenance Restore Configuration
Configuration Restore Successful
293
Back to Factory Defaults
Restart Screen
294
Indicate either Ready or MAC Address error
Wake On LAN
Green
295
Maintenance Tools Green
296
Configuration Mode
297
Advanced Configuration Options
298
Category Link TAB
Sys Op Mode
299
300
Router
Maintenance Sys OP Mode General
301
302
Firewall or bandwidth management
Language
Language Screen
303
304
Troubleshooting
Power, Hardware Connections, and LEDs
305
NBG-460N Access and Login
306
307
Advanced Suggestions
Internet Access
308
309
Internet connection is slow or intermittent
Resetting the NBG-460N to Its Factory Defaults
310
Wireless Router/AP Troubleshooting
311
Advanced Features
312
Product Specifications and Wall- Mounting Instructions
Hardware Features
313
PWR, LAN1-4, WAN, WLAN, WPS
Firmware Features
Such as microwave ovens, wireless phones
Bluetooth enabled devices, and other wireless LANs
314
315
Feature Specifications
Feature Specification
316
Standards Supported
Wall-mounting Instructions
317
Protocol MBM Media Bandwidth Management
318
Masonry Plug and M4 Tap Screw
Appendices Index
319
320
Disable pop-up Blockers
Internet Explorer Pop-up Blockers
321
Enable pop-up Blockers with Exceptions
322
Select Settings…to open the Pop-up Blocker Settings screen
323
JavaScripts
324
325
Internet Options Security
Java Permissions
326
327
Java Sun
328
Java Sun
Introduction to IP Addresses
Structure
329
Subnet Masks
330
Subnet Mask Identifying Network Number
1ST 2ND 3RD 4TH Octet
331
Network Size
Subnet Masks
Binary 1ST 2ND 3RD 4TH Decimal Octet
Notation
332
Maximum Host Numbers
Alternative Subnet Mask Notation
Subnetting
333
Example Four Subnets
334
335
IP/SUBNET Mask Network Number Last Octet BIT Value
Example Eight Subnets
Subnet Planning
336
Configuring IP Addresses
337
16-bit Network Number Subnet Planning
NO. Borrowed Subnet Mask NO. Hosts PER Host Bits Subnets
338
Private IP Addresses
Setting up Your Computer’s IP Address
339
Installing Components
Windows 95/98/Me
340
Configuring
341
Verifying Settings
342
Windows 2000/NT/XP
343
344
Windows XP Control Panel
345
Windows XP Local Area Connection Properties
346
Windows XP Internet Protocol TCP/IP Properties
347
Windows XP Advanced TCP/IP Properties
348
Macintosh OS 8/9
349
350
Macintosh OS 8/9 TCP/IP
Macintosh OS
351
Using the K Desktop Environment KDE
Linux
352
353
Red Hat 9.0 KDE Ethernet Device General
Using Configuration Files
354
Red Hat 9.0 Static IP Address Setting in ifconfig-eth0
Red Hat 9.0 DNS Settings in resolv.conf
Verifying Settings
356
Wireless LAN Topologies
Ad-hoc Wireless LAN Configuration
357
Basic Service Set
358
Channel
359
360
RTS/CTS
Ieee 802.11g Wireless LAN
Fragmentation Threshold
Preamble Type
361
Ieee
362
Ieee 802.11g
Data Rate Modulation Mbps
Types of Authentication
363
Types of Radius Messages
EAP-MD5 Message-Digest Algorithm
EAP-TTLS Tunneled Transport Layer Service
364
EAP-TLS Transport Layer Security
Peap Protected EAP
Comparison of EAP Authentication Types
WPA2
365
Encryption
User Authentication
366
27.0.2 WPA2-PSK Application Example
27.0.3 WPA2 with Radius Application Example
367
Wireless Security Relational Matrix
Authentication Encryptio Enter METHOD/ KEY
Security Parameters Summary
368
Services
369
Examples of Services
370
Name Protocol Ports Description
371
372
Copyright
Certifications
373
Disclaimer
374
FCC Radiation Exposure Statement
ZyXEL Limited Warranty
375
Viewing Certifications
376
Registration
Index
377
Classes and priorities
CTS Clear to Send
378
Essid
Encapsulating Security Payload. See ESP
379
IKE SA
Ethernet PPPoE. see also PPP over Ethernet
Language Link type 40
380
MAC
Mbssid
QoS QoS priorities Quality of Service QoS
381
Radius
Wireless security 98 overview
382
383
Xbox Live ZyNOS 39
384