ZyXEL Communications NBG410W3G Betriebsanweisung

www.zyxel.comNBG410W3G Series3G Wireless RouterUser’s GuideVersion 4.0308/2008Edition 1

Contents OverviewNBG410W3G Series User’s Guide10

100

NBG410W3G Series User’s Guide101CHAPTER 5 LAN ScreensThis chapter describes how to configure LAN settings.5.1 LAN, WAN and the ZyXEL DeviceA network

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide102feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this block of

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide1035.3.1 IP Pool SetupThe ZyXEL Device is pre-configured with a pool of IP addresses for the compu

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide104The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide105The following table describes the labels in this screen.Table 12 NETWORK > LAN LABEL DESCRI

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide1065.8 LAN Static DHCPThis table allows you to assign IP addresses on the LAN to specific individua

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide107Figure 66 NETWORK > LAN > Static DHCPThe following table describes the labels in this sc

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide108The ZyXEL Device supports three logical LAN interfaces via its single physical LAN Ethernet inter

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide109The following table describes the labels in this screen.5.10 LAN Port RolesUse the Port Roles s

Table of ContentsNBG410W3G Series User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 5 LAN ScreensNBG410W3G Series User’s Guide110" Your changes are also reflected in the DMZ Port Roles screen.Figure 69 NETWORK > LAN

NBG410W3G Series User’s Guide111CHAPTER 6 WAN ScreensThis chapter describes how to configure WAN settings. " WAN 2 refers to the 3G card on the

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1126.3 TCP/IP Priority (Metric)The metric represents the "cost of transmission". A router

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide113Figure 71 NETWORK > WAN General

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide114The following table describes the labels in this screen.Table 16 NETWORK > WAN GeneralLABEL

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1156.5 WAN IP Address Assignment Every computer on the Internet must have a unique IP address. If

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide116You can obtain your IP address from the IANA, from an ISP or have it assigned by a private networ

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1176.8 WAN 1 Use this screen to change your ZyXEL Device's WAN 1 ISP, IP and MAC settings. Cl

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide118The following table describes the labels in this screen.Table 18 NETWORK > WAN > WAN 1 (E

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide119RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information

Table of ContentsNBG410W3G Series User’s Guide122.4 Navigating the ZyXEL Device Web Configurator ...

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1206.8.2 PPPoE EncapsulationThe ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet)

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide121Figure 73 NETWORK > WAN > WAN 1 (PPPoE Encapsulation) The following table describes the

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide122Authentication TypeThe ZyXEL Device supports PAP (Password Authentication Protocol) and CHAP (Cha

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1236.8.3 PPTP EncapsulationPoint-to-Point Tunneling Protocol (PPTP) is a network protocol that ena

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide124Figure 74 NETWORK > WAN > WAN 1 (PPTP Encapsulation) The following table describes the la

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide125Authentication TypeThe ZyXEL Device supports PAP (Password Authentication Protocol) and CHAP (Ch

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1266.9 3G (WAN 2) 3G (Third Generation) is a digital, packet-switched wireless technology. Bandwidt

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide127" The actual data rate you obtain varies depending on your 3G card, the signal strength of

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide128To change your ZyXEL Device's 3G WAN settings, click NETWORK > WA N > 3G (WAN 2) or WI

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide129Figure 75 NETWORK > WAN > 3G (WAN 2)

Table of ContentsNBG410W3G Series User’s Guide135.3.1 IP Pool Setup ...

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide130The following table describes the labels in this screen.Table 22 NETWORK > WAN > 3G (WAN

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide131Authentication TypeThe ZyXEL Device supports PAP (Password Authentication Protocol) and CHAP (Ch

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide132Enable Multicast Select this check box to turn on IGMP (Internet Group Multicast Protocol). IGMP

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1336.10 Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL

Chapter 6 WAN ScreensNBG410W3G Series User’s Guide1346.11 Configuring Traffic RedirectTo change your ZyXEL Device’s traffic redirect settings, click

NBG410W3G Series User’s Guide135CHAPTER 7 DMZ ScreensThis chapter describes how to configure the ZyXEL Device’s DMZ.7.1 DMZ The DeMilitarized Zone (

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide136Figure 79 NETWORK > DMZ The following table describes the labels in this screen. Table 24

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide137Multicast Select IGMP V-1 or IGMP V-2 or None. IGMP (Internet Group Multicast Protocol) is a net

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide1387.3 DMZ Static DHCP This table allows you to assign IP addresses on the DMZ to specific individ

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide1397.4 DMZ IP Alias IP alias allows you to partition a physical network into different logical ne

Table of ContentsNBG410W3G Series User’s Guide148.2 Wireless Security Overview ...

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide140Figure 81 NETWORK > DMZ > IP Alias The following table describes the labels in this scree

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide1417.5 DMZ Public IP Address ExampleThe following figure shows a simple network setup with public

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide142Figure 83 DMZ Private and Public Address Example7.7 DMZ Port Roles Use the Port Roles screen

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide143Figure 84 NETWORK > DMZ > Port Roles The following table describes the labels in this sc

Chapter 7 DMZ ScreensNBG410W3G Series User’s Guide144

145PART IIIWirelessWi-Fi (147)

146

NBG410W3G Series User’s Guide147CHAPTER 8 Wi-FiThis chapter discusses how to configure wireless LAN on the ZyXEL Device.8.1 Wi-Fi IntroductionYour Z

Chapter 8 Wi-FiNBG410W3G Series User’s Guide148Every wireless network must follow these basic guidelines.• Every wireless client in the same wireless

Chapter 8 Wi-FiNBG410W3G Series User’s Guide149You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to

Table of ContentsNBG410W3G Series User’s Guide1510.1 Authentication Server Overview ...

Chapter 8 Wi-FiNBG410W3G Series User’s Guide150The types of encryption you can choose depend on the type of user authentication. (See Section 8.2.3 on

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1518.2.5 Additional Installation Requirements for Using 802.1x• A computer with an IEEE 802.11b/g wirele

Chapter 8 Wi-FiNBG410W3G Series User’s Guide152The following table describes the labels in this screen. Table 29 WIRELESS > Wi-Fi > Wireless C

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1538.3.1 SSID Profile Configure wireless network security by configuring and applying an SSID profile. Y

Chapter 8 Wi-FiNBG410W3G Series User’s Guide154Figure 87 WIRELESS > Wi-Fi > Configuring SSIDThe following table describes the labels in this s

Chapter 8 Wi-FiNBG410W3G Series User’s Guide155The following table describes the security modes you can configure.Figure 88 WIRELESS > Wi-Fi >

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1568.4.1 No Security" If you do not enable any wireless security on your ZyXEL Device, your network

Chapter 8 Wi-FiNBG410W3G Series User’s Guide157Figure 90 WIRELESS > Wi-Fi > Security: WEPThe following table describes the labels in this scr

Chapter 8 Wi-FiNBG410W3G Series User’s Guide158Figure 91 WIRELESS > Wi-Fi > Security: 802.1x Only The following table describes the labels in

Chapter 8 Wi-FiNBG410W3G Series User’s Guide159Figure 92 WIRELESS > Wi-Fi > Security: 802.1x + Static WEPThe following table describes the la

Table of ContentsNBG410W3G Series User’s Guide1612.3 NAT Overview Screen ...

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1608.4.5 WPA, WPA2, WPA2-MIXClick WIRELESS > Wi-Fi > Security > Edit. Select WPA, WPA2 or WPA2-M

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1618.4.6 WPA-PSK, WPA2-PSK, WPA2-PSK-MIXClick WIRELESS > Wi-Fi > Security > Edit. Select WPA-PS

Chapter 8 Wi-FiNBG410W3G Series User’s Guide1628.5 MAC Filter The MAC filter screen allows you to configure the ZyXEL Device to give exclusive access

Chapter 8 Wi-FiNBG410W3G Series User’s Guide163Figure 95 WIRELESS > Wi-Fi > MAC FilterThe following table describes the labels in this menu.T

Chapter 8 Wi-FiNBG410W3G Series User’s Guide164

165PART IVSecurityFirewall (167)Certificates (195)Authentication Server (191)

166

NBG410W3G Series User’s Guide167CHAPTER 9 FirewallThis chapter shows you how to configure your ZyXEL Device’s firewall.9.1 Firewall Overview The net

Chapter 9 FirewallNBG410W3G Series User’s Guide1689.2 Packet Direction MatrixThe ZyXEL Device’s packet direction matrix allows you to apply certain s

Chapter 9 FirewallNBG410W3G Series User’s Guide169Figure 98 Default Block Traffic From WAN1 to DMZ Example 9.3 Packet Direction ExamplesFirewal

Table of ContentsNBG410W3G Series User’s Guide1715.1.2 System Timeout ...

Chapter 9 FirewallNBG410W3G Series User’s Guide170By default, the ZyXEL Device drops packets traveling in the following directions.9.4 Security Consi

Chapter 9 FirewallNBG410W3G Series User’s Guide1711 Does this rule stop LAN users from accessing critical resources on the Internet? For example, if

Chapter 9 FirewallNBG410W3G Series User’s Guide172The ZyXEL Device applies the firewall rules in order. So for this example, when the ZyXEL Device rec

Chapter 9 FirewallNBG410W3G Series User’s Guide1739.6 Asymmetrical RoutesIf an alternate gateway on the LAN has an IP address in the same subnet as

Chapter 9 FirewallNBG410W3G Series User’s Guide174Figure 102 SECURITY > FIREWALL > Default Rule The following table describes the labels in th

Chapter 9 FirewallNBG410W3G Series User’s Guide1759.8 Firewall Rule Summary Click SECURITY > FIREWALL > Rule Summary to open the screen. This

Chapter 9 FirewallNBG410W3G Series User’s Guide176Figure 103 SECURITY > FIREWALL > Rule SummaryThe following table describes the labels in thi

Chapter 9 FirewallNBG410W3G Series User’s Guide1779.8.1 Firewall Edit Rule In the Rule Summary screen, click the edit icon or the insert icon to

Chapter 9 FirewallNBG410W3G Series User’s Guide178Figure 104 SECURITY > FIREWALL > Rule Summary > Edit

Chapter 9 FirewallNBG410W3G Series User’s Guide179The following table describes the labels in this screen. Table 44 SECURITY > FIREWALL >

Table of ContentsNBG410W3G Series User’s Guide1816.5.2 Web Configurator Easy Access ...

Chapter 9 FirewallNBG410W3G Series User’s Guide1809.9 Anti-Probing Click SECURITY > FIREWALL > Anti-Probing to open the following screen. Con

Chapter 9 FirewallNBG410W3G Series User’s Guide181The following table describes the labels in this screen. 9.10 Firewall Thresholds For DoS attac

Chapter 9 FirewallNBG410W3G Series User’s Guide1829.10.1 Threshold ValuesIf everything is working properly, you probably do not need to change the th

Chapter 9 FirewallNBG410W3G Series User’s Guide183The following table describes the labels in this screen. Table 46 SECURITY > FIREWALL > Thr

Chapter 9 FirewallNBG410W3G Series User’s Guide1849.12 Service Click SECURITY > FIREWALL > Service to open the screen as shown next. Use this s

Chapter 9 FirewallNBG410W3G Series User’s Guide185The following table describes the labels in this screen. 9.12.1 Firewall Edit Custom Service Clic

Chapter 9 FirewallNBG410W3G Series User’s Guide186The following table describes the labels in this screen.9.13 My Service Firewall Rule ExampleThe fo

Chapter 9 FirewallNBG410W3G Series User’s Guide187Figure 111 My Service Firewall Rule Example: Edit Custom Service 3 Click Rule Summary. Select WA

Chapter 9 FirewallNBG410W3G Series User’s Guide188Figure 113 My Service Firewall Rule Example: Rule Edit: Source and Destination Addresses 8 In the

Chapter 9 FirewallNBG410W3G Series User’s Guide189Figure 114 My Service Firewall Rule Example: Edit Rule: Service ConfigurationRule 1 allows a My S

Table of ContentsNBG410W3G Series User’s Guide1920.1 Maintenance Overview ...

Chapter 9 FirewallNBG410W3G Series User’s Guide190Figure 115 My Service Firewall Rule Example: Rule Summary: Completed

NBG410W3G Series User’s Guide191CHAPTER 10 Authentication ServerThis chapter discusses how to configure the ZyXEL Device’s authentication server feat

Chapter 10 Authentication ServerNBG410W3G Series User’s Guide192Figure 116 SECURITY > AUTH SERVER > Local User Database

Chapter 10 Authentication ServerNBG410W3G Series User’s Guide193The following table describes the labels in this screen. 10.3 RADIUS Click SECUR

Chapter 10 Authentication ServerNBG410W3G Series User’s Guide194Key Enter a password (up to 31 alphanumeric characters) as the key to be shared betwee

NBG410W3G Series User’s Guide195CHAPTER 11 CertificatesThis chapter gives background information about public-key certificates and explains how to us

Chapter 11 CertificatesNBG410W3G Series User’s Guide196Certification authorities maintain directory servers with databases of valid and revoked certif

Chapter 11 CertificatesNBG410W3G Series User’s Guide197Figure 119 Certificate Details 4 Use a secure method to verify that the certificate owner ha

Chapter 11 CertificatesNBG410W3G Series User’s Guide19811.5 My Certificates Click SECURITY > CERTIFICATES > My Certificates to open the My Cert

Chapter 11 CertificatesNBG410W3G Series User’s Guide199Subject This field displays identifying information about the certificate’s owner, such as CN

Table of ContentsNBG410W3G Series User’s Guide20Appendix F Importing Certificates ...

Chapter 11 CertificatesNBG410W3G Series User’s Guide20011.6 My Certificate Details Click SECURITY > CERTIFICATES > My Certificates to open the

Chapter 11 CertificatesNBG410W3G Series User’s Guide201Serial Number This field displays the certificate’s identification number given by the certifi

Chapter 11 CertificatesNBG410W3G Series User’s Guide20211.7 My Certificate Export Click SECURITY > CERTIFICATES > My Certificates and then a c

Chapter 11 CertificatesNBG410W3G Series User’s Guide20311.8 My Certificate Import Click SECURITY > CERTIFICATES > My Certificates and then Im

Chapter 11 CertificatesNBG410W3G Series User’s Guide204Figure 124 SECURITY > CERTIFICATES > My Certificates > ImportThe following table des

Chapter 11 CertificatesNBG410W3G Series User’s Guide20511.9 My Certificate Create Click SECURITY > CERTIFICATES > My Certificates > Create

Chapter 11 CertificatesNBG410W3G Series User’s Guide206Figure 127 SECURITY > CERTIFICATES > My Certificates > Create (Advanced)The followin

Chapter 11 CertificatesNBG410W3G Series User’s Guide207Common Name Select a radio button to identify the certificate’s owner by IP address, domain n

Chapter 11 CertificatesNBG410W3G Series User’s Guide208Subject Alternative NameSelect a radio button to identify the certificate’s owner by IP address

Chapter 11 CertificatesNBG410W3G Series User’s Guide209After you click Apply in the My Certificate Create screen, you see a screen that tells you the

List of FiguresNBG410W3G Series User’s Guide21List of FiguresFigure 1 3G WAN Application ...

Chapter 11 CertificatesNBG410W3G Series User’s Guide210Figure 128 SECURITY > CERTIFICATES > Trusted CAsThe following table describes the label

Chapter 11 CertificatesNBG410W3G Series User’s Guide21111.11 Trusted CA Details Click SECURITY > CERTIFICATES > Trusted CAs to open the Trust

Chapter 11 CertificatesNBG410W3G Series User’s Guide212Figure 129 SECURITY > CERTIFICATES > Trusted CAs > DetailsThe following table descri

Chapter 11 CertificatesNBG410W3G Series User’s Guide213Certification Path Click the Refresh button to have this read-only text box display the end en

Chapter 11 CertificatesNBG410W3G Series User’s Guide21411.12 Trusted CA Import Click SECURITY > CERTIFICATES > Trusted CAs to open the Truste

Chapter 11 CertificatesNBG410W3G Series User’s Guide215Figure 130 SECURITY > CERTIFICATES > Trusted CAs > ImportThe following table descri

Chapter 11 CertificatesNBG410W3G Series User’s Guide216Figure 131 SECURITY > CERTIFICATES > Trusted Remote HostsThe following table describes

Chapter 11 CertificatesNBG410W3G Series User’s Guide21711.14 Trusted Remote Hosts Import Click SECURITY > CERTIFICATES > Trusted Remote Host

Chapter 11 CertificatesNBG410W3G Series User’s Guide21811.15 Trusted Remote Host Certificate Details Click SECURITY > CERTIFICATES > Trusted

Chapter 11 CertificatesNBG410W3G Series User’s Guide219The following table describes the labels in this screen. Table 62 SECURITY > CERTIFICATES

List of FiguresNBG410W3G Series User’s Guide22Figure 39 Tutorial Example: DNS > System Edit-1 ...

Chapter 11 CertificatesNBG410W3G Series User’s Guide22011.16 Directory Servers Click SECURITY > CERTIFICATES > Directory Servers to open the D

Chapter 11 CertificatesNBG410W3G Series User’s Guide221The following table describes the labels in this screen. 11.17 Directory Server Add or Edit

Chapter 11 CertificatesNBG410W3G Series User’s Guide222Access Protocol Use the drop-down list box to select the access protocol used by the directory

223PART VAdvancedNetwork Address Translation (NAT) (225)Static Route (243)DNS (247)Remote Management (259)UPnP (281)Custom Application (291)ALG

224

NBG410W3G Series User’s Guide225CHAPTER 12 Network Address Translation(NAT)This chapter discusses how to configure NAT on the ZyXEL Device.12.1 NAT

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide226" NAT never changes the IP address (either local or global) of an out

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide227Figure 136 How NAT Works 12.1.4 NAT ApplicationThe following figure il

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide228Figure 137 NAT Application With IP Alias12.1.5 Port Restricted Cone NAT

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide229Figure 138 Port Restricted Cone NAT Example12.1.6 NAT Mapping TypesNAT

List of FiguresNBG410W3G Series User’s Guide23Figure 82 DMZ Public Address Example ...

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide230The following table summarizes the NAT mapping types.12.2 Using NAT"

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide231Figure 139 ADVANCED > NAT > NAT OverviewThe following table descr

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide23212.4 NAT Address Mapping Click ADVANCED > NAT > Address Mapping t

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide233Figure 140 ADVANCED > NAT > Address MappingThe following table de

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide23412.4.2 NAT Address Mapping Edit Click the edit icon to display the NAT Ad

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide235The following table describes the labels in this screen. 12.5 Port Forw

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide236" If you do not assign a Default Server IP address, the ZyXEL Device

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide237Figure 142 Multiple Servers Behind NAT Example12.5.4 NAT and Multiple

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide238Figure 143 Port Translation Example12.6 Port Forwarding Screen Click AD

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide239Figure 144 ADVANCED > NAT > Port ForwardingThe following table de

List of FiguresNBG410W3G Series User’s Guide24Figure 125 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12 ...

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide24012.7 Port Triggering Some services use a dedicated range of ports on th

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide241Figure 146 ADVANCED > NAT > Port Triggering The following table d

Chapter 12 Network Address Translation (NAT)NBG410W3G Series User’s Guide242

NBG410W3G Series User’s Guide243CHAPTER 13 Static RouteThis chapter shows you how to configure static routes for your ZyXEL Device.13.1 IP Static Ro

Chapter 13 Static RouteNBG410W3G Series User’s Guide24413.2 IP Static Route Click ADVANCED > STATIC ROUTE to open the IP Static Route screen. The

Chapter 13 Static RouteNBG410W3G Series User’s Guide245The following table describes the labels in this screen. 13.2.1 IP Static Route Edit Click

Chapter 13 Static RouteNBG410W3G Series User’s Guide246Gateway IP AddressEnter the IP address of the gateway. The gateway is a router or switch on the

NBG410W3G Series User’s Guide247CHAPTER 14 DNSThis chapter shows you how to configure the DNS screens.14.1 DNS Overview DNS (Domain Name System) is

Chapter 14 DNSNBG410W3G Series User’s Guide24814.4 Address RecordAn address record contains the mapping of a fully qualified domain name (FQDN) to an

Chapter 14 DNSNBG410W3G Series User’s Guide249Figure 150 ADVANCED > DNS > System DNSThe following table describes the labels in this screen.L

List of FiguresNBG410W3G Series User’s Guide25Figure 168 ADVANCED > REMOTE MGMT > SSH ...

Chapter 14 DNSNBG410W3G Series User’s Guide25014.6.1 Adding an Address Record Click Add in the System screen to open this screen. Use this screen to

Chapter 14 DNSNBG410W3G Series User’s Guide251The following table describes the labels in this screen. 14.6.2 Inserting a Name Server Record Click

Chapter 14 DNSNBG410W3G Series User’s Guide252The following table describes the labels in this screen.14.7 DNS Cache DNS cache is the temporary stor

Chapter 14 DNSNBG410W3G Series User’s Guide253Figure 153 ADVANCED > DNS > CacheThe following table describes the labels in this screen.LABEL

Chapter 14 DNSNBG410W3G Series User’s Guide25414.9 Configuring DNS DHCP Click ADVANCED > DNS > DHCP to open the DNS DHCP screen shown next. Use

Chapter 14 DNSNBG410W3G Series User’s Guide25514.10 Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many d

Chapter 14 DNSNBG410W3G Series User’s Guide256" If you have a private WAN IP address, then you cannot use Dynamic DNS.14.10.2 High AvailabilityA

Chapter 14 DNSNBG410W3G Series User’s Guide257Username Enter your user name. You can use up to 31 alphanumeric characters (and the underscore). Space

Chapter 14 DNSNBG410W3G Series User’s Guide258

NBG410W3G Series User’s Guide259CHAPTER 15 Remote ManagementThis chapter provides information on the Remote Management screens.15.1 Remote Managemen

List of FiguresNBG410W3G Series User’s Guide26Figure 211 Masonry Plug and M4 Tap Screw ...

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide2603 Telnet4 HTTPS and HTTP15.1.1 Remote Management LimitationsRemote management does not wo

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide2612 HTTP connection requests from a web browser go to port 80 (by default) on the ZyXEL Dev

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide262Figure 158 ADVANCED > REMOTE MGMT > WWWThe following table describes the labels in

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide26315.4 HTTPS ExampleIf you haven’t changed the default HTTPS port on the ZyXEL Device, the

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide264If Accept this certificate temporarily for this session is selected, then click OK to cont

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide265• The actual IP address of the HTTPS server (the IP address of the ZyXEL Device’s port th

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide266Figure 163 Replace CertificateClick Apply in the Replace Certificate screen to create a

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide267Figure 165 Common ZyXEL Device Certificate15.5 SSH You can use SSH (Secure SHell) to

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide268Figure 167 How SSH Works1 Host IdentificationThe SSH client sends a connection request t

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide26915.8 Configuring SSHClick ADVANCED > REMOTE MGMT > SSH to change your ZyXEL Device

List of FiguresNBG410W3G Series User’s Guide27Figure 254 Security Certificate ...

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide27015.9 Secure Telnet Using SSH ExamplesThis section shows two examples using a command inte

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide2712 Enter “ssh –1 192.168.1.1”. This command forces your computer to connect to the ZyXEL D

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide272Figure 172 Secure FTP: Firmware Upload Example15.11 Telnet You can use Telnet to access

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide273The following table describes the labels in this screen. 15.13 FTP You can use FTP (Fi

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide274The following table describes the labels in this screen. 15.14 SNMP Simple Network Mana

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide275Figure 175 SNMP Management ModelAn SNMP managed network consists of two main types of c

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide27615.14.2 SNMP Traps The ZyXEL Device will send traps to the SNMP manager when any one of t

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide277The following table describes the labels in this screen. 15.15 DNS Use DNS (Domain Name

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide278The following table describes the labels in this screen. 15.16 Introducing Vantage CNM Va

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide279Figure 178 ADVANCED > REMOTE MGMT > CNMThe following table describes the labels i

List of FiguresNBG410W3G Series User’s Guide28

Chapter 15 Remote ManagementNBG410W3G Series User’s Guide28015.17.1 Additional Configuration for Vantage CNMIf you have NAT routers or firewalls betw

NBG410W3G Series User’s Guide281CHAPTER 16 UPnPThis chapter introduces the Universal Plug and Play feature.16.1 Universal Plug and Play Overview Uni

Chapter 16 UPnPNBG410W3G Series User’s Guide282All UPnP-enabled devices may communicate freely with each other without additional configuration. Disab

Chapter 16 UPnPNBG410W3G Series User’s Guide28316.3 Displaying UPnP Port Mapping Click ADVANCED > UPnP > Ports to display the UPnP Ports scr

Chapter 16 UPnPNBG410W3G Series User’s Guide28416.4 Installing UPnP in Windows ExampleThis section shows how to install UPnP in Windows Me and Window

Chapter 16 UPnPNBG410W3G Series User’s Guide28516.4.1 Installing UPnP in Windows MeFollow the steps below to install UPnP in Windows Me. 1 Click Sta

Chapter 16 UPnPNBG410W3G Series User’s Guide28616.4.2 Installing UPnP in Windows XPFollow the steps below to install UPnP in Windows XP.16.5 Using U

Chapter 16 UPnPNBG410W3G Series User’s Guide28716.5.1 Auto-discover Your UPnP-enabled Network Device1 Click Start and Control Panel. Double-click Ne

Chapter 16 UPnPNBG410W3G Series User’s Guide288" When the UPnP-enabled device is disconnected from your computer, all port mappings will be delet

Chapter 16 UPnPNBG410W3G Series User’s Guide289Follow the steps below to access the web configurator.1 Click Start and then Control Panel. 2 Double-c

List of TablesNBG410W3G Series User’s Guide29List of TablesTable 1 NBG410W3G Front Panel Lights ...

Chapter 16 UPnPNBG410W3G Series User’s Guide2906 Right-click the icon for your ZyXEL device and select Properties. A properties window displays with b

NBG410W3G Series User’s Guide291CHAPTER 17 Custom ApplicationThis chapter covers how to set the ZyXEL Device’s to monitor custom port numbers for spe

Chapter 17 Custom ApplicationNBG410W3G Series User’s Guide292Figure 181 ADVANCED > Custom APP The following table describes the labels in this sc

NBG410W3G Series User’s Guide293CHAPTER 18 ALG ScreenThis chapter covers how to use the ZyXEL Device’s ALG feature to allow certain applications to p

Chapter 18 ALG ScreenNBG410W3G Series User’s Guide29418.1.3 ALG and Multiple WANWhen the ZyXEL Device has two WAN interfaces and uses the second high

Chapter 18 ALG ScreenNBG410W3G Series User’s Guide295Figure 182 H.323 ALG Example • With multiple WAN IP addresses on the ZyXEL Device, you can con

Chapter 18 ALG ScreenNBG410W3G Series User’s Guide29618.5.2 SIP ALG Details• SIP clients can be connected to the LAN or DMZ. A SIP server must be on

Chapter 18 ALG ScreenNBG410W3G Series User’s Guide297Figure 185 ADVANCED > ALG The following table describes the labels in this screen. Table 8

Chapter 18 ALG ScreenNBG410W3G Series User’s Guide298

299PART VILogs and MaintenanceLogs Screens (301)Maintenance (325)

About This User's GuideNBG410W3G Series User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want t

List of TablesNBG410W3G Series User’s Guide30Table 39 WIRELESS > Wi-Fi > MAC Filter ...

300

NBG410W3G Series User’s Guide301CHAPTER 19 Logs ScreensThis chapter contains information about configuring general log settings and viewing the ZyXEL

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide302The following table describes the labels in this screen. 19.2 Log Description ExampleThe follo

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide30319.2.1 About the Certificate Not Trusted LogmyZyXEL.com and the update server use certificate

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide304Figure 188 myZyXEL.com: Certificate Download19.3 Configuring Log Settings To change your ZyX

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide305Figure 189 LOGS > Log Settings

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide306The following table describes the labels in this screen. Table 90 LOGS > Log SettingsLAB

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide30719.4 Configuring Reports The Reports screen displays which computers on the LAN or DMZ send a

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide308Figure 190 LOGS > Reports " Enabling the ZyXEL Device’s reporting function decreases

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide309" All of the recorded reports data is erased when you turn off the ZyXEL Device.19.4.1 V

List of TablesNBG410W3G Series User’s Guide31Table 82 ADVANCED > REMOTE MGMT > DNS ...

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide310" Computers take turns using dynamically assigned LAN or DMZ IP addresses. The ZyXEL Devic

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide311Figure 193 LOGS > Reports: Protocol/Port ExampleThe following table describes the labels

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide31219.4.4 System Reports SpecificationsThe following table lists detailed specifications on the r

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide313Connect to Daytime server failThe router was not able to connect to the Daytime server.Connect

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide314 Table 98 Access Control LogsLOG MESSAGE DESCRIPTIONFirewall default policy: [ TCP | UDP | I

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide315 For type and code details, see Table 110 on page 321.Exceed MAX incomplete, sent TCP RSTThe

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide316 Remote Management: HTTPS denied Attempted use of HTTPS service was blocked according to rem

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide317For type and code details, see Table 110 on page 321.Table 106 Attack LogsLOG MESSAGE DESCRI

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide318 IP address in FTP port command is different from the client IP address. It maybe a bounce atta

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide319 Warning: (%ESN% or %IMSI%) Over data budget! (budget =%CONFIGURED_BUDGET%(2 decimals Mbytes,

List of TablesNBG410W3G Series User’s Guide32Table 125 Alternative Subnet Mask Notation ...

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide320 Failed to decode the received ARLThe router received a corrupted ARL (Authority Revocation Lis

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide321 27 Path was not verified.28 Maximum path length reached.Table 109 ACL Setting NotesPACKET D

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide3220 Echo message11 Time Exceeded0 Time to live exceeded in transit1 Fragment reassembly time exce

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide32319.6 Syslog LogsThere are two types of syslog: event logs and traffic logs. The device genera

Chapter 19 Logs ScreensNBG410W3G Series User’s Guide324The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to

NBG410W3G Series User’s Guide325CHAPTER 20 MaintenanceThis chapter displays information on the maintenance screens.20.1 Maintenance OverviewThe main

Chapter 20 MaintenanceNBG410W3G Series User’s Guide326Figure 194 MAINTENANCE > General SetupThe following table describes the labels in this scre

Chapter 20 MaintenanceNBG410W3G Series User’s Guide327Figure 195 MAINTENANCE > Password The following table describes the labels in this screen.

Chapter 20 MaintenanceNBG410W3G Series User’s Guide328Figure 196 MAINTENANCE > Time and DateThe following table describes the labels in this scre

Chapter 20 MaintenanceNBG410W3G Series User’s Guide329Time Protocol Select the time service protocol that your time server uses. Not all time servers

33PART IIntroductionGetting to Know Your ZyXEL Device (35)Introducing the Web Configurator (43)Wizard Setup (59)Tutorials (65)

Chapter 20 MaintenanceNBG410W3G Series User’s Guide33020.5 Pre-defined NTP Time Server PoolsWhen you turn on the ZyXEL Device for the first time, the

Chapter 20 MaintenanceNBG410W3G Series User’s Guide331Figure 198 Synchronization is SuccessfulIf the update was not successful, the following scree

Chapter 20 MaintenanceNBG410W3G Series User’s Guide332Figure 200 MAINTENANCE > Firmware UploadThe following table describes the labels in this sc

Chapter 20 MaintenanceNBG410W3G Series User’s Guide333Figure 202 Network Temporarily DisconnectedAfter two minutes, log in again and check your new

Chapter 20 MaintenanceNBG410W3G Series User’s Guide334Figure 204 MAINTENANCE > Backup and Restore20.7.1 Backup Configuration Backup configuratio

Chapter 20 MaintenanceNBG410W3G Series User’s Guide335After you see a “restore configuration successful” screen, you must then wait one minute before

Chapter 20 MaintenanceNBG410W3G Series User’s Guide336Figure 208 Reset Warning MessageYou can also press the hardware RESET button to reset the fact

337PART VIITroubleshooting and SpecificationsTroubleshooting (339)Product Specifications (345)

338

NBG410W3G Series User’s Guide339CHAPTER 21 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potential p

34

Chapter 21 TroubleshootingNBG410W3G Series User’s Guide34021.2 ZyXEL Device Access and LoginV I forgot the LAN IP address for the ZyXEL Device.1 The

Chapter 21 TroubleshootingNBG410W3G Series User’s Guide341• If there is a DHCP server on your network, make sure your computer is using a dynamic IP

Chapter 21 TroubleshootingNBG410W3G Series User’s Guide342V I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload

Chapter 21 TroubleshootingNBG410W3G Series User’s Guide3431 Check the hardware connections, and make sure the LEDs are behaving as expected. See the

Chapter 21 TroubleshootingNBG410W3G Series User’s Guide344V The 3G SIGNAL STRENGTH LED shows the 3G signal is weak or not available.• Check that your

NBG410W3G Series User’s Guide345CHAPTER 22 Product SpecificationsThis chapter gives details about your ZyXEL Device’s hardware and firmware features.

Chapter 22 Product SpecificationsNBG410W3G Series User’s Guide346Table 120 Firmware Specifications FEATURE DESCRIPTIONDefault IP Address 192.168.1.1

Chapter 22 Product SpecificationsNBG410W3G Series User’s Guide347 22.2 Wall-mounting InstructionsComplete the following steps to hang your ZyXEL Dev

Chapter 22 Product SpecificationsNBG410W3G Series User’s Guide3481 Be careful to avoid damaging pipes or cables located inside the wall when drilling

Chapter 22 Product SpecificationsNBG410W3G Series User’s Guide34922.3 Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDSAC POWER ADAPTOR

NBG410W3G Series User’s Guide35CHAPTER 1 Getting to Know Your ZyXELDeviceThis chapter introduces the main features and applications of the ZyXEL Devi

Chapter 22 Product SpecificationsNBG410W3G Series User’s Guide350

351PART VIIIAppendices and Index" The appendices provide general information. Some details may not apply to your ZyXEL Device.Pop-up Windows, Jav

352

NBG410W3G Series User’s Guide353APPENDIX A Pop-up Windows, JavaScriptsand Java PermissionsIn order to use the web configurator you need to allow:• We

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide3542 Clear the Block pop-ups check box in the Pop-up Blocker s

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide355Figure 214 Internet Options: Privacy3 Type the IP addres

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide3565 Click Close to return to the Privacy screen. 6 Click Appl

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide357Figure 217 Security Settings - Java ScriptingJava Permis

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide358JAVA (Sun)1 From Internet Explorer, click Tools, Internet O

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide359Figure 220 Mozilla Firefox: Tools > OptionsClick Cont

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide36Figure 1 3G WAN Application1.2.2 Secure Broadband Internet Access via Cab

Appendix A Pop-up Windows, JavaScripts and Java PermissionsNBG410W3G Series User’s Guide360

NBG410W3G Series User’s Guide361APPENDIX B Setting up Your Computer’s IPAddressAll computers must have a 10M or 100M Ethernet adapter card and TCP/IP

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide362Figure 222 WIndows 95/98/Me: Network: ConfigurationInstalling Compon

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide363Configuring 1 In the Network window Configuration tab, select your ne

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide364Figure 224 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 C

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide365Figure 225 Windows XP: Start Menu2 In the Control Panel, double-cli

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide366Figure 227 Windows XP: Control Panel: Network Connections: Propertie

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide367Figure 229 Windows XP: Internet Protocol (TCP/IP) Properties6 If y

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide368Figure 230 Windows XP: Advanced TCP/IP Properties7 In the Internet P

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide369Figure 231 Windows XP: Internet Protocol (TCP/IP) Properties8 Click

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide371.4 Configuring Your ZyXEL Device’s Security FeaturesYour ZyXEL Device com

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide370Figure 232 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in fr

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide371• Type your IP address in the IP Address box.• Type your subnet mask

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide372Figure 235 Macintosh OS X: Network4 For statically assigned settings

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide373" Make sure you are logged in as the root administrator. Using t

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide374• If you have a dynamic IP address, click Automatically obtain IP addr

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide375Figure 240 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0

Appendix B Setting up Your Computer’s IP AddressNBG410W3G Series User’s Guide376Verifying SettingsEnter ifconfig in a terminal screen to check your TC

NBG410W3G Series User’s Guide377APPENDIX C IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses identify i

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide378Figure 245 Network Number and Host IDHow much of the IP address is the network

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide379Subnet masks are expressed in dotted decimal notation just like IP addresses. T

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide38• Set the firewall to block ICMP requests. • Enable do not respond to reques

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide380SubnettingYou can use subnetting to divide one network into multiple sub-network

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide381Figure 247 Subnetting Example: After SubnettingIn a 25-bit subnet the host ID

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide382Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets (000,

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide383Subnet PlanningThe following table is a summary for subnet planning on a networ

Appendix C IP Addresses and SubnettingNBG410W3G Series User’s Guide384Configuring IP AddressesWhere you obtain your network number depends on your par

NBG410W3G Series User’s Guide385APPENDIX D Common ServicesThe following table lists some commonly-used services and their associated protocols and po

Appendix D Common ServicesNBG410W3G Series User’s Guide386FTP TCPTCP2021File Transfer Program, a program to enable fast transfer of files, including l

Appendix D Common ServicesNBG410W3G Series User’s Guide387RTELNET TCP 107 Remote Telnet.RTSP TCP/UDP 554 The Real Time Streaming (media control) Prot

Appendix D Common ServicesNBG410W3G Series User’s Guide388

NBG410W3G Series User’s Guide389APPENDIX E Wireless LANsWireless LAN TopologiesThis section discusses ad-hoc and infrastructure wireless LAN topologi

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide391.5.1 Front Panel LightsFigure 3 Front PanelThe following tables describ

Appendix E Wireless LANsNBG410W3G Series User’s Guide390Figure 249 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of overlap

Appendix E Wireless LANsNBG410W3G Series User’s Guide391Figure 250 Infrastructure WLANChannelA channel is the radio frequency(ies) used by wireless

Appendix E Wireless LANsNBG410W3G Series User’s Guide392Figure 251 RTS/CTSWhen station A sends data to the AP, it might not know that the station B

Appendix E Wireless LANsNBG410W3G Series User’s Guide393If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you s

Appendix E Wireless LANsNBG410W3G Series User’s Guide394Wireless security methods available on the ZyXEL Device are data encryption, wireless client a

Appendix E Wireless LANsNBG410W3G Series User’s Guide395Determines the network services available to authenticated users once they are connected to t

Appendix E Wireless LANsNBG410W3G Series User’s Guide396For EAP-TLS authentication type, you must first have a wired connection to the network and obt

Appendix E Wireless LANsNBG410W3G Series User’s Guide397Dynamic WEP Key ExchangeThe AP maps a unique key that is generated with the RADIUS server. Th

Appendix E Wireless LANsNBG410W3G Series User’s Guide398Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol

Appendix E Wireless LANsNBG410W3G Series User’s Guide399Wireless Client WPA SupplicantsA wireless client supplicant is the software that runs on an o

Document ConventionsNBG410W3G Series User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guid

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide403G OPERATIONGreen On The ZyXEL Device has a successful 3G connection.Flashin

Appendix E Wireless LANsNBG410W3G Series User’s Guide4003 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is n

Appendix E Wireless LANsNBG410W3G Series User’s Guide401Antenna OverviewAn antenna couples RF signals onto air. A transmitter within a wireless devic

Appendix E Wireless LANsNBG410W3G Series User’s Guide402Positioning AntennasIn general, antennas should be mounted as high as practically possible and

NBG410W3G Series User’s Guide403APPENDIX F Importing CertificatesThis appendix shows importing certificates examples using Internet Explorer 5.Import

Appendix F Importing CertificatesNBG410W3G Series User’s Guide4041 In Internet Explorer, double click the lock shown in the following screen.Figure 25

Appendix F Importing CertificatesNBG410W3G Series User’s Guide405Figure 257 Certificate Import Wizard 14 Select where you would like to store the c

Appendix F Importing CertificatesNBG410W3G Series User’s Guide406Figure 259 Certificate Import Wizard 36 Click Yes to add the ZyXEL Device certific

Appendix F Importing CertificatesNBG410W3G Series User’s Guide407Figure 261 Certificate General Information after ImportEnrolling and Importing SSL

Appendix F Importing CertificatesNBG410W3G Series User’s Guide408Figure 262 ZyXEL Device Trusted CA ScreenThe CA sends you a package containing the

Appendix F Importing CertificatesNBG410W3G Series User’s Guide409Figure 263 CA Certificate Example2 Click Install Certificate and follow the wizard

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide41Wi-Fi Green Off The wireless connection through the built-in Wi-Fi card is

Appendix F Importing CertificatesNBG410W3G Series User’s Guide4102 The file name and path of the certificate you double-clicked should automatically a

Appendix F Importing CertificatesNBG410W3G Series User’s Guide411Figure 267 Personal Certificate Import Wizard 45 Click Finish to complete the wiza

Appendix F Importing CertificatesNBG410W3G Series User’s Guide412Using a Certificate When Accessing the ZyXEL Device ExampleUse the following procedur

Appendix F Importing CertificatesNBG410W3G Series User’s Guide413

Appendix F Importing CertificatesNBG410W3G Series User’s Guide414

NBG410W3G Series User’s Guide415APPENDIX G Legal InformationCopyrightCopyright © 2008 by ZyXEL Communications Corporation.The contents of this public

Appendix G Legal InformationNBG410W3G Series User’s Guide416This device has been tested and found to comply with the limits for a Class B digital devi

Appendix G Legal InformationNBG410W3G Series User’s Guide417This Class B digital apparatus complies with Canadian ICES-003.Cet appareil numérique de

Appendix G Legal InformationNBG410W3G Series User’s Guide418

NBG410W3G Series User’s Guide419APPENDIX H Customer SupportIn the event of problems that cannot be solved by using this manual, you should contact yo

Chapter 1 Getting to Know Your ZyXEL DeviceNBG410W3G Series User’s Guide42

Appendix H Customer SupportNBG410W3G Series User’s Guide420• Address: 1005F, ShengGao International Tower, No.137 XianXia Rd., Shanghai• Web: http://w

Appendix H Customer SupportNBG410W3G Series User’s Guide421Germany• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +49-24

Appendix H Customer SupportNBG410W3G Series User’s Guide422Malaysia• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone

Appendix H Customer SupportNBG410W3G Series User’s Guide423Singapore• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telepho

Appendix H Customer SupportNBG410W3G Series User’s Guide424Turkey• Support E-mail: [email protected]• Telephone: +90 212 222 55 22• Fax: +90-212-220-25

IndexNBG410W3G Series User’s Guide425IndexNumerics3Gintroduction 1263G. See third generation 126Aaccess point 147See also AP.address assignment 115, 2

IndexNBG410W3G Series User’s Guide426DHCP clients 326DHCP table 56disclaimer 415DNS 277DNS serverprivate LAN 248DNS server address assignment 116DNS s

IndexNBG410W3G Series User’s Guide427IP protocol type 179ISP parameters 59LLAN 104load balancing 111load sharing 111loading a configuration file 334lo

IndexNBG410W3G Series User’s Guide428PSK 398RRADIUS 394message types 395messages 395shared secret key 395RADIUS server 149Real Time Transport Protocol

IndexNBG410W3G Series User’s Guide429subnetting 380syntax conventions 4systemname 325timeout 260Ttarget market 35TCP maximum incomplete 183TCP/IP prio

NBG410W3G Series User’s Guide43CHAPTER 2 Introducing the WebConfiguratorThis chapter describes how to access the ZyXEL Device web configurator and pr

IndexNBG410W3G Series User’s Guide430with RADIUS application example 399WPA2 397user authentication 398vs WPA2-PSK 398wireless client supplicant 399wi

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide44Figure 4 Login Screen5 You should see a screen asking you to change your pa

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide45" The management session automatically times out when the time period s

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide46Figure 7 Example Xmodem Upload6 After successful firmware upload, enter &qu

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide47The icons provide the following functions.2.4.2 Main WindowThe main window

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide48System InformationSystem Name This is the System Name you enter in the MAINTE

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide49Status For the LAN and DMZ ports, this displays the port speed and duplex se

Document ConventionsNBG410W3G Series User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The ZyXEL De

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide50Roaming Network This field is available only when you insert a 3G card that s

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide51New PIN Code Configure a PIN code for the SIM card. You can specify any four

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide522.4.4 Navigation PanelAfter you enter the password, use the sub-menus on the

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide53Wi-Fi Wireless Card Use this screen to configure the wireless LAN settings.S

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide542.4.5 Port Statistics Click Port Statistics in the HOME screen. Read-only i

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide55Figure 10 HOME > Show StatisticsThe following table describes the label

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide56Figure 11 HOME > Show Statistics > Line ChartThe following table desc

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide57Figure 12 HOME > DHCP TableThe following table describes the labels in

Chapter 2 Introducing the Web ConfiguratorNBG410W3G Series User’s Guide58

NBG410W3G Series User’s Guide59CHAPTER 3 Wizard SetupThis chapter provides information on the Wizard Setup screens in the web configurator. 3.1 Wiza

Safety WarningsNBG410W3G Series User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.• Do NO

Chapter 3 Wizard SetupNBG410W3G Series User’s Guide60The wizard screen varies according to the type of encapsulation that you select in the Encapsulat

Chapter 3 Wizard SetupNBG410W3G Series User’s Guide613.2.1.2 PPPoE Encapsulation Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-u

Chapter 3 Wizard SetupNBG410W3G Series User’s Guide623.2.1.3 PPTP EncapsulationPoint-to-Point Tunneling Protocol (PPTP) is a network protocol that en

Chapter 3 Wizard SetupNBG410W3G Series User’s Guide63Figure 16 ISP Parameters: PPTP EncapsulationThe following table describes the labels in this s

Chapter 3 Wizard SetupNBG410W3G Series User’s Guide643.2.2 Internet Access Wizard Setup CompleteThe congratulations screen displays. Click Close to c

NBG410W3G Series User’s Guide65CHAPTER 4 TutorialsThis section describes how to do the following.1 Set up a DMZ (De-Militarized Zone). 2 Use an H.323

Chapter 4 TutorialsNBG410W3G Series User’s Guide664.2 DMZ Setup Example In this example the DMZ uses private IP addresses and the default subnet mask

Chapter 4 TutorialsNBG410W3G Series User’s Guide67Figure 20 DMZ Tutorial: NETWORK > DMZ > Static DHCP 4.2.1.3 Public and Private IP Addresse

Chapter 4 TutorialsNBG410W3G Series User’s Guide68Figure 22 DMZ Tutorial: ADVANCED > NAT Overview This completes basic setup of your DMZ.4.2.2 A

Chapter 4 TutorialsNBG410W3G Series User’s Guide69Port Forwarding Setup1 To configure port forwarding, first configure a static IP on the file server

Safety WarningsNBG410W3G Series User’s Guide7

Chapter 4 TutorialsNBG410W3G Series User’s Guide70You need to define two rules - one to drop all traffic from the WAN to the DMZ, the other to permit

Chapter 4 TutorialsNBG410W3G Series User’s Guide71Figure 26 DMZ Tutorial: NETWORK > Firewall > Rule Summary: Firewall - Edit 11 Repeat the fi

Chapter 4 TutorialsNBG410W3G Series User’s Guide72Figure 27 DMZ Tutorial: SECURITY > Firewall > Rule Summary ExampleThis completes setup of a

Chapter 4 TutorialsNBG410W3G Series User’s Guide73Figure 29 H.323 Tutorial: NETWORK > LAN > Static DHCP4 Click NETWORK > LAN to display th

Chapter 4 TutorialsNBG410W3G Series User’s Guide746 Type the IP address of your VoIP phone in the Server IP Address field. In this example 192.168.1.3

Chapter 4 TutorialsNBG410W3G Series User’s Guide75field - 123.23.23.23 and click Add so that the IP address appears in the Destination Address(es) fi

Chapter 4 TutorialsNBG410W3G Series User’s Guide76Figure 33 H.323 Tutorial: SECURITY > Firewall > Rule Summary 8 Repeat the firewall rule setu

Chapter 4 TutorialsNBG410W3G Series User’s Guide77Figure 34 H.323 Tutorial: SECURITY > Firewall > Rule SummaryThat completes setup of your H.

Chapter 4 TutorialsNBG410W3G Series User’s Guide78Figure 35 Tutorial Example: Using NAT with Static Public IP AddressesTo set up this network, we ar

Chapter 4 TutorialsNBG410W3G Series User’s Guide79Figure 36 Tutorial Example: WAN Connection with a Static Public IP Address 1 Click NETWORK > W

Safety WarningsNBG410W3G Series User’s Guide8

Chapter 4 TutorialsNBG410W3G Series User’s Guide807 The System screen displays. Click the Insert button to configure the IP address of the DNS server

Chapter 4 TutorialsNBG410W3G Series User’s Guide81Figure 40 Tutorial Example: DNS > System Edit-2 10 The DNS > System screen should look as s

Chapter 4 TutorialsNBG410W3G Series User’s Guide82Figure 42 Tutorial Example: Status4.5.3 Public IP Address MappingTo have the local computers and

Chapter 4 TutorialsNBG410W3G Series User’s Guide83Figure 43 Tutorial Example: Mapping Multiple Public IP Addresses to Inside Servers" The ZyXE

Chapter 4 TutorialsNBG410W3G Series User’s Guide84Figure 44 Tutorial Example: NAT > NAT Overview 3 Click the Address Mapping tab.4 Select WAN 1.5

Chapter 4 TutorialsNBG410W3G Series User’s Guide85Figure 45 Tutorial Example: NAT > Address Mapping6 Map a public IP address to the web server.S

Chapter 4 TutorialsNBG410W3G Series User’s Guide86Figure 47 Tutorial Example: NAT Address Mapping Edit: One-to-One (2) 9 Click the third rule’s Edit

Chapter 4 TutorialsNBG410W3G Series User’s Guide87Figure 49 Tutorial Example: NAT Address Mapping Done " To allow traffic from the WAN to be

Chapter 4 TutorialsNBG410W3G Series User’s Guide88Figure 50 Tutorial Example: Forwarding Incoming FTP Traffic to a Local Computer 1 Click ADVANCED &

Chapter 4 TutorialsNBG410W3G Series User’s Guide89Figure 52 Tutorial Example: NAT Port Forwarding4.5.5 Allow WAN-to-LAN Traffic through the Firewa

Contents OverviewNBG410W3G Series User’s Guide9Contents OverviewIntroduction ...

Chapter 4 TutorialsNBG410W3G Series User’s Guide901 Click SECURITY > FIREWALL.2 Make sure the firewall is enabled and traffic from WAN 1 to the LAN

Chapter 4 TutorialsNBG410W3G Series User’s Guide916 Configure a firewall rule to allow HTTP traffic from the WAN to the web server.Enter a descriptiv

Chapter 4 TutorialsNBG410W3G Series User’s Guide92Figure 57 Tutorial Example: Firewall Rule: WAN to LAN Service Edit for Web Server 8 Click the inse

Chapter 4 TutorialsNBG410W3G Series User’s Guide93Figure 58 Tutorial Example: Firewall Rule: WAN to LAN Address Edit for Mail Server 9 Select Any(A

Chapter 4 TutorialsNBG410W3G Series User’s Guide9410 Click the insert icon to configure a firewall rule to allow FTP traffic from the WAN to the FTP s

Chapter 4 TutorialsNBG410W3G Series User’s Guide95Figure 61 Tutorial Example: Firewall Rule: WAN to LAN Service Edit for FTP Server 12 When you are

Chapter 4 TutorialsNBG410W3G Series User’s Guide964.5.6 Testing the Connections1 Open the web browser on one of the local computers and enter any web

Chapter 4 TutorialsNBG410W3G Series User’s Guide97Figure 63 Tutorial Example: NAT Address Mapping Done: Game Playing " To allow traffic from

Chapter 4 TutorialsNBG410W3G Series User’s Guide98

99PART IINetwork LAN Screens (101)WAN Screens (111)DMZ Screens (135)