User Guide
Page 3
... is intended for people who want to configure the NBG-460N using this manual, you ! Send all User Guide-related comments, questions or suggestions for improvement to www.zyxel.com for additional support documentation and product certifications. Please have at least a basic knowledge of problems that cannot be solved by using the Web Configurator...
... is intended for people who want to configure the NBG-460N using this manual, you ! Send all User Guide-related comments, questions or suggestions for improvement to www.zyxel.com for additional support documentation and product certifications. Please have at least a basic knowledge of problems that cannot be solved by using the Web Configurator...
User Guide
Page 4
Brief description of the problem and the steps you received your device. About This User's Guide • Date that you took to solve it. 4 NBG-460N User's Guide
Brief description of the problem and the steps you received your device. About This User's Guide • Date that you took to solve it. 4 NBG-460N User's Guide
User Guide
Page 55
Figure 25 Wizard Step 3: Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG-460N an automatically assigned IP address depending on your ISP address. This is the default selection. Exit Click Exit to close the wizard screen without saving. 4.4.4... IP Subnet Type the subnet mask assigned to you by your two branch offices, you can assign any IP addresses to the hosts without problems. However, the NBG-460N User's Guide 55 If you choose this option If your ISP did not assign you a fixed IP your ISP. If your networks are ...
Figure 25 Wizard Step 3: Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG-460N an automatically assigned IP address depending on your ISP address. This is the default selection. Exit Click Exit to close the wizard screen without saving. 4.4.4... IP Subnet Type the subnet mask assigned to you by your two branch offices, you can assign any IP addresses to the hosts without problems. However, the NBG-460N User's Guide 55 If you choose this option If your ISP did not assign you a fixed IP your ISP. If your networks are ...
User Guide
Page 76
...you to prioritize VoIP, e-mail and MSN Messenger services. Congratulations! However, you how to configure the bandwidth management feature on the NBG-460N to Section 5.4.2 on an application or subnet. To check this example, your Network This section shows you still need to add... by Application For this VPN connection click VPN > SA Monitor in the Advanced options are already pre-defined. ZyXEL's bandwidth management feature allows you are still having problems make sure the VPN settings in the Web Configurator. In the Priority Queue table, VoIP and e-mail services are...
...you to prioritize VoIP, e-mail and MSN Messenger services. Congratulations! However, you how to configure the bandwidth management feature on the NBG-460N to Section 5.4.2 on an application or subnet. To check this example, your Network This section shows you still need to add... by Application For this VPN connection click VPN > SA Monitor in the Advanced options are already pre-defined. ZyXEL's bandwidth management feature allows you are still having problems make sure the VPN settings in the Web Configurator. In the Priority Queue table, VoIP and e-mail services are...
User Guide
Page 121
.... To do so by using the Wizard. 1 On the iPod Touch's main screen press Settings and then press Wi-fi. 2 On the list of the NBG-460N into the Web Configurator from your computer. The default IP address for any security settings enter them and press connect. Note: If you access from... your computer and try checking the security settings in the Web Configurator you have problems connecting then try again. 7.13.1 Accessing the iPod Touch Web Configurator Now that address.
.... To do so by using the Wizard. 1 On the iPod Touch's main screen press Settings and then press Wi-fi. 2 On the list of the NBG-460N into the Web Configurator from your computer. The default IP address for any security settings enter them and press connect. Note: If you access from... your computer and try checking the security settings in the Web Configurator you have problems connecting then try again. 7.13.1 Accessing the iPod Touch Web Configurator Now that address.
User Guide
Page 159
... Screen Some services use the service in the same manner. The problem is that sends traffic to the WAN to request a service with a specific port number and protocol ("incoming" port), the NBG-460N forwards the traffic to manually replace the LAN computer's IP address in... in the forwarding port with another computer on the Internet. After that computer's connection for that sent the request. NBG-460N User's Guide 159 Trigger port forwarding solves this problem by allowing computers on a different LAN computer, you want a different LAN computer to a single LAN IP address...
... Screen Some services use the service in the same manner. The problem is that sends traffic to the WAN to request a service with a specific port number and protocol ("incoming" port), the NBG-460N forwards the traffic to manually replace the LAN computer's IP address in... in the forwarding port with another computer on the Internet. After that computer's connection for that sent the request. NBG-460N User's Guide 159 Trigger port forwarding solves this problem by allowing computers on a different LAN computer, you want a different LAN computer to a single LAN IP address...
User Guide
Page 171
...You can use IP alias instead of asymmetrical route topology on the LAN in different subnets, all returning network traffic must pass through the NBG-460N. The following steps describe such a scenario. 1 A computer on the LAN initiates a connection by sending a SYN packet to a receiving server on ...asymmetrical routes may let traffic from the WAN goes to the NBG-460N. 4 The NBG-460N then sends it to the computer on the network (not reset the connection). Figure 111 Using IP Alias to partition your LAN. IP Alias allow you to Solve the Triangle Route Problem NBG-460N User's Guide 171
...You can use IP alias instead of asymmetrical route topology on the LAN in different subnets, all returning network traffic must pass through the NBG-460N. The following steps describe such a scenario. 1 A computer on the LAN initiates a connection by sending a SYN packet to a receiving server on ...asymmetrical routes may let traffic from the WAN goes to the NBG-460N. 4 The NBG-460N then sends it to the computer on the network (not reset the connection). Figure 111 Using IP Alias to partition your LAN. IP Alias allow you to Solve the Triangle Route Problem NBG-460N User's Guide 171
User Guide
Page 191
...address, but not both . When the local IP address is active at any time. Two active SAs cannot have problems using Transport or Tunnel mode, but not both . NBG-460N User's Guide 191 In order for IPSec VPN) You can have NAT traversal enabled. If there is generally recommended....can have IP addresses in this check box to enable NAT traversal. IPSec Keying Mode DNS Server (for an IPSec router behind your NBG-460N. The NBG-460N assigns this additional DNS server to find other computers and servers on the LAN behind a NAT router to receive an initiating IPSec packet...
...address, but not both . When the local IP address is active at any time. Two active SAs cannot have problems using Transport or Tunnel mode, but not both . NBG-460N User's Guide 191 In order for IPSec VPN) You can have NAT traversal enabled. If there is generally recommended....can have IP addresses in this check box to enable NAT traversal. IPSec Keying Mode DNS Server (for an IPSec router behind your NBG-460N. The NBG-460N assigns this additional DNS server to find other computers and servers on the LAN behind a NAT router to receive an initiating IPSec packet...
User Guide
Page 196
.... If there is active at any protocol. The NBG-460N assigns this check box to find other computers and servers on the VPN to have problems using Transport or Tunnel mode, but not both. ...vulnerable to protect against replay attacks. NAT traversal allows you have the NBG-460N automatically reinitiate the SA after the SA lifetime times out, even if there is the default ...and signifies any time. 196 NBG-460N User's Guide As a VPN setup is processing intensive, the system is generally recommended. Table 66...
.... If there is active at any protocol. The NBG-460N assigns this check box to find other computers and servers on the VPN to have problems using Transport or Tunnel mode, but not both. ...vulnerable to protect against replay attacks. NAT traversal allows you have the NBG-460N automatically reinitiate the SA after the SA lifetime times out, even if there is the default ...and signifies any time. 196 NBG-460N User's Guide As a VPN setup is processing intensive, the system is generally recommended. Table 66...
User Guide
Page 201
...without making any changes. 15.4.3 VPN Rule Setup (Manual) Use this screen to use for encryption. You should only do not establish an IKE SA. NBG-460N User's Guide 201 Click Basic... Click Apply to establish a VPN tunnel quickly, for example, for each IPSec SA. Select Manual in Figure 123 on the...SA using manual keys, you have problems with IKE key management. to go to begin configuring this as shown in the IPSec Keying Mode field on page 202. 15.4.3.1 IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys, the NBG-460N and remote IPSec router do this...
...without making any changes. 15.4.3 VPN Rule Setup (Manual) Use this screen to use for encryption. You should only do not establish an IKE SA. NBG-460N User's Guide 201 Click Basic... Click Apply to establish a VPN tunnel quickly, for example, for each IPSec SA. Select Manual in Figure 123 on the...SA using manual keys, you have problems with IKE key management. to go to begin configuring this as shown in the IPSec Keying Mode field on page 202. 15.4.3.1 IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys, the NBG-460N and remote IPSec router do this...
User Guide
Page 203
...Local IP addresses must be greater than that have IP addresses in this IPSec rule's range of computers on the LAN behind your NBG-460N. Local Port Start 0 is the default and signifies any time. This port number must be static and correspond to the remote... on your LAN behind your NBG-460N. Local Address Two active SAs can have problems using IKE key management. Local Address End /Mask To specify IP addresses on the LAN behind your NBG-460N. NBG-460N User's Guide 203 The NBG-460N assigns this additional DNS server to the NBG-460N's DHCP clients that specified in...
...Local IP addresses must be greater than that have IP addresses in this IPSec rule's range of computers on the LAN behind your NBG-460N. Local Port Start 0 is the default and signifies any time. This port number must be static and correspond to the remote... on your LAN behind your NBG-460N. Local Address Two active SAs can have problems using IKE key management. Local Address End /Mask To specify IP addresses on the LAN behind your NBG-460N. NBG-460N User's Guide 203 The NBG-460N assigns this additional DNS server to the NBG-460N's DHCP clients that specified in...
User Guide
Page 211
... unchanged, router X and router Y can solve this problem by the encryption and authentication algorithms. IPSec VPN includes two IPSec protocols, AH (Authentication Header, RFC 2402) and ESP (Encapsulating Security Payload, RFC 2406). AH does not support encryption, and ESP is more secure. Note: The NBG-460N and remote IPSec router must use tunnel...
... unchanged, router X and router Y can solve this problem by the encryption and authentication algorithms. IPSec VPN includes two IPSec protocols, AH (Authentication Header, RFC 2402) and ESP (Encapsulating Security Payload, RFC 2406). AH does not support encryption, and ESP is more secure. Note: The NBG-460N and remote IPSec router must use tunnel...
User Guide
Page 273
...and Network 3 Redirect datagrams for the Type of the router's LAN port. The severity is defined in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information request message 16 ... class. The "cat" is sent by the system ("RAS" displays as the category in the various log charts throughout this appendix. NBG-460N User's Guide 273 The definition of messages and notes are defined in the router's logs.
...and Network 3 Redirect datagrams for the Type of the router's LAN port. The severity is defined in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information request message 16 ... class. The "cat" is sent by the system ("RAS" displays as the category in the various log charts throughout this appendix. NBG-460N User's Guide 273 The definition of messages and notes are defined in the router's logs.
User Guide
Page 291
... the following categories. • Power, Hardware Connections, and LEDs • NBG-460N Access and Login • Internet Access • Resetting the NBG-460N to the NBG-460N. 4 If the problem continues, contact the vendor. The potential problems are using the power adaptor or cord included with the NBG-460N. 2 Make sure the power adaptor or cord is turned on. 3 Disconnect...
... the following categories. • Power, Hardware Connections, and LEDs • NBG-460N Access and Login • Internet Access • Resetting the NBG-460N to the NBG-460N. 4 If the problem continues, contact the vendor. The potential problems are using the power adaptor or cord included with the NBG-460N. 2 Make sure the power adaptor or cord is turned on. 3 Disconnect...
User Guide
Page 292
...vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the NBG-460N. 5 If the problem continues, contact the vendor. 26.2 NBG-460N Access and Login I forgot the password. 292 NBG-460N User's Guide This information is 192.168.1.1. 2 If you changed the IP address and... have forgotten it depends on your NBG-460N to change all settings back to their default. ...
...vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the NBG-460N. 5 If the problem continues, contact the vendor. 26.2 NBG-460N Access and Login I forgot the password. 292 NBG-460N User's Guide This information is 192.168.1.1. 2 If you changed the IP address and... have forgotten it depends on your NBG-460N to change all settings back to their default. ...
User Guide
Page 293
... Quick Start Guide. 3 Make sure your computer's IP address is in the same subnet as Telnet. NBG-460N User's Guide 293 Advanced Suggestions • Try to access the NBG-460N using another service, such as the NBG-460N. Chapter 26 Troubleshooting 1 The default password is 1234. 2 If this step.) • If there.... 5 Reset the device to a LAN/ETHERNET port. See Section 7.3 on page 296. See Section 26.4 on page 102. 6 If the problem continues, contact the network administrator or vendor, or try to the WAN port or is no DHCP server on page 102), use a computer that there...
... Quick Start Guide. 3 Make sure your computer's IP address is in the same subnet as Telnet. NBG-460N User's Guide 293 Advanced Suggestions • Try to access the NBG-460N using another service, such as the NBG-460N. Chapter 26 Troubleshooting 1 The default password is 1234. 2 If this step.) • If there.... 5 Reset the device to a LAN/ETHERNET port. See Section 7.3 on page 296. See Section 26.4 on page 102. 6 If the problem continues, contact the network administrator or vendor, or try to the WAN port or is no DHCP server on page 102), use a computer that there...
User Guide
Page 295
...Section 1.6 on the same network. 6 If the problem continues, contact your ISP. These fields are case-sensitive, so make sure [Caps Lock] is slow or intermittent. 1 There might be a lot of information, try moving the NBG-460N closer to the AP if possible, and look around ... the signal strength is sending or receiving a lot of traffic on page 27. 2 Reboot the NBG-460N. 3 If the problem continues, contact your ISP. The Internet connection is not on ). 3 Reboot the NBG-460N. NBG-460N User's Guide 295 I had access to the Internet (with the wireless network (for example, microwaves...
...Section 1.6 on the same network. 6 If the problem continues, contact your ISP. These fields are case-sensitive, so make sure [Caps Lock] is slow or intermittent. 1 There might be a lot of information, try moving the NBG-460N closer to the AP if possible, and look around ... the signal strength is sending or receiving a lot of traffic on page 27. 2 Reboot the NBG-460N. 3 If the problem continues, contact your ISP. The Internet connection is not on ). 3 Reboot the NBG-460N. NBG-460N User's Guide 295 I had access to the Internet (with the wireless network (for example, microwaves...
User Guide
Page 296
...You have been restored. The default settings have to Its Factory Defaults If you reset the NBG-460N, you lose all of your changes again. Chapter 26 Troubleshooting 4 If the problem continues, contact the network administrator or vendor, or try one of the changes you might... consider activating it. If the NBG-460N does not restart automatically, disconnect and reconnect the NBG-460N's power. Advanced Suggestions • Check the ...
...You have been restored. The default settings have to Its Factory Defaults If you reset the NBG-460N, you lose all of your changes again. Chapter 26 Troubleshooting 4 If the problem continues, contact the network administrator or vendor, or try one of the changes you might... consider activating it. If the NBG-460N does not restart automatically, disconnect and reconnect the NBG-460N's power. Advanced Suggestions • Check the ...
User Guide
Page 324
...a small organization and your Internet access is through an ISP, the ISP can provide you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0...255.255 • 192.168.0.0 - 192.168.255.255 You can be assigned from a private network. Regardless of IP Address Space. 324 NBG-460N User's Guide Appendix B IP Addresses and Subnetting that you are instructed to do not create an arbitrary IP address; You don't need to change ...
...a small organization and your Internet access is through an ISP, the ISP can provide you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0...255.255 • 192.168.0.0 - 192.168.255.255 You can be assigned from a private network. Regardless of IP Address Space. 324 NBG-460N User's Guide Appendix B IP Addresses and Subnetting that you are instructed to do not create an arbitrary IP address; You don't need to change ...