User Guide
Page 3
...suggestions for additional support documentation and product certifications. If you cannot contact your vendor, then contact a ZyXEL office for contact information. Please have at least a basic knowledge of problems that cannot be solved by using the Web Configurator. About This User's Guide About This User's ... network and configuring for Internet access. • Supporting Disc Refer to the included CD for support documents. • ZyXEL Web Site Please refer to configure the NBG-460N using this manual, you should have the following address, or use e-mail instead. See http://www...
...suggestions for additional support documentation and product certifications. If you cannot contact your vendor, then contact a ZyXEL office for contact information. Please have at least a basic knowledge of problems that cannot be solved by using the Web Configurator. About This User's Guide About This User's ... network and configuring for Internet access. • Supporting Disc Refer to the included CD for support documents. • ZyXEL Web Site Please refer to configure the NBG-460N using this manual, you should have the following address, or use e-mail instead. See http://www...
User Guide
Page 4
Brief description of the problem and the steps you received your device. About This User's Guide • Date that you took to solve it. 4 NBG-460N User's Guide
Brief description of the problem and the steps you received your device. About This User's Guide • Date that you took to solve it. 4 NBG-460N User's Guide
User Guide
Page 55
... to the previous screen. Figure 25 Wizard Step 3: Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG-460N an automatically assigned IP address depending on your ISP (if given). Back Click Back to return to the previous screen. Use fixed IP address provided... The following table describes the labels in the same subnet as your two branch offices, you can assign any IP addresses to the hosts without problems. However, the NBG-460N User's Guide 55
... to the previous screen. Figure 25 Wizard Step 3: Your IP Address The following wizard screen allows you to assign a fixed IP address or give the NBG-460N an automatically assigned IP address depending on your ISP (if given). Back Click Back to return to the previous screen. Use fixed IP address provided... The following table describes the labels in the same subnet as your two branch offices, you can assign any IP addresses to the hosts without problems. However, the NBG-460N User's Guide 55
User Guide
Page 76
... on an application or subnet. Chapter 5 Tutorials Pinging is not successful check the VPN settings on the NBG-460N to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you still need to add MSN Messenger in the Web Configurator. However, you to...section shows you are still having problems make sure the VPN settings in the Advanced options are already pre-defined. Figure 54 Tutorial: SA Monitor If pinging is successful which means a VPN tunnel has been established between Bob and Jack's NBG-460Ns. For more information on VPN...
... on an application or subnet. Chapter 5 Tutorials Pinging is not successful check the VPN settings on the NBG-460N to limit the bandwidth for specific kinds of outgoing traffic. ZyXEL's bandwidth management feature allows you still need to add MSN Messenger in the Web Configurator. However, you to...section shows you are still having problems make sure the VPN settings in the Advanced options are already pre-defined. Figure 54 Tutorial: SA Monitor If pinging is successful which means a VPN tunnel has been established between Bob and Jack's NBG-460Ns. For more information on VPN...
User Guide
Page 121
... computer. If you have not configured your wireless settings yet you can access the iPod Touch Web Configurator. The pre-shared key is 192.168.1.1. NBG-460N User's Guide 121 To do this follow the steps below: 1 Launch the iPod Touch's web browser from the main screen. See Chapter 4 on page 45... Wizard in the Web Configurator from your computer and try again. 7.13.1 Accessing the iPod Touch Web Configurator Now that address. Note: If you have problems connecting then try checking the security settings in the Web Configurator you access from your computer.
... computer. If you have not configured your wireless settings yet you can access the iPod Touch Web Configurator. The pre-shared key is 192.168.1.1. NBG-460N User's Guide 121 To do this follow the steps below: 1 Launch the iPod Touch's web browser from the main screen. See Chapter 4 on page 45... Wizard in the Web Configurator from your computer and try again. 7.13.1 Accessing the iPod Touch Web Configurator Now that address. Note: If you have problems connecting then try checking the security settings in the Web Configurator you access from your computer.
User Guide
Page 159
..., click Network > NAT > Advanced. After that computer's connection for that sent the request. NBG-460N User's Guide 159 Chapter 11 Network Address Translation (NAT) addresses and the ISP assigns the WAN IP address. Trigger port forwarding solves this problem by allowing computers on the client side and a dedicated range of the computer that...
..., click Network > NAT > Advanced. After that computer's connection for that sent the request. NBG-460N User's Guide 159 Chapter 11 Network Address Translation (NAT) addresses and the ISP assigns the WAN IP address. Trigger port forwarding solves this problem by allowing computers on the client side and a dedicated range of the computer that...
User Guide
Page 171
... IP alias instead of asymmetrical route topology on the network (not reset the connection). IP Alias allow you to Solve the Triangle Route Problem NBG-460N User's Guide 171 Figure 111 Using IP Alias to partition your network into logical sections over the same interface. A better solution is...Allowing asymmetrical routes may let traffic from the WAN goes to the NBG-460N. 4 The NBG-460N then sends it to the LAN without passing through the NBG-460N to put the NBG-460N and the backup gateway on the WAN. 2 The NBG-460N reroutes the packet to Gateway A, which is to use of allowing ...
... IP alias instead of asymmetrical route topology on the network (not reset the connection). IP Alias allow you to Solve the Triangle Route Problem NBG-460N User's Guide 171 Figure 111 Using IP Alias to partition your network into logical sections over the same interface. A better solution is...Allowing asymmetrical routes may let traffic from the WAN goes to the NBG-460N. 4 The NBG-460N then sends it to the LAN without passing through the NBG-460N to put the NBG-460N and the backup gateway on the WAN. 2 The NBG-460N reroutes the packet to Gateway A, which is to use of allowing ...
User Guide
Page 191
...time. Local Address End /Mask To specify IP addresses on a network by their subnet mask, enter a (static) IP address on your LAN behind your NBG-460N. When the local IP address is generally recommended. Chapter 15 IPSec VPN Table 65 Security > VPN > General > Rule Setup: IKE (Basic) (continued... this additional DNS server to find other computers and servers on the VPN to the NBG-460N's DHCP clients that services the VPN, type its IP address here. Remote IP addresses must also have problems using Transport or Tunnel mode, but not both . IKE provides more protection so it ...
...time. Local Address End /Mask To specify IP addresses on a network by their subnet mask, enter a (static) IP address on your LAN behind your NBG-460N. When the local IP address is generally recommended. Chapter 15 IPSec VPN Table 65 Security > VPN > General > Rule Setup: IKE (Basic) (continued... this additional DNS server to find other computers and servers on the VPN to the NBG-460N's DHCP clients that services the VPN, type its IP address here. Remote IP addresses must also have problems using Transport or Tunnel mode, but not both . IKE provides more protection so it ...
User Guide
Page 196
... the VPN to set the NAT router to forward UDP ports 500 and 4500 to enable NAT traversal. The NBG-460N assigns this additional DNS server to activate this check box to the NBG-460N's DHCP clients that services the VPN, type its IP address here. Table 66 Security > VPN > General > Rule .... NAT traversal allows you have NAT traversal enabled. Select IKE or Manual from the drop-down list box. Local IP addresses must also have problems using Transport or Tunnel mode, but not both. Manual is vulnerable to Denial of local addresses. You can detect and reject old or duplicate...
... the VPN to set the NAT router to forward UDP ports 500 and 4500 to enable NAT traversal. The NBG-460N assigns this additional DNS server to activate this check box to the NBG-460N's DHCP clients that services the VPN, type its IP address here. Table 66 Security > VPN > General > Rule .... NAT traversal allows you have NAT traversal enabled. Select IKE or Manual from the drop-down list box. Local IP addresses must also have problems using Transport or Tunnel mode, but not both. Manual is vulnerable to Denial of local addresses. You can detect and reject old or duplicate...
User Guide
Page 201
... key and authentication key. Manual key management is more secure but takes more time. As a result, an IPSec SA using manual keys, the NBG-460N and remote IPSec router do not establish an IKE SA. Click Reset to configure VPN rules (tunnels) that is used to establish a VPN tunnel... group to provide the encryption key and the authentication key the NBG-460N and remote IPSec router use manual keys. There is not as secure as a temporary solution, however, because it is no DH key exchange, so you have problems with IKE key management. Choices are also some characteristics of SA...
... key and authentication key. Manual key management is more secure but takes more time. As a result, an IPSec SA using manual keys, the NBG-460N and remote IPSec router do not establish an IKE SA. Click Reset to configure VPN rules (tunnels) that is used to establish a VPN tunnel... group to provide the encryption key and the authentication key the NBG-460N and remote IPSec router use manual keys. There is not as secure as a temporary solution, however, because it is no DH key exchange, so you have problems with IKE key management. Choices are also some characteristics of SA...
User Guide
Page 203
...between the same local and remote IP addresses, as long as only one is a subnet address, enter a subnet mask on your LAN behind your NBG-460N. You can have problems using IKE key management. Manual is a useful option for UDP, etc. 0 is a range, enter the end (static) IP address, in ...this IPSec rule's range of computers on the LAN behind your NBG-460N. If Local Port Start is generally recommended. Local IP addresses must be static and...
...between the same local and remote IP addresses, as long as only one is a subnet address, enter a subnet mask on your LAN behind your NBG-460N. You can have problems using IKE key management. Manual is a useful option for UDP, etc. 0 is a range, enter the end (static) IP address, in ...this IPSec rule's range of computers on the LAN behind your NBG-460N. If Local Port Start is generally recommended. Local IP addresses must be static and...
User Guide
Page 211
... 15.6.8 Encapsulation There are illustrated below. Figure 130 VPN: Transport and Tunnel Mode Encapsulation Original Packet IP Header TCP Header Data NBG-460N User's Guide 211 It also specifies how much of each packet is protected by enabling NAT traversal. These modes are two ways... to set up NAT traversal. • Enable NAT traversal on the NBG-460N and remote IPSec router. • Configure the NAT router to forward these packets unchanged, router X and router Y can solve this problem by the encryption and authentication algorithms. IPSec VPN includes two IPSec protocols,...
... 15.6.8 Encapsulation There are illustrated below. Figure 130 VPN: Transport and Tunnel Mode Encapsulation Original Packet IP Header TCP Header Data NBG-460N User's Guide 211 It also specifies how much of each packet is protected by enabling NAT traversal. These modes are two ways... to set up NAT traversal. • Enable NAT traversal on the NBG-460N and remote IPSec router. • Configure the NAT router to forward these packets unchanged, router X and router Y can solve this problem by the encryption and authentication algorithms. IPSec VPN includes two IPSec protocols,...
User Guide
Page 273
... the datagrams for output to the next network on the route to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information ... the Host 2 Redirect datagrams for the Type of Service and Network 3 Redirect datagrams for the Type of the router's LAN port. NBG-460N User's Guide 273 The severity is the same as the system name if you haven't configured one) when the router generates a syslog...
... the datagrams for output to the next network on the route to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information ... the Host 2 Redirect datagrams for the Type of Service and Network 3 Redirect datagrams for the Type of the router's LAN port. NBG-460N User's Guide 273 The severity is the same as the system name if you haven't configured one) when the router generates a syslog...
User Guide
Page 291
...normal behavior of the LEDs does not behave as expected. 1 Make sure you might encounter. The potential problems are using the power adaptor or cord included with the NBG-460N. 2 Make sure the power adaptor or cord is turned on page 27. CHAPTER 26 Troubleshooting This chapter... offers some suggestions to the NBG-460N. 4 If the problem continues, contact the vendor. Make sure the power source is connected to the NBG-460N and plugged in to Its Factory Defaults • Wireless Router/AP Troubleshooting • Advanced...
...normal behavior of the LEDs does not behave as expected. 1 Make sure you might encounter. The potential problems are using the power adaptor or cord included with the NBG-460N. 2 Make sure the power adaptor or cord is turned on page 27. CHAPTER 26 Troubleshooting This chapter... offers some suggestions to the NBG-460N. 4 If the problem continues, contact the vendor. Make sure the power source is connected to the NBG-460N and plugged in to Its Factory Defaults • Wireless Router/AP Troubleshooting • Advanced...
User Guide
Page 292
... damage. Contact the vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the NBG-460N. 5 If the problem continues, contact the vendor. 26.2 NBG-460N Access and Login I forgot the password. 292 NBG-460N User's Guide See Section 26.4 on page 296 in the Troubleshooting for more information. 4 Reset your network. I don...
... damage. Contact the vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the NBG-460N. 5 If the problem continues, contact the vendor. 26.2 NBG-460N Access and Login I forgot the password. 292 NBG-460N User's Guide See Section 26.4 on page 296 in the Troubleshooting for more information. 4 Reset your network. I don...
User Guide
Page 293
...up windows and has JavaScripts and Java enabled. See Section 7.3 on page 102. 6 If the problem continues, contact the network administrator or vendor, or try to access the NBG-460N using another service, such as the NBG-460N. See Section 26.4 on your network, make sure your computer's IP address is in the same...on page 102. • If there is no DHCP server on page 296. If you can access the NBG-460N, check the remote management settings and firewall rules to find out why the NBG-460N does not respond to HTTP. • If your computer is connected to the WAN port or is connected ...
...up windows and has JavaScripts and Java enabled. See Section 7.3 on page 102. 6 If the problem continues, contact the network administrator or vendor, or try to access the NBG-460N using another service, such as the NBG-460N. See Section 26.4 on your network, make sure your computer's IP address is in the same...on page 102. • If there is no DHCP server on page 296. If you can access the NBG-460N, check the remote management settings and firewall rules to find out why the NBG-460N does not respond to HTTP. • If your computer is connected to the WAN port or is connected ...
User Guide
Page 295
...; Select Access Point if your device bridges traffic between clients on page 27. 2 Reboot the NBG-460N. 3 If the problem continues, contact your ISP. See the Quick Start Guide and Section 1.6 on the same network. 6 If the problem continues, contact your ISP. If the signal strength is low, try closing some programs that might...
...; Select Access Point if your device bridges traffic between clients on page 27. 2 Reboot the NBG-460N. 3 If the problem continues, contact your ISP. See the Quick Start Guide and Section 1.6 on the same network. 6 If the problem continues, contact your ISP. If the signal strength is low, try closing some programs that might...
User Guide
Page 296
.... Release the RESET button when the power LED begins to 1234. If the NBG-460N does not restart automatically, disconnect and reconnect the NBG-460N's power. Then, follow the directions above again. 296 NBG-460N User's Guide The NBG460N re-loads its default settings, and the password resets to...push the RESET button. If it is disabled, you might consider activating it . To reset the NBG-460N, 1 Make sure the power LED is "1234". Chapter 26 Troubleshooting 4 If the problem continues, contact the network administrator or vendor, or try one of your changes again. If it...
.... Release the RESET button when the power LED begins to 1234. If the NBG-460N does not restart automatically, disconnect and reconnect the NBG-460N's power. Then, follow the directions above again. 296 NBG-460N User's Guide The NBG460N re-loads its default settings, and the password resets to...push the RESET button. If it is disabled, you might consider activating it . To reset the NBG-460N, 1 Make sure the power LED is "1234". Chapter 26 Troubleshooting 4 If the problem continues, contact the network administrator or vendor, or try one of your changes again. If it...
User Guide
Page 324
If you with the Internet addresses for your local networks. Appendix B IP Addresses and Subnetting that you are instructed to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 - 10.255.255.... only between two branch offices, for example) you can obtain your networks are part of your network administrator for Management of IP Address Space. 324 NBG-460N User's Guide You don't need to change the subnet mask computed by the...
If you with the Internet addresses for your local networks. Appendix B IP Addresses and Subnetting that you are instructed to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 - 10.255.255.... only between two branch offices, for example) you can obtain your networks are part of your network administrator for Management of IP Address Space. 324 NBG-460N User's Guide You don't need to change the subnet mask computed by the...