User Guide
Page 3
...8226; Warranty Information. See http://www.zyxel.com/ web/contact_us.php for the region in which you bought the device. NBG-460N User's Guide 3 If you cannot contact your vendor, then contact a ZyXEL office for contact information. User Guide Feedback Help us help you get...away. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. About This User's Guide About This User's Guide Intended Audience This manual is designed to configure the NBG-460N using this manual, you should have the following...
...8226; Warranty Information. See http://www.zyxel.com/ web/contact_us.php for the region in which you bought the device. NBG-460N User's Guide 3 If you cannot contact your vendor, then contact a ZyXEL office for contact information. User Guide Feedback Help us help you get...away. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. About This User's Guide About This User's Guide Intended Audience This manual is designed to configure the NBG-460N using this manual, you should have the following...
User Guide
Page 16
... (IKE Phase 2) Overview 187 15.4 The General Screen ...188 15.4.1 VPN Rule Setup (Basic 189 15.4.2 VPN Rule Setup (Advanced 194 15.4.3 VPN Rule Setup (Manual 201 15.5 The SA Monitor Screen 205 15.6 Technical Reference ...206 15.6.1 VPN and Remote Management 206 15.6.2 IKE SA Proposal ...207 15.6.3 Diffie-Hellman... ...217 16.2 What You Can Do ...217 16.3 IP Static Route Screen ...218 16.3.1 Static Route Setup Screen 219 Chapter 17 Bandwidth Management...221 16 NBG-460N User's Guide
... (IKE Phase 2) Overview 187 15.4 The General Screen ...188 15.4.1 VPN Rule Setup (Basic 189 15.4.2 VPN Rule Setup (Advanced 194 15.4.3 VPN Rule Setup (Manual 201 15.5 The SA Monitor Screen 205 15.6 Technical Reference ...206 15.6.1 VPN and Remote Management 206 15.6.2 IKE SA Proposal ...207 15.6.3 Diffie-Hellman... ...217 16.2 What You Can Do ...217 16.3 IP Static Route Screen ...218 16.3.1 Static Route Setup Screen 219 Chapter 17 Bandwidth Management...221 16 NBG-460N User's Guide
User Guide
Page 29
... that also has WPS activated. For more information on using WPS, see Section 5.2.1 on a device, it has two minutes to configure security settings manually. NBG-460N User's Guide 29 Depending on the device itself, or in each of the two devices. WPS allows you can either press a button (on the devices... connect and set up a secure wireless network. WPS is an industry standard specification, defined by themselves. CHAPTER 2 The WPS Button 2.1 Overview Your NBG-460N supports WiFi Protected Setup (WPS), which is an easy way to set up a secure network by the WiFi Alliance.
... that also has WPS activated. For more information on using WPS, see Section 5.2.1 on a device, it has two minutes to configure security settings manually. NBG-460N User's Guide 29 Depending on the device itself, or in each of the two devices. WPS allows you can either press a button (on the devices... connect and set up a secure wireless network. WPS is an industry standard specification, defined by themselves. CHAPTER 2 The WPS Button 2.1 Overview Your NBG-460N supports WiFi Protected Setup (WPS), which is an easy way to set up a secure network by the WiFi Alliance.
User Guide
Page 35
... WAN Ethernet adapter MAC Address of your NBG-460N's present date and time. DHCP This ...up . This is the System Name you select manually. - Chapter 3 Introducing the Web Configurator Table...Information System Name This is the total time the NBG-460N has been on. WAN Information - IP Address... adapter MAC Address of wireless security the NBG-460N is currently using . - 802.11 Mode... of every time interval or to identify the NBG-460N in the Status screen. On, Off or .... Channel This shows the channel number which the NBG-460N is using over the wireless LAN. - Operating...
... WAN Ethernet adapter MAC Address of your NBG-460N's present date and time. DHCP This ...up . This is the System Name you select manually. - Chapter 3 Introducing the Web Configurator Table...Information System Name This is the total time the NBG-460N has been on. WAN Information - IP Address... adapter MAC Address of wireless security the NBG-460N is currently using . - 802.11 Mode... of every time interval or to identify the NBG-460N in the Status screen. On, Off or .... Channel This shows the channel number which the NBG-460N is using over the wireless LAN. - Operating...
User Guide
Page 40
... Name This field displays the computer host name. 40 NBG-460N User's Guide Chapter 3 Introducing the Web Configurator bar represents the percentage of unused bandwidth and the blue color represents the percentage of all network clients using the NBG-460N's DHCP server. Figure 9 Summary: BW MGMT Monitor ...else the computer must be manually configured. When configured as a DHCP server or disable it. Read-only information here relates to obtain TCP/IP configuration at start-up from a server. You can configure the NBG-460N's LAN as a server, the NBG-460N provides the TCP/IP ...
... Name This field displays the computer host name. 40 NBG-460N User's Guide Chapter 3 Introducing the Web Configurator bar represents the percentage of unused bandwidth and the blue color represents the percentage of all network clients using the NBG-460N's DHCP server. Figure 9 Summary: BW MGMT Monitor ...else the computer must be manually configured. When configured as a DHCP server or disable it. Read-only information here relates to obtain TCP/IP configuration at start-up from a server. You can configure the NBG-460N's LAN as a server, the NBG-460N provides the TCP/IP ...
User Guide
Page 58
...manually entering a MAC address. The DNS server is extremely important because without saving. 4.4.9 WAN MAC Address Every Ethernet device has a unique MAC (Media Access Control) address. Click Exit to close the wizard screen without it, you specify here) to configure the WAN port's MAC address by either using the NBG-460N... of a computer before you change unless you can access it is 58 NBG-460N User's Guide Subnet mask 255.255.255.0 Gateway (or default route) 192.168.1.1(NBG-460N LAN IP) This screen allows users to resolve domain names for example, 00:A0:C5:00:00:02. ...
...manually entering a MAC address. The DNS server is extremely important because without saving. 4.4.9 WAN MAC Address Every Ethernet device has a unique MAC (Media Access Control) address. Click Exit to close the wizard screen without it, you specify here) to configure the WAN port's MAC address by either using the NBG-460N... of a computer before you change unless you can access it is 58 NBG-460N User's Guide Subnet mask 255.255.255.0 Gateway (or default route) 192.168.1.1(NBG-460N LAN IP) This screen allows users to resolve domain names for example, 00:A0:C5:00:00:02. ...
User Guide
Page 83
...the date and time on which your device. - Heap memory refers to the memory that the NBG-460N supports. NBG-460N User's Guide 83 Status This shows the current status of the NBG-460N's processing ability is autmatically assigned to your device. - Operating Channel This shows the channel number ...This shows whether the advanced screens of your NBG-460N or you can select manually. - Chapter 6 AP Mode The following table describes the labels shown in order to be able to connect to the NBG-460N - On, Off or Off by ZyNOS (ZyXEL Network Operating System) and is the firmware...
...the date and time on which your device. - Heap memory refers to the memory that the NBG-460N supports. NBG-460N User's Guide 83 Status This shows the current status of the NBG-460N's processing ability is autmatically assigned to your device. - Operating Channel This shows the channel number ...This shows whether the advanced screens of your NBG-460N or you can select manually. - Chapter 6 AP Mode The following table describes the labels shown in order to be able to connect to the NBG-460N - On, Off or Off by ZyNOS (ZyXEL Network Operating System) and is the firmware...
User Guide
Page 92
...with strong security, without having to configure security settings manually. • Use the WPS Station screen (Section 7.9 on page 110) to add a wireless station using the wireless network. Security stops unauthorized devices from connecting to the NBG-460N. • Use the Advanced screen (Section 7.6 on... the name of wireless security you can hide the SSID instead, in which case the AP does not broadcast the SSID. 92 NBG-460N User's Guide Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information....
...with strong security, without having to configure security settings manually. • Use the WPS Station screen (Section 7.9 on page 110) to add a wireless station using the wireless network. Security stops unauthorized devices from connecting to the NBG-460N. • Use the Advanced screen (Section 7.6 on... the name of wireless security you can hide the SSID instead, in which case the AP does not broadcast the SSID. 92 NBG-460N User's Guide Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information....
User Guide
Page 96
... client to associate this screen. Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow any data encryption. 96 NBG-460N User's Guide After you wish to manually select the channel using . Chapter 7 Wireless LAN Table 29 Network > Wireless LAN > General LABEL DESCRIPTION Channel Selection Set the operating frequency/channel...
... client to associate this screen. Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow any data encryption. 96 NBG-460N User's Guide After you wish to manually select the channel using . Chapter 7 Wireless LAN Table 29 Network > Wireless LAN > General LABEL DESCRIPTION Channel Selection Set the operating frequency/channel...
User Guide
Page 115
...7.12.1 iPod Touch Web Configurator The iPod Touch Web Configurator displays when you are allowed but that should not affect other applications and users. NBG-460N User's Guide 115 WPS allows you are prompted for traffic that is affected by long delays, such as bulk transfers and print jobs that ...are connecting to configure security settings manually. Then, they connect and set up a secure network by themselves. To connect wirelessly to the iPod Touch Web Configurator with an ...
...7.12.1 iPod Touch Web Configurator The iPod Touch Web Configurator displays when you are allowed but that should not affect other applications and users. NBG-460N User's Guide 115 WPS allows you are prompted for traffic that is affected by long delays, such as bulk transfers and print jobs that ...are connecting to configure security settings manually. Then, they connect and set up a secure network by themselves. To connect wirelessly to the iPod Touch Web Configurator with an ...
User Guide
Page 124
...a lower layer protocol. It is 204.217.0.2. It can access it , you must know the IP address of www.zyxel.com is used by the ISP each time the NBG-460N tries to -Point Tunneling Protocol), they should also provide a username and password (and service name) for instance, the ...you sign up Internet connection using PPPoE (PPP over Ethernet) or PPTP (Point-to access the Internet. The NBG-460N can get the DNS server address from the ISP. 124 NBG-460N User's Guide If your ISP offers a dial-up . If your ISP gives you DNS server addresses, manually enter them in other networks.
...a lower layer protocol. It is 204.217.0.2. It can access it , you must know the IP address of www.zyxel.com is used by the ISP each time the NBG-460N tries to -Point Tunneling Protocol), they should also provide a username and password (and service name) for instance, the ...you sign up Internet connection using PPPoE (PPP over Ethernet) or PPTP (Point-to access the Internet. The NBG-460N can get the DNS server address from the ISP. 124 NBG-460N User's Guide If your ISP offers a dial-up . If your ISP gives you DNS server addresses, manually enter them in other networks.
User Guide
Page 130
...option when the WAN port is the default selection. The MAC address section allows users to Confirm - Enter the DNS server's IP address in to the right. Enter how often (in minutes) the NBG-460N logs in the field to the service. This is used as a regular Ethernet.... The following fields do not configure a DNS server, you do not appear with the user name above. • Retype to configure the WAN port's MAC address by either using the NBG-460N's MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. 130 NBG-460N User's Guide
...option when the WAN port is the default selection. The MAC address section allows users to Confirm - Enter the DNS server's IP address in to the right. Enter how often (in minutes) the NBG-460N logs in the field to the service. This is used as a regular Ethernet.... The following fields do not configure a DNS server, you do not appear with the user name above. • Retype to configure the WAN port's MAC address by either using the NBG-460N's MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. 130 NBG-460N User's Guide
User Guide
Page 133
..., and enter the same IP address, the second UserDefined changes to begin configuring this option If the ISP assigned a fixed IP address. NBG-460N User's Guide 133 DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP did not assign you a fixed IP ... Select None if you change unless you do not configure a DNS server, you must know the IP address of the computer on your LAN or manually entering a MAC address. The MAC address section allows users to configure DNS servers.
..., and enter the same IP address, the second UserDefined changes to begin configuring this option If the ISP assigned a fixed IP address. NBG-460N User's Guide 133 DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP did not assign you a fixed IP ... Select None if you change unless you do not configure a DNS server, you must know the IP address of the computer on your LAN or manually entering a MAC address. The MAC address section allows users to configure DNS servers.
User Guide
Page 136
... of the computer on your LAN or manually entering a MAC address. Click Apply to save your ISP dynamically assigns DNS server information (and the NBG-460N's WAN IP address). If you chose User-Defined, but leave the IP address set a second choice to User-Defined, and enter the same IP address...access it is successfully configured, the address will not change unless you have the IP address of each other. 136 NBG-460N User's Guide The field to the right. Select User-Defined if you change the setting or upload a different ROM file. Note: The four categories shown in the field...
... of the computer on your LAN or manually entering a MAC address. Click Apply to save your ISP dynamically assigns DNS server information (and the NBG-460N's WAN IP address). If you chose User-Defined, but leave the IP address set a second choice to User-Defined, and enter the same IP address...access it is successfully configured, the address will not change unless you have the IP address of each other. 136 NBG-460N User's Guide The field to the right. Select User-Defined if you change the setting or upload a different ROM file. Note: The four categories shown in the field...
User Guide
Page 144
... addresses and the subnet masks of a computer and the NBG-460N to be in another network, you may need to manually configure the network settings of the computer every time you want to access the Internet via the NBG-460N. The following figure depicts a scenario where a computer is...the Any IP feature on the NBG-460N. 144 NBG-460N User's Guide With the Any IP feature and NAT enabled, the NBG-460N allows a computer to access the Internet without changing the network settings (such as the NBG-460N's IP address. In a residential house where a NBG-460N is in the corporate environment. ...
... addresses and the subnet masks of a computer and the NBG-460N to be in another network, you may need to manually configure the network settings of the computer every time you want to access the Internet via the NBG-460N. The following figure depicts a scenario where a computer is...the Any IP feature on the NBG-460N. 144 NBG-460N User's Guide With the Any IP feature and NAT enabled, the NBG-460N allows a computer to access the Internet without changing the network settings (such as the NBG-460N's IP address. In a residential house where a NBG-460N is in the corporate environment. ...
User Guide
Page 147
... Protocol, RFC 2131 and RFC 2132) allows individual clients to the Section 4.4.7 on page 57 section for information on IP Address and Subnet Mask. NBG-460N User's Guide 147 Refer to Section 4.4.6 on page 56 for information on System DNS Servers. If DHCP service is assigned at start-up from a server... as a server, the NBG-460N provides the TCP/IP configuration for example, 00:A0:C5:00:00:02. Refer to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 10.2 What You Can Do • Use ...
... Protocol, RFC 2131 and RFC 2132) allows individual clients to the Section 4.4.7 on page 57 section for information on IP Address and Subnet Mask. NBG-460N User's Guide 147 Refer to Section 4.4.6 on page 56 for information on System DNS Servers. If DHCP service is assigned at start-up from a server... as a server, the NBG-460N provides the TCP/IP configuration for example, 00:A0:C5:00:00:02. Refer to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 10.2 What You Can Do • Use ...
User Guide
Page 148
... Leave the Enable DHCP Server check box selected unless your ISP instructs you to do otherwise. • Clear it to the DHCP clients. 148 NBG-460N User's Guide This field specifies the first of the IP address pool for LAN. You can also use this screen. Click Network > DHCP. Figure 99... another DHCP server on your changes back to specific individual computers based on the LAN to the NBG-460N. Click Apply to save your LAN, or else the computers must be manually configured. The following table describes the labels in this screen to configure the DNS server information that...
... Leave the Enable DHCP Server check box selected unless your ISP instructs you to do otherwise. • Clear it to the DHCP clients. 148 NBG-460N User's Guide This field specifies the first of the IP address pool for LAN. You can also use this screen. Click Network > DHCP. Figure 99... another DHCP server on your changes back to specific individual computers based on the LAN to the NBG-460N. Click Apply to save your LAN, or else the computers must be manually configured. The following table describes the labels in this screen to configure the DNS server information that...
User Guide
Page 149
...number of the static IP table entry (row). Figure 100 Network > DHCP > Advanced The following screen displays. NBG-460N User's Guide 149 The following table describes the labels in the order you specify here) to the LAN DHCP clients ...on your LAN. The NBG460N only passes this screen. IP Address Type the LAN IP address of a computer on your NBG-460N's static DHCP settings, click Network > DHCP > Advanced. Table 53 Network > DHCP > Advanced LABEL DESCRIPTION Static DHCP ... on your LAN, or else the computers must have their DNS server addresses manually configured.
...number of the static IP table entry (row). Figure 100 Network > DHCP > Advanced The following screen displays. NBG-460N User's Guide 149 The following table describes the labels in the order you specify here) to the LAN DHCP clients ...on your LAN. The NBG460N only passes this screen. IP Address Type the LAN IP address of a computer on your NBG-460N's static DHCP settings, click Network > DHCP > Advanced. Table 53 Network > DHCP > Advanced LABEL DESCRIPTION Static DHCP ... on your LAN, or else the computers must have their DNS server addresses manually configured.
User Guide
Page 159
... that computer's connection for that sends traffic to the WAN to request a service with a specific port number and protocol ("incoming" port), the NBG-460N forwards the traffic to manually replace the LAN computer's IP address in the forwarding port with another computer on the Internet. This way you do not need to... service. The screen appears as a single host on the LAN can use the service in from the server on the client side (LAN). NBG-460N User's Guide 159 With regular port forwarding you set a forwarding port in NAT to forward a service (coming in the same manner. When the...
... that computer's connection for that sends traffic to the WAN to request a service with a specific port number and protocol ("incoming" port), the NBG-460N forwards the traffic to manually replace the LAN computer's IP address in the forwarding port with another computer on the Internet. This way you do not need to... service. The screen appears as a single host on the LAN can use the service in from the server on the client side (LAN). NBG-460N User's Guide 159 With regular port forwarding you set a forwarding port in NAT to forward a service (coming in the same manner. When the...
User Guide
Page 191
... box to the remote IPSec router's configured remote IP addresses. NBG-460N User's Guide 191 IPSec Keying Mode DNS Server (for IPSec VPN) You can have problems using Transport or Tunnel mode, but not both. Select IKE or Manual from the drop-down list box. Local Address End /Mask ...To specify IP addresses on the LAN behind your NBG-460N. Manual is a subnet address, enter a subnet mask on the LAN behind your NBG-460N. For a single IP address, enter a (static) IP address on a network by their subnet mask, enter a (static) ...
... box to the remote IPSec router's configured remote IP addresses. NBG-460N User's Guide 191 IPSec Keying Mode DNS Server (for IPSec VPN) You can have problems using Transport or Tunnel mode, but not both. Select IKE or Manual from the drop-down list box. Local Address End /Mask ...To specify IP addresses on the LAN behind your NBG-460N. Manual is a subnet address, enter a subnet mask on the LAN behind your NBG-460N. For a single IP address, enter a (static) IP address on a network by their subnet mask, enter a (static) ...