User Guide
Page 2
... in operating systems, operating system versions, or if you get your NBG5715 up your network and configuring for your device. KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this manual is designed to help you installed updated firmware/software for Internet access. 2 NBG5715 User's Guide READ CAREFULLY BEFORE USE. It contains information on setting...
... in operating systems, operating system versions, or if you get your NBG5715 up your network and configuring for your device. KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this manual is designed to help you installed updated firmware/software for Internet access. 2 NBG5715 User's Guide READ CAREFULLY BEFORE USE. It contains information on setting...
User Guide
Page 5
......5 Part I: User's Guide 13 Chapter 1 Introduction ...15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center...3.1.1 Quick Setup ...23 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
......5 Part I: User's Guide 13 Chapter 1 Introduction ...15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center...3.1.1 Quick Setup ...23 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
User Guide
Page 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137....2 What You Can Do this Chapter ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137....2 What You Can Do this Chapter ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
User Guide
Page 21
...WiFi Protected Setup (WPS), which is an easy way to set up a wireless network with strong security, without having to configure security settings manually. When WPS is activated on page 57. WPS allows you can either press a button (on the device itself, or in its configuration ...utility) or enter a PIN (a unique Personal Identification Number that also has WPS activated. Figure 5 The WPS Button NBG5715 User's Guide 21 For more information on using WPS, see Chapter 9 on a device, it has two minutes to find another device that allows one device...
...WiFi Protected Setup (WPS), which is an easy way to set up a wireless network with strong security, without having to configure security settings manually. When WPS is activated on page 57. WPS allows you can either press a button (on the device itself, or in its configuration ...utility) or enter a PIN (a unique Personal Identification Number that also has WPS activated. Figure 5 The WPS Button NBG5715 User's Guide 21 For more information on using WPS, see Chapter 9 on a device, it has two minutes to find another device that allows one device...
User Guide
Page 27
... print server IPs and printer names connected to this devices listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to connect to this NBG5715. NBG5715 User's Guide 27 Table 6 ZyXEL NetUSB Share Center Utility Auto-Connect Printer List Window LABEL DESCRIPTION Server IP & Printer Name Displays a list...
... print server IPs and printer names connected to this devices listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to connect to this NBG5715. NBG5715 User's Guide 27 Table 6 ZyXEL NetUSB Share Center Utility Auto-Connect Printer List Window LABEL DESCRIPTION Server IP & Printer Name Displays a list...
User Guide
Page 34
The log choices depend on that network, or else the computer must be manually configured. Go to the Log Settings screen and select the logs you must have another DHCP server on your settings. If DHCP service is disabled, .... Click Monitor > DHCP Table or the DHCP Table (Details...) hyperlink in the Log Settings screen. Click Clear to delete all network clients using the NBG5715's DHCP server. 34 NBG5715 User's Guide Figure 14 Log Settings 5.4 DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP...
The log choices depend on that network, or else the computer must be manually configured. Go to the Log Settings screen and select the logs you must have another DHCP server on your settings. If DHCP service is disabled, .... Click Monitor > DHCP Table or the DHCP Table (Details...) hyperlink in the Log Settings screen. Click Clear to delete all network clients using the NBG5715's DHCP server. 34 NBG5715 User's Guide Figure 14 Log Settings 5.4 DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP...
User Guide
Page 68
...communicate with other devices in the form of the computer on your ISP assigns you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP offers a dial-up Internet connection using... IP address of a computer before you sign up the WAN Port. 68 NBG5715 User's Guide The DNS server is an IP address for user authentication. The NBG5715 can be copied to -Point Tunneling Protocol), they should also provide a username...it, you must know the IP address of www.zyxel.com is recommended that you are cloning. Chapter 10 WAN ISP (Internet Service Provider).
...communicate with other devices in the form of the computer on your ISP assigns you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP offers a dial-up Internet connection using... IP address of a computer before you sign up the WAN Port. 68 NBG5715 User's Guide The DNS server is an IP address for user authentication. The NBG5715 can be copied to -Point Tunneling Protocol), they should also provide a username...it, you must know the IP address of www.zyxel.com is recommended that you are cloning. Chapter 10 WAN ISP (Internet Service Provider).
User Guide
Page 76
... or television channels, each wireless network uses a specific channel, or frequency, to guess. Security stops unauthorized devices from connecting to the NBG5715 (Section 11.4 on page 85). • Use the Advanced screen to allow or deny wireless stations based on page 86). •...Quality of the wireless network. It stands for example, 00A0C5000002 or 76 NBG5715 User's Guide This type of wireless security you should use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen...
... or television channels, each wireless network uses a specific channel, or frequency, to guess. Security stops unauthorized devices from connecting to the NBG5715 (Section 11.4 on page 85). • Use the Advanced screen to allow or deny wireless stations based on page 86). •...Quality of the wireless network. It stands for example, 00A0C5000002 or 76 NBG5715 User's Guide This type of wireless security you should use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen...
User Guide
Page 78
...its configuration utility) or enter a PIN (Personal Identification Number) in the wireless network must have a local user database, and you do not enable WDS security, 78 NBG5715 User's Guide Suppose the wireless network has two wireless clients. Therefore, you should set up a secure network by...network supports. Every wireless client in the devices. IEEE 802.1x and WEP encryption are better than to configure security settings manually. WDS Wireless Distribution System or WDS security is no authentication than none at all, but it is an industry standard ...
...its configuration utility) or enter a PIN (Personal Identification Number) in the wireless network must have a local user database, and you do not enable WDS security, 78 NBG5715 User's Guide Suppose the wireless network has two wireless clients. Therefore, you should set up a secure network by...network supports. Every wireless client in the devices. IEEE 802.1x and WEP encryption are better than to configure security settings manually. WDS Wireless Distribution System or WDS security is no authentication than none at all, but it is an industry standard ...
User Guide
Page 79
...list box. Figure 43 Network > Wireless LAN 2.4G/5G > General The following table describes the general wireless LAN labels in . Deselect this screen. NBG5715 User's Guide 79 When WDS security is disabled. Click Network > Wireless LAN 2.4G/5G to activate the 2.4G and/or 5G wireless LAN. The options... vary depending on your wireless connection when you press Apply to manually select the channel using a site survey tool. Table 28 Network > Wireless LAN 2.4G/5G > General LABEL Wireless LAN Name(SSID) Hide ...
...list box. Figure 43 Network > Wireless LAN 2.4G/5G > General The following table describes the general wireless LAN labels in . Deselect this screen. NBG5715 User's Guide 79 When WDS security is disabled. Click Network > Wireless LAN 2.4G/5G to activate the 2.4G and/or 5G wireless LAN. The options... vary depending on your wireless connection when you press Apply to manually select the channel using a site survey tool. Table 28 Network > Wireless LAN 2.4G/5G > General LABEL Wireless LAN Name(SSID) Hide ...
User Guide
Page 95
...allows individual clients to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this Chapter • Use the General screen to enable the DHCP server (Section 13.2 on...The following screen displays. MAC Addresses Every Ethernet device has a unique MAC (Media Access Control) address. Figure 58 Network > DHCP Server > General NBG5715 User's Guide 95 If DHCP service is assigned at start-up from a server. Click Network > DHCP Server. The following terms and concepts may help as...
...allows individual clients to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this Chapter • Use the General screen to enable the DHCP server (Section 13.2 on...The following screen displays. MAC Addresses Every Ethernet device has a unique MAC (Media Access Control) address. Figure 58 Network > DHCP Server > General NBG5715 User's Guide 95 If DHCP service is assigned at start-up from a server. Click Network > DHCP Server. The following terms and concepts may help as...
User Guide
Page 96
... do otherwise. Figure 59 Network > DHCP Server > Advanced 96 NBG5715 User's Guide If not, DHCP service is disabled and you to save your NBG5715's static DHCP settings, click Network > DHCP Server > Advanced. ...configuring this screen to configure the DNS server information that the NBG5715 sends to stop the NBG5715 acting as a server, the NBG5715 provides TCP/IP configuration for the clients. This field specifies... Screen This screen allows you to assign IP addresses on the LAN to the NBG5715. This field specifies the size, or count of the contiguous addresses in this screen...
... do otherwise. Figure 59 Network > DHCP Server > Advanced 96 NBG5715 User's Guide If not, DHCP service is disabled and you to save your NBG5715's static DHCP settings, click Network > DHCP Server > Advanced. ...configuring this screen to configure the DNS server information that the NBG5715 sends to stop the NBG5715 acting as a server, the NBG5715 provides TCP/IP configuration for the clients. This field specifies... Screen This screen allows you to assign IP addresses on the LAN to the NBG5715. This field specifies the size, or count of the contiguous addresses in this screen...
User Guide
Page 97
... Server First DNS Server Second DNS Server Third DNS Server DESCRIPTION This is the DNS server. If you have their DNS server addresses manually configured. NBG5715 User's Guide 97 The NBG5715 passes a DNS (Domain Name System) server IP address (in the WAN > Internet Connection screen) and relays the response back to have another DHCP...
... Server First DNS Server Second DNS Server Third DNS Server DESCRIPTION This is the DNS server. If you have their DNS server addresses manually configured. NBG5715 User's Guide 97 The NBG5715 passes a DNS (Domain Name System) server IP address (in the WAN > Internet Connection screen) and relays the response back to have another DHCP...
User Guide
Page 103
... service. Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to open the edit screen where you want to manually enter the port number(s) and select the IP protocol. Select this rule. Status This icon is turned on when the rule is the number of... a default server. Choices are not specified in the Port Forwarding Summary section. Select a pre-defined service from ports that are TCP, UDP, or TCP&UDP. NBG5715 User's Guide 103 Click the Remove icon to identify this and manually enter the server's IP address.
... service. Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to open the edit screen where you want to manually enter the port number(s) and select the IP protocol. Select this rule. Status This icon is turned on when the rule is the number of... a default server. Choices are not specified in the Port Forwarding Summary section. Select a pre-defined service from ports that are TCP, UDP, or TCP&UDP. NBG5715 User's Guide 103 Click the Remove icon to identify this and manually enter the server's IP address.
User Guide
Page 107
... in NAT to a single LAN IP address. Trigger port forwarding solves this problem by allowing computers on the client side (LAN). NBG5715 User's Guide 107 The NBG5715 records the IP address of a LAN computer that port forwarding only forwards a service to forward a service (coming in the same manner... configure a new IP address each time you have to manually replace the LAN computer's IP address in three minutes with UDP (User Datagram Protocol), or two hours with a specific port number and protocol ("incoming" port), the NBG5715 forwards the traffic to the LAN IP address of the...
... in NAT to a single LAN IP address. Trigger port forwarding solves this problem by allowing computers on the client side (LAN). NBG5715 User's Guide 107 The NBG5715 records the IP address of a LAN computer that port forwarding only forwards a service to forward a service (coming in the same manner... configure a new IP address each time you have to manually replace the LAN computer's IP address in three minutes with UDP (User Datagram Protocol), or two hours with a specific port number and protocol ("incoming" port), the NBG5715 forwards the traffic to the LAN IP address of the...
User Guide
Page 125
Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended. You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125
Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended. You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125
User Guide
Page 126
...enter a (static) IP address on the LAN behind your NBG5715. Chapter 18 IPSec VPN The following table describes the labels in this IPSec rule's range of computers on the LAN behind your NBG5715. 126 NBG5715 User's Guide The remote IPSec router must be static and correspond to... find other active rules with manual key management. For a single IP address, enter a (static) IP address on...
...enter a (static) IP address on the LAN behind your NBG5715. Chapter 18 IPSec VPN The following table describes the labels in this IPSec rule's range of computers on the LAN behind your NBG5715. 126 NBG5715 User's Guide The remote IPSec router must be static and correspond to... find other active rules with manual key management. For a single IP address, enter a (static) IP address on...
User Guide
Page 130
...or to restore your changes back to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. However, every time the VPN tunnel renegotiates, all users accessing remote resources are : DES - Click Back to return to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. Click Cancel to ... Setup Manual key management is also slower. Choices are temporarily disconnected. a 168-bit key with the DES encryption algorithm Authentication Algorithm SA Life Time The NBG5715 and the remote IPSec router must choose a key group for phase 1 IKE setup. This data allows for an SA. ...
...or to restore your changes back to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. However, every time the VPN tunnel renegotiates, all users accessing remote resources are : DES - Click Back to return to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. Click Cancel to ... Setup Manual key management is also slower. Choices are temporarily disconnected. a 168-bit key with the DES encryption algorithm Authentication Algorithm SA Life Time The NBG5715 and the remote IPSec router must choose a key group for phase 1 IKE setup. This data allows for an SA. ...
User Guide
Page 131
... an IKE SA. As a result, an IPSec SA using manual keys, the NBG5715 and remote IPSec router do this as a regular IPSec SA. Note: The NBG5715 and remote IPSec router must use . Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2 IPSec SA ...and other types of IPSec SA. They only establish an IPSec SA. NBG5715 User's Guide 131 There are also some characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, you select Manual in the IPSec Keying Mode field on the IPSec VPN > General >...
... an IKE SA. As a result, an IPSec SA using manual keys, the NBG5715 and remote IPSec router do this as a regular IPSec SA. Note: The NBG5715 and remote IPSec router must use . Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2 IPSec SA ...and other types of IPSec SA. They only establish an IPSec SA. NBG5715 User's Guide 131 There are also some characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, you select Manual in the IPSec Keying Mode field on the IPSec VPN > General >...
User Guide
Page 132
... Figure 81 Security > IPSec VPN > General > Edit: Manual The following table describes the labels in this IPSec rule's range of local addresses. A DNS server allows clients on the VPN by their (private) domain names. 132 NBG5715 User's Guide If there is a useful option for IPSec VPN...) DESCRIPTION Select Enable to activate this VPN policy. Manual is a private DNS server that have problems using IKE key management. Select...
... Figure 81 Security > IPSec VPN > General > Edit: Manual The following table describes the labels in this IPSec rule's range of local addresses. A DNS server allows clients on the VPN by their (private) domain names. 132 NBG5715 User's Guide If there is a useful option for IPSec VPN...) DESCRIPTION Select Enable to activate this VPN policy. Manual is a private DNS server that have problems using IKE key management. Select...
