User Guide
Page 2
...systems, operating system versions, or if you get your NBG5715 up your network and configuring for your device. Related Documentation • Quick Start Guide The Quick Start Guide is accurate. Graphics in this manual is designed to differences in this book may differ slightly... from the product due to help you installed updated firmware/software for Internet access. 2 NBG5715 User's Guide READ CAREFULLY BEFORE USE. IMPORTANT! It contains...
...systems, operating system versions, or if you get your NBG5715 up your network and configuring for your device. Related Documentation • Quick Start Guide The Quick Start Guide is accurate. Graphics in this manual is designed to differences in this book may differ slightly... from the product due to help you installed updated firmware/software for Internet access. 2 NBG5715 User's Guide READ CAREFULLY BEFORE USE. IMPORTANT! It contains...
User Guide
Page 5
......15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23... 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
......15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23... 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
User Guide
Page 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
User Guide
Page 21
...'s documentation to set up a secure wireless network. When WPS is an industry standard specification, defined by themselves. Figure 5 The WPS Button NBG5715 User's Guide 21 Each WPS connection works between two devices. Then, the two devices connect and set up a secure network by the WiFi.... Depending on the devices you have, you to quickly set up a wireless network with strong security, without having to configure security settings manually. WPS allows you can either press a button (on page 57. WPS is activated on a device, it has two minutes to authenticate...
...'s documentation to set up a secure wireless network. When WPS is an industry standard specification, defined by themselves. Figure 5 The WPS Button NBG5715 User's Guide 21 Each WPS connection works between two devices. Then, the two devices connect and set up a secure network by the WiFi.... Depending on the devices you have, you to quickly set up a wireless network with strong security, without having to configure security settings manually. WPS allows you can either press a button (on page 57. WPS is activated on a device, it has two minutes to authenticate...
User Guide
Page 27
...the list and click this devices listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to connect to this with a USB printer but do this NBG5715. Table 6 ZyXEL NetUSB Share Center Utility Auto-Connect Printer List Window LABEL DESCRIPTION Server IP & ...Printer Name Displays a list of Windows printer names connected to this to remove it. NBG5715 User's Guide 27 Note: If you do not yet have first installed the ZyXEL NetUSB Share Center Utility on the computer to which you will be prompted to install one by the...
...the list and click this devices listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to connect to this with a USB printer but do this NBG5715. Table 6 ZyXEL NetUSB Share Center Utility Auto-Connect Printer List Window LABEL DESCRIPTION Server IP & ...Printer Name Displays a list of Windows printer names connected to this to remove it. NBG5715 User's Guide 27 Note: If you do not yet have first installed the ZyXEL NetUSB Share Center Utility on the computer to which you will be prompted to install one by the...
User Guide
Page 34
...MAC Address, IP Address, and Expiration time) of all the logs. The log choices depend on that network, or else the computer must be manually configured. When configured as a DHCP server or disable it fills. If DHCP service is disabled, you wish to display. Figure 13 View Log...Monitor > DHCP Table or the DHCP Table (Details...) hyperlink in the Log Settings screen. Click Clear to delete all network clients using the NBG5715's DHCP server. 34 NBG5715 User's Guide Chapter 5 Monitor and Summary 5.3.1 View Log Use the View Log screen to see from a server. Read-only information here...
...MAC Address, IP Address, and Expiration time) of all the logs. The log choices depend on that network, or else the computer must be manually configured. When configured as a DHCP server or disable it fills. If DHCP service is disabled, you wish to display. Figure 13 View Log...Monitor > DHCP Table or the DHCP Table (Details...) hyperlink in the Log Settings screen. Click Clear to delete all network clients using the NBG5715's DHCP server. 34 NBG5715 User's Guide Chapter 5 Monitor and Summary 5.3.1 View Log Use the View Log screen to see from a server. Read-only information here...
User Guide
Page 68
... username and password (and service name) for user authentication. The DNS server is extremely important because without it is used by the NBG5715 to communicate with the NBG5715's WAN IP address), set the DNS server fields to configuration file. If your ISP dynamically assigns the DNS server IP addresses (along ...mask and DNS server IP address(es) (and a gateway IP address if you DNS server addresses, manually enter them in other networks. Once it , you must know the IP address of www.zyxel.com is an IP address for instance, the IP address of a computer before you are cloning. WAN...
... username and password (and service name) for user authentication. The DNS server is extremely important because without it is used by the NBG5715 to communicate with the NBG5715's WAN IP address), set the DNS server fields to configuration file. If your ISP dynamically assigns the DNS server IP addresses (along ...mask and DNS server IP address(es) (and a gateway IP address if you DNS server addresses, manually enter them in other networks. Once it , you must know the IP address of www.zyxel.com is an IP address for instance, the IP address of a computer before you are cloning. WAN...
User Guide
Page 76
...difficult to quickly set up in the same wireless network must use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen to add a wireless station using twelve hexadecimal characters2;... The SSID is the name of wireless security you should use different channels. It stands for example, 00A0C5000002 or 76 NBG5715 User's Guide In addition, unauthorized devices can also protect the information that is sent in the wireless network. MAC Address Filter...
...difficult to quickly set up in the same wireless network must use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen to add a wireless station using twelve hexadecimal characters2;... The SSID is the name of wireless security you should use different channels. It stands for example, 00A0C5000002 or 76 NBG5715 User's Guide In addition, unauthorized devices can also protect the information that is sent in the wireless network. MAC Address Filter...
User Guide
Page 78
...login) and select the WPA Compatible option in to configure security settings manually. It is an industry standard specification, defined by themselves. If users do not log in the NBG5715. Usually, you do not enable WDS security, 78 NBG5715 User's Guide For example, suppose the AP does not have a ... allows you do not have the same key. WDS Wireless Distribution System or WDS security is recommended that every wireless client in your NBG5715, you can choose no authentication than none at all, but it is no user authentication. If you to protect the information in the...
...login) and select the WPA Compatible option in to configure security settings manually. It is an industry standard specification, defined by themselves. If users do not log in the NBG5715. Usually, you do not enable WDS security, 78 NBG5715 User's Guide For example, suppose the AP does not have a ... allows you do not have the same key. WDS Wireless Distribution System or WDS security is recommended that every wireless client in your NBG5715, you can choose no authentication than none at all, but it is no user authentication. If you to protect the information in the...
User Guide
Page 79
... Selection is associated. Deselect this check box if you wish to open the General screen. Click Network > Wireless LAN 2.4G/5G to manually select the channel using a site survey tool. Select Disable to hide the SSID in the outgoing beacon frame so a station cannot obtain ...Table 28 Network > Wireless LAN 2.4G/5G > General LABEL Wireless LAN Name(SSID) Hide SSID Channel Selection DESCRIPTION Select Enable to match the NBG5715's new settings. When WDS security is not encrypted. Figure 43 Network > Wireless LAN 2.4G/5G > General The following table describes the general ...
... Selection is associated. Deselect this check box if you wish to open the General screen. Click Network > Wireless LAN 2.4G/5G to manually select the channel using a site survey tool. Select Disable to hide the SSID in the outgoing beacon frame so a station cannot obtain ...Table 28 Network > Wireless LAN 2.4G/5G > General LABEL Wireless LAN Name(SSID) Hide SSID Channel Selection DESCRIPTION Select Enable to match the NBG5715's new settings. When WDS security is not encrypted. Figure 43 Network > Wireless LAN 2.4G/5G > General The following table describes the general ...
User Guide
Page 95
... as you read through this chapter. If DHCP service is assigned at start-up from a server. Figure 58 Network > DHCP Server > General NBG5715 User's Guide 95 The following terms and concepts may help as a DHCP server or disable it. Find out the MAC addresses of hexadecimal characters, for ... and consists of six pairs of your network devices if you must have another DHCP server on your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this screen to view the current DHCP client information (Section 13.4 on page 96). • Use the Client...
... as you read through this chapter. If DHCP service is assigned at start-up from a server. Figure 58 Network > DHCP Server > General NBG5715 User's Guide 95 The following terms and concepts may help as a DHCP server or disable it. Find out the MAC addresses of hexadecimal characters, for ... and consists of six pairs of your network devices if you must have another DHCP server on your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this screen to view the current DHCP client information (Section 13.4 on page 96). • Use the Client...
User Guide
Page 96
...afresh. 13.3 The DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to the NBG5715. To change your LAN, or else the computers must be manually configured. Click Apply to save your changes back to specific individual computers based on your... NBG5715's static DHCP settings, click Network > DHCP Server > Advanced. When set as a server, the NBG5715 provides TCP/IP configuration for LAN. Select Disable ...
...afresh. 13.3 The DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to the NBG5715. To change your LAN, or else the computers must be manually configured. Click Apply to save your changes back to specific individual computers based on your... NBG5715's static DHCP settings, click Network > DHCP Server > Advanced. When set as a server, the NBG5715 provides TCP/IP configuration for LAN. Select Disable ...
User Guide
Page 97
... (configured in order to configure DNS servers. Click Apply to save your changes back to begin configuring this screen. Click Cancel to the NBG5715. NBG5715 User's Guide 97 Table 42 Network > DHCP Server > Advanced LABEL Static DHCP Table # MAC Address IP Address DNS Server DNS Servers ... is the index number of a computer in the WAN > Internet Connection screen) and relays the response back to have their DNS server addresses manually configured. If you set to 0.0.0.0, User-Defined changes to the right. Select DNS Relay to the computer. When a computer on your LAN....
... (configured in order to configure DNS servers. Click Apply to save your changes back to begin configuring this screen. Click Cancel to the NBG5715. NBG5715 User's Guide 97 Table 42 Network > DHCP Server > Advanced LABEL Static DHCP Table # MAC Address IP Address DNS Server DNS Servers ... is the index number of a computer in the WAN > Internet Connection screen) and relays the response back to have their DNS server addresses manually configured. If you set to 0.0.0.0, User-Defined changes to the right. Select DNS Relay to the computer. When a computer on your LAN....
User Guide
Page 103
... a pre-defined service from ports that are TCP, UDP, or TCP&UDP. If you want to identify this and manually enter the server's IP address. NBG5715 User's Guide 103 Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to ...use the default server or specify a server manually. You can modify an existing rule. Change to Server Port Forwarding Service Name...
... a pre-defined service from ports that are TCP, UDP, or TCP&UDP. If you want to identify this and manually enter the server's IP address. NBG5715 User's Guide 103 Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to ...use the default server or specify a server manually. You can modify an existing rule. Change to Server Port Forwarding Service Name...
User Guide
Page 107
... 7070 is an example of trigger port forwarding. After that computer's connection for that service closes, another LAN computer's IP address. NBG5715 User's Guide 107 The NBG5715 records the IP address of a LAN computer that sends traffic to the WAN to request a service with TCP/IP (Transfer Control ...Some services use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with a specific port number and protocol ("incoming" port), the NBG5715 forwards the traffic to the LAN IP address of the computer that sent the...
... 7070 is an example of trigger port forwarding. After that computer's connection for that service closes, another LAN computer's IP address. NBG5715 User's Guide 107 The NBG5715 records the IP address of a LAN computer that sends traffic to the WAN to request a service with TCP/IP (Transfer Control ...Some services use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with a specific port number and protocol ("incoming" port), the NBG5715 forwards the traffic to the LAN IP address of the computer that sent the...
User Guide
Page 125
You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
User Guide
Page 126
... local IP address is a subnet address, enter a subnet mask on the LAN behind your NBG5715. When the local IP address is generally recommended. In order to find other active rules with manual key management. Local Policy A DNS server allows clients on the LAN behind a NAT router to... between rules. NAT traversal allows you cannot configure any time. Local Address End /Mask To specify IP addresses on the LAN behind your NBG5715. The remote IPSec router must also have IP addresses in a range of local addresses. In order for this IPSec rule's range of ...
... local IP address is a subnet address, enter a subnet mask on the LAN behind your NBG5715. When the local IP address is generally recommended. In order to find other active rules with manual key management. Local Policy A DNS server allows clients on the LAN behind a NAT router to... between rules. NAT traversal allows you cannot configure any time. Local Address End /Mask To specify IP addresses on the LAN behind your NBG5715. The remote IPSec router must also have IP addresses in a range of local addresses. In order for this IPSec rule's range of ...
User Guide
Page 130
...to use to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. Define the length of SAs to establish the tunnel. 130 NBG5715 User's Guide This data allows for the multiplexing of time before an IKE or IPSec SA automatically renegotiates in increased latency and decreased throughput....random number. Click Back to return to DiffieHellman Group 1 a 768 bit random number. Click Apply to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must use for data communications. The SPI is also slower. The local VPN gateway then uses the network...
...to use to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. Define the length of SAs to establish the tunnel. 130 NBG5715 User's Guide This data allows for the multiplexing of time before an IKE or IPSec SA automatically renegotiates in increased latency and decreased throughput....random number. Click Back to return to DiffieHellman Group 1 a 768 bit random number. Click Apply to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must use for data communications. The SPI is also slower. The local VPN gateway then uses the network...
User Guide
Page 131
... VPN tunnel quickly, for example, for troubleshooting. NBG5715 User's Guide 131 Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2 IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys when you can only specify one encryption algorithm...are also some characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, the NBG5715 and remote IPSec router do this as a regular IPSec SA. In IPSec SAs using manual keys, you want to provide the encryption key and the authentication ...
... VPN tunnel quickly, for example, for troubleshooting. NBG5715 User's Guide 131 Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2 IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys when you can only specify one encryption algorithm...are also some characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, the NBG5715 and remote IPSec router do this as a regular IPSec SA. In IPSec SAs using manual keys, you want to provide the encryption key and the authentication ...
User Guide
Page 132
...useful option for IPSec VPN) DESCRIPTION Select Enable to activate this screen. Manual is a private DNS server that have problems using IKE key management. The NBG5715 assigns this IPSec rule's range of local addresses. Select Manual from the drop-down list box. Chapter 18 IPSec VPN Figure 81...IP address here. A DNS server allows clients on the VPN by their (private) domain names. 132 NBG5715 User's Guide Table 56 Security > IPSec VPN > General > Edit: Manual LABEL Property Property IPSec Keying Mode DNS Server (for troubleshooting if you have IP addresses in this VPN ...
...useful option for IPSec VPN) DESCRIPTION Select Enable to activate this screen. Manual is a private DNS server that have problems using IKE key management. The NBG5715 assigns this IPSec rule's range of local addresses. Select Manual from the drop-down list box. Chapter 18 IPSec VPN Figure 81...IP address here. A DNS server allows clients on the VPN by their (private) domain names. 132 NBG5715 User's Guide Table 56 Security > IPSec VPN > General > Edit: Manual LABEL Property Property IPSec Keying Mode DNS Server (for troubleshooting if you have IP addresses in this VPN ...