User Guide
Page 2
KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this manual is designed to differences in this book may differ slightly from the product due to help you installed updated firmware/software for your network and configuring for Internet access. 2 NBG5715 User's Guide Related Documentation • Quick Start Guide The .... Every effort has been made to ensure that the information in operating systems, operating system versions, or if you get your NBG5715 up your device. READ CAREFULLY BEFORE USE. It contains information on setting up and running right away. IMPORTANT!
KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this manual is designed to differences in this book may differ slightly from the product due to help you installed updated firmware/software for your network and configuring for Internet access. 2 NBG5715 User's Guide Related Documentation • Quick Start Guide The .... Every effort has been made to ensure that the information in operating systems, operating system versions, or if you get your NBG5715 up your device. READ CAREFULLY BEFORE USE. It contains information on setting up and running right away. IMPORTANT!
User Guide
Page 5
......15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23... 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
......15 1.1 Overview ...15 1.2 Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23... 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus ...25 3.2.2 The Share Center Configuration Window 26 3.2.3 The Auto-Connect Printer List Window 26 3.3 Manually Connecting to USB Devices 27 3.4 ...
User Guide
Page 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
... 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136 18.7.3 IKE Phases ...137... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
User Guide
Page 21
...you to quickly set up a wireless network with strong security, without having to configure security settings manually. Both devices must support WPS (check each of the two devices. Figure 5 The WPS Button NBG5715 User's Guide 21 Depending on page 57. WPS is an industry standard specification, defined by ...themselves. CHAPTER 2 The WPS Button 2.1 Overview Your NBG5715 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure network by the WiFi Alliance. Then, the ...
...you to quickly set up a wireless network with strong security, without having to configure security settings manually. Both devices must support WPS (check each of the two devices. Figure 5 The WPS Button NBG5715 User's Guide 21 Depending on page 57. WPS is an industry standard specification, defined by ...themselves. CHAPTER 2 The WPS Button 2.1 Overview Your NBG5715 supports WiFi Protected Setup (WPS), which is an easy way to set up a secure network by the WiFi Alliance. Then, the ...
User Guide
Page 27
... Name Displays a list of Windows printer names connected to this to a USB device over your NBG5715 network. Makes sure that you have the print driver installed you want to the NBG5715. 2 In the ZyXEL NetUSB Share Center Utility, select the device and click Connect. Note: If you do this devices... listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to ...
... Name Displays a list of Windows printer names connected to this to a USB device over your NBG5715 network. Makes sure that you have the print driver installed you want to the NBG5715. 2 In the ZyXEL NetUSB Share Center Utility, select the device and click Connect. Note: If you do this devices... listed in this to close the window. 3.3 Manually Connecting to USB Devices This example shows you how to ...
User Guide
Page 34
... what logs you want to display in the View Log screen. Figure 13 View Log You can configure the NBG5715's LAN as a server, the NBG5715 provides the TCP/IP configuration for the NBG5715. Go to the Log Settings screen and select the logs you must have another DHCP server on your settings...here relates to obtain TCP/IP configuration at start the screen afresh. The log choices depend on that network, or else the computer must be manually configured. You can configure which logs to see the logged messages for the clients. If DHCP service is disabled, you wish to renew the log...
... what logs you want to display in the View Log screen. Figure 13 View Log You can configure the NBG5715's LAN as a server, the NBG5715 provides the TCP/IP configuration for the NBG5715. Go to the Log Settings screen and select the logs you must have another DHCP server on your settings...here relates to obtain TCP/IP configuration at start the screen afresh. The log choices depend on that network, or else the computer must be manually configured. You can configure which logs to see the logged messages for the clients. If DHCP service is disabled, you wish to renew the log...
User Guide
Page 68
...address if you sign up. The DNS server is recommended that you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP offers a dial-up the WAN Port. 68 NBG5715 User's Guide The NBG5715 can get the DNS server address from the ISP. Otherwise, click Clone the computer's MAC... a domain name to select the factory assigned default MAC Address. If your LAN. Once it . IP Address and enter the IP address of www.zyxel.com is an IP address for user authentication. It is successfully configured, the address will be static (fixed) or dynamically assigned by the...
...address if you sign up. The DNS server is recommended that you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP offers a dial-up the WAN Port. 68 NBG5715 User's Guide The NBG5715 can get the DNS server address from the ISP. Otherwise, click Clone the computer's MAC... a domain name to select the factory assigned default MAC Address. If your LAN. Once it . IP Address and enter the IP address of www.zyxel.com is an IP address for user authentication. It is successfully configured, the address will be static (fixed) or dynamically assigned by the...
User Guide
Page 76
The SSID is the name of wireless security you should use the same SSID. Security stops unauthorized devices from connecting to the NBG5715 (Section 11.4 on page 85). • Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section 11.5... and receive information. • Every wireless client in the same wireless network must use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen to add a wireless station using WPS (Section 11.8 on page 89). 11...
The SSID is the name of wireless security you should use the same SSID. Security stops unauthorized devices from connecting to the NBG5715 (Section 11.4 on page 85). • Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section 11.5... and receive information. • Every wireless client in the same wireless network must use security compatible with strong security, without having to configure security settings manually (Section 11.7 on page 87). • Use the WPS Station screen to add a wireless station using WPS (Section 11.8 on page 89). 11...
User Guide
Page 78
... WPA and some support WPA2, you should set up a wireless network with strong security, without having to configure security settings manually. If users do not log in the NBG5715. Usually, you should set up a secure wireless network using WPS in the Section 9.2 on the devices in the wireless ... RADIUS server, you to the wireless network, you do not enable WDS security, 78 NBG5715 User's Guide WPS allows you can also select an option (WPA Compatible) to protect the information in your NBG5715, you do not have the same key. Depending on page 57. It is an industry...
... WPA and some support WPA2, you should set up a wireless network with strong security, without having to configure security settings manually. If users do not log in the NBG5715. Usually, you should set up a secure wireless network using WPS in the Section 9.2 on the devices in the wireless ... RADIUS server, you to the wireless network, you do not enable WDS security, 78 NBG5715 User's Guide WPS allows you can also select an option (WPA Compatible) to protect the information in your NBG5715, you do not have the same key. Depending on page 57. It is an industry...
User Guide
Page 79
... screen. Set the operating frequency/channel depending on the frequency band and the country you are configuring the NBG5715 from the drop-down list box. Note: If you wish to manually select the channel using a site survey tool. The SSID (Service Set IDentity) identifies the Service Set ...with the least interference. Chapter 11 Wireless LAN traffic between APs is enabled, both APs must then change the NBG5715's SSID, channel or security settings,...
... screen. Set the operating frequency/channel depending on the frequency band and the country you are configuring the NBG5715 from the drop-down list box. Note: If you wish to manually select the channel using a site survey tool. The SSID (Service Set IDentity) identifies the Service Set ...with the least interference. Chapter 11 Wireless LAN traffic between APs is enabled, both APs must then change the NBG5715's SSID, channel or security settings,...
User Guide
Page 95
...service is assigned at start-up from a server. Find out the MAC addresses of hexadecimal characters, for the clients. You can configure the NBG5715's LAN as a server, the NBG5715 provides the TCP/IP configuration for example, 00:A0:C5:00:00:02. The MAC address is disabled, you must have another DHCP...) allows individual clients to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this Chapter • Use the General screen to enable the DHCP server (Section 13.2 on page 95). ...
...service is assigned at start-up from a server. Find out the MAC addresses of hexadecimal characters, for the clients. You can configure the NBG5715's LAN as a server, the NBG5715 provides the TCP/IP configuration for example, 00:A0:C5:00:00:02. The MAC address is disabled, you must have another DHCP...) allows individual clients to obtain TCP/IP configuration at the factory and consists of six pairs of your LAN, or else the computer must be manually configured. 13.1.1 What You Can Do in this Chapter • Use the General screen to enable the DHCP server (Section 13.2 on page 95). ...
User Guide
Page 96
..., click Network > DHCP Server > Advanced. When configured as a DHCP server. Click Apply to save your ISP instructs you must be manually configured. To change your LAN, or else the computers must have another DHCP server on their MAC addresses. Chapter 13 DHCP Server The following... table describes the labels in this screen to configure the DNS server information that the NBG5715 sends to the DHCP clients. IP Pool Starting Address Pool Size Apply Cancel DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132)...
..., click Network > DHCP Server > Advanced. When configured as a DHCP server. Click Apply to save your ISP instructs you must be manually configured. To change your LAN, or else the computers must have another DHCP server on their MAC addresses. Chapter 13 DHCP Server The following... table describes the labels in this screen to configure the DNS server information that the NBG5715 sends to the DHCP clients. IP Pool Starting Address Pool Size Apply Cancel DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132)...
User Guide
Page 97
... a DNS (Domain Name System) server IP address (in the field to None after you have their DNS server addresses manually configured. The NBG5715 only passes this screen afresh. 13.4 The Client List Screen The DHCP table shows current DHCP client information (including IP Address, Host Name and ...(row). When a computer on the LAN that choice changes to the right. Type the MAC address (with colons) of a computer on your LAN. The NBG5715's LAN IP address displays in the order you select the Enable DHCP Server check box. Note: You can only select DNS Relay for a second or...
... a DNS (Domain Name System) server IP address (in the field to None after you have their DNS server addresses manually configured. The NBG5715 only passes this screen afresh. 13.4 The Client List Screen The DHCP table shows current DHCP client information (including IP Address, Host Name and ...(row). When a computer on the LAN that choice changes to the right. Type the MAC address (with colons) of a computer on your LAN. The NBG5715's LAN IP address displays in the order you select the Enable DHCP Server check box. Note: You can only select DNS Relay for a second or...
User Guide
Page 103
... Add to add it in the Port Forwarding Summary section. Protocol This is enabled. Click the Remove icon to identify this rule. NBG5715 User's Guide 103 Figure 64 Network > NAT > Port Forwarding Chapter 14 NAT The following table describes the labels in the Port ...NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to use the default server or specify a server manually. If you want to manually enter the port number(s) and select the IP protocol. Change to Server Port Forwarding Service Name Select this screen. Status This...
... Add to add it in the Port Forwarding Summary section. Protocol This is enabled. Click the Remove icon to identify this rule. NBG5715 User's Guide 103 Figure 64 Network > NAT > Port Forwarding Chapter 14 NAT The following table describes the labels in the Port ...NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to use the default server or specify a server manually. If you want to manually enter the port number(s) and select the IP protocol. Change to Server Port Forwarding Service Name Select this screen. Status This...
User Guide
Page 107
... a response with TCP/IP (Transfer Control Protocol/Internet Protocol). NBG5715 User's Guide 107 After that computer's connection for that sent the request. This way you do not need to configure a new IP address each time you have to manually replace the LAN computer's IP address in from the Real Audio... server (port 7070). 2 Port 7070 is a "trigger" port and causes the NBG5715 to the LAN IP address of 6970-7170. 3 The Real Audio server responds...
... a response with TCP/IP (Transfer Control Protocol/Internet Protocol). NBG5715 User's Guide 107 After that computer's connection for that sent the request. This way you do not need to configure a new IP address each time you have to manually replace the LAN computer's IP address in from the Real Audio... server (port 7070). 2 Port 7070 is a "trigger" port and causes the NBG5715 to the LAN IP address of 6970-7170. 3 The Real Audio server responds...
User Guide
Page 125
You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
User Guide
Page 126
... alive enabled in order for this screen. NAT traversal allows you to set to 0.0.0.0, the ranges of computers on the LAN behind your NBG5715. The remote IPSec router must be static and correspond to the remote IPSec router's configured remote IP addresses. Local Policy A DNS server ...configure multiple SAs between the same local and remote IP addresses, as long as the local IP address, then you configure an active rule with manual key management. Local Address If you cannot configure any time. For a specific range of IP addresses, enter the beginning (static) IP address,...
... alive enabled in order for this screen. NAT traversal allows you to set to 0.0.0.0, the ranges of computers on the LAN behind your NBG5715. The remote IPSec router must be static and correspond to the remote IPSec router's configured remote IP addresses. Local Policy A DNS server ...configure multiple SAs between the same local and remote IP addresses, as long as the local IP address, then you configure an active rule with manual key management. Local Address If you cannot configure any time. For a specific range of IP addresses, enter the beginning (static) IP address,...
User Guide
Page 130
...the length of SAs to generate and verify a message authentication code. Click Cancel to restore your changes back to establish the tunnel. 130 NBG5715 User's Guide This data allows for data communications. The local VPN gateway then uses the network, encryption and key values that the administrator... time the VPN tunnel renegotiates, all users accessing remote resources are SHA1 and MD5. Click Apply to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must choose a key group for phase 1 IKE setup. The SPI is also slower. Chapter 18 ...
...the length of SAs to generate and verify a message authentication code. Click Cancel to restore your changes back to establish the tunnel. 130 NBG5715 User's Guide This data allows for data communications. The local VPN gateway then uses the network, encryption and key values that the administrator... time the VPN tunnel renegotiates, all users accessing remote resources are SHA1 and MD5. Click Apply to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must choose a key group for phase 1 IKE setup. The SPI is also slower. Chapter 18 ...
User Guide
Page 131
... characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, you want to provide the encryption key and the authentication key the NBG5715 and remote IPSec router use. Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2... IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys when you can only specify ...
... characteristics of SA. 18.5.2.3 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, you want to provide the encryption key and the authentication key the NBG5715 and remote IPSec router use. Chapter 18 IPSec VPN Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 18.5.2.2... IPSec SA Using Manual Keys You might set up an IPSec SA using manual keys when you can only specify ...
User Guide
Page 132
... the drop-down list box. The NBG5715 assigns this additional DNS server to the NBG5715's DHCP clients that services the VPN, type its IP address here. Table 56 Security > IPSec VPN > General > Edit: Manual LABEL Property Property IPSec Keying Mode DNS Server (for troubleshooting if you have IP ... Enable to find other computers and servers on the VPN by their (private) domain names. 132 NBG5715 User's Guide Chapter 18 IPSec VPN Figure 81 Security > IPSec VPN > General > Edit: Manual The following table describes the labels in this VPN policy. A DNS server allows clients on the ...
... the drop-down list box. The NBG5715 assigns this additional DNS server to the NBG5715's DHCP clients that services the VPN, type its IP address here. Table 56 Security > IPSec VPN > General > Edit: Manual LABEL Property Property IPSec Keying Mode DNS Server (for troubleshooting if you have IP ... Enable to find other computers and servers on the VPN by their (private) domain names. 132 NBG5715 User's Guide Chapter 18 IPSec VPN Figure 81 Security > IPSec VPN > General > Edit: Manual The following table describes the labels in this VPN policy. A DNS server allows clients on the ...