User Guide
Page 5
... Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus... 4 Introducing the Web Configurator ...29 4.1 Overview ...29 4.2 Accessing the Web Configurator ...29 4.2.1 Login Screen ...29 4.2.2 Weather Edit ...30 4.2.3 Time/Date Edit ...31 NBG5715 User's Guide 5
... Applications ...16 1.3 Ways to Manage the NBG5715 ...16 1.4 Good Habits for Managing the NBG5715 16 1.5 LEDs ...17 1.6 Wall Mounting ...19 Chapter 2 The WPS Button...21 2.1 Overview ...21 Chapter 3 ZyXEL NetUSB Share Center Utility 23 3.1 Overview ...23 3.1.1 Quick Setup ...23 3.1.2 Installing ZyXEL NetUSB Share Center Utility 23 3.2 The ZyXEL NetUSB Share Center Utility 24 3.2.1 The Menus... 4 Introducing the Web Configurator ...29 4.1 Overview ...29 4.2 Accessing the Web Configurator ...29 4.2.1 Login Screen ...29 4.2.2 Weather Edit ...30 4.2.3 Time/Date Edit ...31 NBG5715 User's Guide 5
User Guide
Page 8
Table of Contents 12.1 Overview ...91 12.2 What You Can Do in this Chapter 91 12.3 What You Need To Know ...91 12.3.1 IP Pool Setup ...92 12.3.2 LAN TCP/IP ...92 12.4 The LAN IP Screen ...92 12.5 The IP Alias Screen ...93 Chapter 13 DHCP Server ...95 13.1 Overview ...... You Need To Know ...109 15.2 The Dynamic DNS Screen ...109 Chapter 16 Static Route ...111 16.1 Overview ...111 16.2 The Static Route Screen ...111 8 NBG5715 User's Guide
Table of Contents 12.1 Overview ...91 12.2 What You Can Do in this Chapter 91 12.3 What You Need To Know ...91 12.3.1 IP Pool Setup ...92 12.3.2 LAN TCP/IP ...92 12.4 The LAN IP Screen ...92 12.5 The IP Alias Screen ...93 Chapter 13 DHCP Server ...95 13.1 Overview ...... You Need To Know ...109 15.2 The Dynamic DNS Screen ...109 Chapter 16 Static Route ...111 16.1 Overview ...111 16.2 The Static Route Screen ...111 8 NBG5715 User's Guide
User Guide
Page 9
... (IKE Phase 1) Overview 122 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
... (IKE Phase 1) Overview 122 18.3.2 IPSec SA (IKE Phase 2) Overview 123 18.4 The General Screen ...123 18.5 Edit VPN Rule ...124 18.5.1 IKEKey Setup ...125 18.5.2 Manual Key Setup ...130 18.5.3 Configuring Manual Key ...131 18.6 The SA Monitor Screen ...135 18.7 Technical Reference ...135 18.7.1 IPSec Architecture ...136 18.7.2 Encapsulation ...136... ...143 19.3 What You Need To Know ...143 19.4 General Screen ...144 19.5 Advance Screen ...144 19.5.1 Rule Configuration: User Defined Service Rule Configuration 146 NBG5715 User's Guide 9
User Guide
Page 16
...Center Utility (for NetUSB functionality) from the included disc, or download the latest version from the zyxel.com website. Create an instant network connection with another WPS-compatible device, sharing your NBG5715. • Web Configurator. Note: Be sure to function properly with the rest of your personal... to set up to 3 additional USB devices with the NBG5715. You can connect to the NBG5715 to use the WPS button or the WPS section of the Web Configurator to manage the NBG5715. • WPS (Wi-Fi Protected Setup). See Chapter 3 on page 23 for more effectively. ...
...Center Utility (for NetUSB functionality) from the included disc, or download the latest version from the zyxel.com website. Create an instant network connection with another WPS-compatible device, sharing your NBG5715. • Web Configurator. Note: Be sure to function properly with the rest of your personal... to set up to 3 additional USB devices with the NBG5715. You can connect to the NBG5715 to use the WPS button or the WPS section of the Web Configurator to manage the NBG5715. • WPS (Wi-Fi Protected Setup). See Chapter 3 on page 23 for more effectively. ...
User Guide
Page 18
...) and the connection is ready, but no USB device connected to set up . The NBG5715 is up a wireless connection via WiFi Protected Setup with a 1000Mbps transmission rate. The NBG5715 has a USB device installed. WAN Internet On Blinking Off On The NBG5715's WAN connection is ready. LAN 1-4 USB 1-2 Off On Blinking Off On Blinking Off...
...) and the connection is ready, but no USB device connected to set up . The NBG5715 is up a wireless connection via WiFi Protected Setup with a 1000Mbps transmission rate. The NBG5715 has a USB device installed. WAN Internet On Blinking Off On The NBG5715's WAN connection is ready. LAN 1-4 USB 1-2 Off On Blinking Off On Blinking Off...
User Guide
Page 21
... devices. Then, the two devices connect and set up a secure network by the WiFi Alliance. Figure 5 The WPS Button NBG5715 User's Guide 21 CHAPTER 2 The WPS Button 2.1 Overview Your NBG5715 supports WiFi Protected Setup (WPS), which is activated on a device, it has two minutes to find another device that allows one device to...
... devices. Then, the two devices connect and set up a secure network by the WiFi Alliance. Figure 5 The WPS Button NBG5715 User's Guide 21 CHAPTER 2 The WPS Button 2.1 Overview Your NBG5715 supports WiFi Protected Setup (WPS), which is activated on a device, it has two minutes to find another device that allows one device to...
User Guide
Page 23
... on page 162 for information on the NBG5715. Note: Be sure to install the ZyXEL NetUSB Share Center Utility (for NetUSB functionality) from the included disc, or download the latest version from the zyxel.com website's Download Library. 3.1.1 Quick Setup This section shows you how to get ...started using the ZyXEL NetUSB Share Center Utility. 1 Install the ZyXEL NetUSB Share Center Utility on each computer connected to the NBG5715. 2 Connect a USB device to the...
... on page 162 for information on the NBG5715. Note: Be sure to install the ZyXEL NetUSB Share Center Utility (for NetUSB functionality) from the included disc, or download the latest version from the zyxel.com website's Download Library. 3.1.1 Quick Setup This section shows you how to get ...started using the ZyXEL NetUSB Share Center Utility. 1 Install the ZyXEL NetUSB Share Center Utility on each computer connected to the NBG5715. 2 Connect a USB device to the...
User Guide
Page 29
The recommended screen resolution is an HTML-based management interface that allows easy setup and management of its screens. NBG5715 User's Guide 29 The Web Configurator is 1024 by default). Refer to the Troubleshooting chapter (Chapter 23 on page 167) to see how to make ... later versions, or Safari 2.0 and later versions. Web pop-up blocking is properly connected and prepare your computer or computer network to connect to the NBG5715 (refer to allow: • Web browser pop-up windows from your web browser. 3 Type "http://192.168.1.1" as the website address. Your computer must be...
The recommended screen resolution is an HTML-based management interface that allows easy setup and management of its screens. NBG5715 User's Guide 29 The Web Configurator is 1024 by default). Refer to the Troubleshooting chapter (Chapter 23 on page 167) to see how to make ... later versions, or Safari 2.0 and later versions. Web pop-up blocking is properly connected and prepare your computer or computer network to connect to the NBG5715 (refer to allow: • Web browser pop-up windows from your web browser. 3 Type "http://192.168.1.1" as the website address. Your computer must be...
User Guide
Page 56
...on their MAC addresses and to manage the NBG5715. Static Route Static Route Use this screen to configure IP static routes. SA Monitor Use this screen to display and manage active VPN connections. Password Password Setup Use this screen to backup and restore ...the configuration or reset the factory defaults to change administrative settings such as system and domain names. Backup/ Restore Backup/ Restore Use this screen to your NBG5715.
...on their MAC addresses and to manage the NBG5715. Static Route Static Route Use this screen to configure IP static routes. SA Monitor Use this screen to display and manage active VPN connections. Password Password Setup Use this screen to backup and restore ...the configuration or reset the factory defaults to change administrative settings such as system and domain names. Backup/ Restore Backup/ Restore Use this screen to your NBG5715.
User Guide
Page 73
This may cause incoming traffic to be dropped or sent to enable multicasting. Click Cancel to disable this screen afresh. NBG5715 User's Guide 73 Figure 41 Network > WAN > Advanced Chapter 10 WAN Table 26 Network > WAN > Advance LABEL Multicast Setup DESCRIPTION Select IGMPv1/v2 to all connected network devices. Apply Cancel Select None to begin configuring this feature. Click Apply to save your changes back to the LAN. This applies to traffic routed from the WAN to the NBG5715.
This may cause incoming traffic to be dropped or sent to enable multicasting. Click Cancel to disable this screen afresh. NBG5715 User's Guide 73 Figure 41 Network > WAN > Advanced Chapter 10 WAN Table 26 Network > WAN > Advance LABEL Multicast Setup DESCRIPTION Select IGMPv1/v2 to all connected network devices. Apply Cancel Select None to begin configuring this feature. Click Apply to save your changes back to the LAN. This applies to traffic routed from the WAN to the NBG5715.
User Guide
Page 78
...devices. Depending on the devices in the wireless network supports. WDS Wireless Distribution System or WDS security is recommended that every wireless client in your NBG5715, you can also select an option (WPA Compatible) to support WPA as well. Usually, you should set up WPA2-PSK or WPA2 (... this case, it is independent of the security between bridged APs. Suppose the wireless network has two wireless clients. WPS WiFi Protected Setup (WPS) is better to set up the strongest encryption that wireless networks use WPA-PSK, WPA, or stronger encryption. See how to ...
...devices. Depending on the devices in the wireless network supports. WDS Wireless Distribution System or WDS security is recommended that every wireless client in your NBG5715, you can also select an option (WPA Compatible) to support WPA as well. Usually, you should set up WPA2-PSK or WPA2 (... this case, it is independent of the security between bridged APs. Suppose the wireless network has two wireless clients. WPS WiFi Protected Setup (WPS) is better to set up the strongest encryption that wireless networks use WPA-PSK, WPA, or stronger encryption. See how to ...
User Guide
Page 88
...type of the wireless network (the NBG5715's first SSID). Click this screen. 88 NBG5715 User's Guide This is disabled and there are no wireless or wireless security changes on the NBG5715. Table 36 Network > Wireless LAN 2.4G/5G > WPS LABEL WPS Setup WPS PIN Number WPS Status Status ...DESCRIPTION Select Enable to turn it off. This displays Configured when the NBG5715 has connected to a wireless network using the ...
...type of the wireless network (the NBG5715's first SSID). Click this screen. 88 NBG5715 User's Guide This is disabled and there are no wireless or wireless security changes on the NBG5715. Table 36 Network > Wireless LAN 2.4G/5G > WPS LABEL WPS Setup WPS PIN Number WPS Status Status ...DESCRIPTION Select Enable to turn it off. This displays Configured when the NBG5715 has connected to a wireless network using the ...
User Guide
Page 92
... (192.168.1.2 to 192.168.1.32) for other server computers, for instance, servers for your ISP gives you may have. 12.3.2 LAN TCP/IP The NBG5715 has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. 12.4 The LAN IP Screen..., web, etc., that you explicit DNS server address(es), read the embedded Web Configurator help regarding what fields need to be configured. 12.3.1 IP Pool Setup The NBG5715 is pre-configured with 32 client IP addresses starting from 192.168.1.33. Figure 56 Network > LAN > IP 92...
... (192.168.1.2 to 192.168.1.32) for other server computers, for instance, servers for your ISP gives you may have. 12.3.2 LAN TCP/IP The NBG5715 has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. 12.4 The LAN IP Screen..., web, etc., that you explicit DNS server address(es), read the embedded Web Configurator help regarding what fields need to be configured. 12.3.1 IP Pool Setup The NBG5715 is pre-configured with 32 client IP addresses starting from 192.168.1.33. Figure 56 Network > LAN > IP 92...
User Guide
Page 103
... TCP&UDP. Status This icon is turned on when the rule is the transport layer protocol used for specified services, NAT supports a default server. NBG5715 User's Guide 103 Figure 64 Network > NAT > Port Forwarding Chapter 14 NAT The following table describes the labels in this to use the default server... Port Forwarding Summary # This is the number of an individual port forwarding server entry. Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to add it in the Port Forwarding Summary section.
... TCP&UDP. Status This icon is turned on when the rule is the transport layer protocol used for specified services, NAT supports a default server. NBG5715 User's Guide 103 Figure 64 Network > NAT > Port Forwarding Chapter 14 NAT The following table describes the labels in this to use the default server... Port Forwarding Summary # This is the number of an individual port forwarding server entry. Table 46 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to add it in the Port Forwarding Summary section.
User Guide
Page 124
... remove an existing VPN rule. Click the Edit icon to go to 0.0.0.0. Click Apply to save your changes back to edit the VPN policy. 124 NBG5715 User's Guide This field displays 0.0.0.0 when you can initiate the VPN. Table 54 Security > IPSec VPN > General LABEL # Status DESCRIPTION This is enabled.... In this screen. Chapter 18 IPSec VPN Figure 79 Security > IPSec VPN > General The following table describes the fields in the Rule Setup screen to the screen where you configure the Secure Gateway Address field in this case only the remote IPSec router can edit the VPN rule...
... remove an existing VPN rule. Click the Edit icon to go to 0.0.0.0. Click Apply to save your changes back to edit the VPN policy. 124 NBG5715 User's Guide This field displays 0.0.0.0 when you can initiate the VPN. Table 54 Security > IPSec VPN > General LABEL # Status DESCRIPTION This is enabled.... In this screen. Chapter 18 IPSec VPN Figure 79 Security > IPSec VPN > General The following table describes the fields in the Rule Setup screen to the screen where you configure the Secure Gateway Address field in this case only the remote IPSec router can edit the VPN rule...
User Guide
Page 125
Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
Figure 80 Security > IPSec VPN > General > Edit: IKE NBG5715 User's Guide 125 You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. 18.5.1 IKEKey Setup IKEprovides more protection so it is generally recommended.
User Guide
Page 127
... the remote IPSec router. For a single IP address, enter a (static) IP address on the network behind the remote IPSec router. The NBG5715 uses its IP address. Select IP to identify this field as only one is active at any time. Authentication Method My IP Address Enter the... > IPSec VPN > General > Edit: IKE (continued) LABEL Remote Policy DESCRIPTION Remote IP addresses must be rebuilt if My IP Address changes after setup. When the remote IP address is a single address, type it has one of the dynamic domain names that dynamic domain name's IP address. Otherwise...
... the remote IPSec router. For a single IP address, enter a (static) IP address on the network behind the remote IPSec router. The NBG5715 uses its IP address. Select IP to identify this field as only one is active at any time. Authentication Method My IP Address Enter the... > IPSec VPN > General > Edit: IKE (continued) LABEL Remote Policy DESCRIPTION Remote IP addresses must be rebuilt if My IP Address changes after setup. When the remote IP address is a single address, type it has one of the dynamic domain names that dynamic domain name's IP address. Otherwise...
User Guide
Page 130
...and Authentication Algorithm fields (described below). You must choose a key group for phase 1 IKE setup. a 168-bit key with the DES encryption algorithm Authentication Algorithm SA Life Time The NBG5715 and the remote IPSec router must use the same algorithms and key , which hash algorithm to... use to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must select ...
...and Authentication Algorithm fields (described below). You must choose a key group for phase 1 IKE setup. a 168-bit key with the DES encryption algorithm Authentication Algorithm SA Life Time The NBG5715 and the remote IPSec router must use the same algorithms and key , which hash algorithm to... use to save your previous settings. 18.5.2 Manual Key Setup Manual key management is useful if you must select ...
User Guide
Page 134
... for the VPN tunnel when using dial backup or the LAN IP address when using DDNS. If the WAN connection goes down list box. 134 NBG5715 User's Guide Otherwise, you cannot configure any other active rules with the Secure Gateway Address field set to rebuild the VPN tunnel each time the... remote secure gateway's WAN IP address changes (there may be rebuilt if My IP Address changes after setup. Secure Gateway Address The VPN tunnel has to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the IPSec Keying Mode field must use...
... for the VPN tunnel when using dial backup or the LAN IP address when using DDNS. If the WAN connection goes down list box. 134 NBG5715 User's Guide Otherwise, you cannot configure any other active rules with the Secure Gateway Address field set to rebuild the VPN tunnel each time the... remote secure gateway's WAN IP address changes (there may be rebuilt if My IP Address changes after setup. Secure Gateway Address The VPN tunnel has to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the IPSec Keying Mode field must use...
User Guide
Page 141
... this example cannot complete their negotiation because NBG5715 B's Local ID type is IP, but the IKE SA is a public-key cryptography protocol that you have a shared secret, but NBG5715 A's Remote ID type is used within IKE SA setup to establish session keys. 768-bit, 1024-bit 1536-bit, ...2048-bit, and 3072-bit Diffie-Hellman groups are supported. NBG5715 User's Guide 141 It is called "pre-shared" because...
... this example cannot complete their negotiation because NBG5715 B's Local ID type is IP, but the IKE SA is a public-key cryptography protocol that you have a shared secret, but NBG5715 A's Remote ID type is used within IKE SA setup to establish session keys. 768-bit, 1024-bit 1536-bit, ...2048-bit, and 3072-bit Diffie-Hellman groups are supported. NBG5715 User's Guide 141 It is called "pre-shared" because...