Page 1
Default Login Details
User’s Guide
ARMOR Z2
AC2600 MU-MIMO Wireless Gigabit Router
Model: NBG6817
LAN IP Address http://192.168.1.1 (Router
Mode)
http://192 .168.1.2 (Access
Point Mode)
Password 1234
Version 1.00 Edition 1, 05/2018
Copyright © 2018 Zyxel Communications Corporation
Page 2
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in your
product firmware or your computer operating system. Every effort has been made to ensure that the
information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the NBG6817 and access the Web Configurator wizards.
It contains information on setting up your network and configuring for Internet access.
•More Information
Go to support.zyxel.com to find other information on the NBG6817
.
NBG6817 User’s Guide
2
Page 3
Contents Overview
Contents Overview
User’s Guide ........................................................................................................................................9
Introduction ........................................................................................................................................... 10
Introducing the Web Configurator ..................................................................................................... 15
eaZy 123 Wizard .................................................................................................................................... 18
NBG6817 Modes ................................................................................................................................... 27
Easy Mode ............................................................................................................................................. 28
Router Mode ......................................................................................................................................... 36
Access Point Mode .............................................................................................................................. 42
Tutorials .................................................................................................................................................. 49
Technical Reference ........................................................................................................................59
Status ...................................................................................................................................................... 60
WAN ....................................................................................................................................................... 73
Wireless LAN .......................................................................................................................................... 94
LAN ....................................................................................................................................................... 113
Applications ........................................................................................................................................ 118
Security ................................................................................................................................................ 141
Maintenance ...................................................................................................................................... 147
Troubleshooting .................................................................................................................................. 160
NBG6817 User’s Guide
3
Page 4
Table of Contents
Table of Contents
Contents Overview .............................................................................................................................3
Table of Contents.................................................................................................................................4
Part I: User’s Guide............................................................................................ 9
Chapter 1
Introduction ........................................................................................................................................10
1.1 Overview ......................................................................................................................................... 10
1.2 Applications .................................................................................................................................... 10
1.3 Ways to Manage the NBG6817 .................................................................................................... 10
1.4 Good Habits for Managing the NBG6817 ................................................................................... 11
1.5 Resetting the NBG6817 .................................................................................................................. 11
1.5.1 How to Use the RESET Button ................................................................................................ 11
1.6 The WPS Button ............................................................................................................................... 11
1.7 LEDs .................................................................................................................................................. 12
Chapter 2
Introducing the Web Configurator ...................................................................................................15
2.1 Overview ......................................................................................................................................... 15
2.2 Accessing the Web Configurator ................................................................................................. 15
2.2.1 Login Screen .......................................................................................................................... 16
2.2.2 Change Default Password Screen ...................................................................................... 16
Chapter 3
eaZy 123 Wizard.................................................................................................................................18
3.1 Overview ......................................................................................................................................... 18
3.2 Accessing the eaZy 123 Wizard .................................................................................................... 18
3.3 Internet Type ................................................................................................................................... 20
3.3.1 WAN Selection Type: Automatic - DHCP ........................................................................... 21
3.3.2 WAN Selection Type: PPPoE ................................................................................................. 21
3.3.3 WAN Selection Type: Static .................................................................................................. 22
3.4 Wireless Network ............................................................................................................................. 23
Chapter 4
NBG6817 Modes.......................................... .......................................................................................27
4.1 Overview ......................................................................................................................................... 27
4.1.1 Web Configurator Modes .................................................................................................... 27
NBG6817 User’s Guide
4
Page 5
Table of Contents
4.1.2 Device Modes ....................................................................................................................... 27
Chapter 5
Easy Mode..........................................................................................................................................28
5.1 Overview ......................................................................................................................................... 28
5.2 What You Can Do .......................................................................................................................... 28
5.3 What You Need to Know ............................................................................................................... 29
5.4 Navigation Panel ............................................................................................................................ 29
5.5 Network Map .................................................................................................................................. 30
5.6 Control Panel .................................................................................................................................. 31
5.6.1 Wi-Fi ......................................................................................................................................... 32
5.6.2 Guest Wi-Fi ............................................................................................................................. 33
5.6.3 Parental Control .................................................................................................................... 34
5.6.4 Notification ............................................................................................................................ 35
5.6.5 LED .......................................................................................................................................... 35
Chapter 6
Router Mode.......................................................................................................................................36
6.1 Overview ......................................................................................................................................... 36
6.2 Router Mode Status Screen ........................................................................................................... 36
6.2.1 Navigation Panel .................................................................................................................. 39
Chapter 7
Access Point Mode............................................................................................................................42
7.1 Overview ......................................................................................................................................... 42
7.2 What You Can Do .......................................................................................................................... 42
7.3 What You Need to Know ............................................................................................................... 42
7.3.1 Setting your NBG6817 to AP Mode ..................................................................................... 42
7.3.2 Accessing the Web Configurator in Access Point Mode ................................................. 43
7.3.3 Configuring your WLAN and Maintenance Settings ......................................................... 44
7.4 AP Mode Status Screen ................................................................................................................. 44
7.4.1 Navigation Panel .................................................................................................................. 46
7.5 LAN Screen ...................................................................................................................................... 46
Chapter 8
Tutorials...............................................................................................................................................49
8.1 Overview ......................................................................................................................................... 49
8.2 Set Up a Wireless Network Using WPS ........................................................................................... 49
8.2.1 Push Button Configuration (PBC) ........................................................................................ 49
8.2.2 PIN Configuration .................................................................................................................. 50
8.3 Connect to NBG6817 Wireless Network without WPS ................................................................. 51
8.3.1 Configure Your Notebook .................................................................................................... 53
8.4 Using Guest SSIDs on the NBG6817 ............................................................................................... 55
NBG6817 User’s Guide
5
Page 6
Table of Contents
8.4.1 Configuring Security Settings of Guest SSIDs ...................................................................... 56
Part II: Technical Reference...........................................................................59
Chapter 9
Status...................................................................................................................................................60
9.1 Overview ......................................................................................................................................... 60
9.1.1 What You Can Do ................................................................................................................. 60
9.2 Live Network Monitor Screen ........................................................................................................ 60
9.3 Usage Monitor Screens .................................................................................................................. 63
9.3.1 Internet Data Usage Monitor ............................................................................................... 63
9.3.2 Bandwidth History ................................................................................................................. 64
9.3.3 Time Tracker ........................................................................................................................... 66
9.3.4 Data Usage Alert ................................................................................................................... 66
9.4 Common Usage Screen ............................................................................................................. 69
9.5 Download Traffic Statistics Screen ................................................................................................ 70
9.6 Client Tables Screen ....................................................................................................................... 71
Chapter 10
WAN ....................................................................................................................................................73
10.1 Overview ....................................................................................................................................... 73
10.2 What You Can Do ........................................................................................................................ 73
10.3 What You Need To Know ............................................................................................................ 73
10.3.1 Configuring Your Internet Connection ............................................................................. 74
10.4 Internet Connection Screen ........................................................................................................ 76
10.4.1 IPoE Encapsulation .............................................................................................................. 76
10.4.2 PPPoE Encapsulation .......................................................................................................... 81
10.4.3 PPTP Encapsulation ............................................................................................................. 85
10.5 NAT ................................................................................................................................................. 88
10.5.1 General Screen ................................................................................................................... 88
10.5.2 Port Trigger Screen .............................................................................................................. 90
10.5.3 Passthrough Screen ............................................................................................................ 90
10.6 Dynamic DNS Screen ................................................................................................................... 92
Chapter 11
Wireless LAN .......................................................................................................................................94
11.1 Overview ....................................................................................................................................... 94
11.1.1 What You Can Do ............................................................................................................... 95
11.1.2 What You Should Know ...................................................................................................... 95
11.2 Wireless Screen ............................................................................................................................ 98
11.3 Wireless Security .......................................................................................................................... 101
NBG6817 User’s Guide
6
Page 7
Table of Contents
11.3.1 No Security ......................................................................................................................... 101
11.3.2 WPA-PSK/WPA2-PSK .......................................................................................................... 102
11.3.3 WPA/WPA2 ........................................................................................................................ 103
11.4 Guest Wireless Screen ................................................................................................................ 105
11.4.1 Guest Wireless Edit ............................................................................................................ 106
11.5 MAC Filter Screen ...................................................................................................................... 107
11.6 Advanced Screen ...................................................................................................................... 108
11.7 WPS Screen ................................................................................................................................. 110
11.8 Scheduling Screen ..................................................................................................................... 111
Chapter 12
LAN....................................................................................................................................................113
12.1 Overview ..................................................................................................................................... 113
12.2 What You Can Do ...................................................................................................................... 113
12.3 What You Need To Know .......................................................................................................... 113
12.4 LAN IP Screen .............................................................................................................................. 114
12.5 Static DHCP Screen .................................................................................................................... 115
12.6 IPv6 LAN Screen .......................................................................................................................... 116
Chapter 13
Applications .....................................................................................................................................118
13.1 Overview ..................................................................................................................................... 118
13.1.1 What You Can Do ............................................................................................................. 118
13.1.2 What You Need To Know ................................................................................................. 118
13.1.3 Before You Begin ............................................................................................................... 119
13.2 Parental Control ......................................................................................................................... 120
13.2.1 General Screen ................................................................................................................. 120
13.2.2 Notification Screen ........................................................................................................... 123
13.3 Bandwidth Management .......................................................................................................... 126
13.3.1 Bandwidth Screen ............................................................................................................. 126
13.3.2 Priorities Screen .................................................................................................................. 127
13.4 USB Media Sharing Screen ........................................................................................................ 128
13.5 UPnP Screen ................................................................................................................................ 130
13.6 File Sharing ................................................................................................................................... 131
13.6.1 SAMBA Server Screen ....................................................................................................... 131
13.6.2 FTP Server Screen .............................................................................................................. 133
13.6.3 Example of Accessing Your Shared Files From a Computer ........................................ 134
13.7 ONE Connect Screen ................................................................................................................. 138
13.8 Technical Reference .................................................................................................................. 139
Chapter 14
Security .............................................................................................................................................141
14.1 Overview ................................................................................................................................... 141
NBG6817 User’s Guide
7
Page 8
Table of Contents
14.1.1 What You Can Do ............................................................................................................. 141
14.1.2 What You Need To Know ................................................................................................. 141
14.2 IPv4 Firewall Screen ................................................................................................................... 142
14.3 IPv6 Firewall Screen .................................................................................................................... 144
Chapter 15
Maintenance....................................................................................................................................147
15.1 Overview ..................................................................................................................................... 147
15.2 What You Can Do ...................................................................................................................... 147
15.3 General Screen ........................................................................................................................... 147
15.4 Password Screen ......................................................................................................................... 148
15.5 Time Screen ................................................................................................................................. 148
15.6 Firmware Upgrade Screen ........................................................................................................ 150
15.7 Backup/Restore Screen ............................................................................................................. 151
15.8 Restart Screen ............................................................................................................................. 153
15.9 Language Screen ....................................................................................................................... 153
15.10 Remote Management Screen ................................................................................................ 153
15.10.1 Remote Access ............................................................................................................... 153
15.10.2 Wake On LAN .................................................................................................................. 155
15.11 Log Screen ................................................................................................................................ 156
15.12 System Operation Mode Overview ........................................................................................ 157
15.13 Operation Mode Screen ......................................................................................................... 158
Chapter 16
Troubleshooting................................................................................................................................160
16.1 Overview ..................................................................................................................................... 160
16.2 Power, Hardware Connections, and LEDs ............................................................................... 160
16.3 NBG6817 Access and Login ...................................................................................................... 161
16.4 Internet Access ........................................................................................................................... 162
16.5 Resetting the NBG6817 to Its Factory Defaults ........................................................................ 164
16.6 Wireless Connections ................................................................................................................. 164
16.7 USB Device Problems ................................................................................................................. 166
Appendix A Customer Support ..................................................................................................... 167
Appendix B Setting Up Your Computer’s IP Address................................................................... 173
Appendix C Common Services .....................................................................................................193
Appendix D Legal Information ...................................................................................................... 196
Index.................................................................................................................................................203
NBG6817 User’s Guide
8
Page 9
PART I
User’s Guide
9
Page 10
1.1 Overview
This chapter introduces the main features and applications of the NBG6817.
The NBG6817 extends the range of your existing wired network without additional wiring, providing easy
network access to mobile users. You can set up a wireless network with other IEEE 802.11a/b/g/n/ac
compatible devices. The NBG6817 is able to function both 2.4GHz and 5GHz networks at the same time.
A range of services such as a firewall and content filtering are also available for secure Internet
computing.
There are two USB ports on the side panel of your NBG6817. One is USB 2.0, and the other is USB 3.0. You
can connect USB memory sticks, USB hard drives, or USB devices for file sharing. The NBG6817
automatically detects the USB devices.
CHAPTER 1
Introduction
1.2 Applications
Your can have the following networks with the NBG6817:
• Wired. You can connect network devices via the Ethernet ports of the NBG6817 so that they can
communicate with each other and access the Internet.
• Wireless. Wireless clients can connect to the NBG6817 to access network resources. You can use WPS
(Wi-Fi Protected Setup) to create an instant network connection with another WPS-compatible
device.
• WAN. Connect to a broadband modem/router for Internet access.
1.3 Ways to Manage the NBG6817
Use any of the following methods to manage the NBG6817.
• WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web Configurator
to set up a wireless network with your NBG6817.
• Web Configurator. This is recommended for everyday management of the NBG6817 using a
(supported) web browser.
NBG6817 User’s Guide
10
Page 11
Chapter 1 Introduction
1.4 Good Habits for Managing the NBG6817
Do the following things regularly to make the NBG6817 more secure and to manage the NBG6817 more
effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the NBG6817 to its factory default settings. If you backed up an
earlier configuration file, you would not have to totally re-configure the NBG6817. You could simply
restore your last configuration.
1.5 Resetting the NBG6817
If you forget your password or IP address, or you cannot access the Web Configurator, you will need to
use the RESET button at the back of the NBG6817 to reload the factory-default configuration file. This
means that you will lose all configurations that you had previously saved, the password will be reset to
“1234” and the IP address will be reset to “192.168.1.1”.
1.5.1 How to Use the RESET Button
1 Make sure the power LED is on.
2 Press the RESET button for one to four seconds to restart/reboot the NBG6817.
3 Press the RESET button for longer than five seconds to set the NBG6817 back to its factory-default
configurations.
1.6 The WPS Button
Your NBG6817 supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure wireless
network. WPS is an industry standard specification, defined by the Wi-Fi Alliance.
WPS allows you to quickly set up a wireless network with strong security, without having to configure
security settings manually. Each WPS connection works between two devices. Both devices must
support WPS (check each device’s documentation to make sure).
Depending on the devices you have, you can either press a button (on the device itself, or in its
configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to
authenticate the other) in each of the two devices. When WPS is activated on a device, it has two
minutes to find another device that also has WPS activated. Then, the two devices connect and set up
a secure network by themselves.
You can use the WPS button on the rear panel of the NBG6817 to activate WPS in order to quickly set up
a wireless network with strong security.
NBG6817 User’s Guide
11
Page 12
1 Make sure the power LED is on (not blinking).
2.4G WLAN/WPS
5G WLAN/WPS
Power
Internet
2 Press the WPS button for more than three seconds and release it. Press the WPS button on another WPS-
enabled device within range of the NBG6817.
Note: You must activate WPS in the NBG6817 and in another wireless device within two
1.7 LEDs
Figure 1 Front Panel
Chapter 1 Introduction
minutes of each other.
For more information on using WPS, see Section 8.2 on page 49.
The following table describes the front panel LEDs.
Table 1 Front Panel LEDs
LED COLOR STATUS DESCRIPTION
Power/System White On The NBG6817 is receiving power and functioning properly.
Blinking The NBG6817 is in the process of starting up, default restoring, or
myZyxelCloud online registration pairing.
Off The NBG6817 is not receiving power.
Internet White On The NBG6817 has an IP connection but no traffic.
Your device has a WAN IP address (either static or assigned by a
DHCP server), PPP negotiation was successfully completed (if used)
and the connection is up.
Blinking The NBG6817 is sending or receiving IP traffic.
Off The NBG6817 does not have an IP connection.
NBG6817 User’s Guide
12
Page 13
Chapter 1 Introduction
LAN 1-4
WAN
WPS
RESET
WiFi
POWER
Table 1 Front Panel LEDs (continued)
LED COLOR STATUS DESCRIPTION
5G WLAN/WPS White On The NBG6817 is ready and the 5GHz wireless LAN is on, but is not
sending/receiving data through the wireless LAN.
Blinking The NBG6817 is sending/receiving data through the wireless LAN.
Off The wireless LAN is not ready or has failed.
Amber On WPS is enabled. The NBG6817 is in the process of firmware
upgrading, configuration restoring, or resetting.
Blinking The NBG6817 is negotiating a WPS connection with a wireless client.
Off WPS is disabled.
2.4G WLAN/WPS White On The NBG6817 is ready and the 2.4GHz wireless LAN is on, but is not
Blinking The NBG6817 is sending/receiving data through the wireless LAN.
Off The wireless LAN is not ready or has failed.
Amber On WPS is enabled. The NBG6817 is in the process of firmware
Blinking The NBG6817 is negotiating a WPS connection with a wireless client.
Off WPS is disabled.
sending/receiving data through the wireless LAN.
upgrading, configuration restoring, or resetting.
Figure 2 Rear Panel
NBG6817 User’s Guide
13
Page 14
Figure 3 Side Panel
USB 1-2
Chapter 1 Introduction
NBG6817 User’s Guide
14
Page 15
2.1 Overview
This chapter describes how to access the NBG6817 Web Configurator and provides an overview of its
screens.
The Web Configurator is an HTML-based management interface that allows easy setup and
management of the NBG6817 via Internet browser. Use a browser that supports HTML5, such as Internet
Explorer 9.0 and later versions, Mozilla Firefox 21 and later versions, Safari 6.0 and later versions or Google
Chrome 26.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
CHAPTER 2
Introducing the Web
Configurator
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in
Windows 7.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
Refer to the Troubleshooting chapter (Chapter 16 on page 160) to see how to make sure these functions
are allowed in Internet Explorer.
2.2 Accessing the Web Configurator
1 Make sure your NBG6817 hardware is properly connected and prepare your computer or computer
network to connect to the NBG6817 (refer to the Quick Start Guide).
2 Launch your web browser.
3 The NBG6817 is in router mode by default. Type "http://192.168.1.1 or http://myrouter" as the website
address. If the NBG6817 obtains a WAN IP address or a DNS server IP address in the same subnet as the
LAN IP address 192.168.1.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See
Auto-IP Change on page 75 for more information.
If the NBG6817 is in access point, the IP address is 192.168.1.2. See Chapter 4 on page 27 for more
information about the modes of the NBG6817.
Your computer must be in the same subnet in order to access this website address.
NBG6817 User’s Guide
15
Page 16
2.2.1 Login Screen
Note: If this is the first time you are accessing the Web Configurator, you may be redirected to
the eaZy123 wizard. Refer to Chapter 3 on page 18 for the eaZy123 setup screens.
The Web Configurator initially displays the following login screen.
Figure 4 Login screen
Chapter 2 Introducing the Web Configurator
The following table describes the labels in this screen.
Table 2 Login screen
LABEL DESCRIPTION
Password Type "1234" (default) as the password. Click Login.
2.2.2 Change Default Password Screen
You should see a screen asking you to change your password (highly recommended) as shown next.
NBG6817 User’s Guide
16
Page 17
Chapter 2 Introducing the Web Configurator
Figure 5 Change Default Password Screen
The following table describes the labels in this screen.
Table 3 Change Default Password Screen
LABEL DESCRIPTION
Enter your new
password here
Confirm password Retype the password for confirmation.
Skip Click Skip if you do not want to change the password this time.
Change Click Change to save your changes back to the NBG6817.
Type a new password.
Note: The management session automatically times out when the time period set in the
Administrator Inactivity Timer field expires (default five minutes; go to Chapter 15 on
page 147 to change this). Simply log back into the NBG6817 if this happens.
NBG6817 User’s Guide
17
Page 18
eaZy 123 Wizard
3.1 Overview
This chapter provides information on the eaZy 123 setup screens in the Web Configurator.
The Web Configurator’s eaZy 123 setup wizard helps you configure your device to access the Internet.
Refer to your ISP for your Internet account information. Leave a field blank if you don’t have that
information.
3.2 Accessing the eaZy 123 Wizard
Launch your web browser and type "http://192.168.1.1 or http://myrouter" as the website address. Type
"1234" (default) as the password and click Login.
CHAPTER 3
Note: The eaZy 123 wizard appears automatically when the NBG6817 is accessed for the first
time or when you reset the NBG6817 to its default factory settings. If you didn’t
configure the wizard screens, you will be redirected to the login page when you
connect to the Internet.
If you have already configured the wizard screens and want to open it again, click on the upper
right corner of any Web Configurator screen. The eaZy 123 wizard attempts to detect which WAN
connection type you are using.
If the eaZy 123 wizard does not detect a connection type, you must select one from the drop-down list
box. Check with your ISP to make sure you use the correct type.
If you do not have the Internet connection, the following screen opens.
NBG6817 User’s Guide
18
Page 19
Chapter 3 eaZy 123 Wizard
Figure 6 Unable to continue: WAN
If you do not press the Wi-Fi button located on the NBG6817’s back panel, the following screen opens.
Figure 7 Unable to continue: Wi-Fi
Note: If you get an error message, check your hardware connections. Make sure your Internet
connection is up and running.
The wizard screen opens.
NBG6817 User’s Guide
19
Page 20
Chapter 3 eaZy 123 Wizard
Figure 8 Detecting your Internet Connection Type
Figure 9 eaZy 123 Setup
3.3 Internet Type
The NBG6817 offers three WAN selection types. They are Automatic - DHCP, PPPoE or Static. Configure
the Internet type settings on your NBG6817 in the first part. The following screen depends on your Internet
connection type. Enter the details provided by your Internet Service Provider (ISP) in the fields (if any).
Check with your ISP to make sure you use the correct type. This wizard screen varies according to the
connection type that you select.
NBG6817 User’s Guide
20
Page 21
Chapter 3 eaZy 123 Wizard
3.3.1 WAN Selection Type: Automatic - DHCP
Select the Automatic - DHCP option if your ISP did not assign you a fixed IP address.
Figure 10 WAN Selection Type: Automatic - DHCP
3.3.2 WAN Selection Type: PPPoE
Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet
Engineering Task Force) standard specifying how a host personal computer interacts with a broadband
modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for instance, RADIUS).
One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a
function known as dynamic service selection. This enables the service provider to easily create and offer
new IP services for specific users.
Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it requires no
specific configuration of the broadband modem at the subscriber's site.
By implementing PPPoE directly on the NBG6817 (rather than individual computers), the computers on
the LAN do not need PPPoE software installed, since the NBG6817 does that part of the task.
Furthermore, with NAT, all of the LAN's computers will have Internet access.
NBG6817 User’s Guide
21
Page 22
Chapter 3 eaZy 123 Wizard
Figure 11 WAN Selection Type: PPPoE
The following table describes the labels in this screen.
Table 4 WAN Selection Type: PPPoE
LABEL DESCRIPTION
WAN Selection Select the PPPoE (Point-to-Point Protocol over Ethernet) option for a dial-up connection.
PPPoE Username Type the user name given to you by your ISP.
PPPoE Password Type the password associated with the user name above.
Static IP (Optional) Enter the WAN IP address assigned by your ISP.
Note: If you get an error message, make sure you have entered the correct information
provided by your ISP.
3.3.3 WAN Selection Type: Static
Choose Static as the WAN Selection Type when the WAN port is used as a regular Ethernet. Click Next.
NBG6817 User’s Guide
22
Page 23
Chapter 3 eaZy 123 Wizard
Figure 12 WAN Selection Type: Static
The following table describes the labels in this screen.
Table 5 WAN Selection Type: Static
LABEL DESCRIPTION
WAN Selection Select the Static option when the WAN port is using a fixed IP address.
IP Address Enter the IP address provided by your ISP.
Subnet Mask Enter the IP subnet mask in this field.
Gateway IP Address
(Optional)
DNS Server Enter the DNS server IP address in this field.
Enter the gateway IP address in this field.
Note: If you get an error screen, make sure your Internet connection is working and select the
right WAN Selection Type. Contact your ISP if you are not sure of your Internet
Connection type.
3.4 Wireless Network
Configure the wireless network settings on your NBG6817 in the second part. The default wireless security
setting is WPA2-PSK.
NBG6817 User’s Guide
23
Page 24
Figure 13 Wireless Network
Chapter 3 eaZy 123 Wizard
The following table describes the labels in this screen.
Table 6 Wireless Network
LABEL DESCRIPTION
Wireless Name
(SSID)
Enter a descriptive name for the wireless LAN.
Note: The setting here applies to 2.4 GHz wireless radios.
If you change this field on the NBG6817, make sure all wireless stations use the same SSID in order
to access the network.
Wireless
Password
(WPA2)
Edit 5 GHz
wireless network
5GHz Wireless
Name (SSID)
5GHz Wireless
Password
(WPA2)
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless
connection by configuring WPA in the wireless LAN screens.
Select this check box to configure different SSID and wireless security settings for the NBG6817’s 5
GHz wireless network.
If you do not select this option, the NBG6817 uses the same SSID and Wi-Fi key (you configured
above) for the 5 GHZ wireless network.
Enter a descriptive name for the wireless LAN.
If you change this field on the NBG6817, make sure all wireless stations use the same SSID in order
to access the network.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless
connection by configuring WPA in the wireless LAN screens.
Click the Apply button in the third part to save your settings.
NBG6817 User’s Guide
24
Page 25
Chapter 3 eaZy 123 Wizard
Figure 14 Apply your Wi-Fi settings
Congratulations! Open a web browser, such as Internet Explorer, to visit your favorite website.
Note: If you cannot access the Internet when your computer is connected to one of the
NBG6817’s LAN ports, check your connections. Then turn the NBG6817 off, wait for a
few seconds then turn it back on. If that does not work, log in to the web configurator
again and check you have typed all information correctly. See the User’s Guide for
more suggestions.
Figure 15 Congratulations
You can click the myZyXELcloud button to go to https://mycloud.zyxel.com, where you can create an
account and register your NBG6817. At the time of writing, you can have free DDNS service to get a
NBG6817 User’s Guide
25
Page 26
Chapter 3 eaZy 123 Wizard
domain name mapped to the NBG6817’s dynamic IP address. With DDNS, you can use the domain
name to remotely access the NBG6817’s Web Configurator through the Internet.
You have successfully set up your NBG6817 to operate on your network and access the Internet.
NBG6817 User’s Guide
26
Page 27
4.1 Overview
This chapter introduces the different modes available on your NBG6817. First, the term “mode” refers to
two things in this User’s Guide.
• Web Configurator mode. This refers to the Web Configurator interface you want to use for editing
NBG6817 features.
• Device mode. This is the operating mode of your NBG6817, or simply how the NBG6817 is being used
in the network.
4.1.1 Web Configurator Modes
This refers to the configuration interface of the Web Configurator, which has two modes:
CHAPTER 4
NBG6817 Modes
• Easy: The Web Configurator shows this mode by default. Refer to Chapter 5 on page 28 for more
information on the screens in this mode. This interface may be sufficient for users who just want to use
the device.
• Expert: Advanced users can change to this mode to customize all the functions of the NBG6817. Click
> Expert Mode after logging into the Web Configurator. The User’s Guide Chapter 9 on page 60
through Chapter 15 on page 158 discusses the screens in this mode.
4.1.2 Device Modes
This refers to the operating mode of the NBG6817, which can act as a:
• Router: This is the default device mode of the NBG6817. Use this mode to connect the local network
to another network, like the Internet. Go to Section 6.2 on page 36 to view the Status screen in this
mode.
• Access Point: Use this mode if you want to extend your network by allowing network devices to
connect to the NBG6817 wirelessly. Go to Section 7.4 on page 44 to view the Status screen in this
mode.
For more information on these modes and to change the mode of your NBG6817, refer to Chapter 15 on
page 158.
The menu for changing device modes is available in Expert Mode only.
Note: Choose your device mode carefully to avoid having to change it later.
When changing to another mode, the IP address of the NBG6817 changes. The running applications
and services of the network devices connected to the NBG6817 can be interrupted.
NBG6817 User’s Guide
27
Page 28
5.1 Overview
Network Map
Navigation Panel
Control Panel
Go to
Status
Screen
(Expert
Mode)
The Web Configurator is set to Easy Mode by default. You can configure several key features of the
NBG6817 in this mode. This mode is useful to users who are not fully familiar with some features that are
usually intended for network administrators.
When you log in to the Web Configurator, the following screen opens.
Figure 16 Easy Mode
CHAPTER 5
Easy Mode
5.2 What You Can Do
You can do the following in this mode:
• Use this Navigation Panel to open the eaZy123 wizard or log out the NBG6817 (Section 5.4 on page
29).
• Use the Network Map screen to check if your NBG6817 is connected to the Internet (Section 5.5 on
page 30).
NBG6817 User’s Guide
28
Page 29
Chapter 5 Easy Mode
• Use the Control Panel to configure and enable NBG6817 features, including guest Wi-Fi, wireless
security, parental control and so on (Section 5.6 on page 31).
5.3 What You Need to Know
Between the different device modes, the Control Panel (Section 5.6 on page 31) changes depending
on which features are applicable to the mode:
• Router Mode: All Control Panel features are available.
• Access Point Mode: Parental Control and Notification are not available.
5.4 Navigation Panel
Use this navigation panel to opt out of the Easy mode.
Figure 17 Easy Mode: Navigation Panel
The following table describes the labels in this screen.
Table 7 Easy Mode: Navigation Panel
ITEM DESCRIPTION
Click this icon to open a screen where you can click Check here to redirect your
Firmware Notification
Wizard Click this icon to open the eaZy123 wizard for the NBG6817.
Logout Click this to end the Web Configurator session.
Figure 18 Easy Mode: Navigation Panel: Firmware Notification
screen to the firmware upgrade page.
This icon only displays when new firmware is released.
NBG6817 User’s Guide
29
Page 30
5.5 Network Map
When you log into the Web Configurator, the Network Map is shown as follows.
Figure 19 Easy Mode: Network Map
Chapter 5 Easy Mode
This screen displays whether the NBG6817 connects to the Internet. It also shows the devices connected
to the NBG6817, including those connecting wirelessly. Click the Refresh button to refresh the network
map.
The following table describes the icons in this screen.
Table 8 Easy Mode: Network Map
ITEM DESCRIPTION
This icon shows the NBG6817’s connection status.
This icon is grayed out if the user is unable to access the Internet.
Click this button to refresh the NBG6817’s connection status and the network map.
Info Click this to view the device’s information that is currently connected to the NBG6817.
Block Click this to block the device from accessing the Internet through the NBG6817.
Rename / Icon Click this to rename the device or change the device’s icon.
NBG6817 User’s Guide
30
Page 31
Chapter 5 Easy Mode
Figure 20 Easy Mode: Network Map: Info
Figure 21 Easy Mode: Network Map: Rename / Icon
Click Apply to save your changes back to the NBG6817. Click Cancel to reload the previous
configuration for this screen.
5.6 Control Panel
The features configurable in Easy Mode are shown in the Control Panel.
Figure 22 Easy Mode: Control Panel
Switch ON to enable the feature. Otherwise, switch OFF. If the feature is turned on, the green light
flashes. If it is turned off, the blue light flashes.
Additionally, click the feature to open a screen where you can edit its settings.
NBG6817 User’s Guide
31
Page 32
The following table describes the labels in this screen.
Table 9 Easy Mode: Control Panel
ITEM DESCRIPTION
Wi-Fi Click this to configure wireless radio, SSID, security mode and wireless password for the
Guest Wi-Fi Click this to configure wireless and wireless security settings for the guest Wi-Fi network.
Parental Control Switch ON to enable parental control, and click this to view the parental control rules.
Notification Switch ON to have the NBG6817 send e-mail notifications when the user(s) is
LED Switch ON to have the NBG6817's LEDs (lights) stay lit/blinking. Otherwise, switch OFF.
5.6.1 Wi-Fi
Chapter 5 Easy Mode
NBG6817's default Wi-Fi network.
Refer to Section 5.6.1 on page 32 to see this screen.
Otherwise, switch OFF.
Refer to Section 5.6.3 on page 34 to see this screen.
connected to the NBG6817 for Internet access during the specified time periods.
Otherwise, switch OFF.
Refer to Section 5.6.4 on page 35 to see this screen.
Use this screen to configure security for the NBG6817's default wireless LAN. You can enter the SSID and
select the wireless security mode in the following screen. See Chapter 14 on page 141 for how to
configure wireless network.
Note: You can enable the wireless function of your NBG6817 by first turning on the WIFI switch
in the rear panel.
Figure 23 Easy Mode: Wi-Fi
NBG6817 User’s Guide
32
Page 33
The following table describes the labels in this screen.
Table 10 Easy Mode: Wi-Fi
LABEL DESCRIPTION
Wireless Radio Choose whether you want to apply the wireless security to 2.4G Hz, 5G Hz or Both wireless
Network Name
(SSID)
Security Mode Select WPA2-PSK to enable data encryption. Or Select No Security to allow wireless clients to
Password This field appears when you choose wither WPA2-PSK as the security mode.
Verify Password Type the password again to confirm.
Cancel Click Cancel to reload the previous configuration for this screen.
Apply Click Apply to save your changes back to the NBG6817.
5.6.2 Guest Wi-Fi
This screen allows you to configure guest wireless network settings on the NBG6817. Users connected to
the guest wireless network can access the Internet via the NBG6817, but not other networks connected
to the NBG6817.
Figure 24 Easy Mode: Guest Wi-Fi
Chapter 5 Easy Mode
radios.
(Service Set IDentity) The SSID identifies the Service Set with which a wireless station is
associated. Wireless stations associating to the access point (AP) must have the same
SSID. Enter a descriptive name (up to 32 keyboard characters) for the wireless LAN.
communicate with the access points without any data encryption.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
See Chapter 11 on page 94 for how to enable and set up the guest wireless network.
NBG6817 User’s Guide
33
Page 34
The following table describes the labels in this screen.
Table 11 Easy Mode: Guest Wi-Fi
LABEL DESCRIPTION
Wireless Radio Choose whether you want to apply the wireless settings to the 2.4G Hz or 5G Hz wireless
Network Name
(SSID)
Security Mode Select WPA2-PSK to enable data encryption. Or select No Security to allow wireless clients to
Password This field appears when you choose WPA2-PSK as the security mode.
Verify Password Type the password again to confirm.
Cancel Click Cancel to reload the previous configuration for this screen.
Apply Click Apply to save your changes back to the NBG6817.
5.6.3 Parental Control
Use this screen to view the parental control rules configured on the NBG6817. See Section 13.2 on page
120 for how to enable and configure parental control rules.
Chapter 5 Easy Mode
radio.
The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the guest wireless network.
communicate with the NBG6817 without any data encryption.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
Figure 25 Easy Mode: Parental Control
The following table describes the labels in this screen.
Table 12 Easy Mode: Parental Control
LABEL DESCRIPTION
Status This indicates whether the rule is active or not.
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
User Name This shows the name of the user to which this rule applies.
Schedule This shows whether the user is allowed to access the Internet (Allow) or not (Block).
Bonus If the user is currently not permitted to access the Internet, you can click the Bonus to allow
access for a specified period of time. A screen then displays allowing you to set how long (in
minutes) the user is allowed to access the Internet.
This button is grayed out if the user is now able to access the Internet.
Remaining time This field displays the amount of Internet access time that remains for each user before the
NBG6817 blocks the user from accessing the Internet.
None means there is no extra Internet access time.
NBG6817 User’s Guide
34
Page 35
5.6.4 Notification
Use this screen to view the e-mail notification rules configured on the NBG6817. See Section 13.2.2 on
page 123 for how to configure e-mail notification rules and e-mail settings.
Figure 26 Easy Mode: Notification
The following table describes the labels in this screen.
Table 13 Easy Mode: Notification
LABEL DESCRIPTION
Notification
Status This indicates whether the rule is active or not.
User Name This shows the name of the user to which this rule applies.
Notification This shows the e-mail address to which the notification is sent.
Chapter 5 Easy Mode
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
5.6.5 LED
Switch ON to turn on the LEDs (lights) on the NBG6817. Otherwise, switch OFF.
NBG6817 User’s Guide
35
Page 36
6.1 Overview
Modem
The NBG6817 is set to router mode by default. Routers are used to connect the local network to another
network (for example, the Internet). In the figure below, the NBG6817 connects the local network (LAN1
~ LAN4) to the Internet.
Figure 27 NBG6817 Network
CHAPTER 6
Router Mode
Note: After clicking Login, the Easy Mode appears. Refer to Chapter 5 on page 28 for the
Easy Mode screens. Change to Expert Mode to see the screens described in the
sections following this.
6.2 Router Mode Status Screen
Click Expert Mode > Status > System Status to open the status screen.
NBG6817 User’s Guide
36
Page 37
Chapter 6 Router Mode
Figure 28 Expert Mode: Status > System Status: Router Mode
The following table describes the labels shown in the Status screen.
Table 14 Expert Mode: Status > System Status: Router Mode
LABEL DESCRIPTION
Device Information
Item This column shows the type of data the NBG6817 is recording.
Data This column shows the actual data recorded by the NBG6817.
Host Name This is the System Name you enter in the Maintenance > General screen. It is for identification
purposes.
Model Number This is the model name of your device.
Firmware Version This is the firmware version.
Sys OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817 is set - Router Mode.
WAN Information
MAC Address This shows the WAN Ethernet adapter MAC Address of your device.
IP Address This shows the WAN port’s IP address.
IP Subnet Mask This shows the WAN port’s subnet mask.
Default Gateway This shows the WAN port’s gateway IP address.
IPv6 Address This shows the IPv6 address of the NBG6817 on the WAN.
LAN Information
MAC Address This shows the LAN Ethernet adapter MAC Address of your device.
NBG6817 User’s Guide
37
Page 38
Chapter 6 Router Mode
Table 14 Expert Mode: Status > System Status: Router Mode (continued)
LABEL DESCRIPTION
IP Address This shows the LAN port’s IP address.
IP Subnet Mask This shows the LAN port’s subnet mask.
DHCP This shows the LAN port’s DHCP role - Server or Disable.
IPv6 Address This shows the IPv6 address of the NBG6817 on the LAN.
WLAN 2.4G Information
WLAN OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817’s wireless LAN is set -
Access Point Mode.
MAC Address This shows the 2.4GHz wireless adapter MAC Address of your device.
SSID This shows a descriptive name used to identify the NBG6817 in the 2.4GHz wireless LAN.
Channel This shows the channel number which you select manually.
Security This shows the level of wireless security the NBG6817 is using.
WLAN 5G Information
WLAN OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817’s wireless LAN is set -
Access Point Mode.
MAC Address This shows the 5GHz wireless adapter MAC Address of your device.
SSID This shows a descriptive name used to identify the NBG6817 in the 5GHz wireless LAN.
Channel This shows the channel number which you select manually.
Security This shows the level of wireless security the NBG6817 is using.
Firewall This shows whether the firewall is enabled or not.
System Status
System Up Time This is the total time the NBG6817 has been on.
Current Date/Time This field displays your NBG6817’s present date and time.
System Resource
- CPU Usage This displays what percentage of the NBG6817’s processing ability is currently used. When this
percentage is close to 100%, the NBG6817 is running at full load, and the throughput is not going
to improve anymore. If you want some applications to have more throughput, you should turn
off other applications (for example, using bandwidth management.)
- Memory Usage This shows what percentage of the heap memory the NBG6817 is using.
Interface Status
Interface This displays the NBG6817 port types. The port types are: WAN, LAN and WLAN.
Status For the LAN and WAN ports, this field displays Down (line is down) or Up (line is up or connected).
For the 2.4GHz/5GHz WLAN, it displays Up when the 2.4GHz/5GHz WLAN is enabled or Down
when the 2.4G/5G WLAN is disabled.
Rate For the LAN ports, this displays the port speed and duplex setting or is left blank when the line is
disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet
encapsulation. This field displays N/A when the line is disconnected.
For the 2.4GHz/5GHz WLAN, it displays the maximum transmission rate when the 2.4GHz/5GHz
WLAN is enabled and N/A when the WLAN is disabled.
Printer Information
Printer Name The NBG6817 can act as a print server and allows you to share a USB printer on your LAN. This
displays the
name of the printer connected to the NBG6817's USB port.
Note: You need to manually install the printer driver in your computer and add the
printer to your printer list.
NBG6817 User’s Guide
38
Page 39
6.2.1 Navigation Panel
Use the sub-menus on the navigation panel to configure NBG6817 features.
Figure 29 Expert Mode: Navigation Panel: Router Mode
Chapter 6 Router Mode
The following table describes the sub-menus.
Table 15 Expert Mode: Navigation Panel: Router Mode
LINK TAB FUNCTION
Status
System Status This screen shows the NBG6817’s general device, system and interface status
information. Use this screen to access the wizard, and summary statistics
tables.
Live Network
Monitor
Usage Monitor This screen shows transmission data and bandwidth usage between the
Common Usage This screen shows the top five traffic flows transmitting from/to the selected
Download Traffic
Statistics
Client Tables Use this screen to view online clients information.
WAN
Internet
Connection
NAT General Use this screen to enable NAT.
Port Trigger Use this screen to change your NBG6817’s port triggering settings.
Passthrough Use this screen to enable ALGs (Application Layer Gateway) and VPN pass-
Dynamic DNS Use this screen to set up dynamic DNS.
Wireless
This screen shows transmission data rates between the NBG6817 and the
Internet or connected devices.
NBG6817 and the Internet or connected devices.
LAN device(s).
This screen shows the type and percentage of most download traffic.
This screen allows you to configure ISP parameters, WAN IP address
assignment, DNS servers and the WAN MAC address.
Use this screen to configure servers behind the NBG6817 and forward incoming
service requests to the server(s) on your local network.
through settings.
NBG6817 User’s Guide
39
Page 40
Chapter 6 Router Mode
Table 15 Expert Mode: Navigation Panel: Router Mode (continued)
LINK TAB FUNCTION
Wireless Use this screen to enable the wireless LAN and configure wireless LAN and
wireless security settings.
Guest Wireless Use this screen to configure multiple BSSs on the NBG6817.
MAC Filter Use the MAC filter screen to configure the NBG6817 to block access to devices
or block the devices from accessing the NBG6817.
Advanced This screen allows you to configure advanced wireless settings.
WPS Use this screen to configure WPS.
Scheduling Use this screen to schedule the times the Wireless LAN is enabled.
LAN
LAN IP Use this screen to configure LAN IP address and subnet mask.
Use this screen to configure the IPv6 address for the NBG6817 on the LAN.
Use this screen to enable the NBG6817’s DHCP server.
Static DHCP This screen allows you to assign IP addresses on the LAN to specific individual
computers based on their MAC addresses.
IPv6 LAN Use this screen to configure the IPv6 address for your NBG6817 on the LAN.
Applications
Parental Control General Use this screen to enable parental control, set parental controls rules/
schedules and block web sites containing certain keywords in the URL.
Notification Use this screen to send e-mail notifications, configure e-mail notification rules
and e-mail settings.
Bandwidth
Management
USB Media
Sharing
UPnP Use this screen to enable UPnP on the NBG6817.
File Sharing SAMBA Use this screen to enable file sharing through the NBG6817.
One Connect Use this screen to enable or disable Wi-Fi auto-configuration.
Security
IPv4 Firewall Use this screen to configure IPv4 firewall rules.
IPv6 Firewall Use this screen to configure IPv6 firewall rules.
Maintenance
General Use this screen to view and change administrative settings such as system and
Password Use this screen to change the password of your NBG6817.
Time Use this screen to change your NBG6817’s time and date.
Firmware
Upgrade
Backup/Restore Use this screen to backup and restore the configuration or reset the factory
Restart This screen allows you to reboot the NBG6817 without turning the power off.
Language This screen allows you to select the language you prefer.
Bandwidth Use this screen to enable StreamBoost.
Use this screen to configure the maximum allowable bandwidth and enable
automatic update.
Priorities Use this screen to change the priority of the connected devices.
Use this screen to have the NBG6817 function as a DLNA-compliant media
server, that lets DLNA-compliant media clients play video, audio, and photo
content files stored on the connected USB storage device.
FTP Use this screen to have the NBG6817 act as a FTP server.
domain names.
Use this screen to upload firmware to your NBG6817.
defaults to your NBG6817.
NBG6817 User’s Guide
40
Page 41
Chapter 6 Router Mode
Table 15 Expert Mode: Navigation Panel: Router Mode (continued)
LINK TAB FUNCTION
Remote
Management
Log Use this screen to view the list of activities recorded by your NBG6817.
Operation Mode This screen allows you to select whether your device acts as a router, or an
Remote
Access
Wake On LAN Use this screen to enable Wake on LAN to remotely turn on a device on the
Use this screen to configure through which interface(s) and from which IP
address(es) users can use Telnet and HTTP/HTTPS to manage the NBG6817.
local network.
access point.
NBG6817 User’s Guide
41
Page 42
7.1 Overview
Use your NBG6817 as an access point (AP) if you already have a router or gateway on your network. In
this mode your NBG6817 bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet.
See the figure below for an example.
Figure 30 Wireless Internet Access in Access Point Mode
CHAPTER 7
Access Point Mode
Many screens that are available in Router Mode are not available in Access Point Mode, such as
bandwidth management and firewall.
7.2 What You Can Do
• Use the Status screen to view read-only information about your NBG6817 (Section 7.4 on page 44).
• Use the LAN screen to set the IP address for your NBG6817 acting as an access point (Section 7.5 on
page 46).
7.3 What You Need to Know
See Chapter 8 on page 49 for a tutorial on setting up a network with the NBG6817 as an access point.
7.3.1 Setting your NBG6817 to AP Mode
1 Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how
to do this.
NBG6817 User’s Guide
42
Page 43
Chapter 7 Access Point Mode
2 To use your NBG6817 as an access point, go to Expert Mode > Maintenance > Operation Mode and
select Access Point Mode.
Figure 31 Changing to Access Point mode
Note: You have to log in to the Web Configurator again when you change modes. As soon as
you do, your NBG6817 is already in Access Point mode.
3 When you select Access Point Mode, the following pop-up message window appears.
Figure 32 Pop up for Access Point mode
Click OK. Then click Apply. The Web Configurator refreshes once the change to Access Point mode is
successful.
7.3.2 Accessing the Web Configurator in Access Point Mode
Log in to the Web Configurator in Access Point mode, do the following:
1 Connect your computer to the LAN port of the NBG6817.
2 The default IP address of the NBG6817 is “192.168.1.2”. In this case, your computer must have an IP
address in the range between “192.168.1.3” and “192.168.1.254”.
3 Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to show
your computer’s IP address. If your computer’s IP address is not in the correct range then see Appendix
B on page 173 for information on changing your computer’s IP address.
4 After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type
“192.168.1.2” as the web address in your web browser.
Note: After clicking Login, the Easy Mode appears. Refer to Section on page 28 for the Easy
Mode screens. Change to Expert Mode to see the screens described in the sections
following this.
NBG6817 User’s Guide
43
Page 44
Chapter 7 Access Point Mode
7.3.3 Configuring your WLAN and Maintenance Settings
The configuration of wireless and maintenance settings in Access Point Mode is the same as for Router
Mode.
•See Chapter 11 on page 94 for information on the configuring your wireless network.
•See Chapter 15 on page 147 for information on configuring your maintenance settings.
7.4 AP Mode Status Screen
Click Expert Mode > Status to open the Status screen.
Figure 33 Expert Mode: Status > System Status: Access Point Mode
The following table describes the labels shown in the Status screen.
Table 16 Expert Mode: Status > System Status: Access Point Mode
LABEL DESCRIPTION
Device Information
Host Name This is the System Name you enter in the Maintenance > General screen. It is for identification
Model Number This is the model name of your device.
Firmware Version This is the firmware version.
Sys OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817 is set - AP Mode.
purposes.
NBG6817 User’s Guide
44
Page 45
Chapter 7 Access Point Mode
Table 16 Expert Mode: Status > System Status: Access Point Mode (continued)
LABEL DESCRIPTION
LAN Information
MAC Address This shows the LAN Ethernet adapter MAC Address of your device.
IP Address This shows the LAN port’s IP address.
IP Subnet Mask This shows the LAN port’s subnet mask.
DHCP This shows the LAN port’s DHCP role - Client or None.
IPv6 Address This shows the IPv6 address of the NBG6817 on the LAN.
WLAN 2.4G Information
WLAN OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817’s wireless LAN is set -
Access Point Mode.
MAC Address This shows the 2.4GHz wireless adapter MAC Address of your device.
SSID This shows a descriptive name used to identify the NBG6817 in the 2.4GHz wireless LAN.
Channel This shows the channel number which you select manually.
Security This shows the level of wireless security the NBG6817 is using.
WLAN 5G Information
WLAN OP Mode This is the device mode (Section 4.1.2 on page 27) to which the NBG6817’s wireless LAN is set -
Access Point Mode.
MAC Address This shows the 5GHz wireless adapter MAC Address of your device.
SSID This shows a descriptive name used to identify the NBG6817 in the 5GHz wireless LAN.
Channel This shows the channel number which you select manually.
Security This shows the level of wireless security the NBG6817 is using.
System Status
Item This column shows the type of data the NBG6817 is recording.
Data This column shows the actual data recorded by the NBG6817.
System Up Time This is the total time the NBG6817 has been on.
Current Date/Time This field displays your NBG6817’s present date and time.
System Resource
- CPU Usage This displays what percentage of the NBG6817’s processing ability is currently used. When this
percentage is close to 100%, the NBG6817 is running at full load, and the throughput is not going
to improve anymore. If you want some applications to have more throughput, you should turn
off other applications.
- Memory Usage This shows what percentage of the heap memory the NBG6817 is using.
Interface Status
Interface This displays the NBG6817 port types. The port types are: LAN and WLAN.
Status For the LAN ports, this field displays Down (line is down) or Up (line is up or connected).
For the 2.4GHz/5GHz WLAN, it displays Up when the 2.4GHz/5GHz WLAN is enabled or Down
when the 2.4G/5G WLAN is disabled.
Rate For the LAN ports, this displays the port speed and duplex setting or is left blank when the line is
disconnected.
For the 2.4GHz/5GHz WLAN, it displays the maximum transmission rate when the 2.4GHz/5GHz
WLAN is enabled and N/A when the WLAN is disabled.
NBG6817 User’s Guide
45
Page 46
Chapter 7 Access Point Mode
Table 16 Expert Mode: Status > System Status: Access Point Mode (continued)
LABEL DESCRIPTION
Printer Information
Printer Name The NBG6817 can act as a print server and allows you to share a USB printer on your LAN. This
displays the
Note: You need to manually install the printer driver in your computer and add the
name of the printer connected to the NBG6817's USB port.
printer to your printer list.
7.4.1 Navigation Panel
Use the menu in the navigation panel to configure NBG6817 features in Access Point Mode.
Figure 34 Expert Mode: Navigation Panel: Access Point Mode
Refer to Table 15 on page 39 for descriptions of the labels shown in the navigation panel.
7.5 LAN Screen
Use this section to configure your LAN settings while in Access Point Mode.
Click Expert Mode > LAN to see the screen below.
Note: If you change the IP address of the NBG6817 in the screen below, you will need to log
into the NBG6817 again using the new IP address.
NBG6817 User’s Guide
46
Page 47
Chapter 7 Access Point Mode
Figure 35 LAN > LAN IP
The table below describes the labels in the screen.
Table 17 LAN > LAN IP
LABEL DESCRIPTION
IP Address
Obtain an IP Address
Automatically
When you enable this, the NBG6817 gets its IP address from the network’s DHCP server
(for example, your ISP). Users connected to the NBG6817 can now access the network
(i.e., the Internet if the IP address is given by the ISP).
The Web Configurator may no longer be accessible unless you know the IP address
assigned by the DHCP server to the NBG6817. You need to reset the NBG6817 to be
able to access the Web Configurator again (see Section 15.7 on page 151 for details
on how to reset the NBG6817).
Also when you select this, you cannot enter an IP address for your NBG6817 in the field
below.
Static IP Address Click this if you want to specify the IP address of your NBG6817. Or if your ISP or network
administrator gave you a static IP address to access the network or the Internet.
IP Address Type the IP address in dotted decimal notation. The default setting is 192.168.1.2. If you
change the IP address you will have to log in again with the new IP address.
Subnet Mask The subnet mask specifies the network number portion of an IP address. Your NBG6817
Default Gateway Enter a gateway IP address (if your ISP or network administrator gave you one) in this
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
will automatically calculate the subnet mask based on the IP address that you assign.
Unless you are implementing subnetting, use the subnet mask computed by the
NBG6817.
field.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and
the NBG6817's WAN IP address). The field to the right displays the (read-only) DNS server
IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right. If you chose User-Defined, but leave the IP address set
to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second
choice to User-Defined, and enter the same IP address, the second User-Defined
changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
NBG6817 User’s Guide
47
Page 48
Chapter 7 Access Point Mode
Table 17 LAN > LAN IP (continued)
LABEL DESCRIPTION
Apply Click Apply to save your changes to the NBG6817.
Cancel Click Cancel to reload the previous configuration for this screen.
NBG6817 User’s Guide
48
Page 49
CHAPTER 8
8.1 Overview
This chapter provides tutorials for setting up your NBG6817.
• Set Up a Wireless Network Using WPS
• Connect to NBG6817 Wireless Network without WPS
• Using Guest SSIDs on the NBG6817
8.2 Set Up a Wireless Network Using WPS
This section gives you an example of how to set up wireless network using WPS. This example uses the
NBG6817 as the AP and NWD210N as the wireless client which connects to a notebook.
Tutorials
Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter ).
There are two WPS methods for creating a secure connection via the web configurator or utility. This
tutorial shows you how to do both.
• Push Button Configuration (PBC) - create a secure wireless network simply by pressing a button. See
Section 8.2.1 on page 49. This is the easier method.
• PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN (Personal
Identification Number) in the NBG6817’s interface. See Section 8.2.2 on page 50. This is the more
secure method, since one device can authenticate the other.
8.2.1 Push Button Configuration (PBC)
1 Make sure that your NBG6817 is turned on. Make sure the WIFI button (at the back panel of the
NBG6817) is pushed in, and that the device is placed within range of your notebook.
2 Make sure that you have installed the wireless client (this example uses the NWD210N) driver and utility in
your notebook.
3 In the wireless client utility, find the WPS settings. Enable WPS and press the WPS button (Start or WPS
button)
4 Log into NBG6817’s Web Configurator and press the Push Button in the Expert > Wireless > WPS screen.
Note: Your NBG6817 has a WPS button located on its rear panel, as well as a WPS button in its
configuration utility. Both buttons have exactly the same function; you can use one or
the other.
NBG6817 User’s Guide
49
Page 50
Chapter 8 Tutorials
Wireless Client
Access Point
SECURITY INFO
COMMUNICATION
WITHIN 2 MINUTES
WPS
START
Note: It doesn’t matter which button is pressed first. You must press the second button within
two minutes of pressing the first one.
The NBG6817 sends the proper configuration settings to the wireless client. This may take up to two
minutes. Then the wireless client is able to communicate with the NBG6817 securely.
The following figure shows you an example to set up wireless network and security by pressing a button
on both NBG6817 and wireless client (the NWD210N in this example).
Figure 36 Example WPS Process: PBC Method
8.2.2 PIN Configuration
When you use the PIN configuration method, you need to use both NBG6817’s configuration interface
and the client’s utilities.
1 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to
get a PIN number.
2 Enter the PIN number to the PIN field in the Expert > Wireless > WPS screen on the NBG6817.
3 Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the
NBG6817’s WPS screen within two minutes.
NBG6817 User’s Guide
50
Page 51
Chapter 8 Tutorials
WITHIN 2 MINUTES
Wireless Client
Access Point
The NBG6817 authenticates the wireless client and sends the proper configuration settings to the wireless
client. This may take up to two minutes. Then the wireless client is able to communicate with the
NBG6817 securely.
The following figure shows you the example to set up wireless network and security on NBG6817 and
wireless client (ex. NWD210N in this example) by using PIN method.
Figure 37 Example WPS Process: PIN Method
8.3 Connect to NBG6817 Wireless Network without WPS
This example shows you how to configure wireless security settings with the following parameters on your
NBG6817 and connect your computer to the NBG6817 wireless network.
Band 2.4GHz
SSID SSID_Example3
Channel 6
Security WPA2-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
Follow the steps below to configure the wireless settings on your NBG6817.
The instructions require that your hardware is connected (see the Quick Start Guide) and you are
logged into the Web Configurator through your LAN connection (see Section 2.2 on page 15).
NBG6817 User’s Guide
51
Page 52
Chapter 8 Tutorials
1 Make sure the WIFI switch (at the back panel of the NBG6817) is set to ON.
2 Open the Expert > Wireless > Wireless screen in the AP’s Web Configurator.
3 Confirm that the wireless LAN is enabled on the NBG6817.
4 Select to configure the wireless settings for the 2.4GHz wireless radio.
5 Enter SSID_Example3 as the SSID and select Channel-06 as the channel. Set security mode to WPA2-PSK
and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click Apply.
6 Click Expert > Status to open the Status screen. Verify your wireless and wireless security settings under
Device Information and check if the WLAN connection is up under Interface Status.
NBG6817 User’s Guide
52
Page 53
Chapter 8 Tutorials
8.3.1 Configure Your Notebook
Note: In this example, we use the Zyxel NWD6505 wireless adapter as the wireless client and
use the Windows built-in utility (Windows Zero Configuration (WZC)) to connect to the
wireless network.
1 The NBG6817 supports IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n and IEEE 802.11ac wireless
clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
2 Wireless adapters come with software sometimes called a “utility” that you install on your computer. See
your wireless adapter’s User’s Guide for information on how to do that.
3 After you’ve installed the driver and attached the NWD6505 to your computer’s USB port, right-click the
Wireless Network Connection icon in your computer’s system tray, select and click View Available
Wireless Networks.
4 The Wireless Network Connection screen displays. Click Refresh network list to view the available wireless
APs within range.
NBG6817 User’s Guide
53
Page 54
Chapter 8 Tutorials
5 Select SSID_Example3 and click Connect.
6 Type the security key in the following screen. Click Connect.
NBG6817 User’s Guide
54
Page 55
Chapter 8 Tutorials
7 Check the status of your wireless connection in the screen below.
8 If the wireless client keeps trying to connect to or acquiring an IP address from the NBG6817, make sure
you entered the correct security key.
If the connection has limited or no connectivity, make sure the DHCP server is enabled on the NBG6817.
If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL
of any other web site in the address bar. If you are able to access the web site, your wireless connection
is successfully configured.
8.4 Using Guest SSIDs on the NBG6817
You can configure more than one guest SSID on a NBG6817. See Section 11.4 on page 105.
This allows you to configure multiple independent wireless networks on the NBG6817 as if there were
multiple APs (virtual APs). Each guest SSID has its own wireless security type. That is, each SSID on the
NBG6817 represents a different access point/wireless network to wireless clients in the network.
Clients can associate only with the SSIDs for which they have the correct security settings. Clients using
different SSIDs can access the Internet and the wired network behind the NBG6817 (such as a printer).
NBG6817 User’s Guide
55
Page 56
Chapter 8 Tutorials
A
B
C
SSID_Guest
SSID_Worker
SSID_VoIP
For example, you may set up three wireless networks (A, B and C) in your office. A is for workers, B is for
guests and C is specific to a VoIP device in the meeting room.
8.4.1 Configuring Security Settings of Guest SSIDs
The NBG6817 is in router mode by default.
This example shows you how to configure the SSIDs with the following parameters on your NBG6817 (in
router mode).
SSID SECURITY TYPE KEY
SSID_Worker WPA2-PSK
WPA Compatible
SSID_VoIP WPA-PSK VoIPOnly12345678
SSID_Guest WPA-PSK keyexample123
1 Connect your computer to the LAN port of the NBG6817 using an Ethernet cable.
2 The default IP address of the NBG6817 in router mode is “192.168.1.1”. In this case, your computer must
have an IP address in the range between “192.168.1.2” and “192.168.1.254”.
3 Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to show
your computer’s IP address. If your computer’s IP address is not in the correct range then see Appendix
B on page 173 for information on changing your computer’s IP address.
4 After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type
“http://192.168.1.1” as the web address in your web browser.
5 Enter “1234” (default) as the password and click Login.
DoNotStealMyWirelessNetwork
6 Type a new password and retype it to confirm, then click Apply. Otherwise, click Ignore.
NBG6817 User’s Guide
56
Page 57
Chapter 8 Tutorials
7 The Easy Mode appears.
8 Go to Expert > Wireless > Guest Wireless. Click the Edit icon of the first entry to configure wireless and
security settings for SSID_Worker.
9 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker to allow
wireless clients in the same wireless network to communicate with each other. Click Apply.
10 Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP.
11 Configure the screen as follows. You do not enable Intra-BSS Traffic for SSID_VoIP. Click Apply.
NBG6817 User’s Guide
57
Page 58
Chapter 8 Tutorials
12 Click the Edit icon of the third entry to configure wireless and security settings for SSID_Guest.
13 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Guest to allow
wireless clients in the same wireless network to communicate with each other. Select Enable Guest
WLAN to allow clients to access the Internet only. Click Apply.
NBG6817 User’s Guide
58
Page 59
PART II
Technical Reference
59
Page 60
9.1 Overview
This chapter discusses read-only information related to the device state of the NBG6817.
9.1.1 What You Can Do
• Use the Live Network Monitor screen to view transmission data rates between the NBG6817 and the
Internet or connected devices (Section 9.2 on page 60).
• Use the Usage Monitor screen to view transmission data and bandwidth usage between the NBG6817
and applications or connected devices (Section 9.3 on page 63).
• Use the Common Usage screen to view the top five traffic flows transmitting from/to the selected LAN
device(s) (Section Figure 48 on page 69).
• Use the Download Traffic Statistics screen to view the type and percentage of most download traffic
(Section 9.5 on page 70).
• Use the Client Tables screen to view the online clients information (Section 9.6 on page 71).
CHAPTER 9
Status
9.2 Live Network Monitor Screen
Use this screen to view the current upstream and downstream transmission speeds between the
NBG6817 and the Internet and/or between the NBG6817 and the connected device(s) (represented by
icons indicating the kind of network device), including those connecting wirelessly.
Click Expert Mode > Status > Live Network Monitor. The following screen displays. You can move your
mouse over a device icon to view information about the device, such as the name, IP address, MAC
address, device type and connection type.
NBG6817 User’s Guide
60
Page 61
Chapter 9 Status
Figure 38 Expert Mode > Status > Live Network Monitor
Click a device icon to go to a screen that displays the upstream/downstream bandwidth as a line
graph. If you click the NBG6817’s icon, it also shows the transmission rate between the NBG6817 and
each connected device. If you click a connected device’s icon, you can see the current transmission
rate for a traffic type. The green ball indicates the traffic flow is given enough bandwidth.
NBG6817 User’s Guide
61
Page 62
Chapter 9 Status
Figure 39 Expert Mode > Status > Live Network Monitor: Traffic Statistics (NBG6817)
NBG6817 User’s Guide
62
Page 63
Chapter 9 Status
Figure 40 Expert Mode > Status > Live Network Monitor: Traffic Statistics (Connected Device)
9.3 Usage Monitor Screens
• Use the Internet Data Usage Monitor screen to view the current amount of bandwidth being
transmitted from/to the connected devices or applications (Section 9.3.1 on page 63).
• Use the Bandwidth History screen to view the upload/download peak being transmitted from/to the
connected devices or applications (Section 9.3.2 on page 64).
• Use the Time Tracker screen to view the time period over which the traffic flow occurred from
connected devices (Section 9.3.3 on page 66).
• Use the Data Usage Alert screen to view the amount of bandwidth and configure your data plan
(Section 9.3.4 on page 66).
9.3.1 Internet Data Usage Monitor
Use this screen to view the current amount of bandwidth being transmitted from/to the connected LAN
device(s) or applications. Select the device(s) or applications radio button to view the amount of uplink
and downlink traffic by device(s) or applications.
Click Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor. The following screen displays.
NBG6817 User’s Guide
63
Page 64
Chapter 9 Status
Figure 41 Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor: Device
Figure 42 Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor: Applications
9.3.2 Bandwidth History
Use this screen to view the peak upload (green) and download (blue) bandwidth in the past day, week,
month, or quarter. Bandwidth history can be displayed by selecting the connected LAN device(s) or
applications radio button. Select the time period and device(s) (or applications) from the drop-down list
box to view the corresponding upload/download bandwidth. You can put your mouse in the gray bar
and drag it to view the peak upload and download bandwidth. You can also put your cursor in the
graph to view graph details.
Click Expert Mode > Status > Usage Monitor > Bandwidth History. The following screen displays.
NBG6817 User’s Guide
64
Page 65
Chapter 9 Status
Figure 43 Expert Mode > Status > Usage Monitor > Bandwidth History: Device
Figure 44 Expert Mode > Status > Usage Monitor > Bandwidth History: Applications
NBG6817 User’s Guide
65
Page 66
9.3.3 Time Tracker
Use this screen to view the time period over which the traffic flow occurred and the amount of uplink
and downlink traffic generated in the past day, week, month, or quarter. Select the connected LAN
device(s) from the drop-down list box and specify the time period to view the upload/download
bandwidth. You can click the calendar icon ( ) to choose the specified date.
Click Expert Mode > Status > Usage Monitor > Time Tracker. The following screen displays.
Figure 45 Expert Mode > Status > Usage Monitor > Time Tracker
Chapter 9 Status
9.3.4 Data Usage Alert
View data usage, data history and configure a data plan from this screen.
Data Usage Alert
Use this screen to view the upload (green) and download (blue) bandwidth in the past day, week,
month, or quarter. Data usage can be displayed by selecting the connected LAN device(s) or
applications radio button. Select the time period and device(s) (or applications) from the drop-down list
box to view the corresponding upload/download bandwidth. You can put your mouse in the gray bar
and drag it to view the upload and download bandwidth. You can also put your cursor in the graph to
view graph details.
Click Expert Mode > Status > Usage Monitor > Data Usage Alert. The following screen displays.
NBG6817 User’s Guide
66
Page 67
Chapter 9 Status
Figure 46 Expert Mode > Status > Usage Monitor > Data Usage Alert
Data History
Click Data Usage to view the remaining data usage allowed and remaining days to access the Internet.
Use the Data History screen to view the upload (green) and download (blue) bandwidth in the past
day, week, month, or quarter. Data history can be displayed by selecting the connected LAN device(s)
or applications radio button. Select the time period and device(s) (or applications) from the drop-down
list box to view the corresponding upload/download bandwidth. The following screen displays.
NBG6817 User’s Guide
67
Page 68
Chapter 9 Status
Figure 47 Expert Mode > Status > Usage Monitor > Data Usage Alert > Data Usage
Data Plan
Click the data plan icon ( ) to specify a data limit per month and the date data amounts used are
reset. Data Usage displays the amount of data used from beginning. Average Used displays the
average amount of data used from the beginning date to the current date, and Expected Used
displays the expected amount data that will be used this month based on the Average Used. The
following screen displays.
NBG6817 User’s Guide
68
Page 69
Chapter 9 Status
Figure 48 Expert Mode > Status > Usage Monitor > Data Usage Alert > Data Usage > Plan
9.4 Common Usage Screen
Use this screen to view the top five traffic flows transmitting from/to the selected LAN device(s) in the
past day, week or month.
Click Expert Mode > Status > Common Usage to open the Common Usage screen.
The y-axis shows the time period over which the traffic flow occurred. The x-axis shows the type of the
traffic flow.
NBG6817 User’s Guide
69
Page 70
Chapter 9 Status
Figure 49 Expert Mode > Status > Common Usage
9.5 Download Traffic Statistics Screen
Use this screen to view the type and percentage of most download traffic on the NBG6817.
Click Expert Mode > Status > Download Traffic Statistics to open the Download Traffic Statistics screen.
NBG6817 User’s Guide
70
Page 71
Chapter 9 Status
Figure 50 Expert Mode > Status > Download Traffic Statistics
9.6 Client Tables Screen
You can configure the NBG6817’s LAN as a DHCP server or disable it. When configured as a server, the
NBG6817 assigns IP addresses to the clients. If DHCP service is disabled, you must have another DHCP
server on that network, or else the computer must be manually configured.
Use this screen to view the online clients information (including Host Name, IP Address, MAC Address,
Interface/Rssi, and Lease time) of all network clients using the NBG6817’s DHCP server.
Click Expert Mode > Status > Client Tables to open the Client Tables screen.
Figure 51 Expert Mode > Status > Client Tables
NBG6817 User’s Guide
71
Page 72
Chapter 9 Status
The following table describes the labels in this screen.
Table 18 Expert Mode > Status > DHCP Table
LABEL DESCRIPTION
Interface Select the interface from the drop-down list box to display current DHCP client information.
# This is the index number of the host computer.
Online This field displays whether the connection to the host computer is up (a yellow bulb) or down (a
Host Name This field displays the computer host name.
IP Address This field displays the IP address relative to the # field listed above.
MAC Address This field shows the MAC address of the computer with the name in the Host Name field.
Interface/Rssi This field displays the device’s interface type or received signal strength indicator (RSSI) that is
Lease time This field displays the amount of time that the IP address is valid.
Reserve Select this if you want to reserve the IP address for this specific MAC address.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to reload the previous configuration for this screen.
gray bulb).
Every Ethernet device has a unique MAC (Media Access Control) address which uniquely
identifies a device. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02.
currently connected to the NBG6817.
NBG6817 User’s Guide
72
Page 73
10.1 Overview
This chapter discusses the NBG6817’s WAN screens. Use these screens to configure your NBG6817 for
Internet access.
A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It
connects your private networks such as a LAN (Local Area Network) and other networks, so that a
computer in one location can communicate with computers in other locations.
Figure 52 LAN and WAN
CHAPTER 10
WAN
10.2 What You Can Do
• Use the Internet Connection screen to enter your ISP information and set how the computer acquires
its IP, DNS and WAN MAC addresses (Section 10.4 on page 76).
• Use the NAT > General screen to enable NAT, set a default server and change your NBG6817’s port
forwarding settings (Section 10.5.1 on page 88).
• Use the NAT > Port Trigger screen to configure your NBG6817’s trigger port settings (Section 10.5.2 on
page 90).
• Use the NAT > Passthrough screen to configure your NBG6817’s ALGs and VPN pass-through settings
(Section 10.5.3 on page 90).
• Use the Dynamic DNS screen to change your NBG6817’s DDNS settings (Section 10.6 on page 92).
10.3 What You Need To Know
The information in this section can help you configure the screens for your WAN connection, as well as
enable/disable some advanced features of your NBG6817.
NBG6817 User’s Guide
73
Page 74
Chapter 10 WAN
10.3.1 Configuring Your Internet Connection
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up
a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP
(Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over
Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password
(and service name) for user authentication.
WAN IP Address
The WAN IP address is an IP address for the NBG6817, which makes it accessible from an outside
network. It is used by the NBG6817 to communicate with other devices in other networks. It can be static
(fixed) or dynamically assigned by the ISP each time the NBG6817 tries to access the Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS
server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation
method).
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa,
for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important
because without it, you must know the IP address of a computer before you can access it.
The NBG6817 can get the DNS server addresses in the following ways.
1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up.
If your ISP gives you DNS server addresses, manually enter them in the DNS server fields.
2 If your ISP dynamically assigns the DNS server IP addresses (along with the NBG6817’s WAN IP address),
set the DNS server fields to get the DNS server address from the ISP.
WAN MAC Address
The MAC address screen allows users to configure the WAN port's MAC address by either using the
factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to
select the factory assigned default MAC Address.
Otherwise, click Clone the computer's MAC address - IP Address and enter the IP address of the
computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be
copied to configuration file. It is recommended that you clone the MAC address prior to hooking up the
WAN Port.
NBG6817 User’s Guide
74
Page 75
Chapter 10 WAN
192.168.1.1
192.168.1.23
10.0.0.1
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or
Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on
the network - not everybody and not just 1.
Figure 53 Multicast Example
In the multicast example above, systems A and D comprise one multicast group. In multicasting, the
server only needs to send one data stream and this is delivered to systems A and D.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a
multicast group - it is not used to carry user data. The NBG6817 supports both IGMP version 1 (IGMP-v1)
and IGMP version 2 (IGMP-v2).
At start up, the NBG6817 queries all directly connected networks to gather group membership. After
that, the NBG6817 periodically updates this information. IP multicasting can be enabled/disabled on the
NBG6817 WAN interface in the Web Configurator (WAN). Select None to disable IP multicasting on these
interfaces.
Auto-IP Change
When the NBG6817 gets a WAN IP address or a DNS server IP address which is in the same subnet as the
LAN IP address 192.168.1.1, Auto-IP-Change allows the NBG6817 to change its LAN IP address to 10.0.0.1
automatically. If the NBG6817’s original LAN IP address is 10.0.0.1 and the WAN IP address is in the same
subnet, such as 10.0.0.3, the NBG6817 switches to use 192.168.1.1 as its LAN IP address.
Figure 54 Auto-IP-Change Example
Auto-IP-Change only works under the following conditions:
NBG6817 User’s Guide
75
Page 76
Chapter 10 WAN
• The NBG6817 must be in Router Mode (see Section 15.12 on page 157 for more information) for Auto-
IP-Change to become active.
• The NBG6817 is set to receive a dynamic WAN IP address.
10.4 Internet Connection Screen
Use this screen to change your NBG6817’s Internet access settings. Click Expert Mode > WAN > Internet
Connection.
10.4.1 IPoE Encapsulation
This screen displays when you select IPoE encapsulation.
NBG6817 User’s Guide
76
Page 77
Chapter 10 WAN
Figure 55 Expert Mode > WAN > Internet Connection: IPoE Encapsulation (IPv4 Only)
NBG6817 User’s Guide
77
Page 78
Chapter 10 WAN
The following table describes the labels in this screen.
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation
LABEL DESCRIPTION
ISP Parameters for Internet Access
Encapsulation You must choose the IPoE option when the WAN port is used as a regular Ethernet.
IPv4 / IPv6 Select IPv4 Only if you want the NBG6817 to run IPv4 only.
Select Dual Stack to allow the NBG6817 to run IPv4 and IPv6 at the same time.
Select IPv6 Only if you want the NBG6817 to run IPv6 only.
IP Address
Obtain an IP Address
Automatically
(DHCP)
Static IP Address Select this option If the ISP assigned a fixed IP address.
IP Address Enter your WAN IP address in this field if you selected Static IP Address.
Subnet Mask Enter the Subnet Mask in this field.
Default Gateway Enter a gateway IP address (if your ISP gave you one) in this field.
MTU Size Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives,
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
WAN MAC Address
Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will
not change unless you change the setting or upload a different configuration file.
Factory default Select this option to have the WAN interface use the factory assigned default MAC address.
Clone the
computer's MAC
address - IP Address
Set WAN MAC
Address
IPv6 Tunneling
Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the NBG6817 has an
IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6
packets in IPv4 packets to cross the ISP’s IPv4 network.
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
the NBG6817 divides it into smaller fragments.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
NBG6817's WAN IP address). The field to the right displays the (read-only) DNS server IP
address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
By default, the NBG6817 uses the factory assigned MAC address to identify itself.
Select this option to have the WAN interface use a different MAC address by cloning the
MAC address of another device or computer. Enter the IP address of the device or
computer whose MAC you are cloning.
Select this option to have the WAN interface use a manually specified MAC address. Enter
the MAC address in the fields.
NBG6817 User’s Guide
78
Page 79
Chapter 10 WAN
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation (continued)
LABEL DESCRIPTION
IPv6 Tunneling Select None to not allow IPv6 packets to cross IPv4 networks.
Select 6RD to enable 6RD. IPv6 Rapid Deployment (6RD) is an IPv6 transitioning process for
stateless tunneling of IPv6 over IPv4. Enable 6RD to allow tunneling across an ISP's IPv4 only
access network.
Select 6to4 to transmit IPv6 packets over an IPv4 network. A 6to4 relay router is required to
route 6to4 packets to a native IPv6 network.
Select 6in4 if the NBG6817 has a public IPv4 address and you want to transmit your IPv6
packets to one and only one remote site whose LAN network is also an IPv6 network. You
must know the WAN IP address of the remote gateway.
6RD
The NBG6817 generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s Border
Relay router to connect to the native IPv6 Internet. The local network can also use IPv4 services. The NBG6817 uses
its configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Automatically
configured by
DHCPC
Manually Configured Select this if you have the IPv4 address of the relay server.
Border Relay IPv4
Address
Service Provider IPv6
Prefix
Service Provider IPv6
Prefix length
IPv4 mask length Enter the subnet mask number (1~32) for the IPv4 network.
6to4
The NBG6817 should get a public IPv4 address for the WAN. The NBG6817 adds an IPv4 IP header to an IPv6 packet
when transmitting the packet to the Internet. In reverse, the NBG6817 removes the IPv4 header from an IPv6 packet
when receiving it from the Internet.
Select this to have the NBG6817 detect the relay server’s IP address automatically through
DHCP.
Specify the relay server’s IPv4 address.
Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and connecting
to the native IPv6 Internet.
Enter the IPv6 prefix length.
An IPv6 prefix length specifies how many most significant bits (starting from the left) in the
address compose the network address.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Relay Server IPv4
Address
6in4
The NBG6817 encapsulates IPv6 packets within IPv4 packets across the Internet. You must know the WAN IP address
of the remote gateway device. This mode is normally used for a site-to-site application such as two branch offices.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Remote IPv4 Address Enter the IPv4 address of the remote gateway to which this interface tunnels traffic.
Remote IPv6 Address Enter the IPv6 address of the remote gateway to which this interface tunnels traffic.
Local IPv6 Address Enter the IPv6 address assigned by your ISP.
IPv6 Prefix Enter the IPv6 prefix for this interface if you want to use a static IP address.
IPv6 DNS Server
This is available only when you select IPv4 Only in the IPv4/IPv6 field and set IPv6 Tunneling to 6RD, 6in4 or 6to4.
Enter the IPv4 address of a 6to4 relay server which helps forward packets between 6to4
networks and native IPv6 networks.
NBG6817 User’s Guide
79
Page 80
Chapter 10 WAN
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation (continued)
LABEL DESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
IPv6 Address
This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field.
Obtain an IP Address
Automatically(DHCP
)
Static IP Address Select this option if you have a fixed IPv6 address assigned by your ISP.
IPv6 Address Enter the IPv6 address assigned by your ISP.
Prefix length Enter the address prefix length to specify how many most significant bits in an IPv6 address
IPv6 Default
Gateway
Link Local Only Select this option to use the link-local address which uniquely identifies a device on the
IPv6 DNS Server
This is available only when you select Dual Stack or IPv6 Only in the IPv4/IPv6 field.
First DNS Server
Second DNS Server
Third DNS Server
Multicast Setup
Multicast Setup Select IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
Specify the DNS server IPv6 address assigned by the ISP.
Select this option if you want to obtain an IPv6 address from a DHCPv6 server.
•Select DUID-LL (Default) to have the NBG6817 use DUID-LL (DUID Based on Link-layer
Address) for identification when exchanging DHCPv6 messages.
•Select DUID-LLT to have the NBG6817 use DUID-LLT (DUID Based on Link-layer Address
Plus Time) for identification when exchanging DHCPv6 messages.
compose the network address.
Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to
their destinations.
local network (the LAN).
Select Obtained From ISP to have the NBG6817 get the IPv6 DNS server addresses from the
ISP automatically.
Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the
NBG6817 use the IPv6 DNS server addresses you configure manually.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IPv6 address of a computer in order to access it.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent
to all connected network devices.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a dynamic WAN IP address in the same subnet as the
LAN IP address.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a DNS server IP address in the same subnet as the LAN
IP address.
The NAT, DHCP server and firewall functions on the NBG6817 are still available in this mode.
NBG6817 User’s Guide
80
Page 81
10.4.2 PPPoE Encapsulation
The NBG6817 supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516)
specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless,
etc.) connection. The PPP over Ethernet option is for a dial-up connection using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for example Radius).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function
known as dynamic service selection. This enables the service provider to easily create and offer new IP
services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific
configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the NBG6817 (rather than individual computers), the computers on
the LAN do not need PPPoE software installed, since the NBG6817 does that part of the task.
Furthermore, with NAT, all of the LANs’ computers will have access.
Chapter 10 WAN
NBG6817 User’s Guide
81
Page 82
Chapter 10 WAN
This screen displays when you select PPPoE encapsulation.
Figure 56 Network > WAN > Internet Connection: PPPoE Encapsulation (IPv4 Only)
NBG6817 User’s Guide
82
Page 83
Chapter 10 WAN
The following table describes the labels in this screen.
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation
LABEL DESCRIPTION
ISP Parameters for Internet Access
Encapsulation Select PPPoE if you connect to your Internet via dial-up.
IPv4 / IPv6 Select IPv4 Only if you want the NBG6817 to run IPv4 only.
Select Dual Stack to allow the NBG6817 to run IPv4 and IPv6 at the same time.
Select IPv6 Only if you want the NBG6817 to run IPv6 only.
PPP Information
PPP Username Type the user name given to you by your ISP.
PPP Password Type the password associated with the user name above.
MTU Size Enter the Maximum Transmission Unit (MTU) or the largest packet size per frame that your
NBG6817 can receive and process.
PPP Auto Connect Select this option if you do not want the connection to time out.
IDLE Timeout
(second)
PPPoE Service
Name
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP Address Select this option and enter your WAN IP address if the ISP assigned a fixed IP address.
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
WAN MAC Address
The MAC address section allows users to configure the WAN port's MAC address by using the NBG6817’s MAC
address, copying the MAC address from a computer on your LAN or manually entering a MAC address.
Factory default Select Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address - IP Address
Set WAN MAC
Address
IPv6 Tunneling
Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the NBG6817 has an
IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6
packets in IPv4 packets to cross the ISP’s IPv4 network.
This value specifies the time in seconds that elapses before the router automatically
disconnects from the PPPoE server.
Enter the PPPoE service name specified in the ISP account.
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
NBG6817's WAN IP address). The field to the right displays the (read-only) DNS server IP
address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS server,
you must know the IP address of a computer in order to access it.
Select Clone the computer's MAC address - IP Address and enter the IP address of the
computer on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
NBG6817 User’s Guide
83
Page 84
Chapter 10 WAN
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)
LABEL DESCRIPTION
IPv6 Tunneling Select None to not allow IPv6 packets to cross IPv4 networks.
Select 6RD to enable 6RD. IPv6 Rapid Deployment (6RD) is an IPv6 transitioning process for
stateless tunneling of IPv6 over IPv4. Enable 6RD to allow tunneling across an ISP's IPv4 only
access network.
Select 6to4 to transmit IPv6 packets over an IPv4 network. A 6to4 relay router is required to
route 6to4 packets to a native IPv6 network.
Select 6in4 if the NBG6817 has a public IPv4 address and you want to transmit your IPv6
packets to one and only one remote site whose LAN network is also an IPv6 network. You
must know the WAN IP address of the remote gateway.
6RD
The NBG6817 generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s Border
Relay router to connect to the native IPv6 Internet. The local network can also use IPv4 services. The NBG6817 uses
its configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Automatically
configured by
DHCPC
Manually
Configured
Border Relay IPv4
Address
Service Provider
IPv6 Prefix
Service Provider
IPv6 Prefix length
IPv4 mask length Enter the subnet mask number (1~32) for the IPv4 network.
6to4
Select this to have the NBG6817 detect the relay server’s IP address automatically through
DHCP.
Select this if you have the IPv4 address of the relay server.
Specify the relay server’s IPv4 address.
Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and connecting to
the native IPv6 Internet.
Enter the IPv6 prefix length.
An IPv6 prefix length specifies how many most significant bits (starting from the left) in the
address compose the network address.
The NBG6817 should get a public IPv4 address for the WAN. The NBG6817 adds an IPv4 IP header to an IPv6 packet
when transmitting the packet to the Internet. In reverse, the NBG6817 removes the IPv4 header from an IPv6 packet
when receiving it from the Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Relay Server IPv4
Address
6in4
The NBG6817 encapsulates IPv6 packets within IPv4 packets across the Internet. You must know the WAN IP address
of the remote gateway device. This mode is normally used for a site-to-site application such as two branch offices.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Remote IPv4
Address
Remote IPv6
Address
Local IPv6 Address Enter the IPv6 address assigned by your ISP.
IPv6 Prefix Enter the IPv6 prefix for this interface if you want to use a static IP address.
IPv6 DNS Server
This is available only when you select IPv4 Only in the IPv4/IPv6 field and set IPv6 Tunneling to 6RD, 6in4 or 6to4.
Enter the IPv4 address of a 6to4 relay server which helps forward packets between 6to4
networks and native IPv6 networks.
Enter the IPv4 address of the remote gateway to which this interface tunnels traffic.
Enter the IPv6 address of the remote gateway to which this interface tunnels traffic.
NBG6817 User’s Guide
84
Page 85
Chapter 10 WAN
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)
LABEL DESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
IPv6 DNS Server
This is available only when you select Dual Stack or IPv6 Only in the IPv4/IPv6 field.
First DNS Server
Second DNS Server
Third DNS Server
Multicast Setup
Multicast Setup Select IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
Specify the DNS server IPv6 address assigned by the ISP.
Select Obtained From ISP to have the NBG6817 get the IPv6 DNS server addresses from the
ISP automatically.
Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the
NBG6817 use the IPv6 DNS server addresses you configure manually.
Select None if you do not want to configure DNS servers. If you do not configure a DNS server,
you must know the IPv6 address of a computer in order to access it.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent to
all connected network devices.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a dynamic WAN IP address in the same subnet as the
LAN IP address.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a DNS server IP address in the same subnet as the LAN IP
address.
The NAT, DHCP server and firewall functions on the NBG6817 are still available in this mode.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
10.4.3 PPTP Encapsulation
This screen displays when you select PPTP encapsulation.
NBG6817 User’s Guide
85
Page 86
Chapter 10 WAN
Figure 57 Expert Mode > WAN > Internet Connection: PPTP Encapsulation (IPv4 Only)
NBG6817 User’s Guide
86
Page 87
Chapter 10 WAN
The following table describes the labels in this screen.
Table 21 Network > WAN > Internet Connection: PPTP Encapsulation
LABEL DESCRIPTION
ISP Parameters for Internet Access
Encapsulation Select PPTP if you want to connect the Internet via point to point tunneling protocol.
IPv4 / IPv6 This field is greyed out. The PPTP encapsulation only supports IPv4.
PPTP Information
PPTP Username Enter the user name given to you by your ISP.
PPTP Password Enter the password associated with the user name above.
PPTP Encryption Type Use the drop-down list box to select the type of Microsoft Point-to-Point Encryption (MPPE).
MTU Size Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives,
PPTP Auto Connect Select this option if you do not want the connection to time out.
IDLE Timeout
[second]
PPTP CONFIGURATION
PPTP Server IP
Address
Obtain an IP Address
Automatically(DHCP
)
Static IP Address Select this radio button if the PPTP server assigned an IP address for your Internet
IP Address Enter the IP address provided by the PPTP server.
Subnet Mask Enter the IP subnet mask in this field.
Default Gateway Enter the gateway IP address in this field.
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP Address Select this option If the ISP assigned a fixed IP address.
IP Address Enter your WAN IP address in this field if you selected Static IP Address.
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
Options are:
Auto - This ISP account adjusts the encryption type automatically.
No Encryption - This ISP account does not use MPPE.
MPPE 40 - This ISP account uses 40-bit MPPE.
MPPE 128 - This ISP account uses 128-bit MMPE.
the NBG6817 divides it into smaller fragments.
Type the time in seconds that elapses before the router automatically disconnects from the
PPTP server. 0 means no timeout.
Enter the IP address of the PPTP server.
Select this radio button if the PPTP server did not assign you a fixed IP address.
connection.
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
NBG6817's WAN IP address). The field to the right displays the (read-only) DNS server IP
address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
NBG6817 User’s Guide
87
Page 88
Chapter 10 WAN
Table 21 Network > WAN > Internet Connection: PPTP Encapsulation (continued)
LABEL DESCRIPTION
WAN MAC Address
Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will
not change unless you change the setting or upload a different configuration file.
Factory default Select this option to have the WAN interface use the factory assigned default MAC address.
By default, the NBG6817 uses the factory assigned MAC address to identify itself.
Clone the
computer's MAC
address
Set WAN MAC
Address
Multicast Setup
Multicast Setup Select IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
Select this option to have the WAN interface use a different MAC address by cloning the
MAC address of another device or computer. Enter the IP address of the device or
computer whose MAC you are cloning.
Select this option to have the WAN interface use a manually specified MAC address. Enter
the MAC address in the fields.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent
to all connected network devices.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a dynamic WAN IP address in the same subnet as the
LAN IP address.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
10.5 NAT
Use this screen to change your NBG6817’s NAT (Network Address Translation) settings. Click Expert Mode
> WAN > NAT.
10.5.1 General Screen
Use this screen to enable NAT, set a default server and configure your NBG6817’s port forwarding
settings to forward incoming service requests to the server(s) on your local network. Click Expert Mode >
WAN > NAT > General.
Select this option to have the NBG6817 change its LAN IP address to 10.0.0.1 or 192.168.1.1
accordingly when the NBG6817 gets a DNS server IP address in the same subnet as the LAN
IP address.
The NAT, DHCP server and firewall functions on the NBG6817 are still available in this mode.
NBG6817 User’s Guide
88
Page 89
Chapter 10 WAN
Figure 58 Expert Mode > WAN > NAT > General
The following table describes the labels in this screen.
Table 22 Expert Mode > WAN > NAT > General
LABEL DESCRIPTION
General
Network Address
Translation (NAT)
Default Server Setup
Default Server You can decide whether you want to use the default server or specify a server manually. In
Network Address Translation (NAT) allows the translation of an Internet protocol address used
within one network (for example a private IP address used in a local network) to a different IP
address known within another network (for example a public IP address used on the
Internet).
Select Enable to activate NAT. Select Disable to turn it off.
addition to the servers for specified services, NAT supports a default server. A default server
receives packets from ports that are not specified in the port forwarding summary table
below.
Select this to use the default server.
Change To Server Select this and manually enter the server’s IP address.
Port Forwarding (Max Limit : 32)
# This is the number of an individual port forwarding server entry.
Name Select a pre-defined service from the drop-down list box. The pre-defined service port
Protocol Select the transport layer protocol supported by this virtual server. Choices are TCP, UDP, or
External Port This shows the port number(s) that identifies the service if you select a pre-defined service. If
Server IP Address Select User define to manually enter the inside IP address of the virtual server here.
Internal Port This shows the port number(s) that identifies the service if you select a pre-defined service. If
number(s) and protocol will be displayed in the port forwarding summary table. Otherwise,
select User define to manually enter the port number/range and select the Protocol.
TCP_UDP.
If you have chosen a pre-defined service in the Name field, the protocol will be configured
automatically.
you select User define in the Name field, enter the port number(s) manually.
you select User define in the Name field, enter an internal port number manually or leave the
field blank for port range forwarding.
NBG6817 User’s Guide
89
Page 90
Table 22 Expert Mode > WAN > NAT > General (continued)
LABEL DESCRIPTION
Add Click to add the rule in the port forwarding summary table.
Delete Click to remove a rule.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
10.5.2 Port Trigger Screen
To change your NBG6817’s trigger port settings, click Expert Mode > WAN > NAT > Port Trigger. The
screen appears as shown.
Note: Only one LAN computer can use a trigger port (range) at a time.
Figure 59 Expert Mode > WAN > NAT > Port Trigger
Chapter 10 WAN
The following table describes the labels in this screen.
Table 23 Expert Mode > WAN > NAT > Port Trigger
LABEL DESCRIPTION
Port Trigger Rules (Max Limit : 32)
# This is the rule index number (read-only).
Name Type a unique name (up to 15 characters) for identification purposes. All characters are
permitted - including spaces.
Incoming Port Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a
particular service. The NBG6817 forwards the traffic with this port (or range of ports) to the
client computer on the LAN that requested the service.
Type a port number or the starting port number in a range of port numbers.
End Port Type a port number or the ending port number in a range of port numbers.
Trigger Port The trigger port is a port (or a range of ports) that causes (or triggers) the NBG6817 to record
End Port Type a port number or the ending port number in a range of port numbers.
Add Click to add the rule in the port trigger summary table.
Delete Click to remove a rule.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
the IP address of the LAN computer that sent the traffic to a server on the WAN.
Type a port number or the starting port number in a range of port numbers.
10.5.3 Passthrough Screen
NBG6817 User’s Guide
90
Page 91
Chapter 10 WAN
ALG Overview
Application Layer Gateway (ALG) allows the following applications to operate properly through the
NBG6817’s NAT.
• SIP - Session Initiation Protocol (SIP) - An application-layer protocol that can be used to create voice
and multimedia sessions over Internet.
• H.323 - A teleconferencing protocol suite that provides audio, data and video conferencing.
• FTP - File Transfer Protocol - an Internet file transfer service.
• SNMP - Simple Network Management Protocol - An application-layer protocol that can be used to
exchange management information between network devices.
• RTSP - Real Time Streaming Protocol - An application-layer protocol that can be used to stop, pause
or play video and audio applications streaming on the Internet.
• IRC - Internet Relay Chat - An application-layer protocol that can control the relay chat applications
and allow clients to have real-time communications with others on the Internet.
The ALG feature is only needed for traffic that goes through the NBG6817’s NAT.
To change your NBG6817’s ALGs and VPN pass-through settings, click Expert Mode > WAN > NAT >
Passthrough. The screen appears as shown.
Figure 60 Expert Mode > WAN > NAT > Passthrough
The following table describes the labels in this screen.
Table 24 Expert Mode > WAN > NAT > Passthrough
LABEL DESCRIPTION
ALG Setup
FTP Select Enable to allow TCP packets with a specified port destination to pass through.
H.323 Select Enable to allow peer-to-peer H.323 calls.
SIP Select Enable to make sure SIP (VoIP) works correctly with port-forwarding and address-
SNMP Select Enable to allow a manager station to manage and monitor the NBG6817 through the
mapping rules.
network via SNMP.
NBG6817 User’s Guide
91
Page 92
Chapter 10 WAN
Table 24 Expert Mode > WAN > NAT > Passthrough (continued)
LABEL DESCRIPTION
RTSP Select Enable to have the NBG6817 detect RTSP traffic and help build RTSP sessions through
its NAT.
IRC Select Enable to allow clients to have real-time communications with others on the Internet.
VPN Passthrough
PPTP Select Enable to allow VPN clients to make outbound PPTP connections. It is required in order
to connect to a PPTP VPN account. If PPTP is disabled, then when a client sends a request to
a VPN server, the server will reply to the NBG6817 and the NBG6817 will drop the request.
When PPTP is enabled, the NBG6817 will forward the reply from the VPN server to the client
that initiated the request, and the connection will establish successfully.
L2TP Select Enable to allow VPN clients to make outbound L2TP connections. It is required in order
IPSEC Select Enable to allow VPN clients to make outbound IPSec connections. It is required in
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
to connect to a L2TP VPN account. If L2TP is disabled, then when a client sends a request to a
VPN server, the server will reply to the NBG6817 and the NBG6817 will drop the request. When
L2TP is enabled, the NBG6817 will forward the reply from the VPN server to the client that
initiated the request, and the connection will establish successfully.
order to connect to a IPSec VPN account. If IPSEC is disabled, then when a client sends a
request to a VPN server, the server will reply to the NBG6817 and the NBG6817 will drop the
request. When IPSEC is enabled, the NBG6817 will forward the reply from the VPN server to
the client that initiated the request, and the connection will establish successfully.
10.6 Dynamic DNS Screen
To change your NBG6817’s DDNS, click Expert Mode > WAN > Dynamic DNS. The screen appears as
shown.
Figure 61 Expert Mode > WAN > Dynamic DNS
NBG6817 User’s Guide
92
Page 93
Chapter 10 WAN
The following table describes the labels in this screen.
Table 25 Expert Mode > WAN > Dynamic DNS
LABEL DESCRIPTION
Dynamic DNS Setup
Dynamic DNS Select Enable to use dynamic DNS. Select Disable to turn this feature off.
Service Provider Select the name of your Dynamic DNS service provider.
Host Name Enter a host names in the field provided. You can specify up to two host names in the
Username Enter your user name.
Password Enter the password assigned to you.
Apply Click Apply to save your changes back to the NBG6817.
Cancel Click Cancel to begin configuring this screen afresh.
field separated by a comma (",").
NBG6817 User’s Guide
93
Page 94
11.1 Overview
This chapter discusses how to configure the wireless network settings in your NBG6817. The NBG6817 is
able to function both 2.4GHz and 5GHz network at the same time. You can have different wireless and
wireless security settings for 2.4GHz and 5GHz wireless LANs. Click Expert Mode > Wireless to configure
wireless LAN 2.4G or wireless LAN 5G.
See the appendices for more detailed information about wireless networks.
The following figure provides an example of a wireless network.
Figure 62 Example of a Wireless Network
CHAPTER 11
Wireless LAN
The wireless network is the part in the blue circle. In this wireless network, devices A and B are called
wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the
printer) or with the Internet. Your NBG6817 is the AP.
NBG6817 User’s Guide
94
Page 95
11.1.1 What You Can Do
• Use the Wireless screen to enable or disable the 2.4GHz or 5GHz wireless LAN, set up wireless security
between the NBG6817 and the wireless clients, and make other basic configuration changes (Section
11.2 on page 98).
• Use the Guest Wireless screen to set up multiple wireless networks on your NBG6817 (Section 11.4 on
page 105).
• Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from
connecting to the NBG6817 (Section 11.5 on page 107).
• Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section 11.6 on
page 108).
• Use the WPS screen to quickly set up a wireless network with strong security, without having to
configure security settings manually (Section 11.7 on page 110).
• Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 11.8 on
page 111).
11.1.2 What You Should Know
Every wireless network must follow these basic guidelines.
Chapter 11 Wireless LAN
• Every wireless client in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
• If two wireless networks overlap, they should use different channels.
Like radio stations or television channels, each wireless network uses a specific channel, or frequency,
to send and receive information.
• Every wireless client in the same wireless network must use security compatible with the AP.
Security stops unauthorized devices from using the wireless network. It can also protect the
information that is sent in the wireless network.
Wireless Security Overview
The following sections introduce different types of wireless security you can set up in the wireless
network.
SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the
SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change the
default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices to get the
SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network.
MAC Address Filter
Every wireless client has a unique identification number, called a MAC address.1 A MAC address is
usually written using twelve hexadecimal characters
1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These
kinds of wireless devices might not have MAC addresses.
NBG6817 User’s Guide
2
; for example, 00A0C5000002 or 00:A0:C5:00:00:02.
95
Page 96
Chapter 11 Wireless LAN
To get the MAC address for each wireless client, see the appropriate User’s Guide or other
documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use
the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the
correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless
network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network. Furthermore,
there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then,
they can use that MAC address to use the wireless network.
User Authentication
You can make every user log in to the wireless network before they can use it. This is called user
authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do
this.
For wireless networks, there are two typical places to store the user names and passwords for each user.
• In the AP: this feature is called a local user database or a local database.
• In a RADIUS server: this is a server used in businesses more than in homes.
If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot
set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot
use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user
name and password. Then, they can use that user name and password to use the wireless network.
Local user databases also have an additional limitation that is explained in the next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless network.
Encryption is like a secret code. If you do not know the secret code, you cannot understand the
message.
The types of encryption you can choose depend on the type of user authentication. (See page 96 for
information about this.)
Table 26 Types of Encryption for Each Type of Authentication
NO AUTHENTICATION RADIUS SERVER
Weakest No Security WPA
WPA-PSK
Strongest WPA2-PSK WPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users do not
log in to the wireless network, you can choose no encryption, WPA-PSK, or WPA2-PSK.
2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
NBG6817 User’s Guide
96
Page 97
Chapter 11 Wireless LAN
N
A
Z
Usually, you should set up the strongest encryption that every wireless client in the wireless network
supports. For example, suppose the AP does not have a local user database, and you do not have a
RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless
clients. Device A only supports WPA, and device B supports WPA and WPA2. Therefore, you should set
up WPA or WPA-PSK in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption.
IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for
unauthorized devices to figure out the original information pretty quickly.
Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user database.
In this case, it is better to set up stronger encryption with no authentication than to set
up weaker encryption with the local user database.
When you select WPA2 or WPA2-PSK in your NBG6817, you can also select an option (WPA/WPA-PSK
Compatible) to support WPA/WPA-PSK as well. In this case, if some wireless clients support WPA and
some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network
login) and select the WPA/WPA-PSK Compatible option in the NBG6817.
Many types of encryption use a key to protect the information in the wireless network. The longer the
key, the stronger the encryption. Every wireless client in the wireless network must have the same key.
Guest WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG6817
(Z), but not other networks connected to the Z. In the following figure, a guest user can access the
Internet from the guest wireless network A via Z but not the home or company network N.
Note: The home or company network N and Guest WLAN network are independent networks.
Note: Only Router mode supports guest WLAN.
Figure 63 Guest Wireless LAN Network
NBG6817 User’s Guide
97
Page 98
Chapter 11 Wireless LAN
600 kbps
100 kbps
300 kbps
N
A
Guest WLAN Bandwidth
The Guest WLAN Bandwidth function allows you to restrict the maximum bandwidth for the guest
wireless network. Additionally, you can also define bandwidth for your home or office network. An
example is shown next to define maximum bandwidth for your networks (A is Guest WLAN and N is home
or company network.)
Figure 64 Example: Bandwidth for Different Networks
WPS
WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance. WPS
allows you to quickly set up a wireless network with strong security, without having to configure security
settings manually. Depending on the devices in your network, you can either press a button (on the
device itself, or in its configuration utility) or enter a PIN (Personal Identification Number) in the devices.
Then, they connect and set up a secure network by themselves. See how to set up a secure wireless
network using WPS in the Section 8.2 on page 49.
11.2 Wireless Screen
Use this screen to configure the SSID and wireless security of the NBG6817’s default wireless LAN.
Note: If you are configuring the NBG6817 from a computer connected to the wireless LAN
and you change the NBG6817’s SSID, channel or security settings, you will lose your
wireless connection when you press Apply to confirm. You must then change the
wireless settings of your computer to match the NBG6817’s new settings.
Click Expert Mode > Wireless.
NBG6817 User’s Guide
98
Page 99
Figure 65 Expert Mode > Wireless
Chapter 11 Wireless LAN
The following table describes the general wireless LAN labels in this screen.
Table 27 Expert Mode > Wireless
LABEL DESCRIPTION
Wireless Setup
Band Select the frequency band to set whether you want to apply the wireless and security settings
Wireless LAN Select Enable to activate the 2.4GHz and/or 5GHz wireless LAN. Select Disable to turn it off.
Name (SSID) The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot
Channel Selection Select a channel from the drop-down list box. The options vary depending on the frequency
Operating
Channel
to the default 2.4GHz or 5GHz wireless LAN.
You can enable or disable both 2.4GHz and 5GHz wireless LANs by using the WIFI button
located on the rear panel of the NBG6817.
associated. Enter a descriptive name (up to 32 printable characters found on a typical English
language keyboard) for the wireless LAN.
obtain the SSID through scanning using a site survey tool.
band and the country you are in.
This option is only available if Auto Channel Selection is disabled.
This displays the channel the NBG6817 is currently using.
NBG6817 User’s Guide
99
Page 100
Chapter 11 Wireless LAN
Table 27 Expert Mode > Wireless (continued)
LABEL DESCRIPTION
Channel Width Select the wireless channel width used by NBG6817.
A standard 20MHz channel offers transfer speeds of up to 144Mbps (2.4GHz) or 217Mbps
(5GHZ) whereas a 40MHz channel uses two standard channels and offers speeds of up to
300Mbps (2.4GHz) or 450Mbps (5GHZ). An IEEE 802.11ac-specific 80MHz channel offers speeds
of up to 1.3 Gbps.
The following are available only when you set Band to 2.4GHz.
Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow the NBG6817
to adjust the channel bandwidth automatically.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase
throughput. The wireless clients must also support 40 MHz. It is often better to use the 20 MHz
setting in a location where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in your
neighborhood or the wireless clients do not support channel bonding.
The following are available only when you set Band to 5GHz.
Because not all devices support 40 MHz and/or 80 MHz channels, select Auto to allow the
NBG6817 to adjust the channel bandwidth automatically.
80+80MHz bonds two non-adjacent 80MHz channels to increase throughput. The wireless
clients may transmit/receive on both channels and use for the same purpose simultaneously.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase
throughput. A 80 MHz channel consists of two adjacent 40 MHz channels. The wireless clients
must also support 40 MHz or 80 MHz. It is often better to use the 20 MHz setting in a location
where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in your
neighborhood or the wireless clients do not support channel bonding.
802.11 Mode If you set Band to 2.4GHz, you can select from the following:
• 802.11b: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate
with the NBG6817. In this mode, all wireless devices can only transmit at the data rates
supported by IEEE 802.11b.
• 802.11g: allows IEEE 802.11g compliant WLAN devices to associate with the Device. IEEE
802.11b compliant WLAN devices can associate with the NBG6817 only when they use the
short preamble type.
• 802.11bg: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate
with the NBG6817. The NBG6817 adjusts the transmission rate automatically according to
the wireless standard supported by the wireless devices.
• 802.11n: allows IEEE 802.11n compliant WLAN devices to associate with the NBG6817. This
can increase transmission rates, although IEEE 802.11b or IEEE 802.11g clients will not be
able to connect to the NBG6817.
• 802.11gn: allows either IEEE 802.11g or IEEE 802.11n compliant WLAN devices to associate
with the NBG6817. The transmission rate of your NBG6817 might be reduced.
• 802.11 bgn: allows IEEE802.11b, IEEE802.11g and IEEE802.11n compliant WLAN devices to
associate with the NBG6817. The transmission rate of your NBG6817 might be reduced.
If you set Band to 5GHz, you can select from the following:
• 802.11a: allows only IEEE 802.11a compliant WLAN devices to associate with the NBG6817.
• 802.11a/an: allows both IEEE802.11n and IEEE802.11a compliant WLAN devices to
associate with the NBG6817. The transmission rate of your NBG6817 might be reduced.
• 802.11a/an/ac: allows IEEE802.11n, IEEE802.11a and IEEE 802.11ac compliant WLAN
devices to associate with the NBG6817.
Security
NBG6817 User’s Guide
100
Loading...