ZyXEL NBG6617 User Manual

12

LAN

12.1 Overview

This chapter describes how to configure LAN settings.

A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building.

Figure 61 LAN Example

The LAN screens can help you configure a manage IP address, and partition your physical network into logical networks.

12.2What You Can Do

•Use the LAN IP screen to configure the IPv4 and IPv6 addresses for your NBG6617 on the LAN (Section 12.4 on page 100).

•Use the Static DHCP screen to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses (Section 12.5 on page 101).

•Use the IPv6 LAN screen to configure the IPv6 address for your NBG6617 on the LAN (Section 12.6 on page 102).

12.3What You Need To Know

The actual physical connection determines whether the NBG6617 ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.

NBG6617 User’s Guide

99

Chapter 12 LAN

Figure 62 LAN and WAN IP Addresses

The LAN parameters of the NBG6617 are preset in the factory with the following values:

•IPv4 address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)

•DHCP server enabled with 32 client IPv4 addresses starting from 192.168.1.33.

These parameters should work for the majority of installations.

12.4 LAN IP Screen

Use this screen to change the IP address for your NBG6617. Click Expert Mode > LAN > LAN IP.

Figure 63 Expert Mode > LAN > LAN IP

The following table describes the labels in this screen.

Table 37 Expert Mode > LAN > LAN IP

LABEL	DESCRIPTION
IP Address	Type the IP address of your NBG6617 in dotted decimal notation.
IP Subnet Mask	The subnet mask specifies the network number portion of an IP address. Your NBG6617
	will automatically calculate the subnet mask based on the IP address that you assign.
	Unless you are implementing subnetting, use the subnet mask computed by the
	NBG6617.

NBG6617 User’s Guide

100

		Chapter 12 LAN
	Table 37 Expert Mode > LAN > LAN IP (continued)
	LABEL	DESCRIPTION
	DHCP Server	Select Enable to activate DHCP for LAN.
		DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
		individual clients (computers) to obtain TCP/IP configuration at startup from a server.
		Enable the DHCP server unless your ISP instructs you to do otherwise. Select Disable
		to stop the NBG6617 acting as a DHCP server. When configured as a server, the
		NBG6617 provides TCP/IP configuration for the clients. If not, DHCP service is
		disabled and you must have another DHCP server on your LAN, or else the computers
		must be manually configured. When set as a server, fill in the following four fields.
	IP Pool Starting	This field specifies the first of the contiguous addresses in the IP address pool for LAN.
	Address
	Pool Size	This field specifies the size, or count of the IP address pool for LAN.
	Apply	Click Apply to save your changes back to the NBG6617.
	Cancel	Click Cancel to begin configuring this screen afresh.

12.5 Static DHCP Screen

This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.

To change your NBG6617’s static DHCP settings, click Expert Mode > LAN > Static DHCP.

Figure 64 Expert Mode > LAN > Static DHCP

The following table describes the labels on this screen.

Table 38 Expert Mode > LAN > Static DHCP

LABEL	DESCRIPTION
#	This is the index number of the static IP table entry (row). Select Auto Detection to
	automatically detect the MAC address of a computer on your LAN. Otherwise, select
	User define to enter the MAC address of a computer on your LAN in the MAC Address
	field.
MAC Address	This field displays the MAC address of a computer on your LAN. If you select User
	define in the # field, enter the MAC address(es) manually.
IP Address	This field displays the LAN IP address of a computer on your LAN. If you select User
	define in the # field, enter the IP address(es) manually.
Add/Delete	Click	to add the rule in the MAC filter summary table.
	Click	to remove a rule.

NBG6617 User’s Guide

101

			Chapter 12 LAN
	Table 38	Expert Mode > LAN > Static DHCP (continued)
	LABEL		DESCRIPTION
	Apply		Click Apply to save your changes with the NBG6617.
	Cancel		Click Cancel to begin configuring this screen afresh.

12.6 IPv6 LAN Screen

Use this screen to configure the IP address for your NBG6617 on the LAN. Click Expert Mode >

LAN > IPv6 LAN.

Figure 65 Expert Mode > LAN > IPv6 LAN

The following table describes the labels in this screen.

Table 39 Expert Mode > LAN > IPv6 LAN

LABEL	DESCRIPTION

LAN IPv6 Address Assignment

Enable_DHCPv6-PD

Select this option to use DHCPv6 prefix delegation. The NBG6617 will obtain an IPv6 prefix from the ISP or a connected uplink router for the LAN.

	Autoconfiguration	Select SLAAC + RDNSS to enable IPv6 stateless auto-configuration on this interface.
	Type	The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6
		router in the network.
		Select SLAAC + Stateless DHCPv6 to enable IPv6 stateless auto-configuration on this
		interface. The interface will get an IPv6 address from an IPv6 router and the DHCP
		server. The IP address information gets through DHCPv6.
		Select Stateful DHCPv6 to allow a DHCP server to assign and pass IPv6 network
		addresses, prefixes and other configuration information to DHCP clients.
	IPv6 Address range	Enter the beginning of the range of IP addresses that this address object represents.
	(Start)
	IPv6 Address range	Enter the end of the range of IP address that this address object represents.
	(End)
		NBG6617 User’s Guide

102

		Chapter 12 LAN
	Table 39 Expert Mode > LAN > IPv6 LAN (continued)
	LABEL	DESCRIPTION
	IPv6 Lifetime	Enter the IPv6 lifetime in the LAN.
	Static IP Address
	Select this option to manually enter an IPv6 address if you want to use a static IP address.
	LAN IPv6 Address	Enter the LAN IPv6 address you want to assign to your NBG6617 in hexadecimal
		notation.
	LAN IPv6 Prefix	Enter the 48 to 64 address prefix length to specify in an IPv6 address compose the
	Length (48~64)	network address.
	Prefix Preferred	Enter the preferred lifetime for the prefix.
	Lifetime
	Prefix Valid Lifetime	Enter the valid lifetime for the prefix.
	Link Local Only
	Select this option to only use the link local address on the NBG6617 interfaces in the LAN.
	ULA
	Select this option to identify a unique local address of the NBG6617 in the LAN.
	RA period
	Minimum RA period	Enter the minimum time in seconds between router advertisement messages.
	Apply	Click Apply to save your changes back to the NBG6617.
	Cancel	Click Cancel to begin configuring this screen afresh.

NBG6617 User’s Guide

103

13

Applications

13.1 Overview

This chapter shows you how to configure parental control, bandwidth management, USB media sharing, UPnP and file sharing.

13.1.1What You Can Do

•Use the Parental Control screens to enable parental control, configure the parental control rules and schedules, and send e-mail notifications. (Section 13.2 on page 106).

•Use the Bandwidth Management screen to configure bandwidth management and the device priority (Section 13.3 on page 112).

•Use the USB Media Sharing screen to use the NBG6617 as a media server and allow DLNAcompliant devices to play media files stored in the attached USB device (Section 13.4 on page 117).

•Use the UPnP screen to enable UPnP on your NBG6617 (Section 13.5 on page 118).

•Use the File Sharing screen to allow file sharing via the NBG6617 using Windows Explorer, the workgroup name or FTP (Section 13.6 on page 119).

•Use the One Connect screen to enable or disable Wi-Fi auto-configuration (Section 13.7 on page 126).

13.1.2What You Need To Know

The following terms and concepts may help as you read through this chapter.

Keyword Blocking URL Checking

The NBG6617 checks the URL’s domain name (or IP address) and file path separately when performing keyword blocking.

The URL’s domain name or IP address is the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the domain name is www.zyxel.com.tw.

The file path is the characters that come after the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php.

Since the NBG6617 checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the NBG6617 would find “tw” in the domain name (www.zyxel.com.tw). It would also find “news” in the file path (news/pressroom.php) but it would not find “tw/news”.

NBG6617 User’s Guide

104

Chapter 13 Applications

DLNA

The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. DLNA clients play files stored on DLNA servers. The NBG6617 can function as a DLNA-compliant media server and stream files to DLNA-compliant media clients without any configuration.

Workgroup name

This is the name given to a set of computers that are connected on a network and share resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network.

File Systems

A file system is a way of storing and organizing files on your hard drive and storage device. Often different operating systems such as Windows or Linux have different file systems. The file-sharing feature on your NBG6617 supports New Technology File System (NTFS), File Allocation Table (FAT) and FAT32 file systems.

Windows/CIFS

Common Internet File System (CIFS) is a standard protocol supported by most operating systems in order to share files across the network.

CIFS runs over TCP/IP but uses the SMB (Server Message Block) protocol found in Microsoft Windows for file and printer access; therefore, CIFS will allow all applications, not just Web browsers, to open and share files across the Internet.

The NBG6617 uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the NBG6617. CIFS protocol is supported on Microsoft Windows, Linux Samba and other operating systems (refer to your systems specifications for CIFS compatibility).

Samba

SMB is a client-server protocol used by Microsoft Windows systems for sharing files, printers, and so on.

Samba is a free SMB server that runs on most Unix and Unix-like systems. It provides an implementation of an SMB client and server for use with non-Microsoft operating systems.

File Transfer Protocol

This is a method of transferring data from one computer to another over a network such as the Internet.

NBG6617 User’s Guide

105

Chapter 13 Applications

Universal Plug-and-Play (UPnP)

UPnP hardware is identified as an icon in the Network Connections folder (Windows XP). Each UPnP compatible device installed on your network will appear as a separate icon. Selecting the icon of a UPnP device will allow you to access the information and properties of that device.

13.1.3 Before You Begin

Make sure the NBG6617 is connected to your network and turned on.

1Connect the USB device to one of the NBG6617’s USB ports.

2The NBG6617 detects the USB device and makes its contents available for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on.

Note: If your USB device cannot be detected by the NBG6617, see the troubleshooting for suggestions.

13.2Parental Control

Parental Control allows you to block specific URLs. You can also define time periods and days during which the NBG6617 performs parental control on a specific user.

13.2.1 General Screen

Use this screen to enable parental control, view the parental control rules and schedules.

In Expert mode, click Applications > Parental Control > General to open the following screen.

Figure 66 Expert Mode > Applications > Parental Control > General

NBG6617 User’s Guide

106

Chapter 13 Applications

The following table describes the fields in this screen.

Table 40 Expert Mode > Applications > Parental Control > General

LABEL	DESCRIPTION
General
Parental	Select Enable to activate parental control. Otherwise, select Disable to turn it off.
Control
Add new rules	Click this if you want to configure a new parental control rule.
Parental Control Rules
#	This shows the index number of the rule.
Status	This indicates whether the rule is active or not.
	A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
User Name	This shows the name of the user to which this rule applies.
Schedule	This shows whether the user is able to access the Internet through the NBG6617 (Allow) or
	not (Block) at the moment.
Modify	Click the Edit icon to go to the screen where you can edit the rule.
	Click the Delete icon to delete an existing rule.
Bonus	If the user is currently not permitted to access the Internet, you can click the Bonus to
	allow access for a specified period of time. A screen then displays allowing you to set how
	long (in minutes) the user is allowed to access the Internet.
	This button is grayed out if the user is now able to access the Internet.
Remaining	This field displays the amount of Internet access time that remains for each user before the
Time	NBG6617 blocks the user from accessing the Internet.
	None means there is no extra Internet access time.
Apply	Click Apply to save your changes.
Cancel	Click Cancel to restore your previously saved settings.

13.2.1.1 Add/Edit a Parental Control Rule

Click Add new rules in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites.

NBG6617 User’s Guide

107

Chapter 13 Applications

Figure 67 Expert Mode > Applications > Parental Control > General: Add/Edit new rules

The following table describes the fields in this screen.

Table 41 Expert Mode > Applications > Parental Control > General: Add/Edit new rules

	LABEL	DESCRIPTION
	General
	Active	Select the checkbox to activate this parental control rule.
	User Name	Enter a descriptive name for the user.
	Device List	The left text box lists the system name of the LAN user device which is connected to the
		NBG6617 and assigned an IP address.
		From the left text box, select the LAN user device to which you want to apply this rule and
		click Add to move it to the right text box.
		To remove a user device, select it from the right text box and click Delete.
	Internet Access	The y-axis shows the days that you want the NBG6617 to perform parental control and
	Schedule	allow the user to access the Internet.
		The x-axis shows the time period during which the LAN user is allowed access.
		A blue block signifies that this rule is active. A gray block signifies that this rule is not active.
	Clean All	Click Clean All to remove blocks you selected.
	Select All	Click Select All to choose all blocks.
		NBG6617 User’s Guide

108

Chapter 13 Applications

Table 41 Expert Mode > Applications > Parental Control > General: Add/Edit new rules (continued)

LABEL	DESCRIPTION
Network Service
Network	If you select Block, the NBG6617 prohibits the users from using the services listed below.
Service Setting	If you select Allow, the NBG6617 blocks all services except ones listed below.
Add new	Click this to show a screen in which you can add a new service rule. You can configure the
service	Service Name, Protocol, and Port of the new rule.
#	This shows the index number of the rule. Select the checkbox next to the rule to activate it.
Service Name	This shows the name of the service.
Protocol:Port	This shows the protocol and the port of the service.
Modify	Click the Edit icon to go to the screen where you can edit the rule.
	Click the Delete icon to delete an existing rule.
Block Site/URL Keyword
Keyword	Enter a keyword and click Add to add it to the keyword list. This has the NBG6617 block
	access to the website URLs that contain the keyword.
Keyword List	Select a keyword and click Delete to remove it.
	Click Clear All to remove all keywords from the keyword list.
Apply	Click Apply to save your settings back to the NBG6617.
Back	Click Back to return to the previous screen.

13.2.1.2 Add/Edit a Service

Click Add new service in the Parental Control > Add new rules screen to add a new entry or click the Edit icon next to an existing entry to edit it. Use this screen to configure a service rule.

Figure 68 Expert Mode > Applications > Parental Control > General: Add/Edit new rules: Add new service

The following table describes the fields in this screen.

Table 42 Expert Mode > Applications > Parental Control > General: Add/Edit new rules: Add new service

	LABEL	DESCRIPTION
	Service Name	Select the name of the service. Otherwise, select UserDefined and manually specify the
		protocol and the port of the service.
		If you have chosen a pre-defined service in the Service Name field, this field will not be
		configurable.
	Protocol	Select the transport layer protocol used for the service. Choices are TCP, UDP, or TCP/
		UDP.
		NBG6617 User’s Guide

109

Chapter 13 Applications

Table 42 Expert Mode > Applications > Parental Control > General: Add/Edit new rules: Add new service (continued)

LABEL	DESCRIPTION
Port	Enter the port of the service.
	If you have chosen a pre-defined service in the Service Name field, this field will not be
	configurable.
Apply	Click Apply to save your settings with the NBG6617.
Back	Click Back to return to the previous screen.

13.2.2 Notification Screen

Use this screen to have the NBG6617 send e-mail notifications when the user(s) is connected to the NBG6617 for Internet access during the specified time periods.

In Expert mode, click Applications > Parental Control > Notification to open the following screen.

Figure 69 Expert Mode > Applications > Parental Control > Notification

The following table describes the fields in this screen.

Table 43 Expert Mode > Applications > Parental Control > Notification

LABEL		DESCRIPTION
General
E-mail		Select Enable to activate e-mail notifications.
Notification
Add new rules		Click this if you want to configure a new parental monitor rule.
Notification Rules
#		This shows the index number of the rule.

NBG6617 User’s Guide

110

		Chapter 13 Applications
	Table 43 Expert Mode > Applications > Parental Control > Notification (continued)
	LABEL	DESCRIPTION
	Status	This indicates whether the rule is active or not.
		A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
	User Name	This shows the name of the user to which this rule applies.
	Notification	This shows the e-mail address to which the notification is sent.
	Modify	Click the Edit icon to go to the screen where you can edit the rule.
		Click the Delete icon to delete an existing rule.
	Email Notification Configuration
	Mail Server	Select the mail server. Otherwise, select UserDefined and manually specify the mail server
		address and the port of the mail server.
	Mail Server	Type the name or IP address of the outgoing SMTP server.
	Address
	Mail Server Port	Enter the same port number here as is on the mail server for mail traffic.
	Authentication	Type the user name to provide to the SMTP server for authentication when the notification is
	Username	e-mailed.
	Authentication	Type the password to provide to the SMTP server for authentication when the notification is
	Password	e-mailed.
	Mail From	Type the e-mail address from which the outgoing e-mail is delivered. This address is used in
		replies.
	E-Mail	Type the e-mail address (or addresses) to which the outgoing e-mail is delivered.
	Apply	Click Apply to save your changes.
	Cancel	Click Cancel to restore your previously saved settings.

13.2.2.1 Add/Edit a Notification Rule

Click Add new rules in the Notification screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to set a schedule and have the NBG6617 send a notification when the specified user connects to the NBG6617 at the scheduled time.

Figure 70 Expert Mode > Applications > Notification: Add/Edit new rules

NBG6617 User’s Guide

111

Chapter 13 Applications

The following table describes the fields in this screen.

Table 44 Expert Mode > Applications > Notification: Add/Edit new rules

LABEL	DESCRIPTION
Notification
Active	Select the checkbox to activate this notification rule.
Home Network	Select the user that you want to apply this rule to from the drop-down list box.
User
	Note: You should have configured a parental control rule already for the specified user.
Schedule
Day	Select check boxes for the days that you want the NBG6617 to perform notification.
Time (Begin ~	Define the time period during that you want the NBG6617 to perform notification.
End)
Apply	Click Apply to save your settings back to the NBG6617.
Back	Click Back to return to the previous screen.

13.3 Bandwidth Management

The NBG6617 supports the new StreamBoost technology, introduced by Qualcomm, to redistribute traffic over the NBG6617 for the best possible performance in a home network.

Streamboost is smart Quality of Service (QoS). Streamboost detects traffic flow and applies traffic shaping policies automatically. It gives each device and each application priority and provides the exact amount of bandwidth they need at a given time. This helps free up bandwidth for other applications or connected devices. If there is not enough bandwidth for optimal performance, Streamboost makes sure the application or device has the minimum acceptable bandwidth which is determined according to StreamBoost’s cloud-based database.

Real-time application traffic (such as on-line games or communications) and video/audio streaming are given the highest priority. Downloads or torrent files are classified as best effort and placed lower than general network traffic (general browsing).

In the figure below, the StreamBoost-enabled NBG6617 differentiates incoming traffic flow going from the LAN device (A) or wireless device (B) to the Internet. It shapes traffic and gives priority and allocates bandwidth according to traffic types.

NBG6617 User’s Guide

112

Chapter 13 Applications

Figure 71 StreamBoost Management Example

B

A

The StreamBoost engine on the NBG6617 can identify the types of connected devices (such as PC, smart phone, tablet, TV or game console) in your network. When there is not enough bandwidth to support traffic of the same priority, the NBG6617 refers to the connected device priority. Traffic from the device with the lowest priority is classified as best-effort traffic. Use the Advanced screen to prioritize the connected devices (Section 13.3.2 on page 113).

13.3.1 General Screen

Use this screen to enable StreamBoost.

In Expert mode, click Applications > Bandwidth Management > General to open the following screen.

Figure 72 Expert Mode > Applications > Bandwidth Management > General

The following table describes the labels in this screen.

Table 45 Expert Mode > Applications > Bandwidth Management > General

LABEL	DESCRIPTION
Enable	Select this option to turn on Streamboost management on the NBG6617.
StreamBoost
Apply	Click Apply to save your customized settings.
Cancel	Click Cancel to begin configuring this screen afresh.

13.3.2 Advanced Screen

Use this screen to configure the maximum allowable bandwidth on the NBG6617 and allow the NBG6617 to get StreamBoost database updates automatically.

NBG6617 User’s Guide

113

Chapter 13 Applications

In Expert mode, click Applications > Bandwidth Management > Advanced to open the following screen.

Figure 73 Expert Mode > Applications > Bandwidth Management > Advanced

The following table describes the labels in this screen.

Table 46 Expert Mode > Applications > Bandwidth Management > Advanced

LABEL	DESCRIPTION
Management Bandwidth
Upstream	Select the total amount of bandwidth that you want to dedicate to uplink (or outgoing)
Bandwidth	traffic. Otherwise, select User Defined to manually enter the bandwidth.
	This is traffic from LAN/WLAN to WAN.
Downstream	Select the total amount of bandwidth that you want to dedicate to downlink (or
Bandwidth	incoming) traffic. Otherwise, select User Defined to manually enter the bandwidth.
	This is traffic from WAN to LAN/WLAN.
Application List
#	This is the index number of the application on the NBG6617.
Priority	Use the drop-down list box to select the priority of the connected device.

NBG6617 User’s Guide

114

		Chapter 13 Applications
	Table 46 Expert Mode > Applications > Bandwidth Management > Advanced (continued)
	LABEL	DESCRIPTION
	Category	This column displays the categories to which the connected device applies.
	Service	This displays the name of the service.
	Edit	Click the Edit icon to open the edit screen where you can modify an existing rule.
	User-defined Service
	#	This is the index number of the user-defined service.
	Enable	Select the check box to enable the service. Clear the check box to disable the service.
	Direction	Use the drop-down list box to select a direction of travel of packets for which you want
		to configure services.
	Service Name	Enter a descriptive name for the service.
	Category	Use the drop-down list box to select a category of the service.
	Modify	Click the Edit icon to open the edit screen where you can modify an existing rule.
		Click the Delete icon to remove a rule.
	Apply	Click Apply to save your customized settings.
	Cancel	Click Cancel to begin configuring this screen afresh.

13.3.2.1 Application List Edit

Click the Edit icon next to an existing rule to edit it. Use this screen to view and configure the application rules.

Figure 74 Expert Mode > Applications > Bandwidth Management > Advanced: Application List: Edit

The following table describes the labels in this screen.

Table 47 Expert Mode > Applications > Bandwidth Management > Advanced: Application List: Edit

LABEL	DESCRIPTION
#	This is the index number of the service rule.
Enable	Select the check box to enable the rule. Clear the check box to disable the rule.
Direction	This displays traffic direction of the service.
Bandwidth	Select Maximum Bandwidth or Minimum Bandwidth and enter the maximum
	bandwidth or minimum bandwidth (in Kbps) next to the drop-down list box allowed for
	the traffic.
Destination Port	This displays the port number of the destination that define the traffic type.
Source Port	This displays the port number of the source that define the traffic type.
Protocol	This is the transport layer protocol used for the service.

NBG6617 User’s Guide

115

		Chapter 13 Applications
	Table 47 Expert Mode > Applications > Bandwidth Management > Advanced: Application List: Edit
	LABEL	DESCRIPTION
	Apply	Click Apply to save your customized settings.
	Cancel	Click Cancel to begin configuring this screen afresh.

13.3.2.2 User-defined Service Edit

Click the Edit icon in the Modify field to open the edit screen. Use this screen to configure userdefined service rules.

Figure 75 Expert Mode > Applications > Bandwidth Management > Advanced: User-defined Service: Edit

The following table describes the labels in this screen.

Table 48 Expert Mode > Applications > Bandwidth Management > Advanced: User-defined Service: Edit

LABEL	DESCRIPTION
Bandwidth Budget	Select Maximum Bandwidth or Minimum Bandwidth and enter the maximum
	bandwidth or minimum bandwidth (in Kbps) next to the drop-down list box allowed for
	the service.
Destination	Enter the single IP address or the starting IP address in a range here.
Address Start
Destination	Enter the ending IP address in a range here.
Address End
Destination Port	This is a single port number that defines your user-defined service.
Source Address	Enter the single IP address or the starting IP address in a range here.
Start
Source Address End	Enter the ending IP address in a range here.
Source Port	This is a single port number that defines your user-defined service.
Protocol	Select the transport layer protocol (TCP, UDP or BOTH) that defines your user-defined
	service.
Apply	Click Apply to save your customized settings.
Cancel	Click Cancel to begin configuring this screen afresh.

NBG6617 User’s Guide

116

Chapter 13 Applications

13.4 USB Media Sharing Screen

You can set up your NBG6617 to act as a media server to provide media (like video) to DLNAcompliant players, such as Windows Media Player, ZyXEL DMAs (Digital Media Adapters), Xboxes or PS3s. The media server and clients must have IP addresses in the same subnet.

The NBG6617 media server enables you to:

•Publish all folders for everyone to play media files in the USB storage device connected to the NBG6617.

•Use hardware-based media clients like the DMA-2500 to play the files.

Note: Anyone on your network can play the media files in the published folders. No user name and password nor other form of security is required.

The following figure is an overview of the NBG6617’s media server feature. DLNA devices A and B can access and play files on a USB device (C) which is connected to the NBG6617 (D).

Figure 76 Media Server Overview

A

B

C

D

Use this screen to have the NBG6617 act as a DLNA-compliant media server that lets DLNAcompliant media clients on your network play video, music, and photos from the NBG6617 (without having to copy them to another computer).

In Expert mode, click Applications > USB Media Sharing to open the following screen.

NBG6617 User’s Guide

117

Chapter 13 Applications

Figure 77 Expert Mode > Applications > USB Media Sharing

The following table describes the labels in this screen.

Table 49 Expert Mode > Applications > USB Media Sharing

LABEL	DESCRIPTION
DLNA Setup
Enable DLNA	Select this to have the NBG6617 function as a DLNA-compliant media server.
Enable Shared Media Types
USB1	Select the media type that you want to share on the USB device connected to the
	NBG6617’s USB port.
Rescan Media Contents
Rescan	Click this button to have the NBG6617 scan the media files on the connected USB device
	and do indexing of the file list again so that DLNA clients can find the new files if any.
Apply	Click Apply to save your changes back to the NBG6617.
Cancel	Click Cancel to begin configuring this screen afresh.

13.5 UPnP Screen

Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.

Use this screen to enable UPnP on your NBG6617.

In Expert mode, click Applications > UPnP to open the following screen.

NBG6617 User’s Guide

118

Chapter 13 Applications

Figure 78 Expert Mode > Applications > UPnP

The following table describes the fields in this screen.

Table 50 Expert Mode > Applications > UPnP

LABEL	DESCRIPTION
UPnP	Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to
	open the web configurator's login screen without entering the NBG6617's IP address
	(although you must still enter the password to access the web configurator).
Display	Select the page number from the drop-down list box to display the UPnP port mapping
	rules.
UPnP Portmap Table
#	This is the number of an individual UPnP entry.
Protocol	This is the transport layer protocol used for the service.
In Port	In Port is a port that a LAN computer uses when it requests a particular service. This
	port is only applicable to the local network.
	This field displays the port number of the UPnP entry.
Out Port	Out Port is the well-known port that the WAN server uses to reply to the LAN computer
	that made the request using In Port.
	In the below example, In Port 8000 is paired with Out Port 80. A user on the WAN
	could enter http://A.B.C.D:8000 to access the internal computer with private IP address
	192.168.77.55 where A.B.C.D is the WAN IP address or URL of the NBG6617.
	This field displays the port number of the UPnP entry.
IP Address	This field displays the IP address of this UPnP entry.
Apply	Click Apply to save the setting to the NBG6617.
Cancel	Click Cancel to return to the previously saved settings.

13.6 File Sharing

You can also share files on a USB memory stick or hard drive connected to your NBG6617 with users on your network.

NBG6617 User’s Guide

119

Chapter 13 Applications

The following figure is an overview of the NBG6617’s file-sharing server feature. Computers A and B can access files on a USB device (C) which is connected to the NBG6617 (D).

Figure 79 File Sharing Overview

B C

A

D

Note: The read and write performance may be affected by amount of file-sharing traffic on your network, type of connected USB device and your USB version (1.1 or 2.0).

13.6.1 SAMBA Server Screen

Use this screen to set up file-sharing via the NBG6617 using Windows Explorer or the workgroup name. You can also configure the workgroup name and create file-sharing user accounts.

In Expert mode, click Applications > File Sharing > SAMBA to open the following screen.

Figure 80 Expert Mode > Applications > File Sharing > SAMBA

NBG6617 User’s Guide

120

Chapter 13 Applications

The following table describes the labels in this screen.

Table 51 Expert Mode > Applications > File Sharing > SAMBA

LABEL	DESCRIPTION
SAMBA Setup
Enable SAMBA	Select this to enable file sharing through the NBG6617 using Windows Explorer or by
	browsing to your work group.
Name	Specify the name to identify the NBG6617 in a work group.
Work Group	You can add the NBG6617 to an existing or a new workgroup on your network. Enter the
	name of the workgroup which your NBG6617 automatically joins. You can set the
	NBG6617’s workgroup name to be exactly the same as the workgroup name to which
	your computer belongs to.
	Note: The NBG6617 will not be able to join the workgroup if your local area network has
	restrictions set up that do not allow devices to join a workgroup. In this case, contact
	your network administrator.
Description	Enter the description of the NBG6617 in a work group.
Require username	Select Yes to need a user account for access to the connected USB stick from any
and password	computer. Otherwise, select No.
User Accounts	Before you can share files you need a user account. Configure the following fields to set
	up a file-sharing account.
#	This is the index number of the user account.
Enable	This field displays whether a user account is activated or not. Select the check box to
	enable the account. Clear the check box to disable the account.
User Name	Enter a user name that will be allowed to access the shared files. You can enter up to 20
	characters. Only letters and numbers allowed.
Password	Enter the password used to access the shared files. You can enter up to 20 characters.
	Only letters and numbers are allowed. The password is case sensitive.
USB1	Specify the user’s access rights to the USB storage device which is connected to the
	NBG6617’s USB port.
	Read & Write - The user has read and write rights, meaning that the user can create
	and edit the files on the connected USB device.
	Read - The user has read rights only and can not create or edit the files on the
	connected USB device.
Apply	Click Apply to save your changes back to the NBG6617.
Cancel	Click Cancel to begin configuring this screen afresh.

13.6.2 FTP Server Screen

Use this screen to set up file sharing via the NBG6617 using FTP and create user accounts.

In Expert mode, click Applications > File Sharing > FTP to open the following screen.

NBG6617 User’s Guide

121

Chapter 13 Applications

Figure 81 Expert Mode > Applications > File Sharing > FTP

The following table describes the labels in this screen.

Table 52 Expert Mode > Applications > File Sharing > FTP

LABEL	DESCRIPTION
Enable FTP	Select this to enable the FTP server on the NBG6617 for file sharing using FTP.
Port	You may change the server port number for FTP if needed, however you must use the
	same port number in order to use that service for file sharing.
User Accounts	Before you can share files you need a user account. Configure the following fields to set
	up a file-sharing account.
#	This is the index number of the user account.
Enable	This field displays whether a user account is activated or not. Select the check box to
	enable the account. Clear the check box to disable the account.
User Name	Enter a user name that will be allowed to access the shared files. You can enter up to 20
	characters. Only letters and numbers allowed.
Password	Enter the password used to access the shared files. You can enter up to 20 characters.
	Only letters and numbers are allowed. The password is case sensitive.
USB1	Specify the user’s access rights to the USB storage device which is connected to the
	NBG6617’s USB port.
	Read & Write - The user has read and write rights, meaning that the user can create
	and edit the files on the connected USB device.
	Read - The user has read rights only and can not create or edit the files on the
	connected USB device.
	None - The user cannot access the files on the USB device(s) connected to the USB
	port.
Upstream	Enter the maximum bandwidth (in Kbps) allowed for incoming FTP traffic.
Bandwidth
Downstream	Enter the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic.
Bandwidth
Apply	Click Apply to save your changes back to the NBG6617.
Cancel	Click Cancel to begin configuring this screen afresh.

NBG6617 User’s Guide

122

Chapter 13 Applications

13.6.3 Example of Accessing Your Shared Files From a Computer

You can use Windows Explorer or FTP to access the USB storage devices connected to the NBG6617.

This example shows you how to use Microsoft’s Windows XP to browse your shared files. Refer to your operating system’s documentation for how to browse your file structure.

Use Windows Explorer to Share Files

You should have enabled file sharing and create a user account (Bob/1234 for example) with read and write access to USB 1 in the Applications > File Sharing > SAMBA screen.

Open Windows Explorer to access the connected USB device using either Windows Explorer browser or by browsing to your workgroup.

1In Windows Explorer’s Address bar type a double backslash “\\” followed by the IP address of the NBG6617 (the default IP address of the NBG6617 in router mode is 192.168.1.1) and press [ENTER]. A screen asking for password authentication appears. Type the user name and password (Bob and 1234 in this example) and click OK.

Note: Once you log into the shared folder via your NBG6617, you do not have to relogin unless you restart your computer.

NBG6617 User’s Guide

123

Chapter 13 Applications

2You can also use the workgroup name to access files by browsing to the workgroup folder using the folder tree on the left side of the screen. It is located under My Network Places. In this example the workgroup name is the default “Workgroup”.

Use FTP to Share Files

You can use FTP to access the USB storage devices connected to the NBG6617. In this example, we use the web browser to share files via FTP from the LAN. The way or screen you log into the FTP server (on the NBG6617) varies depending on your FTP client. See your FTP client documentation for more information.

You should have enabled file sharing and create a user account (Bob/1234 for example) with read and write access to USB 1 in the Applications > File Sharing > FTP screen.

1In your web browser’s address or URL bar type “ftp://” followed by the IP address of the NBG6617 (the default LAN IP address of the NBG6617 in router mode is 192.168.1.1) and click Go or press [ENTER].

NBG6617 User’s Guide

124

Chapter 13 Applications

2A screen asking for password authentication appears. Enter the user name and password (you configured in the Applications > File Sharing > FTP screen) and click Log On.

3The screen changes and shows you the folder for the USB storage device connected to your NBG6617. Double-click the folder to display the contents in it.

NBG6617 User’s Guide

125

Chapter 13 Applications

13.7 ONE Connect Screen

One Connect is a ZyXEL-proprietary feature. It complies with the IEEE 1905.1 standard and allows auto-detection and auto-configuration.

If your wireless router supports ZyXEL One Connect, NBG6617 for example, you can download and install the ZyXEL One Connect App in your mobile device to check the connection status, do speed test, turn on or turn off the devices in your network, block or allow a device’s access and set up a guest Wi-Fi network from the mobile device. You can even use the App to access the NBG6617’s web configurator. The mobile device with the App installed must be connected to the NBG6617 wirelessly.

Note: You have to go to https://mycloud.zyxel.com and pair your device again when you reset the NBG6617.

Figure 82 ZyXEL ONE Connect App

Use this screen to enable or disable Wi-Fi auto-configuration on the NBG6617.

In Expert mode, click Applications > ONE Connect to open the following screen.

Figure 83 Expert Mode > Applications > ONE Connect

The following table describes the labels in this screen.

Table 53 Expert Mode > Applications > ONE Connect

	LABEL	DESCRIPTION
	ONE Connect
	QR Code	Scan the QR code and go to a website to download the ZyXEL One Connect App in your
		mobile device. One is for the iTunes App Store, and the other is for Google Play.
		NBG6617 User’s Guide

126

Chapter 13 Applications

Table 53 Expert Mode > Applications > ONE Connect

LABEL DESCRIPTION

One Connect Compatible Devices

	Automatically	Select Enable to allow the NBG6617 to automatically update the wireless settings on
	Update AP/	the APs or wireless repeaters (which also support ZyXEL One Connect) in its network.
	Repeater Wi-Fi	Select Disable to turn this feature off if you want to have the APs or repeaters in the
	Settings
		network use different wireless settings.
	Apply	Click Apply to save your changes back to the NBG6617.
	Cancel	Click Cancel to begin configuring this screen afresh.

13.8 Technical Reference

The following section contains additional technical information about the NBG6617 features described in this chapter.

Customizing Keyword Blocking URL Checking

You can use commands to set how much of a website’s URL the content filter is to check for keyword blocking. See the appendices for information on how to access and use the command interpreter.

Domain Name or IP Address URL Checking

By default, the NBG6617 checks the URL’s domain name or IP address when performing keyword blocking.

This means that the NBG6617 checks the characters that come before the first slash in the URL.

For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw.

Full Path URL Checking

Full path URL checking has the NBG6617 check the characters that come before the last slash in the URL.

For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/.

Use the ip urlfilter customize actionFlags 6 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's full path.

File Name URL Checking

Filename URL checking has the NBG6617 check all of the characters in the URL.

For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/ news/pressroom.php.

NBG6617 User’s Guide

127

Chapter 13 Applications

Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.

NAT Traversal

UPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following:

•Dynamic port mapping

•Learning public IP addresses

•Assigning lease times to mappings

Windows Messenger is an example of an application that supports NAT traversal and UPnP.

See the NAT chapter for more information on NAT.

Cautions with UPnP

The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments.

When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG6617 allows multicast messages on the LAN only.

All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention.

NBG6617 User’s Guide

128