Zyxel NSG50 Service Manual

Default Login Details

User’s Guide

NSG Series

NSG50 / NSG100 Nebula Cloud-Management Security Gateway

LAN IP Address https://(IP assigned by NCC)

https://192.168.1.1

User Name admin

Password Assigned by NCC

1234

Version 1.20 Edition 1, 03/2017

IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE.

This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.

Related Documentation

•Quick Start Guide

The Quick Start Guide shows how to connect the NSG and access the Web Configurator.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary information.

•More Information

Go to support.zyxel.com to find other information on the NSG

NSG Series User’s Guide

Table of Contents

Table of Contents.................................................................................................................................3

Chapter 1

Introduction ..........................................................................................................................................5

1.1 Overview ........................................................................................................................................... 5

1.2 Management Overview .................................................................................................................. 5

1.3 Good Habits for Managing the NSG .............................................................................................. 6

1.4 LEDs .................................................................................................................................................... 6

1.4.1 NSG50 ....................................................................................................................................... 6

1.4.2 NSG100 ..................................................................................................................................... 7

1.5 Web Configurator ............................................................................................................................. 8

1.5.1 Web Configurator Access ...................................................................................................... 8

1.5.2 Web Configurator Screens Overview ................................................................................. 10

1.5.3 Navigation Panel .................................................................................................................. 10

1.5.4 Tables and Lists ...................................................................................................................... 11

Chapter 2

Dashboard..........................................................................................................................................14

2.1 Overview ......................................................................................................................................... 14

2.1.1 What You Can Do in this Chapter ....................................................................................... 14

2.2 Dashboard Screen ......................................................................................................................... 14

Chapter 3

Monitor................................................................................................................................................16

3.1 Overview ......................................................................................................................................... 16

3.2 USB Storage Screen ........................................................................................................................ 16

Chapter 4

Configuration......................................................................................................................................18

4.1 Interface .......................................................................................................................................... 18

4.1.1 Ethernet .................................................................................................................................. 18

4.1.2 Ethernet Edit .......................................................................................................................... 19

4.2 SSH ................................................................................................................................................. 21

4.2.1 How SSH Works ...................................................................................................................... 21

4.2.2 SSH Implementation on the NSG ......................................................................................... 22

4.2.3 Requirements for Using SSH .................................................................................................. 22

4.2.4 Configuring SSH ..................................................................................................................... 22

4.2.5 Secure Telnet Using SSH Examples ...................................................................................... 23

4.3 User ................................................................................................................................................... 24

NSG Series User’s Guide

Table of Contents

4.4 USB Storage ..................................................................................................................................... 25

Chapter 5

Maintenance......................................................................................................................................26

5.1 Diagnostics Overview .................................................................................................................... 26

5.2 Diagnostics Screen ......................................................................................................................... 26

5.2.1 Diagnostics Files Screen ....................................................................................................... 27

5.3 Packet Capture Screen ................................................................................................................. 28

5.3.1 Packet Capture Files Screen ............................................................................................... 30

5.4 Network Tool Screen ...................................................................................................................... 31

Chapter 6

Troubleshooting..................................................................................................................................33

6.1 Resetting the NSG ........................................................................................................................... 34

6.2 Getting More Troubleshooting Help ............................................................................................. 34

Appendix A Customer Support ....................................................................................................... 35

Appendix B Legal Information ......................................................................................................... 41

Index...................................................................................................................................................47

NSG Series User’s Guide

1.1 Overview

http://192.168.1.1

http://nebula.zyxel.com

http://(IP assigned by NCC)

This User’s Guide covers the following models: NSG50 and NSG100. The NSG (Nebula Security Gateway) comes with one or two USB ports for storing the packet capture files and/or diagnostic information in the connected USB storage devices. The NSG’s security features include VPN, firewall, ADP (Anomaly Detection and Protection), and certificates. It also provides bandwidth management, NAT, port forwarding, policy routing, DHCP server and many other powerful features.

The NSG is managed and provisioned by the NCC (Nebula Control Center) automatically when it is connected to the Internet. If you need to check the NSG’s system status, configure WAN connection settings or collect diagnostic information, access its built-in Web Configurator. The NSG’s default static IP address is 192.168.1.1, but you need to use the console port or check the NCC's Gateway > Configure > Interface addressing screen for the NSG's current LAN IP address when the NSG is being managed or has been managed by the NCC.

CHAPTER 1

Introduction

1.2 Management Overview

See the Quick Start Guide for how to make hardware connections.

You can manage the NSG in the following ways.

NSG Series User’s Guide

Chapter 1 Introduction

NCC (Nebula Control Center)

With the NCC, you can remotely manage and monitor the NSG through a cloud-based network management system. See the NCC User’s Guide for detailed information about how to access the NCC and manage your NSG via the NCC.

Web Configurator

The built-in Web Configurator allows basic NSG setup and monitoring using an Internet browser. This User’s Guide provides information about the Web Configurator.

Figure 1 Managing the NSG: Web Configurator

1.3 Good Habits for Managing the NSG

Do the following things regularly to make the NSG more secure and to manage it more effectively.

• Change the NSG’s system password through the NCC occasionally. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.

• Write down the password and put it in a safe place.

1.4 LEDs

Following are LED descriptions for the NSG series models.

1.4.1 NSG50

The following are the LED descriptions for your NSG50.

NSG Series User’s Guide

Chapter 1 Introduction

Figure 2 NSG50 LEDs

The following table describes the LEDs.

Table 1 NSG50 LED Descriptions

LED COLOR STATUS DESCRIPTION

PWR Off The NSG is turned off.

Green On The NSG is turned on.

Red On There is a hardware component failure. Shut down the device, wait for a few

SYS Green Off The NSG is not ready or has failed.

On The NSG is ready and running.

Blinking The NSG is booting, connected to the NCC but not registered, or searching for

Red On The NSG encountered an error or has failed.

P1, P2... Green Off There is no traffic on this port.

Blinking The NSG is sending or receiving packets on this port.

Orange Off There is no connection on this port.

On This port has a successful link.

USB Green Off No device is connected to the NSG’s USB port or the connected device is not

On A USB storage device is connected to the USB port.

minutes and then restart the device. If the LED turns red again, then please contact your vendor.

(discovering) the NCC.

supported by the NSG.

1.4.2 NSG100

The following are the LED descriptions for your NSG100.

Figure 3 NSG100 LEDs

NSG Series User’s Guide

Chapter 1 Introduction

The following table describes the LEDs.

Table 2 NSG100 LED Descriptions

LED COLOR STATUS DESCRIPTION

PWR Off The NSG is turned off.

Green On The NSG is turned on.

Red On There is a hardware component failure. Shut down the device, wait for a few

SYS Green Off The NSG is not ready or has failed.

On The NSG is ready and running.

Blinking The NSG is booting, connected to the NCC but not registered, or searching for

Red On The NSG encountered an error or has failed.

USB Green Off No device is connected to the NSG’s USB port or the connected device is not

On A USB storage device is connected to the USB port.

P1, P2... Green Off There is no traffic on this port.

Blinking The NSG is sending or receiving packets on this port.

Orange Off There is no connection on this port.

On This port has a successful link.

minutes and then restart the device. If the LED turns red again, then please contact your vendor.

(discovering) the NCC.

supported by the NSG.

1.5 Web Configurator

In order to use the Web Configurator, you must:

• Use one of the following web browser versions or later: Internet Explorer 10.0 and later versions, Mozilla Firefox 36.0 and later versions, Safari 9.0 and later versions, or Google Chrome 38.0 and later versions

• Allow pop-up windows (blocked by default in Windows XP Service Pack 2)

• Enable JavaScripts, Java permissions, and cookies

The recommended screen resolution is 1024 x 768 pixels.

1.5.1 Web Configurator Access

1 Make sure your NSG hardware is properly connected. See the Quick Start Guide.

2 In your browser go to http://(IP assigned by NCC) or http://192.168.1.1. See Section 1.1 on page 5 for

more information. By default, the NSG automatically routes this request to its HTTPS server, and it is recommended to keep this setting. The Login screen appears.

NSG Series User’s Guide

Chapter 1 Introduction

3 Type the user name (default: “admin”) and password (default: “1234”). If the NSG is being managed or

has been managed by the NCC, check the NCC's Site-Wide > Configure > General setting screen for the NSG's current password.

4 Click Login. After you log in for the first time using the default user name and password, you must

change the default admin password in the Update Admin Info screen. Type a new password of up to 63 printable characters without spaces, then click Apply.

5 The Login screen appears after you click Apply.

NSG Series User’s Guide

Chapter 1 Introduction

1.5.2 Web Configurator Screens Overview

The Web Configurator screen is divided into these parts :

• A - title bar

• B - navigation panel

• C - main window

Title Bar

Figure 4 Title Bar

The title bar icons in the upper right corner provide the following functions.

Table 3 Title Bar: Web Configurator Icons

LABEL DESCRIPTION

Logout Click this to log out of the Web Configurator.

Help Click this to open the help page for the current screen.

1.5.3 Navigation Panel

Use the navigation panel menu items to open status and configuration screens. The following sections introduce the NSG’s navigation panel menus and their screens.

Dashboard

The dashboard displays general device information, system status, and extenison slot status in widgets that you can re-arrange to suit your needs.

NSG Series User’s Guide

Chapter 1 Introduction

Monitor Menu

The monitor menu screens display status and information about the connected USB device.

Table 4 Monitor Menu Screens Summary

FOLDER OR LINK TAB FUNCTION

USB Storage Storage

Information

Displays details about USB device connected to the NSG.

Configuration Menu

Use the configuration menu screens to configure the NSG’s features.

Table 5 Configuration Menu Screens Summary

FOLDER OR LINK TAB FUNCTION

Interface Ethernet Manage Ethernet interfaces and virtual Ethernet interfaces.

SSH SSH Configure SSH server and SSH service settings.

User User Create and manage users.

USB Storage Settings Configure the settings for the connected USB devices.

Maintenance Menu

Use the maintenance menu screens to run diagnostics for troubleshooting, capture network traffic to identify network problems, and ping or traceroute an IP address.

Table 6 Maintenance Menu Screens Summary

FOLDER OR LINK

Diagnostics Diagnostics Collect diagnostic information.

TAB FUNCTION

Packet Capture Capture packets for analysis.

Network Tool Identify problems with the connections. You can use Ping or TraceRoute to help

1.5.4 Tables and Lists

Web Configurator tables and lists are flexible with several options for how to display their entries.

Click a column heading to sort the table’s entries according to that column’s criteria.

Figure 5 Sorting Table Entries by a Column’s Criteria

you identify problems.

Click the down arrow next to a column heading for more options about how to display the entries. The options available vary depending on the type of fields in the column. Here are some examples of what you can do:

NSG Series User’s Guide

Chapter 1 Introduction

• Sort in ascending or descending (reverse) alphabetical order

• Select which columns to display

•Group entries by field

•Show entries in groups

• Filter by mathematical operators (<, >, or =) or searching for text

Figure 6 Common Table Column Options

Select a column heading cell’s right border and drag to re-size the column.

Figure 7 Resizing a Table Column

Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location.

Figure 8 Moving Columns

Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.

Figure 9 Navigating Pages of Table Entries

The tables have icons for working with table entries. You can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activate, or deactivate.

NSG Series User’s Guide

Chapter 1 Introduction

Figure 10 Table Icons

Working with Lists

When a list of available entries displays next to a list of selected entries, you can often just double-click an entry to move it from one list to the other. In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list.

Figure 11 Working with Lists

NSG Series User’s Guide

2.1 Overview

Use the Dashboard screens to check status information about the NSG.

2.1.1 What You Can Do in this Chapter

Use the main Dashboard screen to see the NSG’s general device information, system status, and extension slot status. You can also display other status screens for more information.

2.2 Dashboard Screen

CHAPTER 2

Dashboard

The Dashboard screen displays when you log into the NSG or click Dashboard in the navigation panel. The dashboard displays general device information, system status, and extension slot status in widgets that you can re-arrange to suit your needs. You can also collapse, refresh, and close individual widgets.

Figure 12 Dashboard

The following table describes the labels in this screen.

Table 7 Dashboard

LABEL DESCRIPTION

Widget Settings (A)

Up Arrow (B) Click this to collapse a widget. It then becomes a down arrow. Click it again to enlarge the

Refresh Time Setting (C)

Refresh Now (D) Click this to update the widget’s information immediately.

Use this link to open or close widgets by selecting/clearing the associated checkbox.

widget again.

Set the interval for refreshing the information displayed in the widget.

NSG Series User’s Guide

Chapter 2 Dashboard

Table 7 Dashboard (continued)

LABEL DESCRIPTION

Close Widget (E) Click this to close the widget. Use Widget Settings to re-open it.

Device Information

Model Name This field displays the model name of this NSG.

Serial Number This field displays the serial number of this NSG. The serial number is used for device tracking

and control.

MAC Address Range

Firmware Version

System Status

System Uptime

Current Date/ Time

Nebula Connectivity Status

Extension Slot

# This field is a sequential value, and it is not associated with a specific entry.

Extension Slot This field displays the name of each extension slot. Device This field displays the name of the device connected to the extension slot (or none if no device

Status This field displays none if no device is detected.

This field displays the MAC addresses used by the NSG. Each physical port has one MAC address. The first MAC address is assigned to physical port 1, the second MAC address is assigned to physical port 2, and so on.

This field displays the version number and date of the firmware the NSG is currently running.

This field displays how long the NSG has been running since it last restarted or was turned on.

This field displays the current date and time in the NSG. The format is yyyy-mm-dd hh:mm:ss. Click on the link to see the Date/Time screen where you can make edits and changes to the date, time and time zone information.

This field displays whether the NSG is registered and can connect to the Zyxel Nebula Control Center (NCC).

is detected).

USB Flash Drive - Indicates a connected USB storage device and the drive’s storage capacity.

Ready - A USB storage device connected to the NSG is ready for the NSG to use. Unused - The NSG is unable to mount a USB storage device connected to the NSG.

NSG Series User’s Guide

+ 33 hidden pages