FCC ID: I88NBG7815 AX6000 12-Stream Multi-Gigabit WiFi 6 Router

Users Guide ARMOR G5 AX6000 Multi-Gigabit Security WiFi Router Model: NBG7815 Default Login Details LAN IP Address http://zyxelwifi.com OR http://zyxelwifi.net Version 1.00 Edition 1, 03/2020 Copyright 2020 Zyxel Communications Corporation IMPORTANT!

READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation Quick Start Guide The Quick Start Guide shows how to connect the NBG7815 and access the Web Configurator wizards. It contains information on setting up your network and configuring for Internet access. More Information Go to support.zyxel.com to find other information on the NBG7815. NBG7815 Users Guide 2 Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions Product labels, screen names, field labels and field choices are all in bold font. A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Network Setting

> Routing > DNS Route means you first click Network Setting in the navigation panel, then the Routing sub menu and finally the DNS Route tab to get to that screen. Icons Used in Figures Figures in this user guide may use the following generic icons. The NBG7815 icon is not an exact representation of your device. NBG7815 Wireless Device Laptop Computer Switch Firewall Server Internet Desktop Computer Smartphone NBG7815 Users Guide 3 Contents Overview Contents Overview Users Guide ......................................................................................................................................10 Introduction ........................................................................................................................................... 11 Wizard .................................................................................................................................................... 17 The Web Configurator ......................................................................................................................... 27 NBG7815 Modes ................................................................................................................................... 35 Standard Mode .................................................................................................................................... 37

................................................................................................................................................................ 39 Bridge Mode ......................................................................................................................................... 40 Tutorials .................................................................................................................................................. 43 Technical Reference ........................................................................................................................56 Applications .......................................................................................................................................... 57 WAN ....................................................................................................................................................... 76 Wireless LAN ........................................................................................................................................ 101 LAN ....................................................................................................................................................... 112 Security ................................................................................................................................................ 122 System .................................................................................................................................................. 129 Troubleshooting .................................................................................................................................. 140 NBG7815 Users Guide 4 Table of Contents Table of Contents Document Conventions ......................................................................................................................3 Contents Overview .............................................................................................................................4 Table of Contents .................................................................................................................................5 Part I: Users Guide.......................................................................................... 10 Chapter 1 Introduction ........................................................................................................................................11 1.1 Overview ......................................................................................................................................... 11 1.2 Applications .................................................................................................................................... 11 1.3 Ways to Manage the NBG7815 .................................................................................................... 12 1.4 Good Habits for Managing the NBG7815 ................................................................................... 12 1.5 Resetting the NBG7815 .................................................................................................................. 13 1.5.1 How to Use the RESET Button ................................................................................................ 13 1.6 The WPS Button ............................................................................................................................... 13 1.7 LEDs .................................................................................................................................................. 14 1.8 Desk Mounting ................................................................................................................................ 15 1.9 Wall Mounting ................................................................................................................................. 15 Chapter 2 Wizard .................................................................................................................................................17 2.1 Overview ......................................................................................................................................... 17 2.2 Accessing the Wizard ..................................................................................................................... 17 Chapter 3 The Web Configurator........................................................................................................................27 3.1 Overview ......................................................................................................................................... 27 3.2 Accessing the Web Configurator ................................................................................................. 27 3.3 Navigation Panel ............................................................................................................................ 30 3.3.1 Standard Mode Navigation Panel ...................................................................................... 31 3.3.2 Bridge Mode Navigation Panel ........................................................................................... 33 Chapter 4 NBG7815 Modes.................................................................................................................................35 4.1 Overview ......................................................................................................................................... 35 4.2 Modes .............................................................................................................................................. 35 NBG7815 Users Guide 5 Table of Contents Chapter 5 Standard Mode ..................................................................................................................................37 5.1 Overview ......................................................................................................................................... 37 5.2 What You Can Do .......................................................................................................................... 37 5.3 Standard Mode Status Screen ...................................................................................................... 37

.............................................................................................................................................................39 Chapter 6 Bridge Mode.......................................................................................................................................40 6.1 Overview ......................................................................................................................................... 40 6.2 What You Can Do .......................................................................................................................... 40 6.3 Setting your NBG7815 to Bridge Mode ........................................................................................ 40 6.3.1 Accessing the Web Configurator in Bridge Mode ............................................................ 41 6.4 Bridge Mode Status Screen ........................................................................................................... 42 Chapter 7 Tutorials ...............................................................................................................................................43 7.1 Overview ......................................................................................................................................... 43 7.2 Run a Speed Test ............................................................................................................................ 43 7.3 Configure the NBG7815s WiFi Networks ...................................................................................... 44 7.4 Enable or Disable a WiFi Network ................................................................................................. 46 7.5 Add Clients to a Profile .................................................................................................................. 47 7.6 Set a Profiles WiFi Schedule .......................................................................................................... 48 7.7 Pause or Resume Internet Access on a Profile ............................................................................ 50 7.8 Turn on or off the NBG7815s LED (Light) ...................................................................................... 51 7.9 Change Your NBG7815 Operating Mode ................................................................................... 52 7.10 Configure a Port Forwarding Rule .............................................................................................. 53 Part II: Technical Reference........................................................................... 56 Chapter 8 Applications .......................................................................................................................................57 8.1 Overview ......................................................................................................................................... 57 8.1.1 What You Can Do ................................................................................................................. 57 8.1.2 What You Need To Know ..................................................................................................... 57 8.1.3 Before You Begin ................................................................................................................... 58 8.2 Parental Control ............................................................................................................................. 58 8.2.1 Device Screen ....................................................................................................................... 58 8.3 OpenVPN Server/Client ................................................................................................................. 62 8.3.1 OpenVPN Server Screen ...................................................................................................... 62 8.3.2 OpenVPN Account Screen .................................................................................................. 64 NBG7815 Users Guide 6 Table of Contents 8.3.3 OpenVPN Client Screen ....................................................................................................... 66 8.4 USB Application .............................................................................................................................. 68 8.4.1 SAMBA Server Screen ........................................................................................................... 68 8.4.2 FTP Server Screen .................................................................................................................. 70 8.4.3 USB Media Sharing Screen ................................................................................................... 72 8.5 Access Your Shared Files From a Computer ............................................................................... 74 8.5.1 Using Windows Explorer ........................................................................................................ 74 8.5.2 Using FTP Program ................................................................................................................. 75 Chapter 9 WAN ....................................................................................................................................................76 9.1 Overview ......................................................................................................................................... 76 9.2 What You Can Do .......................................................................................................................... 76 9.3 What You Need To Know .............................................................................................................. 77 9.3.1 Configuring Your Internet Connection ............................................................................... 77 9.4 Internet Connection Screen .......................................................................................................... 78 9.4.1 IPoE Encapsulation ................................................................................................................ 78 9.4.2 PPPoE Encapsulation ............................................................................................................ 81 9.4.3 PPTP Encapsulation ............................................................................................................... 84 9.5 NAT & Port Forwarding Screen ...................................................................................................... 86 9.5.1 Add Port Forwarding Rule Screen ....................................................................................... 88 9.6 Passthrough Screen ........................................................................................................................ 90 9.7 Port Trigger Screen ......................................................................................................................... 91 9.7.1 Add Port Trigger Rule Screen ............................................................................................... 93 9.8 Dynamic DNS Screen ..................................................................................................................... 94 9.9 UPnP Screen .................................................................................................................................... 95 9.9.1 Turning On UPnP in Windows 7 Example ............................................................................ 96 9.9.2 Turning on UPnP in Windows 10 Example .......................................................................... 98 Chapter 10 Wireless LAN .....................................................................................................................................101 10.1 Overview ..................................................................................................................................... 101 10.1.1 What You Can Do ............................................................................................................. 101 10.1.2 What You Should Know .................................................................................................... 102 10.2 Main WiFi Screen ........................................................................................................................ 105 10.3 Guest WiFi Screen ....................................................................................................................... 107 10.4 MAC Filter Screen ...................................................................................................................... 107 10.4.1 Add MAC Address Screen ............................................................................................... 108 10.5 WPS Screen ................................................................................................................................. 109 10.6 Scheduling Screen ..................................................................................................................... 111 Chapter 11 LAN ....................................................................................................................................................112 NBG7815 Users Guide 7 Table of Contents 11.1 Overview ..................................................................................................................................... 112 11.2 What You Can Do ...................................................................................................................... 112 11.3 What You Need To Know .......................................................................................................... 112 11.4 LAN IP Screen .............................................................................................................................. 113 11.4.1 Static DHCP Table-Add/Edit Rule Screen ....................................................................... 116 11.4.2 Configure LAN Screen in Bridge Mode .......................................................................... 118 11.5 IPv6 LAN Screen .......................................................................................................................... 119 Chapter 12 Security .............................................................................................................................................122 12.1 Overview ................................................................................................................................... 122 12.1.1 What You Can Do ............................................................................................................. 122 12.1.2 What You Need To Know ................................................................................................. 122 12.2 IPv4 Firewall Screen ................................................................................................................... 123 12.2.1 IPv4 Firewall-Add Rule Screen ......................................................................................... 125 12.3 IPv6 Firewall Screen .................................................................................................................... 126 12.3.1 IPv6 Firewall-Add Rule Screen ......................................................................................... 127 Chapter 13 System...............................................................................................................................................129 13.1 Overview ..................................................................................................................................... 129 13.2 What You Can Do ...................................................................................................................... 129 13.3 Status Screen ............................................................................................................................... 129 13.4 General Setting Screen .............................................................................................................. 132 13.5 Remote Access Screen .............................................................................................................. 134 13.6 Maintenance Screen ................................................................................................................. 135 13.7 Operating Mode Screen ........................................................................................................... 136 13.8 Logs Screen ................................................................................................................................. 138 Chapter 14 Troubleshooting................................................................................................................................140 14.1 Overview ..................................................................................................................................... 140 14.2 Power, Hardware Connections, and LEDs ............................................................................... 140 14.3 NBG7815 Access and Login ...................................................................................................... 141 14.4 Internet Access ........................................................................................................................... 142 14.5 Resetting the NBG7815 to Its Factory Defaults ........................................................................ 143 14.6 Wireless Connections ................................................................................................................. 143 14.7 USB Device Problems ................................................................................................................. 145 Appendix A Customer Support ..................................................................................................... 146 Appendix B Setting Up Your Computers IP Address................................................................... 152 Appendix C Common Services ..................................................................................................... 172 NBG7815 Users Guide 8 Table of Contents Appendix D Legal Information ...................................................................................................... 175 Index .................................................................................................................................................181 NBG7815 Users Guide 9 PART I Users Guide 10 C H A P T E R 1 Introduction 1.1 Overview This chapter introduces the main features and applications of the NBG7815, also called ARMOR G1. The NBG7815 extends the range of your existing wired network without additional wiring, providing easy network access to mobile users. You can set up a wireless network with other IEEE 802.11a/b/g/n/ac compatible devices. The NBG7815 is able to function both 2.4GHz and 5GHz networks at the same time. A range of services such as a firewall and content filtering are also available for secure Internet computing. There is an USB port on the side panel of your NBG7815. You can connect an USB memory stick, an USB hard drive, or an USB device for file sharing. The NBG7815 automatically detects the USB device. 1.2 Applications Your can have the following networks with the NBG7815:

Wired. You can connect network devices via the Ethernet ports of the NBG7815 so that they can communicate with each other and access the Internet. Figure 1 Internet Access Application: Wired Connection Wireless. Wireless clients can connect to the NBG7815 to access network resources. You can use WPS

(Wi-Fi Protected Setup) to create an instant network connection with another WPS-compatible device. NBG7815 Users Guide 11 Chapter 1 Introduction Figure 2 Internet Access Application: Wireless Connection WAN. Connect to a broadband modem/router for Internet access. Figure 3 Internet Access Application: Ethernet WAN 1.3 Ways to Manage the NBG7815 Use the following method to manage the NBG7815. Web Configurator. This is recommended for everyday management of the NBG7815 using a

(supported) web browser. app, scan the QR code on the QSG. Zyxel ARMOR. This is the app you can use to manage the NBG7815 on your cellphone. To install the 1.4 Good Habits for Managing the NBG7815 Do the following things regularly to make the NBG7815 more secure and to manage the NBG7815 more effectively. Change the password. Use a password thats not easy to guess and that consists of different types of characters, such as numbers and letters. Write down the password and put it in a safe place. Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the NBG7815 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG7815. You could simply restore your last configuration. NBG7815 Users Guide 12 Chapter 1 Introduction 1.5 Resetting the NBG7815 If you forget your password or IP address, or you cannot access the Web Configurator, insert a thin object into the Reset hole on the side of the NBG7815 to reload the factory-default configuration file. This means that you will lose all settings that you had previously saved. 1.5.1 How to Use the RESET Button 1 Make sure the power LED is on. Locate the Reset hole. 2 3 1.6 The WPS Button Insert a thin object into the Reset hole for longer than eight seconds to reset the NBG7815 back to its factory-default configuration. Your NBG7815 supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the Wi-Fi Alliance. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each devices documentation to make sure). Depending on the devices you have, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. You can use the WPS button in the Web Configurator of the NBG7815 to activate WPS in order to quickly set up a wireless network with strong security. 1 Make sure the power LED is on (not blinking). 2 Open the Web Configurator. 3 Click Settings > WiFi > WPS, and the press the WPS button. 4 Press the WPS button on another WPS-enabled device within range of the NBG7815. Note: You must activate WPS in the NBG7815 and in another wireless device within two minutes of each other. For more information on using WPS, see Section 7.2 on page 43. NBG7815 Users Guide 13 Chapter 1 Introduction 1.7 LEDs Figure 4 Front Panel The following table describes the front panel LED. Table 1 Front Panel LED COLOR STATUS DESCRIPTION White On The NBG7815 is receiving power. Blinking The NBG7815 is booting. Dark Blue On Blue tooth is ready. Blinking Blue tooth configuration is in process. Amber Blinking (Slow) The NBG7815 is upgrading firmware. Blinking (Fast) The NBG7815 is resetting. Blinking Blinking Purple Purple and Dark Blue Red On WPS configuration is in process. The NBG7815 is receiving power and ready for use. The NBG7815 detects and error while self-testing, or there is a device malfunction. NBG7815 Users Guide 14 Chapter 1 Introduction Figure 5 Rear Panel 1.8 Desk Mounting Place the side of the NBG7815 with rubber feet carefully on the desk. 1.9 Wall Mounting You may need screw anchors if mounting on a concrete or brick wall. Table 2 Wall Mounting Information Distance between holes 10.50 cm M4 Screws Screw anchors (optional) Two Two Figure 6 Screw Specifications 1 Select a position free of obstructions on a wall strong enough to hold the weight of the device. 2 Mark two holes on the wall at the appropriate distance apart for the screws. Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws. 3 If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the full depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way in - leave a small gap of about 0.5 cm. If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the screws all NBG7815 Users Guide 15 Chapter 1 Introduction the way in - leave a gap of about 0.5 cm. 5 Remove the rubber feet. cables. screws. Figure 7 Wall Mounting- Rubber Feet 4 Make sure the screws are fastened well enough to hold the weight of the NBG7815 with the connection 6 Align the holes on the back of the NBG7815 with the screws on the wall. Hang the NBG7815 on the NBG7815 Users Guide 16 C H A P T E R 2 Wizard 2.1 Overview In this chapter, you will learn how to:

Go through NBG7815 (ARMOR G1) wizard steps Configure basic settings for your WiFi Create a myZyxel Cloud account. 2.2 Accessing the Wizard Launch your web browser and type "http://zyxelwifi.com" or "http://zyxelwifi.net" as the website address. Note: The wizard appears automatically when the NBG7815 is accessed for the first time or when you reset the NBG7815 to its default factory settings. 1 Your NBG7815 will check the status of your Internet connection the first time you log in. NBG7815 Users Guide 17 Chapter 2 Wizard 2 The following screen shows if you are connected to the Internet. Click Next to go to the next step in the wizard. The following screen shows if you are not connected to the Internet. Note: You may need to turn off your network firewall if access to the Internet from the NBG7815 is blocked. You need to connect to the Internet to access your NBG7815. See Section 14.4 on page 142 if you cannot connect to the Internet. NBG7815 Users Guide 18 3 Enter 1-128 single-byte printable ASCII characters but not "''<>^$& as your 2.4G/5G WiFi Name and WiFi Password. Select the check box Keep 2.4G & 5G name the same if you want to use the same name for your 2.4G and 5G WiFi. Chapter 2 Wizard NBG7815 Users Guide 19 4 Wait a moment for your WiFi settings to be applied to your NBG7815. Chapter 2 Wizard NBG7815 Users Guide 20 Chapter 2 Wizard 5 The following screen shows if you have set up your WiFi name and password successfully. Click Next to go to the next step in the wizard. 6 Wait a moment for the NBG7815 to check if your device is updated with the latest firmware. If not, your NBG7815 will automatically update the firmware. NBG7815 Users Guide 21 Chapter 2 Wizard 7 You need to create a myZyxel Cloud account to log into the NBG7815. Click Next to go to the next step in the wizard. 8 A pop up message shows. Click OK to be redirected to the registration website of myZyxel Cloud. NBG7815 Users Guide 22 9 Enter your Email and Password if you already have a myZyxel Cloud account. If not, you can create one by clicking Sign Up. You can also click the Facbook or Google icon to create an account with your Facebook or Google account. Chapter 2 Wizard NBG7815 Users Guide 23 Chapter 2 Wizard NBG7815 Users Guide 24 10 The legal page shows after you log in. Select the check box I understand and agree the Zyxel Cloud Terms of Use and then click Confirm. Chapter 2 Wizard 11 The following page asks for your authorization to use your account. Click Authorize to finish registering your myZyxel Cloud account. You will be directed back to the NBG7815 web configurator. 12 Wait a moment for your NBG7815 to link to your myZyxel Cloud account. NBG7815 Users Guide 25 13 You can create a local password to access the NBG7815 directly. You can choose to log in with your myZyxel Cloud account or your local password the next time you log in. Note: You can change your local password in System > General Settings. See Section 13.4 on page 132 for more information. Chapter 2 Wizard NBG7815 Users Guide 26 C H A P T E R 3 The Web Configurator 3.1 Overview This chapter describes how to access the NBG7815 Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy system setup and management via Internet browser. Use a browser that supports HTML5, such Mozilla Firefox, or Google Chrome. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow:

Web browser pop-up windows from your device. JavaScript (enabled by default). Java permissions (enabled by default). 3.2 Accessing the Web Configurator 1 Make sure your NBG7815 hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. 2 3 If the NBG7815 is in Standard Mode (the default mode), enter "http://zyxelwifi.com" in the browsers address bar. If the NBG7815 is in Bridge Mode, type http:// (DHCP-assigned IP) in the browsers address bar. 4 On the displayed login screen, log in using your myZyxelCloud username and password or the local password. Note: If this is the first time you are accessing the web configurator or if the device has been reset, you must complete the setup wizard, see Chapter 2 on page 17. Note: For setting and changing the local password, see Section 13.4 on page 132. NBG7815 Users Guide 27 5 The NBG7815 Overview screen displays allowing you to monitor your NBG7815. It shows if the NBG7815 is online, and how many wireless clients are currently connected to your device, as well as their upstream/

downstream data rates. Chapter 3 The Web Configurator NBG7815 Users Guide 28 Chapter 3 The Web Configurator Figure 8 Overview (Standard Mode) NBG7815 Users Guide 29 Chapter 3 The Web Configurator Figure 9 Overview (Bridge Mode) 3.3 Navigation Panel Use the submenus on the navigation panel to configure NBG7815 features. Your navigation panel varies depending on the mode of your NBG7815. See Chapter 5 on page 37 for more information on Standard Mode. See Chapter 6 on page 40 for more information on Bridge Mode. NBG7815 Users Guide 30 Chapter 3 The Web Configurator 3.3.1 Standard Mode Navigation Panel Figure 10 Navigation Panel (Standard Mode) The following table describes the submenus. Table 3 Settings > System > Status (Standard Mode) LINK Overview TAB FUNCTION Use this screen to:

View read-only information about your NBG7815 Configure WiFi settings Change the brightness of your devices LED Diagnose Use this screen to check the speed of the connection between your NBG7815 and the broadband modem/router. Use this screen to view a summary of previously run speed tests. Advanced Speed Test Speed Test History Parental Control Device Use this screen to:

View devices information Add and configure parental control rules or schedules Profile Use this screen to enable or configure existing parental control rules. OpenVPN Server OpenVPN Use this screen to create and configure an OpenVPN server account. Server OpenVPN Account Use this screen to:

View basic information about NBG7815 OpenVPN server View basic information about clients that are connected to the NBG7815 OpenVPN server NBG7815 Users Guide 31 FTP USB Media Sharing NAT & Port Forwarding Chapter 3 The Web Configurator Table 3 Settings > System > Status (Standard Mode) (continued) LINK TAB FUNCTION OpenVPN Client Use this screen to:

USB Application SAMBA Use this screen to:

View basic information about OpenVPN Server accounts that you are connected to Add an OpenVPN Server Account you want your NBG7815 to connect to when the NBG7815 functions as an OpenVPN client. Set up file-sharing via the NBG7815 using Windows Explorer or the workgroup name Configure the workgroup name and create file-sharing user accounts Use this screen to set up file sharing via the NBG7815 using FTP and create user accounts. Use this screen to configure settings for media sharing. Internet Internet Connection This screen allows you to configure ISP parameters, WAN IP address assignment, DNS servers and the WAN MAC address. Use this screen to enable NAT. Use this screen to configure servers behind the NBG7815 and forward incoming service requests to the servers on your local network. Passthrough Use this screen to change your NBG7815s port triggering settings. Port Trigger Use this screen to configure ALGs (Application Layer Gateway) and VPN pass-

through settings. Dynamic DNS Use this screen to configure dynamic DNS. UPnP Use this screen to enable UPnP on the NBG7815. WiFi Main WiFi Use this screen to enable the wireless LAN and configure wireless LAN and wireless security settings. Guest WiFi Use this screen to configure multiple BSSs on the NBG7815. MAC Filter Use the MAC filter screen to configure the NBG7815 to block access to devices or block the devices from accessing the NBG7815. WPS Use this screen to configure WPS. Scheduling Use this screen to schedule the times the Wireless LAN is enabled. LAN LAN IP Use this screen to configure the NBG7815s LAN IP address and subnet mask. Use this screen to configure the IPv6 address for the NBG7815 on the LAN. Use this screen to enable the NBG7815s DHCP server. IPv6 LAN Use this screen to configure the IPv6 address for your NBG7815 on the LAN. Firewall IPv4 Firewall Use this screen to configure IPv4 firewall rules. IPv6 Firewall Use this screen to configure IPv6 firewall rules. NBG7815 Users Guide 32 Chapter 3 The Web Configurator Table 3 Settings > System > Status (Standard Mode) (continued) LINK System FUNCTION TAB Status General Setting Remote Access Operating Mode Use this screen to view the basic information of the NBG7815 Use this screen to change password or to set the timeout period of the management session. Use this screen to configure the interface/s from which the NBG7815 can be managed remotely and specify a secure client that can manage the NBG7815. Maintenance Use this screen to upload firmware, reboot the NBG7815 without turning the power off or reset the NBG7815 to factory default. Use this screen to select whether your device acts as a router, or a bridge. Logs Use this screen to view the list of activities recorded by your NBG7815. 3.3.2 Bridge Mode Navigation Panel Figure 11 Navigation Panel (Bridge Mode) The following table describes the submenus. Table 4 Settings > System > Status (Bridge Mode) LINK Overview TAB FUNCTION Use this screen to:

View read-only information about your NBG7815 Configure WiFi settings Change the brightness of your devices LED Diagnose Use this screen to check the speed of the connection between your NBG7815 and the broadband modem/router. Use this screen to view a summary of previously run speed tests. Advanced Speed Test Speed Test History NBG7815 Users Guide 33 Chapter 3 The Web Configurator Table 4 Settings > System > Status (Bridge Mode) (continued) LINK TAB FUNCTION USB Application SAMBA Use this screen Set up file-sharing via the NBG7815 using Windows Explorer or the workgroup name Configure the workgroup name and create file-sharing user accounts Use this screen to set up file sharing via the NBG7815 using FTP and create user accounts. Use this screen to configure settings for media sharing. FTP USB Media Sharing Main WiFi MAC Filter General Setting Remote Access Operating Mode WiFi Use this screen to enable the wireless LAN and configure wireless LAN and wireless security settings. Use the MAC filter screen to configure the NBG7815 to block access to devices or block the devices from accessing the NBG7815. WPS Use this screen to configure WPS. Scheduling Use this screen to schedule the times the Wireless LAN is enabled. LAN LAN IP Use this screen to configure the NBG7815s LAN IP address and subnet mask. System Status Use this screen to view the basic information of the NBG7815 Use this screen to configure the IPv6 address for the NBG7815 on the LAN. Use this screen to enable the NBG7815s DHCP server. Use this screen to change password or to set the timeout period of the management session. Use this screen to enable remote assistant. Maintenance Use this screen to upload firmware, reboot the NBG7815 without turning the power off or reset the NBG7815 to factory default. Use this screen to select whether your device acts as a router, or a bridge. Logs Use this screen to view the list of activities recorded by your NBG7815. NBG7815 Users Guide 34 Chapter 4 NBG7815 Modes C H A P T E R 4 NBG7815 Modes 4.1 Overview 4.2 Modes This chapter introduces the different operating modes available on your NBG7815. Or simply how the NBG7815 is being used in the network. This refers to the operating mode of the NBG7815, which can act in:

Standard Mode: This is the default device mode of the NBG7815. Use this mode to connect the local network to another network, like the Internet. Go to Section 5.3 on page 37 to view the Status screen in this mode. Figure 12 Standard Mode Example Bridge Mode: Use this mode if you want to extend your network by allowing network devices to connect to the NBG7815 wirelessly. Go to Section 6.4 on page 42 to view the Status screen in this mode. NBG7815 Users Guide 35 Chapter 4 NBG7815 Modes Figure 13 Bridge Mode Example For more information on changing the mode of your NBG7815, refer to Section 13.7 on page 136. Note: Choose your device mode carefully to avoid having to change it later. When changing to another mode, the IP address of the NBG7815 changes. The running applications and services of the network devices connected to the NBG7815 may be interrupted. NBG7815 Users Guide 36 Chapter 5 Standard Mode C H A P T E R 5 Standard Mode 5.1 Overview The NBG7815 is set to standard (router) mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the NBG7815 connects the local network (LAN1 ~ LAN4) to the Internet. Figure 14 NBG7815 in Standard Mode 5.2 What You Can Do Use the Status screen to view read-only information about your NBG7815 (Section 5.3 on page 37). 5.3 Standard Mode Status Screen Click Settings > System > Status to open the status screen. NBG7815 Users Guide 37 Chapter 5 Standard Mode Figure 15 Settings > System > Status (Standard Mode) The following table describes the labels shown in the Status screen. Table 5 Settings > System > Status (Standard Mode) LABEL System DESCRIPTION Model Name This is the model name of your device. Firmware Version This is the firmware version. System Operation Mode This is the device mode to which the NBG7815 is set, see Section 13.7 on page 136 for more information. Enable IPv4 Firewall This shows if the IPv4 firewall is enabled on the NBG7815. This shows if the IPv6 firewall is enabled on the NB6818. Enable IPv6 Simple Security WAN Information System Uptime This is the total time the NBG7815 has been on. MAC Address This shows the WAN Ethernet adapter MAC Address of your device. IP Address This shows the WAN ports IP address. NBG7815 Users Guide 38 Chapter 5 Table 5 Settings > System > Status (Standard Mode) (continued) LABEL DESCRIPTION IP Subnet Mask This shows the WAN ports subnet mask. Gateway IPv6 Address LAN Information This shows the WAN ports gateway IP address. This shows the current IPv6 address of the NBG7815. MAC Address This shows the LAN Ethernet adapter MAC Address of your device. IP Address This shows the LAN ports IP address. IP Subnet Mask This shows the LAN ports subnet mask. DHCP Server IPv6 Address This shows the LAN ports DHCP role - Enable or Disable. This shows the current IPv6 address of the NBG7815 in the LAN. NBG7815 Users Guide 39 Chapter 6 Bridge Mode C H A P T E R 6 Bridge Mode 6.1 Overview Use your NBG7815 as a bridge if you already have a router or gateway on your network. In this mode your NBG7815 bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example. Figure 16 NBG7815 in Bridge Mode Many screens that are available in Standard Mode are not available in Bridge Mode, such as port forwarding and firewall. See Section 3.3 on page 30 for more information. 6.2 What You Can Do Set up a network with the NBG7815 as a bridge (Section 6.3 on page 40). Use the Status screen to view read-only information about your NBG7815 (Section 6.4 on page 42). 6.3 Setting your NBG7815 to Bridge Mode 1 Log into the Web Configurator if you havent already. See the Quick start Guide for instructions on how to do this. NBG7815 Users Guide 40 Chapter 6 Bridge Mode 2 To use your NBG7815 as a bridge, go to Settings > System > Operating Mode and select Bridge Mode. Figure 17 Changing to Bridge mode Note: You have to log in to the Web Configurator again when you change modes. As soon as you do, your NBG7815 is already in Bridge mode. 3 When you select Bridge Mode, the following pop-up message window appears. Figure 18 Pop up for Bridge mode Click OK. Then click Apply. The Web Configurator refreshes once the change to Bridge mode is successful. 6.3.1 Accessing the Web Configurator in Bridge Mode Log in to the Web Configurator in Bridge mode, do the following:

1 Connect your computer to the LAN port of the NBG7815. 2 The default IP address of the NBG7815 in bridge mode is 192.168.123.2. In this case, your computer must have an IP address in the range between 192.168.123.3 and 192.168.123.254. 3 Click Start > Run on your computer in Windows. Type cmd in the dialog box. Enter ipconfig to show your computers IP address. If your computers IP address is not in the correct range then see Appendix B on page 152 for information on changing your computers IP address. 4 After youve set your computers IP address, open a web browser such as Internet Explorer and type 192.168.123.2 as the web address in your web browser. NBG7815 Users Guide 41 Chapter 6 Bridge Mode 6.4 Bridge Mode Status Screen Click Settings > System > Status to open the status screen. Figure 19 Settings > System > Status (Bridge Mode) The following table describes the labels shown in the Status screen. Table 6 Settings > System > Status (Bridge Mode) DESCRIPTION LABEL System Model Name This is the model name of your device. Firmware Version This is the firmware version. System Operation Mode This is the device mode to which the NBG7815 is set, see Section 13.7 on page 136 for more information. Enable IPv4 Firewall This shows if the IPv4 firewall is enabled on the NBG7815. Enable IPv6 Simple Security This shows if the IPv6 firewall is enabled on the NBG7815. This is the total time the NBG7815 has been on. System Uptime LAN Information MAC Address IP Address DHCP Server IPv6 Address IP Subnet Mask This shows the LAN ports subnet mask. This shows the LAN Ethernet adapter MAC Address of your device. This shows the LAN ports IP address. This shows the LAN ports DHCP role - Enable or Disable. This shows the current IPv6 address of the NBG7815 in the LAN. NBG7815 Users Guide 42 C H A P T E R 7 Tutorials 7.1 Overview This chapter provides tutorials for setting up your NBG7815. Run a Speed Test Configure the NBG7815s WiFi Networks Enable or Disable a WiFi Network Add Clients to a Profile Set a Profiles WiFi Schedule Pause or Resume Internet Access on a Profile Change Your NBG7815 Operating Mode Configure a Port Forwarding Rule 7.2 Run a Speed Test With the NBG7815 Web Configurator, you can check the speed of the connection between your NBG7815 and the broadband modem/router. 1 Click the Navigation Panel icon on the top-left corner (

Speed Test screen. Use this screen to view all the available connections in your NBG7815 System.

), and click Diagnose to open the Advanced 2 Click TEST to perform a speed test. This shows data rates for both upstream and downstream traffic. Click TEST AGAIN to update the information in this screen. NBG7815 Users Guide 43 Chapter 7 Tutorials 3 Click the Speed Test History tab to view a summary of the tests made. Click Clear to delete all records. 7.3 Configure the NBG7815s WiFi Networks In the NBG7815 you can configure independent wireless networks with different privileges. Clients can associate only with the network for which they have security settings (SSID and password). The following table describes the different NBG7815s profile networks and their privileges. Table 7 WiFi Network Privileges WIFI NETWORK INTERNET ACCESS 2.4G / 5G WIFI NETWORK ACCESS TO WEB CONFIGURATOR ACCESS TO WIRED LAN Main WiFi Guest WiFi Yes Yes 2.4G and 5G 2.4G and 5G Yes No Yes No Note: A user can only configure the WiFi networks security settings if they are connected to the Main WiFi network. 1 Click the Navigation Panel icon on the top-left corner (

), and click Settings to open the WiFi screen. Use each tab in the WiFi menu to configure each of the WiFi networks security settings. NBG7815 Users Guide 44 Chapter 7 Tutorials NBG7815 Users Guide 45 2 Select Enable to activate a WiFi Network. Enter the 2.4G/5G Name and Password clients use to connect to the WiFi network. You can configure two different WiFi Names for the Main WiFi 2.4G and 5G networks. Select Keep 2.4G & 5G name the same, so they both use the same WiFi Name. Click Apply to save your changes. Chapter 7 Tutorials NBG7815 Users Guide 46 7.4 Enable or Disable a WiFi Network After the NBG7815 is set up, you can use separate WiFi networks for your clients. The WiFi settings will be applied to all clients in the same network. Note: This is not available if you are using bridge mode. 1 Click the Navigation Panel icon on the top-left corner (

), and click Settings to open the WiFi screen. Chapter 7 Tutorials 2 Enable guest WiFi and enter the WiFi Name (SSID) and WiFi Password. Click Apply to save your changes. 7.5 Add Clients to a Profile Profiling clients allows you to easily block/allow Internet access or set a schedule for all client devices in the same profile. NBG7815 Users Guide 47 Chapter 7 Tutorials 1 Click the Navigation Panel icon on the top-left corner (

), and click Parental Control to open the Device screen. Use the Device screen to view all the clients in your NBG7815. 2 Click the icon under Action (

) to view the user information. In Device Detail, select a predefined profile and click Apply. 7.6 Set a Profiles WiFi Schedule When you create or edit a profile, you can schedule the NBG7815 to automatically disable or enable WiFi access during a certain period of time for clients in that profile. Note: This is not available if you are using bridge mode. 1 Click the Navigation Panel icon on the top-left corner (

).Select Parental Control, and click the Profile tab. Use the Profile screen to display the profiles created in the NBG7815. NBG7815 Users Guide 48 2 Click Enable to activate this profiles Internet schedule. Click the Edit icon (

) to modify a profiles Internet schedule. 3 Click the start time cell and drag down to the end time to set up your schedule. Chapter 7 Tutorials NBG7815 Users Guide 49 Chapter 7 Tutorials NBG7815 Users Guide 50 7.7 Pause or Resume Internet Access on a Profile You may want to manually block a profile of client devices from accessing the Internet immediately and resume it later. Note: This is not available if you are using bridge mode. 1 Click the Navigation Panel icon on the top-left corner (

).Select Parental Control, and click the Profile tab. Use the Profile screen to display the profiles created in the NBG7815. 2 Click a profiles Resume button to resume network access at once, or click the Quick Block button to pause Internet access for that specific profile. 7.8 Turn on or off the NBG7815s LED (Light) 1 In the Overview screen, find the LED field and drag the button of the slider to the left. Chapter 7 Tutorials NBG7815 Users Guide 51 Chapter 7 Tutorials NBG7815 Users Guide 52 7.9 Change Your NBG7815 Operating Mode The operating mode refers to how the NBG7815 is being used in the network. The NBG7815 has two operating modes:

Standard: This is the NBG7815s default mode. In this mode, the NBG7815 routes traffic between a local network and another network such as the Internet. Bridge: Use this mode so the NBG7815 bridges traffic between clients on the same network. Note: Features such as parental Control, UPnP, Port Forwarding are not available in Bridge mode. 1 Click the Navigation Panel icon on the top-left corner (

).From the Settings drop-down list, click System, then click the Operating Mode tab. Select the operating mode and select APPLY to save your changes. Changing the NBG7815s operating mode may take up to two minutes. 7.10 Configure a Port Forwarding Rule If you want to forward incoming packets to a specific or appropriate IP address in the private network using ports, set a port forwarding rule. Note: This is not available if you are using bridge mode. 1 Click the Navigation Panel icon on the top-left corner (

). From the Settings drop-down list, select Internet, and click the NAT & Port Forwarding tab. Chapter 7 Tutorials NBG7815 Users Guide 53 Chapter 7 Tutorials NBG7815 Users Guide 54 2 Select Enable in the Enable Port Forwarding field. 3 Click Add Rule to create a port forwarding rule. Add a service name, a port number or a range of ports to define the service to be forwarded, specify the transport layer protocol used for the service, and the IP address of a device on your local network that will receive the packets from the port(s). Chapter 7 Tutorials NBG7815 Users Guide 55 PART II Technical Reference 56 C H A P T E R 8 Applications 8.1 Overview 8.1.1 What You Can Do This chapter shows you how to configure parental control, OpenVPN, USB media sharing and file sharing. Use the Parental Control screens to enable parental control, configure the parental control rules and schedules, and send e-mail notifications. (Section 8.2 on page 58). Use the OpenVPN Server screen to create or configure your NBG7815 when it functions as an OpenVPN Server (Section 8.3.1 on page 62). Use the OpenVPN Client screen to add an OpenVPN Server Account you want your NBG7815 to connect to (Section 8.3.3 on page 66). Use the USB Application screen to allow file sharing or to set up your NBG7815 to act as a media server

(Section 8.4 on page 68). 8.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. DLNA clients play files stored on DLNA servers. The NBG7815 can function as a DLNA-compliant media server and stream files to DLNA-

compliant media clients without any configuration. This is the name given to a set of computers that are connected on a network and share resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network. DLNA Workgroup name File Systems A file system is a way of storing and organizing files on your hard drive and storage device. Often different operating systems such as Windows or Linux have different file systems. The file-sharing feature on your NBG7815 supports New Technology File System (NTFS), File Allocation Table (FAT) and FAT32 file systems. The NBG7815 uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the NBG7815. CIFS NBG7815 Users Guide 57 Chapter 8 Applications protocol is supported on Microsoft Windows, Linux Samba and other operating systems (refer to your systems specifications for CIFS compatibility). SMB is a client-server protocol used by Microsoft Windows systems for sharing files, printers, and so on. Samba is a free SMB server that runs on most Unix and Unix-like systems. It provides an implementation of an SMB client and server for use with non-Microsoft operating systems. File Transfer Protocol This is a method of transferring data from one computer to another over a network such as the Internet. Samba VPN A virtual private network (VPN) provides secure communications between sites without the expense of leased site-to-site lines. A secure VPN is a combination of tunneling, encryption, authentication, access control and auditing. It is used to transport traffic over the Internet or any insecure network that uses TCP/IP for communication. 8.1.3 Before You Begin Make sure the NBG7815 is connected to your network and turned on. 1 Connect the USB device to one of the NBG7815s USB ports. 2 The NBG7815 detects the USB device and makes its contents available for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Note: If your USB device cannot be detected by the NBG7815, see the troubleshooting for suggestions. 8.2 Parental Control Parental Control allows you to block specific URLs. You can also define time periods and days during which the NBG7815 performs parental control on a specific user. Note: This is not available if you are using bridge mode. 8.2.1 Device Screen Use this screen to enable parental control, view the parental control rules and schedules. Click Parental Control > Device to show the following screen. NBG7815 Users Guide 58 Chapter 8 Applications Figure 20 Parental Control > Device The following table describes the fields in this screen. Table 8 Parental Control DESCRIPTION LABEL Sort By Connect to No. Type Network Name MAC Choose to sort the order of your devices by Type or Name. Choose whether you want to show devices that are connected to Main Network or devices that are connected Guest Network. Choose All if you want to show all devices. This shows the index number of the rule. The shows the type of device to which this rule applies. This shows the type of network the devices are connected to. This shows the name of the user to which this rule applies. This field shows the MAC address of the device with the name in the Name field. Every Ethernet device has a unique MAC (Media Access Control) address which uniquely identifies a device. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. IP Address Profile This field displays the IP address relative to the No. field listed above. This shows the name of the rule that is applied to the device. Action Click the Action icon (

) to configure a rule for the device. If no rule exists, unassigned is showed in this field. 8.2.1.1 Edit Device Detail Screen Use this screen to configure basic settings for the device. Click the Action icon (

icon (

) to show the following screen.

), and then the Edit NBG7815 Users Guide 59 Chapter 8 Applications Figure 21 Edit Device Detail Table 9 Edit Device Detail DESCRIPTION Device Name Enter a name for the device to which this rule applies. Choose the type of device to which this rule applies. Click Apply to save your settings back to the NBG7815. Click Cancel to exist the screen without saving. LABEL Type Apply Cancel 8.2.1.2 Add New Profile Screen Use this screen to configure a restricted access schedule. Click the Action icon (

Profile to show the following screen.

), then Add New NBG7815 Users Guide 60 Chapter 8 Applications Figure 22 Add New Profile The following table describes the fields in this screen. Table 10 Add New Profile LABEL Profile Name Select All DESCRIPTION Enter a name for this rule. Click Select All then deselect the blocks you dont want or click on blocks separately to specify days and times to turn the Wireless LAN on or off. Deselect All Click Deselect All to remove all the wireless LAN scheduling. Apply Back Click Apply to save your changes back to the NBG7815. Click Back to exist the screen without saving. NBG7815 Users Guide 61 Chapter 8 Applications 8.2.1.3 Profile Screen Use this screen to edit or delete an existing rule. Click Parental Control > Profile to show the following screen. Figure 23 Parental Control > Profile The following table describes the fields in this screen. Table 11 Parental Control > Profile LABEL Enable/Disable DESCRIPTION Set the switch to the right (

switch to the left (

). Quick Block Click Quick Block to activate the profile. Edit Delete Click on the Edit icon to edit an existing rule. Click on the Delete icon to delete an existing rule.

) to enable an existing rule. Otherwise, set the 8.3 OpenVPN Server/Client OpenVPN is a VPN protocol which is open source and free of charge. It can be used to create a virtual private network or to interconnect local networks. It uses OpenSSL encryption library and SSLv3/TLSv1 protocols. This provides high security and anonymity for all transmitted data. It also provides faster connection speeds than other VPN protocols. Note: We do not recommended activating OpenVPN Server and OpenVPN Client at the same time on your NBG7815. 8.3.1 OpenVPN Server Screen Use this screen to create an OpenVPN server account. Click the Navigation Panel icon on the top-left corner (

).Select OpenVPN Server, and click the OpenVPN Server tab. NBG7815 Users Guide 62 Chapter 8 Applications Figure 24 Example of NBG7815 Acting As VPN Server Note: You have to enable DDNS in Settings > Internet > Dynamic DNS screen before you can create an OpenVPN account. See Section 9.8 on page 94 for more information on Dynamic DNS. Figure 25 OpenVPN Server The following table describes the fields in this screen. Table 12 OpenVPN Server DESCRIPTION LABEL OpenVPN Server Dynamic DNS Host Name Configuration Status Protocol This field shows the status of your Dynamic DNS. Make sure it shows Enable before you create an OpenVPN account. This field shows the Host Name of your Dynamic DNS account. Select Enable to activate your OpenVPN Server account. Select the protocol you want to apply to your OpenVPN Server account. NBG7815 Users Guide 63 Chapter 8 Applications Table 12 OpenVPN Server LABEL Server Port DESCRIPTION The default server port number is 1194. You can change it if needed. However, clients connected to this OpenVPN Server account will have to use the same port number in order to access the server account. VPN Subnet/ Netmask The fields define the network form which OpenVPN clients can connect to the NBG7815 OpenVPN server. Enter an IPv4 address and subnet mask. Advertise DNS to Clients Select Enable if you want the NBG7815 to broadcast its OpenVPN server to OpenVPN clients in its VPN network defined previously. Key Setting Click the Change Key button if you want to change the key your clients use to access to your OpenVPN Server account. You do not need to click Change Key the first time to configure this screen. Periodically changing the key is recommended, but you must export the new .opvn configuration file and send it to all OpenVPN clients so that they can they use the new key. Click Export Config to export your configuration to an .ovpn file that OpenVPN clients need to connect to the NBG7815 OpenVPN server. Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. Export Config Apply Cancel 8.3.2 OpenVPN Account Screen Use the OpenVPN Account List screen to view the basic information of the NBG7815 OpenVPN server. Use the OpenVPN Account Status screen to view the basic information of clients that are connected to the NBG7815 OpenVPN server Note: At the time of writing, up to 16 OpenVPN clients can connect to the NBG7815 OpenVPN server at the same time. Figure 26 OpenVPN Account NBG7815 Users Guide 64 Chapter 8 Applications The following table describes the fields in this screen. Table 13 OpenVPN Account LABEL DESCRIPTION OpenVPN Account List This is the rule index number. This field displays a name to identify this rule. This field displays a combination of characters and numbers clients need to connect to an account. Client Access Allowed This field displays the interface(s) through which the clients are allowed to connect to an account. Click the icons under Actions to delete or edit an existing OpenVPN account settings. Click to delete an existing OpenVPN account. Click to edit an existing OpenVPN account. No. Username Password Actions No. Public IP Private IP OpenVPN Account Status This is the number used to identify a client. This field displays the public IP of a client. This field displays the private IP of a client. Connected Time This field displays how long a client is connected. 8.3.2.1 OpenVPN Account List-Add Rule Screen Use this screen to configure your OpenVPN account settings. Figure 27 OpenVPN Account LIst-Add Rule The following table describes the fields in this screen. Table 14 OpenVPN Account List-Add Rule DESCRIPTION LABEL User Name Password Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed. Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed. Client Access Allowed Select the interface(s) through which the clients are allowed to connect to your account. NBG7815 Users Guide 65 Chapter 8 Applications Table 14 OpenVPN Account List-Add Rule DESCRIPTION LABEL Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to exist this screen without saving. 8.3.3 OpenVPN Client Screen Use the OpenVPN Server List in this screen to view the basic information of the OpenVPN Server accounts that you are connected to when the NBG7815 functions as an OpenVPN client. Figure 28 Example of NBG7815 Acting As VPN Client Note: You can only connect to one server at a time. Figure 29 OpenVPN Client The following table describes the fields in this screen. Table 15 OpenVPN Client LABEL No. Description Enable VPN on Connected IP DESCRIPTION This is the rule index number. This field displays a name to identify this rule. This field displays the interface(s) through which your NBG7815 are allowed to connect to an OpenVPN Server account. This field displays the IP address of the OpenVPN Server account your NBG7815 is connected to. NBG7815 Users Guide 66 Chapter 8 Applications Table 15 OpenVPN Client LABEL Active Actions DESCRIPTION Slide the switch to the right (

Server account.

) to activate your connection to an OpenVPN Click the icons under Actions to delete or edit an existing OpenVPN Server account settings. Click to delete an existing OpenVPN Server account. Click to edit an existing OpenVPN Server account. 8.3.3.1 OpenVPN Server List-Add Rule Screen Use this screen to add an OpenVPN Server Account that you want your NBG7815 to connect to. Figure 30 OpenVPN Server List-Add Rule The following table describes the fields in this screen. Table 16 OpenVPN Server List-Add Rule DESCRIPTION LABEL Description User Name Password Import .ovpn file Enter 1-32 single-byte printable ASCII characters, but <>^$& are not allowed. Enter the User Name of the OpenVPN Server account you want to connect to. Enter the Password of the OpenVPN Server account you want to connect to. Import an .ovpn file that you get from the OpenVPN Server that you want to connect to. Note: Do not import the .ovpn file you get from your NBG7815s OpenVPN Server. Enable VPN on Select the interface(s) that are allowed by the OpenVPN Server account you want to connect to. NBG7815 Users Guide 67 Chapter 8 Applications Table 16 OpenVPN Server List-Add Rule DESCRIPTION LABEL Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to exist this screen without saving. 8.4 USB Application 8.4.1 SAMBA Server Screen Use this screen to set up file-sharing via the NBG7815 using Windows Explorer or the workgroup name. You can also configure the workgroup name and create file-sharing user accounts. Click USB Application > SAMBA to show the following screen. Figure 31 USB Application > SAMBA The following table describes the labels in this screen. Table 17 USB Application > SAMBA LABEL DESCRIPTION SAMBA Setup Enable SAMBA Select this to enable file sharing through the NBG7815 using Windows Explorer or by browsing to your work group. Name Specify the name to identify the NBG7815 in a work group. NBG7815 Users Guide 68 Chapter 8 Applications Table 17 USB Application > SAMBA (continued) LABEL Work Group DESCRIPTION You can add the NBG7815 to an existing or a new workgroup on your network. Enter the name of the workgroup which your NBG7815 automatically joins. You can set the NBG7815s workgroup name to be exactly the same as the workgroup name to which your computer belongs to. Note: The NBG7815 will not be able to join the workgroup if your local area network has restrictions set up that do not allow devices to join a workgroup. In this case, contact your network administrator. Description Enter the description of the NBG7815 in a work group. Require username and password Select Yes to need a user account for access to the connected USB stick from any computer. Otherwise, select No. User Accounts Before you can share files you need a user account. Configure the following fields to set up a file-sharing account. No. Status USB This is the index number of the user account. This field displays whether a user account is activated or not. User Name This field displays the user name that will be allowed to access the shared files. This field displays the users access rights to the USB storage device which is connected to the NBG7815s USB port. Actions Click the icons under Actions to delete or edit a port forwarding rule. Click to delete an existing trigger port settings. Click to edit an existing trigger port settings. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 8.4.1.1 Add SAMBA Account Screen Use this screen to configure settings for a SAMBA account. Click USB Application > SAMBA > Add Rule to show the following screen. NBG7815 Users Guide 69 Chapter 8 Applications Figure 32 USB Application > SAMBA > Add Rule The following table describes the labels in this screen. Table 18 USB Application > SAMBA > Add Rule DESCRIPTION Select Enable to enable the account. Select Disable to disable the account. LABEL Status User Name Password USB Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed. Enter the password used to access the shared files. You can enter up to 20 characters. Only letters and numbers are allowed. The password is case sensitive. Specify the users access rights to the USB storage device which is connected to the NBG7815s USB port. Read & Write - The user has read and write rights, meaning that the user can create and edit the files on the connected USB device. Read - The user has read rights only and can not create or edit the files on the connected USB device. None - The user cannot access the files on the USB device(s) connected to the USB port. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to exist the screen without saving. 8.4.2 FTP Server Screen Use this screen to set up file sharing via the NBG7815 using FTP and create user accounts. Click USB Application > FTP to show the following screen. NBG7815 Users Guide 70 Chapter 8 Applications Figure 33 USB Application > FTP The following table describes the labels in this screen. Table 19 Expert Mode > Applications > File Sharing > FTP LABEL DESCRIPTION Enable FTP Select this to enable the FTP server on the NBG7815 for file sharing using FTP. You may change the server port number for FTP if needed, however you must use the same port number in order to use that service for file sharing. User Accounts Before you can share files you need a user account. Configure the following fields to set up a file-sharing account. This is the index number of the user account. This field displays whether a user account is activated or not. Select the check box to enable the account. Clear the check box to disable the account. User Name This field displays the user name that will be allowed to access the shared files. This field displays the users access rights to the USB storage device which is connected to the NBG7815s USB port. This field shows the maximum bandwidth (in Kbps) allowed for incoming FTP traffic. This field shows the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic. Port No. Status USB Upstream Bandwidth Downstream Bandwidth Actions Click the icons under Actions to delete or edit a port forwarding rule. Click to delete an existing trigger port settings. Click to edit an existing trigger port settings. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 8.4.2.1 Add FTP Account Screen Use this screen to configure settings for a FTP account. Click USB Application > FTP > Add Rule to show the following screen. NBG7815 Users Guide 71 Chapter 8 Applications Figure 34 USB Application > FTP > Add Rule The following table describes the labels in this screen. Table 20 USB Application > FTP > Add Rule DESCRIPTION Select Enable to enable the account. Select Disable to disable the account. LABEL Status User Name Password USB Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed. Enter the password used to access the shared files. You can enter up to 20 characters. Only letters and numbers are allowed. The password is case sensitive. Specify the users access rights to the USB storage device which is connected to the NBG7815s USB port. Read & Write - The user has read and write rights, meaning that the user can create and edit the files on the connected USB device. Read - The user has read rights only and can not create or edit the files on the connected USB device. None - The user cannot access the files on the USB device(s) connected to the USB port. Upstream Bandwidth Enter the maximum bandwidth (in Kbps) allowed for incoming FTP traffic. Downstream Bandwidth Enter the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to exist the screen without saving. 8.4.3 USB Media Sharing Screen Use this screen to configure settings for media sharing. NBG7815 Users Guide 72 Chapter 8 Applications The media server feature lets anyone on your network play video, music, and photos from the USB storage device connected to your NBG7815 without having to copy them to another computer. The NBG7815 can function as a DLNA-compliant media server, where the NBG7815 streams files to DLNA-

compliant media clients like Windows Media Player. The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. The NBG7815 media server enables you to:

Publish all share folders for everyone to play media files in the USB storage device connected to the NBG7815. Use hardware-based media clients like the DMA-2500 to play the files. Note: Anyone on your network can play the media files in the published folders. No user name and password nor other form of security is required. Figure 35 Media Server Overview Click USB Application > USB Media Sharing to show the following screen. Figure 36 USB Application > USB Media Sharing NBG7815 Users Guide 73 Chapter 8 Applications The following table describes the labels in this screen. Table 21 USB Application > USB Media Sharing LABEL DESCRIPTION USB Media Sharing Media Server

(DLNA) Setup Choose Enable to have the NBG7815 function as a DLNA-compliant media server. Otherwise, choose Disable. Photo/Music/Video Select the media type that you want to share on the USB device connected to the NBG7815s USB port. Click this button to have the NBG7815 scan the media files on the connected USB device and do indexing of the file list again so that DLNA clients can find the new files if any. Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. Share Media Type Permission Rescan Media Control Rescan Apply Cancel 8.5 Access Your Shared Files From a Computer 8.5.1 Using Windows Explorer You can use Windows Explorer to access the file storage devices connected to the NBG7815. Note: The examples in this Users Guide show you how to use Microsofts Windows 7 to browse your shared files. Refer to your operating systems documentation for how to browse your file structure. Open Windows Explorer to access BobShare using the Windows Explorer browser. In the Windows Explorers address bar type a double backslash \\ followed by the IP address of the NBG7815 (the default IP address of the NBG7815 is 192.168.1.1) and press [ENTER]. The share folder BobShare is available. Once you access BobShare via your NBG7815, you do not have to relogin unless you restart your computer. NBG7815 Users Guide 74 Chapter 8 Applications 8.5.2 Using FTP Program Here is how to use an FTP program to access a file storage device connected to the NBG7815s USB port. Note: This example uses the FileZilla FTP program to browse your shared files. 1 In FileZilla enter the IP address of the NBG7815 (the default is 192.168.1.1), your accounts user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer 2 Once you log in the USB device displays in the mnt folder. NBG7815 Users Guide 75 C H A P T E R 9 WAN 9.1 Overview This chapter discusses the NBG7815s WAN screens. Use these screens to configure your NBG7815 for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 37 LAN and WAN Note: Features in this chapter are not available if you are using bridge mode. 9.2 What You Can Do Use the Internet Connection screen to enter your ISP information and set how the computer acquires its IP, DNS and WAN MAC addresses (Section 9.4 on page 78). Use the NAT & Port Forwarding screen to enable NAT, set a default server and change your NBG7815s port forwarding settings (Section 9.5 on page 86). Use the Passthrough screen to configure your NBG7815s ALGs and VPN pass-through settings (Section 9.6 on page 90) Use the Port Trigger screen to configure your NBG7815s trigger port settings (Section 9.7 on page 91). Use the Dynamic DNS screen to change your NBG7815s DDNS settings (Section 9.8 on page 94). Use the UPnP screen to enable UPnP on your NBG7815 (Section 9.9 on page 95). NBG7815 Users Guide 76 Chapter 9 WAN 9.3 What You Need To Know 9.3.1 Configuring Your Internet Connection Encapsulation Method The information in this section can help you configure the screens for your WAN connection, as well as enable/disable some advanced features of your NBG7815. Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP

(Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password

(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG7815, which makes it accessible from an outside network. It is used by the NBG7815 to communicate with other devices in other networks. It can be static

(fixed) or dynamically assigned by the ISP each time the NBG7815 tries to access the Internet. If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation method). DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The NBG7815 can get the DNS server addresses in the following ways. 1 2 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the NBG7815s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address. Otherwise, click Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to configuration file. It is recommended that you clone the MAC address prior to hooking up the WAN Port. NBG7815 Users Guide 77 Chapter 9 WAN Auto-IP Change When the NBG7815 gets a WAN IP address or a DNS server IP address which is in the same subnet as the LAN IP address 192.168.1.1, Auto-IP-Change allows the NBG7815 to change its LAN IP address to 10.0.0.1 automatically. If the NBG7815s original LAN IP address is 10.0.0.1 and the WAN IP address is in the same subnet, such as 10.0.0.3, the NBG7815 switches to use 192.168.1.1 as its LAN IP address. Figure 38 Auto-IP-Change Example Auto-IP-Change only works under the following conditions:

The NBG7815 must be in Standard Mode (see Section 13.7 on page 136 for more information) for Auto-

IP-Change to become active. The NBG7815 is set to receive a dynamic WAN IP address. 9.4 Internet Connection Screen Use this screen to change your NBG7815s Internet access settings. The screen varies depending on the encapsulation method you select. Click Settings > Internet > Internet Connection. 9.4.1 IPoE Encapsulation This screen displays when you select IPoE encapsulation. NBG7815 Users Guide 78 Chapter 9 WAN Figure 39 Settings > Internet > Internet Connection: IPoE (IPv4 Only) The following table describes the labels in this screen. Table 22 Network > WAN > Internet Connection: IPoE Encapsulation LABEL DESCRIPTION You must choose the IPoE option when the WAN port is used as a regular Ethernet. IPv4 / IPv6 Select IPv4 Only if you want the NBG7815 to run IPv4 only. Select Dual Stack to allow the NBG7815 to run IPv4 and IPv6 at the same time. Internet Connection Internet Service Provider Type IPv4 Address Automatic IP (DHCP) Select this option If your ISP did not assign you a fixed IP address. This is the default selection. NBG7815 Users Guide 79 Chapter 9 WAN Table 22 Network > WAN > Internet Connection: IPoE Encapsulation (continued) LABEL Static IP DESCRIPTION Select this option If the ISP assigned a fixed IP address. IP Address Enter your WAN IP address in this field if you selected Static IP Address. IP Subnet Mask Enter the Subnet Mask in this field. Gateway MTU Size DNS Server First DNS Server Second DNS Server Third DNS Server WAN MAC Address Enter a gateway IP address (if your ISP gave you one) in this field. Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives, the NBG7815 divides it into smaller fragments. Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file. Factory Default Select this option to have the WAN interface use the factory assigned default MAC address. By default, the NBG7815 uses the factory assigned MAC address to identify itself. Clone My Computers MAC Address Select this option to have the WAN interface use a different MAC address by cloning the MAC address of another device or computer. Enter the IP address of the device or computer whose MAC you are cloning. Set WAN MAC Address Select this option to have the WAN interface use a manually specified MAC address. Enter the MAC address in the fields. LAN & WAN Subnet Conflict Automatically change the LAN IP Select this option to have the NBG7815 change its LAN IP address to 10.0.0.1 or 192.168.1.1 accordingly when the NBG7815 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 77 for more information. The NAT, DHCP server and firewall functions on the NBG7815 are still available in this mode. IPv6 Address This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field. Automatic IP (DHCP) Select this option if you want to obtain an IPv6 address from a DHCPv6 server. Select DUID-LL (Default) to have the NBG7815 use DUID-LL (DUID Based on Link-layer Address) for identification when exchanging DHCPv6 messages. Select DUID-LLT to have the NBG7815 use DUID-LLT (DUID Based on Link-layer Address Plus Time) for identification when exchanging DHCPv6 messages. Static IP Address Select this option if you have a fixed IPv6 address assigned by your ISP. IPv6 Address Enter the IPv6 address assigned by your ISP. Prefix length Gateway Link Local Only IPv6 DNS Server Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address. Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to their destinations. Select this option to use the link-local address which uniquely identifies a device on the local network (the LAN). This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field. NBG7815 Users Guide 80 Chapter 9 WAN Table 22 Network > WAN > Internet Connection: IPoE Encapsulation (continued) LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the NBG7815 use the IPv6 DNS server addresses you configure manually. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IPv6 address of a computer in order to access it. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.4.2 PPPoE Encapsulation The NBG7815 supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is for a dial-up connection using PPPoE. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example Radius). One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals. Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the NBG7815 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG7815 does that part of the task. Furthermore, with NAT, all of the LANs computers will have access. NBG7815 Users Guide 81 Chapter 9 WAN This screen displays when you select PPPoE encapsulation. Figure 40 Settings > Internet > Internet Connection: PPPoE (IPv4 Only) The following table describes the labels in this screen. Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation LABEL DESCRIPTION Internet Connection Internet Service Provider Type Select PPPoE if you connect to your Internet via dial-up. IPv4 / IPv6 Select IPv4 Only if you want the NBG7815 to run IPv4 only. Select Dual Stack to allow the NBG7815 to run IPv4 and IPv6 at the same time. PPPoE Username Type the user name given to you by your ISP. NBG7815 Users Guide 82 Chapter 9 WAN Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation (continued) LABEL Password MTU Size DESCRIPTION Type the password associated with the user name above. Enter the Maximum Transmission Unit (MTU) or the largest packet size per frame that your NBG7815 can receive and process. Service Name Enter the PPPoE service name specified in the ISP account. DNS Server First DNS Server Second DNS Server Third DNS Server WAN IP Address Assignment Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Obtained from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Fixed IP Select this option and enter your WAN IP address if the ISP assigned a fixed IP address. The MAC address section allows users to configure the WAN port's MAC address by using the NBG7815s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Factory Default Select Factory default to use the factory assigned default MAC Address. Select Clone the computer's MAC address - IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning. Select this option and enter the MAC address you want to use. This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field. Select this option if you want to obtain an IPv6 address from a DHCPv6 server. Select DUID-LL (Default) to have the NBG7815 use DUID-LL (DUID Based on Link-layer Address) for identification when exchanging DHCPv6 messages. Select DUID-LLT to have the NBG7815 use DUID-LLT (DUID Based on Link-layer Address Plus Time) for identification when exchanging DHCPv6 messages. Static IP Address Select this option if you have a fixed IPv6 address assigned by your ISP. IPv6 Address Enter the IPv6 address assigned by your ISP. Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address. Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to their destinations. Select this option to use the link-local address which uniquely identifies a device on the local network (the LAN). This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field. First DNS Server Second DNS Server Third DNS Server LAN & WAN Subnet Conflict Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the NBG7815 use the IPv6 DNS server addresses you configure manually. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IPv6 address of a computer in order to access it. WAN MAC Address Clone My Computers MAC Address Set WAN MAC Address IPv6 Address Automatic IP

(DHCP) Prefix length Gateway Link Local Only IPv6 DNS Server NBG7815 Users Guide 83 Chapter 9 WAN Table 23 Network > WAN > Internet Connection: PPPoE Encapsulation (continued) LABEL DESCRIPTION Automatically change the LAN IP Select this option to have the NBG7815 change its LAN IP address to 10.0.0.1 or 192.168.1.1 accordingly when the NBG7815 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 77 for more information. The NAT, DHCP server and firewall functions on the NBG7815 are still available in this mode. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.4.3 PPTP Encapsulation This screen displays when you select PPTP encapsulation. Figure 41 Settings > Internet > Internet Connection: PPTP (IPv4 Only) NBG7815 Users Guide 84 Chapter 9 WAN The following table describes the labels in this screen. Table 24 Network > WAN > Internet Connection: PPTP Encapsulation LABEL DESCRIPTION Internet Connection Internet Service Provider Type Select PPTP if you want to connect the Internet via point to point tunneling protocol. PPTP Username Enter the user name given to you by your ISP. Password Enter the password associated with the user name above. PPTP Encryption Type Use the drop-down list box to select the type of Microsoft Point-to-Point Encryption (MPPE). Options are:

Auto - This ISP account adjusts the encryption type automatically. None - This ISP account does not use MPPE. 40 - This ISP account uses 40-bit MPPE. 128 - This ISP account uses 128-bit MMPE. MTU Size PPTP Server IP Address Enter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives, the NBG7815 divides it into smaller fragments. Enter the IP address of the PPTP server. Auto Connect Select this radio button if the PPTP server did not assign you a fixed IP address. Static IP Select this radio button if the PPTP server assigned an IP address for your Internet connection. IP Address Enter the IP address provided by the PPTP server. IP Subnet Mask Enter the IP subnet mask in this field. Enter the gateway IP address in this field. Gateway DNS Server First DNS Server Second DNS Server Third DNS Server WAN IP Address Assignment Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Obtained from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Fixed IP Select this option If the ISP assigned a fixed IP address. IP Address Enter your WAN IP address in this field if you selected IP Address. WAN MAC Address Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file. Factory Default Select this option to have the WAN interface use the factory assigned default MAC address. By default, the NBG7815 uses the factory assigned MAC address to identify itself. Clone My Computers MAC Address Select this option to have the WAN interface use a different MAC address by cloning the MAC address of another device or computer. Enter the IP address of the device or computer whose MAC you are cloning. Set WAN MAC Address Select this option to have the WAN interface use a manually specified MAC address. Enter the MAC address in the fields. LAN & WAN Subnet Conflict NBG7815 Users Guide 85 Chapter 9 WAN Table 24 Network > WAN > Internet Connection: PPTP Encapsulation (continued) LABEL DESCRIPTION Automatically change the LAN IP Select this option to have the NBG7815 change its LAN IP address to 10.0.0.1 or 192.168.1.1 accordingly when the NBG7815 gets a dynamic WAN IP address in the same subnet as the LAN IP address. See Section 9.3.1 on page 77 for more information. The NAT, DHCP server and firewall functions on the NBG7815 are still available in this mode. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.5 NAT & Port Forwarding Screen Use Port Forwarding to forward incoming service requests from the Internet to the server(s) on your local network. Port forwarding is commonly used when you want to host online gaming, P2P file sharing, or other servers on your network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. Note: TCP port 7547 is reserved for system use. Note: Many residential broadband ISP accounts do not allow you to run any server processes

(such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. NBG7815 Users Guide 86 Chapter 9 WAN Figure 42 Multiple Servers Behind NAT Example Use this screen to enable NAT, set a default server and view the summary table of your NBG7815s port forwarding settings. Click Settings > Internet > NAT & Port Forwarding to show the following screen. Figure 43 Settings > Internet > NAT & Port Forwarding NBG7815 Users Guide 87 Chapter 9 WAN The following table describes the labels in this screen. Table 25 Expert Mode > WAN > NAT > General LABEL DESCRIPTION NAT & Port Forwarding Network Address Translation (NAT) Server Setup Default Server Port Forwarding Rule Enable Port Forwarding No. Name Protocol External Port Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet). Select Enable to activate NAT. Select Disable to turn it off. You can decide whether you want to use the default server or specify a server manually. In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in the port forwarding summary table below. Select this to use the default server. Change To Server Select this and manually enter the servers IP address. Select Enable to allow port forwarding. Otherwise, select Disable. This number uniquely identifies the port forwarding rule. This field displays a name to identify this rule. This is the transport layer protocol used for the service. This is the port number used to connect to this service using the router's external IP address on the WAN. Server IP Address This field displays the internal IP address of the server. Internal Port This is the port number used to connect to this service using the server's internal IP address on the LAN. Actions Click the icons under Actions to delete or edit a port forwarding rule. Click to delete the rule. Click to edit the rule. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.5.1 Add Port Forwarding Rule Screen Use this screen to configure your NBG7815s port forwarding settings to forward incoming service requests to the servers on your local network. Click Settings > Internet > NAT & Port Forwarding> Add Rule to show the following screen. NBG7815 Users Guide 88 Chapter 9 WAN Figure 44 Add Port Forwarding Rule The following table describes the labels in this screen. Table 26 Add Port Forwarding Rule DESCRIPTION LABEL Service Name Select a pre-defined service from the drop-down list box. The pre-defined service port number(s) and protocol will be displayed in the port forwarding summary table. Otherwise, select User-Define to manually enter the port number/range and select the Protocol. Protocol Select the transport layer protocol supported by this virtual server. Choices are TCP, UDP, or TCP_UDP. If you have chosen a pre-defined service in the Service Name field, the protocol will be configured automatically. External Port This shows the port number used to connect to this service using the router's external IP address on the WAN. Device List Internal Port If you select User-Define in the Service Name field, enter the port number(s) manually. Select the internal IP address of the virtual server. This shows the port number used to connect to this service using the server's internal IP address on the LAN. If you select User-Define in the Service Name field, enter an internal port number manually or leave the field blank for port range forwarding. Apply Cancel Click Apply to save your changes. Click Cancel to exist this screen without saving. NBG7815 Users Guide 89 Chapter 9 WAN 9.6 Passthrough Screen Use this screen to change your NBG7815s ALGs and VPN pass-through settings. Click Settings > Internet

> Passthrough to show the following screen. ALG Overview Application Layer Gateway (ALG) allows the following applications to operate properly through the NBG7815s NAT. SIP - Session Initiation Protocol (SIP) - An application-layer protocol that can be used to create voice and multimedia sessions over Internet. H.323 - A teleconferencing protocol suite that provides audio, data and video conferencing. FTP - File Transfer Protocol - an Internet file transfer service. SNMP - Simple Network Management Protocol - An application-layer protocol that can be used to exchange management information between network devices. RTSP - Real Time Streaming Protocol - An application-layer protocol that can be used to stop, pause or play video and audio applications streaming on the Internet. IRC - Internet Relay Chat - An application-layer protocol that can control the relay chat applications and allow clients to have real-time communications with others on the Internet. The ALG feature is only needed for traffic that goes through the NBG7815s NAT. Figure 45 Settings > Internet > Passthrough NBG7815 Users Guide 90 Chapter 9 WAN The following table describes the labels in this screen. Table 27 Settings > Internet > Passthrough LABEL ALG Setup DESCRIPTION VPN Passthrough FTP H.323 SIP SNMP RTSP IRC PPTP L2TP IPSEC Select Enable to allow TCP packets with a specified port destination to pass through. Select Enable to allow peer-to-peer H.323 calls. Select Enable to make sure SIP (VoIP) works correctly with port-forwarding and address-

mapping rules. Select Enable to allow a manager station to manage and monitor the NBG7815 through the network via SNMP. Select Enable to have the NBG7815 detect RTSP traffic and help build RTSP sessions through its NAT. Select Enable to allow clients to have real-time communications with others on the Internet. Select Enable to allow VPN clients to make outbound PPTP connections. It is required in order to connect to a PPTP VPN account. If PPTP is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG7815 and the NBG7815 will drop the request. When PPTP is enabled, the NBG7815 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully. Select Enable to allow VPN clients to make outbound L2TP connections. It is required in order to connect to a L2TP VPN account. If L2TP is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG7815 and the NBG7815 will drop the request. When L2TP is enabled, the NBG7815 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully. Select Enable to allow VPN clients to make outbound IPSec connections. It is required in order to connect to a IPSec VPN account. If IPSEC is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG7815 and the NBG7815 will drop the request. When IPSEC is enabled, the NBG7815 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.7 Port Trigger Screen Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding, you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. Trigger port forwarding addresses this problem. Trigger port forwarding allows computers on the LAN to dynamically take turns using the service. The Zyxel Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the Zyxel Device's WAN port receives a response with a specific port number and protocol

("open" port), the Zyxel Device forwards the traffic to the LAN IP address of the computer that sent the request. After that computers connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. NBG7815 Users Guide 91 Chapter 9 WAN Note: TCP port 7547 is reserved for system use. Note: The maximum number of trigger ports for a single rule or all rules is 999. Note: The maximum number of open ports for a single rule or all rules is 999. Figure 46 Trigger Port Forwarding Process: Example 1 2 3 4 Jane requests a file from the Real Audio server (port 7070). Port 7070 is a trigger port and causes the Zyxel Device to record Janes computer IP address. The Zyxel Device associates Jane's computer IP address with the "open" port range of 6970-7170. The Real Audio server responds using a port number ranging between 6970-7170. The Zyxel Device forwards the traffic to Janes computer IP address.Only Jane can connect to the Real Audio server until the connection is closed or times out. The Zyxel Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Use this screen to view the summary table of your NBG7815s port trigger settings. Click Expert Mode >

WAN > NAT > Port Trigger to show the following screen. Note: Only one LAN computer can use a trigger port (range) at a time. Figure 47 Expert Mode > WAN > NAT > Port Trigger The following table describes the labels in this screen. Table 28 Expert Mode > WAN > NAT > Port Trigger LABEL DESCRIPTION Port Trigger Rules (Max Limit: 32) No. This is the rule index number. NBG7815 Users Guide 92 Chapter 9 WAN Table 28 Expert Mode > WAN > NAT > Port Trigger (continued) DESCRIPTION This field displays a name to identify this rule. LABEL Name Incoming Port End Port Trigger Port End Port Actions This field displays a port number that a server on the WAN uses when it sends out a particular service. This field displays a port number or the final port number in a range of port numbers. This field displays a port number that causes the NBG7815 to record the IP address of the LAN computer that sent then traffic to a server on the WAN. This field displays a port number or the ending port number in a range of port numbers. Click the icons under Actions to delete or edit an existing trigger port settings. Click to delete the rule. Click to edit the rule. 9.7.1 Add Port Trigger Rule Screen Use this screen to configure your NBG7815s port trigger settings. Click Expert Mode > WAN > NAT > Port Trigger > Add Rule to show the following screen. Figure 48 Add Port Trigger Rule Table 29 Add Port Trigger Rule DESCRIPTION LABEL Name Incoming Port End Port Trigger Port Type a unique name (up to 15 characters) for identification purposes. All characters are permitted - including spaces. Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The ARMOR Z1 forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service. Type a port number or the starting port number in a range of port numbers. Type a port number or the ending port number in a range of port numbers. The trigger port is a port (or a range of ports) that causes (or triggers) the ARMOR Z1 to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Type a port number or the starting port number in a range of port numbers. End Port Type a port number or the ending port number in a range of port numbers. NBG7815 Users Guide 93 Chapter 9 WAN Table 29 Add Port Trigger Rule LABEL Apply Cancel DESCRIPTION Click Apply to save your changes. Click Cancel to exist this screen without saving. 9.8 Dynamic DNS Screen Use this screen to change your NBG7815s DDNS settings. Click Settings > Internet > Dynamic DNS to show the following screen. Note: You can register at https://mycloud.zyxel.com/ to get a free accessible-from-anywhere DDNS account. Figure 49 Settings> Internet > Dynamic DNS The following table describes the labels in this screen. Table 30 Settings > Internet > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Select Disable to turn this feature off. Service Provider Select the name of your Dynamic DNS service provider. Host Name Enter a host names in the field provided. You can specify up to two host names in the field separated by a comma (","). NBG7815 Users Guide 94 Chapter 9 WAN Table 30 Settings > Internet > Dynamic DNS (continued) LABEL Username Password Apply Cancel DESCRIPTION Enter your user name. Enter the password assigned to you. Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 9.9 UPnP Screen Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities, and learn about other devices on the network. A device can then leave a network smoothly and automatically when it is no longer in use. See Section 9.9.1 on page 96 and Section 9.9.2 on page 98 for more information on UPnP. Use this screen to enable UPnP on your NBG7815. Click Settings > Internet > UPnP to display the following screen. Figure 50 Settings > Internet > UPnP Table 31 Settings > Internet > UPnP DESCRIPTION LABEL UPnP Setup Enable UPnP UPnP Setup Rule No. Protocol InPort OutPort Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the NBG7815's IP address (although you must still enter the password to access the web configurator). This is the number of an individual UPnP entry. This is the transport layer protocol used for the service. InPort is a port that a LAN computer uses when it requests a particular service. This port is only applicable to the local network. This field displays the port number of the UPnP entry. OutPort is the well-known port that the WAN server uses to reply to the LAN computer that made the request using In Port. This field displays the port number of the UPnP entry. NBG7815 Users Guide 95 Chapter 9 WAN Table 31 Settings > Internet > UPnP DESCRIPTION LABEL IP Address Apply Cancel This field displays the IP address of this UPnP entry. Click Apply to save your settings. Click Cancel to return to the previously saved settings. 9.9.1 Turning On UPnP in Windows 7 Example This section shows you how to use the UPnP feature in Windows 7. UPnP server is installed in Windows 7. Activate UPnP on the NBG7815 in Settings > Internet > UPnP. Make sure the computer is connected to a LAN port of the NBG7815. Turn on your computer and the NBG7815. 1 Click the start icon, Control Panel and then the Network and Sharing Center. 2 Click Change Advanced Sharing Settings. NBG7815 Users Guide 96 Chapter 9 WAN NBG7815 Users Guide 97 3 Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. Chapter 9 WAN NBG7815 Users Guide 98 9.9.2 Turning on UPnP in Windows 10 Example This section shows you how to use the UPnP feature in Windows 10. UPnP server is installed in Windows 10. Activate UPnP on the NBG7815 in Settings > Internet > UPnP. Make sure the computer is connected to the LAN port of the NBG7815. Turn on your computer and the NBG7815. 1 Click the start icon, Settings and then Network & Internet. Chapter 9 WAN 2 Click Network and Sharing Center. 3 Click Change advanced sharing settings. NBG7815 Users Guide 99 4 Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers Chapter 9 WAN NBG7815 Users Guide 100 C H A P T E R 10 Wireless LAN 10.1 Overview This chapter discusses how to configure the wireless network settings in your NBG7815. The NBG7815 can service both 2.4GHz and 5GHz networks at the same time. You can have different wireless setup and settings for 2.4GHz and 5GHz wireless LANs. Click Settings > WiFi to configure wireless LAN 2.4G or wireless LAN 5G. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Figure 51 Example of a Wireless Network The wireless network in the figure is encircled in blue. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your NBG7815 is the AP. 10.1.1 What You Can Do Use the Main WiFi screen to enable or disable the 2.4GHz or 5GHz wireless LAN, set up wireless security between the NBG7815 and the wireless clients, and make other basic configuration changes (Section 10.2 on page 105). Use the Guest WiFi screen to set up multiple wireless networks on your NBG7815 (Section 10.3 on page 107). Use the MAC Filter screen to allow or deny wireless stations from connecting to the NBG7815 based on their MAC address (Section 10.4 on page 107). NBG7815 Users Guide 101 Chapter 10 Wireless LAN Use the WPS screen to quickly set up a wireless network with strong security without having to configure security settings manually (Section 10.5 on page 109). Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 10.6 on page 111). 10.1.2 What You Should Know Every wireless network must follow these basic guidelines. Every wireless client in the same wireless network must use the same Service Set Identifier (SSID). The SSID is the name of the wireless network. If two wireless networks overlap, they should use different channels. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. Every wireless client in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It also protects information that is sent through the wireless network. Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network. SSID Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. This type of security is fairly weak, however, because there are ways for unauthorized devices to get the SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network. MAC Address Filter Every wireless client has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate Users Guide or other documentation. You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless network, it does not matter if it has the correct settings. This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the wireless network. 1. 2. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG7815 Users Guide 102 Chapter 10 Wireless LAN User Authentication You can make every user log in to the wireless network before they can use it. This is called user authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do this. For wireless networks, there are two typical places to store the user names and passwords for each user. In the AP: this feature is called a local user database or a local database. In a RADIUS server: this is a server used in businesses more than in homes. If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot set up user names and passwords for your users. Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network. Local user databases also have an additional limitation that is explained in the next section. Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. The WPA-PSK (WiFi Protected Access-Pre-Shared Key) security mode provides both improved data encryption and user authentication over WEP. Using a pre-shared key, both the Zyxel Device and the connecting client share a common password in order to validate the connection. This type of encryption, while robust, is not as strong as WPA, WPA2 or even WPA2-PSK. The WPA2-PSK security mode is a more robust version of the WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. The WPA3-SAE (Simultaneous Authentication of Equals handshake) is the newer security mode that protects against dictionary attacks by implementing a new key exchange protocol. Guest WLAN Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG7815

(Z), but not other networks connected to it. In the following figure, a guest user can access the Internet from the guest wireless network A via Z but not the home or company network N. Note: The home or company network N and Guest WLAN network are independent networks. Note: Only Standard Mode supports guest WLAN. NBG7815 Users Guide 103 Chapter 10 Wireless LAN Figure 52 Guest Wireless LAN Network Guest WLAN Bandwidth The Guest WLAN Bandwidth function allows you to restrict the maximum bandwidth for the guest wireless network. Additionally, you can also define bandwidth for your home or office network. An example is shown in the next figure to define maximum bandwidth for your networks (A is Guest WLAN and N is a home or company network.) Figure 53 Example: Bandwidth for Different Networks WPS WiFi Protected Setup (WPS) is an industry standard specification defined by the WiFi Alliance. WPS allows you to set up a wireless network with strong security without having to configure security settings manually. Depending on the devices in your network, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification Number) in the devices. They then connect and set up a secure network by themselves. See how to set up a secure wireless network using WPS in Section 7.2 on page 43. NBG7815 Users Guide 104 Chapter 10 Wireless LAN 10.2 Main WiFi Screen Use this screen to configure the SSID and wireless security of the NBG7815s default wireless LAN. Note: If you are configuring the NBG7815 from a computer connected to the wireless LAN and you change the NBG7815s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the NBG7815s new settings. Click Settings > WiFi > Main WiFi to show the following screen. Figure 54 Settings > WiFi > Main WiFi (Standard Mode) NBG7815 Users Guide 105 Chapter 10 Wireless LAN Figure 55 Settings > WiFi > Main WiFi (Bridge Mode) The following table describes the labels in this screen. Table 32 Settings > WiFi > Main WiFi DESCRIPTION LABEL Main WiFi Enable Main WiFi Select Enable to activate the 2.4GHz and/or 5GHz wireless LAN. Select Disable to turn it off. 2.4G/5G Name

(SSID) The Service Set Identity (SSID) identifies the wireless LAN with which a wireless client is associated. Enter a name (up to 32 printable characters found on a typical English language keyboard) for the wireless LAN. Click the Keep 2.4G & 5G name the same check box to use the same SSID for 2.4G and 5G wireless network. Security Mode Select the security mode you want to apply to the NBG7815. Password The password has two uses:

Manual: Manually enter the same password on the Zyxel Device and the client. Enter 8-63 ASCII characters or exactly 64 hexadecimal (0-9, a-f) characters. WPS: When using WPS, the Zyxel Device sends this password to the client. Click the eye icon icon is slashed to show or hide the password of your wireless network. When the eye

, youll see the password in plain text. Otherwise, it is hidden. 2.4G/5G Channel Select a channel from the drop-down list box. The options vary depending on the frequency band and the country you are in. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to reload the previous configuration for this screen. NBG7815 Users Guide 106 Chapter 10 Wireless LAN 10.3 Guest WiFi Screen This screen allows you to enable and configure guest wireless network settings on the NBG7815. Click Settings > WiFi > Guest WiFi to show the following screen. Note: This is not available if you are using bridge mode. Figure 56 Settings > WiFi > Guest WiFi The following table describes the labels in this screen. Table 33 Settings > WiFi > Guest WiFi LABEL DESCRIPTION Enable Guest WiFi Name (SSID) Select Enable to activate the guest WiFi. Select Disable to turn it off. An SSID profile is the set of parameters relating to one of the NBG7815s BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated. This field displays the name of the wireless profile on the network. When a wireless client scans for an AP to associate with, this is the name that is broadcast and seen in the wireless client utility. Password The password has two uses. Manual: Manually enter the same password on the Zyxel Device and the client. Enter 8-63 ASCII characters or exactly 64 hexadecimal (0-9, a-f) characters. WPS: When using WPS, the Zyxel Device sends this password to the client. Click the Eye icon is slashed to show or hide the password of your wireless network. When the Eye icon

, youll see the password in plain text. Otherwise, it is hidden. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to reload the previous configuration for this screen. 10.4 MAC Filter Screen The MAC filter screen allows you to give exclusive access to devices (Allow) or exclude devices from accessing the NBG7815 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. NBG7815 Users Guide 107 Chapter 10 Wireless LAN Use this screen to change your NBG7815s MAC filter settings. Click Settings > WiFi > MAC Filter to show following screen. Figure 57 Settings > WiFi > MAC Filter The following table describes the labels in this screen. Table 34 Settings > WiFi > MAC Filter LABEL DESCRIPTION MAC Filter Select to turn on (Enable) or off (Disable) MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Filter Summary table. Select Allow to permit access to the NBG7815. MAC addresses not listed will be denied access to the NBG7815. Select Deny to block access to the NBG7815. MAC addresses not listed will be allowed to access the NBG7815. MAC Address List (Max Limit : 64) This field displays the MAC address of the wireless station you want to filter. Click to configure the MAC address. Click to delete the MAC address. Add Apply Click to add a rule in the MAC Address List. Click Apply to save your changes back to the NBG7815. Cancel Click Cancel to reload the previous configuration for this screen. 10.4.1 Add MAC Address Screen Use this screen to configure the MAC address you want to add to the MAC address list. Click Settings >

WiFi > MAC Filter > Add to show the following screen. NBG7815 Users Guide 108 Chapter 10 Wireless LAN Figure 58 Settings > WiFi > MAC Filter > Add The following table describes the labels in this screen. Table 35 Settings > WiFi > MAC Filter > Add DESCRIPTION LABEL Type Apply Cancel This field displays the MAC address of the wireless station. If you select User-Defined, enter the MAC address(es) manually. MAC Address Enter a MAC address manually in this field if you select User-Defined in the Type field. Click Apply to save your changes back to the NBG7815. Click Cancel to exist this screen without saving. 10.5 WPS Screen Use this screen to enable/disable WPS, view or generate a new PIN and check the current WPS status. Click Settings > WiFi > WPS to show the following screen. Note: With WPS, wireless clients can only connect to the wireless network using the first SSID on the NBG7815. NBG7815 Users Guide 109 Chapter 10 Wireless LAN Figure 59 Settings > WiFi > WPS The following table describes the labels in this screen. Table 36 Settings > WiFi > WPS DESCRIPTION LABEL WPS WiFi WPS Status Select Enable to turn on the WPS feature. Otherwise, select Disable. Push Button Use this button when you use the PBC (Push Button Configuration) method. Click this to start WPS-aware wireless station scanning and wireless security information synchronization. WPS Status Status SSID Security Apply Cancel This displays Configured when a wireless station has connected to the NBG7815 using WPS and wireless setup or security settings have been changed from default. The current wireless setup and security settings also appear in this screen. This displays Unconfigured if WPS is disabled and there are no wireless setup or security changes on the NBG7815 or if you click Release Configuration to restore wireless setup and security settings to default. 802.11 Mode This is the 802.11 mode used. Only compliant WLAN devices can associate with the NBG7815. This is the name of the wireless network (the NBG7815s first SSID) that WPS clients connect to. This is the type of wireless security employed by the network. Click Apply to save your changes back to the NBG7815. Click Cancel to reload the previous configuration for this screen. NBG7815 Users Guide 110 Chapter 10 Wireless LAN 10.6 Scheduling Screen Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. The y-axis shows the time period in days. The x-axis shows the time period in hours. Click on the boxes to select the time period. Click Settings > WiFi > Scheduling to show the following screen. Figure 60 Settings > WiFi > Scheduling The following table describes the labels in this screen. Table 37 Expert Mode > Wireless > Scheduling LABEL DESCRIPTION WiFi Scheduling Select Enable to activate the wireless LAN scheduling feature. Select Disable to turn it off. Click Select All or click gray blocks to specify days and times to turn the Wireless LAN on or off. If you click Select All you can not select any specific days and times. Select All Apply Cancel Deselect All Click Deselect All to remove all the wireless LAN scheduling. Click Apply to save your changes back to the NBG7815. Click Cancel to reload the previous configuration for this screen. NBG7815 Users Guide 111 C H A P T E R 11 LAN 11.1 Overview This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are connected. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. Figure 61 LAN Example The LAN screens can help you configure a manage IP addresses and partition your physical network into logical networks. 11.2 What You Can Do Use the LAN IP screen to configure the IP addresses for your NBG7815 on the LAN (Section 11.4 on Use the IPv6 LAN screen to configure the IPv6 address for your NBG7815 on the LAN (Section 11.5 on page 113). page 119). 11.3 What You Need To Know The actual physical connection determines whether the NBG7815 ports are LAN or WAN ports. There are two separate IP networks: one inside the LAN network and the other outside the WAN network as shown in the following figure. NBG7815 Users Guide 112 Chapter 11 LAN Figure 62 LAN and WAN IP Addresses The LAN parameters of the NBG7815 are preset in the factory with the following values:

IPv4 address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) DHCP server enabled with 128 client IPv4 addresses starting from 192.168.1.33. These parameters should work for the majority of installations. 11.4 LAN IP Screen Use this screen to change the IP address for your NBG7815 in Standard Mode. Click Settings > LAN > LAN IP to show the following screen. NBG7815 Users Guide 113 Chapter 11 LAN Figure 63 Settings > LAN > LAN IP (Standard Mode) NBG7815 Users Guide 114 Chapter 11 LAN Figure 64 Settings > LAN > LAN IP (Bridge Mode) The following table describes the labels in this screen. Table 38 Settings > LAN > LAN IP DESCRIPTION LABEL LAN IP Rule IP Address IP Subnet Mask DHCP Server IP Pool Starting Address Type the IP address of your NBG7815 in dotted decimal notation. The subnet mask specifies the network number portion of an IP address. Your NBG7815 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG7815. Note: This is not available if you are using bridge mode. DHCP Server Select Enable to activate DHCP for LAN. Select Disable to stop the NBG7815 from acting as a DHCP server. DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients (computers) to obtain TCP/IP configuration at startup from a server. Enable the DHCP server unless your ISP instructs you to do otherwise. When configured as a server, the NBG7815 provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured. When set as a server, fill in the following four fields. This field specifies the first of the contiguous addresses in the IP address pool for LAN. NBG7815 Users Guide 115 Chapter 11 LAN Table 38 Settings > LAN > LAN IP (continued) LABEL DESCRIPTION DHCP Pool Size This field specifies the size, or count of the IP address pool for LAN. DNS Servers Assigned by DHCP Server DNS Server First DNS Server Second DNS Server Third DNS Server Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the NBG7815's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select LAN IP and the field to the right displays the (read-only) default gateway IP address of your computer. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Static DHCP Table No. Name MAC Address IP Address Note: This is not available if you are using bridge mode. This is the index number of the static IP table entry (row). This field displays a name to identify this rule. This field displays the MAC address of a computer on your LAN, or the MAC address you manually configured. This field displays the LAN IP address of a computer on your LAN, or the LAN address you manually configured. Actions Click the icons under Actions to delete or edit an existing static IP. Click to delete an existing static IP. Click to edit an existing static IP. Apply Cancel Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 11.4.1 Static DHCP Table-Add/Edit Rule Screen Use this screen to configure the static DHCP. Click Settings > LAN > LAN IP > Add Rule or Settings > LAN >

> LAN IP > Edit to show the following screens. Note: This is not available if you are using bridge mode. NBG7815 Users Guide 116 Chapter 11 LAN Figure 65 Settings > LAN > LAN IP > Add Rule Figure 66 Settings > LAN > LAN IP > Edit The following table describes the labels in these screens. Table 39 Settings > LAN > LAN IP > Add Rule/Edit LABEL Device LIst DESCRIPTION This field lists the system name of the LAN user device which is connected to the NBG7815 and assigned an IP address. Select a LAN user device from the list to automatically detect the MAC address of a computer on your LAN. Otherwise, select User-Defined to enter the MAC address of a computer on your LAN in the MAC Address field. This field displays the MAC address of a computer on your LAN. If you select User-

Defined in the Device List field, enter the MAC address(es) manually. This field displays the IP address of a computer on your LAN. If you select User-

Defined in the Device List field, enter the IP address(es) manually. Click Apply to save your changes back to the NBG7815. Click Cancel to exit this screen without saving. MAC Address IP Address Apply Cancel NBG7815 Users Guide 117 Chapter 11 LAN 11.4.2 Configure LAN Screen in Bridge Mode Use this section to configure your LAN settings while in Bridge Mode. Click Settings > LAN > LAN IP to show the following screen. Note: If you change the IP address of the NBG7815 in the screen below, you will need to log into the NBG7815 again using the new IP address. Figure 67 Settings > LAN > LAN IP NBG7815 Users Guide 118 Chapter 11 LAN The table below describes the labels in the screen. Table 40 Settings > LAN > LAN IP LABEL DESCRIPTION IP Address setting Obtain an IP Address Automatically (DHCP) Static IP Address Click this if you want to specify the IP address of your NBG7815. Or if your ISP or network administrator gave you a static IP address to access the network or the Internet. When you enable this, the NBG7815 gets its IP address from the networks DHCP server

(for example, your ISP). Users connected to the NBG7815 can now access the network

(i.e., the Internet if the IP address is given by the ISP). The Web Configurator may no longer be accessible unless you know the IP address assigned by the DHCP server to the NBG7815. You need to reset the NBG7815 to be able to access the Web Configurator again (see Section 13.6 on page 135 for details on how to reset the NBG7815). Also when you select this, you cannot enter an IP address for your NBG7815 in the field below. Type the IP address in dotted decimal notation. The default setting is 192.168.1.2. If you change the IP address you will have to log in again with the new IP address. The subnet mask specifies the network number portion of an IP address. Your NBG7815 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the NBG7815. Enter a gateway IP address (if your ISP or network administrator gave you one) in this field. Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the NBG7815's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose User-Defined, but leave the IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply. Select None if you do not want to configure DNS servers. If you do not configure a DNS server, you must know the IP address of a computer in order to access it. IP Address Subnet Mask Gateway DNS Server First DNS Server Second DNS Server Third DNS Server Apply Cancel Click Apply to save your changes to the NBG7815. Click Cancel to reload the previous configuration for this screen. 11.5 IPv6 LAN Screen Use this screen to configure the IP address for your NBG7815 on the LAN. Click Settings > LAN > IPv6 LAN to show the following screen. Note: This is not available if you are using bridge mode. NBG7815 Users Guide 119 Chapter 11 LAN Figure 68 Settings > LAN > IPv6 LAN The following table describes the labels in this screen. Table 41 Settings > Expert Mode > LAN > IPv6 LAN LABEL DESCRIPTION LAN IPv6 Address Assignment Enable_DHCPv6-PD Select this option to use DHCPv6 prefix delegation. The NBG7815 will obtain an IPv6 prefix from the ISP or a connected uplink router for the LAN. Autoconfiguration Type Select SLAAC + RDNSS to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router in the network. Select SLAAC + Stateless DHCPv6 to enable IPv6 stateless auto-configuration on this interface. The interface will get an IPv6 address from an IPv6 router and the DHCP server. The IP address information gets through DHCPv6. Select Stateful DHCPv6 to allow a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. Enter the beginning of the range of IP addresses that this address object represents. IPv6 Address range

(Start) NBG7815 Users Guide 120 Chapter 11 LAN Table 41 Settings > Expert Mode > LAN > IPv6 LAN (continued) LABEL DESCRIPTION IPv6 Address range

(End) Static IP Address IPv6 Lifetime Enter the IPv6 lifetime in the LAN. Enter the end of the range of IP address that this address object represents. Select this option to manually enter an IPv6 address if you want to use a static IP address. LAN IPv6 Address Enter the LAN IPv6 address you want to assign to your NBG7815 in hexadecimal notation. LAN IPv6 Routeinfo Length (48~64) Enter the 48 to 64 address prefix length to specify in an IPv6 address compose the network address. Prefix Valid Lifetime Enter the valid lifetime for the prefix. Link Local Only Select this option to only use the link local address on the NBG7815 interfaces in the LAN. ULA RA period Apply Cancel Select this option to identify a unique local address of the NBG7815 in the LAN. Minimum RA period Enter the minimum time in seconds between router advertisement messages. Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. NBG7815 Users Guide 121 C H A P T E R 12 Security 12.1 Overview Use these screens to enable and configure the firewall that protects your NBG7815 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall:

allows traffic that originates from your LAN computers to go to all of the networks. blocks traffic that originates on the other networks from going to the LAN. The following figure illustrates the default firewall action. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2). However other traffic initiated from the WAN is blocked (3 and 4). Figure 69 Default Firewall Action Note: Features in this chapter are not available if you are using bridge mode. 12.1.1 What You Can Do Use the IPv4 Firewall screen to enable or disable the NBG7815s IPv4 firewall (Section 12.2 on page Use the IPv6 Firewall screen to enable or disable the NBG7815s IPv6 firewall (Section 12.3 on page 123). 126). 12.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter. NBG7815 Users Guide 122 Chapter 12 Security About the NBG7815 Firewall The NBG7815s firewall feature physically separates the LAN and the WAN and acts as a secure gateway for all data passing between the networks. It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (click the IPv4 Firewall or IPv6 Firewall tab under Security and then click the Enable Firewall check box). The NBG7815's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG7815 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. The NBG7815 is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The NBG7815 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband

(cable or DSL) modem to the Internet. The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world. These computers will have access to Internet services such as e-mail, FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless the remote host is authorized to use a specific service. Guidelines For Enhancing Security With Your Firewall 1 Change the default password via Web Configurator. Think about access control before you connect to the network in any way, including attaching a modem to the port. Limit who can access your router. 4 Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. For local services that are enabled, protect against misuse. Protect by configuring the services to communicate only with specific peers, and protect by configuring rules to block packets for the services at specific interfaces. Protect against IP spoofing by making sure the firewall is active. Keep the firewall in a secured (locked) room. 2 3 5 6 7 12.2 IPv4 Firewall Screen Use this screen to enable or disable the NBG7815s IPv4 firewall. Click Settings > Firewall > IPv4 Firewall to show the following screen. NBG7815 Users Guide 123 Chapter 12 Security Figure 70 Settings > Firewall > IPv4 Firewall The following table describes the labels in this screen. Table 42 Settings > Firewall > IPv4 Firewall LABEL ICMP DESCRIPTION Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Respond to Ping on The NBG7815 will not respond to any incoming Ping requests when None is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN Ping requests. Firewall Setup Enable Firewall Enable Firewall Rule Filter Rule Actions Firewall Rule No. Select Enable to activate the firewall. The NBG7815 performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated. Select Enable to activate the firewall rules that you define (see Add Firewall Rule below). Select Drop to silently discard the packets which meet the firewall rules. The others are accepted. Select Accept to allow the passage of the packets which meet the firewall rules. The others are blocked. This is your firewall rule number. The ordering of your rules is important as rules are applied in turn. Service Name This is a name that identifies or describes the firewall rule. MAC address This is the MAC address of the computer for which the firewall rule applies. NBG7815 Users Guide 124 Chapter 12 Security Table 42 Settings > Firewall > IPv4 Firewall (continued) LABEL DESCRIPTION Dest IP Address This is the IP address of the computer to which traffic for the application or service is entering. Source IP Address This is the IP address of the computer from which traffic for the application or service is initialized. Dest Port Range This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic. Source Port Range This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic. Protocol This is the protocol (TCP, UDP or ICMP) used to transport the packets for which you want to apply the firewall rule. Actions Click to remove the firewall rule. Apply Cancel Click to edit the firewall rule. Click Apply to save the settings. Click Cancel to start configuring this screen again. 12.2.1 IPv4 Firewall-Add Rule Screen Use this screen to configure IPv4 firewall rule. Click Settings > Firewall > IPv4 Firewall > Add Rule to open the following screen. Figure 71 Settings > Firewall > IPv4 Firewall > Add Rule NBG7815 Users Guide 125 Chapter 12 Security The following table describes the labels in this screen. Table 43 Settings > Firewall > IPv4 Firewall > Add Rule DESCRIPTION LABEL Service Name MAC Address Dest IP Address Enter a name that identifies or describes the firewall rule. Enter the MAC address of the computer for which the firewall rule applies. Enter the IP address of the computer to which traffic for the application or service is entering. The NBG7815 applies the firewall rule to traffic initiating from this computer. Source IP Address Enter the IP address of the computer that initializes traffic for the application or service. Dest Port Range Source Port Range Protocol Apply Cancel The NBG7815 applies the firewall rule to traffic initiating from this computer. This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic. This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic. Select the protocol (TCP, UDP or ICMP) used to transport the packets for which you want to apply the firewall rule. Click Apply to save the settings. Click Cancel to exist this screen without saving. 12.3 IPv6 Firewall Screen Use this screen to enable and create IPv6 firewall rules to filter IPv6 traffic. Click Settings > Firewall > IPv6 Firewall to show the following screen. Figure 72 Settings > Firewall > IPv6 Firewall NBG7815 Users Guide 126 Chapter 12 Security The following table describes the labels in this screen. Table 44 Settings > Firewall > IPv6 Firewall LABEL DESCRIPTION Configuration Simple Security Select Enable to enabled simple security on your NBG7815. Rule Status Select Enable to enabled rule status on your NBG7815. Action Select DROP to silently discard the packets which meet the firewall rules. The others are accepted. Select ACCEPT to allow the passage of the packets which meet the firewall rules. The others are blocked. Firewall Rule No. This is your firewall rule number. The ordering of your rules is important as rules are applied in turn. Service Name This is a name that identifies or describes the firewall rule. MAC Address This is the MAC address of the computer for which the firewall rule applies. Dest IP Address This is the IP address of the computer to which traffic for the application or service is entering. Source IP Address This is the IP address of the computer to which traffic for the application or service is initialized. Dest Port Range This is the port number/range of the destination that defines the traffic type, for example TCP port 80 defines web traffic. Source Port Range This is the port number/range of the source that defines the traffic type, for example TCP port 80 defines web traffic. Protocol This is the protocol (TCP, UDP or ICMPv6) used to transport the packets for which you want to apply the firewall rule. Actions Click to remove the firewall rule. Apply Cancel Click to edit the firewall rule. Click Apply to save the settings. Click Cancel to restore your previously saved settings. 12.3.1 IPv6 Firewall-Add Rule Screen Use this screen to configure IPv4 firewall rule. Click Settings > Firewall > IPv6 Firewall > Add Rule to open the following screen. NBG7815 Users Guide 127 Chapter 12 Security Figure 73 Settings > Firewall > IPv6 Firewall > Add Rule The following table describes the labels in this screen. Table 45 Settings > Firewall > IPv4 Firewall > Add Rule DESCRIPTION LABEL Service Name MAC Address Dest IP Address Enter a name that identifies or describes the firewall rule. Enter the MAC address of the computer for which the firewall rule applies. Enter the IP address of the computer to which traffic for the application or service is entering. The NBG7815 applies the firewall rule to traffic initiating from this computer. Source IP Address Enter the IP address of the computer that initializes traffic for the application or service. Dest Port Range Source Port Range Protocol Apply Cancel The NBG7815 applies the firewall rule to traffic initiating from this computer. This is the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic. This is the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic. Select the protocol (TCP, UDP or ICMP) used to transport the packets for which you want to apply the firewall rule. Click Apply to save the settings. Click Cancel to exist this screen without saving. NBG7815 Users Guide 128 C H A P T E R 13 System 13.1 Overview This chapter provides information on checking the NBG7815's status and logs, configuring basic and remote management settings, using maintenance and firmware upgrade tools, and changing the operating mode. 13.2 What You Can Do Use the Status screen to view the basic information of the NBG7815 (Section 13.3 on page 129) Use the General Setting screen to change password or to set the timeout period of the management session (Section 13.4 on page 132). Use the Remote Access screen to configure the interface/s from which the NBG7815 can be managed remotely and specify a secure client that can manage the NBG7815 (Section 13.5 on page 134). Use the Maintenance screen to upload firmware, reboot the NBG7815 without turning the power off or reset the NBG7815 to factory defaults (Section 13.6 on page 135). Use the Operating Mode screen select whether you want the NBG7815 to act as a router or a bridge

(Section 13.7 on page 136). Use the Logs screen to see the system logs recorded by the NBG7815 (Section 13.8 on page 138). 13.3 Status Screen Use this screen to view some basic information of your NBG7815. Click Settings > System > Status to show the following screen. NBG7815 Users Guide 129 Chapter 13 System Figure 74 Settings > System > Status (Standard Mode) NBG7815 Users Guide 130 Chapter 13 System Figure 75 Settings > System > Status (Bridge Mode) The following table describes the labels in this screen. Table 46 Settings > System > Status DESCRIPTION LABEL System Model Name This is the model name of your device. Firmware Version This is the firmware version. System Operation Mode This is the device mode in which the NBG7815 is currently running. See Section 13.7 on page 136 for more information. Enable IPv4 Firewall This shows if the IPv4 firewall is enabled on the NBG7815. Enable IPv6 Simple Security This shows if the IPv6 firewall is enabled on the NBG7815. System Uptime This is the total time the NBG7815 has been on. WAN Information MAC Address IP Address Gateway IPv6 Address LAN Information MAC Address IP Address Note: : This is not available if you are using bridge mode. This shows the WAN Ethernet adapter MAC Address of your device. This shows the NBG7815s WAN IP address. IP Subnet Mask This shows the NBG7815s WAN subnet mask. This shows the WAN ports gateway IP address. This shows the current IPv6 address of the NBG7815. This shows the LAN Ethernet adapter MAC Address of your device. This shows the NBG7815s LAN IP address. IP Subnet Mask This shows the NBG7815s LAN subnet mask. NBG7815 Users Guide 131 Chapter 13 System Table 46 Settings > System > Status (continued) LABEL DHCP Server DESCRIPTION This shows whether the NBG7815 acts as a DHCP Server and provides LAN IP addresses to its clients or not. IPv6 Address This shows the current LAN IPv6 address of the NBG7815. 13.4 General Setting Screen Use this screen to set the management session timeout period. Click Settings > System > General Setting to show the following screen. Figure 76 Settings > System > General Setting (Standard Mode) NBG7815 Users Guide 132 Chapter 13 System Figure 77 Settings > System > General Setting (Bridge Mode) The following table describes the labels in this screen. Table 47 Settings > System > General Setting LABEL DESCRIPTION System Settings System Name System Name is a unique name to identify the NBG7815 in an Ethernet network. Domain Name Enter the domain name you want to give to the NBG7815.

(This is not available if you are using bridge mode) Admin Inactivity Timer Admin Password New Password Confirm New Password Apply Cancel Type how many minutes a management session can be left idle before the session times out. The default is 5 minutes. After it times out, you have to log in with your password again. Very long idle timeouts may have security risks. A value of "0" means a management session never times out, no matter how long it has been left idle (not recommended). Select Language Select a language you prefer from the drop-down list box. The Web Configurator language changes after a while without restarting the NBG7815. Current Password Type the default password or the existing password you use to access the system in this field. Type your new system password (up to 30 characters). Note that as you type a password, the screen displays a dot for each character you type. Type the new password again in this field. Click Apply to save your changes back to the NBG7815. Click Cancel to discard all changes. NBG7815 Users Guide 133 Chapter 13 System 13.5 Remote Access Screen Use this screen to change your NBG7815s remote management settings. You can use HTTPS or Wake on LAN to access and manage the NBG7815. Wake On LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature, the remote hardware (such as the network adapter on a computer) must support Wake On LAN using the Magic Packet method. You need to know the MAC address of the remote client to use this feature. It may be on a label on the device. Click Settings > System > Remote Access to show the following screen. Note: You can only enable Remote Assistant in this screen if you are using bridge mode. Figure 78 Settings > System > Remote Access (Standard Mode) NBG7815 Users Guide 134 Chapter 13 System Figure 79 Settings > System > Remote Access (Bridge Mode) The following table describes the labels in this screen. Table 48 Settings > System > Remote Access DESCRIPTION LABEL HTTPS Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Access Interface Select the interface(s) through which a computer may access the NBG7815 using this service. Select Enable to allow customer support to help you solve the problems you encounter with your NBG7815 remotely. Remote Assistance Enable Remote Assistant Wake on LAN Wake on LAN Status Select Enable to have the NBG7815 forward a WoL Magic Packet to all devices on the LAN if the packet comes from the WAN or remote network and uses the port number specified in the Port field. A LAN device whose hardware supports Wake on LAN then will be powered on if it is turned off previously. Port Type a port number from which a WoL packet is forwarded to the LAN. Wake on LAN MAC Address This field displays the hostname and MAC address of the LAN device by default. Otherwise, select User-Defined to enter the MAC Address of the device on the network that will be turned on. Start Apply Cancel A MAC address consists of six hexadecimal character pairs. Click this to have the NBG7815 generate a WoL packet and forward it to turn the specified device on. A screen pops up displaying MAC address error if you input the MAC address incorrectly. Click Apply to save your changes back to the NBG7815. Click Cancel to begin configuring this screen afresh. 13.6 Maintenance Screen Use this screen to upgrade firmware, restart or reset your NBG7815. NBG7815 Users Guide 135 Chapter 13 System Find firmware at www.zyxel.com in a file that uses the version number and project code with a *.bin extension, e.g., V1.00(ABCS.0)C0.bin. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot. Online Firmware System Restart System restart allows you to reboot the NBG7815 without turning the power off. Reset to Factory Default Click the RESET TO FACTORY DEFAULT button in this section to clear all user-entered configuration information and returns the NBG7815 to its factory defaults. You can also press the RESET button on the rear panel to reset the factory defaults of your NBG7815. Click Settings > System > Maintenance to show the following screen. Figure 80 Settings > System > Maintenance 13.7 Operating Mode Screen Use this screen to select how you want to use your NBG7815. The Operating Mode function lets you configure your NBG7815 as a router or bridge. You can choose between Standard Mode, and Bridge Mode depending on your network topology and the features you require from your device. The following describes the device modes available in your NBG7815. NBG7815 Users Guide 136 Chapter 13 System Standard (Router) A router connects your local network with another network, such as the Internet. The router has two IP addresses, the LAN IP address and the WAN IP address. Figure 81 LAN and WAN IP Addresses in Standard Mode Bridge Figure 82 Bridge Mode A bridge enabled all Ethernet ports to be bridged together and be in the same subnet. To connect to the Internet, another device, such as a router, is required. Click Settings > System > Operating Mode to show the following screen. NBG7815 Users Guide 137 Chapter 13 System Figure 83 Settings > System > Operation Mode The following table describes the labels in this screen. Table 49 Settings > System > Operation Mode LABEL Standard Mode DESCRIPTION Select Standard Mode if your device routes traffic between a local network and another network such as the Internet. This mode offers services such as a firewall or bandwidth management. You can configure the IP address settings on your WAN port. Contact your ISP or system administrator for more information on appropriate settings. Bridge Mode Select Bridge Mode if your device bridges traffic between clients on the same network. In Bridg3e Mode, all Ethernet ports have the same IP address. All ports on the rear panel of the device are LAN ports, including the port labeled WAN. There is no WAN port. The DHCP server on your device is disabled. Router functions (such as NAT, bandwidth management, remote management, firewall and so on) are not available when the NBG7815 is in Bridge Mode. The IP address of the device on the local network is set to 192.168.1.2. Apply Cancel Click Apply to save your settings. Click Cancel to return your settings to the default (Standard). Note: If you select the incorrect system operation Mode you may not be able to connect to the Internet 13.8 Logs Screen Use this screen to see the logged messages for the NBG7815. You can configure which logs to display in the Log screen. The newest log replaces the oldest log after it fills. Select what logs you want to see from the Log Type drop-down list box. The log choices depend on your other settings in the System screens. Click Refresh to renew the log screen. Click Export to save the current list of logs to your computer. Click Clear to delete all the logs. NBG7815 Users Guide 138 Chapter 13 System Click Apply to save your settings. Click Cancel to discard all changes. Click Settings > System > Logs to show the following screen. Figure 84 Settings > System > Logs NBG7815 Users Guide 139 C H A P T E R 14 Troubleshooting 14.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. Power, Hardware Connections, and LEDs NBG7815 Access and Login Internet Access Resetting the NBG7815 to Its Factory Defaults Wireless Connections USB Device Problems 14.2 Power, Hardware Connections, and LEDs The NBG7815 does not turn on. None of the LEDs turn on. Make sure you are using the power adaptor or cord included with the NBG7815. Make sure the power adaptor or cord is connected to the NBG7815 and plugged in to an appropriate power source. Make sure the power source is turned on. Disconnect and re-connect the power adaptor or cord to the NBG7815. If the problem continues, contact the vendor. One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.7 on page 14. Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adaptor to the NBG7815. If the problem continues, contact the vendor. NBG7815 Users Guide 140 Chapter 14 Troubleshooting 14.3 NBG7815 Access and Login I dont know the IP address of my NBG7815. The default IP address of the NBG7815 in Standard Mode is 192.168.1.1. If the NBG7815 obtains a WAN IP address in the same subnet as the LAN IP address 192.168.1.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See Auto-IP Change on page 78 for more information. The default IP address of the NBG7815 in Bridge Mode is 192.168.1.2. If you changed the IP address and have forgotten it, you might get the IP address of the NBG7815 in Standard Mode by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig. The IP address of the Default Gateway might be the IP address of the NBG7815 (it depends on the network), so enter this IP address in your Internet browser. If your NBG7815 in Bridge Mode is a DHCP client, you can find your IP address from the DHCP server. This information is only available from the DHCP server which allocates IP addresses on your network. Find this information directly from the DHCP server or contact your system administrator for more information. Reset your NBG7815 to change all settings back to their default. This means your current settings are lost. See Section 14.5 on page 143 in the Troubleshooting for information on resetting your NBG7815. I cannot see or access the Login screen in the Web Configurator. Make sure you are using the correct IP address. The default IP address of the NBG7815 in Standard Mode is 192.168.1.1. If the NBG7815 obtains a WAN IP address in the same subnet as the LAN IP address 192.168.1.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See Auto-IP Change on page 78 for more information. The default IP address of the NBG7815 in Bridge Mode is 192.168.1.2. If you changed the IP address (Section 11.4 on page 113), use the new IP address. If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I dont know the IP address of my NBG7815. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix B on page 152 for more information. Make sure your computer is in the same subnet as the NBG7815. (If you know that there are routers between your computer and the NBG7815, skip this step.) If there is a DHCP server on your network, make sure your computer is using a dynamic IP address. See Section 11.4 on page 113. If there is no DHCP server on your network, make sure your computers IP address is in the same subnet as the NBG7815. See Section 11.4 on page 113. Reset the device to its factory defaults, and try to access the NBG7815 with the default IP address. See Section 1.5 on page 13. suggestions. If the problem continues, contact the network administrator or vendor, or try one of the advanced NBG7815 Users Guide 141 Chapter 14 Troubleshooting Advanced Suggestions Try to access the NBG7815 using another service, such as Telnet. If you can access the NBG7815, check the remote management settings and firewall rules to find out why the NBG7815 does not respond to HTTP. If your computer is connected to the WAN port or is connected wirelessly, use a computer that is connected to a LAN/ETHERNET port. I can see the Login screen, but I cannot log in to the NBG7815. This can happen when you fail to log out properly from your last session. Try logging in again after 5 Disconnect and re-connect the power adaptor or cord to the NBG7815. If this does not work, you have to reset the device to its factory defaults. See Section 14.5 on page minutes. 143. 14.4 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. Go to Expert > Maintenance > Operation Mode. Check your System Operation Mode setting. If the NBG7815 is in Standard Mode, make sure the WAN port is connected to a broadband modem or router with Internet access. Your computer and the NBG7815 should be in the same subnet. If the NBG7815 is in Bridge Mode, make sure the WAN port is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address. If the NBG7815 is in Standard Mode, make sure you entered your ISP account information correctly in the wizard or the WAN screen. These fields are case-sensitive, so make sure [Caps Lock] is not on. If you are trying to access the Internet wirelessly, make sure the wireless settings in the wireless client are the same as the settings in the AP. Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. If the problem continues, contact your ISP. I cannot access the Internet anymore. I had access to the Internet (with the NBG7815), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.7 on page 14. Reboot the NBG7815. NBG7815 Users Guide 142 Chapter 14 Troubleshooting If the problem continues, contact your ISP. The Internet connection is slow or intermittent. There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.7 on page 14. If the NBG7815 is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. Check the signal strength. If the signal strength is low, try moving the NBG7815 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on). If the problem continues, contact the network administrator or vendor, or try one of the advanced Reboot the NBG7815. suggestions. Advanced Suggestion Check the settings for QoS. If it is disabled, you might consider activating it. 14.5 Resetting the NBG7815 to Its Factory Defaults If you reset the NBG7815, you lose all of the changes you have made. The NBG7815 re-loads its default settings. You have to make all of your changes again. You will lose all of your changes when you push the RESET button. To reset the NBG7815:

Make sure the power LED is on. Press the RESET button for one to four seconds to restart/reboot the NBG7815. Press the RESET button for longer than five seconds to set the NBG7815 back to its factory-default configurations. If the NBG7815 restarts automatically, wait for the NBG7815 to finish restarting, and log in to the Web Configurator. If the NBG7815 does not restart automatically, disconnect and reconnect the NBG7815s power. Then, follow the directions above again. 14.6 Wireless Connections I cannot access the NBG7815 or ping any computer from the WLAN. NBG7815 Users Guide 143 Chapter 14 Troubleshooting Make sure the wireless LAN is enabled on the NBG7815. Make sure the wireless adapter on your computer is working properly. Make sure the wireless adapter installed on your computer is IEEE 802.11 compatible and supports the same wireless standard as the NBG7815. Make sure your computer (with a wireless adapter installed) is within the transmission range of the NBG7815. and wireless security settings. Check that both the NBG7815 and the wireless adapter on your computer are using the same wireless Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the NBG7815. Make sure you allow the NBG7815 to be remotely accessed through the WLAN interface. Check your remote management settings. See the chapter on Wireless LAN in the Users Guide for more information. I cannot access the Web Configurator after I switched to Bridge Mode. When you change from Standard Mode to Bridge Mode, your computer must have an IP address in the range between 192.168.123.3 and 192.168.123.254. Refer to Appendix B on page 152 for instructions on how to change your computers IP address. What factors may cause intermittent or unstabled wireless connection? How can I solve this problem?

The following factors may cause interference:

Obstacles: walls, ceilings, furniture, and so on. Building Materials: metal doors, aluminum studs. Electrical devices: microwaves, monitors, electric motors, cordless phones, and other wireless devices. To optimize the speed and quality of your wireless connection, you can:

Move your wireless device closer to the AP if the signal strength is low. Reduce wireless interference that may be caused by other wireless networks or surrounding wireless electronics such as cordless phones. Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and the wireless client. APs if necessary. Reduce the number of wireless clients connecting to the same AP simultaneously, or add additional Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless client is sending or receiving a lot of information, it may have too many programs open that use the Internet. Position the antennas for best reception. If the AP is placed on a table or floor, point the antennas upwards. If the AP is placed at a high position, point the antennas downwards. Try pointing the antennas in different directions and check which provides the strongest signal to the wireless clients. NBG7815 Users Guide 144 Chapter 14 Troubleshooting 14.7 USB Device Problems I cannot access or see a USB device that is connected to the NBG7815. Disconnect the problematic USB device, then reconnect it to the NBG7815. Ensure that the USB device has power. Check your cable connections. Restart the NBG7815 by disconnecting the power and then reconnecting it. If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG7815 and try to connect to it again with your computer. If the problem persists, contact your vendor. What kind of USB devices do the NBG7815 support?

It is strongly recommended to use version 2.0 or higher USB storage devices (such as NTFS or FAT32 file system, USB hard drives) and/or USB devices. Other USB products are not guaranteed to function properly with the NBG7815. The NBG7815 do not support 3G/4G USB dongles. NBG7815 Users Guide 145 A P P E N D I X A Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. See https://www.zyxel.com/homepage.shtml and also https://www.zyxel.com/about_zyxel/zyxel_worldwide.shtml for the latest information. Please have the following information ready when you contact an office. Required Information Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan Zyxel Communications Corporation http://www.zyxel.com Asia China Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. https://www.zyxel.com/cn/zh/

India Zyxel Technology India Pvt Ltd https://www.zyxel.com/in/en/

Kazakhstan Zyxel Kazakhstan https://www.zyxel.kz NBG7815 Users Guide 146 Appendix A Customer Support Korea Zyxel Korea Corp. http://www.zyxel.kr Malaysia Zyxel Malaysia Sdn Bhd. http://www.zyxel.com.my Pakistan Zyxel Pakistan (Pvt.) Ltd. http://www.zyxel.com.pk Philippines Zyxel Philippines http://www.zyxel.com.ph Singapore Zyxel Singapore Pte Ltd. http://www.zyxel.com.sg Taiwan Zyxel Communications Corporation https://www.zyxel.com/tw/zh/

Thailand Zyxel Thailand Co., Ltd. https://www.zyxel.com/th/th/

Vietnam Belarus Zyxel BY Belgium https://www.zyxel.by Zyxel Communications B.V. https://www.zyxel.com/be/nl/

Zyxel Communications Corporation-Vietnam Office https://www.zyxel.com/vn/vi Europe NBG7815 Users Guide 147 Appendix A Customer Support https://www.zyxel.com/be/fr/

Bulgaria Zyxel https://www.zyxel.com/bg/bg/

Czech Republic Zyxel Communications Czech s.r.o https://www.zyxel.com/cz/cs/

Denmark Zyxel Communications A/S https://www.zyxel.com/dk/da/

Estonia Zyxel Estonia https://www.zyxel.com/ee/et/

Finland Zyxel Communications https://www.zyxel.com/fi/fi/

France Zyxel France https://www.zyxel.fr Germany Zyxel Deutschland GmbH https://www.zyxel.com/de/de/

Hungary Zyxel Hungary & SEE https://www.zyxel.com/hu/hu/

Italy Zyxel Communications Italy https://www.zyxel.com/it/it/

Latvia Zyxel Latvia https://www.zyxel.com/lv/lv/

NBG7815 Users Guide 148 Appendix A Customer Support Lithuania Zyxel Lithuania https://www.zyxel.com/lt/lt/

Netherlands Zyxel Benelux https://www.zyxel.com/nl/nl/

Norway Zyxel Communications https://www.zyxel.com/no/no/

Poland Zyxel Communications Poland https://www.zyxel.com/pl/pl/

Romania Zyxel Romania https://www.zyxel.com/ro/ro Russia Zyxel Russia Slovakia https://www.zyxel.com/ru/ru/

https://www.zyxel.com/sk/sk/

Spain Zyxel Communications ES Ltd. https://www.zyxel.com/es/es/

Sweden Zyxel Communications https://www.zyxel.com/se/sv/

Switzerland Studerus AG https://www.zyxel.ch/de https://www.zyxel.ch/fr Zyxel Communications Czech s.r.o. organizacna zlozka NBG7815 Users Guide 149 Appendix A Customer Support South America Turkey Zyxel Turkey A.S. https://www.zyxel.com/tr/tr/

UK Zyxel Communications UK Ltd. https://www.zyxel.com/uk/en/

Ukraine Zyxel Ukraine http://www.ua.zyxel.com Argentina Zyxel Communications Corporation https://www.zyxel.com/co/es/

Brazil Zyxel Communications Brasil Ltda. https://www.zyxel.com/br/pt/

Colombia Zyxel Communications Corporation https://www.zyxel.com/co/es/

Ecuador Zyxel Communications Corporation https://www.zyxel.com/co/es/

South America Zyxel Communications Corporation https://www.zyxel.com/co/es/

Middle East Israel Zyxel Communications Corporation http://il.zyxel.com/

NBG7815 Users Guide 150 Appendix A Customer Support Middle East Zyxel Communications Corporation https://www.zyxel.com/me/en/

Zyxel Communications, Inc. - North America Headquarters https://www.zyxel.com/us/en/

North America USA Oceania Africa Australia Zyxel Communications Corporation https://www.zyxel.com/au/en/

South Africa Nology (Pty) Ltd. https://www.zyxel.com/za/en/

NBG7815 Users Guide 151 A P P E N D I X B Setting Up Your Computers IP Address Note: Your specific NBG7815 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings on your computer in order for it to be able to communicate with the other devices on your network. Windows Vista/XP/2000, Mac OS 9/OS X, and all versions of UNIX/LINUX include the software components you need to use TCP/IP on your computer. If you manually assign IP information instead of using a dynamic IP, make sure that your networks computers have IP addresses that place them in the same subnet. In this appendix, you can set up an IP address for:

Windows 7 on page 152 Mac OS X: 10.3 and 10.4 on page 156 Mac OS X: 10.5 and 10.6 on page 159 Linux: Ubuntu 8 (GNOME) on page 162 Linux: openSUSE 10.3 (KDE) on page 166 Windows 7 This section shows screens from Windows 7 Enterprise. 1 Click Start > Control Panel. NBG7815 Users Guide 152 Appendix B Setting Up Your Computers IP Address 2 In the Control Panel, click View network status and tasks under the Network and Internet category. 3 Click Change adapter settings. 4 Double click Local Area Connection and then select Properties. NBG7815 Users Guide 153 Appendix B Setting Up Your Computers IP Address Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 5 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG7815 Users Guide 154 Appendix B Setting Up Your Computers IP Address 6 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. 7 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP. You may also have to enter a Preferred DNS server and an Alternate DNS server, if that information was provided. Click Advanced if you want to configure advanced settings for IP, DNS and WINS. 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. 2 3 The IP settings are displayed as follows. NBG7815 Users Guide 155 Appendix B Setting Up Your Computers IP Address Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences. 2 In the System Preferences window, click the Network icon. NBG7815 Users Guide 156 Appendix B Setting Up Your Computers IP Address 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. 4 For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. NBG7815 Users Guide 157 Appendix B Setting Up Your Computers IP Address 5 For statically assigned settings, do the following:

From the Configure IPv4 list, select Manually. In the IP Address field, type your IP address. In the Subnet Mask field, type your subnet mask. In the Router field, type the IP address of your device. 6 Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. NBG7815 Users Guide 158 Appendix B Setting Up Your Computers IP Address Figure 85 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. 1 Click Apple > System Preferences. 2 In System Preferences, click the Network icon. NBG7815 Users Guide 159 Appendix B Setting Up Your Computers IP Address 3 When the Network preferences pane opens, select Ethernet from the list of available connection types. 4 From the Configure list, select Using DHCP for dynamically assigned settings. NBG7815 Users Guide 160 Appendix B Setting Up Your Computers IP Address 5 For statically assigned settings, do the following:

From the Configure list, select Manually. In the IP Address field, enter your IP address. In the Subnet Mask field, enter your subnet mask. In the Router field, enter the IP address of your NBG7815. 6 Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. NBG7815 Users Guide 161 Appendix B Setting Up Your Computers IP Address Figure 86 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section shows you how to configure your computers TCP/IP settings in the GNU Object Model Environment (GNOME) using the Ubuntu 8 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration. The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME:

1 Click System > Administration > Network. 2 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. NBG7815 Users Guide 162 Appendix B Setting Up Your Computers IP Address 3 In the Authenticate window, enter your admin account name and password then click the Authenticate button. 4 In the Network Settings window, select the connection that you want to configure, then click Properties. NBG7815 Users Guide 163 Appendix B Setting Up Your Computers IP Address 5 The Properties dialog box opens. In the Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. 6 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. 7 If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. NBG7815 Users Guide 164 Appendix B Setting Up Your Computers IP Address 8 Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. NBG7815 Users Guide 165 Appendix B Setting Up Your Computers IP Address Figure 87 Ubuntu 8: Network Tools Linux: openSUSE 10.3 (KDE) This section shows you how to configure your computers TCP/IP settings in the K Desktop Environment

(KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration. The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE:

1 Click K Menu > Computer > Administrator Settings (YaST). NBG7815 Users Guide 166 Appendix B Setting Up Your Computers IP Address 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. 3 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. NBG7815 Users Guide 167 Appendix B Setting Up Your Computers IP Address 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. 5 When the Network Card Setup window opens, click the Address tab NBG7815 Users Guide 168 Appendix B Setting Up Your Computers IP Address Figure 88 openSUSE 10.3: Network Card Setup 6 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. 7 Click Next to save the changes and close the Network Card Setup window. 8 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. NBG7815 Users Guide 169 Appendix B Setting Up Your Computers IP Address 9 Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-

menu, select Show Connection Information. Figure 89 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. NBG7815 Users Guide 170 Appendix B Setting Up Your Computers IP Address Figure 90 openSUSE: Connection Status - KNetwork Manager NBG7815 Users Guide 171 A P P E N D I X C Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. Name: This is a short, descriptive name for the service. You can use this one or create a different one, Protocol: This is the type of IP protocol used by the service. If this is TCP/UDP, then the service uses the same port number with TCP and UDP. If this is USER-DEFINED, the Port(s) is the IP protocol number, not the port number. Port(s): This value depends on the Protocol. Please refer to RFC 1700 for further information about port if you like. numbers. Description: This is a brief explanation of the applications that use this service or the situations in which If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. If the Protocol is USER, this is the IP protocol number. this service is used. Table 50 Commonly Used Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 DNS TCP/UDP ESP (IPSEC_TUNNEL) User-Defined AIM/New-ICQ AUTH BGP BOOTP_CLIENT BOOTP_SERVER CU-SEEME FINGER FTP H.323 HTTP HTTPS TCP TCP TCP UDP UDP TCP UDP TCP TCP TCP TCP TCP TCP 5190 113 179 68 67 7648 24032 53 50 79 20 21 1720 80 443 The IPSEC AH (Authentication Header) tunneling protocol uses this service. AOLs Internet Messenger service. It is also used as a listening port by ICQ. Authentication protocol used by some servers. Border Gateway Protocol. DHCP Client. DHCP Server. A popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. NetMeeting uses this protocol. Hyper Text Transfer Protocol - a client/server protocol for the world wide web. HTTPS is a secured http session often used in e-

commerce. NBG7815 Users Guide 172 Appendix C Common Services Table 50 Commonly Used Services (continued) PROTOCOL User-Defined PORT(S) DESCRIPTION Internet Control Message Protocol is often used for diagnostic or routing purposes. 4000 This is a popular Internet chat program. IGMP (MULTICAST) User-Defined TCP/UDP This is another popular Internet chat program. MSN Messenger TCP NAME ICMP ICQ IKE IRC NEW-ICQ NEWS NFS NNTP PING POP3 PPTP RCMD REAL_AUDIO REXEC RLOGIN RTELNET RTSP SFTP SMTP User-Defined UDP UDP TCP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP/UDP PPTP_TUNNEL (GRE) User-Defined 47 1 2 500 6667 1863 5190 144 2049 119 1 110 1723 512 7070 514 513 107 554 115 25 161 162 1521 Internet Group Management Protocol is used when sending packets to a specific group of hosts. The Internet Key Exchange algorithm is used for key distribution and management. Microsoft Networks messenger service uses this protocol. An Internet chat program. A protocol for news groups. Network File System - NFS is a client/server distributed file service that provides transparent file sharing for network environments. Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable. Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). Point-to-Point Tunneling Protocol enables secure transfer of data over public networks. This is the control channel. PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data over public networks. This is the data channel. Remote Command Service. A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login. Remote Telnet. The Real Time Streaming (media control) Protocol

(RTSP) is a remote control for multimedia on the Internet. Simple File Transfer Protocol. Simple Mail Transfer Protocol is the message-

exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. Simple Network Management Program. Traps for use with the SNMP (RFC:1215). Structured Query Language is an interface to access data on many different types of database systems, including mainframes, midrange systems, UNIX systems and network servers. SNMP SNMP-TRAPS SQL-NET TCP/UDP TCP/UDP TCP SSH TCP/UDP 22 Secure Shell Remote Login Program. NBG7815 Users Guide 173 Appendix C Common Services Table 50 Commonly Used Services (continued) PROTOCOL PORT(S) DESCRIPTION NAME STRM WORKS SYSLOG TACACS TELNET TFTP UDP UDP UDP TCP UDP 1558 514 49 23 69 Stream Works Protocol. Syslog allows you to send system logs to a UNIX server. Login Host Protocol used for (Terminal Access Controller Access Control System). Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. NBG7815 Users Guide 174 A P P E N D I X D Legal Information Copyright Disclaimer Copyright 2020 by Zyxel Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved. Zyxel does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. Zyxel further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Regulatory Notice and Statement UNITED STATES of AMERICA The following information applies if you use the product within USA area. FCC EMC Statement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and

(2) This device must accept any interference received, including interference that may cause undesired operation. Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the device. This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this device does cause harmful interference to radio or television reception, which is found by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna Increase the separation between the devices Connect the equipment to an outlet other than the receivers Consult a dealer or an experienced radio/TV technician for assistance The following information applies if you use the product with RF function within USA area. FCC Radiation Exposure Statement This device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This transmitter must be at least 20 cm from the user and must not be co-located or operating in conjunction with any other antenna or Operation of this device is restricted to indoor use only, except for relevant user's manual mention that this device can be installed into the transmitter. external environment. EUROPEAN UNION The following information applies if you use the product within the European Union. NBG7815 Users Guide 175 Appendix D Legal Information Declaration of Conformity with Regard to EU Directive 2014/53/EU (Radio Equipment Directive, RED) Compliance information for wireless products relevant to the EU and other Countries following the EU Directive 2014/53/EU (RED). And this product may be used in all EU countries (and other countries following the EU Directive 2014/53/EU) without any limitation except for the countries mentioned below table:

In the majority of the EU and other European countries, the 5GHz bands have been made available for the use of wireless local area networks (LANs). Later in this document you will find an overview of countries in which additional restrictions or requirements or both are applicable. The requirements for any country may evolve. Zyxel recommends that you check with the local authorities for the latest status of their national regulations for the 5GHz wireless LANs. If this device for operation in the band 5150-5350 MHz, it is for indoor use only. This equipment should be installed and operated with a minimum distance of 20cm between the radio equipment and your body. The maximum RF power operating for each band as follows:

the band 2,400 to 2,483.5 MHz is 99.54 mW, the bands 5,150 MHz to 5,350 MHz is 175.79 mW, the 5,470 MHz to 5,725 MHz is 874.98 mW.

(Bulgarian) Zyxel , 2014/53/C. National Restrictions The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http://www.bipt.be for more details. Draadloze verbindingen voor buitengebruik en met een reikwijdte van meer dan 300 meter dienen aangemeld te worden bij het Belgisch Instituut voor postdiensten en telecommunicatie (BIPT). Zie http://www.bipt.be voor meer gegevens. Les liaisons sans fil pour une utilisation en extrieur dune distance suprieure 300 mtres doivent tre notifies lInstitut Belge des services Postaux et des Tlcommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples dtails. Por medio de la presente Zyxel declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 2014/53/UE.. Zyxel tmto prohlauje, e tento zazen je ve shod se zkladnmi poadavky a dalmi pslunmi ustanovenmi smrnice 2014/53/EU. Dansk (Danish) Undertegnede Zyxel erklrer herved, at flgende udstyr udstyr overholder de vsentlige krav og vrige relevante krav i direktiv 2014/53/EU. National Restrictions In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage. I Danmark m frekvensbndet 5150 - 5350 ogs anvendes udendrs. Hiermit erklrt Zyxel, dass sich das Gert Ausstattung in bereinstimmung mit den grundlegenden Anforderungen und den brigen einschlgigen Bestimmungen der Richtlinie 2014/53/EU befindet. Kesolevaga kinnitab Zyxel seadme seadmed vastavust direktiivi 2014/53/EL phinuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele stetele. Zyxel 2014/53/EE. Hereby, Zyxel declares that this device is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU. Par la prsente Zyxel dclare que l'appareil quipements est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 2014/53/UE. Zyxel ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 2014/53/UE. Espaol

(Spanish) etina

(Czech) Deutsch

(German) Eesti keel

(Estonian)

(Greek) English Franais

(French) Hrvatski

(Croatian) slenska

(Icelandic) Hr me lsir, Zyxel v yfir a essi bnaur er samrmi vi grunnkrfur og nnur vieigandi kvi tilskipunar 2014/53/

UE. Italiano (Italian) Con la presente Zyxel dichiara che questo attrezzatura conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 2014/53/UE. National Restrictions This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a general authorization. Please check http://www.sviluppoeconomico.gov.it/ for more details. Questo prodotto conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una Autorizzazione Generale. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli. Ar o Zyxel deklar, ka iekrtas atbilst Direktvas 2014/53/ES btiskajm prasbm un citiem ar to saisttajiem noteikumiem. Latvieu valoda

(Latvian) National Restrictions The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please 2.4 GHz frekvenu joslas izmantoanai rpus telpm nepiecieama atauja no Elektronisko sakaru direkcijas. Vairk check http://www.esd.lv for more details. informcijas: http://www.esd.lv. Lietuvi kalba

(Lithuanian) iuo Zyxel deklaruoja, kad is ranga atitinka esminius reikalavimus ir kitas 2014/53/ES Direktyvos nuostatas. NBG7815 Users Guide 176 Appendix D Legal Information Magyar

(Hungarian) Alulrott, Zyxel nyilatkozom, hogy a berendezs megfelel a vonatkoz alapvet kvetelmnyeknek s az 2014/53/EU irnyelv egyb elrsainak. Malti (Maltese) Hawnhekk, Zyxel, jiddikjara li dan tagmir jikkonforma mal-tiijiet essenzjali u ma provvedimenti orajn relevanti li hemm fid-Dirrettiva 2014/53/UE. Nederlands

(Dutch) Hierbij verklaart Zyxel dat het toestel uitrusting in overeenstemming is met de essentile eisen en de andere relevante bepalingen van richtlijn 2014/53/EU. Polski (Polish) Niniejszym Zyxel owiadcza, e sprzt jest zgodny z zasadniczymi wymogami oraz pozostaymi stosownymi postanowieniami Dyrektywy 2014/53/UE. Portugus

(Portuguese) Zyxel declara que este equipamento est conforme com os requisitos essenciais e outras disposies da Directiva 2014/53/

UE. Prin prezenta, Zyxel declar c acest echipament este n conformitate cu cerinele eseniale i alte prevederi relevante ale Directivei 2014/53/UE. Zyxel tmto vyhlasuje, e zariadenia spa zkladn poiadavky a vetky prslun ustanovenia Smernice 2014/53/E. Zyxel izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi doloili direktive 2014/53/EU. Romn

(Romanian) Slovenina

(Slovak) Slovenina

(Slovene) Suomi (Finnish) Zyxel vakuuttaa tten ett laitteet tyyppinen laite on direktiivin 2014/53/EU oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen. Svenska

(Swedish) Hrmed intygar Zyxel att denna utrustning str I verensstmmelse med de vsentliga egenskapskrav och vriga relevanta bestmmelser som framgr av direktiv 2014/53/EU. Norsk

(Norwegian) Erklrer herved Zyxel at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I direktiv 2014/53/EU. Notes:

Although Norway, Switzerland and Liechtenstein are not EU member states, the EU Directive 2014/53/EU has also been implemented in those The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used (specified in dBi) to the output power available at the connector (specified in dBm). countries. List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Czech Republic Austria Belgium Bulgaria Croatia Cyprus Denmark Estonia Finland France Germany Greece Hungary Iceland Ireland Italy Latvia AT BE BG HR CY CZ DK EE FI FR DE GR HU IS IE IT LV Liechtenstein Lithuania Luxembourg Malta Netherlands Norway Poland Portugal Romania Serbia Slovakia Slovenia Spain Switzerland Sweden Turkey United Kingdom LI LT LU MT NL NO PL PT RO RS SK SI ES CH SE TR GB Safety Warnings Do not use this product near water, for example, in a wet basement or near a swimming pool. Do not expose your device to dampness, dust or corrosive liquids. Do not store things on the device. Do not obstruct the device ventilation slots as insufficient airflow may harm your device. For example, do not place the device in an enclosed space such as a box or on a very soft surface such as a bed or sofa. Do not install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. Connect ONLY suitable accessories to the device. Do not open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. NBG7815 Users Guide 177 Environment Statement Appendix D Legal Information Only qualified service personnel should service or disassemble this device. Please contact your vendor for further information. Make sure to connect the cables to the correct ports. Place connecting cables carefully so that no one will step on them or stumble over them. Always disconnect all cables from this device before servicing or disassembling. Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to Do not allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor a power outlet. or cord. Please use the provided or designated connection cables/power cables/ adaptors. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). If the power adaptor or cord is damaged, it might cause electrocution. Remove it from the device and the power source, repairing the power adapter or cord is prohibited. Contact your local vendor to order a new one. Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. The following warning statements apply, where the disconnect device is not incorporated in the device or where the plug on the power supply cord is intended to serve as the disconnect device,

- For permanently connected devices, a readily accessible disconnect device shall be incorporated external to the device;

- For pluggable devices, the socket-outlet shall be installed near the device and shall be easily accessible. ErP (Energy-related Products) Zyxel products put on the EU market in compliance with the requirement of the European Parliament and the Council published Directive 2009/

125/EC establishing a framework for the setting of ecodesign requirements for energy-related products (recast), so called as "ErP Directive

(Energy-related Products directive) as well as ecodesign requirement laid down in applicable implementing measures, power consumption has satisfied regulation requirements which are:

Network standby power consumption < 8W, and/or Off mode power consumption < 0.5W, and/or Standby mode power consumption < 0.5W.

(Wireless settings, please refer to the chapter about wireless settings for more detail.) European Union - Disposal and Recycling Information The symbol below means that according to local regulations your product and/or its battery shall be disposed of separately from domestic waste. If this product is end of life, take it to a recycling station designated by local authorities. At the time of disposal, the separate collection of your product and/or its battery will help save natural resources and ensure that the environment is sustainable development. Die folgende Symbol bedeutet, dass Ihr Produkt und/oder seine Batterie gem den rtlichen Bestimmungen getrennt vom Hausmll entsorgt werden muss. Wenden Sie sich an eine Recyclingstation, wenn dieses Produkt das Ende seiner Lebensdauer erreicht hat. Zum Zeitpunkt der Entsorgung wird die getrennte Sammlung von Produkt und/oder seiner Batterie dazu beitragen, natrliche Ressourcen zu sparen und die Umwelt und die menschliche Gesundheit zu schtzen. El smbolo de abajo indica que segn las regulaciones locales, su producto y/o su batera debern depositarse como basura separada de la domstica. Cuando este producto alcance el final de su vida til, llvelo a un punto limpio. Cuando llegue el momento de desechar el producto, la recogida por separado ste y/o su batera ayudar a salvar los recursos naturales y a proteger la salud humana y medioambiental. Le symbole ci-dessous signifie que selon les rglementations locales votre produit et/ou sa batterie doivent tre limins sparment des ordures mnagres. Lorsque ce produit atteint sa fin de vie, amenez-le un centre de recyclage. Au moment de la mise au rebut, la collecte spare de votre produit et/ou de sa batterie aidera conomiser les ressources naturelles et protger l'environnement et la sant humaine. Il simbolo sotto significa che secondo i regolamenti locali il vostro prodotto e/o batteria deve essere smaltito separatamente dai rifiuti domestici. Quando questo prodotto raggiunge la fine della vita di servizio portarlo a una stazione di riciclaggio. Al momento dello smaltimento, la raccolta separata del vostro prodotto e/o della sua batteria aiuta a risparmiare risorse naturali e a proteggere l'ambiente e la salute umana. Symbolen innebr att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat frn hushllsavfallet. Nr den hr produkten nr slutet av sin livslngd ska du ta den till en tervinningsstation. Vid tiden fr kasseringen bidrar du till en bttre milj och mnsklig hlsa genom att gra dig av med den p ett tervinningsstlle. NBG7815 Users Guide 178 Appendix D Legal Information

( : / 110V AC 230V AC)

About the Symbols Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NBG7815 Users Guide 179 Appendix D Legal Information Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC):

AC is an electric current in which the flow of electric charge periodically reverses direction. DC if the unidirectional flow or movement of electric charge carriers. A wiring terminal intended for connection of a Protective Earthing Conductor. Direct current (DC):

Earth; ground:

Class II equipment:

The method of protection against electric shock in the case of class II equipment is either double insulation or reinforced insulation. Viewing Certifications Zyxel Limited Warranty Go to http://www.zyxel.com to view this products documentation and certifications. Zyxel warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized Zyxel local distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, Zyxel will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of Zyxel. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. Zyxel shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Open Source Licenses Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. To obtain the source code covered under those Licenses, please contact your vendor or Zyxel Technical Support at support@zyxel.com. NBG7815 Users Guide 180 Index Index Application Layer Gateway, see ALG encryption 103 ESSID 144 A B C Address Assignment 77 ALG 90 and NAT 90 and security policy 90 AP 11 AP Mode menu 42 status screen 42 AP+Bridge 11 Bridge/Repeater 11 certifications 177 viewing 180 channel 102 contact information customer support 146 copyright 175 customer support 146 D DDNS service providers 126, 128 DHCP server 113 Digital Living Network Alliance 57 disclaimer 175 DLNA 57 indexing 74 overview 73 rescan 74 DLNA-compliant client 57 DNS Server 77 Domain Name System. See DNS. DynDNS 126, 128 DynDNS see also DDNS 126, 128 E F G file sharing access right 70, 72 bandwidth 72 FTP 70 Samba 32, 34, 68 user account 69, 71 Windows Explorer 32, 34, 68 work group 32, 34, 68 Firewall firewall guidelines 123 ICMP packets 126 stateful inspection 122 FTP ALG 90 General wireless LAN screen 105 Guest WLAN 103 Guest WLAN Bandwidth 104 NBG7815 Users Guide 181 H.323 ALG 90 IP Address 115 H I L M LAN 112 LAN overview 112 LAN setup 112 local (user) database 103 Local Area Network 112 MAC 107 MAC address 77, 102 cloning 77 MAC address filter 102 MAC address filtering 107 MAC filter 107 managing the device MBSSID 11 Media access control 107 media client 73 media file 73, 74 type 74 media server overview 73 meida file play 73 mode 11 Index and ALG 90 OpenVPN Client 66 OpenVPN Server 62 operating mode 11 Point-to-Point Protocol over Ethernet 81 PPPoE 81 dial-up connection Quality of Service (QoS) 109 N NAT O P Q R S Samba 58 Scheduling 111 security policy and ALG 90 Service Set 106 Service Set IDentification 106 Service Set IDentity. See SSID. NBG7815 Users Guide 182 good habits 12 using the web configurator. See web configurator. using the WPS. See WPS. RADIUS server 103 Reset button 13 Reset the device 13 Router Mode status screen 37 U V W SIP ALG 90 SSID 102, 106 stateful inspection firewall 122 Status 37 Subnet Mask 115 System General Setup 132 System restart 136 user authentication 103 local (user) database 103 RADIUS server 103 VoIP pass through see also ALG WAN (Wide Area Network) 76 WAN MAC address 77 warranty 180 note 180 Web Configurator how to access 27 web configurator 12 wireless channel 144 wireless LAN 144 wireless LAN scheduling 111 Wireless network basic guidelines 101 channel 102 encryption 103 example 101 MAC address filter 102 overview 101 security 102 SSID 102 Wireless security 102 Index overview 102 type 102 wireless security 144 Wireless tutorial 43 WLAN button 13 work group 57 name 57 Windows 57 WPS 12 NBG7815 Users Guide 183

Zyxel Communications Corporation No.2 Industry East RD. IX, Hsinchu Science Park, Hsinchu 30075, Taiwan, R.O.C Date: March 10, 2020 Subject: Ad Hoc Mode Function Declaration FCC ID: I88NBG7815 To Whom it may concern, We, Zyxel Communications Corporation declare that the device does not support any non-US channels and country code selection in all the operational mode(s). Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw

Date: March 27, 2020 Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Rd Columbia MD 21046-1609 Subject: Request for confidentiality FCC ID: I88NBG7815 To whom it may concern:

Short-term confidentiality Internal Photographs External Photographs User's manual Test Set up photo Permanent confidentiality Block Diagram Schematics Operational Description Bill of Materials Tune up procedure Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw Pursuant to DA 04-1705 of the Commissions pubic notice, in order to comply with the marketing regulations in 47CFR 2.803 and the importation rules in 47 CFR 2.1204, while ensuring that business sensitive information remains confidential until the actual marketing of newly authorized devices. We are requesting the commission to grant short-term confidentiality request on the following attachments until 180 days after issue date. Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, the Applicant Hereby requests confidential treatment of information accompanying this Application As outlined below:

The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these materials may be harmful to the applicant and provide unjustified benefits to its competitors. The applicant understands that pursuant to Section 0.457 of the Rules, disclosure of this application and all accompanying documentation will not be made before the date of the Grant for this application. Should you require any further information, please contact the undersigned. Thank you for your consideration in this matter.

Zyxel Communications Corporation No.2 Industry East RD. IX, Hsinchu Science Park, Hsinchu 30075, Taiwan, R.O.C Date: 2020/3/24 Federal Communications Commission 7435 Oakland Mills Rd Columbia MD 21046-1609 Subject: Product Certification Representative Authorization Letter FCC ID: I88NBG7815 Product name: AX6000 12-Stream Multi-Gigabit WiFi 6 Router To whom it may concern:

We the undersigned, hereby authorize following person to act as our agent in the preparation of an application for equipment authorization of model NBG7815 to the FCC Rules and Regulations. Address

: No.3-1, Lane 6, Wen San 3rd St. Kwei Shan Dist., TaoYuan City 333, Taiwan (R.O.C.) International Certification Corp. Name

: Gary Chang Job Title

: Manager e-mail

: garychang@icertifi.com.tw Webs We further certifies that neither the applicant nor any party to this application, as defined in 47 CFR Ch. 1.2002(b), is subject to a denial to Federal benefits, that include FCC benefits, pursuant to section 5301 of the Anti-Drug Abuse Act of 1998, 21 U.S.C. 862. authorized agent. This appointment also includes the authority to complete FCC Form 731 on our behalf and sign the application as an Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw