Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the NBG6617 and access the Web Configurator wizards. It contains information on setting up your network and configuring for Internet access. • More Information Go to support.zyxel.com to find other information on the NBG6617...
1.1 Overview ............................10 1.2 Applications ............................10 1.3 Ways to Manage the NBG6617 ......................10 1.4 Good Habits for Managing the NBG6617 ..................11 1.5 Resetting the NBG6617 ........................11 1.5.1 How to Use the RESET Button ....................11 1.6 The WPS Button ..........................11 1.7 LEDs ..............................12...
Page 5
8.2 Set Up a Wireless Network Using WPS ....................49 8.2.1 Push Button Configuration (PBC) ....................49 8.2.2 PIN Configuration ........................50 8.3 Connect to NBG6617 Wireless Network without WPS ..............51 8.3.1 Configure Your Notebook ......................53 8.4 Using Guest SSIDs on the NBG6617 ....................55...
Page 7
14.1.1 What You Can Do ........................129 14.1.2 What You Need To Know .....................129 14.2 IPv4 Firewall Screen ........................130 14.3 IPv6 Firewall Screen ........................132 Chapter 15 Maintenance ............................135 15.1 Overview ............................135 15.2 What You Can Do .........................135 15.3 General Screen ..........................135 NBG6617 User’s Guide...
Page 8
16.2 Power, Hardware Connections, and LEDs ..................149 16.3 NBG6617 Access and Login ......................150 16.4 Internet Access ..........................151 16.5 Resetting the NBG6617 to Its Factory Defaults ................153 16.6 Wireless Connections ........................153 16.7 USB Device Problems ........................155 Appendix A Customer Support ......................156 Appendix B Setting Up Your Computer’s IP Address ..............162...
A range of services such as a firewall and content filtering are also available for secure Internet computing. There is one USB 3.0 port on the side panel of your NBG6617. You can connect USB (version 3.0 or lower) memory sticks, USB hard drives, or USB devices for file sharing. The NBG6617 automatically detects the USB devices.
If you forget your password, you will have to reset the NBG6617 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NBG6617.
Press the WPS button for more than three seconds and release it. Press the WPS button on another WPS-enabled device within range of the NBG6617. Note: You must activate WPS in the NBG6617 and in another wireless device within two minutes of each other.
USB device. There is no USB device connected to the NBG6617. Green WPS is enabled. Blinking The NBG6617 is negotiating a WPS connection with a wireless client. WPS is disabled. Figure 2 Rear Panel Power Input LAN Ports 1-4...
Page 14
Make sure the screws are fastened well enough to hold the weight of the NBG6617 with the connection cables. Align the holes on the back of the NBG6617 with the screws on the wall. Hang the NBG6617 on the screws.
The NBG6617 is in router mode by default. Type "http://192.168.1.1" as the website address. If the NBG6617 obtains a WAN IP address or a DNS server IP address in the same subnet as the LAN IP address 192.168.1.1, the default LAN IP address will be changed to 10.0.0.1 automatically. See Auto-IP Change on page 64 for more information.
LABEL DESCRIPTION Please enter the Type "1234" (default) as the password. Click Login. device’s administrator password 2.2.2 Change Default Password Screen You should see a screen asking you to change your password (highly recommended) as shown next. NBG6617 User’s Guide...
Page 17
Note: The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes; go to Chapter 15 on page 135 to change this). Simply log back into the NBG6617 if this happens. NBG6617 User’s Guide...
Note: The eaZy 123 wizard appears automatically when the NBG6617 is accessed for the first time or when you reset the NBG6617 to its default factory settings. If you didn’t configure the wizard screens, you will be redirected to the login page when you connect to the Internet.
Page 19
Chapter 3 eaZy 123 Wizard Figure 6 Unable to continue: WAN If you do not press the Wi-Fi button located on the NBG6617’s rear panel, the following screen opens. Figure 7 Unable to continue: Wi-Fi Note: If you get an error message, check your hardware connections. Make sure your Internet connection is up and running.
Figure 9 eaZy 123 Setup 3.3 Internet Type The NBG6617 offers three WAN selection types. They are Automatic - DHCP, PPPoE or Static. Configure the Internet type settings on your NBG6617 in the first part. The following screen depends on your Internet connection type. Enter the details provided by your Internet Service Provider (ISP) in the fields (if any).
By implementing PPPoE directly on the NBG6617 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG6617 does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Note: If you get an error message, make sure you have entered the correct information provided by your ISP. 3.3.3 WAN Selection Type: Static Choose Static as the WAN Selection Type when the WAN port is used as a regular Ethernet. Click Next. NBG6617 User’s Guide...
WAN Selection Type. Contact your ISP if you are not sure of your Internet Connection type. 3.4 Wireless Network Configure the wireless network settings on your NBG6617 in the second part. The default wireless security setting is WPA2-PSK. NBG6617 User’s Guide...
Page 24
Enter a descriptive name for the wireless LAN. (SSID) Note: The setting here applies to 2.4 GHz wireless radios. If you change this field on the NBG6617, make sure all wireless stations use the same SSID in order to access the network. Wireless Type from 8 to 63 case-sensitive ASCII characters.
Page 25
User’s Guide for more suggestions. Figure 15 Congratulations You can click the My ZyXEL Cloud Service button to go to https://mycloud.zyxel.com, where you can create an account and register your NBG6617. At the time of writing, you can have free DDNS NBG6617 User’s Guide...
Page 26
Chapter 3 eaZy 123 Wizard service to get a domain name mapped to the NBG6617’s dynamic IP address. With DDNS, you can use the domain name to remotely access the NBG6617’s Web Configurator through the Internet. You have successfully set up your NBG6617 to operate on your network and access the Internet.
This refers to the operating mode of the NBG6617, which can act as a: • Router: This is the default device mode of the NBG6617. Use this mode to connect the local network to another network, like the Internet. Go to Section 6.2 on page 36...
The Web Configurator is set to Easy Mode by default. You can configure several key features of the NBG6617 in this mode. This mode is useful to users who are not fully familiar with some features that are usually intended for network administrators.
This icon only displays when new firmware is released. Firmware Notification Wizard Click this icon to open the eaZy123 wizard for the NBG6617. Logout Click this to end the Web Configurator session. Figure 18 Easy Mode: Navigation Panel: Firmware Notification 5.5 Network Map...
Page 30
Chapter 5 Easy Mode Figure 19 Easy Mode: Network Map This screen displays whether the NBG6617 connects to the Internet. It also shows the devices connected to the NBG6617, including those connecting wirelessly. Click the Refresh button to refresh the network map.
Chapter 5 Easy Mode Figure 21 Easy Mode: Network Map: Rename / Icon Click Apply to save your changes back to the NBG6617. Click Cancel to reload the previous configuration for this screen. 5.6 Control Panel The features configurable in Easy Mode are shown in the Control Panel.
Section 5.6.4 on page 34 to see this screen. 5.6.1 Wi-Fi Use this screen to configure security for the NBG6617's default wireless LAN. You can enter the SSID and select the wireless security mode in the following screen. See Chapter 14 on page 129 how to configure wireless network.
5.6.2 Guest Wi-Fi This screen allows you to configure guest wireless network settings on the NBG6617. Users connected to the guest wireless network can access the Internet via the NBG6617, but not other networks connected to the NBG6617. See Chapter 11 on page 80 for how to enable and set up the guest wireless network.
Apply Click Apply to save your changes back to the NBG6617. 5.6.3 Parental Control Use this screen to view the parental control rules configured on the NBG6617. See Section 13.2 on page 106 for how to enable and configure parental control rules.
Page 35
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. User Name This shows the name of the user to which this rule applies. Notification This shows the e-mail address to which the notification is sent. NBG6617 User’s Guide...
Router Mode 6.1 Overview The NBG6617 is set to router mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the NBG6617 connects the local network (LAN1 ~ LAN4) to the Internet.
Page 37
LABEL DESCRIPTION Device Information Item This column shows the type of data the NBG6617 is recording. Data This column shows the actual data recorded by the NBG6617. Host Name This is the System Name you enter in the Maintenance > General screen. It is for identification purposes.
Page 38
This displays what percentage of the NBG6617’s processing ability is currently used. When this percentage is close to 100%, the NBG6617 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Printer Information Printer Name The NBG6617 can act as a print server and allows you to share a USB printer on your LAN. This displays the name of the printer connected to the NBG6617's USB port. Note: You need to manually install the printer driver in your computer and add the printer to your printer list.
Page 40
Use this screen to schedule the times the Wireless LAN is enabled. LAN IP Use this screen to configure LAN IP address and subnet mask. Use this screen to configure the IPv6 address for the NBG6617 on the LAN. Use this screen to enable the NBG6617’s DHCP server. Static DHCP This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.
Page 41
Use this screen to enable Wake on LAN to remotely turn on a device on the local network. Use this screen to view the list of activities recorded by your NBG6617. Operation Mode This screen allows you to select whether your device acts as a router, or an access point.
Access Point Mode 7.1 Overview Use your NBG6617 as an access point (AP) if you already have a router or gateway on your network. In this mode your NBG6617 bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example.
Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. To use your NBG6617 as an access point, go to Expert Mode > Maintenance > Operation Mode and select Access Point Mode.
Chapter 15 on page 135 for information on configuring your maintenance settings. 7.4 AP Mode Status Screen Click Expert Mode > Status to open the Status screen. Figure 33 Expert Mode: Status > System Status: Access Point Mode NBG6617 User’s Guide...
Page 45
This displays what percentage of the NBG6617’s processing ability is currently used. When this percentage is close to 100%, the NBG6617 is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Printer Information Printer Name The NBG6617 can act as a print server and allows you to share a USB printer on your LAN. This displays the name of the printer connected to the NBG6617's USB port. Note: You need to manually install the printer driver in your computer and add the printer to your printer list.
Page 47
Also when you select this, you cannot enter an IP address for your NBG6617 in the field below. Static IP Address Click this if you want to specify the IP address of your NBG6617. Or if your ISP or network administrator gave you a static IP address to access the network or the Internet.
Page 48
Chapter 7 Access Point Mode Table 18 LAN > LAN IP (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen. NBG6617 User’s Guide...
8.2.1 Push Button Configuration (PBC) Make sure that your NBG6617 is turned on. Make sure the WIFI button (at the rear panel of the NBG6617) is pushed in, and that the device is placed within range of your notebook.
Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Enter the PIN number to the PIN field in the Expert > Wireless > WPS screen on the NBG6617. NBG6617 User’s Guide...
This may take up to two minutes. Then the wireless client is able to communicate with the NBG6617 securely. The following figure shows you the example to set up wireless network and security on NBG6617 and wireless client (ex. NWD210N in this example) by using PIN method.
Page 52
Section 2.2 on page 15). Make sure the WIFI switch (at the rear panel of the NBG6617) is set to ON. Open the Expert > Wireless > Wireless screen in the AP’s Web Configurator. Confirm that the wireless LAN is enabled on the NBG6617.
Windows built-in utility (Windows Zero Configuration (WZC)) to connect to the wireless netwok. The NBG6617 supports IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n and IEEE 802.11ac wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 54
Chapter 8 Tutorials Select SSID_Example3 and click Connect. Type the security key in the following screen. Click Connect. NBG6617 User’s Guide...
Chapter 8 Tutorials Check the status of your wireless connection in the screen below. If the wireless client keeps trying to connect to or acquiring an IP address from the NBG6617, make sure you entered the correct security key. If the connection has limited or no connectivity, make sure the DHCP server is enabled on the NBG6617.
Connect your computer to the LAN port of the NBG6617 using an Ethernet cable. The default IP address of the NBG6617 in router mode is “192.168.1.1”. In this case, your computer must have an IP address in the range between “192.168.1.2” and “192.168.1.254”.
Page 57
Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker to allow wireless clients in the same wireless network to communicate with each other. Click Apply. 10 Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP. NBG6617 User’s Guide...
Page 58
13 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Guest to allow wireless clients in the same wireless network to communicate with each other. Select Enable Guest WLAN to allow clients to access the Internet only. Click Apply. NBG6617 User’s Guide...
60). 9.2 Client Tables Screen You can configure the NBG6617’s LAN as a DHCP server or disable it. When configured as a server, the NBG6617 assigns IP addresses to the clients. If DHCP service is disabled, you must have another DHCP server on that network, or else the computer must be manually configured.
Page 61
Reserve Select this if you want to reserve the IP address for this specific MAC address. Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen. NBG6617 User’s Guide...
IP, DNS and WAN MAC addresses (Section 10.4 on page 65). • • Use the NAT > General screen to enable NAT, set a default server and change your NBG6617’s port forwarding settings (Section 10.5.1 on page 74).
(and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the NBG6617, which makes it accessible from an outside network. It is used by the NBG6617 to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the NBG6617 tries to access the Internet.
Page 64
A and D. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The NBG6617 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
Auto-IP-Change to become active. • The NBG6617 is set to receive a dynamic WAN IP address. 10.4 Internet Connection Screen Use this screen to change your NBG6617’s Internet access settings. Click Expert Mode > WAN > Internet Connection. 10.4.1 IPoE Encapsulation This screen displays when you select IPoE encapsulation.
Page 66
Chapter 10 WAN Figure 42 Expert Mode > WAN > Internet Connection: IPoE Encapsulation (IPv4 Only) NBG6617 User’s Guide...
Page 67
IPv6 Tunneling Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the NBG6617 has an IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Page 68
Enter the subnet mask number (1~32) for the IPv4 network. 6to4 The NBG6617 should get a public IPv4 address for the WAN. The NBG6617 adds an IPv4 IP header to an IPv6 packet when transmitting the packet to the Internet. In reverse, the NBG6617 removes the IPv4 header from an IPv6 packet when receiving it from the Internet.
Page 69
Auto-Subnet Configuration Enable Auto-IP- Select this option to have the NBG6617 change its LAN IP address to 10.0.0.1 or Change Mode 192.168.1.1 accordingly when the NBG6617 gets a dynamic WAN IP address in the same subnet as the LAN IP address.
By implementing PPPoE directly on the NBG6617 (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the NBG6617 does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 71
Chapter 10 WAN This screen displays when you select PPPoE encapsulation. Figure 43 Network > WAN > Internet Connection: PPPoE Encapsulation (IPv4 Only) NBG6617 User’s Guide...
Page 72
IPv6 Tunneling Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the NBG6617 has an IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Page 73
Enter the subnet mask number (1~32) for the IPv4 network. 6to4 The NBG6617 should get a public IPv4 address for the WAN. The NBG6617 adds an IPv4 IP header to an IPv6 packet when transmitting the packet to the Internet. In reverse, the NBG6617 removes the IPv4 header from an IPv6 packet when receiving it from the Internet.
Auto-Subnet Configuration Enable Auto-IP- Select this option to have the NBG6617 change its LAN IP address to 10.0.0.1 or Change Mode 192.168.1.1 accordingly when the NBG6617 gets a dynamic WAN IP address in the same subnet as the LAN IP address.
Page 75
This shows the port number(s) that identifies the service if you select a pre-defined service. If you select User define in the Name field, enter the port number(s) manually. Name This field displays a name to identify this rule. NBG6617 User’s Guide...
Type a port number or the ending port number in a range of port numbers. Trigger Port The trigger port is a port (or a range of ports) that causes (or triggers) the NBG6617 to record the IP address of the LAN computer that sent the traffic to a server on the WAN.
The ALG feature is only needed for traffic that goes through the NBG6617’s NAT. To change your NBG6617’s ALGs and VPN pass-through settings, click Expert Mode > WAN > NAT > Passthrough. The screen appears as shown.
PPTP VPN account. If PPTP is disabled, then when a client sends a request to a VPN server, the server will reply to the NBG6617 and the NBG6617 will drop the request. When PPTP is enabled, the NBG6617 will forward the reply from the VPN server to the client that initiated the request, and the connection will establish successfully.
Page 79
(","). Username Enter your user name. Password Enter the password assigned to you. Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to begin configuring this screen afresh. NBG6617 User’s Guide...
This chapter discusses how to configure the wireless network settings in your NBG6617. The NBG6617 is able to function both 2.4GHz and 5GHz network at the same time. You can have different wireless and wireless security settings for 2.4GHz and 5GHz wireless LANs. Click Expert Mode >...
NBG6617 and the wireless clients, and make other basic configuration changes (Section 11.2 on page 85). • Use the Guest Wireless screen to set up multiple wireless networks on your NBG6617 (Section 11.4 on page 91). • Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from connecting to the NBG6617 (Section 11.5 on page...
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG6617 User’s Guide...
Page 83
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG6617 (Z), but not other networks connected to the Z. In the following figure, a guest user can access the Internet from the guest wireless network A via Z but not the home or company network Note: The home or company network N and Guest WLAN network are independent networks.
Page 84
Depending on the devices in your network, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification NBG6617 User’s Guide...
Section 8.2 on page 11.2 Wireless Screen Use this screen to configure the SSID and wireless security of the NBG6617’s default wireless LAN. Note: If you are configuring the NBG6617 from a computer connected to the wireless LAN and you change the NBG6617’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm.
Page 86
If you set Band to 2.4GHz, you can select from the following: • 802.11b: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the NBG6617. In this mode, all wireless devices can only transmit at the data rates supported by IEEE 802.11b. •...
Select No Security to allow wireless clients to communicate with the access points without any data encryption. Note: If you do not enable any wireless security on your NBG6617, your network is accessible to any wireless networking device that is within range.
DESCRIPTION Security Mode Choose No Security from the drop-down list box. Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen. 11.3.2 WPA-PSK/WPA2-PSK Select WPA-PSK or WPA2-PSK from the Security Mode list.
Timer all clients. The default is 3600 seconds (60 minutes). Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen. 11.3.3 WPA/WPA2 Select WPA or WPA2 from the Security Mode list.
Page 90
Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the NBG6617 even when the NBG6617 is using WPA2-PSK or WPA2. Group Key Update The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/...
This screen allows you to enable and configure multiple guest wireless network settings on the NBG6617. You can configure up to four SSIDs to enable multiple BSSs (Basic Service Sets) on the NBG6617. This allows you to use one access point to provide several BSSs simultaneously. You can then assign varying security types to different SSIDs.
This shows whether the SSID profile is active (a yellow bulb) or not (a gray bulb). SSID An SSID profile is the set of parameters relating to one of the NBG6617’s BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated.
Click Cancel to reload the previous configuration for this screen. 11.5 MAC Filter Screen The MAC filter screen allows you to configure the NBG6617 to give exclusive access to devices (Allow) or exclude devices from accessing the NBG6617 (Deny). Every Ethernet device has a unique MAC (Media Access Control) address.
Select Allow to permit access to the NBG6617, MAC addresses not listed will be denied access to the NBG6617. Select Deny to block access to the NBG6617, MAC addresses not listed will be allowed to access the NBG6617. MAC Filter Summary (Max Limit : 64) This is the index number of the MAC address.
Page 95
Tx Power Set the output power of the NBG6617 in this field. If there is a high density of APs in an area, decrease the output power of the NBG6617 to reduce interference with other APs.
Table 34 Expert Mode > Wireless > Advanced (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen. 11.7 WPS Screen Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS status.
Disable, you cannot create a new PIN number. PIN Number This is the WPS PIN (Personal Identification Number) of the NBG6617. Enter this PIN in the configuration utility of the device you want to connect to the NBG6617 using WPS.
Page 98
If you click Select All you can not select any specific days and times. Click Clean All to remove all the wireless LAN scheduling. Apply Click Apply to save your changes back to the NBG6617. Cancel Click Cancel to reload the previous configuration for this screen.
The LAN screens can help you configure a manage IP address, and partition your physical network into logical networks. 12.2 What You Can Do • Use the LAN IP screen to configure the IPv4 and IPv6 addresses for your NBG6617 on the LAN (Section 12.4 on page 100).
These parameters should work for the majority of installations. 12.4 LAN IP Screen Use this screen to change the IP address for your NBG6617. Click Expert Mode > LAN > LAN IP. Figure 63 Expert Mode > LAN > LAN IP The following table describes the labels in this screen.
Enable the DHCP server unless your ISP instructs you to do otherwise. Select Disable to stop the NBG6617 acting as a DHCP server. When configured as a server, the NBG6617 provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured.
DESCRIPTION LAN IPv6 Address Assignment Enable_DHCPv6-PD Select this option to use DHCPv6 prefix delegation. The NBG6617 will obtain an IPv6 prefix from the ISP or a connected uplink router for the LAN. Autoconfiguration Select SLAAC + RDNSS to enable IPv6 stateless auto-configuration on this interface.
Page 103
Prefix Valid Lifetime Enter the valid lifetime for the prefix. Link Local Only Select this option to only use the link local address on the NBG6617 interfaces in the LAN. Select this option to identify a unique local address of the NBG6617 in the LAN.
(Section 13.3 on page 112). • Use the USB Media Sharing screen to use the NBG6617 as a media server and allow DLNA- compliant devices to play media files stored in the attached USB device (Section 13.4 on page 117).
The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. DLNA clients play files stored on DLNA servers. The NBG6617 can function as a DLNA-compliant media server and stream files to DLNA-compliant media clients without any configuration.
Connect the USB device to one of the NBG6617’s USB ports. The NBG6617 detects the USB device and makes its contents available for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on.
Page 107
User Name This shows the name of the user to which this rule applies. Schedule This shows whether the user is able to access the Internet through the NBG6617 (Allow) or not (Block) at the moment. Modify Click the Edit icon to go to the screen where you can edit the rule.
Page 108
To remove a user device, select it from the right text box and click Delete. Internet Access The y-axis shows the days that you want the NBG6617 to perform parental control and Schedule allow the user to access the Internet.
Page 109
Click the Delete icon to delete an existing rule. Block Site/URL Keyword Keyword Enter a keyword and click Add to add it to the keyword list. This has the NBG6617 block access to the website URLs that contain the keyword. Keyword List Select a keyword and click Delete to remove it.
Click Back to return to the previous screen. 13.2.2 Notification Screen Use this screen to have the NBG6617 send e-mail notifications when the user(s) is connected to the NBG6617 for Internet access during the specified time periods. In Expert mode, click Applications > Parental Control > Notification to open the following screen.
Page 111
Click Add new rules in the Notification screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to set a schedule and have the NBG6617 send a notification when the specified user connects to the NBG6617 at the scheduled time.
Note: You should have configured a parental control rule already for the specified user. Schedule Select check boxes for the days that you want the NBG6617 to perform notification. Time (Begin ~ Define the time period during that you want the NBG6617 to perform notification.
Chapter 13 Applications Figure 71 StreamBoost Management Example The StreamBoost engine on the NBG6617 can identify the types of connected devices (such as PC, smart phone, tablet, TV or game console) in your network. When there is not enough bandwidth to support traffic of the same priority, the NBG6617 refers to the connected device priority.
Page 114
Otherwise, select User Defined to manually enter the bandwidth. This is traffic from WAN to LAN/WLAN. Application List This is the index number of the application on the NBG6617. Priority Use the drop-down list box to select the priority of the connected device.
Page 115
This displays the port number of the destination that define the traffic type. Source Port This displays the port number of the source that define the traffic type. Protocol This is the transport layer protocol used for the service. NBG6617 User’s Guide...
Page 116
This is a single port number that defines your user-defined service. Protocol Select the transport layer protocol (TCP, UDP or BOTH) that defines your user-defined service. Apply Click Apply to save your customized settings. Cancel Click Cancel to begin configuring this screen afresh. NBG6617 User’s Guide...
Chapter 13 Applications 13.4 USB Media Sharing Screen You can set up your NBG6617 to act as a media server to provide media (like video) to DLNA- compliant players, such as Windows Media Player, ZyXEL DMAs (Digital Media Adapters), Xboxes or PS3s.
Rescan Media Contents Rescan Click this button to have the NBG6617 scan the media files on the connected USB device and do indexing of the file list again so that DLNA clients can find the new files if any. Apply Click Apply to save your changes back to the NBG6617.
Click Apply to save the setting to the NBG6617. Cancel Click Cancel to return to the previously saved settings. 13.6 File Sharing You can also share files on a USB memory stick or hard drive connected to your NBG6617 with users on your network. NBG6617 User’s Guide...
Chapter 13 Applications The following figure is an overview of the NBG6617’s file-sharing server feature. Computers A and B can access files on a USB device (C) which is connected to the NBG6617 (D). Figure 79 File Sharing Overview Note: The read and write performance may be affected by amount of file-sharing traffic on your network, type of connected USB device and your USB version (1.1 or 2.0).
Specify the name to identify the NBG6617 in a work group. Work Group You can add the NBG6617 to an existing or a new workgroup on your network. Enter the name of the workgroup which your NBG6617 automatically joins. You can set the NBG6617’s workgroup name to be exactly the same as the workgroup name to which...
Page 122
LABEL DESCRIPTION Enable FTP Select this to enable the FTP server on the NBG6617 for file sharing using FTP. Port You may change the server port number for FTP if needed, however you must use the same port number in order to use that service for file sharing.
[ENTER]. A screen asking for password authentication appears. Type the user name and password (Bob and 1234 in this example) and click OK. Note: Once you log into the shared folder via your NBG6617, you do not have to relogin unless you restart your computer.
Page 124
Use FTP to Share Files You can use FTP to access the USB storage devices connected to the NBG6617. In this example, we use the web browser to share files via FTP from the LAN. The way or screen you log into the FTP server (on the NBG6617) varies depending on your FTP client.
Page 125
Applications > File Sharing > FTP screen) and click Log On. The screen changes and shows you the folder for the USB storage device connected to your NBG6617. Double-click the folder to display the contents in it. NBG6617 User’s Guide...
Wi-Fi network from the mobile device. You can even use the App to access the NBG6617’s web configurator. The mobile device with the App installed must be connected to the NBG6617 wirelessly.
For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw. Full Path URL Checking Full path URL checking has the NBG6617 check the characters that come before the last slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, full path URL checking searches for keywords within www.zyxel.com.tw/news/.
Page 128
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the NBG6617 allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration.
Security 14.1 Overview Use these screens to enable and configure the firewall that protects your NBG6617 and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
(click the IPv4 Firewall or IPv6 Firewall tab under Security and then click the Enable Firewall check box). The NBG6617's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG6617 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 131
Respond to Ping The NBG6617 will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN Ping requests.
Enter the IP address of the computer to which traffic for the application or service is entering. The NBG6617 applies the firewall rule to traffic initiating from this computer. Source IP Address Enter the IP address of the computer that initializes traffic for the application or service.
Page 133
Enter the IPv6 address of the computer to which traffic for the application or service is entering. The NBG6617 applies the firewall rule to traffic destined for this computer. Source IP Address Enter the IPv6 address of the computer that initializes traffic for the application or service.
Page 134
This is the port number/range of the source that defines the traffic type, for example TCP port 80 defines web traffic. Click to remove the firewall rule. Apply Click Apply to save the settings. Cancel Click Cancel to restore your previously saved settings. NBG6617 User’s Guide...
• Use the Language screen to change the language for the Web Configurator (Section 15.9 on page 141). • Use the Remote Management screen to configure the interface/s from which the NBG6617 can be managed remotely and specify a secure client that can manage the NBG6617 (Section 15.10 on page 142).
Click Cancel to begin configuring this screen afresh. 15.4 Password Screen It is strongly recommended that you change your NBG6617's password. If you forget your NBG6617's password (or IP address), you will need to reset the device. See Section 15.8 on page 141 for details.
Click Cancel to begin configuring this screen afresh. 15.5 Time Screen Use this screen to configure the NBG6617’s time based on your local time zone. To change your NBG6617’s time and date, click Expert Mode > Maintenance > Time. The screen appears as shown.
Page 138
(yyyy/mm/dd) When you select Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the NBG6617 get the time and date from the time Server server you specified below.
After you see the Firmware Upload In Process screen, wait two minutes before logging into the NBG6617 again. The NBG6617 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Chapter 15 Maintenance 15.7 Backup/Restore Screen Backup configuration allows you to back up (save) the NBG6617’s current configuration to a file on your computer. Once your NBG6617 is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
RESET button. Note: If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default NBG6617 IP address (192.168.1.1). See...
LAN/WLAN or WAN interface. 15.10.1 Remote Access Use this screen to change your NBG6617’s remote management settings. You can use Telnet, HTTP or HTTPS to access and manage the NBG6617. Click Expert Mode > Maintenance > Remote Management > Remote Access to open the following screen.
Page 143
You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Access Status Select the interface(s) through which a computer may access the NBG6617 using this service. Secured Client Select All to allow all computes to access the NBG6617.
You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Access Status Select the interface(s) through which a computer may access the NBG6617 using this service. Secured Client Select All to allow all computes to access the NBG6617.
Apply to save your settings. Click Cancel to start the screen afresh. Use this screen to see the logged messages for the NBG6617. The log wraps around and deletes the old entries after it fills. Select what logs you want to see from the Display drop list. The log choices depend on your settings above this screen.
Figure 97 Expert Mode > Maintenance > Log 15.12 System Operation Mode Overview The Sys OP Mode (System Operation Mode) function lets you configure your NBG6617 as a router or access point. You can choose between Router Mode, and Access Point Mode depending on your network topology and the features you require from your device.
Figure 99 Access Point Mode 15.13 Operation Mode Screen Use this screen to select how you want to use your NBG6617. Figure 100 Expert Mode > Maintenance > Operation Mode The following table describes the labels in the Operation Mode screen.
Page 148
The DHCP server on your device is disabled. • Router functions (such as NAT, bandwidth management, remote management, firewall and so on) are not available when the NBG6617 is in Access Point Mode. • The IP address of the device on the local network is set to 192.168.1.2.
Make sure you are using the power adaptor or cord included with the NBG6617. Make sure the power adaptor or cord is connected to the NBG6617 and plugged in to an appropriate power source. Make sure the power source is turned on.
The default IP address of the NBG6617 in Access Point Mode is 192.168.1.2. If you changed the IP address and have forgotten it, you might get the IP address of the NBG6617 in Router Mode by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start >...
Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. Make sure your computer is in the same subnet as the NBG6617. (If you know that there are routers between your computer and the NBG6617, skip this step.) •...
Page 152
Internet, especially peer-to-peer applications. Check the signal strength. If the signal strength is low, try moving the NBG6617 closer to the AP if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on).
16.5 Resetting the NBG6617 to Its Factory Defaults If you reset the NBG6617, you lose all of the changes you have made. The NBG6617 re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Page 154
Chapter 16 Troubleshooting Make sure you allow the NBG6617 to be remotely accessed through the WLAN interface. Check your remote management settings. • See the chapter on Wireless LAN in the User’s Guide for more information. I set up URL keyword blocking, but I can still access a website that should be blocked.
If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the NBG6617 and try to connect to it again with your computer.
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 159
• ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Communications ES Ltd • http://www.zyxel.es Sweden • ZyXEL Communications NBG6617 User’s Guide...
Page 160
Appendix A Customer Support • http://www.zyxel.se Switzerland • Studerus AG • http://www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Brazil •...
Page 161
Appendix A Customer Support • http://www.zyxel.com/me/en/ North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NBG6617 User’s Guide...
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific NBG6617 may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 163
Appendix B Setting Up Your Computer’s IP Address In the Control Panel, click the Network Connections icon. Right-click Local Area Connection and then select Properties. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NBG6617 User’s Guide...
Page 164
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. NBG6617 User’s Guide...
Page 165
Status and then click the Support tab to view your IP address and connection information. Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. NBG6617 User’s Guide...
Page 166
Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NBG6617 User’s Guide...
Page 167
Appendix B Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG6617 User’s Guide...
Page 168
Status and then click the Support tab to view your IP address and connection information. Windows 7 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. NBG6617 User’s Guide...
Page 169
Appendix B Setting Up Your Computer’s IP Address Click Change adapter settings. Double click Local Area Connection and then select Properties. NBG6617 User’s Guide...
Page 170
Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. NBG6617 User’s Guide...
Page 171
Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. The IP settings are displayed as follows. NBG6617 User’s Guide...
Page 172
Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. In the System Preferences window, click the Network icon. NBG6617 User’s Guide...
Page 173
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. NBG6617 User’s Guide...
Page 174
• In the Router field, type the IP address of your device. Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. NBG6617 User’s Guide...
Page 175
Figure 101 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. In System Preferences, click the Network icon. NBG6617 User’s Guide...
Page 176
Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. NBG6617 User’s Guide...
Page 177
• In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NBG6617. Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications >...
Page 178
When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. NBG6617 User’s Guide...
Page 179
Appendix B Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. In the Network Settings window, select the connection that you want to configure, then click Properties. NBG6617 User’s Guide...
Page 180
Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. NBG6617 User’s Guide...
Page 181
Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. NBG6617 User’s Guide...
Page 182
The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). NBG6617 User’s Guide...
Page 183
Appendix B Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. NBG6617 User’s Guide...
Page 184
Appendix B Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. When the Network Card Setup window opens, click the Address tab NBG6617 User’s Guide...
Page 185
Click Next to save the changes and close the Network Card Setup window. If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. NBG6617 User’s Guide...
Page 186
Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 105 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. NBG6617 User’s Guide...
Page 187
Appendix B Setting Up Your Computer’s IP Address Figure 106 openSUSE: Connection Status - KNetwork Manager NBG6617 User’s Guide...
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. NBG6617 User’s Guide...
Page 189
Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). NBG6617 User’s Guide...
Page 190
TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. NBG6617 User’s Guide...
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 192
• Le présent émetteur radio (2468C-NBG6617) de modèle s'il fait partie du matériel de catégorieI) a été approuvé par Industrie Canada pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise pour chaque type d'antenne.
ZyXEL declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva (Portuguese) 1999/5/EC. Română Prin prezenta, ZyXEL declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi (Romanian) relevante ale Directivei 1999/5/EC. NBG6617 User’s Guide...
2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NBG6617 User’s Guide...
Network standby power consumption < 12W, and/or Off mode power consumption < 0.5W, and/or Standby mode power consumption < 0.5W. Wireless setting, please refer to "Wireless" chapter for more detail. NBG6617 User’s Guide...
Page 196
Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. NBG6617 User’s Guide...
Page 197
Appendix D Legal Information Environmental Product Declaration NBG6617 User’s Guide...
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. NBG6617 User’s Guide...
Page 199
This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. NBG6617 User’s Guide...
Common Internet File System, see CIFS encryption Configuration and local (user) database restore 140, 143, 145 contact information WPA compatible content filtering ESSID by keyword (in URL) copyright CPU usage 38, 45 customer support file sharing access right bandwidth example NBG6617 User’s Guide...
Page 201
Memory usage 38, 45 mode Multicast IGMP IGMP see also Internet Group Multicast Protocol version IGMP version Internet Group Multicast Protocol and ALG IP Address NAT Traversal Navigation Panel 39, 46 navigation panel 39, 46 NBG6617 User’s Guide...
Page 202
ALG Samba Scheduling security policy and ALG Server Message Block, see SMB WAN (Wide Area Network) Service Set 86, 92 WAN MAC address Service Set IDentification 86, 92 warranty Service Set IDentity. See SSID. note NBG6617 User’s Guide...
Page 203
LAN wireless LAN scheduling Wireless network basic guidelines channel encryption example MAC address filter overview security SSID Wireless security overview type wireless security Wireless tutorial Wizard setup WLAN button work group name Windows WPA compatible NBG6617 User’s Guide...
Need help?
Do you have a question about the NBG6617 and is the answer not in the manual?
Questions and answers