Home » ZyXEL Manuals » Networking » ZyXEL NBG-318S » Manual Viewer

ZyXEL NBG-318S User Guide - Page 122

Privacy and Powerline Adapters - firmware download

Get ZyXEL NBG-318S PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 122 highlights

Chapter 10 HomePlug AV After configuring the settings on all adapters (see Section 10.3 on page 124) your computer can now connect to the powerline network and to the Internet. Your powerline network can be further expanded by plugging additional powerline adapters into other outlets in your home and connecting other computers or network devices (for example, a printer) to them. In this User's Guide the electrical wiring network may be referred to as the "powerline network". " Your NBG318S is only compatible with ZyXEL HomePlug AV products with the latest firmware. You can upgrade your other ZyXEL HomePlug AV products by downloading the latest firmware from the ZyXEL website (www.zyxel.com). 10.2 Privacy and Powerline Adapters When the NBG318S communicates with each other HomePlug AV compliant powerline adapters, they use encryption to scramble the information that is sent in the powerline network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. The HomePlug AV standard uses 128-bit AES (Advanced Encryption Standard) to safely transmit data between powerline adapters. For the NBG318S and powerline adapters to communicate with each other they all need to use the same Network Membership Key (NMK). Otherwise, they cannot unscramble the encrypted data sent in the powerline network. The NMK is derived from the network password you assign to the NBG318S and powerline adapters. By default all HomePlug powerline adapters are configured with the network password HomePlugAV. This allows all HomePlug powerline adapters and the NBG318S to communicate with each other without any software configuration. This also means that if you don't change the network password, any HomePlug AV powerline adapter connected to your powerline circuit can see your network data. " Change the network password on your powerline adapters to ensure secure data transmission on your powerline network. 10.2.1 Setting Up a Private Powerline Network To prevent others compromising your network security, you can create a private network. Create a private network by changing the network password only on the powerline adapters you want to communicate in your network. The NBG318S and powerline adapters convert the network password to a Network Membership Key (NMK). Only the powerline adapters with the same NMK can communicate in your network. The following figure shows a scenario A - where all the powerline adapters have the same NMK (NMK1) and scenario B - where some adapters use NMK1 and some use NMK2. 122 NBG318S User's Guide

Section	Page
User’s Guide	1
About This User's Guide	3
Document Conventions	4
Safety Warnings	6
Table of Contents	9
Contents Overview	17
List of Figures	19
List of Tables	25
Introduction	29
Getting to Know Your NBG318S	31
1.1 Overview	31
1.1.1 Secure Broadband Internet Access	31
1.1.2 Wireless LAN Application	31
1.1.3 HomePlug AV	32
1.2 Ways to Manage the NBG318S	32
1.3 Good Habits for Managing the NBG318S	33
1.4 LEDs	33
The WPS Button	37
2.1 Overview	37
2.2 Push Button Configuration	37
The ENCRYPT Button	39
3.1 ENCRYPT Button Overview	39
3.2 Set Up a HomePlug AV Network with ENCRYPT	39
3.3 Setting Up Multiple Networks	41
3.4 ENCRYPT Button Behavior	42
Introducing the Web Configurator	43
4.1 Web Configurator Overview	43
4.2 Accessing the Web Configurator	43
4.3 Resetting the NBG318S	45
4.3.1 Procedure to Use the Reset Button	45
4.4 Navigating the Web Configurator	45
4.4.1 The Status Screen	45
4.4.2 Navigation Panel	48
4.4.3 Summary: Any IP Table	50
4.4.4 Summary: Bandwidth Management Monitor	51
4.4.5 Summary: DHCP Table	51
4.4.6 Summary: Packet Statistics	52
4.4.7 Summary: Wireless Station Status	53
4.4.8 Summary: My HomePlug Network Status	53
Connection Wizard	55
5.1 Wizard Setup	55
5.2 Connection Wizard: STEP 1: System Information	56
5.2.1 System Name	56
5.2.2 Domain Name	57
5.3 Connection Wizard: STEP 2: Wireless LAN	57
5.3.1 Auto Security	59
5.3.2 Basic (WEP) Security	59
5.3.3 Extend (WPA-PSK or WPA2-PSK) Security	61
5.4 Connection Wizard: STEP 3: Internet Configuration	61
5.4.1 Ethernet Connection	62
5.4.2 PPPoE Connection	62
5.4.3 PPTP Connection	63
5.4.4 Your IP Address	65
5.4.5 WAN IP Address Assignment	65
5.4.6 IP Address and Subnet Mask	66
5.4.7 DNS Server Address Assignment	66
5.4.8 WAN IP and DNS Server Address Assignment	67
5.4.9 WAN MAC Address	68
5.5 Connection Wizard: STEP 4: Bandwidth management	69
5.6 Connection Wizard Complete	70
Tutorial	73
6.1 Example Parameters	73
6.2 Configuring the AP	73
6.3 Configuring the Wireless Client	75
6.3.1 Connecting to a Wireless LAN	75
Network	79
Wireless LAN	81
7.1 Wireless Network Overview	81
7.2 Wireless Security Overview	82
7.2.1 SSID	82
7.2.2 MAC Address Filter	82
7.2.3 User Authentication	82
7.2.4 Encryption	83
7.3 Quality of Service	84
7.3.1 WMM QoS	84
7.4 WPS Overview	85
7.4.1 WPS Setup Using a PIN	85
7.4.2 How WPS Works	86
7.4.3 Limitations of WPS	89
7.5 General Wireless LAN Screen	90
7.5.1 No Security	91
7.5.2 WEP Encryption	91
7.5.3 WPA-PSK/WPA2-PSK	93
7.5.4 WPA/WPA2	94
7.6 MAC Filter	96
7.7 Wireless LAN Advanced Screen	97
7.8 Quality of Service (QoS) Screen	99
7.8.1 Application Priority Configuration	100
7.9 WPS Screen	101
7.10 WPS Station Screen	103
WAN	105
8.1 WAN Overview	105
8.2 WAN MAC Address	105
8.3 Multicast	105
8.4 Internet Connection	106
8.4.1 Ethernet Encapsulation	106
8.4.2 PPPoE Encapsulation	108
8.4.3 PPTP Encapsulation	110
8.5 Advanced WAN Screen	113
LAN	115
9.1 LAN Overview	115
9.1.1 IP Pool Setup	115
9.1.2 System DNS Servers	115
9.2 LAN TCP/IP	115
9.2.1 Factory LAN Defaults	115
9.2.2 IP Address and Subnet Mask	116
9.2.3 Multicast	116
9.2.4 Any IP	116
9.3 LAN IP Screen	118
9.4 LAN IP Alias	118
9.5 Advanced LAN Screen	119
HomePlug AV	121
10.1 Overview	121
10.2 Privacy and Powerline Adapters	122
10.2.1 Setting Up a Private Powerline Network	122
10.2.2 Setting Up Multiple Powerline Networks.	123
10.3 Configuring Your HomePlug AV Devices	124
10.4 HomePlug AV QoS	126
10.4.1 QoS Based on IP or MAC Address	127
10.4.2 Mapping other QoS Priority Settings to HomePlug AV QoS	127
10.4.3 QoS Based on Traffic Type	128
DHCP	131
11.1 DHCP	131
11.2 DHCP Server General Screen	131
11.3 DHCP Server Advanced Screen	132
11.4 Client List Screen	133
Network Address Translation (NAT)	135
12.1 NAT Overview	135
12.2 Using NAT	135
12.2.1 Port Forwarding: Services and Port Numbers	135
12.2.2 Configuring Servers Behind Port Forwarding Example	136
12.3 General NAT Screen	136
12.4 NAT Application Screen	137
12.4.1 Game List Example	139
12.5 Trigger Port Forwarding	140
12.5.1 Trigger Port Forwarding Example	140
12.5.2 Two Points To Remember About Trigger Ports	141
12.6 NAT Advanced Screen	141
Dynamic DNS	145
13.1 Dynamic DNS Introduction	145
13.1.1 DynDNS Wildcard	145
13.2 Dynamic DNS Screen	145
Security	149
Firewall	151
14.1 Introduction to ZyXEL’s Firewall	151
14.1.1 What is a Firewall?	151
14.1.2 Stateful Inspection Firewall	151
14.1.3 About the NBG318S Firewall	151
14.1.4 Guidelines For Enhancing Security With Your Firewall	152
14.2 Triangle Routes	152
14.2.1 Triangle Routes and IP Alias	152
14.3 General Firewall Screen	153
14.4 Services Screen	154
Content Filtering	157
15.1 Introduction to Content Filtering	157
15.2 Restrict Web Features	157
15.3 Days and Times	157
15.4 Filter Screen	157
15.5 Schedule	159
15.6 Customizing Keyword Blocking URL Checking	160
15.6.1 Domain Name or IP Address URL Checking	160
15.6.2 Full Path URL Checking	160
15.6.3 File Name URL Checking	160
Management	161
Static Route Screens	163
16.1 Static Route Overview	163
16.2 IP Static Route Screen	163
16.2.1 Static Route Setup Screen	164
Bandwidth Management	167
17.1 Bandwidth Management Overview	167
17.2 Application-based Bandwidth Management	167
17.3 Subnet-based Bandwidth Management	167
17.4 Application and Subnet-based Bandwidth Management	168
17.5 Bandwidth Management Priorities	168
17.6 Predefined Bandwidth Management Services	169
17.6.1 Services and Port Numbers	170
17.6.2 Default Bandwidth Management Classes and Priorities	170
17.7 Bandwidth Management General Configuration	170
17.8 Bandwidth Management Advanced Configuration	171
17.8.1 Rule Configuration with the Pre-defined Service	172
17.8.2 Rule Configuration with the User-defined Service	173
17.9 Bandwidth Management Monitor	174
Remote Management	177
18.1 Remote Management Overview	177
18.1.1 Remote Management Limitations	177
18.1.2 Remote Management and NAT	178
18.1.3 System Timeout	178
18.2 WWW Screen	178
18.3 Telnet	178
18.4 Telnet Screen	179
18.5 FTP Screen	180
18.6 DNS Screen	180
Universal Plug-and-Play (UPnP)	183
19.1 Introducing Universal Plug and Play	183
19.1.1 How do I know if I'm using UPnP?	183
19.1.2 NAT Traversal	183
19.1.3 Cautions with UPnP	183
19.2 UPnP and ZyXEL	184
19.3 UPnP Screen	184
19.4 Installing UPnP in Windows Example	185
Maintenance and Troubleshooting	195
System	197
20.1 System Overview	197
20.2 System General Screen	197
20.3 Time Setting Screen	198
Logs	201
21.1 View Log	201
21.2 Log Settings	202
21.3 Log Descriptions	205
Tools	215
22.1 Firmware Upload Screen	215
22.2 Configuration Screen	216
22.2.1 Backup Configuration	217
22.2.2 Restore Configuration	217
22.2.3 Back to Factory Defaults	218
22.3 Restart Screen	218
Configuration Mode	221
Sys Op Mode	223
24.1 Selecting System Operation Mode	223
Language	227
25.1 Selecting Language	227
Troubleshooting	229
26.1 Power, Hardware Connections, and LEDs	229
26.2 NBG318S Access and Login	230
26.3 Internet Access	231
26.4 Resetting the NBG318S to Its Factory Defaults	233
26.5 Wireless Router/AP Troubleshooting	233
26.6 HomePlug AV Troubleshooting	234
26.7 ENCRYPT Button Problems	235
26.8 Advanced Features	236
Appendices and Index	237
Product Specifications and Wall- Mounting Instructions	239
Wall-mounting Instructions	242
Pop-up Windows, JavaScripts and Java Permissions	245
Internet Explorer Pop-up Blockers	245
Disable pop-up Blockers	245
Enable pop-up Blockers with Exceptions	246
JavaScripts	248
Java Permissions	249
JAVA (Sun)	250
IP Addresses and Subnetting	251
Introduction to IP Addresses	251
Structure	251
Subnet Masks	252
Network Size	253
Notation	253
Subnetting	254
Example: Four Subnets	255
Example: Eight Subnets	256
Subnet Planning	257
Configuring IP Addresses	258
Private IP Addresses	258
Setting up Your Computer’s IP Address	259
Windows 95/98/Me	259
Installing Components	260
Configuring	261
Verifying Settings	262
Windows 2000/NT/XP	262
Verifying Settings	267
Macintosh OS 8/9	267
Verifying Settings	269
Macintosh OS X	269
Verifying Settings	270
Linux	270
Using the K Desktop Environment (KDE)	271
Using Configuration Files	273
26.8.1 Verifying Settings	274
Wireless LANs	275
Wireless LAN Topologies	275
Ad-hoc Wireless LAN Configuration	275
BSS	275
ESS	276
Channel	277
RTS/CTS	277
Fragmentation Threshold	278
Preamble Type	279
IEEE 802.1x	279
RADIUS	280
Types of RADIUS Messages	280
Types of Authentication	281
EAP-MD5 (Message-Digest Algorithm 5)	281
EAP-TLS (Transport Layer Security)	281
EAP-TTLS (Tunneled Transport Layer Service)	281
PEAP (Protected EAP)	282
LEAP	282
Dynamic WEP Key Exchange	282
WPA(2)	282
Encryption	283
User Authentication	283
26.8.2 WPA(2)-PSK Application Example	284
26.8.3 WPA(2) with RADIUS Application Example	284
Security Parameters Summary	285
Services	287
Legal Information	291
Copyright	291
Certifications	291
ZyXEL Limited Warranty	293

Match case Limit results 1 per page

Chapter 10 HomePlug AV

NBG318S User’s Guide

122

After configuring the settings on all adapters (see

Section 10.3 on page 124

) your computer

can now connect to the powerline network and to the Internet. Your powerline network can be

further expanded by plugging additional powerline adapters into other outlets in your home

and connecting other computers or network devices (for example, a printer) to them.

In this User’s Guide the electrical wiring network may be referred to as the “powerline

network”.

Your NBG318S is only compatible with ZyXEL HomePlug AV products with

the latest firmware. You can upgrade your other ZyXEL HomePlug AV

products by downloading the latest firmware from the ZyXEL website

(www.zyxel.com).

10.2

Privacy and Powerline Adapters

When the NBG318S communicates with each other HomePlug AV compliant powerline

adapters, they use encryption to scramble the information that is sent in the powerline

network. Encryption is like a secret code. If you do not know the secret code, you cannot

understand the message. The HomePlug AV standard uses 128-bit AES (Advanced

Encryption Standard) to safely transmit data between powerline adapters.

For the NBG318S and powerline adapters to communicate with each other they all need to use

the same Network Membership Key (NMK). Otherwise, they cannot unscramble the

encrypted data sent in the powerline network.

The NMK is derived from the network password you assign to the

NBG318S and

powerline

adapters. By default all HomePlug powerline adapters are configured with the network

password

HomePlugAV

. This allows all HomePlug powerline adapters and the NBG318S to

communicate with each other without any software configuration. This also means that if you

don’t change the network password, any HomePlug AV powerline adapter connected to your

powerline circuit can see your network data.

Change the network password on your powerline adapters to ensure secure

data transmission on your powerline network.

10.2.1

Setting Up a Private Powerline Network

To prevent others compromising your network security, you can create a private network.

Create a private network by changing the network password only on the powerline adapters

you want to communicate in your network. The NBG318S and powerline adapters convert the

network password to a Network Membership Key (NMK). Only the powerline adapters with

the same NMK can communicate in your network.

The following figure shows a scenario

- where all the powerline adapters have the same

NMK (

NMK1

) and scenario

- where some adapters use

NMK1

and some use

NMK2