Web Configurator
Overview
The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Mozilla Firefox, or Google Chrome.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows from your device.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
The recommended minimum screen resolution is 1024 x 768 pixels.
Screenshots and graphics in this book may differ slightly from your product due to differences in product features or Web Configurator brand style.Web Configurator Access
This section shows how to access the Web Configurator.
1 Make sure your Zyxel Device hardware is properly connected. See the Quick Start Guide.
2 In your browser go to https://192.168.1.1 or https://myrouter.local. By default, the Zyxel Device automatically routes this request to its HTTPS server, and it is recommended to keep this setting. The Login screen appears.
If you want to change the display language for the Zyxel Device’s Web Configurator screens, select from the drop-down list box. You can also change the display language in Configuration > System > Language.
3 Enter the user name (default: “admin”) and password (default: “1234”). Click Login.
4 If this is your first login, change the default admin password on the Update Admin Info screen. Enter a new password, then click Apply. Log in again using the user name (default: admin) and your new password. Click Login.
In Configuration > Object > User/Group > Setting, you can enable Password Complexity to require a new password to consist of at least 8 characters and at most 64, where at least 1 character must be a number, at least 1 a lower case letter, at least 1 an upper case letter and at least 1 a special character from the keyboard, such as !@#$%^&*()_+. You can also require periodic changing of the password in that screen by configuring Password must changed every (days).Security Best Practices
For a secure network, we recommend configuring the Zyxel Device with two-factor authentication, regularly changing your password, and completing the security settings.
The Security Best Practices screen appears after each login to remind you of the recommended security settings. Click Begin to start the setup. A checkmark indicates a completed setup.
Two-Factor Authentication
Enhance security with two-factor authentication by using Google Authenticator to access the Zyxel Device. Follow the instructions on the screen to set up the two-factor authentication. See Google Authentication for more information.
Password Change
Regularly changing passwords can enhance security by reducing the risk of unauthorized access. Depending on the password change interval under Login Security in Configuration > Object > User/Group > Setting, the password must be changed every set number of days.
Security Policy Control
Use this screen to activate the security configuration. Select Yes from the drop-down list, then click Next to activate the security policy configured in Configuration > Security Policy > Policy Control > Policy.
Security Check for Web Interface
When the Zyxel Device detects a rule that allows unrestricted Internet access to the Web Configurator and SSL VPN, restrict the access by using the source IP address for the Web Configurator and the GeoIP for SSL VPN.
Use this screen to configure settings to secure your Zyxel Device. You can configure:
• Secure SSL access from the Internet to the Zyxel Device.
• Secure SSL access from the Internet to the network behind the Zyxel Device.
See The Security Check for Web Interface Screen for more information.
Security Risk Warning
Keep the licenses up to date to receive critical security enhancements, avoid malware risks, and ensure optimal performance. Click Renew to extend the license. See Service Screen for more information.
Other Security Measures
New firmware contains patches to enhance security. Make sure to check for new firmware regularly and update firmware in Maintenance > Firmware Management.
Web Configurator Screens Overview
The Web Configurator screen is divided into these parts:
Title Bar
The title bar icons in the upper right corner provide the following functions.
Label | Description |
|---|---|
SecuReporter | This icon shows when SecuReporter is enabled and the Zyxel Device is added to an organization. Click this to open the SecuReporter portal page. |
Web Console | Click this to open one or multiple console windows from which you can run command line interface (CLI) commands. You will be prompted to enter your user name and password. See the Command Reference Guide for information about the commands. Logging in to the Zyxel Device with HTTPS, so you can open one or multiple console windows. |
CLI | Click this to open a popup window that displays the CLI commands sent by the Web Configurator to the Zyxel Device. |
Reference | Click this to check which configuration items reference an object. |
Site Map | Click this to see an overview of links to the Web Configurator screens. |
Community | Go to https://community.zyxel.com for product discussions. |
Help | Click this to open the help page for the current screen. |
Notification | Only Admin or Limited Admin can see notifications. Notifications display what’s new in the Zyxel Device firmware (ZLD), information on security services about to expire. Slide the switch to Off if you don’t want notifications. Click an item to see more details on it. Click the Refresh icon or refresh the browser page to update notifications. The latest notification appears at the top. An item is removed once it has been read. Up to five notifications can be shown here. If there are more than five notifications, then click All Notifications to see them. |
About | Click this to display basic information about the Zyxel Device. |
Easy Mode | Click this to go to the Initial Setup Wizard in Easy Mode, and enter Easy Mode every time you log in. |
Logout | Click this to log out of the Web Configurator. |
About
Click About to display basic information about the Zyxel Device.
This table describes the fields in this screen.
Label | Description |
|---|---|
Current Version | This shows the firmware version of the Zyxel Device. |
Released Date | This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. |
System Protection Signature | This shows the system protection signature version of the Zyxel Device. These signatures do not require a license. The Zyxel Device will synch with the Cloud Helper Server every day to update these signatures automatically. System protection signatures protect your Zyxel Device and local networks from web attacks, such as command injection, cross-site scripting and path traversal. Command injection: This is an attack in which an attacker uses the Zyxel Device vulnerabilities to execute commands to control your Zyxel Device. Cross-site scripting: This is an attack in which an attacker implants malicious scripts in a website. When you visit this website, the malicious scripts are sent and executed on your web browser. Path traversal: This is an attack that allows an attacker to access files you store in the web root folder. |
OK | Click this to close the screen. |
Site Map
Click Site MAP to see an overview of links to the Web Configurator screens.
Web Console
Click Web Console to open one or multiple console windows from which you can run CLI commands. You will be prompted to enter your user name and password. See the Command Reference Guide for information about the commands. Logging in to the Zyxel Device with HTTPS, so you can open one or multiple console windows.
Reference
Select the type of object and the individual object and click Refresh to show which configuration settings reference the object.
The fields vary with the type of object. This table describes labels that can appear in this screen.
Label | Description |
|---|---|
Type | Select an object type to see the services. |
Name | This identifies the object for which the configuration settings that use it are displayed. Click the object’s name to display the object’s configuration screen in the main window. |
# | This field is a sequential value, and it is not associated with any entry. |
Service | This is the type of setting that references the selected object. Click a service’s name to display the service’s configuration screen in the main window. |
Priority | If it is applicable, this field lists the referencing configuration item’s position in its list, otherwise N/A displays. |
Name | This field identifies the configuration item that references the object. |
Description | If the referencing configuration item has a description configured, it displays here. |
Refresh | Click this to update the information in this screen. |
Cancel | Click Cancel to close the screen. |
CLI Messages
Click CLI to look at the CLI commands sent by the Web Configurator. Open the pop-up window and then click some menus in the Web Configurator to display the corresponding commands.
Navigation Panel
Use the navigation panel menu items to open status and configuration screens. Click the arrow in the middle of the right edge of the navigation panel to hide the panel or drag to resize it. The following sections introduce the Zyxel Device’s navigation panel menus and their screens.
Dashboard
The dashboard displays general device information, system status, system resource usage, licensed service status, and interface status in widgets that you can re-arrange to suit your needs.
Monitor Menu
The monitor menu screens display status and statistics information.
Folder or Link | Tab | Function |
|---|---|---|
Traffic Statistics | ||
Port Statistics | Port Statistics | Displays packet statistics for each physical port. |
Interface Status | Interface Summary | Displays general interface information and packet statistics. |
Traffic Statistics | Traffic Statistics | Collect and display traffic statistics. |
Session Monitor | Session Monitor | Displays the status of all current sessions. |
Network Status | ||
DHCP Table | DHCP Table | Displays a list of interfaces and their DHCP-assigned IP addresses. |
Device Insight | Device Insight | Displays a list of WiFi and wireless clients connected to the Zyxel Device networks. |
Login Users | Login Users | Lists the users currently logged into the Zyxel Device. |
IGMP Statistics | IGMP Statistics | Collect and display IGMP statistics. |
DDNS Status | DDNS Status | Displays the status of the Zyxel Device’s DDNS domain names. |
IP/MAC Binding | IP/MAC Binding | Lists the devices that have received an IP address from Zyxel Device interfaces using IP/MAC binding. |
Cellular Status | Cellular Status | Displays details about the Zyxel Device’s mobile broadband connection status. |
UPnP Port Status | Port Statistics | Displays details about UPnP connections going through the Zyxel Device. |
USB Storage | Storage Information | Displays details about USB device connected to the Zyxel Device. |
Ethernet Neighbor | Ethernet Neighbor | View and manage the Zyxel Device’s neighboring devices through Smart Connect (Layer Link Discovery Protocol (LLDP)). Use the Zyxel One Network (ZON) utility to view and manage the Zyxel Device’s neighboring devices through the Zyxel Discovery Protocol (ZDP). |
FQDN Object | FQDN Object | Displays FQDN (Fully Qualified Domain Name) object cache lists used in DNS queries. |
Wireless | ||
AP Information | Radio List | Lists wireless details of APs managed by the Zyxel Device. |
SSID Info | SSID Info | Display information about the AP’s wireless clients. |
Station Info | Station List | Lists wireless clients associated with the APs managed by the Zyxel Device. |
Top N Stations | Lists wireless stations with the most wireless traffic usage. | |
Single Station | Lists wireless traffic usage for an associated wireless station. | |
VPN Monitor | ||
IPSec | IPSec | Displays and manages the active IPSec SAs. |
SSL | SSL | Lists users currently logged into the VPN SSL client portal. You can also log out individual users and delete related session information. |
L2TP over IPSec | L2TP over IPSec | Displays details about current L2TP sessions. |
Security Statistics | ||
Content Filter | Web Content Filter | Collect and display web content filter statistics. |
DNS Content Filter | Collect and display DNS content filter statistics. | |
Anti-Spam | Summary | Collect and display spam statistics. |
Status | Displays how many mail sessions the ZyWALL is currently checking and DNSBL (Domain Name Service-based spam Black List) statistics. | |
Log | View Log | Lists log entries. |
Configuration Menu
Use the configuration menu screens to configure the Zyxel Device’s features.
Folder or Link | Tab | Function |
|---|---|---|
Quick Setup | Quickly configure WAN interfaces or VPN connections. | |
Licensing | ||
Registration | Registration | Register the device and activate trial services. |
Service | View the licensed service status and upgrade licensed services. | |
Wireless | ||
Built-in AP | General | Allow WiFi clients to access your Zyxel Device wirelessly to connect to the network. |
Network | ||
Interface | Port Port Role/Port Group/ Port Configuration | Use this screen to set the Zyxel Device’s flexible ports such as LAN, OPT, WLAN, or DMZ. |
Ethernet | Manage Ethernet interfaces and virtual Ethernet interfaces. | |
PPP | Create and manage PPPoE and PPTP interfaces. | |
Cellular | Configure a cellular Internet connection for an installed mobile broadband card. | |
Tunnel | Configure tunneling between IPv4 and IPv6 networks. | |
VLAN | Create and manage VLAN interfaces and virtual VLAN interfaces. | |
Bridge | Create and manage bridges and virtual bridge interfaces. | |
VTI | Configure IP address assignment and interface parameters for VTI (Virtual Tunnel Interface). | |
Trunk | Create and manage trunks (groups of interfaces) for load balancing. | |
Routing | Policy Route | Create and manage routing policies. |
Static Route | Create and manage IP static routing information. | |
RIP | Configure device-level RIP settings. | |
OSPF | Configure device-level OSPF settings, including areas and virtual links. | |
BGP | Configure exchange of Border Gateway Protocol (BGP) information over an IPSec tunnel. | |
DDNS | DDNS | Define and manage the Zyxel Device’s DDNS domain names. |
NAT | NAT | Set up and manage port forwarding rules. |
Redirect Service | Redirect Service | Set up and manage HTTP and SMTP redirection rules. |
ALG | ALG | Configure SIP, H.323, and FTP pass-through settings. |
UPnP | UPnP | Configure interfaces that allow UPnP and NAT-PMP connections. |
IP/MAC Binding | Summary | Configure IP to MAC address bindings for devices connected to each supported interface. |
Exempt List | Configure ranges of IP addresses to which the Zyxel Device does not apply IP/MAC binding. | |
Layer 2 Isolation | General | Enable layer-2 isolation on the Zyxel Device and the internal interfaces. |
Allow List | Enable and configure the allow list. | |
DNS Inbound LB | DNS Load Balancing | Configure DNS Load Balancing. |
VPN | ||
IPSec VPN | VPN Connection | Configure IPSec tunnels. |
VPN Gateway | Configure IKE tunnels. | |
Concentrator | Combine IPSec VPN connections into a single secure network | |
Configuration Provisioning | Set who can retrieve VPN rule settings from the Zyxel Device using the Zyxel Device IPSec VPN Client. | |
SSL VPN | Access Privilege | Configure SSL VPN access rights for users and groups. |
Global Setting | Configure the Zyxel Device’s SSL VPN settings that apply to all connections. | |
L2TP VPN | L2TP VPN | Configure L2TP over IPSec tunnels. |
BWM | BWM | Enable and configure bandwidth management rules. |
Web Authentication | Web Authentication General/Authentication Type/Custom Web Portal File/Custom User Agreement File | Define a web portal and exempt services from authentication. |
SSO | Configure the Zyxel Device to work with a Single Sign On agent. | |
Security Policy | ||
Policy Control | Policy | Create and manage level-3 traffic rules and apply Security Service profiles. |
ADP | General | Display and manage ADP bindings. |
Profile | Create and manage ADP profiles. | |
Allow List | Create an allow list for certain IP or services to let them pass the ADP flood detection. | |
Session Control | Session Control | Limit the number of concurrent client NAT/security policy sessions. |
Security Service | ||
Content Filter | Web Content Filter: General | Create and manage the detailed filtering rules for content filtering profiles and then apply to a traffic flow using a security policy. |
Web Content Filter: Trusted Web Sites | Create a list of allowed web sites that bypass content filtering policies. | |
Web Content Filter: Forbidden Web Sites | Create a list of web sites to block regardless of content filtering policies. | |
DNS Content Filter: General | Create and manage the detailed filtering rules for DNS content filtering profiles and then apply to a traffic flow using a security policy. | |
DNS Content Filter: Allow List | Create a list of allowed web sites that bypass DNS content filtering policies. | |
DNS Content Filter: Block List | Create a list of web sites to block regardless of content filtering policies. | |
Anti-Spam | Profile | Turn anti-spam on or off and manage anti-spam policies. Create anti-spam template(s) of settings to apply to a traffic flow using a security policy. |
Mail Scan | Configure e-mail scanning details. | |
Block/Allow List | Set up a block list to identify spam and an allow list to identify legitimate e-mail. | |
DNSBL | Have the Zyxel Device check e-mail against DNS Block Lists. | |
Object | ||
Device Insight | Device Insight | Configure profiles to block specified clients from accessing the Internet or the Zyxel Device. |
Zone | Zone | Configure zone templates used to define various policies. |
User/Group | User | Create and manage users. |
Group | Create and manage groups of users. | |
Setting | Manage default settings for all users, general settings for user sessions, and rules to force user authentication. | |
MAC Address | Configure the MAC addresses of wireless clients for MAC authentication using the local user database. | |
Address/Geo IP | Address | Create and manage host, range, and network (subnet) addresses. |
Address Group | Create and manage groups of addresses to apply to policies as a single objects. | |
Geo IP | Update the database of country-to-IP address mappings and manually configure country-to-IP address mappings for geographic address objects that can be used in security policies. | |
Service | Service | Create and manage TCP and UDP services. |
Service Group | Create and manage groups of services to apply to policies as a single object. | |
Schedule | Schedule | Create one-time and recurring schedules. |
Schedule Group | Create and manage groups of schedules to apply to policies as a single object. | |
AAA Server | Active Directory | Configure the Active Directory settings. |
LDAP | Configure the LDAP settings. | |
RADIUS | Configure the RADIUS settings. | |
Auth. Method | Authentication Method | Create and manage ways of authenticating users. |
Two-factor Authentication | Configure SMS or email authentication to access the Zyxel Device through a VPN tunnel. | |
Certificate | My Certificates | Create and manage the Zyxel Device’s certificates. |
Trusted Certificates | Import and manage certificates from trusted sources. | |
ISP Account | ISP Account | Create and manage ISP account information for PPPoE/PPTP interfaces. |
Mgmt. & Analytics | SecuManager | Enable and configure management of the Zyxel Device by a Central Network Management system. |
SecuReporter | Enable SecuReporter logging and access the SecuReporter security analytics portal that collects and analyzes logs from your Zyxel Device in order to identify anomalies, alert on potential internal or external threats, and report on network usage. | |
Nebula | Use this screen to let Nebula manage your Zyxel Device. | |
System | ||
Host Name | Host Name | Configure the system and domain name for the Zyxel Device. |
USB Storage | Settings | Configure the settings for the connected USB devices. |
Date/Time | Date/Time | Configure the current date, time, and time zone in the Zyxel Device. |
Console Speed | Console Speed | Set the console speed. |
DNS | DNS | Configure the DNS server and address records for the Zyxel Device. |
WWW | Service Control | Configure HTTP, HTTPS, and general authentication. |
Login Page | Configure how the login and access user screens look. | |
SSH | SSH | Configure SSH server and SSH service settings. |
TELNET | TELNET | Configure telnet server settings for the Zyxel Device. |
FTP | FTP | Configure FTP server settings. |
SNMP | SNMP | Configure SNMP communities and services. |
Auth. Server | Auth. Server | Configure the Zyxel Device to act as a RADIUS server. |
Notification | Mail Server | Configure a mail server with authentication to send reports and password expiration notification emails. |
SMS | Enable the SMS service to send dynamic guest account information in text messages and authorization for VPN tunnel access to a secured network. | |
Response Message | Create a web page when access to a website is restricted due to a security service. | |
Language | Language | Select the Web Configurator language. |
IPv6 | IPv6 | Enable IPv6 globally on the Zyxel Device here. |
ZON | ZON | Use the Zyxel One Network (ZON) utility to view and manage the Zyxel Device’s neighboring devices through the Zyxel Discovery Protocol (ZDP). |
Advanced | Fast Forwarding | Enable fast forwarding to maximizes the network performance of the Zyxel Device. |
Log & Report | ||
Email Daily Report | Email Daily Report | Configure where and how to send daily reports and what reports to send. |
Log Settings | Log Settings | Configure the system log, email logs, and remote syslog servers. |
Maintenance Menu
Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot or shut down the Zyxel Device.
Folder or Link | Tab | Function |
|---|---|---|
File Manager | Configuration File | Manage and upload configuration files for the Zyxel Device. |
Firmware Management | View the current firmware version and upload firmware. Reboot with your choice of firmware. | |
Shell Script | Manage and run shell script files for the Zyxel Device. | |
Diagnostics | Diagnostics | Collect diagnostic information. This screen includes the sub-tabs below: • Controller • Filer |
Packet Capture | Capture packets for analysis. This screen includes the sub-tabs below: • Capture • Files | |
CPU/Memory Status | View CPU and memory usage statistics. | |
System Log | Connect a USB device to the Zyxel Device and archive the Zyxel Device system logs to it here. | |
Network Tool | Identify problems with the connections. You can use Ping or Traceroute to help you identify problems. | |
Routing Traces | Configure traceroute to identify where packets are dropped for troubleshooting. | |
Wireless Frame Capture | Capture wireless frames from APs for analysis. | |
Packet Flow Explore | Routing Status | Check how the Zyxel Device determines where to route a packet. |
SNAT Status | View a clear picture on how the Zyxel Device converts a packet’s source IP address and check the related settings. | |
Shutdown/ Reboot | Shutdown/ Reboot | Turn off or restart the Zyxel Device. |
Tables and Lists
Web Configurator tables and lists are flexible with several options for how to display their entries.
Click a column heading to sort the table’s entries according to that column’s criteria.
Click the down arrow next to a column heading for more options about how to display the entries. The options available vary depending on the type of fields in the column. Here are some examples of what you can do:
• Sort in ascending or descending (reverse) alphabetical order
• Select which columns to display
• Group entries by field
• Show entries in groups
• Filter by mathematical operators (<, >, or =) or searching for text
Select a column heading cell’s right border and drag to re-size the column.
Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location.
Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
The tables have icons for working with table entries. You can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activate, or deactivate.
Here are descriptions for the most common table icons.
Label | Description |
|---|---|
Add | Click this to create a new entry. For features where the entry’s position in the numbered list is important (features where the Zyxel Device applies the table’s entries in order like the security policy for example), you can select an entry and click Add to create a new entry after the selected entry. |
Edit | Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings. In some tables you can just click a table entry and edit it directly in the table. For those types of tables small red triangles display for table entries with changes that you have not yet applied. |
Remove | To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so. |
Activate | To turn on an entry, select it and click Activate. |
Inactivate | To turn off an entry, select it and click Inactivate. |
Connect | To connect an entry, select it and click Connect. |
Disconnect | To disconnect an entry, select it and click Disconnect. |
References | Select an entry and click References to check which settings use the entry. |
Move | To change an entry’s position in a numbered list, select it and click Move to display a field to enter a number for where you want to put that entry and press [ENTER] to move the entry to the number that you entered. For example, if you enter 6, the entry you are moving becomes number 6 and the previous entry 6 (if there is one) gets pushed up (or down) one. |
Working with Lists
When a list of available entries displays next to a list of selected entries, you can often just double-click an entry to move it from one list to the other. In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list.