ZyXEL Communications EX3301-TO User manual

1
ZYXEL EX3301-TO
Wireless Gigabit
Ethernet Dual
Band Router
User Guide
light up your life with gigabit full fibre

2

3
1. Introduction ........................................................... 4
1.1. Document Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.2. Target Audience .......................................................4
1.3. Admonitions ...........................................................4
1.4. Revision History ........................................................4
2. Overview ............................................................. 5
2.1. Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.2. Package Contents ..................................................... 5
2.3. Front Panel ............................................................ 6
2.4. Rear Panel .............................................................8
3. Connecting the Cables ................................................. 9
4. Connecting to the Wireless Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
5. Configuring the Zyxel Device Using the Web Configurator ................... 9
5.1. Web Configurator Overview ............................................9
5.2. Software Requirements ................................................. 9
5.3. Logging in to the Web Configurator ..................................... 10
5.4. Configuring the Zyxel Device Using the Wizard ........................... 11
5.5. Layout ................................................................ 13
5.5.1 Main Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.5.2 Navigation Panel ..................................................13
5.5.3 Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5.6. Configuring the Wireless Network Settings ............................... 21
5.6.1 Setting up a Secure Wireless Network Using WPS ....................22
5.7. Configuring the Firewall ................................................. 24
5.8. Configuring the WiFi Network ........................................... 25
5.9. Configuring the Guest WiFi Network .....................................27
5.10. Changing the LAN IP Address ...........................................28
5.11. Creating a SIP Account .................................................29
5.11.1 Editing an Existing SIP Account ..................................... 34
5.11.2 Deleting an Existing SIP Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
5.12. Configuring Parental Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
5.12.1 Editing an Existing PCP ............................................. 37
5.12.2 Deleting an Existing PCP ........................................... 38
5.13. Port Forwarding ...................................................39
6. Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
7. Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

4
1. Introduction
1.1. Document Overview
This document provides instructions on how to set up the Zyxel wireless AX1800
Gigabit Ethernet IAD EX3301-T0 (further referred to as the Zyxel device) and how to
configure the most common settings.
1.2 Target Audience
This document is intended for subscribers who set up and configure the Zyxel device.
1.3 Admonitions
The following admonition is used in this document.
NOTE A note provides useful tips or additional information to the reader.
1.4 Revision History
Version Description
V211109 First version

5
2. Overview
The Zyxel device is a dual-band wireless AX1800 Gigabit IAD that provides fast and
secure Internet access for wireless devices such as personal computers, laptops,
tablets, and smartphones. It is a dual-band gateway that provides both 2.4G and 5G
networks at the same time. You can use the 2.4GHz bandwidth for regular Internet
surfing and for downloading, and the 5GHz bandwidth for high-definition video,
music, and gaming.
The Zyxel device functions as a wireless access point (AP) for IEEE 802.11b/g/n/a/ac
wireless devices. It allows Internet connection without having to rely on Ethernet
cables. It also supports WiFi protected setup (WPS) that allows you to set up a
wireless network with strong security.
2.1 Technical Specifications
The following table contains technical information about the Zyxel device:
2.2 Package Contents
The Zyxel device package contains the following:
• Zyxel device
• Power cable with a UK converter
• Ethernet cable
• Quick start guide
• Declaration of conformity and safety warnings
Product name Dual-band wireless AX1800 Gigabit Ethernet IAD
WAN interface GbE RJ45
Ethernet port
(10/100/1000) 5 (1 for Ethernet WAN)
POTS FXS port 2
USB port 1 (USB 2.0)
WLAN 2.4GHz 2x2 ax + 5GHz 2x2 ax

6
2.3 Front Panel
The LED status indicators are located on the front panel of the Zyxel device.
The following table describes the LED status indicators:
LED Colour Status Description
Power
Green
On The device is receiving power and is ready for use.
Blinking The device is starting up.
Red
On The device detected an error during start-up.
Blinking The device is uploading firmware.
Ethernet
WAN Green
On There is Ethernet connection on the WAN.
O There is no Ethernet connection on the WAN.
Internet
Green
On The device has an IP connection but no trac.
Blinking The device is sending or receiving IP trac.
O There is no Internet connection, or the gateway
is in bridged mode.
Red On
The device attempted to get an IP address, but it
failed. Possible causes are no response from the
DHCP server, no PPPoE response, or the PPPoE
authentication failed.
LAN1-4 Green
On The Zyxel device has a successful 10/100/1000 Mbps
Ethernet connection with a device on the LAN.
Blinking The Zyxel device is sending or receiving data
to/from the LAN at 10/100/1000 Mbps.
O The Zyxel device does not have an Ethernet
connection with the LAN.

7
2.4G
WLAN/WPS
Green
On The 2.4GHz wireless network is activated.
Blinking The Zyxel device is communicating with a 2.4GHz
wireless client.
O The link is down or disabled.
Amber Blinking The Zyxel device is setting up a WPS connection
with a 2.4GHz wireless client.
5G
WLAN/WPS
Green
On The 5GHz wireless network is activated.
Blinking The Zyxel device is communicating with a 5GHz
wireless client.
O The 5GHz wireless network is not activated.
Amber Blinking The Zyxel device is setting up a WPS connection
with a 5GHz wireless client.
Phone 1 -
Phone 2
Green
On
A SIP account is registered for at least one phone
port, and there is no voice message in the
corresponding SIP account.
Blinking
A telephone connected to one of the phone ports
has its receiver o the hook, or there is an incoming
call. There is no voice message in the corresponding
SIP account.
Amber
On
A SIP account is registered for the phone port, and
there is a voice message in the corresponding
SIP account.
Blinking
A telephone connected to the phone ports has its
receiver o the hook, or there is an incoming call.
There is a voice message in the corresponding
SIP account.
O
• The Zyxel device is turned o.
• The VoIP function is not activated.
• The SIP account is not enabled.
• The phone port does not have a SIP
account registered.

8
2.4 Rear Panel
The connection ports are located on the rear panel of the Zyxel device.
Ports/Buttons Function
POWER Connect the power cable here.
ON/OFF Press the ON/OFF button to switch on and o the device.
RESET
If you want to return the device to factory defaults because, for example, you
forgot your password or cannot access the Web Configurator, press and hold the
RESET button until the Power LED starts blinking. The password will be reset to the
factory default (see the device label) and the IP address will be 192.168.1.1.
PHONE 1 -
PHONE 2 Connect analogue phones to the phone ports to make phone calls.
USB Use the USB port for cellular WAN backup, file sharing, media server, & print server.
LAN1 - LAN4 Connect computers or other Ethernet devices to the Ethernet ports for Internet access.
WAN Connect an Ethernet cable to the Ethernet WAN port for Internet access.
WIFI ON/OFF Press the WLAN button for more than one second to enable the wireless function.
The following table describes the ports and buttons of the rear panel:

9
3. Connecting the cables
Perform the following steps to set up the Zyxel device:
1. Use an Ethernet cable to connect your gateway modem to the WAN port.
2. (Optional) Connect a computer to the LAN port using the yellow Ethernet cable.
You can skip this step if you want to wirelessly connect to the Internet.
3. Connect the power cable to the Zyxel device and press the POWER button. It can
take a couple of minutes. When the Power, the 2.4G, and 5G LEDs are solid green,
the device is ready to be connected to the wireless network.
4. Connecting to a Wireless Network
Perform the following steps to connect your wireless device to the wireless network:
1. Open the WiFi network list on your wireless device.
2. Select the name, that is the SSID of your wireless network that is available on the
device label.
3. Enter the password, that is the Wireless Key that is available on the device label.
4. Click Connect.
5. Configuring the Zyxel device using
the web configurator
5.1. Web Configurator Overview
The Web Configurator is an HTML-based management interface used for setting up
and managing the Zyxel device via an Internet browser.
5.2 Software Requirements
The software requirements for using the Web Configurator are the following:
• Internet Explorer 11.0 or later, or Mozilla Firefox 69.0 or later, or Safari 10.14.6 or later.
• Pop-up blockers by Zyxel are disabled in your browser.
• JavaScript (enabled by default).
• Java permissions (enabled by default).

10
5.3. Logging in to the Web Configurator
Perform the following steps to log in to the Web Configurator:
1. Make sure that the Zyxel device is on, the Power LED is solid green, and you are
connected to the Zyxel WiFi network.
2. Launch your web browser. If the Zyxel device does not automatically direct you to
the login screen, go to http://192.168.1.1.
3. On the Login screen, select your preferred language from the drop-down menu in
the top right corner.
4. When logging in for the first time, type in the default user name admin and the
login password that is available on the device label. If you have already changed
your password, enter your new password into the password field.
5. Click Login. When logging in for the first time, a Password Reset screen comes up.
Enter a new password and retype it to confirm. The password must contain at least
one numeric character and one alphanumeric character. Then click Change password.
NOTE You can bypass this step by clicking Skip.

11
NOTE You can bypass this step by clicking Skip.
5.4. Configuring the Zyxel device using the Wizard
When logging in to the Web Configurator for the first time, the Quick Start Wizard
screen automatically pops up, where you can configure basic settings like time zone,
Internet, and WiFi. If this is not the first time you are logging in, click the Wizard icon
on the Navigation panel.
Perform the following steps to configure your device using the Wizard:
1. Click Let’s go on the Quick Start Wizard window.
2. Select the time zone of your location.
3. Click next.

12
NOTE You can bypass this step by clicking Skip.
4. The Wizard will check the Internet connectivity. Click Next to continue.
5. After the Zyxel device is connected to the Internet, click Next.
6. The next screen shows the WiFi Settings. To change the WiFi name and the
WiFi password, enter the changes into the respective fields.
1. To use the same WiFi name for both 2.4G and 5G wireless networks, leave the
Keep 2.4GHz and 5GHz the same checkbox checked.
2. Click Done to complete the setup.

13
5.5. Layout
Layout The Web Configurator is divided into the following two parts:
• The main window (1) shows basic settings in the form of widgets. For more
information, see Main Window.
• The navigation panel (2) contains the configuration menus. For more information,
see Navigation Panel.
5.5.1. Main Window
The main window contains widgets that provide quick access to the basic settings, such
as connectivity, WiFi settings, and parental control.
You can rearrange the order of the widgets by performing the following steps:
1. Click the ( ) icon.
2. Drag and drop the widget to move it to the desired place.
3. Click the checkbox on the lower left corner to save the changes.
5.5.2. Navigation Panel
The navigation panel contains the configuration menus that are used for configuring the
Zyxel device. Click the menu icon ( ) in the top right corner to open the navigation panel.
21

14
Link Tab Function
Connection
status
This is the main window of the Web Configurator.
Use this screen to configure basic Internet access,
wireless settings, and parental controls. This screen
also shows the network status of the Zyxel device
and your wireless devices connected to it.
Network Settings
Broadband
Broadband
Use this screen to change the Internet access
settings. The summary table shows the configured
WAN services (connections) on the Zyxel device. Use
the information provided by your ISP to configure
WAN settings.
Cellular Backup
The USB port of the Zyxel Device allows you to
attach a cellular dongle to wirelessly connect to a
cellular network for Internet access.
Wireless
General
Use this screen to enable the Wireless LAN, enter
the SSID, and select the wireless security mode. We
recommend selecting More Secure to enable
WPA3-SAE/WPA2-PSK data encryption.
Guest/More AP
Use this screen to configure a guest wireless network
that allows access to the Internet only through the
Zyxel device.
MAC Authentication
Use this screen to give exclusive access to specific
devices (Allow) or exclude specific devices from
accessing the Zyxel device (Deny) based on the
MAC address of each device.
WPS
Use this screen to establish a WPS connection. Your
device must support WPS to use this feature. We
recommend using Push Button Configuration (PBC)
if your device supports it.
WMM
Use this screen to enable WiFi MultiMedia (WMM)
and WMM Automatic Power Save (APSD) in wireless
networks for multimedia applications.
Others
Use this screen to configure advanced wireless
settings, such as additional security settings, power
saving, and data transmission settings.
Channel Status Use this screen to scan for wireless LAN channel
noise and view the results.
MESH Use this screen to enable or disable MPro Mesh for
wireless devices.
The following table describes the configuration menus:

15
Link Tab Function
Home
Networking
LAN Setup Use this screen to set the Local Area Network IP
address and subnet mask of the Zyxel Device.
Static DHCP User this screen to assign IP addresses on the LAN to
individual computers based on their MAC Addresses.
UPnP Use this screen to enable or disable UPnP State or
UPnP NAT-T State.
Additional Subnet Use this screen to configure IP alias and public
static IP.
STB Vendor ID
Use this screen to configure the Vendor IDs of
connected Set Top Boxes (STBs) so the Zyxel device
can automatically create static DHCP entries for
them when they request IP addresses.
Wake on LAN
Use this screen to remotely turn on a device on the
network, such as a computer, storage device, or
media server.
TFTP Server Name Use this screen to identify a TFTP server for
configuration file download using DHCP option 66.
Routing
Static Route Use this screen to view and configure the static
route rules on the Zyxel device.
DNS Route Use this screen to view and configure DNS routes on
the Zyxel device.
Policy Route Use this screen to configure policy routing on the
Zyxel device.
RIP
Use this screen to configure Routing Information
Protocol (RIP, RFC 1058 and RFC 1389) to exchange
routing information with other routers.

16
QoS
General Use this screen to enable or disable QoS and set
the upstream bandwidth or assign trac priority.
Queue Setup Use this screen to configure QoS queue assignment
to decide the priority on WAN/LAN interfaces.
Classification Setup Use this screen to add, edit, or delete QoS classifiers.
Shaper Setup Use this screen to limit outgoing trac rate on the
selected interface.
Policer Setup
Use this screen to view QoS policers that allow you
to limit the transmission rate of incoming trac and
apply actions, such as drop, pass, or modify, to the
DSCP value of matched trac.
NAT
Port Forwarding
Use this screen to forward incoming service requests
from the Internet to the server(s) on your local
network. Port forwarding is commonly used when
you want to host online gaming, P2P file sharing, or
other servers on your network.
Port Triggering Use this screen to configure port triggering on the
Zyxel device.
DMZ
Use this screen to specify the IP address of a default
server to receive packets from ports not specified on
the Port Triggering screen.
ALG Use this screen to enable or disable ALG settings.
Address Mapping Use this screen to configure address mapping on
the Zyxel device.
Sessions
Use this screen to limit the number of concurrent
NAT sessions a client can use to ensure that no single
client uses up too many available NAT sessions.
DNS
DNS Entry Use this screen to view and configure DNS routes on
the Zyxel device.
Dynamic DNS Use this screen to configure a DDNS service provider
on the Zyxel device.
Vlan Group Use this screen to group and tag VLAN IDs to
outgoing trac from the specified interface.
Interface Grouping Use this screen to create multiple networks on the
Zyxel device.
USB Service
File Sharing Use this screen to set up file sharing through the
Zyxel device.
Media Server Use this screen to use the Zyxel device as a media
server.

17
Security
Firewall
General Use this screen to set the security level of the firewall
on the Zyxel device.
Protocol Use this screen to configure customized services
and port numbers.
Access Control
Use this screen to add new Access Control List (ACL)
rules and view the list of configured incoming or
outgoing filtering rules.
DoS Use this screen to activate protection against DoS
attacks.
MAC Filter
Use this screen to configure the Zyxel device to
permit access to clients based on their MAC
addresses in the MAC Filter screen.
Scheduler Rule
Use this screen to configure the days and times
when a configured restriction, such as parental
control, is enforced.
Certificates
Local Certificates Use this screen to view the certificate list, generate
certification requests, and import signed certificates.
Trusted CA Use this screen to view and manage the list of
trusted CAs.

18
VoIP
SIP
SIP Account
Use this screen to set up information about your
SIP account and configure audio settings, such as
volume levels for the phones connected to the
Zyxel device.
SIP Service Provider Use this screen to view the SIP service provider
information on the Zyxel Device.
Phone
Phone Device
Use this screen to view detailed information on
phones used for Internet phone calls (SIP). You can
define which phone(s) will ring when a specific SIP
address receives an incoming call, and which SIP
address will be used when an outgoing call is made
with a specific phone.
Region
Use this screen to configure settings that depend
on which region of the world the Zyxel Device is
located in. Selecting the region improves the quality
of phone calls.
Call Rule Use this screen to add, edit, or remove speed-dial
numbers for outgoing calls.
Call History
Use this screen to view the summary of received,
dialled, and missed calls and a call history list. You
can also see detailed information for each outgoing
call you made or each incoming call from someone
calling you.
System Monitor
Log
System Log Use this screen to view the status of events that
occurred to the Zyxel device.
Security Log
Use this screen to see the security-related logs for
the categories that you select. You can filter the
entries by selecting a severity level and/or category.
Trac Status
WAN
Use this screen to look at the network trac status
and the statistics of the WAN/LAN interfaces and
the NAT.
LAN This screen allows you to view packet statistics for
each LAN or WLAN interface on the Zyxel device.
NAT
Use this screen to view the list of the devices that
have received an IP address from the Zyxel device’s
LAN or WLAN interface(s) and have ever established
a session with the Zyxel device.
VoIP Status
Use this screen to view VoIP registration status,
current call status, and other related information for
each SIP account.

19
ARP Table
Use the ARP table to view the IPv4-to-MAC address
mappings for each device connected to the Zyxel
device. The neighbour table shows the IPv6-to-MAC
address mappings of each neighbour.
Routing Table Use this screen to view the routing table of the
Zyxel device
WLAN Station Status
Use this screen to view the status of the wireless
stations that are currently associated to the
Zyxel device.
Cellular
Statistics
Use this screen to look at cellular Internet
connection status.
Maintenance
System
Use this screen to name the Zyxel device (host
name) and give it an associated domain name for
identification purposes.
User Account
Use this screen to create and manage user
accounts and their privileges on the Zyxel device.
For example, you can change the password of the
Web Configurator here.
Remote
Management
MGMT Service
Use this screen to configure the interfaces through
which services can access the Zyxel Device. You can
also specify service port numbers that computers
must use to connect to the Zyxel Device.
Trust Domain
Use this screen to view a list of public IP addresses that
can access the Zyxel device through the services
configured in Maintenance > Remote Management.
SNMP
Use this screen to configure Simple Network
Management Protocol (SNMP) settings on the
Zyxel device.
Time Use this screen to change the time and date on the
Zyxel device.
Email Notification Use this screen to view, remove and add e-mail
account information.
Log Settings
Use this screen to configure where the Zyxel device
sends logs to, and which type of logs the Zyxel
device records.
Firmware Upgrade Use this screen to upload new firmware to the
Zyxel device.
Backup/Restore
Use this screen to back up and restore the Zyxel
device’s configuration settings or reset the factory
default settings.
Reboot Use this screen to reboot the Zyxel device without
turning the power o.

20
Diagnostics
Ping &
Traceroute &
Nslookup
Use this screen to ping, traceroute, or nslookup for
troubleshooting the Zyxel device. Ping and
traceroute are used to test whether a particular
host is reachable. Nslookup is used to find the IP
address for a host name and vice versa.
802.1ag
Use this screen to configure and perform
Connectivity Fault Management (CFM) actions as
defined by the IEEE 802.1ag standard. CFM
protocols include Continuity Check Protocol (CCP),
Link Trace (LT), and Loopback (LB).
802.3ah Use this screen to configure Link layer Ethernet
Operations, Administration and Maintenance (OAM).
Icon Description
Click this icon to configure the time zone, Internet access, and wireless settings
of the Zyxel device. For more information, see Configuring the Zyxel Device Using
the Wizard.
Click this icon to select the colour of the Web Configurator.
Click this icon to select the language of the Web Configurator.
Click this icon to reboot the Zyxel device.
Click this icon to log out of the Web Configurator.
5.5.3. Icons
The navigation panel provides additional functions that are displayed with the following icons: