ZyXEL Communications P-334U Bedienungsanleitung

P-334U/P-335U 802.1 1a/g Wireless Router User ’ s Guide V ersi on 3.60 Edition 2 1 1/2006[...]

[...]

P-334U/P-335U User’s Guide Copyright 3 Copyright Copyright © 2006 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical , magnetic, optica[...]

P-334U/P-335U User’s Gu ide 4 Certifications Certifications Federal Communications Commissi on (FCC) Interference St atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference rece ived, including in[...]

P-334U/P-335U User’s Guide Certifications 5 者均不得擅自變更頻率、加大功 率或變更原設計之特性及功能。 第十四條 低功率 射頻電機之使用不得影響飛航安全 及干擾合法通信；經發現 有干擾現象時，應立即停用，並 改善至無干擾時方得繼續使用。 前項合法通信，指依?[...]

P-334U/P-335U User’s Gu ide 6 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the de[...]

P-334U/P-335U User’s Guide ZyXEL Limited Warranty 7 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have ind ic[...]

P-334U/P-335U User’s Gu ide 8 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t. METHOD LOCATION SUPPOR[...]

P-334U/P-335U User’s Guide Customer Support 9 POLAND info@pl.zyxel.com +48 (22) 333 82 50 www .pl.zyxel.com ZyXEL Communications ul. Okrzei 1A 03-715 W arszawa Poland +48 (22) 333 8251 RUSSIA http://zyxel.ru/support +7-095-542-89-29 www .zyxel.ru Zy XEL Russia Ostrovityanova 37a S tr . Moscow , 1 17279 Russia sales@zyxel.ru +7-095-542-89-25 SP AI[...]

P-334U/P-335U User’s Gu ide 10 Customer Suppo rt[...]

P-334U/P-335U User’s Guide Table of Contents 11 T able of Content s Copyright .................................................. ................................................................ 3 Certifications ............................................ ................................................................ 4 Safety W arnings ........[...]

P-334U/P-335U User’s Gu ide 12 Table of Contents Chapter 3 Connection Wizard ........................................................ ......................................... 49 3.1 Wizard Setup ... ............. ................ ............. ............. ................ ............. ............... 49 3.2 Connection Wizard: S TEP 1: System [...]

P-334U/P-335U User’s Guide Table of Contents 13 4.5 MAC Filter ....... ................ ............. ............. ............. ................ ............. ............. ..81 4.6 Wireless LAN Advanced Screen ...................... ................ ............. ................ .....83 Chapter 5 Wireless T utorial............................[...]

P-334U/P-335U User’s Gu ide 14 Table of Contents Chapter 9 Network Address T ranslation (NA T) ............................ ....................................... 11 5 9.1 NA T Ov erview ................. ............. ............. ................ ............. ................ ....... 1 15 9.2 Using NA T .... ............. ................ ..[...]

P-334U/P-335U User’s Guide Table of Contents 15 Chapter 13 IPSec VPN ................................................................................. ............................ 139 13.1 IPSec VPN Ov erview ............ ............. ................ ............. ................ ............. 139 13.1.1 IKE SA (IKE Phase 1) Overview .........[...]

P-334U/P-335U User’s Gu ide 16 Table of Contents 15.2 Application-based Band width Management ............... ............. ................ ....... 173 15.3 Subnet-based Bandwidth Management ............ ................ ............. ................ 174 15.4 Application and Subne t-based Bandwidth Management ..................... .......... 17[...]

P-334U/P-335U User’s Guide Table of Contents 17 Chapter 18 Print Server ............................................... ..................................................... ....... 199 18.1 Print Server Overview ..... ............. ............. ............. ................ ............. .......... 199 18.2 ZyXEL Device Print Server ..........[...]

P-334U/P-335U User’s Gu ide 18 Table of Contents 24.5 Problems with Restricted Web Pages and Keyword Blocking ............. .......... 233 24.5.1 Pop-up Windows, JavaScripts a nd Java Permissions ................ .......... 235 24.5.1.1 Internet Explorer Pop-up Blockers .......... ................. ................ ...235 24.5.1.2 JavaScripts . .[...]

P-334U/P-335U User’s Guide 19 List of Figures Figure 1 Secure Internet A ccess via Cable or DSL Modem ... ................ ................ ............. 32 Figure 2 WLAN Application Example .............. ... ............. ................ ............. ............. .......... 32 Figure 3 Print Server Application .... ............. ... ........[...]

P-334U/P-335U User’s Gu ide 20 Figure 37 Wireless: WP A-PSK/ WP A2-PSK ........ ................. ............ .......................... .......... 74 Figure 38 Wireless: WP A/W P A2 ........ ............. ................ ................ ............. ................ ....... 76 Figure 39 OTIST ....................... ................ ........[...]

P-334U/P-335U User’s Guide 21 Figure 80 Content Filt er: Filter ..................... ............. ............. ................ ............. ................ 13 4 Figure 81 Content Filt er: Sc hedule .... ................ ................. ............ ................. ............ ....... 135 Figure 82 VPN: Example ........... .............[...]

P-334U/P-335U User’s Gu ide 22 Figure 123 Add Printer Help ............ ............. ................ ................ ............. ................ .......... 207 Figure 124 Add Printer Wizard: Welcome ................. ................ ................ ................ .......... 207 Figure 125 Add Printer Wizard: Local or Networ k Printer ..[...]

P-334U/P-335U User’s Guide 23 Figure 166 Windows 95/98/Me: TCP/IP Properti es: IP Address .................. ............. .......... 257 Figure 167 Windows 95/98/Me: TCP/IP Properti es: DNS Configuration .................. .......... 258 Figure 168 Windows XP: St art Menu .... ................. ............. ................ ................ ...[...]

P-334U/P-335U User’s Gu ide 24[...]

P-334U/P-335U User’s Guide 25 List of T ables T able 1 Front Panel LEDs .............. ................ ............. ................ ................ ............. .......... 35 T able 2 S tatus Screen Icon Key ..... ................ ................ ............. ................ ................ ....... 39 T able 3 Web Configurator S tatus Sc[...]

P-334U/P-335U User’s Gu ide 26 T able 37 Advanced LAN .... ............. ................ ................ ............. ................ ................ ....... 108 T able 38 DHCP Server General ........ ................ ................. ............ ................. ............ ....... 1 1 1 T able 39 DHCP Server Advanced ..................[...]

P-334U/P-335U User’s Guide 27 T able 80 Maintenance Firmware Up load .. ................ ............. ................ ............. ............. ... 223 T able 81 Maintenance Restore Configuration .................... ................ ................ ................ 225 T able 82 Config Mode: Advanced Screens .............. ................ [...]

P-334U/P-335U User’s Gu ide 28 T able 123 Content Filtering Logs .......................... ................ ................ ................ ............. 297 T able 124 Attack Logs ................. ............. ................ ............. ............. ................ ............. ... 298 T able 125 IPSec Logs .............. ...........[...]

P-334U/P-335U User’s Guide Preface 29 Preface Congratulations on your p u rchase of the P-334U or P-335U 802.1 1a/g W ireless Router . This manual is designed to gu ide you through the config uration of your P-334U or P-335U fo r its various applications . About This U ser's Guide This User ’ s Guide is de signed to guide you thro ugh the [...]

P-334U/P-335U User’s Gu ide 30 Pref ace • The P-334U or P-335U series may be referre d to as the “ZyXEL Device” in this User ’ s Guide. Graphics Icons Key ZyXEL Device Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal[...]

P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Devi ce 31 C HAPTER 1 Getting to Know Y our ZyXEL Device This chapter introduces the main features and applications of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wirele ss firewall router for all data passing betwee n the Internet and LAN’ [...]

P-334U/P-335U User’s Gu ide 32 Chapter 1 Getting to Know Your ZyXEL Device The ZyXEL Device guarantees not only high sp eed Internet acces s, but secure internal network protection an d traffic management as well. Figure 1 Secure Internet Access via Cable o r DSL Modem Y ou can also configure firewall and content filte ring on the ZyXEL Device fo[...]

P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device 33 1.2.3 Print Server and Router Combin ed Application (P-335U Only) The P-335U’ s built-in prin t server allows your network’ s comp uters to share a printer . Simply connect a USB printer to the USB port on the ZyXEL Device. The following figu re shows how you can setup [...]

P-334U/P-335U User’s Gu ide 34 Chapter 1 Getting to Know Your ZyXEL Device 1.4 Good Habit s for Managing Y our ZyXEL Device Here are some things you should do regularly . • Change the password. Use a password that’ s not easy to guess and that consists of different types of characters, such as numbers and letters. • W rite down the password[...]

P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device 35 The following table describes the LEDs. Table 1 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR Green On The ZyXEL Device is receiving power and functionin g properl y . Blinking T he ZyXEL Device is performing testing. Red On Power to the ZyXEL Device is too low . None [...]

P-334U/P-335U User’s Gu ide 36 Chapter 1 Getting to Know Your ZyXEL Device[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 37 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access the ZyX EL Device web configurator and provides an overview of its screens. 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy ZyXEL D[...]

P-334U/P-335U User’s Gu ide 38 Chapter 2 Introducing the Web Configurator Figure 7 Change Password Screen Note: The management session automatically time s out when the time period set in the Administrator Inactivity T imer field expires (default five minutes). Simply log back into the ZyXEL Device if this happe ns to you. 2.3 Resetting the ZyXEL[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 39 Figure 8 Web Configur ator S tatus Scre en The following table describ es the icons shown in the St a t u s screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the dro p-down list box to have the web configurat or display in that language. Click t[...]

P-334U/P-335U User’s Gu ide 40 Chapter 2 Introducing the Web Configurator The following table describes the labels shown in the St a t u s screen. Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics. Click this butto[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 41 2.4.1 Navigation Panel After you enter the password, us e the sub-menu s on the navigation panel to configure ZyXEL Device featur es. - CPU Usage This number shows how many kilob ytes of the heap memory the ZyXEL Device is using. Heap memory refers to the me mory that is n[...]

P-334U/P-335U User’s Gu ide 42 Chapter 2 Introducing the Web Configurator The following table describes the sub-menus. Table 4 Screens Summary LINK TA B FUNCTION S tatus This screen shows the ZyXEL Device’s general device, system and interface status information. Use th is screen to access the wizard, and summary statistics tables. Network Wire[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 43 2.4.2 Summary: Bandwid th Management Monitor Select the BW MGMT Monitor (Details...) hyperlink in St a t u s screen. V iew the bandwidth usage of the W AN configured bandwidth rul es. This is also shown as bandwidth usage over the bandwidth budget for each rul e. The gray [...]

P-334U/P-335U User’s Gu ide 44 Chapter 2 Introducing the Web Configurator Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP T able DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disab[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 45 2.4.4 Summary: Packet St atistics Click the Packet S tatistics (Details...) hyperlink in the St a t u s screen. Read-only information here includes port status and packet specific st atistics. Also provided are "system up time" and "poll interval(s)". Th[...]

P-334U/P-335U User’s Gu ide 46 Chapter 2 Introducing the Web Configurator 2.4.5 VPN Monito r Click VPN Monitor (Details...) hyperlink in the St a t u s screen. This screen displays read-only information about the ac tive VPN connections. A Security As sociation (SA) is the group of security settings related to a specific VPN tunnel. Figure 13 Sum[...]

P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 47 Figure 14 Summary: Wireless Association List The following table describes the labels in this screen. T able 7 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address [...]

P-334U/P-335U User’s Gu ide 48 Chapter 2 Introducing the Web Configurator[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 49 C HAPTER 3 Connection W izard This chapter provides informa tion o n the W izard setup screens in the web configurato r . 3.1 Wizard Setup The web confi gurator ’ s W izard setup helps you co nfigure your device to access the Internet. Refer to your ISP (Internet Serv ice Provider) check[...]

P-334U/P-335U User’s Gu ide 50 Chapter 3 Connection Wizard Figure 16 Select a Languag e 4 Read the on-screen in formation and click Next . Figure 17 Welcome to the Con nection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information. 3.2.1 System Name System Name is for ide[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 51 3.2.2 Domain Name The Domain Name entry is what is propagated to th e DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual compute r , the domain name can be assigned fro[...]

P-334U/P-335U User’s Gu ide 52 Chapter 3 Connection Wizard Figure 19 Wizard S tep 2: Wireless LAN The following table describes the labels in this screen. Table 9 Wizard S tep 2: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII character s) for the wireless LAN. If you change this field on the ZyX[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 53 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encr yption parameters. Figure 20 Wizard S tep 2: Basic(WEP) Security The following table describes the labels in this screen. Table 10 Wizard S tep 2: Basic(WEP) Security LABEL DESCRIPTION Passphrase T ype a Passphrase (up to 32 pri[...]

P-334U/P-335U User’s Gu ide 54 Chapter 3 Connection Wizard 3.3.2 Extend(WP A-PSK or WP A2-PSK) Secu rity Choose Extend(WP A-PSK) or Extend(WP A2-PSK) security in the W ireless LAN setup screen to set up a Pr e-Shared Key . Figure 21 Wizard S tep 2: Extend(WP A- PSK or WP A2-PSK) Security The following table describes the labels in this screen. Ta[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 55 3.3.3 OTIST The following screen allows you to enable ZyXEL Device One-T ouch Intelligent Security T echnology (OTIST). One-T ouch Intelligent Se curity T echnology (OTIST) allows your ZyXEL Device to assign wireless clients the ZyXEL Device’ s SSID and static WEP or WP A- PSK encryption[...]

P-334U/P-335U User’s Gu ide 56 Chapter 3 Connection Wizard 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Devic e of fers three Internet connection types. They a re Ethernet , PPP over Ethernet or PP TP . The wizard attempts to detect whic h W AN connection type y ou are using. If the wizard does not detect a connection type, you[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 57 Figure 24 Wizard S tep 3: Ethernet Connection 3.4.2 PPPoE Connection Point-to-Point Protocol ov er Ethernet (PPPoE) function s as a dial-up connection. PPPoE is an IETF (Internet Engineering T a sk Force) standard specifying ho w a host personal computer interacts with a broadband modem (f[...]

P-334U/P-335U User’s Gu ide 58 Chapter 3 Connection Wizard Figure 25 Wizard S tep 3: PPPoE Connection The following table describes the labels in this screen. T able 14 Wizard S tep 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access Connection T ype Select the PPP over Ethernet option for a dial-up connection. Service Name T [...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 59 Figure 26 Wizard S tep 3: PPTP Connection The following table describes the fields in this screen Table 15 Wizard S tep 3: PPTP Connection LABEL DESCRIPTION ISP Parameters fo r Internet Access Connection T ype Select PPTP from the drop-down list box. T o c onfigure a PPTP client, you must [...]

P-334U/P-335U User’s Gu ide 60 Chapter 3 Connection Wizard 3.4.4 Y our IP Address The following wizard screen allows you to a ssign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on y our ISP . Figure 27 Wizard S tep 3: Y our IP Address The following table describes the labels in this screen Table 16 Wi[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 61 Y ou can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small or ganization an d your Internet access is through an ISP , the ISP can provide you with the Intern et addresses for your local networks. On the other hand, if you [...]

P-334U/P-335U User’s Gu ide 62 Chapter 3 Connection Wizard 1 The ISP tells you the DNS server addresses, usua lly in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the W izard and/or WA N > Internet Connection screen. 2 If the ISP did not give you DNS serve[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 63 3.4.9 W AN MAC Address Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02. Table 19 Example of Network Properties for LAN Servers with Fixed[...]

P-334U/P-335U User’s Gu ide 64 Chapter 3 Connection Wizard The following table describes the fields in this screen. T able 20 Wizard S tep 3: W AN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assign ed default MAC address. Clone the computer ’s MAC address Select this option and enter the IP addr ess o[...]

P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 65 3.6 Connection Wizard Complete Click Apply to save your configuration. Figure 31 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup. Figure 32 Connection Wizard Complete W ell done! Y ou have successfully set up your Zy XEL Device to oper[...]

P-334U/P-335U User’s Gu ide 66 Chapter 3 Connection Wizar d[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 67 C HAPTER 4 W ireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more detailed information ab out wireless networks. 4.1 Wireless Network Overview The following figure provides an exampl e of a wireless n e twork. Figu[...]

P-334U/P-335U User’s Gu ide 68 Chapter 4 Wireless LAN • Every wireless client in the same wirel ess network must use security compatible with the AP . Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. 4.2 Wireless Security Overview The following section[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 69 For wireless networks, there are two typical plac es to store the user names and passwords for each user . • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server u sed in businesses mo re than in homes. If your AP does not prov[...]

P-334U/P-335U User’s Gu ide 70 Chapter 4 Wireless LAN Note: It is recommended that wireless networks u se WP A-PSK , WP A , or stronger encryption. IEEE 802.1x and W E P encryption are better than none at all, bu t it is still possible for unauthori zed devices t o figure out the original informat ion pretty quickly . It is not possible to use WP[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 71 Figure 34 Wireless General The following table describes the general wireless LAN labels in this screen. Table 23 Wireless General LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN. Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with whic[...]

P-334U/P-335U User’s Gu ide 72 Chapter 4 Wireless LAN Note: If you do not enable an y wireless security on your ZyXEL Device, your network is accessible to any wireless network ing device tha t is within range. Figure 35 Wireless: No Security The following table describes the labels in this screen. Table 24 Wireless No Security LABEL DESCRIPTION [...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 73 Figure 36 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 25 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate . The Z yXEL [...]

P-334U/P-335U User’s Gu ide 74 Chapter 4 Wireless LAN 4.3.3 WP A-PSK/WP A2-PSK Click Network > W ireless LAN to display the General screen . Figure 37 Wireless: WP A-PSK/WP A2-PSK Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you chose 6[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 75 The following table describes the labels in this screen. Table 26 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION WP A Compatible This check box is available only when you select WP A2-PSK or WP A2 in th e Security Mode field. Select the check box to have both WP A2 and WP A wireless clients be a[...]

P-334U/P-335U User’s Gu ide 76 Chapter 4 Wireless LAN Figure 38 Wireless: WP A/WP A2 The following table describes the labels in this screen. Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION WP A Compatible This check box is available only when you select WP A2-PSK or WP A2 in th e Security Mode field. Select the check box to have both WP A2 and WP [...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 77 4.4 OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it. T raditionally th is meant that you ha d to configure the settings on the AP[...]

P-334U/P-335U User’s Gu ide 78 Chapter 4 Wireless LAN 4.4.1 Enabling OTIST Y ou must enable OTIST on both the AP and wi reless client before you start transferring settings. Note: The AP and wireless client(s) MUST use the same Setup key . 4.4.1.1 AP Y ou can enable OTIST using the OTIST button or th e web configurator . 4.4.1.1.1 OTIST button If[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 79 The following table describes the labels in this screen. Table 28 OTIST LABEL DESCRIPTION Setup Key T ype an OTIST Setup Key of exactly eight ASCII characters in leng th. The default OTIST setup key is "01234567". Note: If you change the OTIST setup key here, you must also make the s[...]

P-334U/P-335U User’s Gu ide 80 Chapter 4 Wireless LAN 4.4.2 St arting OTIST Note: Y ou must press the OTIST button or click Sta rt in the AP OTIST web configurator screen and in the wireless clie nt(s) Adapter screen all within three minutes (at the time of writing). Y ou c an start OTIST in the wireless client s and AP in any order but they must[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 81 Figure 45 S tart OTIST? 2 If an OTIST -enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST -enabled AP for up to one minute. (If you manually have the wireless client search for an OT IST -enabled AP , there is no timeout; click Cancel i[...]

P-334U/P-335U User’s Gu ide 82 Chapter 4 Wireless LAN Figure 46 MAC Addres s Filter The following table describes the labels in this menu. Table 29 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for th e list of MAC addresses in the MAC A[...]

P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 83 4.6 Wireless LAN Advanced Screen Click Network > W ireless LAN > Advanced . The screen appears as shown. Figure 47 Advanced The following table describes the labels in this screen. Table 30 Advanced LABEL DESCRIPTION Wireless Advanced Setup RTS/CTS Threshold Enter a value between 0 and 2[...]

P-334U/P-335U User’s Gu ide 84 Chapter 4 Wireless LAN Apply Click Apply to save your changes b ack to the ZyXEL Device. Reset Click Reset to reload the previo us configuration for this screen. Table 30 Advanced LABEL DESCRIPTION[...]

P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 85 C HAPTER 5 W ireless T u torial This chapter gives you examples of how to set up an access point and wireless client for wireless communication using the following pa rameters. The wireless clients can acc ess the Internet through an AP wirelessly . 5.1 Example Parameters SSID SSID_Exampl[...]

P-334U/P-335U User’s Gu ide 86 Chapter 5 Wireless Tutorial Figure 48 AP: Wireless LAN > General 3 Make sure the Enable Wir eless LAN check box is selected. 4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection to have the AP choose a channe l which is not used by anothe r AP and display the ch annel number in the[...]

P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 87 Figure 49 AP: S tatus 7 Click the W L A N St a t i o n St a t u s hyperlink in the AP’ s St a t u s screen. Y ou can see if any wireless client has connected to the AP . Figure 50 AP: S tatus: WLAN S tation S tatus 5.3 Configuring the Wireless Client This section describes how to connec[...]

P-334U/P-335U User’s Gu ide 88 Chapter 5 Wireless Tutorial 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless networ k using the ZyXEL utility , as in the following diagram. The wireless client is labeled C and the access point is labeled AP . There are three ways to connect the client to an access point. ?[...]

P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 89 3 When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting. Use the Next button to move on to the next screen. Y ou can use the Back button [...]

P-334U/P-335U User’s Gu ide 90 Chapter 5 Wireless Tutorial Figure 53 ZyXEL Utility: Link Info 6 Open your Internet browser and enter http://www .zyxel.com or the URL of any other web site in the address bar . If you are able to access the web site, your wireless connection is successfully configured. If you cannot access the web site, try changin[...]

P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 91 you want to search again. Y ou can also conf igure your prof ile for a wireless network that is not in the list. Figure 55 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or sele[...]

P-334U/P-335U User’s Gu ide 92 Chapter 5 Wireless Tutorial 6 In the next screen, leave both boxes checked. Figure 58 Profile: Wireless Protocol Settings. 7 V erify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 59 Profile: Confirm Save 8 Click Activate Now to use the new profile immediately . Ot[...]

P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 93 10 Open your Internet browser , enter http://www .zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the we b site, your new profile is successfully configured. 11 If you cannot access the Internet go back to the Profile screen, select[...]

P-334U/P-335U User’s Gu ide 94 Chapter 5 Wireless Tutorial[...]

P-334U/P-335U User’s Guide Chapter 6 WAN 95 C HAPTER 6 WA N This chapter describes how to configure W AN settings. 6.1 W A N Overview See the chap ter about the connection wiz ard for more information on the fields in the W AN screens. 6.2 W AN MAC Address The MAC address screen allows users to conf igure the W AN port's MAC address by eithe[...]

P-334U/P-335U User’s Gu ide 96 Chapter 6 WA N Figure 61 Ethernet Encapsulation The following table describes the labels in this screen. Table 31 Ethernet Encapsulat ion LABEL DESCRIPTION Encapsulation Y ou must choose the Ethern et option when the W AN port is used as a regular Ethernet. Service T ype Choose from Stan da r d , Te l s t r a (RoadR[...]

P-334U/P-335U User’s Guide Chapter 6 WAN 97 6.3.2 PPPoE Encap sulation The ZyXEL Device supports PPPoE (Point-to-Poin t Protocol over Ethernet ). PPPoE is an IETF standard (RFC 2516) speci fying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wi reless, etc.) connection. The PPP over Ethernet option is for a dial-up con[...]

P-334U/P-335U User’s Gu ide 98 Chapter 6 WA N Operationally , PPPoE saves significant effort for bo th you and the ISP or carrier, as it requires no specific configuration of the broa dband modem at the customer site. By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on th e LAN do not need PPPoE[...]

P-334U/P-335U User’s Guide Chapter 6 WAN 99 The following table describes the labels in this screen. Table 32 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The ZyXEL Device supports P PPoE (Poin t-to-Point Protocol over Ethernet). PPPoE[...]

P-334U/P-335U User’s Gu ide 100 Chapter 6 WA N 6.3.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks. PP TP supports on-dem and, multi-protocol and virtu al pri[...]

P-334U/P-335U User’s Guide Chapter 6 WAN 101 Figure 63 PPTP Encapsulation[...]

P-334U/P-335U User’s Gu ide 102 Chapter 6 WA N The following table describes the labels in this screen. Table 33 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulation Point-to-Point T u nneling Protocol (PPTP) is a netw ork protocol th at enables secure transfer of data from a remote client to a private server , c[...]

P-334U/P-335U User’s Guide Chapter 6 WAN 103 6.4 Advanced W A N Screen T o change your ZyXEL Device’ s advanced W AN settings, click Network > WA N > Advanced . The screen appears as shown. Private This parameter determines if the ZyXEL Device will include the route to this remote node in its RIP broadcast s. If set to Ye s , this route i[...]

P-334U/P-335U User’s Gu ide 104 Chapter 6 WA N Figure 64 Advanced The following table describes the labels in this screen. Table 34 Advanced LABEL DESCRIPTION Multicast Setup Multicast Select IGMP V -1 or IGMP V -2 or None . IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it[...]

P-334U/P-335U User’s Guide Chapter 7 LAN 105 C HAPTER 7 LAN This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communic ation system to which many computers are attached. The LAN screens can help you config ure a LAN DHCP server, ma nage IP addresses, and partition your physical network int[...]

P-334U/P-335U User’s Gu ide 106 Chapter 7 LAN 7.2.2 IP Address and Subnet Mask Refer to the IP Address and Subnet Mask section in the Connection W izard chapter for this information. 7.2.3 Multicast T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the ne[...]

P-334U/P-335U User’s Guide Chapter 7 LAN 107 The following table describes the labels in this screen. Table 35 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address T ype th e IP address of your ZyXEL D evice in dotted decimal notation 192.168.1 .1 (factory defau lt). IP Subnet Mask The subne t mask specifies the network number portion of an IP address.[...]

P-334U/P-335U User’s Gu ide 108 Chapter 7 LAN The following table describes the labels in this screen. Table 36 LAN IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to confi gure anot her LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation. IP Subnet Mask Y ou r ZyXEL Devic[...]

P-334U/P-335U User’s Guide Chapter 7 LAN 109 Allow between LAN and WAN Select this check box to forward NetBIOS packet s from the LAN to the W AN and from the WAN to the LAN. If your firewall i s enabled with the de fault policy set to block W AN to LAN traffic, you also need to enable the default WAN to LAN firewall rule tha t fo rwards NetBIOS [...]

P-334U/P-335U User’s Gu ide 110 Chapter 7 LAN[...]

P-334U/P-335U User’s Guide Chapter 8 DHCP Server 111 C HAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server , the ZyXEL Dev[...]

P-334U/P-335U User’s Gu ide 112 Chapter 8 DHCP Server 8.3 DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Y ou can also use this screen to configure the DNS server information that the ZyXEL Devi ce sends to the DHCP clients. Every Ethernet device [...]

P-334U/P-335U User’s Guide Chapter 8 DHCP Server 113 The following table describes the labels in this screen. Table 39 DHCP Server Adva nced LABEL DESCRIPTION # This is the index number of the s tatic IP table entry (row). MAC Address T ype the MAC address (with colons) of a computer on your LAN. IP Address T ype the LAN IP address of a computer [...]

P-334U/P-335U User’s Gu ide 114 Chapter 8 DHCP Server Figure 70 Client List The following table describes the labels in this screen. Table 40 Client List LABEL DESCRIPTION # This is the index number of the host computer . IP Address This field displays the IP address relative to the # field liste d above. Host Name This field displays the compute[...]

P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 115 C HAPTER 9 Network Address T r anslation (NA T) This chapter discusses how to configure NA T on the ZyXEL Device. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet. For example, the source[...]

P-334U/P-335U User’s Gu ide 116 Chapter 9 Network Addr ess Translation (NAT) 9.2.2 Configuring Servers Behi nd Port Forwarding (Example) Let's say you want to assign po rts 21-2 5 to one FTP , T elnet and SMTP server ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.168.1.35 to a third [...]

P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 117 The following table describes the labels in this screen. Table 41 NAT General LABEL DESCRIPTION Network Address T ransla tion Network Address T ranslation (NA T) allows t he translation of an Internet protocol address used within on e network (for examp le a private IP a[...]

P-334U/P-335U User’s Gu ide 118 Chapter 9 Network Addr ess Translation (NAT) Figure 73 NA T Application The following table describes the labels in this screen. Table 42 NA T Application LABEL DESCRIPTION Game List Update A game list includes the pre-defined se rv ice name(s) and port number(s). Y ou can edit and upload it to the ZyXEL Device to [...]

P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 119 9.4.1 Game List Example Here is an example game list text file. The in dex number , service name and associated port(s) are specified by semi-colons (no spaces). Use th e name=xxx (where xxx is the service name) to create a new service. Port range can be se parated with [...]

P-334U/P-335U User’s Gu ide 120 Chapter 9 Network Addr ess Translation (NAT) Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=145 67,22000,23000-23009,27900,28900 2;name=Call of Duty;port=28960 3;name=Civilization IV;port=2056 4;name=Diablo I and II;port=6112 -6119,4000 5;name=Doom 3;port=27666 6;name=F.E.A.R;port=27888 7;name=F[...]

P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 121 9.5.1 T rigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 75 T rigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Devi[...]

P-334U/P-335U User’s Gu ide 122 Chapter 9 Network Addr ess Translation (NAT) Figure 76 NA T Advanced The following table describes the labels in this screen. Table 43 NA T Advanced LABEL DESCRIPTION Max NA T/Firewall Session Per User T ype a number ranging from 1 to 204 8 to lim it the number of NA T/firewall se ssions that a host can create. Whe[...]

P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 123 Incoming Incoming is a port (or a range of ports) that a server on the WAN u ses when it sends out a particular service. The ZyXEL De vice forwards the traffic with this port (or range of p orts) to the client computer on the LAN that requested the service. St a r t P o [...]

P-334U/P-335U User’s Gu ide 124 Chapter 9 Network Addr ess Translation (NAT)[...]

P-334U/P-335U User’s Guide Chapter 10 Dynamic D NS 125 C HAPTER 10 Dynamic DNS 10.1 Dynamic DNS Introduction Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own compute[...]

P-334U/P-335U User’s Gu ide 126 Chapter 10 Dynamic D NS Figure 77 Dynamic DNS The following table describes the labels in this screen. Table 44 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select the name of yo ur Dynamic DNS servic e provider . Dynamic DNS T ype Select the type of se[...]

P-334U/P-335U User’s Guide Chapter 11 Firewall 127 C HAPTER 11 Firewall This chapter gives some bac kground information on firewalls and explains how to get started with the ZyXEL Device firewall. 1 1.1 Introduction to Firewall 1 1.1.1 What is a Firewall? Originally , the term fir ewall referred to a construction tech nique designed to prevent th[...]

P-334U/P-335U User’s Gu ide 128 Chapter 11 Firewall The ZyXEL Device is installed between the LA N and a br oadband mode m connecting to the Internet. This allows it to act as a secure gatewa y for all data passing betwee n the Internet and the LAN. The ZyXEL Device has one Ethernet W AN port a nd four Ethernet LAN ports, which are used to physic[...]

P-334U/P-335U User’s Guide Chapter 11 Firewall 129 The following table describes the labels in this screen. Table 45 Firewall General LABEL DESCRIPTION Enable Firewall Select this check box to ac tivate the firewall. The ZyXEL Device per forms access control and protects against Denial of Se rvice (DoS) attacks when the firewall is activated. Pac[...]

P-334U/P-335U User’s Gu ide 130 Chapter 11 Firewall Figure 79 Services The following table describes the labels in this screen. Table 46 Firewall Services LABEL DESCRIPTION ICMP Internet Control Message Protocol is a messag e control and error-reporting protocol between a host server and a gate way to the Internet. ICMP u ses Internet Protocol (I[...]

P-334U/P-335U User’s Guide Chapter 11 Firewall 131 Do not respond to requests for unauthorized services Select this option to prevent hackers from finding the ZyXEL Device by probing for unused ports. If you select this option, the ZyXEL Device wil l not respond to port request(s) for unused ports, thus leaving the unu sed ports and the ZyXEL Dev[...]

P-334U/P-335U User’s Gu ide 132 Chapter 11 Firewall[...]

P-334U/P-335U User’s Guide Chapter 12 Content Filtering 133 C HAPTER 12 Content Filtering This chapter provides a brief overview of co ntent filtering using the embedded web GUI. 12.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs. Content filtering is[...]

P-334U/P-335U User’s Gu ide 134 Chapter 12 Content Filter ing Figure 80 Content Filter: Filter The following table describes the labels in this screen. Table 47 Content Filter: Filter LABEL DESCRIPTION T rusted Compu ter IP Address T o enable this feature, type an IP addre ss of any one of the computers in your network that you want to have as a [...]

P-334U/P-335U User’s Guide Chapter 12 Content Filtering 135 12.5 Schedule Click Security > Content Filter > Schedul e . The following screen displays. Figure 81 Content Filter: Schedule Keyword T ype a keyword in this field. Y ou may use any character (up to 64 charac ters). Wildcards are not allowed. Y ou can also enter a n umerical IP add[...]

P-334U/P-335U User’s Gu ide 136 Chapter 12 Content Filter ing The following table describes the labels in this screen. Table 48 Content Filter: Sched ule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the ZyXEL Device to perform content filtering. Select the Everyday ch eck box to have co ntent filtering turned on al[...]

P-334U/P-335U User’s Guide Chapter 12 Content Filtering 137 12.6.3 File Name URL Checking Filename URL checking has the ZyXEL Devi ce check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www .zyxel.com.tw/news/pressroom.php . Use the ip urlfilter customize actionFlags 8 [disable | e nable[...]

P-334U/P-335U User’s Gu ide 138 Chapter 12 Content Filt ering[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 139 C HAPTER 13 IPSec VPN This chapter explains how to set up and mainta in IPSec VPNs in the ZyXEL Device. First, it provides an overview of IPSec VPNs. Then, it introduces each screen for IPSec V PN in the ZyXEL Device. This chapte r applies to the P -335U. 13.1 IPSec VPN Overview A virtual privat[...]

P-334U/P-335U User’s Gu ide 140 Chapter 13 IPSec VPN Figure 83 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging data with a computer in network B . Inside networks A and B , the data is transmitte d the same way data is normally transmitted in the networks. Between routers X and Y , the data is protected by tunnelin[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 141 13.1.2.1 IKE SA Proposal The IKE SA proposal is used to identify the encryption algorithm, au thentication algorithm, and Diffie-Hellman (DH) key group that the ZyXEL Device and remote IPSec router use in the IKE SA. In main mode, this is done i n steps 1 and 2, as illustrated below . Figure 84 [...]

P-334U/P-335U User’s Gu ide 142 Chapter 13 IPSec VPN In main mode, the ZyXEL Dev ice and remote I PSec router authenticate each other in steps 5 and 6, as illustrated below . Th eir identities are encrypted usin g the encryption algorithm and encryption key the ZyXEL Device and remote IPSec router selected in previous steps. Figure 86 IKE SA: Mai[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 143 13.1.2.4 Negotiation Mode There are two negotiation modes: main mode and aggressive mode. Main mode prov ides better security , while aggressive mode is faster . Main mode takes six steps to establish an IKE SA. Step s 1-2: The ZyXEL Device sends its proposal s to the remote IPSec router . The r[...]

P-334U/P-335U User’s Gu ide 144 Chapter 13 IPSec VPN Most routers like router A now have an IPSec pa ss-through f eature. This feature helps router A recognize VPN packets and route them appropriately . If router A has this feature, router X and router Y can establish a VPN tunnel as long as the IPSec protocol is ESP . (See IPSec Protocol on page[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 145 Usually , you should select ESP . AH does not support encry ption, and ESP is more suitable with NA T . 13.1.3.3 Encap sulation There are two ways to e ncapsulate packets. Usua lly , you should use tunn el mode because it is more secure. T rans port mode is only used wh en the IPSec SA is used f[...]

P-334U/P-335U User’s Gu ide 146 Chapter 13 IPSec VPN If you do not enable PFS, the ZyXEL Device and remote IPSec router use the same root key that was generated when the IKE SA was established to generate encryption keys. The DH key exchan ge is time-consuming and may be unnecessary for data that does not require such security . 13.1.4 Additional[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 147 13.2 Remote DNS Server In cases where you want to use domain names to access Intranet servers on a remote network that has a DNS server , you must identify that DNS server . Y ou cannot use DNS servers on the LAN or from the ISP since these DNS servers ca nnot resolve domain names to private IP [...]

P-334U/P-335U User’s Gu ide 148 Chapter 13 IPSec VPN The following table describes the fields in this screen. T able 51 Security > VPN > Summary LABEL DESCRIPTION # This is the VPN policy index numb er . Active This field displays whether the VPN policy is active or not. This icon is turned on when th e rule is enabled. Local Addr . This di[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 149 Figure 92 Security > VPN > Rule Setup: IKE (Basic ) The following table describes the labels in this screen. Table 52 Security > VPN > Rule Setup: IK E (Basic) LABEL DESCRIPTION Property Activ e Select this check box to ac tivate this VPN policy . This option determines whether a VPN[...]

P-334U/P-335U User’s Gu ide 150 Chapter 13 IPSec VPN NA T Traversal Select this check box to enable NA T traversal. NA T tra versal allows you to set up a VPN connection when there are NA T ro uters between the two IPSec routers. Note: The remote IPSec router must also have NA T traversal enabled. See Section 13.1.2.5 on page 143 for more informa[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 151 Remote Address For a single IP address, enter a (stati c) IP address on the network behind the remote IPSec router . For a specific range of IP addresses, enter the be ginning (static) IP address, in a range of computers on the network behind the remote IPSec router . T o specify IP addresses on[...]

P-334U/P-335U User’s Gu ide 152 Chapter 13 IPSec VPN Secure Gateway Address T ype the W AN IP ad dress or the domain na me (up to 31 characters) of the IPSec router with which you're making the VPN connection. Set this field to 0.0.0.0 if the remote IPSec router has a dynamic W AN IP address (the IPSec Keying Mode field must be se t to IKE )[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 153 13.5 Advanced VPN Rule Setup (IKE) Click Advanced.. . in the Rul e Setup screen to open this scre en. Pre-Shared Key T ype your pre-shared key in this field. A pre-sh ared key identifies a communicating party during a phase 1 IKE negotiation. It is called "pre-share d" because you have[...]

P-334U/P-335U User’s Gu ide 154 Chapter 13 IPSec VPN Figure 93 Security > VPN > Rule Setup: IKE (Advanced)[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 155 The following table describes the labels in this screen. Table 53 Security > VPN > Rule Setup: IKE (A dvanced) LABEL DESCRIPTION Property Activ e Select this check box to activate this VPN policy . This option determine s whether a VPN rule is applied before a packet leaves the firewall. K[...]

P-334U/P-335U User’s Gu ide 156 Chapter 13 IPSec VPN Local Address For a sing le IP address, enter a (static) IP address on the LAN behind your ZyXEL Device. For a specific range of IP addresses, enter the beg inning (static) IP address, in a range of computers on your LAN behind your ZyXEL Device. T o specify IP addre sses on a network b y their[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 157 My IP Addr ess Enter the ZyXEL Device's static WAN IP addr ess (if it has on e) or leave the field set to 0.0.0.0 . The ZyXEL Device uses its current W AN IP address (static or dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0 . If the W AN connection goes down, the Z[...]

P-334U/P-335U User’s Gu ide 158 Chapter 13 IPSec VPN Peer Content The configuration of the peer co ntent depe nds on the peer ID type. For IP , type the IP address of the computer with which you will ma ke the VPN connection. If you configure this field to 0.0.0.0 or leave it blank, the ZyXEL Device will use the address in the Secure Gateway Addr[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 159 13.6 IPSec SA Using Manual Keys Y ou might set up an IPSec SA using ma nual keys when you wa nt to establish a VPN tunne l quickly , for example, for trou bleshooting. Y ou should only do this as a temporary solution, however , because it is not as secure as a regular IPSec SA . In IPSec SAs usi[...]

P-334U/P-335U User’s Gu ide 160 Chapter 13 IPSec VPN 13.6.1 IPSec SA Prop osal Using Manual Keys In IPSec SA using manual keys, you can on ly specify one encryp tion algorithm and one authentication algorithm. There is no DH key exchange, s o you have to provide the encryption key and the authentication key the ZyXEL Device and remote IPSec route[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 161 Figure 94 Security > VPN > Rule Setup: Manual The following table describes the labels in this screen. Table 54 Security > VPN > Rule Setup: Manual LABEL DESCRIPTION Property Active Select this check box to activate this VPN policy . IPSec Keying Mode Select IKE or Manual from the dr[...]

P-334U/P-335U User’s Gu ide 162 Chapter 13 IPSec VPN DNS Server (for IPSec VPN) If there is a private DNS se rver that services the VPN, type its IP address here. The ZyXEL Device assigns this additio nal DNS server to the ZyXEL Device's DHCP clients that have IP addresses in this IPSec ru le's range of local addresses. A DNS server all[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 163 Remote Address End /Mask When the remote IP address is a single address, typ e it a second time here. When the remote IP address is a range, en ter the end (static) IP address, in a range of computers on the network behind the remote IPSec router . When the remote IP address is a subnet address,[...]

P-334U/P-335U User’s Gu ide 164 Chapter 13 IPSec VPN 13.8 VPN SA Monitor In the web configurator , click SECURIT Y > VPN > SA Monitor . Us e this screen to display and manage ac tive VPN conn ections. A Security Association (SA) is the group of secu rity settings related to a specific VPN tunnel. This screen displays active VPN connections.[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 165 The following table describes the labels in this screen. Table 55 SECURITY > VPN > SA Monitor LABEL DESCRIPTION # This is the security association index number . Name This field displays the identifi cation name for this VPN policy . Encapsulation This field disp lays Tu n n e l or T ransp[...]

P-334U/P-335U User’s Gu ide 166 Chapter 13 IPSec VPN 13.10.1 T elecommuters Shar ing One VPN Rule Example See the following figure and table for an exampl e configuration that allows multiple telecommuters ( A , B and C in the figure) to use one VPN rule to simultaneously access a ZyXEL Device at headquarters ( HQ in the figure). The telecommuter[...]

P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 167 See the following table and figure for an ex ample where three telecommuters each use a different VPN rule for a VPN connection with a ZyXEL Device located at headquarters . The ZyXEL Device at headquarters (HQ in the figure) identifies each incoming SA by its ID type and content and uses the ap[...]

P-334U/P-335U User’s Gu ide 168 Chapter 13 IPSec VPN 13.1 1 VPN and Remote Management Y ou can allow someone to use a service (like T elnet or HTTP) through a VPN tunnel to manage the ZyXEL Device. One of the ZyXEL Device’ s ports must be part of the VPN rule’ s local network. This can be the ZyXEL Device’ s LAN port if you do not want to a[...]

P-334U/P-335U User’s Guide Chapter 14 Static Route Screens 169 C HAPTER 14 S t atic Route Screens This chapter shows you how to configure static routes for your ZyXEL Device. 14.1 S tatic Route Overview Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the network s [...]

P-334U/P-335U User’s Gu ide 170 Chapter 14 Static Route Screens 14.2 IP S tatic Route Screen Click Management > St a t i c R o u t e to open the IP S tatic Route scre en. The following screen displays. Figure 101 IP S tatic Route The following table describes the labels in this screen. Table 59 IP Static Route LABEL DESCRIPTION # This is the i[...]

P-334U/P-335U User’s Guide Chapter 14 Static Route Screens 171 14.2.1 S t atic Rout e Setup Screen T o edit a static route, click the edit icon under Modify . The following screen displays. Fill in the required information for each static route. Figure 102 S tatic Route Setup The following table describes the labels in this screen. Table 60 S tat[...]

P-334U/P-335U User’s Gu ide 172 Chapter 14 Static Route Screens[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Management 173 C HAPTER 15 Bandwid th Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the ZyXEL Device’ s bandwidth man agement logs. 15.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to specify b andwidt[...]

P-334U/P-335U User’s Gu ide 174 Chapter 15 Bandwidth Manag ement 15.3 Subnet-based Bandwid th Management Y ou can create bandwidth classes based on subnets. The following figure shows LAN subnets. Y ou could configure one bandwidth class fo r subnet A and another for subnet B . Figure 103 Subnet-based Ba ndwidt h Management Example 15.4 Applicati[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 175 15.5 Bandwid th Management Priorities The following table describes the priorities th at you can apply to traf fic that the ZyXEL Device forwards out through an interface. Table 62 Bandwidth M anagement Priorities PRIORITY LEVELS: T RAFFIC WI TH A HIGHER PRIORITY GE T S THROUGH FASTE[...]

P-334U/P-335U User’s Gu ide 176 Chapter 15 Bandwidth Ma nagement 15.6.1 Services and Port Numbers The commonly used services and port numbers ar e shown in the following table. Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets. The first field indicat es the IP prot[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Management 177 IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Securi ty Protocol) tun neling protocol uses this service. IRC(TCP/UDP:6667) This is another popula r Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MUL TICAST(IGMP:0) Internet[...]

P-334U/P-335U User’s Gu ide 178 Chapter 15 Bandwidth Manag ement 15.7 Default Bandwid th Management Classes and Priorities If you enable bandwidth management but do not configure a rule for critical traf fic like V oIP , the voice traffic may then get de layed due to insuf ficient bandwi dth. W ith the automatic traffic classifier feature activat[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 179 15.8 Bandwid th Management General Configuration Click Management > Bandwidth MGMT to open the b andwidth mana gement General screen. Figure 104 Bandwidth Ma nagement: General The following table describes the labels in this screen. Table 66 Bandwid th Management: General LABEL DE[...]

P-334U/P-335U User’s Gu ide 180 Chapter 15 Bandwidth Manag ement 15.9 Bandwid th Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth managemen t Advanced screen. Figure 105 Bandwidth Management: Advanced[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 181 The following table describes the labels in this screen. Table 67 Bandwidth Manage ment: Adva nced LABEL DESCRIPTION Upstream Bandwidth (kbps) Enter the amount of bandwidth in kbps (2 to 100,000) that you want to allocate for traffic. 20 kbps to 20,000 kbps is recommended. The recomm[...]

P-334U/P-335U User’s Gu ide 182 Chapter 15 Bandwidth Manag ement 15.9.1 Rule Configuration with the Pre-defined Service T o edit a bandwidth management ru le for the pr e-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen. The following screen displays. Figure 106 Bandwidth Managem ent Ru[...]

P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 183 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to ed it a bandwidth manag ement rule for other applications an d/or subnet s, click the Edit icon in the User-defined Service table of the Advanced screen. The following scre[...]

P-334U/P-335U User’s Gu ide 184 Chapter 15 Bandwidth Manag ement 15.10 Bandwid th Management Monitor Click Management > Bandwidth MGMT > Monitor to open the band width management Monitor screen. V iew the ba ndwidth usage of the W AN configured bandwidth rule s. This is also shown as bandwidth usage over the bandwidt h budget for each rule.[...]

P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 185 C HAPTER 16 Remote Management Screens This chapter provides information on the Remote Management screens. 16.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. Not[...]

P-334U/P-335U User’s Gu ide 186 Chapter 16 Remot e Manageme nt Screens 3 There is already another remote management session with an equal or higher priority running. Y ou may only have one remote management sessio n running at one time. 4 There is a firewall rule that blocks it. 16.1.2 Remote Management and NA T When NA T is enabled: • Use the [...]

P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 187 16.3 T elnet Y ou can use T elnet to access the ZyXEL Device. Specify which inte rfaces allow T elnet acce ss and from which IP addres s the access can come. 16.4 T elnet Screen T o change your ZyXEL Devi ce’ s T elnet settings, click Management > Remote MGMT > Te l n e t[...]

P-334U/P-335U User’s Gu ide 188 Chapter 16 Remot e Manageme nt Screens 16.5 FTP Screen Y ou can use FTP (File T ransfer Protocol) to upload and download the ZyXEL Device’ s firmware and configuration files, please see the User ’ s Guide chapter on firmware and configuration file maintenance for details. T o use this feature, your c omputer mu[...]

P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 189 16.6 DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on W izard Setup for background information. T o change your ZyXEL Device’ s DNS settings, click Management > Remote MGMT > DNS . The scr[...]

P-334U/P-335U User’s Gu ide 190 Chapter 16 Remot e Manageme nt Screens[...]

P-334U/P-335U User’s Guide Chapter 17 UPnP 191 C HAPTER 17 UP N P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device can dynamically[...]

P-334U/P-335U User’s Gu ide 192 Chapter 17 UPnP All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL' s UPn[...]

P-334U/P-335U User’s Guide Chapter 17 UPnP 193 The following table describes the labels in this screen. Table 74 Configuring U PnP LABEL DESCRIPTION Enable the Universal Plug and Play (UPnP) feature Select this checkbox to activate UPnP . Be awa re that anyone could use a UPnP application to open the web co nfigurator's login screen withou t[...]

P-334U/P-335U User’s Gu ide 194 Chapter 17 UPnP 1 Click St a r t and Contro l Panel . Double- click Add/Remove Programs . 2 Click on the Win d ow s S et u p tab and se lect Communication in the Components selection box. Click Details . 3 In the Communications window , select the Universal Plug and Play check box in the Components selection box. 4[...]

P-334U/P-335U User’s Guide Chapter 17 UPnP 195 4 Select Networking Service in the Components selection box and click Details . 5 In the Networking Services window , select the Universal Plug and Play check box. 6 Click OK to go back to the W indows Optional Networking Component Wiz ar d window and click Next . 17.5 Using UPnP in Windows XP Exampl[...]

P-334U/P-335U User’s Gu ide 196 Chapter 17 UPnP 3 In the Internet Connection Properties window , click Settings to see the port mappings that were automatically created. 4 Y ou may edit or delet e the port mappings or click Add to manually add port mappings. Note: When the UPnP-enabled device is disconnect ed from your computer , all port mapping[...]

P-334U/P-335U User’s Guide Chapter 17 UPnP 197 1 Click St a r t and then Contr ol Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with th e description for each UPnP-enabled de vice displays under Local Network . 5 Right-click the icon for your ZyXEL device and select Invoke . The web configu[...]

P-334U/P-335U User’s Gu ide 198 Chapter 17 UPnP 1 Click St a r t and then Contr ol Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network . 5 Right-click the icon for your ZyXEL device and select Invoke . The web config[...]

P-334U/P-335U User’s Guide Chapter 18 Pr int Server 199 C HAPTER 18 Print Server This chapter discusses how to configure the print server on the ZyXEL Device. 18.1 Print Server Overview A print server is a device or software that pr ovides users on a network with shared access to one or more printers. The print server acts as a buf fer , holding [...]

P-334U/P-335U User’s Gu ide 200 Chapter 18 Print Server 18.3 Print Server Screen Click the Print Server link unde r Management to display the Print Server screen. Figure 1 14 Configuring Print Server The following table describes the labels in this screen. Table 75 Configuring Print Server LABEL DESCRIPTION Print Device Name T ype a Prin t Device[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 201 C HAPTER 19 Print Server Driver Setup This chapter shows you h ow to set up a prin t server driver for a W indows or Macintosh computer . 19.1 Inst allation Requirement s T o install the print server driver you will need the following requir ements • Microsoft W indows 95, W i[...]

P-334U/P-335U User’s Gu ide 202 Chapter 19 Print Server Dr iver Setup 3 Y ou can either •u s e t h e Setup Wizard for W indows NT/2000/XP to install the print monitor and open the setup wizard automatically or •u s e t h e Setup Wizard for W indows 98/ME/NT/2000/XP to install the pr int monitor in a specified file location and open the setup [...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 203 1 The We l c o m e screen displays. Click Next to continue. Figure 1 17 Network Print Server Setup Wizard: W elcome 2 The Select A Print Server screen displays. The wizard automa tically detects whether or not a print server is connected to your comp uter . Make sure that your Z[...]

P-334U/P-335U User’s Gu ide 204 Chapter 19 Print Server Dr iver Setup 3 The Change Set tings screen di splays. If you want to change your print server ’ s IP address, select Y es, I want to change settings , leave the Password field blank and click Next . The print server ’ s IP address is the ZyX EL Device’ s IP address. Since the wizard d[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 205 4 Select the USB printer that is connected to the ZyXEL Device if you have adde d it on your computer already and click Ne xt . If your printer is not listed, click Add New Printer and see Section 19.2.2 on page 207 for how to add a printer on your co mputer . After you have a d[...]

P-334U/P-335U User’s Gu ide 206 Chapter 19 Print Server Dr iver Setup 5 A Summary screen displays. Check your settings and click Next to continue. Figure 121 Network Print Server Setup Wizard: Summary 6 Click Finish to save and close your Network Print Server Setup W izard . Y our print server driver setup is complete. Figure 122 Network Print Se[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 207 19.2.2 Adding a New Printer 1 Click Add New Printer in the Network Print Server Setup Wizard: Select A Printer screen (see Figure 120 on page 20 5 ). A help dialog box pops up to guide you through the adding printer process. Figure 123 Add Printer Help 2 The Add Printer W izard [...]

P-334U/P-335U User’s Gu ide 208 Chapter 19 Print Server Dr iver Setup 3 Select Local printer and click Next . Figure 125 Add Printer Wizard: Local or Network Printer 4 Select an LP T (Line Printing T erminal) port (a pa rallel port) as the computer interface for the USB printer . Figure 126 Add Printer Wizard: Sele ct the Printer Port[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 209 5 Select the make of the printer that you wa nt to connect to the print server in the Manufacturers list of printers. 6 Select the printer model from the list of Printers . 7 If your printer is not displayed in the list of Printers , you can inse rt the printer driver installati[...]

P-334U/P-335U User’s Gu ide 210 Chapter 19 Print Server Dr iver Setup 10 T ype a name to identify the printer and then click Next to continue. Figure 129 Add Printer Wizard: Name Y our Printer 11 The ZyXEL Device is a p rint server itself and you do not need to have your computer act as a print server by sharing the printer with other users in th[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 211 12 Select Ye s and then click the Next b u tton if you want to p rint a test page. A p op-up screen displays to ask if the test pa ge printed correctly . Otherwise selec t No and then click Next to continue. Figure 131 Add Printer Wizard: Print T est Page 13 The following screen[...]

P-334U/P-335U User’s Gu ide 212 Chapter 19 Print Server Dr iver Setup 2 On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window . Figure 133 Macintos h HD 3 Double-click the Applications folder . Figure 134 Macintosh HD folder 4 Double-click the Utilities folder . Figure 135 Applications Folder 5 Double-click the Print[...]

P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 213 6 Click the Add icon at the top of the screen. Figure 137 Printer List Folder 7 Set up your pri nter in the Printer List configuratio n sc reen. Select IP Printin g from the drop-down list box. 8 In the Printer’s Addr ess field, type the IP address of yo ur ZyXEL Device. 9 Des[...]

P-334U/P-335U User’s Gu ide 214 Chapter 19 Print Server Dr iver Setup 12 Click Add to select a printer model, save and close the Printer List configuratio n screen. Figure 139 Printer Model 13 The Name LP1 on 192.168.1. 1 displays in the Printe r List field. The default printer Name displays in bold ty pe. Figure 140 Print Server 14 Y our Macinto[...]

P-334U/P-335U User’s Guide Chapter 20 Syste m 215 C HAPTER 20 System This chapter provides informa tion on the System screens. 20.1 System Overview See the chapter about wizard setup for mo re information on th e next few screens. 20.2 System General Screen Click Maintenance > System . The following screen displays. Figure 141 System General[...]

P-334U/P-335U User’s Gu ide 216 Chapter 20 System The following table describes the labels in this screen. Table 76 System General LABEL DESCRIPTION System Name Syste m Name is a unique name to id entify the ZyXEL Device in an Ethernet network. It is reco mmended you enter your computer ’s “Computer name” in this field (see the chapter abou[...]

P-334U/P-335U User’s Guide Chapter 20 Syste m 217 Figure 142 T ime Setting The following table describes the labels in this screen. Table 77 Time Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays th e time of your ZyXEL Device. Each time you reload this page, the Zy XEL Device synchroni zes the time with the time [...]

P-334U/P-335U User’s Gu ide 218 Chapter 20 System New Date (yyyy/mm/dd) This field displays the last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new date in this field and then click Apply . Get from T ime Server Select this radio button to have the ZyXEL Device g[...]

P-334U/P-335U User’s Guide Chapter 21 Logs 219 C HAPTER 21 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. Refer to the append ices for example log message explanations. 21.1 V iew Log The web confi gurator allows you to look at a ll of the ZyXEL Device’ s logs in one locat[...]

P-334U/P-335U User’s Gu ide 220 Chapter 21 Logs The following table describes the labels in this screen. Table 78 View Logs LABEL DESCRIPTION Display Th e categories that you select in the Lo g Settings page (see Section 21.2 on page 220 ) display in the drop -down list box. Select a category of logs to view; select All Lo gs to view logs from al[...]

P-334U/P-335U User’s Guide Chapter 21 Logs 221 Figure 144 Log Settings The following table describes the labels in this screen. Table 79 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP addre ss of the mail server for the e-mail addresses specified below . If this field is left blank, logs and alert m[...]

P-334U/P-335U User’s Gu ide 222 Chapter 21 Logs Send Log T o The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail. Send Alerts T o Alerts are real-time notifications that ar e sent as soon as an event, such as a DoS attack, system error , or forbidde[...]

P-334U/P-335U User’s Guide Chapter 22 Tools 223 C HAPTER 22 To o l s This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the ZyXEL Devic e. 22.1 Firmware Upload Screen Find firmware at www .zyxel .com in a file that (usually) uses the system model name with a "*.bin" extension, e.g.[...]

P-334U/P-335U User’s Gu ide 224 Chapter 22 Tools After you see the Firmware Upload In Pr ocess screen, wait two minut es before logging into the ZyXEL Device again. Figure 146 Upload W arning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on y[...]

P-334U/P-335U User’s Guide Chapter 22 Tools 225 Click Maintenance > T ools > Configuration . Information related to factory defaults, backup configuration, and rest oring configuratio n appears as shown next . Figure 149 Configuration 22.2.1 Backup Configuration Backup configuration allows you to b ack up (save) the ZyXEL Device’ s curren[...]

P-334U/P-335U User’s Gu ide 226 Chapter 22 Tools Figure 150 Configuration Restore Su ccessful The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop. Figure 151 T e mporarily Disconnected If you uploaded the default config uration file[...]

P-334U/P-335U User’s Guide Chapter 22 Tools 227 22.3 Rest art Screen System restart allows you t o reboot the Zy XEL Device without tu rning the power off. Click Maintenance > T ools > Restart . Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 153 System Restart[...]

P-334U/P-335U User’s Gu ide 228 Chapter 22 Tools[...]

P-334U/P-335U User’s Guide Chapter 23 Configurat ion Mode 229 C HAPTER 23 Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route. Basic is selected by default and you cannot see t[...]

P-334U/P-335U User’s Gu ide 230 Chapter 23 Configuration Mod e Management S tatic Route IP S tatic Route Bandwidth MGMT Advanced Monitor Remote MGMT Te l n e t FTP DNS Maintenance Logs Log Settin gs Table 82 Config Mode: Advanced Scr eens CATEGORY LINK TA B[...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 231 C HAPTER 24 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 24.1 Problems St arting Up the ZyXEL Device Table 83 Troubleshooting Sta rting Up Your ZyXEL Device PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the ZyXEL Device. Make[...]

P-334U/P-335U User’s Gu ide 232 Chapter 24 Trou bleshooting 24.3 Problems with the W AN Table 85 Troubleshootin g the WAN PROBLEM CORRECTIVE ACTION The W AN LED is off. Check the connections between the ZyXEL Device W AN port and the cabl e/DSL modem or ethernet jack. Check whether your ca ble/DSL device requires a crossover or straight-throu gh [...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 233 24.4 Problems Accessi ng the ZyXEL Device Table 86 Troubleshoot ing Accessin g the ZyX EL Device PROBLEM CORRECTIVE ACTION I cannot access the ZyXEL Device. The username is “admin”. The default password is “1234”. The Password and Username fields are case-sensitive. Make sure that[...]

P-334U/P-335U User’s Gu ide 234 Chapter 24 Trou bleshooting Problems with the Password Problems with Remote Management Parental Control is configured correctly , but I can still access restricted web pag es . Restart the device to clear the cache. The content filter server may be u navailable. The View Lo gs screen can display content filtering l[...]

Table 90 Troubleshootin g the Print Server PROBLEM CORRECTIVE ACTION Cannot print anything using the USB printer connected to the P- 335U. V erify that the printer uses USB 1.1 or 1.0 by checking your printer's specifications. Make sure the USB printer is powered on and can work properly . Make sure you install the print server driver on your [...]

P-334U/P-335U User’s Gu ide 236 Chapter 24 Trou bleshooting Y ou can also check if pop-up blocking is dis abled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen. This disables any web po p-up bl[...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 237 Figure 157 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites . Note: If you change the IP address o f yo[...]

P-334U/P-335U User’s Gu ide 238 Chapter 24 Trou bleshooting Figure 158 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 24.5.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , check that JavaScripts are allowed. 1 In Internet Explorer , click[...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 239 Figure 159 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the window .[...]

P-334U/P-335U User’s Gu ide 240 Chapter 24 Trou bleshooting Figure 160 Security Settings - Java Scripting 24.5.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions ma ke sure that a safety level is s[...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 241 Figure 161 Security Settings - Java 24.5.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to clos e the window .[...]

P-334U/P-335U User’s Gu ide 242 Chapter 24 Trou bleshooting Figure 162 Java (Sun) 24.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer . Screen shots for Internet Explorer 6 [...]

P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 243 Figure 163 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button.[...]

P-334U/P-335U User’s Gu ide 244 Chapter 24 Trou bleshooting Figure 164 Security Setting ActiveX Controls[...]

P-334U/P-335U User’s Guide Appendix A Prod uct Specification s 245 A PPENDIX A Product S pecifications The following table is a summary of other features available. Table 91 Hardware Specifications Dimensions (W x D x H) 190 x 150 x 33 mm Device Weight 413 g Power S pecification 12 V AC 1 A Ethernet Ports Au to-negotiating: 10 Mbps or 100 Mbps in[...]

P-334U/P-335U User’s Gu ide 246 Appendix A Product Specifications Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator , an FTP or a TFTP tool to put it on the ZyXEL Device. Note: Only upload firmware for your specific mod e l! Configuration Backup & Restoration Make a copy of the ZyXEL [...]

P-334U/P-335U User’s Guide Appendix A Prod uct Specificatio ns 247 IPSec VPN (P-335U only) Establish a Virtual Private Network (VPN) to connect with busine ss partners and branch offices using data encryption and the Internet to provide secure communications w it hout the expense of leased site-to- site lines. The ZyXEL D evice VPN is based on th[...]

P-334U/P-335U User’s Gu ide 248 Appendix A Product Specifications[...]

P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 249 A PPENDIX B Print Server S pecifications This appendix provides details on the pr int server interface and system requirements. Table 93 Print Server Interface PRINT SERVER INTERFACE USB USB 1.1 (full speed) - compliant port, 1.5Mbps (low speed) and 12Mbps (full speed) data tr[...]

P-334U/P-335U User’s Gu ide 250 Appendix B Print Server Specifica tions ZyXEL Device Print Server Comp atible USB Printers The following is a list of USB printer models compatible with the Zy XEL Device print server . Table 95 Compatible USB Printers BRAND MODEL T YPE REMARK CANON BJ F9000 Inkjet CANON i2355 Inkjet CANON i255 Inkjet CANON i320 In[...]

P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 251 CANON MP-13 0 MFP EPSON Aculaser C1900 Color Laser EPSON EPL-6100 Laser Disable bi-directional support on printer. EPSON S tylus C20 Inkjet Disable bi-directional sup port on printer. EPSON S tylus C20SX Inkjet Disable bi-directional sup port on printer. EPSON S tylus C40 Inkj[...]

P-334U/P-335U User’s Gu ide 252 Appendix B Print Server Specifica tions HP DeskJet 5550 Inkjet HP DeskJet 810C Inkjet HP DeskJet 845C Inkjet HP DeskJet 920C Inkjet HP Deskjet 1 180c Inkjet HP DeskJet 930C Inkjet HP LaserJet 1200 La ser Disable bi-directional support on printer. HP LaserJet 1220 La ser Disable bi-directional support on printer. HP[...]

P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 253 KYOCERA FS-1920 Laser KONICA MINOLTA PagePro 1350W Lase r LEXMARK C750 Color Laser LEXMARK E210 Laser LEXMARK E322 Laser LEXMARK T420 Laser LEXMARK T620 Laser LEXMARK W812 Laser LEXMARK Z42 Inkjet LEXMARK Z43 Inkjet LEXMARK Z45 Inkjet LEXMARK Z55 Inkjet LEXMARK Z705 Inkjet LEX[...]

P-334U/P-335U User’s Gu ide 254 Appendix B Print Server Specifica tions[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Addr ess 255 A PPENDIX C Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software c[...]

P-334U/P-335U User’s Gu ide 256 Appendix C Setting up Your Compu ter’s IP Address Figure 165 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapt[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 257 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, select[...]

P-334U/P-335U User’s Gu ide 258 Appendix C Setting up Your Compu ter’s IP Address Figure 167 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previ ously installed gateways. • If you have a gate way IP address, type it in the New gateway field and cli[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 259 Figure 168 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 169 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

P-334U/P-335U User’s Gu ide 260 Appendix C Setting up Your Compu ter’s IP Address Figure 170 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 171 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Prop[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 261 • If you have a static IP address click Us e the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields. • Click Advanced . Figure 172 Windows XP: Internet Protocol (TCP/IP) P roperties 6 If you do not know your gateway'[...]

P-334U/P-335U User’s Gu ide 262 Appendix C Setting up Your Compu ter’s IP Address Figure 173 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS se rver address automatically if you do not know your DNS server IP address(es ). • If you know your DNS[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 263 Figure 174 Windows XP: Internet Protocol (TCP/IP) P roperties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W ind ows 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections wind[...]

P-334U/P-335U User’s Gu ide 264 Appendix C Setting up Your Compu ter’s IP Address Figure 175 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 176 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 265 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyX EL Device in the Router a[...]

P-334U/P-335U User’s Gu ide 266 Appendix C Setting up Your Compu ter’s IP Address Figure 178 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP addres[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 267 Note: Make sure you are logged in as the ro ot administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and[...]

P-334U/P-335U User’s Gu ide 268 Appendix C Setting up Your Compu ter’s IP Address • If you have a dynamic IP addres s click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click S tatically set IP Addresses and fill in the Address , Subnet mask , and Default Gateway Ad[...]

P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 269 1 Assuming that you have only one network card on th e computer , locate the ifconfig- eth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor . • If you h ave a dynamic IP addres s, enter dhcp [...]

P-334U/P-335U User’s Gu ide 270 Appendix C Setting up Your Compu ter’s IP Address Figure 186 Red Hat 9.0: Resta rt Ethernet Card [root@localhost init.d]# net work restart Shutting down interface eth0 : [OK] Shutting down loopback inter face: [OK] Setting network parameters: [OK] Bringing up loopback interfa ce: [OK] Bringing up interface eth0: [...]

P-334U/P-335U User’s Guide Appendix D IP Subnetting 271 A PPENDIX D IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notation, for exam[...]

P-334U/P-335U User’s Gu ide 272 Appendix D IP Subnetting Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a clas s “B” must begi n with “10”, therefore the first octet of a class “B” address has a valid rang[...]

P-334U/P-335U User’s Guide Appendix D IP Subnetting 273 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” [...]

P-334U/P-335U User’s Gu ide 274 Appendix D IP Subnetting Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have. The remaining number of host ID bits (af ter “borrowing”) det er[...]

P-334U/P-335U User’s Guide Appendix D IP Subnetting 275 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00 , 01, [...]

Table 106 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT V ALUE IP Address 192.168.1. 192 IP Address (Binary) 1 1000000.10101 000.00000001. 11 000000 Subnet Mask (Binary) 11111111 . 11111 111 . 111 11111 . 11 000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.19 3 Broadcast Address: 192.168.1.255 Highest Host ID: 192.16 8.1.254 P[...]

P-334U/P-335U User’s Guide Appendix D IP Subnetting 277 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a class “A?[...]

P-334U/P-335U User’s Gu ide 278 Appendix D IP Subnetting[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 279 A PPENDIX E Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pe ndent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C)[...]

P-334U/P-335U User’s Gu ide 280 Appendix E Wireless LANs Figure 189 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wirel[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 281 Figure 190 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your g eographical area. Y ou may have a choice of channels (for your region) so you should use a di fferent ch annel th an an adjacent AP (ac[...]

P-334U/P-335U User’s Gu ide 282 Appendix E Wireless LANs Figure 191 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages [...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 283 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference. If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set [...]

P-334U/P-335U User’s Gu ide 284 Appendix E Wireless LANs Wireless Security Overview W ireless security is vital to your network to p rotect wireless commu nication betw een wireless clients, access points and the wired network. W ireless security methods available on the Pr estige are data encryption, wireless client authentication, restricting a[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 285 • Authentication Determines the identity of the users. • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h y[...]

P-334U/P-335U User’s Gu ide 286 Appendix E Wireless LANs T ypes of Authentication This section discusses some po pular authentication types: EAP-MD5 , EAP-TLS , EAP- TTLS , PEAP and LEAP . The type of authentication you use depends on the RADIUS ser ver or the AP . Consult your network administrator for more information. EAP-MD5 (Message-Digest A[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 287 LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS server . This key expires when the wireless connection times out, disconnects or reauthentic ation times [...]

P-334U/P-335U User’s Gu ide 288 Appendix E Wireless LANs If both an AP and the wireless clients suppor t WP A2 and you have an external RADIUS server , use WP A2 for stronger data encryption. If you do n't have an external RADIUS server, you should use WP A2-PSK (WP A2-Pre-Shared Key) that only requires a single (identical ) password entered[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 289 User Authentication WP A and WP A2 apply IEEE 802.1x an d Exte nsible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WP A2 reduces the number of key exchange messages from six to four (C CMP 4-way handshake) and shortens the time required to[...]

P-334U/P-335U User’s Gu ide 290 Appendix E Wireless LANs Figure 192 WP A(2) with RADIUS Application Example WP A(2)-PSK Application Example A WP A(2)-PSK applica tion looks as follows. 1 First enter identical passwords into the AP an d all wireless c lients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadeci[...]

P-334U/P-335U User’s Guide Appendix E Wireless LANs 291 Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features. Table 113 Wireless Security Relatio[...]

P-334U/P-335U User’s Gu ide 292 Appendix E Wireless LANs[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 293 A PPENDIX F Log Descriptions This appendix provides descrip tions of example log messages. Table 114 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server . Time calibration failed The ro[...]

P-334U/P-335U User’s Gu ide 294 Appendix F Log De scriptions Table 116 Access Control Log s LOG MESSAGE DESCRIPTION Firewall default policy: [TC P | UDP | IGMP | ESP | GRE | OSP F] <Packet Direction> Attempted TCP/UDP/IGMP/ ESP/GRE/OSPF access matched the default po licy and was blocked or fo rwarded according to the default policy’s sett[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 295 Table 117 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset pa[...]

P-334U/P-335U User’s Gu ide 296 Appendix F Log De scriptions Table 119 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICM P <Packet Direction>, <type:%d >, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting. For type and code details, see Ta b l e 131 on[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 297 Table 122 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can p ass through the firewall. ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing The PPP con nection’s Internet Protocol Control Protocol stage is closing.[...]

P-334U/P-335U User’s Gu ide 298 Appendix F Log De scriptions Table 124 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TC P/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detecte d an ICMP attack. For type and code details, see Ta b l e 131 on page 305 . land [TCP[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 299 Table 125 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router received and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered. A third party may have altered or tampered with the p[...]

P-334U/P-335U User’s Gu ide 300 Appendix F Log De scriptions Cannot resolve Secure Gateway Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address. Peer ID: <peer id> <My remote type> -<My local type> The displayed ID information did not match betwe[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 301 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer . Rule [%d] Phase [...]

P-334U/P-335U User’s Gu ide 302 Appendix F Log De scriptions Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 di d not match betwe e n the router and the peer . Rule [%d] Phase 2 key length mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer . Table 127 [...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 303 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field. The maximu m size of di rectory data that the router allows is al[...]

P-334U/P-335U User’s Gu ide 304 Appendix F Log De scriptions Table 129 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database repo rts user credential error. A user was not authenticated by the local user database because of an incorrect user password. Local U[...]

Table 130 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to W AN ACL set for packets traveling from the LAN to the W AN. (W to L) W AN to LAN ACL set for pa ckets travelin g from the W AN to the LAN. (D to L) DMZ to LAN ACL set for packets travelin g from the DM Z to the LAN. (D to W) DMZ to W AN ACL set for packets travelin[...]

P-334U/P-335U User’s Gu ide 306 Appendix F Log De scriptions Table 132 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon d d hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstIP:dstPort>" msg="<msg>" note="<note>" devID="<mac address last th ree numbers>&[...]

P-334U/P-335U User’s Guide Appendix F Log Descr iptions 307 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record. 2 Use sys logs category to view a list of the l[...]

P-334U/P-335U User’s Gu ide 308 Appendix F Log De scriptions Use 0 to not record logs for that category , 1 to record only logs fo r that category , 2 to record only alerts for that category , and 3 to record both logs and alerts for that category . Not every parameter is ava ilable with every category . 5 Step 5.Use the sys logs save command to [...]

P-334U/P-335U User’s Guide Appendix G Serv ices 309 A PPENDIX G Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Pro tocol : This is the type of IP protoc[...]

P-334U/P-335U User’s Gu ide 310 Appendix G Services HTTP TCP 80 Hyper T ext Transfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic purposes. ICQ UDP 4000 This is a popular Intern[...]

P-334U/P-335U User’s Guide Appendix G Serv ices 311 RCMD TCP 512 Remote Command Se rvice. REAL_AUDIO TCP 7070 A streaming audio service that enab les real time sound over the we b. REXEC TCP 514 Remote Execution Daemon. RLOGIN TCP 513 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems. RTE L N ET T[...]

P-334U/P-335U User’s Gu ide 312 Appendix G Services TFTP UDP 69 T rivial File Transfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (T ransmi ssion Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution. The UDP port number is spe cified in th[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 313 A PPENDIX H Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menus for yo ur product may differ . Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configurat[...]

P-334U/P-335U User’s Gu ide 314 Appendix H Internal SPTGEN Internal SPTGEN File Modification - Import ant Points to Remember Each paramete r you enter must be pr eceded by one “=”sign and one space. Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 196 on page 313 ), then you dis[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 315 Figure 199 Internal SP TGEN FTP Download Example c:ftp 192.168.1.1 220 PPP FTP version 1.0 read y at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> get rom-t ftp>bye c:edit rom-t (edit the rom-t text f[...]

P-334U/P-335U User’s Gu ide 316 Appendix H Internal SPTGEN Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. Table 135 Abbreviations Used in the Exam ple Internal SPTGEN Screens Table ABBREVIA TION MEANING FIN Field Identification Number FN Field Name PV A Parameter V alues Allowed INPUT An example of what you ma[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 317 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3 = 256 30100016 = Output device filters Set 4 = 256 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 3020[...]

P-334U/P-335U User’s Gu ide 318 Appendix H Internal SPTGEN 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Alias #1 Incoming protocol filters Set 1 = 256 30201007 = IP Alias #1 Incoming protocol filters Set 2 = 256 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol fi[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 319 FIN FN PVA INPUT 30500001 = ESSID Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> = 0 30500003 = Channel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> = 1 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <256 ~ 2432> = 2432 30500006 = WEP <0(DISABLE) [...]

P-334U/P-335U User’s Gu ide 320 Appendix H Internal SPTGEN Table 138 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup FIN FN PVA INPUT 40000000 = Configured <0(No) | 1(Yes)> = 1 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encapsulation <[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 321 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sustain Cell Rate (SCR) = 0 40000030 = Maximum Burst Size(MBS) = 0 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1) | 1(Ri[...]

P-334U/P-335U User’s Gu ide 322 Appendix H Internal SPTGEN Table 140 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup FIN FN PVA INPUT 150000001 = SUA Server IP address for default port = 0.0.0.0 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> = 0 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000004 = SUA Ser[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 323 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> = 0 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000034 = SUA Server #8 Port Start = 0 150000035 = SUA Server #8 Port End = 0 150000036 = SUA Server #8 L[...]

P-334U/P-335U User’s Gu ide 324 Appendix H Internal SPTGEN 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1( Yes)> = 1 210101003 = IP Filter Set 1,Rule 1 Protocol = 6 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0 210101005 = IP Filter Set 1,Rule 1 Dest Subnet Mask = 0 210101006 = IP Filter Set 1,Rule 1 Dest Port = 137 21010[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 325 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 Table 141 Menu 21.1 Filter Set #1 (continued) Table 142 Menu 21.1 Filer Set #2 , / Menu 21.1 filter set [...]

P-334U/P-335U User’s Gu ide 326 Appendix H Internal SPTGEN 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.0.0.0 210202005 = IP Filter Set 2, Rule 2 Des[...]

P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 327 230200005 = Authentication Server Shared Secret = 111111111111 111 111111111111 1111 230200006 = Accounting Server Configured <0(No) | 1(Yes)> = 1 230200007 = Accounting Server Active <0(N o) | 1(Yes)> = 1 230200008 = Accounting Server IP Address = 192.168.1.44 230200009 = Acco[...]

P-334U/P-335U User’s Gu ide 328 Appendix H Internal SPTGEN Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 145 Command Examples FIN FN PV A INPUT /ci command (for annex a): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.413 )|2(g[...]

P-334U/P-335U User’s Guide Appendix I Triangle Route 329 A PPENDIX I T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology , all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks. Figure 201[...]

P-334U/P-335U User’s Gu ide 330 Appendix I Triangle Route Figure 202 “T riangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Y our Prestige support[...]

P-334U/P-335U User’s Guide 331 Index A access point 67 access point. See also AP . active protocol 144 AH 144 and encapsulation 145 ESP 144 ActiveX 134 Advanced Encryption St andard 28 8 AH 144 and transport mode 145 Alternative Subnet Mask Notation 273 AP 67 AP (access point) 281 AP . See also access poi nt. Applications 31 , 33 broadband connec[...]

P-334U/P-335U User’s Gu ide 332 transport mode 145 tunnel mode 145 VPN 145 Encryption 288 encryption 69 and local (user) database 70 key 70 WP A compatible 70 encryption algori thms 141 , 146 and active pr otocol 141 ESP 144 and transport mode 145 ESS 280 Ethernet Encapsulation 11 5 Extended Service Se t 280 Extended Service Se t IDentification 7[...]

P-334U/P-335U User’s Guide 333 IPSec SA. See also VPN. IPSec. See also VPN. J Java 134 K Keep alive 146 L LAN Setup 95 , 105 LAN TCP/IP 105 Liability 3 License 3 Link type 41 local (user) database 69 and encryption 70 M MAC address 68 MAC address filter 68 MAC Address Filter Acti on 82 MAC Address Filtering 81 MAC Filter 81 managing the device us[...]

P-334U/P-335U User’s Gu ide 334 S SA life time 146 Safety W arnings 6 security associations. See VPN. Security Parameters 291 Service Set 71 Service Set IDentity . See SSID. Service T ype 232 Services 11 5 , 129 SNMP 128 SSID 67 hide 68 S tateful Inspection 127 S tatic DHCP 11 2 S tatic Route 169 , 170 Subnet Mask 106 , 107 Subnet Masks 272 Subne[...]

P-334U/P-335U User’s Guide 335 channel 67 encryption 69 MAC address filter 68 security 68 SSID 67 Wireless security 284 wireless security 68 WLAN Interference 281 Security parameters 291 WP A 287 WP A compatible 70 WP A2 287 WP A2-Pre-Shared Key 288 WP A2-PSK 288 WP A-PSK 288 Writ ten Permission 3 Z ZyNOS 3 ZyXEL Communications Corporation 3 ZyXE[...]