ZyXEL Communications P-6600HW-Tx v3 Bedienungsanleitung

www .zyxel.com P-660HW -Tx v3 802.1 1g Wireless ADSL 2+ 4-port Gateway User ’ s Guide V ersion 3.40 11 / 2 0 0 8 Edition 1 DEFAULT LOGIN IP Address http://192 .168.1.1 User Password user Admin Password 1234[...]

[...]

About This User's Guide P-660HW-Tx v3 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at least a basic knowledge of TCP/IP network ing concepts and topology . Related Document ation • Quick Start Guide The Q[...]

Document Conventions P-660HW-Tx v3 User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about th ings that could harm you or your ZyXEL Device. " Notes tell you other important informati on (for example, other things you may need to configure or help[...]

Document Conventions P-660HW-Tx v3 User’s Guide 5 T able 1 Common Icons ZyXEL Device Computer Notebook Server DSLAM Firewall Switch Router Internet Cloud Wireless Signal T eleph one[...]

Safety Warnings P-660HW-Tx v3 User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the de[...]

Safety Warnings P-660HW-Tx v3 User’s Guide 7[...]

Safety Warnings P-660HW-Tx v3 User’s Guide 8[...]

Contents Overview P-660HW-Tx v3 User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 31 Introducing the ZyXEL Device ............... ................ ................ ................ ................. ................ .. .3 3 I[...]

Contents Overview P-660HW-Tx v3 User’s Guide 10 Appendices and Index ................................... ...................................................................... 2 91[...]

Table of Contents P-660HW-Tx v3 User’s Guide 11 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions.................................................................. ......................................... .4 Safety Warn[...]

Table of Contents P-660HW-Tx v3 User’s Guide 12 2.1 Web Configurator Overview ............. ................ ................ ............. ................ ................ ....... 45 2.2 Accessing the Web Configurator ..... ................ ................ ................ ................. ............ ....... 45 2.3 Resetting the ZyXEL Devic[...]

Table of Contents P-660HW-Tx v3 User’s Guide 13 Chapter 6 Bandwid th Management Wizard .......... .................................................................................. 89 6.1 Introduction ............... ................. ............ ................. ................ ............. ................ .... ............ 89 6.2 Predefine[...]

Table of Contents P-660HW-Tx v3 User’s Guide 14 8.2.4 Any IP . ............. ................. ............ ................. ................ ............. ................ ......... ......1 19 8.3 Configuring LAN IP ............. ............. ................ ................ ................ ............. ................ . .... 120 8.3.1 Con[...]

Table of Contents P-660HW-Tx v3 User’s Guide 15 10.4.2 Port Forwarding: Services and Port Numbers ............. ................ ................ ........... 152 10.4.3 Configuring Servers Behind Port Forwarding (Example ) ............... ................ ........ 152 10.5 Configuring Port Forwarding ......... ................ ................ ..[...]

Table of Contents P-660HW-Tx v3 User’s Guide 16 12.3.3 Key Fields For Configur ing R ules .................. ............. ................ ................ ........... 175 12.4 Connection Direction ............... ............ ................. ................ ............. ................ ............ .. 175 12.4.1 LAN to W AN Rules .........[...]

Table of Contents P-660HW-Tx v3 User’s Guide 17 15.6 Maximize Bandwidth Usage ............. ................ ............. ................ ................. ............ ..... 207 15.6.1 Reserving Bandwidth fo r Non-Bandwidth Class T raffic ............ ................ .............. 207 15.6.2 Maximize Bandwidth Us age Example ................[...]

Table of Contents P-660HW-Tx v3 User’s Guide 18 18.3.1 Installing UPnP in Wind ows Me ..................... ............. ................ ................ ........... 235 18.3.2 Installing UPnP in Wi ndows XP ..................... ............. ................ ................ ........... 236 18.4 Using UPnP in Windows XP Example ........ .....[...]

Table of Contents P-660HW-Tx v3 User’s Guide 19 Chapter 23 T roubleshooting ......................................................................................... ........................... 281 23.1 Power , Hardwa re Connections, and LEDs .................... ............. ................ ................ ..... 281 23.2 ZyXEL Device Acc ess [...]

Table of Contents P-660HW-Tx v3 User’s Guide 20[...]

List of Figures P-660HW-Tx v3 User’s Guide 21 List of Figures Figure 1 Protected Internet Access Applications ...... ................. ................ ............. ................ ........... ..... 40 Figure 2 LAN-to-LAN Application Example ........... ............. ................ ................ ............. ................ .. ..... 40 F[...]

List of Figure s P-660HW-Tx v3 User’s Guide 22 Figure 39 Bandwidth Management Wizard: General Informat ion . ................ ................ ................ .......... 71 Figure 40 Bandwidth Management Wizard: Configuration ........ ................ ................ ................ ............. 72 Figure 41 Bandwidth Management Wizard: Compl[...]

List of Figures P-660HW-Tx v3 User’s Guide 23 Figure 82 LAN IP Alias ... ................. ................ ................ ................ ............. ................ ....... ................ . 125 Figure 83 Example of a Wireless Network ......... ...... ............. ................. ................ ............. ............. .... 127 F[...]

List of Figure s P-660HW-Tx v3 User’s Guide 24 Figure 125 Content Filter: Schedule ................ ................ ................ ................ ................ ........... ..... ..... 197 Figure 126 Content Filter: Trusted ...................... ................ ................ ................ ................. ..... ....... ..... 198 F[...]

List of Figures P-660HW-Tx v3 User’s Guide 25 Figure 168 Error Message ..................... ................ .................... ................ ................ ............. ......... ..... 273 Figure 169 Configuration ................. ................ ................ ................ ................ ................ ..... ...............[...]

List of Figure s P-660HW-Tx v3 User’s Guide 26 Figure 21 1 openSUSE 10.3: Network Settings ...... ... ................. ............. ................ ............. ................ .3 1 2 Figure 212 openSUSE 10.3: Network Card Setup .......... ................ ................ ................ ............. ........ 313 Figure 213 openSUSE 10.3:[...]

List of Tables P-660HW-Tx v3 User’s Guide 27 List of Tables T able 1 Common Icons ............... ................. ................ ............. ................ ................ ............ ................. .. 5 T able 2 ADSL St andards ................ ............. ................ ................ ................ ................ .......[...]

List of Tables P-660HW-Tx v3 User’s Guide 28 T able 39 LAN IP .......... ............. ................ ................ ............. ................. ................ ......... ................ ..... 121 T able 40 Advanced LAN Setup ... ................. ................ ................ ................ ................ .............. .......[...]

List of Tables P-660HW-Tx v3 User’s Guide 29 T able 82 Over Allotment of Bandwidth Example .. ................ ................. ............ ................. ................ . 209 T able 83 Media Bandwidth Management: Summary ... ......... ................. ............ ................. ............ ..... 210 T able 84 Bandwidth Management: R[...]

List of Tables P-660HW-Tx v3 User’s Guide 30 T able 125 Hardware S pecifications ......................... ................. ................ ................ ................ .. ......... 285 T able 126 Firmware S pecif ications ................. ................ ................ ................ ................ ........... .......... 2 85 T ab[...]

31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (4 5)[...]

32[...]

P-660HW-Tx v3 User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Overview The ZyXEL Device is an is an ADSL2+ gateway that allows super-fast, secure Internet access over analog (POTS) or digital (I[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 34 • TR-069. This is a standard that defines how your ZyXEL Devic e can be managed by a management server . 1.3 Configuring Y our ZyXEL Device’ s Security Features Y our ZyXEL Device comes with a variety of s ecurity features. This section s ummarizes these features and provide[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 35 • Hide your wireless network na me (SSID). The SSID can be regularly broadcast and unauthorized users may use this information to access your network. See Chapter 9 on page 127 for directions on using the web con figurator to hide the SSID. • Enable the MAC filter to allow o[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 36 • Back up the co nfiguration (and make sure you know how to restore it). Restoring an earlier working co nfiguration may be useful if the device becomes un stable or even crashes. If you for get your password, you will have to reset the ZyXEL Device to its factory default sett[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 37 Any IP The Any IP feature allows a computer to access the Internet and the ZyXEL Device without changing the network settings (such as IP addr ess and subnet mask) of the computer , when the IP addresses of the computer and the ZyX EL Device are not in the same subnet. Firewall [...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 38 Dynamic DNS Support W ith Dynamic DNS support, you can have a sta tic hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. Y ou must register for this service with a Dynamic DNS service provider . DHCP DH[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 39 " The ZyXEL Device may be prone to RF (Radio Frequency) in terference from other 2.4 GHz devices such as micr owave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. Wi-Fi Protected Access W i-Fi Protected Access (WP A) is a subset of the IEEE 802.[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 40 1.6.1 Protected Internet Access The ZyXEL Device is the ideal high-speed Intern et access solution. It is compatible with all major ADSL DSLAM (Digital Subscriber Line Access Multiplexer) providers and supports the ADSL standards as shown in T able 2 on page 36 . In addition, th[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 41 1.7 LEDs Figure 3 LEDs 1.8 Splitters and Microfilters 1.8.1 Connecting a POTS Splitter When you use the Full Rate (G .dmt) ADSL standard, you can use a POTS (Plain Old T elephone Service) splitter to separate th e telephone and ADSL si gnals. This allows simultaneous Internet ac[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 42 Install the POTS splitter at the point where the te lephone line enters your residence, as shown in the following figure. Figure 4 Connecting a POTS S plitter 1 Connect the side labeled “Phone” to your telephone. 2 Connect the side labeled “Mo dem” or “DSL” to your Z[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 43 Figure 5 Connecting a Microfilter Y ou can also use a Y -Connector with a microfilter in order to connect both yo ur modem and a telephone to the same wall jack wi thout using a POTS splitter . 1 Connect a phone cable from the wall jack to the single jack end of the Y -Connector[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 User’s Guide 44 Figure 7 ZyXEL Device with ISDN[...]

P-660HW-Tx v3 User’s Guide 45 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy ZyXEL Device setup and management via Internet browser . Use Internet Explorer 6.0 and later [...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 46 4 T ype "192.168.1.1" as the URL. 5 A window displays as shown. Enter the default admin password 1234 to configure the wizards and the advanced features or enter the default user password user to view the status only . Click Login to proceed to a screen asking you[...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 User’s Guide 47 Figure 9 Change Password at Login 7 Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, select Go to Advanced setup and click Apply to display the St a t u s scre en. Figure 10 Select a Mode " The management session auto matically tim[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 48 2.3 Resetting the ZyXEL Device If you forget your password or cannot access th e web configurator , you will need to use the RESET button at the back of the ZyXEL Device to reload th e factory-default configuration file. This means that you will lose all configura tions tha[...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 User’s Guide 49 The following table describes the labels in this screen. T able 4 Web Configurat or Screens S ummary LINK/ICON SUB-LINK FUNCTION Wizard INTERNET/ WIRELESS SETUP Use these screens for initial configuration including general setup, ISP parameters for Internet Access and W AN I[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 50 2.4.2 St atu s Screen The following summarizes how to navigate the web configurator from the St a t u s screen. Some fields or links are not available if yo u entered the user password in the login password screen (see Figure 8 on page 46 ). Advanced S tatic Route Use this [...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 User’s Guide 51 Figure 12 S tatus Screen The following table describes the labels shown in the St a t u s screen. T able 5 Sta tus Screen LABEL DESCRIPTION Refresh Int erval Select a nu mber of seconds or None from the drop-down list box to refresh all screen statistics automatically at the[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 52 IP Subnet Mask This is the LAN port IP subnet mask. DHCP This is the W AN port DHCP role - Server , Relay or None . WLAN Information SSID This is the descriptive name used to id entify the ZyXEL Device in the wireless LAN. Channel This is the channe l number used by the ZyX[...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 User’s Guide 53 2.4.3 St atus: Any IP T able Click the Any IP T able hyperlink in the St a t u s screen. The Any IP table shows current read- only information (including the IP address and the MAC address) of all network devices that use the Any IP feature to communicate with the ZyXEL Devi[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 54 The following table describes the labels in this screen. 2.4.5 St atus: Bandwidth S tatus Click the Bandwidth S tatus hyperlink in the St a t u s screen. Select an interfa ce from the drop- down list box to v iew the bandwidth usage of its bandwidth rules. The gray section [...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 User’s Guide 55 Figure 16 S tatus: Packet S tatistics The following table describes th e fields in this screen. T able 8 S tatus: Pa cket S tatistics LABEL DESCRIPTION System Monitor System up T ime This is the elapsed time the system has been up. Current Date/T ime This field displays your[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 User’s Guide 56 2.4.7 Changing Login Password It is highly recommended that you periodic ally change the password for accessing the ZyXEL Device. If you didn’t change the default o ne after you logged in or you want to change to a new password again, then click Maintenance > System to[...]

P-660HW-Tx v3 User’s Guide 57 C HAPTER 3 Wizard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction Use the wizard setup sc reens to configure your system for Internet access with the information given to you by your ISP . " See the advanced [...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 58 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 19 Wizard: Welcome 3 The wizard attempts to detect whic h W AN connection type you are using. If the wizard detects your connection type and your ISP uses PPPo E or P[...]

Chapter 3 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 59 Figure 21 Auto Detection: Failed 3.2.1 Automatic Detection 1 If you have a PPPoE or PPPoA co nnection, a screen displays prompting you to enter your Internet account information. Enter th e username , password and/or service name exactly as provided. 2 Click Next and see Se[...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 60 Figure 23 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Ne[...]

Chapter 3 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 61 Figure 24 Internet Connection with PPPoE The following table describes the fields in this screen. Figure 25 Internet Connection with RFC 1483 The following table describes the fields in this screen. T able 10 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter [...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 62 Figure 26 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Next Click Next to continue to the next wizard screen. Exit Click Exit to close the wizard screen without saving your changes. T able 12 Internet Connection with ENET ENCA[...]

Chapter 3 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 63 Figure 27 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password setup t[...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 64 Figure 29 Connection T est Failed-2. 3.3 Wireless Connection Wizard Setup After you configure the Internet access informatio n, use the following scr eens to set up your wireless LAN. 1 Select Ye s and click Next to configure wireless settings. Otherwise, select No and skip[...]

Chapter 3 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 65 Figure 31 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. 3 Configure your wireless settin gs in this screen. Click Next . Figure 32 Wireless LAN Setup Wizard 2 The following table describes the labels in this screen. T able 14 Wireless [...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 66 " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication. 4 This screen varies depending on the security mode you selected in the previous scree[...]

Chapter 3 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 67 3.3.2 Manually assign a WEP key Choose Manually assign a WEP key to setup WEP Encryption parameters. Figure 34 Manually assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Next Click Next to proceed to [...]

Chapter 3 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 68 Figure 35 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct. Click Finish to complete and save the wizard setup. Figure 36 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to w[...]

P-660HW-Tx v3 User’s Guide 69 C HAPTER 4 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens. 4.1 Introduction Bandwidth management allows y o u to control the amount of bandwidth going out through the ZyXEL Device’ s W AN port and p rioritize the distribution of the bandwidt h[...]

Chapter 4 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 70 4.3 Bandwid th Management Wizard Setup 1 After you enter the admin password to access the web configura tor , sele ct Go to Wizard setup and click Apply . Otherwise, click the wizard icon ( ) in the top right corner of the web configurat or to display the wizard main screen. Fig[...]

Chapter 4 Bandwidth Manage ment Wizard P-660HW-Tx v3 User’s Guide 71 2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet access and wireless c onnection. Figure 38 Wizard: Welcome 3 Activate bandwidth mana gement and select to allocate ba ndwidth to packets ba sed on the service requirements. Figure 39 Bandwidt h Management Wi[...]

Chapter 4 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 72 Figure 40 Bandwidt h Management Wizard: Configuration The following table describes the labels in this screen. 5 Follow the on-screen in structions and click Finish to complete the wizard setup and save your configuratio n. T able 20 Bandwidth Management Wizard: Configuration LA[...]

Chapter 4 Bandwidth Manage ment Wizard P-660HW-Tx v3 User’s Guide 73 Figure 41 Bandwid th Management Wizard: Complete[...]

Chapter 4 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 74[...]

75 P ART II Wi z a r d W izard Setup for Internet Access (77) Bandwidth Management W izard (89)[...]

76[...]

P-660HW-Tx v3 User’s Guide 77 C HAPTER 5 Wizard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 5.1 Introduction Use the wizard setup sc reens to configure your system for Internet access with the information given to you by your ISP . " See the advanced [...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 78 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 43 Wizard: Welcome 3 The wizard attempts to detect whic h W AN connection type you are using. If the wizard detects your connection type and your ISP uses PPPo E or P[...]

Chapter 5 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 79 Figure 45 Auto Detection: Failed 5.2.1 Automatic Detection 1 If you have a PPPoE or PPPoA co nnection, a screen displays prompting you to enter your Internet account information. Enter th e username , password and/or service name exactly as provided. 2 Click Next and see Se[...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 80 Figure 47 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Ne[...]

Chapter 5 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 81 Figure 48 Internet Connection with PPPoE The following table describes the fields in this screen. Figure 49 Internet Connection with RFC 1483 The following table describes the fields in this screen. T able 22 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter [...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 82 Figure 50 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Next Click Next to continue to the next wizard screen. Exit Click Exit to close the wizard screen without saving your changes. T able 24 Internet Connection with ENET ENCA[...]

Chapter 5 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 83 Figure 51 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password setup t[...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 84 Figure 53 Connection T est Failed-2. 5.3 Wireless Connection Wizard Setup After you configure the Internet access informatio n, use the following scr eens to set up your wireless LAN. 1 Select Ye s and click Next to configure wireless settings. Otherwise, select No and skip[...]

Chapter 5 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 85 Figure 55 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. 3 Configure your wireless settin gs in this screen. Click Next . Figure 56 Wireless LAN Setup Wizard 2 The following table describes the labels in this screen. T able 26 Wireless [...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 86 " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication. 4 This screen varies depending on the security mode you selected in the previous scree[...]

Chapter 5 Wizard Setup for Inter net Access P-660HW-Tx v3 User’s Guide 87 5.3.2 Manually assign a WEP key Choose Manually assign a WEP key to setup WEP Encryption parameters. Figure 58 Manually assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Next Click Next to proceed to [...]

Chapter 5 Wizard Setup for Inte rnet Access P-660HW-Tx v3 User’s Guide 88 Figure 59 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct. Click Finish to complete and save the wizard setup. Figure 60 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to w[...]

P-660HW-Tx v3 User’s Guide 89 C HAPTER 6 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens. 6.1 Introduction Bandwidth management allows y o u to control the amount of bandwidth going out through the ZyXEL Device’ s W AN port and p rioritize the distribution of the bandwidt h[...]

Chapter 6 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 90 6.3 Bandwid th Management Wizard Setup 1 After you enter the admin password to access the web configura tor , sele ct Go to Wizard setup and click Apply . Otherwise, click the wizard icon ( ) in the top right corner of the web configurat or to display the wizard main screen. Fig[...]

Chapter 6 Bandwidth Manage ment Wizard P-660HW-Tx v3 User’s Guide 91 2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet access and wireless c onnection. Figure 62 Wizard: Welcome 3 Activate bandwidth mana gement and select to allocate ba ndwidth to packets ba sed on the service requirements. Figure 63 Bandwidt h Management Wi[...]

Chapter 6 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 92 Figure 64 Bandwidt h Management Wizard: Configuration The following table describes the labels in this screen. 5 Follow the on-screen in structions and click Finish to complete the wizard setup and save your configuratio n. T able 32 Bandwidth Management Wizard: Configuration LA[...]

Chapter 6 Bandwidth Manage ment Wizard P-660HW-Tx v3 User’s Guide 93 Figure 65 Bandwid th Management Wizard: Complete[...]

Chapter 6 Bandwid th Management Wizard P-660HW-Tx v3 User’s Guide 94[...]

95 P ART III Network WA N S e t u p ( 9 7 ) LAN Setup (1 15) W ireless LAN (127) Network Address T ranslation (NA T) (147)[...]

96[...]

P-660HW-Tx v3 User’s Guide 97 C HAPTER 7 WAN Setup This chapter describes how to configure W AN settings. 7.1 W AN Overview A W AN (Wide Area Network) is an outside conn ection to another network or the Internet. 7.1.1 Encap sulation Be sure to use the encapsulat ion method required by your ISP . The ZyXEL Device su pports the following methods. [...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 98 7.1.1.3 PPPoA PPPoA stands for Point to Point Protocol over A TM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial -up Internet connection. The ZyXEL Device encapsulates the PPP session based on RF C1483 and sends it through an A TM PVC (Permanent V irtual Circuit) to the Interne[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 99 7.1.3.2 Scenario 2: One VC, One Protocol (IP) Selecting RFC-1483 encapsulation with VC-based multiplexing requires the least amount of overhead (0 octets). However , if there is a po tential need for multiple protocol support in the future, it may be safer to select PPPoA encapsula tion instead of[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 100 Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern 7.1.7 NA T NA T (Netw ork Address T ransl ation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, [...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 101 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traf fic source. It specifies the maximum average rate at which c ells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum numb er of cells that can be sent at the PCR.[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 102 The VBR-nR T (non real-time V a riable Bit Rate) ty pe is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An examp[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 103 Figure 67 Internet Conne ction (PPPoE) The following table describes the labels in this screen. T able 33 Internet Connection LABEL DESCRIPTION General Name Enter the name of your Internet Servic e Provider , e.g., MyISP . This information is for identification purposes only . Mode Select Routing[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 104 7.5.1 Configuring Advanced Internet Connection Setup T o edit your ZyXEL Device's ad vanced W AN settings, click the Advanced Setup button in the Internet Connection screen. The screen appears as shown. Virtual Circuit ID VPI (V irtual Path Identifier) and VCI (V irtual Channe l Identifier) [...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 105 Figure 68 Advanced Intern et Connection Setup The following table describes the labels in this screen. T able 34 Advanced Internet Connection Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction fro m None , Both , In Only and Out Only . RIP V ersion Select the[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 106 7.6 Configuring More Connections This section describes the protocol-independent parameters for a remote network. They are required for placing calls to a remote gate way and the network behind it across a W AN connection. When you use the W AN > Internet Connection scree n to set up Internet [...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 107 Figure 69 More Connections The following table describes the labels in this screen. 7.6.1 More Connections Edit Click the edit icon in the More Connections screen to configure a connection . T able 35 More Connections LABEL DESCRIPTION # This is the index number of a connection. Active This displ[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 108 Figure 70 More Connections Edit The following table describes the labels in this screen. T able 36 More Connections Edit LABEL DESCRIPTION Active Select the check box to activate or clear the check box to deactivate this connection. Name Enter a unique, descri ptive name of up to 13 ASCII charact[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 109 User Name (PPPoA and PPPoE en capsulation only) Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domai n identifies a service name, then enter both compone nts exactly as given. Password (PPPoA and PPPoE encap sulation only ) Enter the password as[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 11 0 7.6.2 Configuring More Co nnections Advanced Setup T o edit your ZyXEL Device's ad vanced W AN settings, click the Advanced Setup button in the Mor e Connections Edit screen. The scree n appears as shown. Figure 71 More Connections Advanced Setup The following table describes the labels in [...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 111 7.7 T raffic Redirect T raffic redirect forwards traf fic to a backup gate way when the ZyXEL Device cannot connect to the Internet. An example is shown in the figure below . Figure 72 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 11 2 Figure 73 T raffic Redirect LAN Setup 7.8 Configuring W AN Backup T o change your ZyX EL Device’ s W AN backup settings , click Network > W AN > W AN Backup Setup . The screen appears as shown. Figure 74 W AN Backup Setup[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 11 3 The following table describes the labels in this screen. T able 38 W AN Backup Setup LABEL DESCRIPTION Backup T ype Select the method that the ZyXEL Device uses to check the DSL connection. Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is up. Select ICMP to have t[...]

Chapter 7 WAN Setup P-660HW-Tx v3 User’s Guide 11 4[...]

P-660HW-Tx v3 User’s Guide 11 5 C HAPTER 8 LAN Setup This chapter describes how to configure LAN settings. 8.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building. The LAN screens[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 11 6 8.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou ca n configure the ZyXEL Device as a DHCP server or disable it. When configured as a server , the ZyXEL Device provides th[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 11 7 • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. • The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Se[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 11 8 Y ou can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small or ga nization and your Internet access is through an ISP , the ISP can provide you with the Internet addresses for y our local networks. On the other hand, if you ar[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 11 9 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address 224.0.0.1 is used for query messages and is assi gned to the permanent group of all IP hosts (including gateways). All hosts must join the 22 4.0 .0.1 group in order to partic ipate in IGMP . The address 22[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 120 " Y ou must enable NA T/SUA to use the Any IP feature on the ZyXEL Device. 8.2.4.1 How Any IP W orks Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on [...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 121 The following table describes th e fields in this screen. 8.3.1 Configuring Advanced LAN Setup T o edit your ZyXEL Device's advanced LAN settings, click the Advanced Setup button in the LAN IP screen. The screen appears as shown. Figure 78 Advanced LAN Setup The following table describes the[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 122 8.4 DHCP Setup Use this screen to configure th e DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN. Click Networ k > LAN > DHCP Se tup to open the screen. Figure 79 DHCP Setup Any IP Setup Select the Active check box to enable the Any IP fe ature. This[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 123 The following table describes the labels in this screen. 8.5 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned [...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 124 Figure 80 LAN Client List The following table describes the labels in this screen. 8.6 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The ZyXEL Device s upports three logical LA N interfaces via its single physi[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 125 When you use IP alias, you can also configur e firewall rules to control access between the LAN's logical networ ks (subnets ). " Make sure that the subnets of t he logical networ ks do not overlap. The following figure shows a LAN divided into subnets A, B, and C. Figure 81 Physical Ne[...]

Chapter 8 LAN Setup P-660HW-Tx v3 User’s Guide 126 The following table describes the labels in this screen. T able 43 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Select the check box to confi gure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation. Alternatively , click the r[...]

P-660HW-Tx v3 User’s Guide 127 C HAPTER 9 Wireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more detailed information ab out wireless networks. 9.1 Wireless Network Overview The following figure provides an exampl e of a wireless network. Figure 83 Example of a Wireles[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 128 • Every wireless client in the same wireless network must use security c ompatible with the AP . Security stops unauthorized devices from using the wireless network. It ca n also protect the information that is sent in the wireless network. 9.2 Wireless Security Overview The following sectio[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 129 • In a RADIUS server: this is a server u sed in businesses mo re than in homes. If your AP does not provide a local user database and if you do not have a RADIUS server , you cannot set up user names and passwords for your users. Unauthorized devices can still see th e information that is se[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 130 When you select WP A2 or WP A2-PSK in your ZyXEL Device, you can also select an option ( WP A compatible ) to support WP A as well. In this cas e, if some wireless clients support WP A and some support WP A2, you should set up WP A2-PSK or WP A2 (depending on the type of wireless network login[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 131 See the rest of this chapter for informa tion on the other labels in this screen. 9.3.1 No Security Select No Security to allow wireless clients to commun icate with the access points without any data encryption. " If you do not enable any wi reless security on your Zy XEL Device, your ne[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 132 Figure 85 Wireless: No Security The following table describes the labels in this screen. 9.3.2 WEP Encryption WEP encryption scrambles the da ta transmitted between the wire less clients and the access points to keep network communications pr ivate. It encrypts unicast and multicast communicat[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 133 Figure 86 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 9.3.3 WP A-PSK/WP A2-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir eless LAN to display the Ge neral screen. Select WP A-PSK or WP[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 134 Figure 87 Wireless: WP A-PSK/WP A2-PSK The following table describes the wireless LAN security labels in this screen. T able 48 Wireless: WP A-PSK/W P A2-PSK LABEL DESCRIPTION Security Mode Choose WP A-PSK or WP A2-PSK from the drop-down list box. WP A Compatible This check box is availab le o[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 135 9.3.4 WP A/WP A2 In order to configure and enable WP A/WP A2; click the W ireless LAN link under Network to display the General screen. Select WP A or WP A2 from the Security Mo de list. Figure 88 Wireless: WP A/WP A2 Idle T imeout (In Seconds) The ZyXEL Device automatically disconnec ts a wir[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 136 The following table describes the wireless LAN security labels in this screen. T able 49 Wireless: WPA/WPA2 LABEL DESCRIPTION WP A Compatible This check box is available onl y when you select WP A2-PSK or WP A2 in the Security Mode field. Select the check box to have both WP A2 and WP A wirele[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 137 9.3.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen. The screen appears as shown. Figure 89 Advanced The following table describes the labels in this screen. T able 50 Wireless LAN: Advanced LABEL DESCRIPTION Wirele[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 138 9.3.6 MAC Filter T o change your ZyXEL Device’ s MAC filter settings, click the Edit icon in the Network > Wir eless LA N screen. The scree n appears as shown. Figure 90 MAC Addres s Filter The following table describes the labels in this menu. Apply Click Apply to save your changes to th[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 139 9.4 WiFi Protected Setup Y our ZyXEL Device supports W iFi Protected Setu p (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the W iFi Alliance. WPS allows you to quickly set up a wireless ne twork with strong security , wit[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 140 Use the PIN method instead of the push-button configuration (P BC) method if you want to ensure that the connection is est ablished betw een the devices you sp ecify , not just the first two devices to activate WPS in range of each ot her . However , you need to log into the configuration inte[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 141 Figure 91 Example WPS Process: PIN Method 9.4.3 How WPS Works When two WPS-enabled devices connect, each de vice must assume a spe cific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that re[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 142 Figure 92 How WPS works The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary . The WPS connection process is like a handshake; only two devices participate in each[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 143 Figure 93 WPS: Example Network S tep 1 In step 2 , you add ano ther wireless client to the network. Y ou know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake w ith the new client since you must connect to the access point anyway in order to use the netw[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 144 Figure 95 WPS: Example Network S tep 3 9.4.5 Limit ations of WPS WPS has some limitati ons of which you should be aware. • WPS works in Infrastructure networks on ly (where an AP and a wireless client communicate). It does not work in Ad-H oc networks (where there is no AP). • When you use[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 145 Y ou can easily check to see if this has happ ened. WPS works between only two devices simultaneously , so if another device has enrolle d y our device will b e unable to enroll, and will not have access to the network. If this happens, open the access point’ s configuration interface and lo[...]

Chapter 9 Wireless LAN P-660HW-Tx v3 User’s Guide 146 9.6 The WPS S t ation Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS S tation . The following sc reen displays. Figure 97 Network > Wireless LAN > WPS S tation The follow[...]

P-660HW-Tx v3 User’s Guide 147 C HAPTER 10 Network Address Translation (NAT) This chapter discusses how to configure NA T on the ZyXEL Device. 10.1 NA T Overview NA T (Netw ork Address T ransl ation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one[...]

Chapter 10 Network Addr ess Translation (NAT) P-660HW-Tx v3 User’s Guide 148 10.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the resp onse comes back, NA T tr[...]

Chapter 10 N etwork Add ress Translatio n (NAT) P-660HW-Tx v3 User’s Guide 149 Figure 99 NA T Application With IP Alias 10.1.5 NA T Mapping T ypes NA T suppo rts five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address. • Many to One : In Many-to-One mode,[...]

Chapter 10 Network Addr ess Translation (NAT) P-660HW-Tx v3 User’s Guide 150 10.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The ZyXEL Device also supports Full Feature NA T to map multiple global IP addresses to multi[...]

Chapter 10 N etwork Add ress Translatio n (NAT) P-660HW-Tx v3 User’s Guide 151 The following table describes the labels in this screen. 10.4 Port Forwarding A port forwarding set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP , that you can make visible to the outsid e world even though NA T makes your whole inside [...]

Chapter 10 Network Addr ess Translation (NAT) P-660HW-Tx v3 User’s Guide 152 10.4.1 Default Server IP Address In addition to the servers for specified services, NA T supports a default server IP address. A default server receives packets from ports that are not specifie d in this screen. " If you do not assign a Default Server IP address, th[...]

Chapter 10 N etwork Add ress Translatio n (NAT) P-660HW-Tx v3 User’s Guide 153 Figure 101 Multiple Servers Behind NA T Example 10.5 Configuring Port Forwarding " The Port Forwarding screen is available only when you select SUA Only in the NA T > General screen. " If you do not assign a Default Server IP address, the Zy XEL Device dis[...]

Chapter 10 Network Addr ess Translation (NAT) P-660HW-Tx v3 User’s Guide 154 The following table describes th e fields in this screen. 10.5.1 Port Forwarding Rule Edit T o edit a port forwarding rule, c lick the rule’ s edit icon in the Port Forwarding screen to display the screen shown next. Figure 103 Port Forwarding Rule Setup T able 58 NAT [...]

Chapter 10 N etwork Add ress Translatio n (NAT) P-660HW-Tx v3 User’s Guide 155 The following table describes th e fields in this screen. T able 59 Port Forwarding Rule Setup LABEL DESCRIPTION Activ e Click this check box to enable the ru le. Service Name Enter a name to identify this port-forwarding rule. St a r t P o r t Enter a port number in t[...]

Chapter 10 Network Addr ess Translation (NAT) P-660HW-Tx v3 User’s Guide 156[...]

157 P ART IV Security Firewalls (159) Firewall Configuration (173) Content Filtering (195)[...]

158[...]

P-660HW-Tx v3 User’s Guide 159 C HAPTER 11 Firewalls This chapter gives some back ground information on firewa lls and introduces the ZyXEL Device firewall. 1 1 .1 Firewall Overview Originally , the term firewall referred to a co nstruction tec hnique designed to prevent the spread of fire from one room to another . The ne tworking term “firewa[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 160 1 1.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP , FTP and telnet, they can evaluate network packets for valid applicatio n-sp ecific data. A[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 161 1 1.3.1 Denial of Service Att acks Figure 104 Firewall Application 1 1 .4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disable a device or ne twork so users no longer have[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 162 1 1.4.2 T ypes of DoS Att a cks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoofing. 5 " Ping of Death " and &[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 163 Figure 106 SYN Flood •I n a LAND Attack , hackers flood SYN packets into the network with a spoofed source IP address of the targeted system . This makes it appear as if the host computer sent the packets to itself, making the sy stem unavailable while the target system tries to respond to its[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 164 1 1.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that works in concert with IP . The following ICMP types trigger an alert: 1 1.4.2.2 Illegal Commands (NetBIOS and SMTP) The only legal NetBIOS commands are the following - all others are illegal. All SMTP commands are illegal ex[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 165 are allowed in. The ZyXEL Device uses stateful packet inspection to protect the private LAN from hackers and vandals on the Internet. By de fault, the ZyXEL Device’ s stateful inspection allows all communications to the Internet that or iginate from the LAN, and blocks all traffic to the LAN t[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 166 6 Later , an inbound packet reac hes the interface . This packet is part of the connection previously established with the outbound packet. The inbound packet is ev aluated against the inbound access list, and is permitted because of the temporary access list entry previously crea ted. 7 The pac[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 167 If an initiation packet originates on the LAN, this means that someone is trying to make a connection from the LAN to the In ternet. Assuming that this is an acceptable part of the security policy (as is the case w ith the default policy), the connection will be allowed. A cache entry is added w[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 168 1 1 .6 Guidelines for Enhancing Security with Y our Firewall • Change the default password via CLI (Co mmand Line Interpreter) or web configurator . • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled [...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 169 • Always shred confidential inform ation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or indivi duals for information that might help them in an attack. 1 1 .7 Packet Filtering Vs Firewall Below are some comparisons be tween the [...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 170 • T o selectively bloc k/allow inbound or outbound traffic between inside host/networks and outside host/networks. Remember that filters can not distinguish traf fic originating from an inside host or an ou tside host by IP address. • The firewall performs better than filtering if you need t[...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 171 Figure 1 10 “T riangle Route” Problem 1 1.8.2 The “T riangle Route” Solutions IP alias allows you to partition your network into logical sections over the same Ethernet interface. Y our switch supports up to three logical LAN interfaces with the switch being the gateway for each logical [...]

Chapter 11 Firewalls P-660HW-Tx v3 User’s Guide 172[...]

P-660HW-Tx v3 User’s Guide 173 C HAPTER 12 Firewall Configuration This chapter shows you how to enable and configure t he ZyXEL Device firewall. 12.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your ZyXEL Device has to offer . For this rea son, it is recommended that you config ure your fir[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 174 Y ou may define additional rules and sets or modify existing ones but please exercise extreme caution in doing so. " If you configure firewall rules without a good underst anding of how they work, you might inadvertently introduce securi ty risks to the fire wall and to the pr[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 175 2 Does this rule stop LAN us ers from accessing critical reso urces on the Internet? For example, if IRC is blocke d, are th ere us ers that require this service? 3 Is it possible to modify the rule to be more specific? For ex ample, if IRC is blocked for all users, will a rule tha[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 176 12.4.1 LAN to W AN Rules The default rule for LAN to W AN traf fic is that all users on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essence want to limit some or all users from accessing cer tain services on the W A N. W AN[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 177 The following table describes the labels in this screen. 12.6 Firewall Rules Summary " The ordering of your rules is very important as rules are applied in turn. Refer to Section 1 1.1 on page 159 for more information. Click Security > Firewall > Rules to bring up the fo[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 178 Figure 1 13 Firewall Rules The following table describes the labels in this screen. T able 65 Firewall Rules LABEL DESCRIPTION Firewall Rules S torage S pace in Use This read-only bar shows how much of the ZyXEL Device's me mory for recording firewall rules it is currently usi[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 179 12.6.1 Configuring Firewall Rules Refer to Section 1 1.1 on page 159 for more information. In the Rules screen, select an index number and cl ick Add or click a rule’ s Edit icon to display this screen and refer to the following table for information on the labels. Actio n This f[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 180 Figure 1 14 Firewall: Edit Rule The following table describes the labels in this screen. T able 66 Firewall: Edit Rule LABEL DESCRIPTION Edit Rule N Activ e Select this option to enable this firewall rule.[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 181 Action for Matched Packet Use the drop-down list box to select what the firewall is to do with p ackets that match this rule. Select Drop to silently discard the p ackets without sending a TCP reset packet or an ICMP destination-unreacha ble message to the sender . Select Reject to[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 182 12.6.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further informa tion on these se rvices, please rea[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 183 Figure 1 16 Firewall: Configure Customized Services The following table describes the labels in this screen. 12.7 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “MyService” connection from the Internet. 1 Click Security > Fir ew al[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 184 Figure 1 17 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall [...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 185 Figure 1 19 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom services show up with an “*” before their[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 186 Figure 120 Firewall Example: Edit Rule : Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 187 Figure 121 Firewall Example: Rules: MyService 12.8 Predefined Services The A vailable Services list box in the Edit Ru le s creen (see Section 12.6.1 on page 179 ) displays all predefined services that the ZyXEL Device already supports. Next to the name of the service, two fields a[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 188 HTTP(TCP:80) Hyper T ext Tr a nsfer Protocol - a c lient/server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICQ(UDP:4000) This is a popu lar Internet cha t program. IPSEC_TRANSPORT/ TUNNEL(AH:0) The IPSEC AH (Authentic ation Head[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 189 12.9 Anti-Probing If an outside user attempts to probe an unsupp orted port on your ZyXEL Device , an ICMP response packet is automatically returned. This allows the ou tside user to know the ZyXEL Device exists. The ZyXEL Device supports anti- probing, which prevents the ICMP resp[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 190 The following table describes the labels in this screen. 12.10 DoS Thresholds For DoS attacks, the ZyXEL Device uses threshol ds to determine when to drop sessions that do not become fully established. These thresholds ap ply globally to all sessions. Y ou can use the default thres[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 191 12.10.2 Half-Open Sessions An unusually high number of half-open sessions (either an absolute number or measured as the arrival rate) could indicate that a Denial of Service a ttack is occurring. For TCP , "half- open" means that the session has not reached the establis h[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 192 Figure 123 Firewall: Threshold The following table describes the labels in this screen. T able 71 Firewall: Threshold LABEL DESCRIPTION DEF AUL T V ALUES Denial of Service Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deleting[...]

Chapter 12 Firewall Configu ration P-660HW-Tx v3 User’s Guide 193 Maximum Incomplete High This is the number of e xisting half-op en sessions that causes the firewall to st art deleting half-open sessi ons. When the number of existing half-open sessions rises above this number , the ZyXEL Device deletes half-open sessions as required to accommoda[...]

Chapter 12 Firewa ll Configuration P-660HW-Tx v3 User’s Guide 194[...]

P-660HW-Tx v3 User’s Guide 195 C HAPTER 13 Content Filtering This chapter covers how to configure content filtering. 13.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block web sites that contain key words (that y[...]

Chapter 13 Content Filtering P-660HW-Tx v3 User’s Guide 196 Figure 124 Content Filter: Keyw ord The following table describes the labels in this screen. 13.3 Configuring the Schedule T o set the days and times for the ZyXEL De vice to perform content filtering, click Security > Content Filter > Schedule . The screen appears as shown. T able[...]

Chapter 13 Con tent Filtering P-660HW-Tx v3 User’s Guide 197 Figure 125 Content Filter: Schedu le The following table describes the labels in this screen. 13.4 Configuring T rusted Computers T o exclude a range of users on the LAN from content filtering on your Zy XEL Device, click Security > Content Filter > Tr u s t e d . The screen appea[...]

Chapter 13 Content Filtering P-660HW-Tx v3 User’s Guide 198 Figure 126 Content Filter: Trusted The following table describes the labels in this screen. T able 74 Content Filter: T rus ted LABEL DESCRIPTION T rusted User IP Range From T ype the IP address of a computer (or the beginn ing IP address of a specific range of computers) on the LAN that[...]

199 P ART V Advanced S tatic Route (201) Bandwidth Management (2 05) Dynamic DNS Setup (217) Remote Management Configurat ion (221) Universal Plug-and-P lay (UPnP) (233)[...]

200[...]

P-660HW-Tx v3 User’s Guide 201 C HAPTER 14 Static Route This chapter shows you how to configure static routes for your ZyXEL Device. 14.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the network s beyond. For instance , the ZyXEL Device knows abou[...]

Chapter 14 Static Rou te P-660HW-Tx v3 User’s Guide 202 Figure 128 S tatic Route The following table describes the labels in this screen. 14.2.1 S tatic Route Edit Select a static route index numb er and click Edit . The screen shown next appears. Use this screen to configure the required information for a static route. T able 75 Static Route LAB[...]

Chapter 14 Static Route P-660HW-Tx v3 User’s Guide 203 Figure 129 S tatic Route Edit The following table describes the labels in this screen. T able 76 Static Rou te Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route. Route Name Enter the name of the IP static ro ute. Leav e this field blank to delete t[...]

Chapter 14 Static Rou te P-660HW-Tx v3 User’s Guide 204[...]

P-660HW-Tx v3 User’s Guide 205 C HAPTER 15 Bandwidth Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the ZyXEL Device’ s bandwidth managem ent logs. 15.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to specify bandwidth management rules based on an app[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 206 Figure 130 Subnet-based Ba ndwidt h Management Example 15.4 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth classes based on a combination of a subnet and an application. The following exam ple table shows bandwidth alloca tions for application sp[...]

Chapter 15 Bandwidth Management P-660HW-Tx v3 User’s Guide 207 15.5.2 Fairness-based Scheduler The ZyXEL Device divides bandwidth equally among bandwidth classes when using the fairness-based scheduler; thus preventing one ba ndwidth class from using all of the interface’ s bandwidth. 15.6 Maximize Bandwid th Usage The maximize bandwi dth usage[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 208 The ZyXEL Device divides up the unb udgeted 2048 kbps among the class es that require more bandwidth. If the administratio n department only uses 1024 kbps of the budg eted 2048 kbps, the ZyXEL Device also divides the remaining 10 24 kbps among the classes that re quire more bandwid[...]

Chapter 15 Bandwidth Management P-660HW-Tx v3 User’s Guide 209 15.6.3 Bandwid th Management Priorities The following table describes the priorities th at you can apply to traf fic that the ZyXEL Device forwards out through an interface. 15.7 Over Allotment of Bandwid th Y ou can set the bandwidth management speed fo r an interface higher than the[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 210 Figure 131 Bandwidth Ma nagement: Summary The following table describes the labels in this screen. T able 83 Media Bandwidth Ma nagement: Summary LABEL DESCRIPTION Interface These read-only l abels represent the physica l interfaces. Select an in terface’s check box to enable band[...]

Chapter 15 Bandwidth Management P-660HW-Tx v3 User’s Guide 21 1 15.9 Bandwid th Management Rule Setup Y ou must use the Bandwidth Management Summary scr een to enable bandwi dth management on an interface before yo u can configure rules for that interface. Click Advanced > Bandwidth MGMT > Rule Setup to open the following screen. Figure 132[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 212 15.9.1 Rule Configuration Click the Edit icon or select User Defined from the Serv ice drop-down lis t in the Rule Setup screen to configure a bandwidth management ru le. Use bandwidth rules to allocate specific amounts of bandwidth capacity (bandwidth budget s) to specific applicat[...]

Chapter 15 Bandwidth Management P-660HW-Tx v3 User’s Guide 213 BW Budget S pecify the maximum bandwidth allowed for the rule in kbps. The recommendation is a setting between 20 kbps and 20000 kbps for an individual rule. Prior ity Select a priority from the drop down list box. Choose High , Mid or Low . Use All Managed Bandwidth Select this optio[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 214 15.10 Bandwid th Monitor T o view the ZyXEL Device’ s bandwidth usage and allotments, click Advanced > Bandwidth MGMT > Mon itor . The screen appears as shown. Selec t an interface from the drop-down list box to view the bandwidth usage of its bandwidth rules . The gray sect[...]

Chapter 15 Bandwidth Management P-660HW-Tx v3 User’s Guide 215 Figure 134 Bandwidth Ma nagement: Monitor[...]

Chapter 15 Bandwid th Manageme nt P-660HW-Tx v3 User’s Guide 216[...]

P-660HW-Tx v3 User’s Guide 217 C HAPTER 16 Dynamic DNS Setup This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. 16.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in Ne tMeeting, CU-SeeMe, etc.). Y ou can als[...]

Chapter 16 Dy namic DNS Se tup P-660HW-Tx v3 User’s Guide 218 Figure 135 Dynamic DNS The following table describes th e fields in this screen. T able 87 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS. Service Prov ider This is the name of your Dynamic DNS service provider . Dynamic DNS[...]

Chapter 16 Dynamic DNS Setup P-660HW-Tx v3 User’s Guide 219 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server . This fea ture has the D DNS server auto matically detect and use the IP address of the NA T router that has a public IP address. Note:[...]

Chapter 16 Dy namic DNS Se tup P-660HW-Tx v3 User’s Guide 220[...]

P-660HW-Tx v3 User’s Guide 221 C HAPTER 17 Remote Management Configuration This chapter provides information on config uring remote management. 17.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. " When you configure remote [...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 222 17.1.1 Remote Management Limit ations Remote management over LAN or W AN will not work when: • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e client IP address. If it does not [...]

Chapter 17 Remote Ma nagement Configuration P-660HW-Tx v3 User’s Guide 223 The following table describes the labels in this screen. 17.3 T elnet Y ou can configure your ZyXEL Device for remote T elnet access as shown next. The administrator uses T elnet from a computer on a remote netw ork to access the ZyXEL Device. Figure 137 T e lnet Configura[...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 224 Figure 138 Remote Mana gement: T elnet The following table describes the labels in this screen. 17.5 Configuring FTP Y ou can upload and download the ZyXEL Devi ce’ s firmware and c onfiguration files using FTP , please se e the chapter on firmware and configuration file [...]

Chapter 17 Remote Ma nagement Configuration P-660HW-Tx v3 User’s Guide 225 Figure 139 Remote Mana gement: FTP The following table describes the labels in this screen. 17.6 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a member of the TCP/IP protocol su[...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 226 Figure 140 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: ag ents and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt information [...]

Chapter 17 Remote Ma nagement Configuration P-660HW-Tx v3 User’s Guide 227 17.6.2 SNMP T rap s The ZyXEL Device will send traps to the SNMP manager when any on e of the following events occurs: 17.6.3 Configuring SNMP T o change your ZyX EL Device’ s SNMP settings, c lick Advanced > Remote MGMT > SNMP . The screen appears as show n. Figur[...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 228 The following table describes the labels in this screen. 17.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on LAN for background information. T o change your ZyXEL Device’ s DNS sett[...]

Chapter 17 Remote Ma nagement Configuration P-660HW-Tx v3 User’s Guide 229 Figure 142 Remote Mana gement: DNS The following table describes the labels in this screen. 17.8 Configuring ICMP T o change your ZyX EL Device’ s security setting s, click Advanced > Remote MGMT > ICMP . The scre en appears as shown. If an outside user attempts to[...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 230 Figure 143 Remote Mana gement: ICMP The following table describes the labels in this screen. 17.9 TR-069 TR-069 is a DSL Forum standa rd that defines ho w CPE (Customer Prem ise Equipment), for example your ZyXEL Device, can be managed ov er the W AN by an Auto Configuratio[...]

Chapter 17 Remote Ma nagement Configuration P-660HW-Tx v3 User’s Guide 231 Follow the procedure below to configure your ZyXEL Device to be managed by CNM Access. See the Command Interpreter appe ndix for information on the command structure and how to access the CLI (Command Line Interface) on the ZyXEL Device. " In this example a.b.c.d is t[...]

Chapter 17 Remote Management Configuration P-660HW-Tx v3 User’s Guide 232[...]

P-660HW-Tx v3 User’s Guide 233 C HAPTER 18 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 18.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP devi[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 234 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages only on the LAN. All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disa[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 235 18.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . 18.3.1 Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove Pr[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 236 Figure 147 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Re move Programs Pr operties window and click Next . 5 Restart the computer when prompted. 18.3.2 Inst alling UPnP in Windows XP Follow the steps below to inst all the[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 237 Figure 149 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 150 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 1[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 238 Make sure the computer is co nnected to a LAN port of the ZyXEL Device. T urn on your computer and the ZyXEL Device. 18.4.1 Auto-discover Y our UPnP-enabled Network Device 1 Click start and Control Panel . Double-click Network Connections . An icon displays under Internet Ga[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 239 Figure 152 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings. Figure 153 Internet Connection Properties: Adva nced Settings[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 240 Figure 154 Internet Connection Proper ties: Adva nced Settings: Add " When the UPnP-enabled device is disconn ected from your computer , all port mappings will be delet ed automatically . 5 Select Show icon in noti fication area when connected option and click OK . An i[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 241 Figure 156 Internet Connection S tatus 18.4.2 We b Configurator Easy Access W ith UPnP , you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first. Th is comes helpful if you do not know the IP address of the Z[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 242 Figure 157 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for y our ZyXEL Device and s elect Invoke . The web config urator login screen displays.[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 243 Figure 158 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device. Figure 159 Network Connections: My Networ k Places: Properties: Example[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 User’s Guide 244[...]

245 P ART VI Maintenance System (247) Logs (253) T ools (271) Diagnostic (277)[...]

246[...]

P-660HW-Tx v3 User’s Guide 247 C HAPTER 19 System Use this screen to configure the ZyXEL Device’ s time and date settings. 19.1 General Setup 19.1.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. However , because some ISPs c heck this name you shou[...]

Chapter 19 System P-660HW-Tx v3 User’s Guide 248 Figure 160 System General Setu p The following table describes the labels in this screen. T able 97 System General Setup LABEL DESCRIPTION System Setup System Name Choose a descriptive name for identificatio n purposes. It is recommended you enter your computer ’s “Computer name” in this fiel[...]

Chapter 19 System P-660HW-Tx v3 User’s Guide 249 19.2 T ime Setting T o change your ZyX EL Device’ s time and date, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the ZyXEL Device’ s time based on your local time zone. Figure 161 System T ime Setting Old Password T ype the default a[...]

Chapter 19 System P-660HW-Tx v3 User’s Guide 250 The following table describes th e fields in this screen. T able 98 System Time Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the ti me of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server . Current Da[...]

Chapter 19 System P-660HW-Tx v3 User’s Guide 251 St a r t D a t e Configure the day and time when Dayli ght Saving T ime starts if you selected Enable Daylight Saving . The o' clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time star ts in most parts of the United S tates on the second Sunday of March. Eac[...]

Chapter 19 System P-660HW-Tx v3 User’s Guide 252[...]

P-660HW-Tx v3 User’s Guide 253 C HAPTER 20 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. Refer to the append ix for example log message explanations. 20.1 Logs Overview The web confi gurator allows you to choose which categories of events and/or alerts to have the ZyXEL Dev[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 254 Figure 162 Vi ew Log The following table describes the fields in this screen. 20.3 Configuring Log Settings Use the Log Settings screen to configure to where the Zy XEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL [...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 255 Figure 163 Log Settings The following table describes the fields in this screen. T able 100 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server fo r the e-mail addresses specified below . If this field is left blank, logs and aler[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 256 20.3.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. • The date format here is Day-Month-Y ear . • The date format here is Month-Day-Y ea[...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 257 Figure 164 E-mail Log Example 20.4 Log Descriptions This section provides descriptio ns of example log messages. Subject: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1| Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 258 Starting Connectivity Monitor S tarting Connectivity Monitor . Time initialized by Daytime Server The router got the time and date from the Daytime server . Time initialized by Time server The router got the time and date from the time server . Time initialized by NTP server The router got the time a[...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 259 Triangle route packet forwarded: [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall allowe d a triangle route sessi on to pass through. Packet without a NAT table entry blocked: [TCP | UDP | IGMP | ESP | GRE | OSPF] The router blocked a packet that didn't have a corresponding NA T table entry .[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 260 T able 106 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default pol icy and was blocked or forwarded according to the user's setting. For type and code d etails, see T able 1 18 on page 268 . Fi[...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 261 T able 109 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can p ass throu gh the firewall. T able 1 10 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: Keyword blocking The conte nt of a requested web page matched a user defined keyword. %s: Not in trusted web list The w[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 262 Ta b l e 1 1 1 Atta ck Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TCP/ UDP/IGMP/ESP/GR E/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detected an ICMP attack. For type and code details, see T able 1 18 on page 268 . land [TCP | UDP | [...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 263 Rule <%d> idle time out, disconnect The router droppe d a connection that had outbound traffic and n o inbound traffic for a certain time perio d. Y ou can use the "ipsec timer chk_conn" CI command to set the ti me period. The d efault value is 2 minutes. WAN IP changed to <IP>[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 264 Recv <packet> IKE uses ISAKMP to transmit dat a. Each ISAKMP packet contains many different types of payloads. All of them show in the LOG . Refer to RFC2408 – ISAKMP for a list of all ISAKMP payload types. Recv <Main or Aggressive> Mode request from <IP> The router received an IK[...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 265 Rule [%d] Phase 1 authentication method mismatch The listed rule’s IKE phase 1 authentication method did not match between the router and the peer. Rule [%d] Phase 1 key group mismatch The listed rule’s IKE phase 1 key group did not match between the router a nd the peer. Rule [%d] Phase 2 proto[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 266 T able 1 14 PKI Logs LOG MESSAGE DESCRIPTION Enrollment successful The SCEP online certificate enrollment was successful. The Destination field records the certific ation autho rity server IP address and port. Enrollment failed The SCEP online certificate enrollment failed . The Destination field rec[...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 267 T able 1 15 Certificate Path Verifica tion Failure Reason Codes CODE DESCRIPTION 1 Algorithm mismatch between the cert ificate and the search constraints. 2 Key usage mismatch between the cert ificate and the search constra ints. 3 Certificat e was not valid in the time interval. 4 (Not used) 5 Cert[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 268 RADIUS rejects user. Pls check RADIUS Server. A user was not au thenticat ed by the RADIUS Server . Please check the RADIUS Server . Local User Database does not support authentication method. The local user database only supports the EAP-MD5 method. A user tried to use another authentication method [...]

Chapter 20 Lo gs P-660HW-Tx v3 User’s Guide 269 0 Net unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fra gmentation was dropped because it was set to Don't Fragment (DF) 5 Source route failed 4 Source Quench 0 A gateway may discard internet datagrams if it does not have th e buffer sp ace need[...]

Chapter 20 Logs P-660HW-Tx v3 User’s Guide 270 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type. T able 1 19 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon dd hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstIP[...]

P-660HW-Tx v3 User’s Guide 271 C HAPTER 21 Tools This chapter describes how to upload new firm ware, manage configuration and restart your ZyXEL Device. 21.1 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, "ZyXEL Device.bin". The upload process uses[...]

Chapter 21 Tools P-660HW-Tx v3 User’s Guide 272 " Do NOT turn off the ZyXEL Device wh ile firmware uplo ad is in progress! After you see the Firmware Upload in Pr ogress screen, wait two minutes before logging into the ZyXEL Device again. Figure 166 Firmware Uplo ad In Progres s The ZyXEL Device automatically restarts in this time causing a [...]

Chapter 21 Tools P-660HW-Tx v3 User’s Guide 273 Figure 168 Error Message 21.2 Configuration Screen Click Maintenance > T ools > Configuration . Information related to factory defaults, backup configuration, and rest oring configuration app ears as shown next. Figure 169 Configuration 21.2.1 Backup Configuration Backup configuration allows y[...]

Chapter 21 Tools P-660HW-Tx v3 User’s Guide 274 21.2.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. " Do not turn off the ZyXEL Device while configuration file upload is in progress After you see a “Restore Configuration successful” [...]

Chapter 21 Tools P-660HW-Tx v3 User’s Guide 275 Figure 172 Configuration Restore Er ror 21.2.3 Back to Factory Default s Pressing the RESET button in this section clears all us er -entered configuration information and returns the ZyXEL Device to its factory defaults. Y ou can also press the RESET button on the rear panel to reset the factory def[...]

Chapter 21 Tools P-660HW-Tx v3 User’s Guide 276[...]

P-660HW-Tx v3 User’s Guide 277 C HAPTER 22 Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 22.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 174 Diagnostic: General The following table describes th e fields in this screen. T able 123 Diagnost[...]

Chapter 22 Diagnostic P-660HW-Tx v3 User’s Guide 278 22.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen shown next . Figure 175 Diagnostic: DSL Line The following table describes th e fields in this screen. T able 124 Diagnostic: DSL Line LABEL DESCRIPTION AT M S t a t u s Click this button to view A TM st[...]

279 P ART VII T roubleshooting and S pecifications T roubleshooting (281) Product Specification s (285)[...]

280[...]

P-660HW-Tx v3 User’s Guide 281 C HAPTER 23 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • Reset the ZyXEL Device to Its Factory Defa u[...]

Chapter 23 Trou bleshooting P-660HW-Tx v3 User’s Guide 282 23.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP address o f the ZyXEL Device by looking up th e IP address of the default gate way for [...]

Chapter 23 Trou bleshooting P-660HW-Tx v3 User’s Guide 283 V I can see the Login screen, but I can not log in to the ZyXEL Device. 1 Make sure you have entered the password correctly . The default user password is user , and the default admin password is 1234 . The field is case-sensitiv e, so make sure [Caps Lock] is not on. 2 T urn the ZyXEL De[...]

Chapter 23 Trou bleshooting P-660HW-Tx v3 User’s Guide 284 2 Restart the ZyXEL Device. 3 If the problem continues, contact your ISP . 23.4 Reset the ZyXEL Device to It s Factory Default s If you reset the ZyXEL Device, you lose all of th e changes you have made. The ZyXEL Device re-loads its default settings, and the password resets to 1234 . Y o[...]

P-660HW-Tx v3 User’s Guide 285 C HAPTER 24 Product Specifications This chapter gives details about your ZyX EL Device’ s hardware and firmware features. 24.1 General ZyXEL Device S pecifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. T able 125 Hardware Specifications SPECIFICATIO N DESCRIPTION Dim[...]

Chapter 24 Product Specifications P-660HW-Tx v3 User’s Guide 286 ADSL St and ards Multi-Mode standard (ANSI T1. 413,Issue 2; G .dmt(G .9 92.1); G .li te(G992.2)). EOC in ITU-T (G992.2) ADSL2 G .dmt.bis (G .992.3) ADSL2 G .l ite.bis (G .99 2.4) ADSL2+ (G .992.5) Extended-Reach ADSL (ER ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate ada[...]

Chapter 24 Product Specifications P-660HW-Tx v3 User’s Guide 287 The following list, which is not exhaustive, i llustrates the standards su pported in the ZyXEL Device. Firewall DoS S tateful Pa cket Inspection Protocol and generic filters Up to 20 Access Control List (ACL) rules between LAN and WAN Real-time E-mail alerts Reports and logs NA T/S[...]

Chapter 24 Product Specifications P-660HW-Tx v3 User’s Guide 288 24.2 W a ll-mounting Instructions Complete the following step s to hang your ZyXEL Device on a wall. 1 Select a position free of obstructions on a sturdy wall. 2 Drill two holes for the screws. 1 Be careful to avoid damaging pipes or cables located in side the wall when drilling hol[...]

Chapter 24 Product Specifications P-660HW-Tx v3 User’s Guide 289 3 Do not insert the screws all the way into th e wall. Leave a small gap of about 0.5 cm between the heads of th e screws and the wall. 4 Make sure the scre ws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. 5 Align the h[...]

Chapter 24 Product Specifications P-660HW-Tx v3 User’s Guide 290[...]

291 P ART VIII Appendices and Index " The appendices provide general informatio n. Some details may not apply to your ZyXEL Device. Setting Up Y our Computer ’ s IP Address (293) Pop-up W indows, JavaScripts and Java Permissions (317) IP Addresses and Subnetting (325) W ireless LANs (335) NetBIOS Filter Commands (355) Internal SP TGEN (357) [...]

292[...]

P-660HW-Tx v3 User’s Guide 293 A PPENDIX A Setting Up Y our Computer ’ s IP Address " Y our specific ZyXEL device may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings [...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 294 Figure 178 Windows XP: S tart Menu 2 In the Control Panel , click the Network Connections icon. Figure 179 Windows XP: Control Panel 3 Right-click Local Area Connection and then select Properties . Figure 180 Windows XP: Control Panel > Network Conn ections >[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 295 4 On the General tab, select Internet Protocol (TCP/IP) and t h en click Pr operties . Figure 181 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Pr operties window ope ns.[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 296 Figure 182 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically . Select Use the following IP Address and fill in the IP address , Su bnet mask , and [...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 297 1 Click St a r t > Control Panel . Figure 183 Windows V ista: S tart Menu 2 In the Control Panel , click the Network and Intern et icon. Figure 184 Windows V ista: Control Panel 3 Click the Network and Sharing Center icon. Figure 185 Windows V ista: Network And[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 298 Figure 186 Windows V ista: Network and Sharing Center 5 Right-click Local Area Connection and then select Properties . Figure 187 Windows V ista: Network and Sharing Center " During this procedure, click Continue whenever Windows displays a screen saying that [...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 299 Figure 188 Windows V ista: Local Area Connection Properties 7 The Internet Protocol V ersion 4 (TCP/IPv4) Properties window opens.[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 300 Figure 189 Windows V ista: Internet Protocol V ersion 4 (TCP/IPv4) Prope rties 8 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically . Select Use the following IP Address and fill in the IP address , Su[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 301 1 Click Apple > System Preferences . Figure 190 Mac OS X 10.4: Apple Menu 2 In the System Prefer ences window , click the Network icon. Figure 191 Mac OS X 10.4: System Preferences 3 When the Ne twork preferences pane opens, select Built-in Ethernet from the ne[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 302 Figure 192 Mac OS X 10.4: Network Preference s 4 For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 193 Mac OS X 10.4: Network Preference s > TCP/IP T ab. 5 For statically assigned settings, do the followi[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 303 •I n t h e Subnet Mask field, type your subnet mask. •I n t h e Router field, type the IP address of your device. Figure 194 Mac OS X 10.4: Network Preference s > Ethernet 6 Click Apply Now and clo se the window . V erifying Settings Check your TCP/IP prope[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 304 Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences . Figure 196 Mac OS X 10.5: Apple Menu 2 In System Prefer ences , click the Network icon. Figure 197 Mac OS X 10.5: Systems Preferences 3 When the Ne twork pref[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 305 Figure 198 Mac OS X 10.5: Network Preference s > Ethernet 4 From the Configure list, select Using DHCP for dynamically assigned settings. 5 For statically assigned settings, do the following: •F r o m t h e Configure list, select Manually . •I n t h e IP Ad[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 306 Figure 199 Mac OS X 10.5: Network Preference s > Ethernet 6 Click Apply and close the window . V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities , and then selecting the appropriate Network interface [...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 307 Linux: Ubuntu 8 (GNOME) This section shows you how to co nfigure your computer ’ s TCP/IP settings in the GNU Object Model Environment (GNOME) us ing the Ubuntu 8 Linux distribution. The procedure, sc reens and file locations may vary depending on your specific [...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 308 3 In the Authenticate window , enter your admin acc ount name and pa ssword then click the Authenticate button. Figure 203 Ubuntu 8: Administrato r Acco unt Authentication 4 In the Network Settings window , select the connection that you want to configure, then cli[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 309 Figure 205 Ubuntu 8: Network Settings > Properties •I n t h e Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. •I n t h e Configuration list, select S tatic IP address if you have a sta tic IP address. Fill in the [...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 310 V erifying Settings Check your TCP/IP properties by clicking System > Administration > Network T ools , and then selecting the appropriate Network device from the Devices tab. The Interface S tatistics column shows data if your co nnection is work ing properl[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 31 1 " Make sure you are logged in as the root administrator . Follow the steps below to configure yo ur computer IP address in the KDE: 1 Click K Menu > Computer > Administrator Settings (Y aST) . Figure 208 openSUSE 10.3: K Menu > Computer Menu 2 When [...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 312 Figure 210 openSUSE 10.3: Y aST Control Center 4 When the Network Settings window opens, click the Overview tab, select the appropriat e connection Name from the list, and then click the Configure button. Figure 21 1 openSUSE 10.3: Network Settin gs 5 When the Netw[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 313 Figure 212 openSUSE 10.3: Network Card Setup 6 Select Dynamic Address (DHCP) if you have a dy namic IP address. Select S tatically assigned IP Address if you have a static IP address. Fill in the IP address , Subnet mask , and Hostname fields. 7 Click Next to save[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 314 Figure 213 openSUSE 10.3: Network Settings 9 Click Finish to save your settings and close the window . V erifying Settings Click the KNetwork Manager icon on the Ta s k b a r to check your TCP/IP properties. From the Options sub-menu, select Show Connecti on Inform[...]

Appendix A Setting Up Your Compu t er’s IP Address P-660HW-Tx v3 User’s Guide 315 Figure 215 openSUSE: Connection S tatus - KNetwork Manager[...]

Appendix A Se tting Up Your Computer’s IP Address P-660HW-Tx v3 User’s Guide 316[...]

P-660HW-Tx v3 User’s Guide 317 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are used here. Screens for other [...]

Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions P-660HW-Tx v3 User’s Guide 318 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have enabled . Figure 217 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Excepti[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-660HW-Tx v3 User’s Guide 319 Figure 218 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed site[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions P-660HW-Tx v3 User’s Guide 320 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed. 1 In Internet Explorer , click T ools ,[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-660HW-Tx v3 User’s Guide 321 Figure 221 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure t[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions P-660HW-Tx v3 User’s Guide 322 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 223 Java (Sun) Mozilla Firefox Mo[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-660HW-Tx v3 User’s Guide 323 Figure 224 Mozilla Firefox: T ools > Options Click Content .to show the screen below . Select the check boxes as shown in the follo wing screen. Figure 225 Mozilla Firefox Content Security[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Pe rmissions P-660HW-Tx v3 User’s Guide 324[...]

P-660HW-Tx v3 User’s Guide 325 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devices a [...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 User’s Guide 326 Figure 226 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of the[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 User’s Guide 327 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of po ssibl[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 User’s Guide 328 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the foll owing example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the compan[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 User’s Guide 329 Figure 228 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192.168.[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 User’s Guide 330 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 133 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BI T VA L U E IP[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 User’s Guide 331 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 25[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 User’s Guide 332 Configuring IP Addresses Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the I[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 User’s Guide 333 IP Address Conflict s Each device on a network must have a unique IP address. Devices with duplicate IP addresses on the same network will not be ab le to access the Internet or ot her resources. The devices may also be unreachable through the network. Conflicting Computer IP A[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 User’s Guide 334 Conflicting Computer and R outer IP Addresses Example More than one device can not use the same IP addr ess. In the following example, the computer and the router ’ s LAN port both use 192.168.1.1 as the IP ad dress. The computer cannot access the Internet. This problem can [...]

P-660HW-Tx v3 User’s Guide 335 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C). An y time two or more [...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 336 Figure 233 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wirele[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 337 Figure 234 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your g eographical area. Y ou may have a choice of channels (for your region) so you should use a channel different from an adjacen[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 338 Figure 235 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages f[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 339 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to signal t[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 340 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity . The following figure shows th e relative effectiveness of th ese wireless security methods available[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 341 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and the network[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 342 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the identity of [...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 343 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature is enabled[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 344 Encryption WP A improves d ata encryption by using T emporal Key Integrity Protoc ol (TKIP), Message Integrity Check (MIC) and IEEE 802.1x. WP A2 also uses TK IP when required for compatibility reasons, but offers stronger encr yption than TKIP with Advanced Encryption Standard (AES) in the [...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 345 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyssey clie[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 346 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create t[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 347 Antenna Overview An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF signals fro m the air . Positioning the antennas properly in[...]

Appendix D Wireless LANs P-660HW-Tx v3 User’s Guide 348 Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point ap plication, position both antennas at the same height and in a direct line of si ght to each othe r to attain the best performance. For omni-directional[...]

P-660HW-Tx v3 User’s Guide 349 A PPENDIX E Command Interpreter The following describes how to use the comman d interpreter . See the included disk or zyxel.com for more detailed in formation on these commands. 1 Use of undocumented co mmands or misconfigurat ion can damage the unit and possibly render it unusable. Command Synt ax • The command [...]

Appendix E Comm and Interpreter P-660HW-Tx v3 User’s Guide 350 Configuring What Y ou W ant the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the Zy XEL Device is to record. 2 Use sys logs category to view a list of the log categories. Figure 238 Displaying Log Cate gorie[...]

Appendix E Co mma nd Interpreter P-660HW-Tx v3 User’s Guide 351 Log Command Example This example shows how to set the ZyXEL Devi ce to record the acc ess logs and alerts and then view the results. Routing Command Use this command to set the ZyXEL Device to route t raffic that doe s not match a NA T rule through a specific interface. An example of[...]

Appendix E Comm and Interpreter P-660HW-Tx v3 User’s Guide 352 ARP Behavior and the ARP ackGratuitous Commands The ZyXEL Device does not accept ARP reply in formation if the ZyXEL Device did not send out a corresponding request. This helps pr event the ZyXEL Device from updating its ARP table with an incorrect IP address to MAC address mapping du[...]

Appendix E Co mma nd Interpreter P-660HW-Tx v3 User’s Guide 353 Figure 241 Backup Gateway Updating the ARP entries could increase the da nger of spoofing attacks. It is only recommended that you turn on ackGratuitous and force update if you need it like in the previous backup g a teway example. T urning on the force updates option is mo re danger[...]

Appendix E Comm and Interpreter P-660HW-Tx v3 User’s Guide 354 Figure 242 Routing Command Examp l e ras> ipsec ipsecEdit 1 ras> ipsec ipsecConfig encryKeyLen 1 ras> ipsec ipsecDisplay ---------- IPSec Setup ---------- Index #= 1 Active= No Multi P ro = No Protocol= 0 Global SW= 0xA Bound IKE 9999 NailUp = No Netbi os = No Name= test Cont[...]

P-660HW-Tx v3 User’s Guide 355 A PPENDIX F NetBIOS Filter Commands The following describes the NetB IOS packet filter commands. See Appendix E on page 349 for information on th e command structure. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a[...]

Appendix F NetBIOS Filter Com mands P-660HW-Tx v3 User’s Guide 356 The filter types and their defa ult settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <ty pe> <on|off> where T able 143 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN and W AN This field displays whether NetBIO[...]

P-660HW-Tx v3 User’s Guide 357 A PPENDIX G Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menu s for your product may differ . Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for ef[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 358 " DO NOT alter or delete any field exc ept parameters in the Input column. This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menu s for your product may differ . Internal SPTGEN File Modification - Impor[...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 359 Figure 246 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your ZyXEL Device. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter " bi[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 360 Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. T able 144 Abbreviations Used in the Example Inte rnal SPTGEN Screens Table ABBREVIA TION MEAN ING FIN Field Identification Number FN Field Name PV A Parameter V alues Allowed INPUT An example of what you [...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 361 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server =[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 362 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol filters Set 4 = 256 30201010 = IP Alias #1 Outgoing protocol filters Set 1 = 256 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filt[...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 363 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <2 56 ~ 2432> = 2432 30500006 = WEP <0(DISABLE) | 1(64-bit WEP) | 2(128-bit WEP)> = 0 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Key3 = 30500[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 364 40000003 = ISP's Name = ChangeMe 40000004 = Encapsulation <2(PPPOE) | 3(RFC 1483)| 4(PPPoA )| 5(ENET ENCAP)> = 2 40000005 = Multiplexing <1(LLC-based) | 2(VC-based) = 1 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name <Str> = any 40000009 = My Login &[...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 365 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 40000033= Nailed-up Connection <0(No) |1(Yes)> = 0 T able 147 Menu 4 Internet Access Setup (continued) T able 148 Menu 12 / Menu 12.1.1 IP Static Route Setup FIN FN PVA INPUT 120101001 = IP Static Route set #1, Name [...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 366 150000007 = SUA Server #3 Active <0(No) | 1(Yes)> = 0 150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000009 = SUA Server #3 Port Start = 0 150000010 = SUA Server #3 Port End = 0 150000011 = SUA Server #3 Local IP address = 0.0.0.0 150000012 = SUA Server #4 [...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 367 150000041 = SUA Server #9 Local IP address = 0.0.0.0 150000042 = SUA Server #10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server #10 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000044 = SUA Server #10 Port Start = 0 150000045 = SUA Server #10 Port End = 0 150000046 = SUA Serve[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 368 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Set 1,Rule 1 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210101014 = IP Filter Set 1,Rule 1 Act Not Match <1(check next)|2(forward)| 3(drop)[...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 369 210201001 = IP Filter Set 2, Rule 1 Type <0(none)|2(TCP/ IP)> = 2 210201002 = IP Filter Set 2, Rule 1 Activ e <0(No)|1(Yes)> = 1 210201003 = IP Filter Set 2, Rule 1 Proto col = 6 210201004 = IP Filter Set 2, Rule 1 Dest IP address = 0.0.0.0 210201005 = IP Filter Set 2, Rule 1[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 370 210202010 = IP Filter Set 2,Rule 2 Src Po rt = 0 210202011 = IP Filter Set 2, Rule 2 Src P ort Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 0 210202013 = IP Filter Set 2, Rule 2 Act M atch <1(check next)|2(forward)|3 (drop)> = 3 210202014 = IP Filter Set 2, Rule[...]

Appendix G I nternal SPTG EN P-660HW-Tx v3 User’s Guide 371 230400003 = Idle Timeout (in second) = 999 230400004 = Authentication Databases <0(Local User Database Only) |1(RADIUS Only) |2(Local,RADIUS) |3(RADIUS,Local)> = 1 230400005 = Key Management Protocol <0(8021x) |1(WPA) |2(WPAPSK)> = 0 230400006 = Dynamic WEP Key Exchange <0[...]

Appendix G Interna l SPTGEN P-660HW-Tx v3 User’s Guide 372 Command Examples The following are example Internal SP TGEN screens associated with the ZyXEL Device’ s command interpreter commands. T able 154 Command Examples FIN FN PV A INPUT /ci command (for annex a): wan adsl openc md FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.413 )[...]

P-660HW-Tx v3 User’s Guide 373 A PPENDIX H Legal Information Copyright Copyright © 2008 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanic[...]

Appendix H Legal Info rmation P-660HW-Tx v3 User’s Guide 374 This device has been tested and foun d to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. Thes e limits are designed to provide reasonable protection against harmful interference in a resi dential installation. This device generates, uses, and c[...]

Appendix H Legal Infor mation P-660HW-Tx v3 User’s Guide 375 Vie wing Certifications 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this pro[...]

Appendix H Legal Info rmation P-660HW-Tx v3 User’s Guide 376[...]

P-660HW-Tx v3 User’s Guide 377 A PPENDIX I Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor . If you cannot contact yo ur vendor , then contac t a ZyXEL office for the region in which you bought the dev ice. Regional of fices are listed below (see also http:// www .zyxel.com/web/[...]

Appendix I C ustomer Support P-660HW-Tx v3 User’s Guide 378 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .zyxel.cn Cost a Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co.cr • T elephone: +506-2017878 • Fax: +506-2 015098 • W eb: www .zyxel.co.cr • Re [...]

Appendix I Customer Support P-660HW-Tx v3 User’s Guide 379 Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909-69 • Fax: +49-2405-6909-99 • W eb: www .zyxel.de • Re g ul a r Ma i l : ZyXEL Deutschl and GmbH., Adenauerstr . 20/A2 D-52146, W uerselen, Germany Hungary • Support E-mail: [...]

Appendix I C ustomer Support P-660HW-Tx v3 User’s Guide 380 Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.com.my • T elephone: +603-8076-9933 • Fax: +603-8076- 9833 • W eb: http://www .zyxel.com.my • Regular Mail: ZyXEL Malaysia Sdn Bhd., 1-02 & 1-03, Jalan Kenari 17F , Bandar Puchong Jaya, 47100 Puch[...]

Appendix I Customer Support P-660HW-Tx v3 User’s Guide 381 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy #03-28, Sin gapore 60[...]

Appendix I C ustomer Support P-660HW-Tx v3 User’s Guide 382 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 55 22 • Fax: +90-212-220-2 526 • W eb: http:www .zyxel.com.tr • Address: Kaptanpasa Mahallesi Piyalep asa Bulvari Ortadogu Plaza N:14/13 K:6 Okmeydani/Sisli Istanbul/T urkey Ukraine • Support E-mail: su ppor[...]

Index P-660HW-Tx v3 User’s Guide 383 Index Numerics 802.1 1 mode 137 A Access Point, see AP action, firewalls 177 activation Any IP 122 bandwidth control 71 , 91 , 210 content filtering 196 dynamic DNS 218 firewalls 177 MAC address filter 138 NA T 151 SIP ALG 151 static route 202 traffic redirect 11 3 UPnP 234 WLAN 130 WPS 145 admin password 46 ,[...]

Index P-660HW-Tx v3 User’s Guide 384 activation 196 keywords 195 schedule 196 trusted comp uters 197 copyright 373 CTS (Clear to Send) 338 customer support 377 customized services, firewalls 182 D date setup 249 default server , NA T 154 Denials of Service, see DoS DHCP 38 , 11 6 setup 122 diagnostic 277 A TM status 278 DSL line 278 disclaimer 37[...]

Index P-660HW-Tx v3 User’s Guide 385 stateful inspection 160 UDP security 167 firmware 271 fragment ation threshold 137 , 338 FTP 33 FTP , remote management 224 full feature, NA T 151 G get community 228 global, NA T 147 guidelines, firewalls 168 H half-open sessions 191 TCP maximum incomplete 191 hidden node 33 7 I IANA 332 IBSS 335 ICMP 11 3 , [...]

Index P-660HW-Tx v3 User’s Guide 386 setup 126 MAC address 124 multicast 11 8 , 121 NetBIOS 122 RIP 11 8 , 121 TCP/IP 121 LAND attacks 162 , 163 LEDs 41 limitations remote management 222 WPS 144 LLC-based, multiplexing 98 local, NA T 147 login 46 logs 253 e-mail 255 example 256 firewalls 181 schedule 256 setup 254 syslog 256 M MAC address 124 , 1[...]

Index P-660HW-Tx v3 User’s Guide 387 IP address 104 MBS 101 , 105 metric 100 MTU 106 multicast 105 multiplexing 98 nailed-up connectio n 99 , 104 PCR 100 , 105 RIP 105 SCR 101 , 105 setup 102 traffic redirect 111 , 11 3 traffic shaping 100 VCI 99 , 104 virtual circuit 104 VPI 99 , 104 zero configuration 102 , 106 WLAN 127 802.1 1 mode 137 activat[...]

Index P-660HW-Tx v3 User’s Guide 388 rules bandwidth control 21 1 firewalls 173 , 179 example 183 S safety warnings 6 schedule content filtering 196 firewalls 181 logs 256 scheduler 206 , 21 0 SCR 101 , 105 security content filtering 195 activation 196 schedule 196 trusted comp uters 197 firewalls 159 , 160 , 169 action 175 , 177 activation 177 a[...]

Index P-660HW-Tx v3 User’s Guide 389 subnet-based bandwidth control 205 subnetting 328 Sustained Cell Rate, see SCR SYN attacks 162 syntax conventions 4 syslog 256 system 247 alerts 253 configuration backup 273 factory defaults 275 restore 274 diagnostic 277 DSL line 278 domain name 247 , 24 8 firmware 271 login 46 logs 253 e-mail 255 example 256[...]

Index P-660HW-Tx v3 User’s Guide 390 encap sulation 97 , 103 ENET ENCAP 97 example 98 PPPoA 98 PPPoE 97 RFC 1483 98 ICMP 11 3 IGMP 105 IP address 99 , 104 MBS 101 , 105 metric 100 MTU 106 multicast 105 multiplexing 98 example 98 nailed-up connectio n 99 , 104 NA T 100 PCR 100 , 105 RIP 105 SCR 101 , 105 setup 102 traffic redirect 111 activation 1[...]

Index P-660HW-Tx v3 User’s Guide 391 X XBOX Live 70 , 90 Z zero configuration 36 , 102 , 106[...]

Index P-660HW-Tx v3 User’s Guide 392[...]