ZyXEL Communications P-660HN-T1H manual

www .zyxel.com www .zyxel.com P-660HN-T1H 802.1 1n Wireless ADSL2+ 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.40 Edition 2, 8/2010 Default Login Details IP Address http://192.168.1.1 Pa ss wo rd 12 34[...]

[...]

About This User's Guide P-660HN-T1H User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL Device using the web configur ator . Y ou should hav e at least a basic knowledge of T CP/IP networking concepts and topology . Related Document ation •Q u i c k S t a r t G [...]

About This User's Guide P-660HN-T1H User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface R eference Guide in ord er to better understand how to use your product[...]

Document Conventions P-660HN-T1H User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help ful tips) [...]

Document Conventions P-660HN-T1H User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the followi n g generic icons. The Z yXEL Device icon is not an exact represent ation of your device. ZyX E L D e v i c e Computer Notebook computer Server Firewall Te l e p h o n e Ro ut e r Sw itch[...]

Safety Warnings P-660HN-T1H User’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There i[...]

Safety Warnings P-660HN-T1H User’s Guide 8[...]

Contents Overview P-660HN-T1H User’s Guide 9 Contents Overview User ’ s Guide ................................................... ..................................................... .......... ......... 19 Introduction ............ ............. ................ ............. ................ ............. ................ ............. .. ..[...]

Contents Overview P-660HN-T1H User’s Guide 10[...]

Table of Contents P-660HN-T1H User’s Guide 11 Table of Contents About This User's Guide ................................ ..................................................... ................... .. 3 Document Conventions.................................................................. ......................................... .5 Safety Warn[...]

Table of Contents P-660HN-T1H User’s Guide 12 Chapter 4 T utorials ................................................................................ ...................................... ............. 37 4.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... [...]

Table of Contents P-660HN-T1H User’s Guide 13 6.4.4 IP Address Assignment .... ... ... ... ... ............. .... ... ... ... .... ... ... ... ... .... ............. ... ... ... ... .... ... 83 6.4.5 Nailed-Up Connection (PPP) .............. ................................................ ............. .......... 84 6.4.6 NA T ........... ... ..[...]

Table of Contents P-660HN-T1H User’s Guide 14 8.6 The WDS Screen ............. ............. ................ ................ ................ ............. ................ ..... ....1 15 8.7 The Scheduling Screen ......... ............. ................ ................. ................ ............. ................ . .1 17 8.8 Wireless LAN [...]

Table of Contents P-660HN-T1H User’s Guide 15 1 1.2 The URL Filter Sc reen .................. ...... ....... ................ ............. ................ ............. .......... .1 5 4 1 1.3 The Application Filter Screen ......... ................ ................ ................ ................. ................ . 1 55 1 1.4 The IP/MAC Fil[...]

Table of Contents P-660HN-T1H User’s Guide 16 16.1.2 What Y ou Need to K now About Remote Management ............ ................ .............. 180 16.2 The WWW Screen .. ................. ................................................................ ............. ........... 181 16.2.1 Configuring the WWW Sc reen .......... ................[...]

Table of Contents P-660HN-T1H User’s Guide 17 21.3 The Configuration Screen . ... .... ... ... ... ... .... ......... ............. ................ ............. ............. ........ 2 22 21.4 The Restart Screen ....... ... ............. ............. ................ ............. ................ ............. ......... .. 225 Chapter 22 Dia[...]

Table of Contents P-660HN-T1H User’s Guide 18[...]

19 P ART I User ’ s Guide[...]

20[...]

P-660HN-T1H User’s Guide 21 C HAPTER 1 Introduction 1.1 Overview The P-660HN- T1H is an ADSL2+ router . By integrating DSL and NA T , you are provided with ease of installation and high-speed, shared Internet access. The P- 660HN- T1H is also a complete security solu tion with a robust firew all and content filtering. Please refer to the followin[...]

Chapter 1 Int ro d uct ion P-660HN-T1H User’s Guide 22 • TR -069. This is an auto-configur ation se rver used to remotely configure your device. 1.3 Good Habit s for Ma naging the ZyXEL Device Do the following things regularly t o make the Z yXEL Device mo re secure and to manage the Z yXEL Device mo re effectiv el y . • Change the password. [...]

Chapter 1 Introduction P-660HN-T1H User’s Guide 23 Y ou can al so configure firewall and filteri ng feature on the Zy XEL Device for secure Internet access. When the firewall is on, al l incoming traffic from the Internet to your network is blocked unless it is ini tia ted from your network. This means that probes from the outside to your networ [...]

Chapter 1 Int ro d uct ion P-660HN-T1H User’s Guide 24 1.5 LEDs (Light s) The following gr aphic displays the l abels of the LEDs. Figure 2 LEDs None of the LEDs are on if the Z y XEL Device is not receiving power . T able 1 LED Descriptions LED COLOR ST A TUS DESCRIPTION (POWER) Green On The Z yXEL Device is receiving power and ready for use. Bl[...]

Chapter 1 Introduction P-660HN-T1H User’s Guide 25 Refer to the Quick Start Guid e for in formation on hardware connections. 1.6 The RESET Button If you forget your password or cannot acces s the web configurator , you will need to use the RE SET button at the back of the device to reload the factory -default configurati on file. This means that [...]

Chapter 1 Int ro d uct ion P-660HN-T1H User’s Guide 26[...]

P-660HN-T1H User’s Guide 27 C HAPTER 2 The Web Configurator 2.1 Overview The web configurator is an HTML -based management interface that allows easy device setup and management via Internet browser . Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The rec ommended screen resolution is 1024 by 768 pix els. In ord[...]

Chapter 2 The Web Con figurator P-660HN-T1H User’s Guide 28 4 A password screen displa ys. T o access the administrative web c onfigurator and manage the Z yXEL Device, t ype the admi n password (1234 by default ) in the password screen and click Login . Click Cancel to revert to the defaul t us er password in the password field . If yo u ha ve c[...]

Chapter 2 The Web Configurator P-660HN-T1H User’s Guide 29 6 Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, se lect Go to Advanced setup and click Apply to displ ay th e Status screen. Figure 5 Replace Facto ry Default Certificate Screen Note: For security reasons, the ZyXEL Device automatically logs you o[...]

Chapter 2 The Web Con figurator P-660HN-T1H User’s Guide 30 As illustr ated above, the main screen is divided into these parts: • A - title bar • B - navigati on panel • C - main window • D - status b a r 2.2.1 T itle Bar The title bar prov ides some icons in the upper right corner . The icons provide the following functions. 2.2.2 Naviga[...]

Chapter 2 The Web Configurator P-660HN-T1H User’s Guide 31 Wireless LAN AP Use this screen to configure the wireless LAN settings and WLAN authentication/security settings. More AP Use this screen to configure multiple BSSs on the Z yXEL Device. WPS Use this screen to configure and view your WPS (Wi-Fi Protected Setup) settings. WPS Station Use t[...]

Chapter 2 The Web Con figurator P-660HN-T1H User’s Guide 32 2.2.3 Main Window The main window displays information and configurati on fields. It is discussed i n the rest of this d ocument. Right after y ou log in, the Status scre en is displayed. See Chapter 3 on page 33 for more inform ation about the Status screen. 2.2.4 S t atus Bar Check the[...]

P-660HN-T1H User’s Guide 33 C HAPTER 3 Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, sys te m resources, and interfaces (LAN and W AN). The Status screen also provides detailed information from DHCP and stat istics f rom bandwidth management, and traffic. 3.2 The S t atus Screen Use this screen to[...]

Chapter 3 Sta tus Screens P-660HN-T1H User’s Guide 34 Each field is desc ribed in the followi ng table. T able 4 Status Screen LABEL DESCRIPTION R efresh Interval Select how often you w ant the Z yXEL Device to update this screen. Apply Click this to update this screen immediately . Device Information Host Name This field displays the ZyXEL Devic[...]

Chapter 3 Status Screens P-660HN-T1H User’s Guide 35 Channel This is the channel number used by the ZyXEL Dev ice now . Security This displays the type of security mo de the Z yXEL Device is using in the wireless LAN. WPS This displays whether WPS is activ ated. Click this to go to the screen where you can configure the settings. Status This disp[...]

Chapter 3 Sta tus Screens P-660HN-T1H User’s Guide 36 Status This field indicates whether or not the Z yXEL Device is using the interface. For the DSL interface, this field displa ys Down (line is down), Up (line is up or connected) if y ou're using Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle (line (ppp[...]

P-660HN-T1H User’s Guide 37 C HAPTER 4 Tutorials 4.1 Overview This chapter shows you how t o use th e Z yXEL Devi ce’ s va rious features. • Setting Up a Secure Wireless Network , see page 37 • Configuring the MAC Address Filter , see page 45 • Configuring Static R oute for R outing to Another Network , see page 47 • Multiple Public and[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 38 4.2.1 Configuring the Wireless Network Settings This example uses the following par ameters to set up a wireless net work. 1 Click Netw ork > Wireless LAN to open the AP screen. Conf igure the screen using the provided parameters (see page 38 ). Click Apply . 2 Click the Advanced Setup butt on an[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 39 Thomas can now use the WPS feature to establish a wireless connec tion between his notebook and the Z yXEL Devi ce (see Section 4.2.2 on page 39 ) . He can also use the notebook’ s wireless client to search for the Z yXEL Device (see Section 4.2.3 on page 44 ). 4.2.2 Using WPS This section shows y[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 40 4 Push and hold the WPS but ton located on the Z yXEL Device’ s rear panel for more than 5 seconds. Alternativ ely , you may lo g into Z yXEL Devi ce’ s web configur ator and click the Push Button in the Network > Wireless LAN > WPS Station screen. Note: Y our ZyXEL Device has a WPS button[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 41 The following figure shows y ou an example of how to set up a wireless network and its security by pressing a button on both Z yXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device SECURITY INFO COMMUNICA TION WITHIN 2 MINUTES Press and hold for 5 seconds[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 42 PIN Configuration When you use the PIN configuration meth od, y ou need to use both the Z yXEL Device’ s web configurator and the wireless client’ s utility . 1 Launch your wireless client’s configuration utility . Go to the WPS settings and select the PIN method to get a PIN number . 2 Enter [...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 43 The following figure shows y ou how to set up a wireless network and it s security on a Z yXEL Device and a wireless client by using PIN method. Example W PS Process: PIN Method Authentication by PIN SECURITY INFO WITHIN 2 MINUTES Wireless Client ZyXEL Device COMMUNICA TION[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 44 4.2.3 Without WPS Use the wireless adapt er’s utilit y installed on the notebook to search for the “Example” SSID . Then enter the “DoNotSt ealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The ZyXEL Device supports IEEE 8 02.1 1b and IEEE 802.1 1g wi[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 45 2 Configure the screen as foll ows. T urn on the wireless network from Mondays to Fridays between 18:00 and 23:30. T urn on the wir ele ss network a l l d ay on Saturdays and Sundays . Click Appl y . 4.3 Configuring the MAC Address Filter Thomas noticed that his daughter Joseph ine spend s too much [...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 46 1 Click Netw ork > LAN > Client List to open the following screen. Look for the MAC address of Josephine’ s computer . 2 Click Netw ork > Wireless LAN to open the AP screen. Click the Edit but ton in the MAC Filter field.[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 47 3 Select Active MAC Filter and Deny Filter Action . Enter the MAC address you found in the Client List screen. Click Ap ply . Josephine will no longer be able to acce ss the Internet through the ZyXEL Device. 4.4 Configuring S t atic Route for Routing to Another Network In order to extend your Intr [...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 48 network), the tr affic is sent to the Z yXEL Device’ s W AN default gatew ay by default. In this case, B will never receive the traffic. Y ou need to specify a static rout ing rule on the Z yXEL Device to specify R as the router in charge of forwarding tr affic to N2 . In this case, the Z yXEL Dev[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 49 T o configure a static route to route traffic from N1 to N2 : 1 Log into the Z yXEL Device’ s W eb Configurator in adv anced mode. 2 Click Advanc ed > Static Route . 3 Click Edit on a new rule in the Static Route sc re en. 4 Configure th e Static Route Se tup screen using the following sett ing[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 50 4.5 Multiple Public and Private IP Address Mappings If you r I SP give s you mo re th an on e sta tic I P a d dre s s for yo u r Inte rne t acce ss, you can map each IP address for a specific servi ce. This tutorial assumes you are given two stati c public IP addresses. Y ou want to map them to two [...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 51 4.5.1 Full Feature NA T + Many-to-Many No Overload Mapping Use this setting if your applications can use r andom public IP addresses and t he applications are initiated f rom the Intranet c omputers ( A and B ). F or example, V oIP application. See Section 4.5.2 on page 52 if it is not. T o configur[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 52 • Global IP addresses: 172.16.1.253 ~ 172.16.1 .254 Then click Apply . 4.5.2 Full Feature NA T + One-to-One Mapping Use this setting if your applications must use fix ed public IP addresses and t he applications can be ini tiated eith er from the Intranet computers ( A and B ) or the Internet comp[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 53 3 Click the Address Mapping tab , click the Edit icon on a new rule. 4 Configure two rules for the one-to-one mappings: • Rule 1 (This maps t he public IP address 172.16.1.2 53 to the priv ate IP address 192.168.1.2) Ty p e : One-to-One Local Start IP: 192.168.1.2 Global Start IP: 172.16.1.25 3 ?[...]

Chapter 4 Tutorials P-660HN-T1H User’s Guide 54 In Figure 8 , three WAN connections are configured over the ADSL line: • The connection with VPI/VCI, 0/33 , is dedicated for Media-On-Demand (MOD) service. • The connection with VPI/VCI, 0/34 , is dedi cated for V oIP service. • The connection with VPI/VCI, 0/35 , is dedi cated for gener al d[...]

55 P ART II T echnical Reference[...]

56[...]

P-660HN-T1H User’s Guide 57 C HAPTER 5 Internet and Wireless Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information giv en to you by yo ur ISP . Note: See the advanced menu chapters for background information on th ese fields. 5.2 Internet Access Wizard Setup 1 After you enter the [...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 58 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 10 Wizard W elcome 3 Y our ZyXEL device attempts to detect y our DSL conne ction an d your connection type. 3a The following screen appears if a connection is no[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 59 3b The following screen displays if a PP PoE or PPP oA connection is detected. Enter your Internet account informatio n (username, password and/or service name) exactly as provided by your ISP . Then click Next and see Section 5.3 on page 66 for wireless connection wizard se[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 60 5.2.1 Manual Configuration 1 If the Z yXEL Device fail s to detect your DSL connection type but the physical line is connected, enter y our Internet access information in the wi zard screen exactly as your service prov ider gave it to you. Leav e the defaults in any fi[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 61 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with rout ing mode. Configure the fields and click Next to continue. See Section 5.3 on page 66 for wireless connection wizard setup Figure 15 Internet Connection wit[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 62 The following table describes t he fields in this screen. Figure 16 Internet Connection with RFC 1483 T able 8 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@ d omain wher[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 63 The following table describes t he fields in this screen. Figure 17 Internet Con nection with ENET ENCAP T able 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is av ailable if you select Routing in the Mode field. T ype your ISP assigned IP addre[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 64 The following table describes t he fields in this screen. Figure 18 Internet Connection with PPPoA T able 10 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an I P Address Automatically A static IP address is a fixed IP that your ISP give s you. A dynamic [...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 65 The following table describes t he fields in this screen. • If the user name and /or password you entered for PPPoE or PPP oA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password setup to go back to the screen where you can mo[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 66 5.3 Wireless Connection W izard Setup After you configure the Internet access in formation, use the following screens to set up your wirel ess LAN. 1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to Step 6 . Figure 21 Connectio[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 67 3 Configure your wireless sett ings in this screen. Cli ck Next . Figure 23 Wirele ss LAN The following table describes t he labels in this screen. Next Click this to continue to the next w izard screen. Exit Click this to close the wizard screen without saving. T able 12 Wi[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 68 Note: The wireless stations and Z yXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wireless communication. 4 This screen varies dependi ng on the security mode you selected in the previous [...]

Chapter 5 Internet and Wireless Setup Wizard P-660HN-T1H User’s Guide 69 5.3.2 Manually Assign a WEP Key Choose Manually assign a WEP key to setup WEP Encryption par ameters. Figure 25 Manually Assign a WEP key The following table describes t he labels in this screen. 5 Click Apply t o save y our wireless LAN settings. Figure 26 Wireless LAN Setu[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HN-T1H User’s Guide 70 6 Use the read-only summary table to check whether what you hav e configured is correct. Click Finish to complete and s ave th e wi zard se tup. Note: No wireless LAN settings display if you chose not to configure wireless LAN settings. Figure 27 Internet Access a nd W[...]

P-660HN-T1H User’s Guide 71 C HAPTER 6 WAN Setup 6.1 Overview This chapter describes how to co nfigure WAN settings from the WAN screens. Use these screens to conf igure your Z yXEL Device for Int ernet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 72 they should also provide a username an d password (and service name) for user authentication. W AN IP Address The WAN IP address is an IP address for the Z yXEL Device, which mak es it accessible from an outside network. It is used by the Z yXEL Device to communicate with other devices in other netw[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 73 6.2 The Internet Access Setup Screen Use this screen to change y our Z yXEL Device’ s W AN settings. Click Network > WAN > Internet Access Setup . The screen diff ers by the WAN t ype and encapsulation you select. Figure 29 Network > W AN >Internet Access Setup (PPPoE) The following ta[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 74 General Mode Select Routing (default) from the drop-down list box if y our ISP gives you one IP address only and you w ant multiple computers to share an Internet account. Select Bridge whe n your ISP prov ides you more than one IP address and you want the connected computers to get individual IP ad[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 75 6.2.1 Advanced Internet Access Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown. Figure 30 Network > W AN > Internet Access Setup: Advanced Setup Connection (PPPoA [...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 76 The following table describes t he labels in this screen. T able 17 Network > W AN > Internet Access Setup: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup This section is not av ailable when you configure the Z yXEL Device to be in bridge mode. RIP Direction RIP (Routing Informatio[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 77 6.3 The More Connections Screen The Z yXEL Device allows y ou to conf igure more than one Internet access connection. T o configure additional Internet ac cess connections click Network > WAN > More Connections . The screen differs by the encapsulation you select . When you use the WAN > In[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 78 6.3.1 More Connections Edit Use this screen to configure a conn ection. Click the ed it icon in the More Connections screen to display the following screen. Figure 32 Network > W AN > More Connections: Edit Modify The first (ISP ) connection is read-only in this screen. Use the WAN > Intern[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 79 The following table descri bes the labels in this screen. T able 19 Network > W AN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activ ate or clear the check box to deactivate this connection . Name Enter a unique, descriptive name of up to 13 ASCII characte[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 80 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 33 Network > W AN > More Connections: Edit: Advanced Setup ENET[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 81 The following table describes t he labels in this screen. 6.4 W AN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 6.4.1 Encap sulation Be sure to use the encapsulation method required by your ISP . The Z yXEL Device sup[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 82 6.4.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protoc ol (ENET ENCAP) is only implemented with the IP network protocol . IP packets are routed betw een the Etherne t interface and the WAN i nterface and then formatted so that they can be understood in a bridged environment. F or instance, it e[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 83 method assumes that each protocol is ca rried over a separate A TM virtual circuit (VC- based multiplexing). Please refer to RFC 1483 for more detailed information. 6.4.2 Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multip[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 84 IP Assignment with RFC 1483 Encap sulation In this case the IP address assignment mus t be static. IP Assignment with E NET ENCAP Encapsulation In this case you can have ei ther a static or dynamic IP . For a stat ic IP you must fill in all the IP Address and Gateway IP Address fields as supplied by[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 85 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traff ic source. It specifies the maximum average r ate at wh ich cells can be sent ov er the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. A[...]

Chapter 6 WAN Setup P-660HN-T1H User’s Guide 86 The VBR -R T (real-time V ariab le Bit Rate) type i s used with bursty connections that require closely controlled dela y and delay v ariation. It also provid es a fixed amount of bandwidth (a PCR is sp ecified) but is onl y avail able when data is being sent. An example of an VBR - RT connection wo[...]

P-660HN-T1H User’s Guide 87 C HAPTER 7 LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communicat ion system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses. 7.1.1[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 88 7.1.2 What Y ou Need T o Know About LAN IP Address IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are also known as hosts. Subnet[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 89 Finding Out More See Section 7.6 on page 95 for technical background information on LANs. 7.1.3 Before Y ou Begin Find out the MAC addresses of your networ k d evices if you intend to add them to the DHCP Client List screen. 7.2 The LAN IP Screen Use this screen to set the Lo cal Area Netw ork IP ad[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 90 The following table describes t he fields in this screen. 7.2.1 The Advanced LAN IP Setup Screen Use this screen to ed it your Z yXEL Device's RIP , multicast and Wi ndows Networking settings. Click t h e Advanced Setup button in the LAN IP screen. The screen appears as shown. Figure 36 Network[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 91 7.3 The DHCP Setup Screen Use this screen to configure the DNS se rv er information that the Z yXEL Device sends to the DHCP client devices on the LAN. Cl ick Network > DHCP Set up to open this screen. Figure 37 Network > LAN > DHCP Setup The following table describes t he labels in this sc[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 92 7.4 The Client List Screen This table allows y ou to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet dev ice has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecim[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 93 7.5 The IP Alias Screen IP alias al lo ws you to partit ion a physica l network into differe nt logical networks over the same Ethernet interface. The Z yXEL Device supports t hree logical LAN interfaces via its single physical Et hernet int erface with the Z yXEL Device itself as the gateway for ea[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 94 The following figure shows a LAN di vided into subnets A, B, and C. Figure 39 Physical Network & Partitioned Log ical Networks 7.5.1 Configuring the LAN IP Alias Screen Use this screen to change yo ur Z yXEL Devi ce’ s IP al ias sett ings. Click Network > LAN > IP Alias to open the follo[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 95 7.6 LAN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers. The RIP Direction field [...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 96 7.6.1 LANs, W ANs and the ZyXEL Device The actual physical connec tion determines whether the Z yXEL Device ports are LAN or W AN ports. There are two sepa ra te IP networks, on e inside the LAN network and t he ot her outside th e WAN network as shown next. Figure 41 LAN and W AN IP Addresses 7.6.2[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 97 • The ISP tells you the DNS serv er addresses, usually in the form of an info r mat io n sh e et, wh en yo u sig n u p. If you r ISP g ives yo u DNS s erve r addresses, enter them in the DNS Server fields in the DHCP Setup screen. • Some ISPs choose to disseminate the DNS serv er addresses using[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 98 address that you entered. Y ou don't need to change the subnet mask computed by the Z yXEL Device unless you are instructed to do otherwise. Private IP Addresses Every machine on the In ternet must ha ve a uni que address. If your ne tworks are isolated from the Internet, for example, on ly bet[...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 99 probably adequate for most networks, unless you have an unusual network topology . Both RIP-2B and RIP-2M sends the routin g data in RIP-2 format; the di fference being that RIP-2B uses subnet broadcas ting while RIP-2M uses multicas ting. 7.6.6 Multicast T raditionally , IP packets are transmitted [...]

Chapter 7 LAN Setup P-660HN-T1H User’s Guide 100[...]

P-660HN-T1H User’s Guide 101 C HAPTER 8 Wireless LAN 8.1 Overview This chapter describes how to perform task s related to setting up and optimizing your wirele ss net w or k, includi ng the foll owi n g . • T urning the wireless connection on or off . • Configuring a name, wireless cha nnel and security for the network. • Using WiFi Protect[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 102 Y ou don’ t necessarily need to use all these screens to se t up your wireless connection. F or example, yo u may just want to set up a network name, a wireless radio channel and security in the AP screen. 8.1.2 What Y ou Need to Know About Wireless Wireless Basics “Wireless” is essentiall[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 103 • What wireless standards do the other wi reless devices in your network support (IEEE 802.11g, for example)? What is the most appropriate standard to use? • What security options do the other wire l ess devices in your network support (WPA -PSK, for example) ? What is the strongest security[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 104 The following table describes t he labels in this screen. 8.2.1 No Security In the Network > Wireless LAN > AP screen, select No Sec urit y from the Security Mode list to allow wireless devices to communicate with the Z yXEL Device without any data encr yption or authen tication. T able 26[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 105 Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless ne tworking device that is within range. Figure 43 Network > Wireless LAN > AP: No Security The following table describes t he labels in this screen. 8.2.2 WEP Encryption Use t[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 106 The following table describes t he wirele ss LAN security labels in this screen. 8.2.3 WP A(2)-PSK Use this screen to configure and enab le WP A(2)-PSK authentication. Cl ick Network > Wireless LAN to di splay the AP screen. Select WPA-PSK or WPA2- PSK from the Security Mode li s t. Figure 45[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 107 8.2.4 WP A(2) Authentication Use this screen to configure and enable WPA or WP A2 authentication. Click the Wireless LAN link under Network to display the AP screen. Sel ect WPA , WPA2 or WPAMixed from the Security Mode list. Figure 46 Network > Wireless LAN > AP: WP A(2) The following tab[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 108 8.2.5 Wireless LAN Advanced Setup Use this screen to configure adva nced wireless settings. Cl ick the Advanced Setup button in th e AP screen. The screen appears as shown. See Section 8.8.2 on page 120 for detailed defini tions of the terms listed in this screen. Figure 47 Network > Wireless[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 109 Output Power Set the output power of the Z yXEL Devi ce. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. Select one of the following: 100% , 75%, 50 % or 25 % . Preamble Select a preamble type from the drop-down list menu. Choices ar[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 0 8.2.6 MAC Filter Use this screen to change y our Z yXEL Device’ s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 48 Network > Wireless LAN > AP: MAC Ad dress Filter The following table describes t he labels in this screen. T able 32 Netw[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 111 8.3 The More AP Screen This screen allows y ou to enable and conf igure multiple Basi c Service Sets (BS Ss) on the Z yXEL Device. Click Network > Wireless LAN > More AP . The following screen displays. Figure 49 Network > Wireless LAN > More AP The following table describes t he lab[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 2 8.3.1 More AP Edit Use this screen to ed it an SSID profile. Click the Edit icon next to an S SID in the More AP screen. The following screen displays. Figure 50 Network > Wireless LAN > More AP: Edit The following table describes t he fields in this screen. Apply Click this to save your [...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 3 8.4 The WPS Screen Use this screen to configure WiFi Prot ected Setup (WPS) on your Z yXEL Device. WPS allows you to q uickly set up a wirele ss network with strong securit y , without having to conf ig ur e security se tt i ng s man ually . Set up each WPS conne ction between two devices. Both[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 4 8.5 The WPS S t ation Screen Use this screen to set up a WPS wire less network using ei ther Push Butt on Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS Station . The following screen displays. Figure 52 Network > Wireless LAN > WPS S t ation PIN Numbe[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 5 The following table describes t he labels in this screen. 8.6 The WDS Screen An AP using the Wireless Distribution S y stem (WDS) can function as a wireless network bridge allowing y ou to wirele ssly connect two wired network segments. The WDS screen allows you to configure the Z yXEL Device t[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 6 Click Network > W ireless LAN > WDS . The following screen displays. Figure 53 Network > Wireless LAN > WDS The following table describes t he labels in this screen. T able 37 Network > Wireless LAN > WDS LABEL DESCRIPTION WDS Security Select the type of th e key us ed to encr[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 7 8.7 The Scheduling Screen Use the wireless LAN scheduling to config ure the da ys you want to enable or disable the wireless LAN. Cl ick Network > Wireless LAN > Scheduling . The following screen displays. Figure 54 Network > Wireless LAN > Scheduling The following table describes t[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 8 8.8 Wireless LAN T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. 8.8.1 Wireless Network Overview Wireless networks c onsist of wireless clients, access points and bridges. • A wireless cl ient is a ra dio connected to a user’ s co[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 11 9 The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point ( AP ) to intera ct with the other devices (such as the printer) or with the Intern et. Y our ZyXEL Device i s the AP . Every wireless network must fol low these basic guidelines.[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 120 8.8.2 Additional Wireless T erms The following table descri bes some wirele ss net work terms and acronyms used in the Zy XEL Device’s W eb Con figurator . 8.8.3 Wireless Security Overview By their nature, rad io communications are si mple to intercept. F or wireless data networks, this means [...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 121 These security standards v ary in effectiv eness. S o m e ca n be broken, such as the old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at all, but it will not k eep a determined attack er out. Other security standards are secure in themselves but can be broken if a[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 122 Y ou can use the MAC address filter to tell t he Z yXEL Device which devices are allowed or not all owed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (S SID, channel , and security). If a device is not allowed to us[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 123 For example, if the wireless networ k has a RADIUS server , you can choose WPA or WPA2 . If users do not log i n to the wireless network, you can choose no encryption, Static WEP , WPA-PSK , or WPA2-PSK . Usually , you should set up the stronges t encryption that ev ery device in the wireless ne[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 124 and communicate with each other . When Intr a-BSS tr affic blocking is enabled, wireless station A and B can stil l access the wired network but cannot communicate with each other . Figure 56 Basic Service set 8.8.6 MBSSID T raditionally , you need to use different APs to configure different Bas[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 125 8.8.7 Wireless Distribution System (WDS) The Z yXEL Device can act as a wireless network bri dge and establish WDS (Wireless Distribution System) links wi th other APs. Y ou need to know the MAC addresses of the APs you w ant to link to. Once the security sett ing s of peer sides match one anoth[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 126 8.8.8.1 Push Button Configu ration WPS Push Bu t ton Conf iguration (PBC) is initiate d by pressin g a button on ea c h WPS-enabled device, and allowing them to connect automatically . Y ou do not need to enter any information. Not every WPS-enabled device has a ph ysical WPS button. Some may ha[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 127 T ake the following steps to set up a WP S connection between an access point or wireless router (referred to here as th e AP) and a c lient device using the PIN method. 1 Ensure WPS is enabled on both devices. 2 Access th e WPS sectio n of the AP’s configur ation interface. See the device’ [...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 128 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 58 Example WPS Process: PIN Method 8.8.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. On[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 129 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 59 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes). The next time you use WPS, a differen[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 130 8.8.8.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured. When WPS is activ ated on both, they perform the handshake. In this example, AP1[...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 131 point. However , you know that Client 2 supports the registrar function, so you use it to perform the WPS handshak e instead. Figure 62 WPS: Example Network S tep 3 8.8.8.5 Limit ations of WPS WPS has some limitations of which you should be a ware. • WPS works in Infrastructure networks on ly [...]

Chapter 8 Wireless LAN P-660HN-T1H User’s Guide 132 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network. This is because the registrar has no wa y of id entifying the “corre ct” e[...]

P-660HN-T1H User’s Guide 133 C HAPTER 9 Network Address Translation (NAT) 9.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device. NA T (Network Address T ranslation - NA T , RFC 1631) is the tr anslation of the IP address of a host in a packet, for example, the source addr ess of an outgoing packet, used within one network [...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 134 NA T In the simplest form, NA T changes the source IP address in a packet received from a subscriber (the inside l ocal address) to another (the inside global address) before forwarding t he packet to the WA N side. When the response comes back, NA T tr anslates the dest[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 135 9.2 The NA T General Setup Screen Use this screen to activ ate NA T . Click Network > NAT to open the following screen. Note: Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded throu gh the ZyXEL Device. F[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 136 9.3 The Port Forwarding Screen Note: This screen is avail able only when you select SUA only in the NA T > General screen. Use this screen to forw ard incoming servic e requests to the server(s) on your local network. Y ou may enter a single port number or a r ange of[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 137 Configuring Servers Behind Port Forw arding (Example) Let's say you want to assi gn ports 21-25 to o n e F T P , T e l ne t a n d S MT P s e rv e r ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.168.1.35 to a t[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 138 The following table describes t he fields in this screen. T able 42 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to the servers for specif ied services, NA T supports a default server . A default server receiv es[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 139 9.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule . Click t he rule ’ s edit icon in t he Port Forwarding screen to display the screen shown next. Figure 66 Network > NA T > Port Forwarding: Edit The following table describes [...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 140 9.4 The Address Mapping Screen Note: The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify . When a rule matc he[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 141 The following table describes t he fields in this screen. T able 44 Network > NA T > Address Mapping LABEL DESCRIPTION # This is the rule index number . Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for Server port mappi[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 142 9.4.1 The Address Mapping Rule Edit Screen Use this screen to ed it an address mapping rul e. Click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. Figure 68 Network > NA T > Address Mapping: Edit The following table describe[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 143 9.5 The ALG Screen Some NA T routers ma y include a SIP Application Lay er Gateway (AL G). A SIP ALG allows SIP calls to pass through NA T by examining and translating IP addres ses embedded in the data stream. When the Z yXEL Device registers with the SIP register server ,[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 144 9.6 NA T T echnical Reference This chapter contains more information regarding NA T . 9.6.1 NA T Definitions Inside/outside denotes where a host is lo cated relative to the Z yXEL Device, for example, the computers of y our subscrib ers are the inside ho sts, while the w[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 145 outside world. If you do not define an y serv ers (for Many -t o-One and Many-to- Many Overload mapping – see T able 48 on page 147 ), NA T offers the additional benefit of firewall protection. With no se rv ers defined, your Z yXEL Device filt ers out all incoming inquir[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 146 9.6.4 NA T Application The following figure illustr ates a possible NA T application, where three inside LANs ( l o g i c a l L A N s u s i n g I P a l i a s ) b e h i n d t h e ZyXEL Device can communicat e with three distinct W AN networks. Figure 71 NA T Application W[...]

Chapter 9 Network Address Tran slation (NAT) P-660HN-T1H User’s Guide 147 P ort numbers do NO T change for One-to- One and Many-to-Many No Overload NA T mapping types. The following table summarizes these types. T able 48 NA T Mapping T ypes TYPE IP MAPPING One-to-On e ILA1  IGA1 Many -to-On e (SUA/P A T) ILA1  IGA1 ILA2  IGA1 ?[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HN-T1H User’s Guide 148[...]

P-660HN-T1H User’s Guide 149 C HAPTER 10 Firewall 10.1 Overview This chapter shows you how t o enable the Z yXEL Devi ce firewall. Use the firewall to protect your Z yXEL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: • allows tr affic that originates from your LAN computers to go t[...]

Chapter 10 Firewall P-660HN-T1H User’s Guide 150 device or network so users no longer have access to network resources. The Z yXEL Device is pre-configured to automa tically detect and thw art all known DoS attacks. DDoS A DDoS attack is one in which mul tiple compromised systems attack a singl e target, thereb y cau sing d eni al of s erv ice fo[...]

Chapter 10 Firewall P-660HN-T1H User’s Guide 151 10.2 The Firewall Screen Use this screen to enable f irewall and/or SPI. Click Advanced Setup > Firewall to display the following screen. Figure 72 Advanced Setup > Fire wall The following table describes t he labels in this screen. Enabling SPI blocks all traffic initiated from the W AN side[...]

Chapter 10 Firewall P-660HN-T1H User’s Guide 152[...]

P-660HN-T1H User’s Guide 153 C HAPTER 11 Filters 1 1.1 Overview This chapter introduces three types of filters supported by the Z yXEL Device. Y ou can configure rules to restrict tr affic by IP addresses, MAC addresses, applicati on types and/or URLs. 1 1.1.1 What Y ou Can Do in the Filter Screens •U s e t h e URL Filter screen ( Section 11.2 [...]

Chapter 11 Filters P-660HN-T1H User’s Guide 154 1 1.2 The URL Filter Screen Use this screen to block web sites by URL. Click Security > Filt er > URL Filter . The screen appears as shown. Figure 73 Security > Filter > URL F ilter The following table describes t he labels in this screen. T able 50 Access Management > Filter (URL) LA[...]

Chapter 11 Filters P-660HN-T1H User’s Guide 155 1 1.3 The Application Filter Screen Use this screen to allow or d eny traf fic for certain types of applications. The application filter provides a con v enie nt way to manage the use of v arious applications on the network. Click Security > Filter > Application Filter . The screen appears as [...]

Chapter 11 Filters P-660HN-T1H User’s Guide 156 1 1.4 The IP/MAC Filter Screen Use this screen to create and apply IP/MAC filters. Click Security > Filter > IP/ MAC Filter . The screen appears as shown. Figure 75 Security > Filter > IP/MAC Filter The following table describes t he labels in this screen. T able 52 Access Management >[...]

Chapter 11 Filters P-660HN-T1H User’s Guide 157 Rul e T y pe Select IP or MAC type to configure the rule. Use the IP Filter to block traffic by IP addresses. Use the MAC Filter to block traffic by MAC address. Active Use this field to enable or disable the rule. Source IP Address Enter the source IP address of the packets you wish to filter . Thi[...]

Chapter 11 Filters P-660HN-T1H User’s Guide 158 DELETE Click this to remove the filter rule. CANCEL Click this to restore your previously saved settings. T able 52 Access Management > Filter (IP/MAC) (continued) LABEL DESCRIPTION[...]

P-660HN-T1H User’s Guide 159 C HAPTER 12 Static Route 12.1 Overview The Z yXEL Device usually uses the default gatewa y to route outbound tr affic from computers on the LAN to the Internet. T o have the Z yXEL Device send data to devices not reachable through the de fault g ateway , use static routes. For example, the next figure shows a computer[...]

Chapter 12 Stat ic Route P-660HN-T1H User’s Guide 160 12.1.1 What Y ou Can Do in the St atic Route Screens Use the Static Route screens ( Section 12.2 on page 160 ) to vi ew and conf igure IP static routes on the Z yXEL Device. 12.2 The S t atic Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open [...]

Chapter 12 Static Route P-660HN-T1H User’s Guide 161 12.2.1 S t atic Route Edit Use this screen to configure the required information for a static route. Select a static route index numb er and click Edit . The screen shown next app ears. Figure 78 Advanced > S tatic Route: Edit The following table describes t he labels in this screen. Modify [...]

Chapter 12 Stat ic Route P-660HN-T1H User’s Guide 162[...]

P-660HN-T1H User’s Guide 163 C HAPTER 13 802.1Q/1P 13.1 Overview This chapter describes how to c onfigure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partit ioned into multiple logi cal networks. A VLAN gr oup can be treated as an individual device. Each group can have it s own rules about where and[...]

Chapter 13 802.1Q/1P P-660HN-T1H User’s Guide 164 IEEE 802.1Q T agged VLAN T agged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a fr ame across bri dges - they are not confined to the device on which they were c reated. The VLA N ID associates a fr ame with a speci fic VLAN and provides the inf ormation[...]

Chapter 13 802.1Q/1P P-660HN-T1H User’s Guide 165 Note: If the W AN interface in the VLAN group is not the default router , you need to create a static route to communicate with the W AN. Figure 80 Advanced > 802.1Q/1P > Group Sett ing The following table describes t he labels in this screen. T able 55 Advanced > 802.1Q/1P > Group Set[...]

Chapter 13 802.1Q/1P P-660HN-T1H User’s Guide 166 13.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure th e setti ngs for each VLAN group . In the 802.1Q/1P screen, click the Edit button from the Modify filed to displ ay the following screen. Figure 81 Advanced > 802.1Q/1P > Group Sett ing > Edit The following table descri[...]

Chapter 13 802.1Q/1P P-660HN-T1H User’s Guide 167 13.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVI D for each port . Click Advanced > 802.1Q/ 1P > Port Setting to displa y the following screen. Figure 82 Advanced > 802.1Q/1P > Port Sett ing Tx T ag Select Tx Tagging if you w ant the port to tag all outgoing [...]

Chapter 13 802.1Q/1P P-660HN-T1H User’s Guide 168 The following table describes t he labels in this screen. T able 57 Advanced > 802.1Q/1P > Port Setting LABEL DESCRIPTION P orts This field dis plays the type s of po rts av ailable to join the VLAN group. 802.1Q PVID Assign a VLAN ID for the port. The valid VID range is between 1 and 4094. [...]

P-660HN-T1H User’s Guide 169 C HAPTER 14 Quality of Service (QoS) 14.1 Overview Use the QoS screen to set up y our Z yXEL Device to use QoS for t raffic management. Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking meth ods used to control bandwidth. QoS allows the Z yXEL Device[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 170 these two classes are assigned priorit y queue based on the internal QoS mapping table on the ZyXEL Device. Figure 83 QoS Example 14.1.1 What Y ou Can Do in the QoS Screens •U s e t h e QoS screen ( Section 14.2 on page 171 ) to configure QoS settings on the ZyXEL Device. •U s e[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 171 14.2 The QoS Screen Use this screen to enable or disable QoS and have the Z yXEL Device assign priority levels to tr affic according to the port r ange, IEEE 802.1p priority lev el and/ or IP precedence. Click Advanc ed Setup > QoS to open the screen as shown next. Figure 84 Adva[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 172 The following table describes t he labels in this screen. T able 58 Advanced Setup > QoS LABEL DESCRIPTION Quality of Service QoS Use this field to turn on QoS to impro ve your network performance. Y ou can give priority to traffic that the Zy XEL Device forwards out through the [...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 173 14.2.1 The QoS Settings Summary Screen Use this screen to disp lay a summary of rules and actions configured for the Zy X E L D e v i c e . In t h e Advanced > Qo S screen, click the QoS Settings Summary button to open the f ollowing screen. Figure 85 Advanced Setup > Qo S >[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 174 The following table describes t he labels in this screen. 14.3 QoS T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 14.3.1 IEEE 802.1p IEEE 802.1p specifies the user priority fiel d and defines up to eigh[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 175 14.3.2 IP Precedence Similar to IEEE 802.1p prioriti zation at lay er-2, you can us e IP precedence to prioritize pack ets in a layer -3 network. IP precedence uses thr ee bits of the eight- bit T oS (T ype of Service) field in the IP header . There are eight classes of services (ra[...]

Chapter 14 Quality of Service (QoS) P-660HN-T1H User’s Guide 176 3 3 1 001110 001100 001010 001000 250~1100 4 4 2 010110 010100 010010 010000 5 5 3 011110 011100 011010 011000 <250 6 6 4 100110 100100 100010 100000 5 101110 101000 7 7 6 110000 111000 7 T able 61 Internal Layer2 and Layer3 QoS Mapping PRIORITY QUEUE LAYER 2 LAYER 3 IEEE 802.1P [...]

P-660HN-T1H User’s Guide 177 C HAPTER 15 Dynamic DNS Setup 15.1 Overview Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name (for instance [...]

Chapter 15 Dy namic DNS Se tup P-660HN-T1H User’s Guide 178 15.2 The Dynamic DNS Screen Use this screen to change your Z yXEL Device’ s DDNS. Click Advanced > Dynamic DNS . The screen appears as shown. Figure 86 Advanced > Dynamic DNS The following table describes t he fields in this screen. T able 62 Advanced > Dynamic DNS LABEL DESCR[...]

P-660HN-T1H User’s Guide 179 C HAPTER 16 Remote Management 16.1 Overview Re mote management allows you to determi ne which services/protocols can acces s which Z yXEL Device interface (if any) from which computers. The following figure shows remote manage ment of the Z yXEL Device c oming in from the WAN. Figure 87 Remote Managemen t From the W A[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 180 when another remote management session of higher priori ty starts. The priori ties for the different types of remote ma nagement sess ions are as follows. 1 Te l n e t 2 HT TP 16.1.1 What Y ou Can Do in the Remote Management Screens •U s e t h e WWW screen ( Section 16.2 on page 181 ) to[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 181 Remote Management and NA T When NA T is enabled: • Use the Z yXEL Device’ s WAN IP addr ess when co nfiguring fr om the W AN. • Use the Z yXEL Device’ s LAN IP ad dress when configuring from the LAN. System Timeout There is a default system management idle timeout of five minutes ([...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 182 The following table describes t he labels in this screen. 16.3 The T elnet Screen Y ou can use T elnet to access the Z yXEL Device’ s command line interface. Specify which interfaces allow T elnet access an d from which IP address the access can come. Click Advanced > Remote MGMT >[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 183 The following table describes t he labels in this screen. 16.4 The FTP Screen Y ou can use F TP (File T ransfer Protocol) to upload and download the Z yXEL Device’s firmware and config uration files. Please see the User ’s Guide chapter on firmware and configur ation file maintenance f[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 184 The following table describes t he labels in this screen. 16.5 The SNMP Screen Simple Network Manageme nt Protocol is a protocol used for ex changing management information between network devices. Y our Z yXEL Device supports SNMP agent functionality , which allows a manager station to ma[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 185 An SNMP managed network consists of two main types of component: agents and a manager . An agent is a management software module that resides in a ma naged de vice (the Z yXEL Device). An agent translates the local management information from the managed device into a form compatible with [...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 186 16.6 The DNS Screen Use DNS (Domain Name S ystem) to map a domain name to i ts corresponding IP address and vice v ersa. R efer to Chapter 7 on page 87 for background informat ion. Use this screen to set f rom which IP ad dress the Z yXEL Device will accept DNS queries and on which interfa[...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 187 16.7 The ICMP Screen T o change your Z yXEL Device’ s security settings, clic k Advanced > Remote MGMT > ICMP . The screen appears as shown. If an outside user attem pts to p rob e an unsupported port on your Z yXEL Device, an ICMP response pack et is automatically returned. Thi s [...]

Chapter 16 Remote Management P-660HN-T1H User’s Guide 188[...]

P-660HN-T1H User’s Guide 189 C HAPTER 17 Universal Plug-and-Play (UPnP) 17.1 Overview Universal Plug and Play (UPnP) is a d ist ributed, open networking standard that uses TCP/IP for simple peer -to-peer ne twork connec t iv ity be tween dev ice s. A UPnP device can dynamically join a network, ob tain an IP address, convey i ts capabilities and l[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 190 Windows Messenger is an example of an application that supports NA T tr aversal and UPnP . See the NA T chapter fo r more infor mation on NA T . Cautions with UPnP The automated nature of NA T trav ersal applications in establishing their own services and opening firewall port[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 191 17.2 The UPnP Screen Use the following screen to configure the UPnP settings on your Z yXEL Device. Click Advanc ed > UPnP to display the screen shown next. See Section 17.1 on page 189 for more information. Figure 95 Advanced > UPnP > General The following table desc[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 192 17.3 Inst alling UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP . Inst alling UPnP in Windows Me Fol low the steps below to install the UPnP in Windows Me. 1 Click Start and Control Panel . Double-click Add/Remove Programs . 2 Click[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 193 3 In the Communications window , select the Universal Plug and Play check box in the Compone nts selection bo x. Add/Remove Programs: Wi ndows Setup: Communicatio n: Component s 4 Click OK to go back to the Add/Remove Programs Properties window and click Next . 5 Restart the c[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 194 3 In the Network Connections window , click Adv anced in the m ain me nu and select Optional Networking Components … . Network Co nnection s 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection bo x and cl[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 195 5 In the Networking Services window , select the Universal Plug and Play check box. Networki ng Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next . 17.4 Using UPnP in Windows XP Example This section shows y ou how to use t[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 196 2 Right- click the icon and select Properties . Network Co nnection s 3 In the Internet Connection Properties window , click Settings to see the por t mappings there were automatically created. Internet Connec tion Properties[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 197 4 Y ou may edit or delete the port mappings or cl ick Add to manually add port mappings. Internet Connec tion Properties : Advanced Settin gs Internet Connec tion Properties : Advanced Settin gs: Add 5 When the UPnP-enabled device is discon nected from your computer , all port[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 198 6 Select Show icon in notification area when connected option and click OK . An icon displays in the system tr ay . System Tray Icon 7 Double-click on the icon to display y o ur current In te rnet connection status. Internet Conn ection Status Web Configurator Eas y Access Wit[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 199 3 Select My Network Places under Other Places . Network Co nnection s 4 An icon with the description f or each UPnP-enabled device displays under Local Network .[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-660HN-T1H User’s Guide 200 5 Right- click on the icon for your Z yXEL Device and select Invoke . The web configurator login screen displays. Network Co nnection s: My Netw ork Plac es 6 Right- click on t he icon for y our Z yXEL Device and select Properties . A properties window displays with basic info[...]

P-660HN-T1H User’s Guide 201 C HAPTER 18 CWMP 18.1 Overview The Z yXEL Device supports TR -069 Amendment 1 (CPE WAN Manag ement Protocol R elease 2.0) and TR -069 Amendment 2 (CPE WAN Management Protocol v1.1, R e lease 3.0). TR -069 is a protocol that defines how your Z yXEL Device ( ZD ) can be managed via a management server ( MS ) such as Z y[...]

Chapter 18 CW MP P-660HN-T1H User’s Guide 202 18.2 The CWMP Setup Screen Use this screen to configure your ZyXEL Devi ce to b e managed b y a management server . Click Adv anced > CWMP to displ ay th e fo llowing scre en. Figure 97 Advanced > CWMP The following table describes t he fields in this screen. T able 70 Advanced > CWMP LINK DE[...]

Chapter 18 CWMP P-660HN-T1H User’s Guide 203 P assword The password is used to authenticate the Z yXEL Device when making a connection to the management serv er . This password on the management server and the Z yXEL Device must be the same. T ype a password of up to 255 printable characters found on an English-language keyboard. Connection Req u[...]

Chapter 18 CW MP P-660HN-T1H User’s Guide 204[...]

P-660HN-T1H User’s Guide 205 C HAPTER 19 System Settings 19.1 Overview This chapter shows you how to configure system related settings, suc h as system time, password, name, the domain name an d the inactivity timeout interv al. 19.1.1 What Y ou Can Do in the System Settings Screens •U s e t h e General screen ( Section 19.2 on page 205 ) to co[...]

Chapter 19 System Settings P-660HN-T1H User’s Guide 206 The following table describes t he labels in this screen. 19.3 The T ime and Date Screen Use this screen to configure the Z yXEL De vi ce’ s time based on y our local time zone. T o change your Z yXEL Device’ s time and date, click Mainten ance > System > Time and Date . The screen[...]

Chapter 19 System Settings P-660HN-T1H User’s Guide 207 The following table describes t he fields in this screen. T able 72 Maintenance > System > T ime and Date LABEL DESCRIPTION Current Time and Date Current Time This f i eld dis plays the time of your ZyXEL Device. Each time you reload this page, the Z yXEL Device synchronizes the time w[...]

Chapter 19 System Settings P-660HN-T1H User’s Guide 208 Start Date Configure the day and time when Day light Saving Time starts if y ou selected Enable Daylight Saving . The o'clock field uses th e 24 hour format. H er e are a coup l e o f exa m p l es: Daylight Saving Time starts in most parts of the United States on the second Sunday of Ma[...]

P-660HN-T1H User’s Guide 209 C HAPTER 20 Logs 20.1 Overview This chapter contains information about viewing the Z yXEL Device’ s logs. The web configur ator allows you to choose which types of events and/ or alerts to have the Z yXEL Device log and then displa y the logs. 20.1.1 What Y ou Need T o Know About Logs Alert s An alert is a message t[...]

Chapter 20 L ogs P-660HN-T1H User’s Guide 210 Alerts are e-mailed as soon as they happen. L og s m a y be e - m a il e d a s so o n a s th e log is full. Selecting man y alert and/ or log categories (especiall y Access Control ) may result in many e-mails being sent. Figure 100 Maintenance > System Logs The following table describes t he field[...]

Chapter 20 Logs P-660HN-T1H User’s Guide 21 1 20.3 Log Descriptions This section provides descripti ons of example log messages. T able 74 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on information from the time server . Time calibration failed The router failed to get info[...]

Chapter 20 L ogs P-660HN-T1H User’s Guide 212 Successful HTTPS login Someone has logged on to the router's web configurator interface using HT TPS protocol. HTTPS login failed Someone has failed to log on to the router' s web configurator interface using HT TPS protocol. T able 75 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the[...]

Chapter 20 Logs P-660HN-T1H User’s Guide 213 T able 77 TCP Reset Logs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a T CP reset packet when a host was under a SYN flood attack (the TCP incomplete count is per destination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a T CP reset packet when the num[...]

Chapter 20 L ogs P-660HN-T1H User’s Guide 214 For type and code details, see T able 87 on page 217 . T able 79 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting. Firewall[...]

Chapter 20 Logs P-660HN-T1H User’s Guide 215 For type and code details, see T able 87 on page 217 . ppp:LCP Closing The PPP connection’ s Link Control Protocol stage is closing. ppp:IPCP Closing The PPP connection’s Internet Protocol Control Protocol stage is closing. T able 82 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP[...]

Chapter 20 L ogs P-660HN-T1H User’s Guide 216 NetBIOS TCP The firewall detected a T CP NetBIOS attack. ip spoofing - no routing entry [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall classified a packet with no source rou ting entry as an IP spoofing attack. ip spoofing - no routing entry ICMP (type:%d, code:%d) The firewall classified an ICM[...]

Chapter 20 Logs P-660HN-T1H User’s Guide 217 (L to L/Z yXEL Device) LAN to LAN/ Zy X E L D e v i c e ACL set for packets trav eling from the LAN to the LAN or the Z yXEL Device. (W to W/ZyXEL Device) WAN to W AN/ Zy X E L D e v i c e ACL set for packets tr aveling from the WAN to the WA N or t h e Zy X E L D e v i c e . T able 87 ICMP Notes TYPE [...]

Chapter 20 L ogs P-660HN-T1H User’s Guide 218 The following table shows RFC -2408 ISAKMP payload t ypes that the log displays. Please refer to RFC 2408 for detailed information on each type. 0 Information request message 16 Information R eply 0 Information reply message T able 88 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mo[...]

P-660HN-T1H User’s Guide 219 C HAPTER 21 Tools 21.1 Overview This chapter explains how to upload new firmware, manage confi guration files and restart your Z y XEL Device. Use the instructions in this chapter to ch ange the device’ s configuration file or upgrade i ts firmware. After you configure y our device, you can backup the configu ration[...]

Chapter 21 To ols P-660HN-T1H User’s Guide 220 Do NOT turn off the ZyXEL Devi ce while firmware upload is in progress! Figure 101 Maintenance > T ools > Firmware The following table describes t he labels in this screen. After you see the Firmware Upload in Progress screen, wait two minutes before logging into the Z yXEL Devi ce again. Figur[...]

Chapter 21 Tools P-660HN-T1H User’s Guide 221 The Z yXEL Device automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see the following icon on your desktop. Figure 103 Network T emporarily Disconnected After two minutes, log in again and ch eck your new firmware version in the Status scr[...]

Chapter 21 To ols P-660HN-T1H User’s Guide 222 21.3 The Configuration Screen Click Maintenance > Tools > Configurat ion . Information related to factory defaults, backup configuration, and restor ing configuration appears in this screen, as shown next. Figure 105 Maintenance > T ools > Configuration Backup Configuration Backup Configu[...]

Chapter 21 Tools P-660HN-T1H User’s Guide 223 Restore Configuration Re store Configur ation allows yo u to upload a new or previously saved configur ation file from your computer to y our Z yXEL Device. Do not turn off the ZyXEL Device wh ile configuration file upload is in progress. After you see a “restore configuration successf ul” screen,[...]

Chapter 21 To ols P-660HN-T1H User’s Guide 224 If the upload was not successful, the following screen will appear . Click Return to go back to the Configuration screen. Figure 108 Configuratio n Upload E rror Reset to Factory Default s Click the Reset button to clear all user-enter ed configur ation information and return the Z yXEL Device to its[...]

Chapter 21 Tools P-660HN-T1H User’s Guide 225 21.4 The Rest art Screen System restart allows you to reboot th e Z yXEL Devi ce r emote ly without turning the power off . Y ou may need to do this i f the Z yXEL Device hangs, for example. Click Maintenance > Too ls > Restart . Click Restart to have the ZyXEL Device reboot. This does not affec[...]

Chapter 21 To ols P-660HN-T1H User’s Guide 226[...]

P-660HN-T1H User’s Guide 227 C HAPTER 22 Diagnostic 22.1 Overview These read-only screens display information to help y ou identify problems with the Zy X E L D e v i c e . 22.1.1 What Y ou Can Do in the Diagnostic Screens •U s e t h e General screen ( Section 22.2 on page 227 ) to ping an IP address. •U s e t h e DSL Line screen ( Section 22[...]

Chapter 22 Diagnostic P-660HN-T1H User’s Guide 228 The following table describes t he fields in this screen. 22.3 The DSL Line Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 1 13 Maintenance > Diagnostic > DSL Line T able 9[...]

Chapter 22 Diagnostic P-660HN-T1H User’s Guide 229 The following table describes t he fields in this screen. T able 93 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION AT M S t a t u s Click this to view your DSL connection’ s Asynchronous T ransfer Mode (A TM) statistics. A TM is a networking technology that provides high- speed dat[...]

Chapter 22 Diagnostic P-660HN-T1H User’s Guide 230 DSL Line Status Click this to view statistics about the DSL connections. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the Z yXEL Device from the ISP). It is measured in decibels. The higher the number the more signal and less noise th[...]

P-660HN-T1H User’s Guide 231 C HAPTER 23 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Z yXEL Device Access and Login • Internet Access 23.1 Power , Hardware Connections, and LEDs T[...]

Chapter 23 Tro u blesh oo tin g P-660HN-T1H User’s Guide 232 2 Check the hardware connections. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the Zy XEL Device off and on. 5 If the problem continues, contac t the vendor . 23.2 ZyXEL Device Access and Login I forgot the IP address for the ZyXEL Device.[...]

Chapter 23 Troubleshooting P-660HN-T1H User’s Guide 233 • If you changed t he IP address ( Section 7.2 on page 89 ), use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubleshooti ng suggestions for I forgot the IP address for the Z yXEL Device. 2 Check the hardware connections, and ma k e sure the LEDs[...]

Chapter 23 Tro u blesh oo tin g P-660HN-T1H User’s Guide 234 I cannot use FTP to upload / download the configuration fi le. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configu rator . Ignore the suggestions about your browser . 23.3 Internet Access I cannot [...]

Chapter 23 Troubleshooting P-660HN-T1H User’s Guide 235 The Internet conn ection is slow or intermittent. 1 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.5 on page 24 . If the Z y XEL Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer -to-pe[...]

Chapter 23 Tro u blesh oo tin g P-660HN-T1H User’s Guide 236[...]

P-660HN-T1H User’s Guide 237 C HAPTER 24 Product Specifications The following tables summarize the Z yXEL Device’ s hardware and firm ware features. 24.1 Hardware S pecifications 24.2 Firmware S pecifications T able 94 Hardware Specifications Dimensions 210 x 142 x 57 mm We i g h t 270g P ower Specification 12VDC 1A Built-in S witch Four auto-n[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 238 Default Admin P assword 1234 DHCP Server IP P ool 192.168.1.32 to 192.168.1.6 4 Static DHCP Addresses 10 URL Filtering URL web page blocking Static Routes 16 Device Management U se the web configurator to easily configure the rich range of features on the ZyXEL Device. Wireless Functi[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 239 Firewall Y our device has a stateful inspe ction firewall with DoS (Denial of Service) protection. By default, when the firew all is activated, all incoming traffic from the W AN to the LAN is block ed unless it is initiated from the LAN. The fire wall supports TCP/UDP inspection, DoS[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 240 ADSL Standards Support Multi-Mode standard (ANSI T1. 413, Issue 2; G.dmt (G.992.1); G.lite (G992.2)) EOC specified in ITU- T G.992.1 ADSL2 G.dmt.bis (G.992.3) ADSL2 G.lite.bis (G.992.4) ADSL2+ (G.992.5) R each Extended ADSL (RE ADSL) SRA (Seamless R ate Adaptation) Auto-negotiating ra[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 241 24.3 Wireless Features Other Protocol Support SIP pass-through DNS Proxy Dynamic DNS (www .dyndns.org) IP Alias DHCP client/server/relay RIP I/ RIP II supported Support 16 IP Static routes by Gateway IGMP v1 and v2 IP P olicy Routing UPnP support T ransparent bridging, VLAN-tagging pa[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 242 The following list, which is not exhaust ive , illust rates the standards supported in the ZyXEL Device. WMM QoS WMM (Wi-Fi MultiMedia) QoS (Quality of Service) allows you to prioritize wireless traffic according to the delivery requirements of individual service s. Other Wireless F e[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 243 RFC 2516 A Method for T ransmitting PPP Over Ethernet (PPPoE) RFC 2684 Multiprotocol Encapsulation over A TM Adaptation Layer 5. RFC 2766 Network Address T ranslation - Protocol IEEE 802.11 Also known by the br and Wi -Fi, denotes a set of Wireless LAN/ WLAN standards developed by wor[...]

Chapter 24 Product Specifications P-660HN-T1H User’s Guide 244 24.4 Power Adaptor S pecifications T able 98 ZyXEL Device Series Power Adaptor Specifications NORTH AM ERI CAN PLUG ST ANDARDS AC Power Adapter Model 12V 1A SOCB P A Input Power AC 1 20V olts/60Hz Output Power DC 12Volts/1.0A P ower Consumption 7.7 W att max Safety Standards ANS I/UL [...]

P-660HN-T1H User’s Guide 245 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must ha ve a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vis ta, Maci ntosh OS 7 and l ater operating systems and all versions of UNIX/LINUX include the software components you need to install and use T C P/IP [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 246 Windows 95/98/Me Click Start , Settings , Control Panel and double-click the Network icon to open the Network window . Figure 1 14 WIndows 95/98/Me: Network: Configurat ion Inst alling Component s The Network window Configuration tab displays a list of installed compo[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 247 3 Select Microsoft from the list of manufacturers . 4 Select TCP/IP from the list of network protocols and then click OK . If you need Client for Microsoft Networks: 1 Click Add . 2 Select Client and then click Add . 3 Select Microsoft from the list of manuf acturers.[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 248 3 Click the DNS Configuration t ab. • If you d o not know your DN S information, select Disable D NS . • If you know y our DNS information, select Enable DNS and type the information in the fields below (y ou may not need to fill them all in). Figure 1 16 Windows [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 249 Windows 2000/NT/XP The following example figures use the defa ult Windo ws XP GU I theme. 1 Click start ( Start in Windows 2000/NT), Settings , Control Panel . Figure 1 17 Windows XP: S tart Menu 2 In the Control Panel , double-cli ck Network Connections ( Network and[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 250 3 Right- click Local Area Connection and then click Properties . Figure 1 19 Windows XP: Control Panel: Ne twork Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties . Figure 120 Windows XP: Local Area[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 251 • If you ha ve a dynamic IP address cli ck Obtain an IP address automatically . • If you hav e a static IP address click Use the following IP Address and fill in the IP address , Subnet mask , and Default gateway fields. •C l i c k Advanced . Figure 121 Windows [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 252 •C l i c k OK when finished. Figure 122 Windows XP: Adva nced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties windo w (the General tab in Windows XP): •C l i c k Obtain DNS server address automatically if you do not know your DNS server IP address(e[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 253 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 123 Windows XP: Internet Protocol (T CP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close ( OK in Windows 2000/[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 254 1 Click the Start icon, Control Panel . Figure 124 Windows V ista: S tart Menu 2 In the Control Panel , double-cli ck Network and Internet . Figure 125 Windows V ista: Control Panel 3 Click Network and Sharing Center . Figure 126 Windows V ista: Network And Internet[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 255 4 Click Manage network conne ctions . Figure 127 Windows V ista: Network and Sharing Center 5 Right- click Local Area Connection and then click Properties . Note: During this procedure, click Continue whenever Windo ws displays a screen saying that it needs your pe rm[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 256 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties . Figure 129 Windows V ista: Local Area Connection Properties 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens (the General tab ). • If you ha ve a dynamic IP address cli ck Ob[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 257 •C l i c k Advanced . Figure 130 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 8 If you do not know your gatewa y's IP address, remov e any previously i nstalled gateways in the IP Settings tab and click OK . Do one or more of the followin[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 258 •C l i c k OK when finished. Figure 131 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window , (the General tab ): •C l i c k Obtain DNS server address automatically if you do not know your DNS server IP add[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 259 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 132 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Versio n 4 (TCP/IPv4) Proper ties window . 11[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 260 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and do uble-cl ick TCP/IP to open the TCP/ IP Control Panel . Figure 133 Macintosh OS 8/9: Apple Menu[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 261 2 Select Ethernet built-in from the Connect via list. Figure 134 Macintosh OS 8/9: TCP/IP 3 For d ynamically assigned settings, select Using DHCP Server fro m the Configure: list. 4 For s tatically assigned settings, do t he following: •F r o m t h e Configure box, [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 262 Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window . Figure 135 Macintosh OS X: Apple Menu 2 Click Netw ork in the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from the Show[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 263 •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask bo x. • T ype the IP address of yo ur Z yXEL Device in the Router address box. 5 Click Apply Now and close the window . 6[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 264 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 138 Red Hat 9.0: KDE: Ethernet Device: General • If you ha ve a dynamic IP address, click Automatically obtain IP address settings w[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 265 6 Click the Activate button to apply the changes. The following sc reen displays. Click Yes to save the changes in all screens. Figure 140 Red Hat 9.0: KDE: Network Configuration: Act ivate 7 After the network card restart proc ess is complete, make sure the Status is[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 266 • If you ha ve a static IP address, enter static in the BOOTPROTO= field. T ype IPADDR = followed by the IP address (in dotted decimal notation) and type NETMASK = followed by the subnet mask. The following example shows an example where the static IP address is 192[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 267 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 145 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.23.19.129 B cast:172.23.19.255 Mask[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide 268[...]

P-660HN-T1H User’s Guide 269 A PPENDIX B IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are a[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 270 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 146 Network Number and Host ID How much of the IP address is the networ k number and how much is the host ID var[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 271 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits [...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 272 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us ua lly spe[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 273 The following figure shows the company network before subnetting. Figure 147 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.255.128 or /[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 274 In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all zeroes is the subnet’ s address itself , all ones is the subnet’ s broadcast address). 192.168.1.0 with mask 255.255.255.128 i s subnet A itsel[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 275 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. T able 105 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT V ALUE IP Address 1[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 276 Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number . The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network number depends [...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 277 addresses, follow their instructions i n selecting th e IP addresse s and the sub n et mask. If the ISP did not explicitly give you an IP network nu mber , then most l ikely you have a single user account and the ISP will assign you a dynamic IP address when the connection is est[...]

Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide 278[...]

P-660HN-T1H User’s Guide 279 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by default). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screens for othe[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-660HN-T1H User’s Guide 280 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 150 Internet Options: Privacy 3 Click [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-660HN-T1H User’s Guide 281 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 151 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) wi th the prefix “http://” . For example, http://192.168.167.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-660HN-T1H User’s Guide 282 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 152 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configur ator do not display properly i[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-660HN-T1H User’s Guide 283 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 153 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected (the defa[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-660HN-T1H User’s Guide 284 6 Click OK to close the window . Figure 154 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM . 4 Under [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-660HN-T1H User’s Guide 285 5 Click OK to close the window . Figure 155 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-660HN-T1H User’s Guide 286 3 Click OK to close the window . Figure 156 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Java, Javascript s and pop-ups in one screen. Click Tools, then click Options in the sc[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-660HN-T1H User’s Guide 287 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 158 Mozilla Firefox Content Security[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-660HN-T1H User’s Guide 288[...]

P-660HN-T1H User’s Guide 289 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discuss es ad-hoc and infr astructure wi reless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configur ation is an in depend ent (Ad-hoc) WLAN that connect s a set of computers with wireless adapters (A, B, C). An y time two or more[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 290 with each other . When Intra-BS S is disabled, wireless cli ent A and B can still access the wired network but cannot communicate with eac h other . Figure 160 Basic Service Set ESS An Extended Service Set (ESS) c onsists of a series of overlapping BS Ss, each containing an access point, with [...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 291 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate. Figure 161 Infrastructure WLAN Channel A channel is the r adio frequency(i es) used by wireless devi c[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 292 hidden node. Both stations (ST A) are with in range of the access point (AP) or wireless gatewa y , but out-of -range of ea ch other , so they canno t "h ear" each other , that is they do not know if the channel is currently being used. Therefore, they are consider ed hi dden from ea[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 293 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames. A large Fragmentation Threshold is recommended for networks not prone t[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 294 sever al intermediate rate steps between the maximum and minimum data r ates. The IEEE 802.11g data rate and modulation are as follows: Wireless Security Overview Wireless security is vital to your ne twork to protect wireless communication between wireless client s, ac ce ss points and t he w[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 295 IEEE 802.1x In June 2001, the IEEE 802.1x standard w a s designed to extend the features of IEEE 802.11 to support extended authentica tion as well as providing addi tional accounting and control features. It is su pported by Windows XP and a number of network devices. Some advantages of IEEE [...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 296 • Access-Challeng e Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message . The following types of RADIUS messages are exchanged between the access point and the RADI[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 297 However , MD5 authen tication h as some weaknesses. Since the authentication server needs to get the plaintext password s, t he p assword s must be stored. Thus someone other th an the authenti c a tion server may access th e p a s sw ord fi le. In addition, it is possible to impersonate an au[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 298 Dynamic WEP Key Exchange The AP maps a unique key that is generated with t he RADIUS server . This key expires when the wireless connection ti me s out, disconnec ts or reauthentication times out. A new WEP key is generated ea ch time reauthenticati on is performed. If this feature is enabled,[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 299 If the AP or the wireless clients do no t support WP A2, just use WP A or WP A -PSK depending on whether you hav e an external RADIUS server or not. Select WEP only when the AP and/or wirel ess clients do not support WPA or WP A2. WEP is less secure than WP A or WP A2. Encryption WP A improves[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 300 keys. This prev ent all wireless d evices sharing the same encryption ke ys. (a weakness of WEP) User Authentication WP A and WPA2 apply IEEE 802.1x and Extens ible Authentication Protocol ( EAP) to authenticate wireless clients using an ex ternal RADIUS database. WPA2 reduces the number of ke[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 301 4 The RADIUS server distributes the PMK to the AP . The AP th en se ts up a key hierarchy and management system, usin g the PMK to dynamica lly generate unique data encryption k eys. The k eys are used to encrypt every data packet that is wirelessly communicated bet ween the AP and the wireles[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 302 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tempor al encryption keys. They use these keys to encrypt data exchanged between them. Figure 164 WP A(2)-PSK Authentication Security Parameters Summary Re fer to th[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 303 Antenna Overview An antenna couples RF signals onto air . A tr ansmitter within a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air . P ositioning the antennas properly inc[...]

Appendix D Wireless LANs P-660HN-T1H User’s Guide 304 • Omni-directional antennas send the RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a room environment. With a wide cove rage area, it is possible to make circular ov erlapping cov erage areas wi[...]

P-660HN-T1H User’s Guide 305 A PPENDIX E Services The following table lists some commonl y-used services and their associated protocol s and port n umbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Protocol : This is the type of IP protocol used by the service.[...]

Appendix E Serv ices P-660HN-T1H User’s Guide 306 T able 1 14 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Aut hentica tion Header) tunneling protocol uses this service. AIM TCP 51 90 AOL ’s Internet Messenger service. AUTH TCP 11 3 Authentication protocol used by som e servers. BGP TCP [...]

Appendix E S ervices P-660HN-T1H User’s Guide 307 MSN Messenger TCP 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP / U DP TCP / U DP TCP / U DP TCP / U DP 137 138 139 445 The Network Basic Input/Output System is used for communication between computers in a LAN. NEW- ICQ TCP 51 90 An Internet chat program. NEWS TC P [...]

Appendix E Serv ices P-660HN-T1H User’s Guide 308 SFTP TC P 115 The Simple F ile T ransfer Protocol is an old way of tr ansferring files between computers. SMTP TC P 25 Simple Mail T ransfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another . SMTPS TC P 465 This is a mo[...]

P-660HN-T1H User’s Guide 309 A PPENDIX F Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electronic, me[...]

Appendix F Legal Information P-660HN-T1H User’s Guide 310 • This dev ice must acc e pt any interf erence received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 15 of th e FCC Rules. These limi ts are designed to provide[...]

Appendix F Legal Information P-660HN-T1H User’s Guide 31 1 本機限在不干擾合法電臺與不受 被干擾保障條件下於室內使用。 減少電磁波影響，請妥適使用。 Notices Changes or modifications not expressly appro ved by the party responsible for compliance could v oid the user's authority to oper ate the equipment[...]

Appendix F Legal Information P-660HN-T1H User’s Guide 312 purpose. Z yXEL shall in no event be hel d liable for indirect or consequential damages of any ki nd to the purchaser . T o obtain the services of this warr anty , contact Z yXEL's Service Center for your Re turn Material A uthorization nu mber (RMA). Product s must be returned P osta[...]

Index P-660HN-T1H User’s Guide 313 Index Numerics 802.1p 173 , 174 802.1Q/1P 163 activation 164 group settings 166 port settings 167 priority 163 PVC 164 PVID 168 tagging frames 164 , 167 A activation 802.1Q/1P 164 CWMP 202 dynamic DNS 178 DYNDNS wildcard 178 firewalls 151 MAC address filter 11 0 NA T 135 port forwarding 139 QoS 171 , 172 SIP ALG[...]

Index P-660HN-T1H User’s Guide 314 Command Line Interface, see CLI compatibility , WDS 11 5 configuration backup 222 CWMP 202 DHCP 91 firewalls 151 IP alias 94 IP precedence 172 IP/MAC filter 157 logs 209 port forwarding 137 reset 224 restoring 223 static route 161 WA N 73 wireless LAN 103 wizard 60 connection nailed-up 80 , 84 on demand 80 copyr[...]

Index P-660HN-T1H User’s Guide 315 LAND attack 150 Ping of Death 150 status 35 SYN attack 149 firmware 21 9 vers ion 34 forwarding ports 134 , 136 activation 139 configuration 137 example 137 rules 139 fragmentation thresho ld 108 , 120 , 293 FTP 21 , 183 H hidden node 291 I IANA 277 Internet Assigned Numbers Authority see IANA IBSS 289 ICMP 187 [...]

Index P-660HN-T1H User’s Guide 316 MBS 76 , 81 , 85 MBSSID 124 MTU 76 , 81 multicast 72 , 76 , 88 , 90 , 99 IGMPInternet Group Multicast Protocol, see IGMP Multiple BSS, see MBS SID multiplexing 74 , 79 , 83 LLC -based 83 VC-based 83 N nailed-up connection 75 , 80 , 84 NA T 80 , 133 , 134 , 144 , 277 activation 135 address mapping 140 rules 142 t[...]

Index P-660HN-T1H User’s Guide 317 R RADIUS 295 message types 295 messages 295 shared secret key 296 RADIUS server 122 reauthentication, WPA 107 registration product 312 related documentation 3 remote management 179 DNS 186 FTP 183 ICMP 187 limitations 180 NA T 181 Te l n e t 182 WWW 181 reset 25 , 224 restart 225 restoring configuration 22 3 RFC[...]

Index P-660HN-T1H User’s Guide 318 firmware 219 vers ion 34 LED 24 passwords 28 administrator 206 reset 25 status 30 , 33 firewalls 35 LAN 34 WA N 34 wireless LAN 34 time 206 T tagging frames 164 , 167 Te l n e t 182 thresholds data fragment 108 , 12 0 RTS / C T S 108 , 120 time 206 TR -069 22 trademar ks 309 traffic priority 163 traffic shaping [...]

Index P-660HN-T1H User’s Guide 319 passwords 28 WEP 105 , 123 key 106 Wide Area Network, s ee WAN Wi-Fi Protected Access 298 WiFi Protected Setup, see WPS wireless client WPA supplicants 300 Wireless Distribution System, see WDS wireless LAN 101 , 11 8 activation 104 authentication 120 , 122 BSS 123 example 124 channel 11 9 configuration 103 encr[...]

Index P-660HN-T1H User’s Guide 320[...]

Index P-660HN-T1H User’s Guide 321[...]

Index P-660HN-T1H User’s Guide 322[...]