ZyXEL Communications 320W manuale d’uso

Prestige 320W 802.1 1g Wireless Firewall Router Support Notes V ersion v1.0 September 2005[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 2 APPLICA TION NOTES ............................................................................................................................ 5 G ENERAL A PPLICA TION N OTES .................................................................................[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 3 My Prestige can not get an IP address from th e ISP to connect to the Internet, what can I do? ......... 55 What is BOOTP/DHCP ...................................................................................................................... 57 What is [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 4 Can radio signals pass through walls? ................................................................................................ 65 What are potential factors that ma y causes interference among W LAN products? ........................... 66 What&apos[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 5 Application Notes General Application Notes Internet Connection A typical Internet access application of the Prestige is sho wn below. For a small office, there are some components needs to be checked before accessing the Internet. • Before you begin • [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 6 • If you only have one PC, connect the PC's Ethern et adapter to the Prestige's LAN port with a Ethernet cable. • If you have more than one PC, both the PC's Ethe rnet adapters and the Prestige' s LAN port must be connected to an ext[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 7 The following procedure is for the most typical us age of the Prestige where you have a single-user account (SUA). The Prestige supports embedded web server that allows you to use W eb browser to configure it. 1. Retrieve Prestige Web Please enter the LAN I[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 8 Select “ Get automatically from ISP ” if the ISP provides the IP dynamically, otherwise select “ Use Fixed IP address ” and enter the static IP given by ISP in the box following “MY WAN IP Address ” field.[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 9 Configure an Internal Server Behind SUA • Introduction If you wish, you can make internal servers (e.g., Web, ftp or mail server) accessible for outside users, even though SUA makes your LAN appear as a singl e machine to the outside world. A service is i[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 10 • Port numbers for some common services Service Port Number FTP 21 T elnet 23 SMTP 25 DNS (Domain Name Server) 53 www-http (W eb) 80[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 11 Using the Dynamic DNS (DDNS) 1. What is DDNS? The DDNS service, an IP Registry provides a public central database where information such as em ail addresses, hostnames, IPs etc. can be stored and re trieved. This solves the pr oblems if your DNS server use[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 12 Key Settings for using DDNS function: Option Description Service Pro vider Enter the DDNS server in this field. Currently , we support WWW .DYNDNS.ORG . Active T oggle to 'Y es' . Host Enter the hostname you subscribe from the above DDNS server .[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 13 SNMP is a member of the TCP/IP protocol suite, it uses the UDP to exchange m essages between a management Client and an Agen t, residing in a network node. There are two versions of SNMP : Version 1 and Version 2. ZyXEL supports SNMPv1. Most of the changes[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 14 7. W rites Write is used to control the managed devices, NMSs write variables that are s tored in the managed devices. 8. T r aversal operations NMSs use these operations to determine which variables a m anaged device supports and to sequentially gather in[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 15 • Get Allows the NMS to retrieve an object variable from the agent. • GetNext Allows the NMS to retrieve the next object variab le from a table or list within an agent. In SNMPv1, when a NMS wants to retrieve all elements of a table from an ag ent, it [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 16 • V ariable-bindings Associates particular object with their value. 3. ZyXEL SNMP Implementation ZyXEL currently includes SNMP support in some Pr estige routers. It is implemented based on the SNMPv1, so it will be able to communicate with SNMPv1 NMSs. F[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 17 In some cases (download new files, CI command "sys reboot", ...), reboot is done intentionally. And traps with the message "System reboot by user!" will be sent. (ii) For fatal error: System has to reboot for some fatal errors. And trap[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 18 Set Community Enter the co rrect Set Community . This Set Community mu st match the 'Set-community requested from the NMS. Using Prestige traffic redirect • What is T raf fic Redirect? Traffic redirect forwards WAN tra ffic to a backup gateway when [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 19 Using Universal Plug n Play (UPnP) • 1. What is UPnP UPnP (Universal Plug and Play) makes connecting PCs of all form factors, in telligent appliances, and wireless devices in the home, office, and everywhere in between easier and even autom atic by lever[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 20 • Control points : Control points can manipulate network de vices when you add a new control point (in this case, a laptop ) to a ne twork, the device may ask the network to find UPnP-enabled devices. These devices respond with their URLs and device desc[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 21 In t nable UPnP function in ZyXEL devices. Currently, Microsoft MSN is the most popular application exploitin g UPnP , so we take Microsoft MSN application as an ppose PC1 and PC2 both sign in MSN server, and they would like to establish a video conference[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 22 2. After getting IP address, you can go to open MSN application on PC a nd sign in MSN server. 3. Start a Video conversation with one online user. 4. On the opposite side, your partner select Accept to accept your conversation request.[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 23 5. Finally, your video conversation is achieved.[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 24 WLAN Application Notes Infrastructure Mode 1. What is Infrastructure mode? Infrastructure mode, sometimes referred to as Access Point m ode, is an operating mode of an 802.11b/Wi-Fi client unit. In infrastructure mode, the client unit can asso ciate with a[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 25 2. Configuration Wireless Access Point to In frastructure mode using Web configurator. To configure Infrastructure mode of your P320W please follow the steps below. a. From the web configurator main m enu, go to Network > Wireless LAN[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 26 b. Configure the desired configuration on P320W. Fo r each configurable parame ter, what it is and how it function, please refer to the us er’s guide for detail or web help located on the page. c. Finished. 3. Configuration Wireless Station to Infrastruc[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 27 3. Select Infrastructure from the operation m ode pu ll down menu, fill in an SSID or leave it as any if you wish to connect to any AP than pr ess Apply Change to take effect. 4. Click on Site Survey tab, and press sear ch all the available AP will be list[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 28 5. Double click on the AP you want to associated with.[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 29 6. After the client have associated with the select ed AP. The linked AP's channel, current linkup rate, SSID, link quality, and signal strength will show on th e Link Info page. You now successfully associate with the selected AP with Infrastructure [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 30 2. ZyXEL MAC Filter Implementation ZyXEL's MAC Filter Implem entation allows users to define a list to a llow or block association fr om STAs. The filter set allows users to input 32 entries in the list. If Allo w Association is selected, all other ST[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 31 WEP Configuration 1. Introduction The 802.11 standard describes the communica tion that occurs in wireless LANs. The Wired Equivalent Privacy (WEP) algorithm is used to protect wirele ss communication from eavesdropping, because wireless transmissions are [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 32 The standard does not discuss how the shared key is established. In practice, most installations use a single key that is shared between al l mobile stations and access points AP s. WEP e mploys the key encryption algorithm, Ron' s Code 4 Pseudo Rando[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 33 2. Setting up the Access Point Most access points and clients have the ability to hold up to 4 WEP keys simultaneously. You need to specify one of the 4 keys as default Key for data encryption. To set up the Acce ss Point, you will need to set the one of t[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 34 Key settings Select one WEP key as default key to encrypt wireless data transmission. 3. Setting up the S t ation 1. Double click on the utility icon in your windows task bar or right cl ick the utility icon then select 'Show Config Utility'. The[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 35 Note: If the utility icon doesn't exist in your task bar, click Start -> Programs -> IEEE802.11b WLAN Card -> IEEE802.11b WLAN Card. 2. Select the 'Encryption' tab. Select encryption type correspond with access point. Set up 4 Keys [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 36[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 37 Key settings The WEP Encryption type of station has to equal to the access point. Check 'ASCII' field for characters WEP key or uncheck 'ASCII' field for Hexadecimal digits WEP key. Hexadecimal digits don't need to pro ceed by &apo[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 38 IEEE 802.1x authentication is a clie nt-server architecture delive red with EAPOL (Extensible Authentication Protocol over LAN). The authentication server authenticates each client connected to a Access Point (For Wireless LAN) or switch port (for Ethernet[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 39 The device (i.e. RADIUS server) provi des an authentication service to an authenticator. This serv ice determines, from the cre dentials provided by the s upplicant, whether the supplicant is authorized to access the services provided by the authenticator.[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 40 1. Force Authorized: Disables 802.1x and causes the port to tran sition to the authorized state without any authentication exchange requi red. The port transmits and receives norm al traffic without 802.1x-based authentication of the client. This is the de[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 41 The EAP protocol can support multiple authentication m echanisms, such as MD5-challenge, One-Time Passwords, Generic Token Card, TLS and TTLS etc. Typically, the au thenticator will send an initial Identity Request followed by one or more Request s for aut[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 42 The EAPOL packet contains the fo llowing fields: protocol version, packet type, packet body length and packet body. Most of the fields ar e obvious. The packet type can have four different values, and these values are described below:[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 43 • EAP-Packet: Both the supplicant and the auth enti cator send this packet when authentication is taking place. This is the packet that contains either the MD5-Challenge or TLS information required for authentication. • EAPOL-S tart: This supplicant se[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 44 1. From the W eb Configurator main menu, go to Network > W ireless LAN > General 2. Select 802.1x+Dynamic WEP to enable 802.1x authen tication function. 3. Click Apply to make your setting work. After 802.1x authentication function is enabled, you ha[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 45 When the client supplies its ident ity, the authenticator begins its ro le as the intermediary, passing EA P frames between the supplican t and the authentication server until authentication succe eds or fails. If the authentication succeeds, the switch po[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 46 By using WEB Configurator , set up Authentication server address, port number (1812) and shared secret as below Site Survey 1. Introduction What is Site Survey? An RF site survey is a MAP to RF contour of RF cove rage in a particular facil ity. With wirele[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 47 2. Preparation Below are the steps to complete a simple site su rvey with simple tools. 1. First you will need to obtain a facility diagram, such as a blueprint. This is for you to mark and take record on. 2. Visually inspect the facility, walk through the[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 48 4. It's always a good idea to start with putting the acce ss point at the corner of the room and walk away from the access point in a systema tic manner. Record down the changes at point where transfer rate drop and the link quality and signal strengt[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 49 5. When you reach the farthest point of connection mark the spot. No w you move the access point to this new spot as have already determin e the farthest point of the access point installation spot if wireless service is required from corner of the room. 6[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 50 Note: If there are more than one acc ess point is needed be sure to m a ke the adjacent access point service area over lap one another. So the wi reless stations are able to roam . For more information please refer to roaming at FA Q Product FAQ What is th[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 51 your network. Prestige's design helps users to save expenses, minimize maintenance, and simultaneously provide a high quality networking environment. The P320W is a robust solution complete with everyth i ng needed for providing Internet access to m u[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 52 How do I know I am using PPPoE? PPPoE requires a user account to login to the provider's server. If you n eed to configure a user name and password on your computer to conne ct to the ISP you are probably using PPPoE. If you are simply connected to th[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 53 What is the difference between the internal IP and the real IP from my ISP? Internal IPs are sometimes referred to as virtual IPs. They are a group of up to 255 IPs that are used and recognized internally on the local area network. They are not intended to[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 54 5. The Prestige Internet Access Sharing Router us es Solid State Disk technology . There are no moving parts in the product. It is much more reliab le than any hard disk ba sed system, such as the one for W inGate. Is it possible to access a server running[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 55 Ethernet (10baseT) is the most popular cab le modem interface standard for the PC. This automatically limits the speed of the connection to under 10 Mbps even if the cable modem can receive at 30 Mbps. Most Local Area Networks use 10baseT Ethernet, a nd al[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 56 the Prestige is attached to the cab le modem directly, the ISP will reje ct the DHCP discovery fro m this MAC, thus no IP is assigned by the ISP. The Prestige supports to cl one the MAC from the first PC the ISP in stalled to be its WAN MAC. To clone the M[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 57 What is BOOTP/DHCP BOOTP stands for Bootstrap Protoc ol. DHCP stands for Dynamic Host Configuration Protocol. Both are mechanisms to dynamically assign an IP address for a TCP/IP client by the server. In this case, the Prestige Internet A ccess Sharing Rou[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 58 When the ISP assigns the Prestige a new IP, the Prestige updates this IP to DDNS se rver so that the server can update its IP-to-DNS entry. Once the IP-to-DNS table in the DDNS server is updated, the DNS name for your web server (i.e., www.zyxel.com.tw) is[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 59 traffic will be blocked by P320W . To help users ge t rid of the problem and configuration tasks, P320W will create firewall policy automatica lly to allow incom ing traffic if NAT is enabled in the P320Ws. Firewall FAQ What is a network firewall? A firewa[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 60 as UNIX or Windows NT. It hides va luable data by requiring users to communicate with secure systems by mean of a proxy. A key drawback of this device is perform ance. Stateful Inspection Firew alls restri ct access by screening da ta packets against defin[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 61 2. Those that exploits weaknesse s in the TCP/IP specification such as SYN Flood and LAND Attacks. 3. Brute-force attacks that flood a network with useless data such as Sm urf attack. 4. IP Spoofing What is Ping of Death attack? Ping of Death uses a '[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 62 ICMP echo request packet to all hos ts on the network. If there are numerous hosts, th is will create a large amount of ICMP echo request packet, the resulting IC MP traffic will not only clog up the 'interm ediary' network, but will also congest[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 63 c. Installation Flexib ility: Wireless technology allows the network to go where wire cannot go. d. Reduced Cost-of-Ownership: While the initial investm ent required for wireless L AN hardware can be higher than the cost of wired LAN hardware, overall inst[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 64 What is IEEE 802.11? The IEEE 802.11 is a wireless LAN industry standard, and the objective of IEEE 802.11 is to make sure that different manufactures' wirele ss LAN devices can communicate to ea ch other.802.1 1 provides 1 or 2 Mbps transmission in t[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 65 Is it possible to use products from a variety of vendors? Y es. As long as the products comply with the same IEEE 802.1 1 standard. The W i-Fi logo is used to define 802.1 1b compatible products. W i-Fi5 is a comp atibility standard for 802.1 1a products r[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 66 What are potential factors that may causes interfere nce among WLAN products? Factors of interference: 1. Obstacles: walls, ceilings, furniture… etc. 2. Building Materials: metal door, aluminum studs. 3. Electrical devices: microwaves , m onitors, electr[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 67 What is Direct-Sequence Spread Spectrum Technology – (DSSS)? DSSS spreads its signal continuously over a wide fr equency band. DSSS maps the information bearing bit-pattern at the sending station into a higher data rate bit sequ ence using a "chippi[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 68 What is an ESSID? ESSID stands for Extended Service Set Identifie r and identifies the wire less LAN. The ESSID of the mobile device must match the ESSID of the AP to communicate with the AP . The ESSID is a 32-character maximum string and is case-sensitiv[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 69 Can the SSID be encrypted? WEP , the encryption standard for 802.11, only encrypt s the data packets not the 802.1 1 management packets and the SSID is in the beacon and probe ma nagem ent messages. The SSID is not encryp ted if WEP is turned on. The SSID [...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 70 What is 802.1x? IEEE 802.1x Port-Based Network Access Control is an IEEE (Institute of Electrical and Electronics Engineers) standard, which specifies a standard mechanism for authentic ating, at the link layer (Layer 2), users' access to IEEE 802 net[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 71 T rouble Shooting Why none of the LEDs turn on wh en connect the Prestige’s power? Make sure that you have the correct power adaptor connected to the Prestige, it is plugged into an appropriate power source. Check all cable connections . If the LEDs stil[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 72 1. Your ISP checks the 'MAC address' Some ISPs only provide an IP addres s to the user with an authorized MAC address. This authorized MAC can be the PC's MAC which is used by the ISP for the authentication. So, if a new network card is used[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 73 Unable to run applications 1. Currently , the applicatio ns supported in SUA mode are listed in the ZyXEL SUA Support T able . Please check all the required settings suggested in the table to configure your P320W . 2. If your application is not in the tabl[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 74 mIR C None for Chat. For DCC, please set Default/Client IP . W indows PPTP None 1723/client IP ICQ 99a None for Chat. For DCC, please set: ICQ -> preference -> connections -> firewall and set the firewall time out to 80 seconds in firewall setting[...]

P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 75 Microsoft Messenger Service 3.0 6901/client IP 6901/client IP Microsoft Messenger Service 4.6/ 4.7/ 5.0 (none UPnP) None for Chat, File transfer ,V ideo and V oice None for Chat, File transfer , V ideo and V oice Net2Phone None 6701/client IP Network T im [...]