ZyXEL Communications P-663HN-51 manuale d’uso

www .zyxel.com www .zyxel.com P-663HN-51 802.1 1n ADSL2+ Bonded 4-port Gateway Copyright © 2009 ZyXEL Communications Corporation Firmware V ersion 1.01 Edition 1, 8/2009 Default Login Details IP Address http://192.168.1.1 User Name admin Pa ss wo rd 12 34[...]

[...]

About This User's Guide P-663HN-51 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL Device using the web configu rator . Related Document ation Note: It is recommended you use t he web configurator to configure the ZyXEL Device. • Support Disc Re fer to the i[...]

About This User's Guide P-663HN-51 User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the documentation in order to better understand how to use your product. • Knowledge Base If you h ave a speci fic qu esti o n abou [...]

Document Conventions P-663HN-51 User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help ful tips) o[...]

Document Conventions P-663HN-51 User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the followi n g generic icons. The Z yXEL Device icon is not an exact represent ation of your device. ZyX E L D e v i c e Computer Notebook computer Server DSLAM Firewa ll Te l e p h o n e Swi tch Ro u te r[...]

Safety Warnings P-663HN-51 User’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is[...]

Safety Warnings P-663HN-51 User’s Guide 8[...]

Contents Overview P-663HN-51 User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 19 Introducing the ZyXEL Device ............... ................ ................ ............. ................ ................ ...... .2 1 Int[...]

Contents Overview P-663HN-51 User’s Guide 10[...]

Table of Contents P-663HN-51 User’s Guide 11 Table of Contents About This User's Guide ................................ ..................................................... ................... .. 3 Document Conventions.................................................................. ......................................... .5 Safety Warni[...]

Table of Contents P-663HN-51 User’s Guide 12 Chapter 4 Device Information..................................................... ..................................................... ... ..... 37 4.1 Device Information Summary .......... ................ ............. ............. ................ ............. ............. 37 4.2 W AN Informatio[...]

Table of Contents P-663HN-51 User’s Guide 13 5.15 IGMP Multicast ....... ............. ................ ................. ............. ................ ............. ............ ....... 70 5.16 NA T , IGMP Multicast, and WAN Service .............. ................ ................ ................ ............. 72 5.17 W AN Setup Summary . ....[...]

Table of Contents P-663HN-51 User’s Guide 14 10.1 QoS Overview ........... ................ ............. ................ ................ ............. ................ ....... .... 103 10.1.1 IEEE 802.1Q T ag .............. ................................................................ ............. ........ 103 10.1.2 IP Precedence ........[...]

Table of Contents P-663HN-51 User’s Guide 15 Chapter 17 Certificates ................................. ..................................................... ............................. ......... 133 17.1 Overview .......... ................ ................ ............. ................ ............. ................ ............ ......... 133[...]

Table of Contents P-663HN-51 User’s Guide 16 20.1 Backup Configuration Using the Web Config urator ........... ................ ............. ................ . 177 20.2 Restore Configuration Using the Web Confi gurator ................ ................ ............. ........... 178 20.3 Restoring Factory Defaults .................. .............[...]

Table of Contents P-663HN-51 User’s Guide 17 Part IV : T roubleshooting and Sp ecifications ..................................... 203 Chapter 28 T roubleshooting ............... ............................................................... .................................. .... 205 28.1 Power , Hardwa re Connections, and LEDs ........... ... .[...]

Table of Contents P-663HN-51 User’s Guide 18[...]

19 P ART I Introduction Introducing the Z yXEL Device (21) Introducing the W eb Configur ator (27)[...]

20[...]

P-663HN-51 User’s Guide 21 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applicat ions and features of the Z yXEL Device. It also introduces the wa ys you can manage the Z yXEL Device. 1.1 Overview The Z yXEL Device is an ADSL2+ pair bo nding gatewa y that allows super -fast Internet access ov er analog (POT S) tele pho[...]

Chapter 1 Introducing the ZyXEL Device P-663HN-51 User’s Guide 22 A typical Internet access application is shown below Figure 1 Protected Internet Access Ap plications Y ou can also use the Z yXEL Device to connect two geogr aphically dispersed networks over t he ADSL line. A typical L AN-to-LAN application example is s hown as follows. Figure 2 [...]

Chapter 1 Introducing the ZyXEL Device P-663HN-51 User’s Guide 23 • W eb Configurator . Use this for everyday management of the Z yXEL Device using a (supported) web browser . • SNMP . The device can be monitored by an SNMP manager . See the SNMP chapter in this User’ s Guide. 1.3 Good Habit s for Ma naging the ZyXEL Device Do the following[...]

Chapter 1 Introducing the ZyXEL Device P-663HN-51 User’s Guide 24 1.4.2 T elephone Microfilters T elephone voice transmissions tak e place in the lower frequency range, 0 - 4KHz, while ADSL tr ansmissions take plac e in the higher b andwidth range, above 4KHz. A microfilter acts as a low -pass filter , fo r your telephon e, to ensure that ADSL tr[...]

Chapter 1 Introducing the ZyXEL Device P-663HN-51 User’s Guide 25 1.5 System S t artup and LEDs After you are d one making the hardw are connections, press the power button to the ON position. Look at the LEDs (lights) on the front pa nel. The following fi gure shows the Z yXEL Device’ s LEDs. Figure 4 Front Panel[...]

Chapter 1 Introducing the ZyXEL Device P-663HN-51 User’s Guide 26 The following table describes t he LEDs. T able 1 Front Panel LEDs LED COLOR STATUS DESCRIPTION POWER Green On The Z yXEL Device is receiving power . Blinking The Z yXEL Device is performing a self-test. Off The Z yXEL Device is not receiving power . ETHERNET 1,2,3,4 Green On The Z[...]

P-663HN-51 User’s Guide 27 C HAPTER 2 Introducing the Web Configurator This chapter describes how to ac cess and navigate the web configur ator . 2.1 W eb Configurator Overview The web configurator is an HTML -based management interface that allows easy Z y XEL Device setup and management via In ternet browser . Use Internet Explorer 6.0 and late[...]

Chapter 2 Introducing the Web Configur ator P-663HN-51 User’s Guide 28 5 A screen displays as shown. Figure 5 Password Screen 2.2.1 User Access The user account can only access the Z yXEL Device from the LAN. For user acc e ss, enter the user accoun t’ s us er name ( user ) and password ( 1234 is the defaul t) and click OK to view the s tatus o[...]

Chapter 2 Introducing the Web Configurator P-663HN-51 User’s Guide 29 2.2.2 Administrator Access The admin account can only access the Z yXEL Device from the LAN. For ad ministrator access, enter the administr ator user name ( admin ) and password ( 1234 is the default) and click OK to enter the configuration screens. Note: The management session[...]

Chapter 2 Introducing the Web Configur ator P-663HN-51 User’s Guide 30 2.4 Navigating the W eb Configurator After you log i n, use the sub-menus on the navigation panel to go to other s c r e e n s . S o m e f i e l d s o r l i n k s a r e n o t a v ailable if you entered the user password in the login password screen (see Figure 5 on page 28 ). [...]

Chapter 2 Introducing the Web Configurator P-663HN-51 User’s Guide 31 R oute This screen displays information about the Z yXEL Device’ s routes for sending traffic. ARP This screen displays the IP addresses and MAC addresses that the Z yXEL Device has resolved. DHCP This screen lists the Z yXEL Device’ s DHCP clients. Advanced Setup WAN Use t[...]

Chapter 2 Introducing the Web Configur ator P-663HN-51 User’s Guide 32 DSL Use this screen to configure the ZyXEL Device’ s DSL settings. Interface Group Use this screen to map ports to PVCs and create bridging groups. Certificate Use these screens to import T rusted CA certificates that the Z yXEL Device can use in authenticating wireless clie[...]

Chapter 2 Introducing the Web Configurator P-663HN-51 User’s Guide 33 Note: Click Management > Logout to exit the web configurator . Access Control Services Use this screen to enable or disable service access to the Z yXEL Device. IP Addresses Use these screens to configure the IP addresses of trusted computers that may manage the ZyXEL Device[...]

Chapter 2 Introducing the Web Configur ator P-663HN-51 User’s Guide 34[...]

P-663HN-51 User’s Guide 35 C HAPTER 3 Initial Configuration This chapter introduces the initial configur ation that you may need to perform on the ZyXEL Device. 3.1 W AN Configuration If you c onnect your Z yXEL Device and ar e able to access the Internet without configuring the Z yXEL Device, it may be that y our ISP pre-configured the Z yXEL De[...]

Chapter 3 Init ial Co nf ig u ra tio n P-663HN-51 User’s Guide 36 3.2 QoS Configuration If the ISP ga ve you QoS settings to us e, click Advanced Setup > QoS and configure the Z yXEL Device to use them. See Chapter 10 on page 103 for details. If the WAN connection uses VLAN multiplexing, you ca n apply different QoS settings to different VLANs[...]

P-663HN-51 User’s Guide 37 C HAPTER 4 Device Information Use the Device Info screens to see information abou t your ZyXEL Device an d its connections. 4.1 Device Information Summary The Device Info > Summary screen displays when you log in. T o get to it from another screen, just click Device Info > Summary . This screen displays gener al i[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 38 The following table describes t he labels shown in the Status screen. T able 3 Device Info > Summary LABEL DESCRIPTION Product Name This is your Z yXEL Device’ s model name. Software Ve r s i o n This is the number of the firmware release the Z yXEL Device is using. Bootloader (CFE) V[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 39 4.2 W AN Information Click Device Info > WAN to open the following screen. Eac h row in the table displays information about one of the Z yXEL Device’ s W AN connections. Figure 1 1 Device Info > W AN The following table describes t he labels in this screen. T able 4 Device Info >[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 40 4.3 LAN S t atistics Click Device Info > Statistics > LAN to open the following screen. This screen displays statistics about the Z yXEL Devi ce’ s LAN connections. Figure 12 Device Info > S tatistics > LAN The following table describes t he labels in this screen. T able 5 De[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 41 4.4 W AN St atistics Click Device Info > Statis tics > WAN to open the followin g screen. Each row in the table displa ys statistics about a WAN connection. Figure 13 Device Info > S tatistics > W A N The following table describes t he labels in this screen. T able 6 Device Info [...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 42 4.5 A TM St atistics Click Device Info > Statistics > ATM to open the following screen. This screen shows low-level A TM protocol statistics. Figure 14 Device Info > S tatistics > A TM The following table describes t he labels in this screen. T able 7 Device Info > S t atist[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 43 In Circuit T ype Errors How many idle cells the Z yXEL Device received with illegal circuit types. In OAM RM CRC Errors How many Oper ational, Administration and Maintenance Function 5 (OAM) and RM (Rate Management) cells the Z yXEL Device received with a Cy clic Redundancy C heck error . In[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 44 4.6 ADSL S t atistics Click Device Info > Statistics > ADSL to open the following screen. This screen displays statistics about the Z yXEL Devi ce’ s ADSL connection. Figure 15 Device Info > S tatistics > ADSL The following table describes t he labels in this screen. T able 8[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 45 Link Power State This is the ADSL connection’ s current power management mode. SNR Margin (dB) This is the upstream and downstream Signal-to-Noise R atio Margin (in dB). A DMT sub-carrier’s SNR is the ratio betwee n the received signal power and the received noise power . The signal-to-n[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 46 4.7 ADSL BER T est Click Device Info > Statistics > ADSL > ADSL BER Test to open the following screen. Perform an ADSL Bit Error Rate T e st to measure the qualit y of the ADSL connection. Figure 16 Device Info > S tatistics > ADSL > ADSL BER T est Select for how many sec[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 47 The ADSL BER test results show how ma ny bits were sent, how many of the transferred bits were errored, and the error ratio . Click Close when yo u are done. 4.8 Route Info Click Device Info > Route to open the following sc reen. This screen displays information about the Z yXEL Dev ice?[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 48 4.9 ARP Info Click Device Info > ARP to open the following scre en. This screen displays information about the IP ad dresses the Z yXEL Device has resolv ed into MAC addresses. Figure 19 Device Info > ARP The following table describes t he labels in this screen. 4.9.1 DHCP T able DHC[...]

Chapter 4 Device Information P-663HN-51 User’s Guide 49 service is disabled, t h ere must be another DHCP serv er , or else the computer must be manually configured. Click Device Info > DHCP to display the following s cre en. This i s on ly available when the ZyXEL Device’ s DHCP server func tion is enabled. The DHCP table shows current DHCP[...]

Chapter 4 Dev ic e Information P-663HN-51 User’s Guide 50[...]

51 P ART II Advanced WAN Setup (53) LAN Setup (75) Network Address T ranslation (NA T) Screens (83) Security (93) Quality of Service (QoS) (103) Rou t i n g ( 1 15 ) RIP (119) DNS Setup (121) Dynamic DNS Setup (123) DSL Setup (127) Interface Group (129)[...]

52[...]

P-663HN-51 User’s Guide 53 C HAPTER 5 WAN Setup 5.1 W AN Overview A WAN (Wide Area Network) is an outside connection to a nother network or the Internet. 5.1.1 VPI and VCI Be sure to use the correct Virtual P ath Identifier (VPI) and Virtual Channel Identifier (VCI) numbers assigned to y ou. The valid r ange for the VPI is 0 to 255 and for the VC[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 54 5.2 T raffic Shaping T raffic shaping is an agreement between th e carrier and the subscriber to regulate the aver age rate and fluctuations of data t ransmission o ver an A TM network. This agreement helps eliminate congestion, which is important for tr ansmission of real time data such as audio and[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 55 5.2.1.1 Const ant Bit Rate (CBR) Constant Bit R ate (CBR) provid es fixed bandwidth that is always a vail able even if no data is being sent. CBR traffic i s generally ti me-sensitive (does n't tolerat e delay). CBR is u sed for connec tions that c ontinuously require a spe cific amou nt of band[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 56 See Section 5.1 on page 53 for more information. Figure 22 Advanced Setup > W AN The following table describes t he labels in this screen. T able 12 Advanced Setup > W AN LABEL DESCRIPTION P ort/VPI/VCI This field displays the W AN connection’ s DSL port, Virtual Path Identifier , and Virtual[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 57 5.4 W AN A TM P VC Configuration and QoS Click Advanced Setup > WAN > Add (or Edit ) to open the following screen. Use this screen to configure A TM PVC settings and enable or disable QoS. The screen differs by the service category . See Section 5.1 on page 53 for more information. Figure 23 Ad[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 58 5.5 Connection T ypes Be sure to use the connecti on type required by your ISP . Here is background information on the connection t ypes the Z yXEL Device supports. 5.5.1 PPPoA PPP oA stands for P oint to P oint Protocol o ver A TM Adaptation Laye r 5 (AAL5). A PPPoA connection functi ons li ke a di [...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 59 5.5.2 PPPoE PPP oE (Point to P oint Protocol ov er Ethe rnet) provides access control and bill ing functionality in a manner similar to dial-up services using PPP . The Z yXEL Device bridges a PPP session o ver Ethernet (P PP o ver Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent Virt[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 60 5.6.1 LLC-based Encap sulation In this case one VC carrie s multip le prot ocols with protocol identifying information being contained in each packet head er . Despite the extr a bandwidth and processing ov erhead, this method may be adv antageous if it is not p ractical to have a separ ate VC for ea[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 61 The following table describes t he labels in this screen. 5.8 NA T NA T (Network Address T ranslation - NA T , RFC 1631) is the translat ion of the IP address of a host in a packet, for exampl e, the source address of an outgoing packet, used wit hin one network to a di fferent IP address known withi[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 62 5.10 PPPoA W AN Connection Setup When you select PPP oA in the second W A N set up ad d (or edit) sc reen, this screen displays next. Use this screen to config ure PPPoA connecti on settings. Figure 25 Advanced Setup > W AN > Add (3: PPPoA) The following table describes t he labels in this scre[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 63 Authentication Method The Z yXEL Device supports P AP (Password Authen tication Protocol) and CHAP (Challenge Handshake A uthentication Protocol). CHAP is more secure than PAP; however , PAP is readily av ailable on more platforms. Use the drop-down list box to select an authentication pr otocol for [...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 64 Use Static IP Address If the ISP gave you a static (fix ed) IP address, select this option and enter it in the IP Address field. If the ISP did not give you a static IP address, clear the Use Static IP Address option. The ISP automatically assigns the WAN connection an IP address when it connects. En[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 65 5.1 1 PPPoE W AN Connection Setup When you select PPP oE in the second WA N setup add (or edit) screen, this screen displays next . Use this screen to co n figure PPP oE connection settings. Figure 26 Advanced Setup > W AN > Add (3: PPPoE) The following table describes t he labels in this scree[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 66 Authentication Method The Z yXEL Device supports P AP (Password Authen tication Protocol) and CHAP (Challenge Handshake A uthentication Protocol). CHAP is more secure than PAP; however , PAP is readily av ailable on more platforms. Use the drop-down list box to select an authentication pr otocol for [...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 67 Use Static IP Address If the ISP gave you a static (fix ed) IP address, select this option and enter it in the IP Address field. If the ISP did not give you a static IP address, clear the Use Static IP Address option. The ISP automatically assigns the WAN connection an IP address when it connects. En[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 68 5.12 MER W AN Connection Setup When you select MER in the second W AN setup add (or edit) screen, this screen displays next. Use this screen to config ure MER connection settings . Figure 27 Advanced Setup > W AN > Add (3: MER) The following table describes t he labels in this screen. T able 17[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 69 5.13 IPoA W AN Connection Setup When you select IP oA in the second W AN setup add (or edit) screen, this screen displays next . Use this screen to co n figure IPoA connection settings. Figure 28 Advanced Setup > W AN > Add (3: IPoA) The following table describes t he labels in this screen. Obt[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 70 5.14 Bridge W AN Connection Setup When you select bridge in the second W A N setup ad d (or edit) sc reen, this screen displays next. Use this screen to config ure bridge connection settings. Figure 29 Advanced Setup > W AN > Add (3: Bridge) The following table describes t he labels in this scr[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 71 Multicast d elivers IP packets to a group of hosts on the network - not everybody and not just 1. IGMP (Internet Group Management Protocol ) is a network -layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) i s an improvement[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 72 5.16 NA T , IGMP Multicast, and W AN Service This is the fourth W AN screen to dis play for every connec tion type except bridging (for which this is the third screen). This screen varies depending on the connection type. Use this screen to configure NA T , IG MP multicast, and W AN service settings.[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 73 5.17 W AN Setup Summary This is the last W AN setup screen to display . Use this screen to check your sett ings before saving them. Clic k Back if you need t o make any changes. If the settings are OK, click Save to save the settings . Us e the Save/Reboot button in the Advanced Setup > WAN screen[...]

Chapter 5 WAN Setup P-663HN-51 User’s Guide 74[...]

P-663HN-51 User’s Guide 75 C HAPTER 6 LAN Setup This chapter describes how to configure LAN setti ngs. 6.1 LAN Overview A Local Area Network (LAN) is a shared communicat ion system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. The LAN screens c an[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 76 6.1.2 DHCP Setup DHCP (Dynamic Host Configur ation Protocol , RFC 2131 and RFC 2132) allows individual clients to obtai n T CP/IP configur ation at start -up from a server . Y ou can configure the Z yXEL Device as a DHCP serv er or disable it. When configured as a server , the ZyXEL Device provides t[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 77 address that you entered. Y ou don't need to change the subnet mask computed by the Z yXEL Device unless you are instructed to do otherwise. 6.2.1.1 Private IP Addresses Every machine on the In ternet must ha ve a uni que address. If your ne tworks are isolated from the Internet, for example, on[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 78 to participate in IGMP . The address 224.0.0. 2 is assigned to the multicast routers group. The Z yXEL Device supports both IGMP version 1 ( IGMP-v1 ) and IGMP version 2 ( IGMP-v2 ). At start up , the Z yXEL Device queries all directly connect ed networks to gather group membership. After that , the [...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 79 6.4.3 Cautions with UPnP The automated nature of NA T trav ersal applications in establishing their own services and opening firewall ports may present network securi ty is sues. Network information and configur ation may also be obtained and modified by users in some network environments. When a UPn[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 80 6.5 LAN Setup Click Advanced Setup > LAN to open the IP screen. Se e Section 6.1 on page 75 for background information. Some fields ma y not displ a y depending on y our W AN configu ration. Figure 33 Advanced Setup > LAN The following table describes t he fields in this screen. T able 21 Advan[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 81 Enable UPnP Select this check box to acti v ate UPnP . Be aware that anyone could use a UPnP application to open the web conf igurator's login screen without entering the Z yXEL Device's IP address (although y ou must still enter the password to access the web configurator). Enable IGMP Sno[...]

Chapter 6 LAN Setup P-663HN-51 User’s Guide 82 6.6 The DHCP S t atic Lease Screen In the Advanced Setup > LAN screen, click Add Entries to open the DH CP Static Lease screen. Use this screen to confi gure the list of static IP addresses the Z yXEL Device assigns to computers connected to the interface. If a computer ’ s MAC address is in the[...]

P-663HN-51 User’s Guide 83 C HAPTER 7 Network Address Translation (NAT) Screens This chapter discusses how to conf igure NA T on the ZyXEL Device. 7.1 NA T Overview NA T (Network Address T ranslation - NA T , RFC 1631) is the translat ion of the IP address of a host in a packet, for exampl e, the source address of an outgoing packet, used wit hin[...]

Chapter 7 Net wo rk Addr ess Translation (NAT ) Scr ee ns P-663HN-51 User’s Guide 84 periodically check for servers and may su spend your account if it dis covers any active services at your location. If you are unsure, refer to your ISP . 7.2.1 V irtual Server: Services and Port Numbers See Appendix E on page 281 for commonly used port numbers. [...]

Chapter 7 Network Address Translation (NAT) Screens P-663HN-51 User’s Guide 85 Click Advanced Se tup > NAT > Virtual Serve rs to open the following screen. Figure 36 Advanced Setup > NA T > Virtual Servers See Appendix E on page 281 for port numbers commonly used for particular services. The following table describ es the fields in th[...]

Chapter 7 Net wo rk Addr ess Translation (NAT ) Scr ee ns P-663HN-51 User’s Guide 86 7.3.1 V irtual Server Rule Add T o create a virtua l server rule, click Advanced Setup > NAT > Virtual S ervers > Add to open the following screen. Figure 37 Advanced Setup > NA T > Virtual Servers > Add The following table describes t he fields[...]

Chapter 7 Network Address Translation (NAT) Screens P-663HN-51 User’s Guide 87 7.4 Port T riggering Some services use a dedicated r ange of ports on the client side and a dedicated rang e of ports on the server sid e. Wi th regul ar port forwarding you set a forwarding port in NA T to forward a serv ice (coming in from the server on the WAN) to t[...]

Chapter 7 Net wo rk Addr ess Translation (NAT ) Scr ee ns P-663HN-51 User’s Guide 88 For example: Figure 38 T rigger Port Forwarding Process: Example 1 Jane (A) requests a file from the R eal Audi o server (port 7070). 2 P ort 7070 is a “trigger” port and causes t he Z yXEL Device to record Jane’ s computer IP address. The Z yXEL Device ass[...]

Chapter 7 Network Address Translation (NAT) Screens P-663HN-51 User’s Guide 89 The following table describes t he labels in this screen. 7.5 Port T riggering Add Click Advanced Setup > NAT > Port Triggering > Add to open the following screen. Use this screen to change your Z yXEL Device’ s trigger port settings. Figure 40 Advanced Setu[...]

Chapter 7 Net wo rk Addr ess Translation (NAT ) Scr ee ns P-663HN-51 User’s Guide 90 The following table describes t he labels in this screen. 7.6 DMZ Host In addition to the vi rtual servers for sp ecified servic es, NA T supports a DMZ host IP address. The DMZ host receiv es packets from ports that are not specified in the applications in the v[...]

Chapter 7 Network Address Translation (NAT) Screens P-663HN-51 User’s Guide 91 Click Advanced Setup > NAT > DMZ Host to open the following screen. Use this screen to specify a DMZ host IP address. Figure 41 Advanced Setup > NA T > DMZ Host The following table describes t he labels in this screen. T able 27 Advanced Setup > NA T >[...]

Chapter 7 Net wo rk Addr ess Translation (NAT ) Scr ee ns P-663HN-51 User’s Guide 92[...]

P-663HN-51 User’s Guide 93 C HAPTER 8 Security This chapter describes how to configure securit y settings. 8.1 Outgoing IP Filtering By default, the Z yXEL Device allows tr af fic from the LAN to go to the Internet. Click Advanced Setup > Security > IP Filtering > Outgoing to open the following screen. This sc reen lists the currently co[...]

Chapter 8 Sec urity P-663HN-51 User’s Guide 94 8.2 Adding Outgoing IP Filtering Rules T o add an outgoing IP filtering rule, click Advanced Setup > Security > IP Filtering > Outgoing > Add . The screen appears as shown. Figure 43 Advanced Setup > Secu rity > IP Filtering > Outgoing > Add The following table describes t he [...]

Chapter 8 Secu r ity P-663HN-51 User’s Guide 95 8.3 Incoming IP Filtering By default, the Z yXEL Device blocks tr a ffi c from the Internet from going to the LAN. Use incom ing IP filtering to allow certain traffic to come in from the In ternet to the LAN. F or example, y ou could allow access to a web serv er on your LAN to let people access a w[...]

Chapter 8 Sec urity P-663HN-51 User’s Guide 96 8.4 Adding Incoming IP Filtering Rules T o add an incoming IP filtering rule, click Advanced Setup > Security > IP Filtering > Incoming > Add . The screen appears as shown. Figure 45 Advanced Setup > Secu rity > IP Filtering > Incoming > Add The following table describes t he [...]

Chapter 8 Secu r ity P-663HN-51 User’s Guide 97 Destination IP Address This is the IP address and subnet ma sk of a LAN computer to which this entry allows access. Destination Subnet Mask T ype the subnet mask of the LAN computer to which this entry applies. Destination Po r t T ype the destination port for traffic to which this entry applies. WA[...]

Chapter 8 Sec urity P-663HN-51 User’s Guide 98[...]

P-663HN-51 User’s Guide 99 C HAPTER 9 Parental Control (Blocking Schedule) Click Advanced Setup > Security > Parental Control to display the following screen. This screen shows policies contro lling which da ys and times Internet access is block ed from specific MAC addresses. Figure 46 Advanced Setup > Secu rity > Parental Control Th[...]

Chapter 9 Parental Control (Blocking Schedule) P-663HN-51 User’s Guide 100 9.1 Adding Parent al Co ntrol (Blocking Schedule) Entries Click Advanced Setup > Security > Parental Control > Add to display the following screen. Use this s creen to co nfigure whic h days and ti mes Internet access is block ed from a specific MAC address. Figur[...]

Chapter 9 Parental Cont rol (Blocking Schedule) P-663HN-51 User’s Guide 101 End Blocking Time This is the ending time for the blocking period. Include a two-digit number of hours followed by a colon and a. two-digit num ber of hours. Save/Apply Click this button to save th e changes and hav e the Z yXEL Device start using them. T able 33 Advanced[...]

Chapter 9 Parental Control (Blocking Schedule) P-663HN-51 User’s Guide 102[...]

P-663HN-51 User’s Guide 103 C HAPTER 10 Quality of Service (QoS) This chapter contains information about configuring QoS, editing classifiers and viewing the Z yXEL Device’ s QoS packet statist ics . 10.1 QoS Overview Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking me thods [...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 104 12-bit VLAN ID and 3-bit user priority . The VLAN ID associates a frame with a specific VLAN and provi des the informatio n that devices need to process the fr ame across the network. IEEE 802.1p specifies the user priority fiel d and defines up to eight separ ate traffic types. The [...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 105 to handle the pack ets differently depending on the code points without the need to negotiate paths or remember state information for every flow . In addit ion, applications do not hav e to request a particular service or giv e adv anced notice of where the traffic is going. 10.1.3.1[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 106 Use this screen to enable or disable QoS, and select a DSCP mark to use on al l outgoing packets that do not match a QoS classification rule. Figure 48 Advanced > Quality of Service The following table describes t he labels in this screen. T able 35 Advanced > Quality of Servic[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 107 10.3 Queue Configuration Click Advanced > Quality of Service > Queue Configuration to open the following screen. This sc reen lists the Qo S queues. A QoS queue sets the priority used for incoming packets that the QoS classifier has grouped into a flow . Figure 49 Advanced >[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 108 10.4 Adding a Queue Click Advanced > Quality of Service > Queue Configuration > Add to open the following screen. Use this screen to configure a QoS queue. A QoS queue sets the priority used for i ncoming packets that the QoS c lassifier has grouped into a flow . Note: Y ou [...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 109 10.5 Class Setup Click Advanced > Quality of Service > QoS Classification to open the following screen. This screen lists the QoS classifiers. A classifi er groups upstream traffic into data flows according to specific criteria su ch as the source address, destination address, [...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 11 0 10.5.1 Configuring a QoS Class Click Advanced > Quality of Service > QoS Classification and then the Add or Edit butt on to con figure a c lassifier . The re are two sets of classif ication rules. Set-1 i s based on different fields withi n the TCP/UDP/IP l ayer plus the ph ys[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 111 LAN port. Set-2 is based on t h e M AC layer IEEE 802.1p priorit y field. Use one set or the other for a class (not both sets). Figure 52 QoS Class Configura tion See Appendix E on page 281 for a list of commonly-use d services. The following table des c r ib es the labe ls in this s[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 11 2 Assign Classification Queue Select the QoS queue the ZyXEL Device uses for the packets of upstream traffic that match this QoS classifier . Assign Differentiated Services Code Po i n t ( D S C P ) Mark Select the DSCP mark the Z yXEL Device assigns to the packets of upstream traffic[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 11 3[...]

Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide 11 4[...]

P-663HN-51 User’s Guide 11 5 C HAPTER 11 Routing This chapter shows you how to configure t he default gateway and static routes for your ZyXEL D ev ice . 1 1.1 Default Gateway Setup The default gatewa y is a neighboring rout er that helps the Z yXEL Device for ward traffic to its d estination. Click Advanced > Routing > Default Gateway to o[...]

Chapter 11 Routing P-663HN-51 User’s Guide 11 6 1 1.2 St atic Route The Z yXEL Device usually uses the default gatewa y to route outbound tr affic from local computers to the Internet. T o have the Z yXEL Device send data to devices not reachable through the def ault gateway , use static routes. For example, the next figure shows a computer ( A )[...]

Chapter 11 Routing P-663HN-51 User’s Guide 11 7 1 1.3 Configuring St atic Route Click Advanced > Routing > Static Route to open the Static Route screen. Figure 55 Advanced > Routing > S t atic Route The following table describes t he labels in this screen. 1 1.3.1 St atic Route Add Click Advanced > Routing > Static Route > Ad[...]

Chapter 11 Routing P-663HN-51 User’s Guide 11 8 The following table describes t he labels in this screen. T able 42 Advanced > Routing > Static Route > Add LABEL DESCRIPTION Destination Network Address This parameter specifies the IP networ k address of the final destination. R outing is always based on network number . If you need to sp[...]

P-663HN-51 User’s Guide 11 9 C HAPTER 12 RIP This chapter covers configuring the RIP settings for y our Z yXEL Device. 12.1 RIP Setup RIP (R outing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers . RIP Direction controls the sending and receiving of RI P pack ets. When set to Both or[...]

Chapter 12 RI P P-663HN-51 User’s Guide 120 Click Advanced > Routing > RIP to open the following screen. Use this screen to change th e Z yXEL De vi c e ’s RIP settings . Figure 57 Advanced Setup > Routing > RIP The following table describes t he labels in this screen. T able 43 Advanced Setup > Routing > RIP LABEL DESCRIPTION[...]

P-663HN-51 User’s Guide 121 C HAPTER 13 DNS Setup This chapter describes how to configure DNS sett ings. 13.1 DNS Server Address DNS (Domain Name System) maps a doma i n name to its corresponding IP address and vice v ersa. The DNS serv er is ext remely important because wi thout it, you must know the IP address of a co mputer before you can acce[...]

Chapter 13 DNS Setu p P-663HN-51 User’s Guide 122 13.2 DNS Setup Click Advanced Setup > DNS > DNS Server to open the following screen. Figure 58 Advanced Setup > DNS > DNS Server The following table describes t he fields in this screen. T able 44 Advanced Setup > DNS > DNS Server LABEL DESCRIPTION Enable Automatic Assigned DNS S[...]

P-663HN-51 User’s Guide 123 C HAPTER 14 Dynamic DNS Setup This chapter discusses how to configure your Z yXEL Device to use Dynamic DNS. 14.1 Dynamic DNS Overview Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also a[...]

Chapter 14 Dy namic DNS Se tup P-663HN-51 User’s Guide 124 14.2 Dynamic DNS Click Advanced Setup > DNS > Dyna mic DNS to open the following screen. Figure 59 Advanced Setup > DNS > Dynamic DNS The following table describes t he fields in this screen. T able 45 Advanced Setup > DNS > Dynamic DNS LABEL DESCRIPTION Host Name This i[...]

Chapter 14 Dynamic DNS Setup P-663HN-51 User’s Guide 125 14.3 Configuring Dynamic DNS Click Advanced Setup > DNS > Dynamic DNS > A dd to open the following screen. Figure 60 Advanced Setup > DNS > Dynamic DNS > Add The following table describes t he fields in this screen. T able 46 Advanced Setup > DNS > Dynamic DNS > A[...]

Chapter 14 Dy namic DNS Se tup P-663HN-51 User’s Guide 126[...]

P-663HN-51 User’s Guide 127 C HAPTER 15 DSL Setup This chapter explains how to co nfigure ADSL port settings. 15.1 DSL Setup Click Advanced > DSL to open the following screen where you can configure the Z yXEL Device’s DSL settings. Figure 61 Advanced > DSL[...]

Chapter 15 DS L Set up P-663HN-51 User’s Guide 128 The following table describes t he labels in this screen. T able 47 Advanced > DSL LABEL DESCRIPTION Select the modulation below Select the port’s ADSL oper ational mode. Select multiple mode s to let the Z yXEL Device and the DSLAM automatically determine the mode to use. AnnexL (reach exte[...]

P-663HN-51 User’s Guide 129 C HAPTER 16 Interface Group 16.1 Interface Group s Overview Interface Groups let you map ports to PVCs and create bridging groups. 16.2 Interface Group s Setup Click Advanced Setup > Interface Groups to open the following screen. Use this screen to map ports to PVCs and create bridging groups. Figure 62 Advanced Set[...]

Chapter 16 In te r fac e Gr ou p P-663HN-51 User’s Guide 130 The following table describes t he labels in this screen. T able 48 Advanced Setup > Interface Groups LABEL DESCRIPTION Enable virtual ports on Select this option to treat the LAN ports as separ ate (virtual) interfaces. Group Name This is the name configured to identify the group. R[...]

Chapter 16 Interface Group P-663HN-51 User’s Guide 131 16.3 Adding an Interface Group Click Advanced Setup > Interface Groups > Add to open th e following screen. Use this s creen to map ports to PVCs and c reate bridging groups. Figure 63 Advanced Setup > Interf ace Groups > Add The following table describes t he labels in this scree[...]

Chapter 16 In te r fac e Gr ou p P-663HN-51 User’s Guide 132 Automatically Add Clients With the following DHCP Ve n d o r I D s If you want LAN clients to get pu blic IP addresses, you can list their DHCP vendor IDs here. Save/Apply Click this button to sav e the changes and have the Z yXEL Device start using them. T able 49 Advanced Setup > I[...]

P-663HN-51 User’s Guide 133 C HAPTER 17 Certificates 17.1 Overview This chapter describes how y our Z yXEL Devi ce can use certificates as a means of authenticating wireless cl ients. It giv e s background information about public - key certificates and explains how to use them. A certificate contains the certificate owner’ s identit y and publ[...]

Chapter 17 Certificates P-663HN-51 User’s Guide 134 Certificate File Format s The certification authority cert ifi cate that you want to import has to be in one of these file formats: • Binary X.509: This is an ITU- T recomm endation that defines the formats for X.509 certificates. • PEM (Base-64) encoded X.509: Thi s Privacy Enhanced Mail fo[...]

Chapter 17 Certificates P-663HN-51 User’s Guide 135 The following table describes t he labels in this screen. T able 50 T rusted CAs LABEL DESCRIPTION Name This field displays the name used to identify this certificate. Subject This field displays identifying in formation about the certificate’s owner , such as CN (Common Name), OU (Organizatio[...]

Chapter 17 Certificates P-663HN-51 User’s Guide 136 17.2.1 T rusted CA Details Use this screen to view in-depth inform ation about the certification authority’ s certificate. Click Advanced Setup > Certificate to open the T rusted CAs screen. Then click a certificate’ s View button to open the details screen. Figure 66 T rusted CA Details [...]

Chapter 17 Certificates P-663HN-51 User’s Guide 137 17.2.2 T rusted CA Import Click Advanced Setup > Certificate to open the Trusted CA screen a nd then click Import Certificate to open the following screen. Use this screen to save a trusted certification authority’ s certificate to the Z yXEL Device. Note: Y ou must remove any sp aces from [...]

Chapter 17 Certificates P-663HN-51 User’s Guide 138 17.3.1 Certificates Overview The Z yXEL Device can use certifica tes (als o called digital IDs) to authenticate users. Certificates are based on public-pri v ate key pairs. A certificate contains the certificate owner’ s identity and public k ey . Certificates provide a way to ex change public[...]

Chapter 17 Certificates P-663HN-51 User’s Guide 139 17.3.2 Private-Public Certificates When using public-k ey cryptology for auth entic ation, each host has two keys. One key is public and can be made openl y available. The other key is private and must be kept secure. These keys work like a handwritten sign ature (in fact, certificates are often[...]

Chapter 17 Certificates P-663HN-51 User’s Guide 140 1 Browse to where you ha ve the remote host’ s certificate sa ved on your computer . 2 Make sure that the certificat e has a “. cer” or “.crt” file name extension. Figure 68 Remote Host Certificates 3 Double-click the certificate’ s icon to open the Certificate window . Click the Det[...]

P-663HN-51 User’s Guide 141 C HAPTER 18 Wireless LAN 18.1 Overview This chapter describes how to perform task s related to setting up and optimizing your wirele ss net w or k, includi ng the foll owi n g . • T urning the wireless connection on or off . • Configuring a name, wireless cha nnel and security for the network. • Using WiFi Protec[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 142 Y ou don’ t necessarily need to use all these screens to se t up your wireless connection. F or example, yo u may just want to set up a network name, a wireless radio channel and some security in the General sc reen. 18.2 What Y ou Need to Know Wireless Basics “Wireless” is essentially[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 143 Radio Channels In the r adio spectrum, there are certain frequency bands allocated for unli censed, civilian use. F o r the purposes of wireless networking, t hese bands are divided into numerous channels. This allows a variety of networks to exist in the same place without interfering with one[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 144 mother owns a 1970 Dodge Challenger and her favorite movie is V anishing Point (which you know was made in 1971) you could use “70dodchal71v anpoi” as y our security key . Signal Problems Because wireless networks are radio ne tworks, their signal s are subject to limitations of distanc [...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 145 Note: If you have a wireless connection to the ZyXEL Device and you change the ZyXEL Device’ s SSID or country settings, you will lose your wireless connection when you click Save/Apply . Y ou must then change your wireless client’ s settings to match the ZyXEL Device’ s new settings. Fig[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 146 SSI D This is the name of the Z yXEL Device’s wireless network. The SSID (Service Set IDentity) identifies th e service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same S SID . Enter a descriptiv e name (up to 32 print[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 147 18.5 Wireless Security Click Wireless > Security to open the Wireless Security screen. Use this screen to confi gure wireless security sett ings. BSSID This shows the MAC address of the wi reless interface on the ZyXEL Device when wireless LAN is enabled. Save/Apply Click this button to sav [...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 148 Note: If you have a wireless connection to the ZyXEL Device and you change the ZyXEL Device’ s security settings, you wi ll lose your connection when you click Save/Apply . Y ou must then change your wireless client’ s settings to match the ZyXEL Device’ s new settings. Figure 71 Wirel[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 149 Push Button Select this to use the PBC (Push Button Configuration) method to send the Z yXEL Device’ s wireless settings to your wireless stations. Click Add Enrollee to start WPS-aware wireless station scanning an d the wireless security information synchronization. Note: After you click Add[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 150 Device PIN This shows the Z yXEL Device’ s PIN (P ersonal Identification Number). Enter this PIN in the external regist rar within two minutes of clicking Config AP . WSC Add External Reg is t r a r This is available when you set the WPS AP Mode to Configured . Click Start AddER to have an[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 151 WPA2 Preauthentication This field is available only wi th WP A2 network authentication. T urn on pre-authentication to enable fast roaming by allowing the wireless client (already connected to an AP) to perform IEEE 802.1x authentication with another AP before con necting to it. Network Re -aut[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 152 18.6 The MAC Filter Screen This screen allows you to configure the Z y XEL Device to give exclusive ac cess to specific devi ces ( Allow ) or exclude specific devices from accessing the Z yXEL Device ( Deny ). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC add[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 153 The following table describes t he labels in this screen. 18.6.1 The MAC Filter Add Screen Use this screen to add MAC address entries. Click Wireless > MAC Filter > Add to open the following screen. Figure 73 Wireless > MAC Filter > Add The following table describes t he labels in t[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 154 18.7 Wireless Bridge Screen The Z yXEL Device can wirelessly connect APs. This is also known as a Wireless Distribution System (WDS). In the followi n g figure a wi reless client connect s to access point AP 1 . AP 1 has no wired Internet connection, but i t can establish a bridge link to ac[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 155 The following table describes t he labels in this screen. 18.8 The Advanced Setup Screen T o configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup . The screen appears as shown. T able 57 Wireless > Bridge LABEL DESCRIPTION AP Mode Select the operating mod[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 156 Note: If have a wireless connection to the ZyXEL Device and you change the ZyXEL Device’s wireless settings, you may lose your wireless connection whe n you click Save/Apply . Y ou must then change your wireless client’s settings to match the ZyXEL Device’ s new settings. Figure 76 Wir[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 157 Auto Channel Timer If you set the channel to Auto , specify the interv al in minutes for how often the Z yXEL Device scans for the best channel. Enter 0 to disable the periodical scan. 802.11n/EWC Select whether to enable ( Auto ) or disable ( Disabled ) the use of the wireless 802.11n modes de[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 158 Fragmentation Threshold This is the maximum data fr agment size that can be sent. En ter a value between 256 and 2432. R TS Threshold Use CTS/R T S to reduce data collisions on the wireless network if you have wireless clients that are associated with the same AP but out of range of one anot[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 159 18.9 Wireless S t ation Info The station monitor displays the connection status of the wireless cli ents connected to (or trying to connect to) the Z yXEL Device. T o open the station monitor , click Wireless > Station Info . The screen appears as shown. Figure 77 Wireless > S t ation Inf[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 160 18.10 T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. 18.10.1 Wireless Network Overview The following figure provides an example of a wireless network. Figure 78 Example of a Wireless Network The wireless network is the part in the[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 161 • Every device in the same wireless network must use security compatible with the AP . Security stops unauthorized devi ces from using the wireless network. It can als o protect the in f o rm at ion th at is sent in th e wir eless netw ork. 18.10.2 Additional Wireless T erms The following tab[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 162 This type of sec urity is fairly weak, howev er , because there are w ays for unauthorized wirel ess devices to get the SSID. In addition, un autho r ized wir eless devices ca n still se e th e informa ti o n that is sent in the wirele ss netwo rk. 18.10.3.2 MAC Address Filter Every device t[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 163 18.10.3.4 Encryption Wireless networks can us e encryption to protect the info rmation that is sent in the wireless network. Encryption is l ike a secret code. If you do not know the secr et code, you cannot unders tand the message. The types of encryption y ou can choose de pend on the type of[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 164 18.10.4 WiFi Protected Setup Y our ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alli ance. WPS allows you to q uickly set up a wirele ss network with strong securit y[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 165 18.10.4.2 PIN Configuration Each WPS-enabled device has its own PIN (P ersonal Identification Number). This may either be static (it cannot be changed) or dynamic (in some devices you can generate a new PIN by clicki ng on a button in the configuration interface). Use the PIN method instead of [...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 166 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 79 Example WPS Process: PIN Method 18.10.4.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific ro[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 167 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 80 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes). The next time you use WPS, a differe[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 168 18.10.4.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured. When WPS is activ ated on both, they perform the handshake. In this exampl[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 169 point. However , you know that Client 2 supports the registrar function, so you use it to perform the WPS handshak e instead. Figure 83 WPS: Example Network S tep 3 18.10.4.5 Limit ations of WPS WPS has some limitations of which you should be a ware. • WPS works in Infrastructure networks on [...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 170 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network. This is because the registrar has no wa y of id entifying the “corre ct?[...]

Chapter 18 Wireless L AN P-663HN-51 User’s Guide 171 3 Enter the Z yXEL Device’ s identification PIN and click Next . The computer tells the Z yXEL Device what wireless network setti ngs to use. 18.10.5.2 V ist a Adding and Au thenticating Wi reless Client s After a Windows Vist a computer configures the Z yXEL Device’ s wi reless settings, t[...]

Chapter 18 Wir e le ss LA N P-663HN-51 User’s Guide 172[...]

173 P ART III Diagnostics and Management Diagnostics (175) Settings (177) Logs (181) SNMP (185) Time (191) Access Control (193) Update Software ( 199) Save/R eboot and Logout (201)[...]

174[...]

P-663HN-51 User’s Guide 175 C HAPTER 19 Diagnostics These read-only screens display information to help y ou identify problems with the Zy X E L D e v i c e . 19.1 Diagnostics Click Diagnosti cs to open the screen shown next . Use this screen to test the Z yXEL Devices connections. The ENET co nnections appear as four separ ate connections when y[...]

Chapter 19 Diagnostics P-663HN-51 User’s Guide 176[...]

P-663HN-51 User’s Guide 177 C HAPTER 20 Settings This chapter describes how to manage your ZyXE L Device’ s configur ation. 20.1 Backup Configuration Using the W eb Configurator Click Management > Setting s > Backup to open the followi ng screen. Use this screen to back up (sav e) the Zy XEL Device’ s current configuration to a file on [...]

Chapter 20 Sett ing s P-663HN-51 User’s Guide 178 20.2 Restore Configuration Using the W eb Configurator Click Management > Settings > Update to open the following screen. Use this screen to upload a new or previously save d configuration file from your computer to your ZyXEL Device. Figure 87 Managemen t > Settings > Update Do not tu[...]

Chapter 20 Settings P-663HN-51 User’s Guide 179 20.3 Restoring Factory Default s Click Management > Settings > Restore Default to open the following screen. Figure 89 Managemen t > Settings > Restore Default Click Restore Default Settings to clear al l user-entered confi gu r ation information and return the Z yXEL Devi ce to its fact[...]

Chapter 20 Sett ing s P-663HN-51 User’s Guide 180[...]

P-663HN-51 User’s Guide 181 C HAPTER 21 Logs This chapter contains information abou t configuring general log set tings and viewing the Z yXEL Device’ s logs. R efer to the appendix for example log message explanations. 21.1 Logs Overview The web configurator allows y ou to choos e which lev els of events t o have the Z yXEL Device log and then[...]

Chapter 21 L ogs P-663HN-51 User’s Guide 182 21.3 V iewing the System Log Click Management > System Log > View System Log to view the Z yXEL Device’ s system logs. Figure 91 Managemen t > System Log > View System Log The following table describes t he fields in this screen. T able 63 Management > System Log > Vi ew System Log [...]

Chapter 21 Logs P-663HN-51 User’s Guide 183 21.4 Configuring Log Settings Click Management > System Log > Configure System Log to display the following screen. Use this screen to config ure the lev el of eve nts to log and where to sen d logs. Figure 92 Managemen t > System Log > Configure System Log The following table describes t he[...]

Chapter 21 L ogs P-663HN-51 User’s Guide 184[...]

P-663HN-51 User’s Guide 185 C HAPTER 22 SNMP 22.1 SNMP Overview Simple Network Manageme nt Protocol is a protocol used for ex changing management information betw een network de vices. SNMP is a member of T CP/IP protocol suite. A manager station can moni tor the Z yXEL Device through the network via SNMP version one (SNMPv1) and/or SNMP version [...]

Chapter 22 SN MP P-663HN-51 User’s Guide 186 through which network administ rators perf orm network management functions. It executes applications that control and monitor managed devices. The managed devices contain object v ariables/managed objects that d efine each piece of info rmat ion to be collected abou t a device. Examples of variabl es [...]

Chapter 22 SNMP P-663HN-51 User’s Guide 187 22.2 SNMP Screen T o open this screen, click Advanced Application , Access Control , SNMP . Figure 94 SNMP The following table describes t he labels in this screen. T able 66 SNMP LABEL DESCRIPTION SNMP Agent Enable the SNMP agent to turn on SNMP on the Z yXEL Device. R ead Comm unit y Enter the get com[...]

Chapter 22 SN MP P-663HN-51 User’s Guide 188[...]

P-663HN-51 User’s Guide 189 C HAPTER 23 TR-069 Client 23.1 TR-069 Client Screen TR -069 is a protocol that defines how your Z yXEL Device can be managed via a management server such as Zy XEL ’ s V antage CNM Access. An administrator can use an Auto Configur ation Server (ACS) to remote ly se t up the Z yXEL device, modify set ti ngs, perform f[...]

Chapter 23 TR-069 Client P-663HN-51 User’s Guide 190 The following table describes t he fields in this screen. T able 67 Management > TR-069 Client LABEL DESCRIPTION Inform Select whether to Enable or Disable CPE WAN Management Protocol (CWMP) operation. Inform Interv al The interval between the device’ s attempt to connect to the Auto Confi[...]

P-663HN-51 User’s Guide 191 C HAPTER 24 Time This chapter covers how to set the time in the Z yXEL Device. 24.1 T ime Setup Click Management > Internet Ti me to open the following screen. Use this screen to configure how the Z yXEL Device synchronizes its internal clock with a time server on th e Int e rn et. Figure 96 Managemen t > Interne[...]

Chapter 24 T im e P-663HN-51 User’s Guide 192 Time Z one Choose the time zone of your location. This sets the time difference between your time zone an d Greenw ich Mean T ime (GM T). Save/Apply Click this button to save the changes and have the Z yXEL Device start using them. T able 68 Management > Internet T ime (continued) LABEL DESCRIPTION[...]

P-663HN-51 User’s Guide 193 C HAPTER 25 Access Control This chapter describes how to c onfigure access control. 25.1 Access Control Screen Use the access control screens to enable or disable service acc ess to the Z yXEL Device. 25.2 Service Access Control Screen T o open this screen, click Management > Access Control > Se rvices . Figure 9[...]

Chapter 25 Access Control P-663HN-51 User’s Guide 194 The following table describes t he labels in this screen. 25.3 IP Addresses This screen lists the IP addresses of t rusted computers that may manage the Z yXEL Device. T o open this screen, click Management > Access Contro l > IP Addresses . Figure 98 Management > Access Control > [...]

Chapter 25 Access Control P-663HN-51 User’s Guide 195 25.4 Adding IP Addresses Use this screen to add IP addresses of trus ted computers that ma y manage the Z yXEL Device. T o open this screen, click Management > Access Co ntro l > IP Addresses > Add . Figure 99 Management > Access Control > IP Addresse s > Add The following ta[...]

Chapter 25 Access Control P-663HN-51 User’s Guide 196 Note: The “support” user name and p assword for ISP technician login only works through the DSL connection. Figure 100 Management > Access Contro l > Passwords The following table describes t he labels in this screen. T able 72 Management > Access Control > Passwords LABEL DESC[...]

Chapter 25 Access Control P-663HN-51 User’s Guide 197 25.6 Authentication Click Management > Access Co ntrol > Authentication to open the following screen. Use this screen to set whether or not users must enter a user name and password to access the Z yXEL Device’ s system information summary page. Figure 101 Management > Access Contro[...]

Chapter 25 Access Control P-663HN-51 User’s Guide 198[...]

P-663HN-51 User’s Guide 199 C HAPTER 26 Update Software This chapter covers upgrading the Z yXEL Device’ s firmware. 26.1 Uploading Firmware The software embedded in the Z yXEL Device is called “firm ware” . Find firmware at www .zyxel.com in a file that (usually) uses the system model name wit h a .bin extension, for example, "Z yXEL [...]

Chapter 26 Update Software P-663HN-51 User’s Guide 200 The following table describes t he labels in this screen. Do NOT turn off the ZyXEL Devi ce while firmware upload is in progress! After you upl oad firmw are, wait befo re logging into the Z yXEL Device again. The Z yXEL Device automatically restarts caus ing a tempor ary network disconnect. [...]

P-663HN-51 User’s Guide 201 C HAPTER 27 Save/Reboot and Logout This chapter covers the save and reboot screen. 27.1 Save/Reboot Click Management > Save/Reboot to open the following screen. Click Save/ Reboot t o s a v e a l l o f y o u r Z y X E L D e v i c e ’ s s e ttings and reboot the without turning the power off . Figure 104 Management[...]

Chapter 27 Save/Reboot and Logout P-663HN-51 User’s Guide 202[...]

203 P ART IV T roubleshooting and S pecifications T roubleshooting (205) Product Specifications (209)[...]

204[...]

P-663HN-51 User’s Guide 205 C HAPTER 28 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Z yXEL Device Access and Login • Internet Access 28.1 Power , Hardware Connections, and LEDs Th[...]

Chapter 28 Tro u blesh oo tin g P-663HN-51 User’s Guide 206 2 Check the hardware connections. See Section 1 .4 on page 23 . 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the Zy XEL Device off and on. 5 If the problem continues, contac t the vendor . 28.2 ZyXEL Device Access and Login I forgot the IP [...]

Chapter 28 Troubleshooting P-663HN-51 User’s Guide 207 • If you changed t he IP address ( Section 6.2.1 on page 76 ), use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubleshooti ng suggestions for I forgot the IP address for the Z yXEL Device. 2 Check the hardware connections, and ma k e sure the LED[...]

Chapter 28 Tro u blesh oo tin g P-663HN-51 User’s Guide 208 1 Check the hardware connections, and ma k e sure the LEDs are behav i n g as expected. See Section 1.4 on page 23 and Section 1.5 on page 25 . 2 If your ISP ga ve you Internet connection information, make sure you entered it correctly in the Network > WAN > Internet Connection scr[...]

P-663HN-51 User’s Guide 209 C HAPTER 29 Product Specifications The following tables summarize the Z yXEL Device’ s hardware and firm ware features. T able 75 Device Specifications Dimensions (W x D x H) 25 5 x 165 x 63 mm P ower Specification 12 VDC 1.5 A Built-in S witch Four auto-negotiating, auto MDI/MDI- X (auto-crossover) 10/ 100 Mbps RJ-4[...]

Chapter 29 Product Specifications P-663HN-51 User’s Guide 210 ADSL Standards Multi-Mode standard (ANSI T1.41 3,Issue 2; G.dmt(G.992.1); G.lite(G992.2)). ADSL2 G.dmt.bis (G .992.3) ADSL2 G.lite.bis (G.992. 4) ADSL2+ (G.992.5) Reach-Ex tended ADSL (RE ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate adaptation ADSL physical connection A T[...]

Chapter 29 Product Specifications P-663HN-51 User’s Guide 21 1 Wireless Functionality Allows IEEE 802.11n, IEEE 802.11g and/or IEEE 802 .1 1b wireless clients to connect to the Z yXEL Device wirelessly . Enable wireless security (WPA(2)-PSK) and/or MAC filtering to protect your wireless network. Note: The ZyXEL Device may be prone to RF (Radio Fr[...]

Chapter 29 Product Specifications P-663HN-51 User’s Guide 212 IP Multicast IP multicast is used to send tr affic to a specific group of computers. The Zy XEL Device supports versions 1 and 2 of IGMP (Internet Group Management Protocol) used to join multicast groups (see RFC 2236). Time and Date Get the current time and date from an external serv [...]

Chapter 29 Product Specifications P-663HN-51 User’s Guide 213 29.1 DSL Connector Pin Assignment s The Z yXEL Device’ s RJ-14 DSL connector handles both the DSL 1 and DSL 2 connections. • Pins 3 and 4 are for DSL 1. • Pins 2 and 5 are for DSL 2. Figure 105 DSL Connect or Pin Assignments RFC 868 Time Protocol RFC 1305 Network Time Protocol (V[...]

Chapter 29 Product Specifications P-663HN-51 User’s Guide 214 29.2 Power Adaptor S pecifications T able 78 North American Plug Standards AC POWE R ADAPT OR MODEL 12V 1.5 A Switching P ower Ad apter INPUT POWER 100-240 VAC, 50/60 HZ, 0.5 A OUTPUT POWER 12 VDC, 1.5 A POWER CONSUMPTION 18 W M AX. SAFETY ST AND ARD S UL, CUL (UL 60950-1 FIRST EDITION[...]

215 P ART V Appendices and Index Setting Up Y our Computer ’ s IP Address (217) IP Addresses and Subnetting (253) P op-up Windows (201) Common Services (281) Legal Information (291) Customer Support (25) Index (295)[...]

216[...]

P-663HN-51 User’s Guide 217 A PPENDIX A Setting Up Y our Computer ’ s IP Address Note: Y our specific ZyXEL device ma y not support all of the operating systems described in this appendix. See the produc t specifications for mo re information about which operating systems are sup ported. This appendix shows you how to conf igure the IP setti ng[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 218 1 Click Start > Control Panel . Figure 106 Windows XP: S tart Menu 2 In the Control Panel , click the Network Connections icon. Figure 107 Windows XP: Control Panel[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 219 3 Right- click Local Area Connection and then select Properties . Figure 108 Windows XP: Control Panel > Ne twork Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties . Figure 109 Windows XP: Local Area Connec[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 220 5 The Internet Protocol TCP/IP Properties window opens. Figure 1 10 Windows XP: Internet Protocol (TCP/IP) Propertie s 6 Select Obtain an IP address automatically if your network admi nistrator or ISP assigns your IP addres s dynamically . Select Use the following IP[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 221 2 In the Command Prompt window , type "ipconfi g" and then press [ENTER]. Y ou can also go to Start > Control Panel > Network Connections , right-click a network connection , click Sta tus and then click the Support tab to view your IP address and conne[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 222 3 Click the Network and Sharing Center icon. Figure 1 13 Windows V ista: Network And Inter net 4 Click Manage network conne ctions . Figure 1 14 Windows V ista: Network and Sharing Cen ter 5 Right- click Local Area Connection and then select Properties . Figure 1 15 [...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 223 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties . Figure 1 16 Windows V ista: Local Area Connection Properties[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 224 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens. Figure 1 17 Windows V ista: Internet Protocol V ersion 4 (TCP/IPv4) Properties 8 Select Obtain an IP address automatically if your network admi nistrator or ISP assigns your IP addres s dynamicall[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 225 2 In the Command Prompt window , type "ipconfi g" and then press [ENTER]. Y ou can also go to Start > Control Panel > Network Connections , right-click a network connection , click Sta tus and then click the Support tab to view your IP address and conne[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 226 2 In the System Preferences window , click the Network icon. Figure 1 19 Mac OS X 10.4: System Preferences 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 120 Mac OS X 10.4: N[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 227 4 For d ynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 121 Mac OS X 10.4: Network Preferences > TCP/IP T ab. 5 For s tatically assigned settings, do t he following: •F r o m t h e Configure IPv4 list, select [...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 228 •I n t h e Router field, t ype the IP address of your device. Figure 122 Mac OS X 10.4: Network Preferences > Ethernet 6 Click Apply Now and close the window . V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network [...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 229 Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences . Figure 124 Mac OS X 10.5: Apple Menu 2 In System Preferences , click the Net work icon. Figure 125 Mac OS X 10.5: Systems Preferences[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 230 3 When the Network preferences pane opens, select Ethe rnet from the list of available conn ecti on ty pes. Figure 126 Mac OS X 10.5: Network Preferences > Ethernet 4 From the Configure lis t, sele ct Using DHCP for dynamically assigned settings. 5 For s tatically[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 231 •I n t h e Router field, enter the IP address of your Z yXEL Device. Figure 127 Mac OS X 10.5: Network Preferences > Ethernet 6 Click Apply and close the wi nd ow .[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 232 V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities , and then selecting the appropriat e Network interface from the Info tab. Figure 128 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section s[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 233 1 Click System > Administration > Network . Figure 129 Ubuntu 8: System > Administration Menu 2 When the Network Settings wi ndow opens, click Unl ock to open the Authenticate window . (By default, the Unloc k button is greyed out until clicked. ) Y ou cannot [...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 234 3 In the Authenticate window , enter your admin a ccount name and password then click the Authenticate button. Figure 131 Ubuntu 8: Administrator Account Authentication 4 In the Network Settings window , select the connection that you wa nt to configure, then click P[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 235 5 The Properties dialog box opens. Figure 133 Ubuntu 8: Network Settings > Properties •I n t h e Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. •I n t h e Configuration li st, select Static IP address if you hav e a s[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 236 7 If you know yo ur DNS server IP address(es), click the DNS tab in the Net work Settings window and then enter the DNS se rv er information in the fields provided. Figure 134 Ubuntu 8: Network Settings > DNS 8 Click the Close button to apply the changes. V erifyi[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 237 tab. The Interface Statistics column shows data if your connection is working properly . Figure 135 Ubuntu 8: Network T ools Linux: openSUSE 10.3 (KDE) This section shows y ou how to configure y o ur computer’s T CP/IP settings in the K Desktop Environment (KDE) usin[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 238 1 Click K Menu > Computer > Administrator Se ttings (YaST) . Figure 136 openSUSE 10.3: K Menu > Computer Menu 2 When the Run as R oot - KDE su dialog opens, enter the admin password and click OK . Figure 137 openSUSE 10.3: K Menu > Computer Menu[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 239 3 When the YaST Contro l Center window opens, select Network Devices and then clic k the Network Card icon. Figure 138 openSUSE 10.3: Y aST Control Center 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the [...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 240 5 When the Network Card Setup window opens, click the Address tab Figure 140 openSUSE 10.3: Ne twork Card Setup 6 Select Dynamic Address (DHCP) if you ha ve a dynamic IP add ress. Select Statically assigned IP Address if y ou ha ve a static IP address. Fill in the IP[...]

Appendix A Setting Up Your Computer’s IP Address P-663HN-51 User’s Guide 241 8 If you know yo ur DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server informat ion in the fields provided. Figure 141 openSUSE 10.3: Ne twork Settings 9 Click Finish to sa ve your settings and close the window .[...]

Appendix A Se tting Up Your Computer’s IP Addres s P-663HN-51 User’s Guide 242 V erifying Settings Click the KNetwork Manager icon on the Task bar t o check your T CP/IP properties. From the Option s sub-m enu, se lect Show Connectio n Information . Figure 142 openSUSE 10.3: KNet work Manager When the Connection Statu s - KNetwork Manager windo[...]

P-663HN-51 User’s Guide 243 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by default). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screens for other [...]

Appendix B Po p-up Window s, JavaScrip ts and Java Permissions P-663HN-51 User’s Guide 244 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 145 Internet Options: Privacy 3 Click[...]

Appendix B Pop-up Windows, JavaScripts and Java Permissions P-663HN-51 User’s Guide 245 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 146 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) wi th the prefix “http://” . For example, http://192.168.167.1.[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Permissions P-663HN-51 User’s Guide 246 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 147 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configur ator do not display properly [...]

Appendix B Pop-up Windows, JavaScripts and Java Permissions P-663HN-51 User’s Guide 247 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 148 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected (the default[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Permissions P-663HN-51 User’s Guide 248 6 Click OK to close the window . Figure 149 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM . 4 Under[...]

Appendix B Pop-up Windows, JavaScripts and Java Permissions P-663HN-51 User’s Guide 249 5 Click OK to close the window . Figure 150 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Permissions P-663HN-51 User’s Guide 250 3 Click OK to close the window . Figure 151 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Java, Javascript s and pop-ups in one screen. Click Tools, then click Options in the s[...]

Appendix B Pop-up Windows, JavaScripts and Java Permissions P-663HN-51 User’s Guide 251 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 153 Mozilla Firefox Content Security[...]

Appendix B Po p-up Window s, JavaScrip ts and Java Permissions P-663HN-51 User’s Guide 252[...]

P-663HN-51 User’s Guide 253 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are al[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 254 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 154 Network Number and Host ID How much of the IP address is the networ k number and how much is the host ID var[...]

Appendix C IP Addresses and Subnetting P-663HN-51 User’s Guide 255 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits w[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 256 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us ua lly spe[...]

Appendix C IP Addresses and Subnetting P-663HN-51 User’s Guide 257 The following figure shows the company network before subnetting. Figure 155 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.255.128 or /2[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 258 The following figure shows the company network after subnet ting. There are now two sub-n etworks, A and B . Figure 156 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host[...]

Appendix C IP Addresses and Subnetting P-663HN-51 User’s Guide 259 Each subnet contains 6 host ID bit s, giving 2 6 - 2 or 62 hosts for each subnet (a host ID of all zeroes i s the subnet it self , all ones is the subnet’s broadcast address). T able 83 Subnet 1 IP/SUBNET MASK NETWORK N UMBER LAST OCTET BIT VA L U E IP Address (Decimal) 192.168.[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 260 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. Subnet Planning The following table is a summary for subnet planning on a network wi[...]

Appendix C IP Addresses and Subnetting P-663HN-51 User’s Guide 261 The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrat or assigns you a block of registered IP addre[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 262 address that you entered. Y ou don't need to change the subnet mask computed by the Z yXEL Device unless you are instructed to do otherwise. Private IP Addresses Every machine on the In ternet must ha ve a uni que address. If your ne tworks are isolated from the Internet (ru[...]

Appendix C IP Addresses and Subnetting P-663HN-51 User’s Guide 263 address to computer A or setting computer A to obtain an IP address automatically . Figure 157 Conflicting Compute r IP Addres ses Examp le Conflicting Router IP Addresses Example Since a router connects different networks, it must have inte rfaces u sing di fferent network number[...]

Appendix C IP Addresses a nd Subnetting P-663HN-51 User’s Guide 264 The computer cannot access the Internet. This prob lem can be solved by assigning a different IP address to t he computer or the router ’ s LAN port. Figure 159 Conflicting Compu ter and Router IP Addresses Example[...]

P-663HN-51 User’s Guide 265 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discuss es ad-hoc and infr astructure wi reless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configur ation is an in depend ent (Ad-hoc) WLAN that connect s a set of computers with wireless adapters (A, B, C). An y time two or more [...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 266 with each other . When Intra-BS S is disabled, wireless cli ent A and B can still access the wired network but cannot communicate with eac h other . Figure 161 Basic Service Set ESS An Extended Service Set (ESS) c onsists of a series of overlapping BS Ss, each containing an access point, with e[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 267 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate. Figure 162 Infrastructure WLAN Channel A channel is the r adio frequency(i es) used by wireless devi ce[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 268 wireless gatewa y , but out-of -range of ea ch other , so they canno t "h ear" each other , that is they do not know if the channel is currently being used. Therefore, they are consider ed hi dden from each other . Figure 163 RTS / C T S When station A sends data to the AP , it might [...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 269 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames. A large Fragmentation Threshold is recommended for networks not prone to[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 270 sever al intermediate rate steps between the maximum and minimum data r ates. The IEEE 802.11g data rate and modulation are as follows: Wireless Security Overview Wireless security is vital to your ne twork to protect wireless communication between wireless client s, ac ce ss points and t he wi[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 271 IEEE 802.1x In June 2001, the IEEE 802.1x standard w a s designed to extend the features of IEEE 802.11 to support extended authentica tion as well as providing addi tional accounting and control features. It is su pported by Windows XP and a number of network devices. Some advantages of IEEE 8[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 272 • Access-Challeng e Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message . The following types of RADIUS messages are exchanged between the access point and the RADIU[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 273 However , MD5 authen tication ha s some weaknesses. Since the authentication server needs to get the plaintext password s, t he p assword s must be stored. Thus someone other th an the authenti c a tion server may access th e p a s sw ord fi le. In addition, it is possible to impersonate an aut[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 274 Dynamic WEP Key Exchange The AP maps a unique key that is generated with t he RADIUS server . This key expires when the wireless connection ti me s out, disconnec ts or reauthentication times out. A new WEP key is generated ea ch time reauthenticati on is performed. If this feature is enabled, [...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 275 If the AP or the wireless clients do no t support WP A2, just use WP A or WP A -PSK depending on whether you hav e an external RADIUS server or not. Select WEP only when the AP and/or wirel ess clients do not support WPA or WP A2. WEP is less secure than WP A or WP A2. Encryption WP A improves [...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 276 keys. This prev ent all wireless d evices sharing the same encryption ke ys. (a weakness of WEP) User Authentication WP A and WPA2 apply IEEE 802.1x and Extens ible Authentication Protocol ( EAP) to authenticate wireless clients using an ex ternal RADIUS database. WPA2 reduces the number of key[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 277 4 The RADIUS server distributes the PMK to the AP . The AP th en se ts up a key hierarchy and management system, usin g the PMK to dynamica lly generate unique data encryption k eys. The k eys are used to encrypt every data packet that is wirelessly communicated bet ween the AP and the wireless[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 278 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tempor al encryption keys. They use these keys to encrypt data exchanged between them. Figure 165 WP A(2)-PSK Authentication Security Parameters Summary Re fer to thi[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 279 Antenna Overview An antenna couples RF signals onto air . A tr ansmitter within a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air . P ositioning the antennas properly incr[...]

Appendix D Wireless LANs P-663HN-51 User’s Guide 280 • Omni-directional antennas send the RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a room environment. With a wide cove rage area, it is possible to make circular ov erlapping cov erage areas wit[...]

P-663HN-51 User’s Guide 281 A PPENDIX E Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive [...]

Appendix E Com mon Servic es P-663HN-51 User’s Guide 282 ESP (IPSEC_TUNNEL) User -Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr am to e[...]

Appendix E Common Services P-663HN-51 User’s Guide 283 PPTP TCP 1723 Point -to-P oint T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel. PPTP_TUNNEL (GRE) User -Defined 47 PPTP (P oint -to-Point T unne ling Protocol) enables secure transfer of data over public networks. This is the data channel[...]

Appendix E Com mon Servic es P-663HN-51 User’s Guide 284 TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) r ather than TCP (T ransmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. T able 94 Commonly Used Services (continued) [...]

P-663HN-51 User’s Guide 285 A PPENDIX F Open Sof tware Announcement s End-User License Agreement for "P-663HN-51" Note: W ARNING: ZyXEL Co mmunications Corp. IS WILLING T O LICENSE THE ENCLOSED SOFTW ARE T O YOU ONL Y UPON THE CONDITION THA T YOU ACCEPT ALL OF THE TERMS CONT AINED IN THIS LICENSE AGREEMENT . PLEASE READ THE TERMS CAREFU[...]

Appendix F Op en Software Announceme nts P-663HN-51 User’s Guide 286 3.Copyrigh t The Software and Documentation contain mat erial that is protected by Uni ted States Copy right Law and trade se cret law , and by international treaty provisions. All rights not gr anted to you herein are ex pressly reserved by Z yXEL. Y ou may not remove any propr[...]

Appendix F O pen Software Announcem ents P-663HN-51 User’s Guide 287 5.Confidentiality Y ou acknowledge that the Software contai ns propriet ary trade secr ets of Z yXEL and you hereby agree to maintain the confidenti ality of the Software using at least as great a degree of care as you use to maintai n the confidentiality of your own most confid[...]

Appendix F Op en Software Announceme nts P-663HN-51 User’s Guide 288 NOT ALL OW THE EXCLUSION OR LIMIT A TION OF LIABILITY FOR CONSE QUENTIAL OR INCIDENT AL DAMAGES, THE ABOVE LIMIT A TION MA Y NO T APPL Y TO Y OU. 8.Export R estrictions THIS LICENSE AGRE EM ENT IS EXPRES SL Y MADE SUBJECT T O ANY APPLICABLE LAWS, REGULA TIONS, ORDERS, OR OTHE R [...]

Appendix F O pen Software Announcem ents P-663HN-51 User’s Guide 289 exclusiv e forum for any disput es arising out of or rel ating to this License Agreement shall be an appr opriate court or Com m e rc i al A r b itration As so ciation sitting in ROC, T aiwan. This License Agreement shall constitute the entire Agreement between the parties heret[...]

Appendix F Op en Software Announceme nts P-663HN-51 User’s Guide 290[...]

P-663HN-51 User’s Guide 291 A PPENDIX G Legal Information Copyright Copyright © 2009 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electronic, mec[...]

Appendix G Legal Information P-663HN-51 User’s Guide 292 • This device may not cause harmful interference. • This dev ice must acc e pt any interf erence received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 15 of th[...]

Appendix G Legal Information P-663HN-51 User’s Guide 293 受合法通信或工業、科學及醫療 用電波輻射性電機設備之干擾。 本機限在不干擾合法電臺與不受 被干擾保障條件下於室內使用。 減少電磁波影響，請妥適使用。 Notices Changes or modifications not expressly appro ved by the party respon[...]

Appendix G Legal Information P-663HN-51 User’s Guide 294 including any implied w arr anty of merchantability or fitness for a particul ar use or purpose. Z yXEL shall in no event be hel d liable for indirect or consequential damages of any ki nd to the purchaser . T o obtain the services of this warr anty , contact Z yXEL's Service Center fo[...]

Index P-663HN-51 User’s Guide 295 Index Numerics 10/100 Mbps 209 A access control 193 adding IP address es 195 IP addresses 194 passwords 195 services 193 ADSL setup 127 ADSL standards 210 ADSL synchronization test 175 Advanced Encryption Standard See AES. AES 275 alternative subnet mask notation 256 antenna directional 280 gain 279 omni-directio[...]

Index P-663HN-51 User’s Guide 296 default LAN IP address 27 device management 23 device model number 199 DHCP 48 , 76 , 210 static 82 DHCP vendor IDs 13 2 diagnostics 175 DiffServ (Differentiated Services) 104 DiffServ Code P oint (DSCP) 104 DiffServ marking rule 105 dimensions 209 disclaimer 291 DMZ host 90 DNS 121 domain name system see DNS dou[...]

Index P-663HN-51 User’s Guide 297 Internet access 22 Internet access blocking 99 Internet Assigned Numbers Authority See IANA 262 see IANA 77 Internet Group Management Protocol see IGMP Internet time 191 IP address 76 , 209 IP addresses access control 194 adding in access control 195 IP filtering 93 , 95 IP precedence 104 L LAN connection test 17[...]

Index P-663HN-51 User’s Guide 298 PPP 210 PPP session over Ethernet (PPP over Ethernet, RFC 2516) 59 preamble mode 269 product registration 29 4 PSK 275 public-private ke y pairs 139 PVC (Permanent Virtual Circuit) 59 Q QoS 104 classifier 107 classifiers 109 queues 107 QoS class configuration 109 Quality of Service (QoS) 103 R RADIUS 271 message [...]

Index P-663HN-51 User’s Guide 299 T oS (T ype of Service) 104 trademar ks 291 traffic shaping 54 trigger port forwarding 87 trusted CA 134 , 136 importing 135 U unicast 70 upgrading firmware 199 uploading firmware 199 UPnP 78 application 78 security issues 79 user names 209 V VC 53 permanent virtual circuit see PVC VCC 42 VCI 53 viewing system lo[...]

Index P-663HN-51 User’s Guide 300[...]