ZyXEL Communications P-870HW-I manuale d’uso

P-870HW -I Series 802.1 1g Wireless VDSL2 4-port Gateway User ’ s Guide V ersion 3.50 8/2006 Edition 1[...]

[...]

P-870HW-I1 User’s Guide Copyright 3 Copyright Copyright © 2006 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, tr anscribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mech anical , magnetic, optical[...]

P-870HW-I1 User’s Guide 4 Certifications Certifications Federal Communications Commissi on (FCC) Interference St atement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference rece ived, including interfer[...]

P-870HW-I1 User’s Guide Certifications 5 第十二條 經型式 認證合格之低功率射頻電機，非經 許可，公司、商號或使用 者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 第十四條 低功率 射頻電機之使用不得影響飛航安全 及干擾合法通信；經發現 有干擾現象?[...]

P-870HW-I1 User’s Guide 6 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • Do NOT use this product near water , for exam ple, in a wet basement o r near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the devi[...]

P-870HW-I1 User’s Guide Safety Warnings 7 This product is recyclable . Dispose of it properly .[...]

P-870HW-I1 User’s Guide 8 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have ind icati[...]

P-870HW-I1 User’s Guide Customer Support 9 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t. METHOD LOCATION SUPPORT E-M[...]

P-870HW-I1 User’s Guide 10 Customer Suppo rt +” is the (prefix) number you enter to make an interna tional telephone call. NORWAY support@zyxel.no +47-22-80-61-80 www .zyxel.no ZyXEL Communications A/S Nils Hansens vei 13 0667 Oslo Norway sales@zyxel.no +47-22-80-61-81 POLAND info@pl.zyxel.com +48 (22) 333 8250 www .pl.zyxel.com ZyXEL Communica[...]

P-870HW-I1 User’s Guide Table of Contents 11 T able of Content s Copyright .................................................. .......................................... ...................... 3 Certifications ............................................ .......................................... ...................... 4 Safety W arnings .........[...]

P-870HW-I1 User’s Guide 12 Table of Contents 3.2 Welcome Screen .................... ............. ................ ............. ................ ............. .....56 3.3 System Inf ormation Screen .......................... ............. ................ ............. ............ 56 3.4 Wireless LAN Screen ................... ................[...]

P-870HW-I1 User’s Guide Table of Contents 13 Chapter 6 Wireless LAN ................................................................. ......................................... 93 6.1 Wireless Network Overview ...................... ............. ............. ................ ............. ..93 6.2 Wireless Security Overview .....................[...]

P-870HW-I1 User’s Guide 14 Table of Contents 8.1.4 LAN IP Alias .. ................ ............. ............. ................ ............. ............ ....... 128 8.2 LAN IP Screen ............................. ............. ............. ................ ............. ............. 129 8.3 LAN IP Alias Screen ........... ............. .....[...]

P-870HW-I1 User’s Guide Table of Contents 15 1 1.3 Guidelines for Enhancing Security wi th Y our Firewall ....................... ............. 153 1 1.3.1 Security In G eneral ........... ....... ... ................ ............. ................ ............. 153 1 1.4 G eneral Firewall Screen ................ ................. ............ ..[...]

P-870HW-I1 User’s Guide 16 Table of Contents Chapter 15 Bandwid th MGMT .......................... ........................................... ............................ 197 15.1 Bandwidth Management Overview ..... .......... ............ ................. ............ ....... 197 15.1.1 Priority-based Sched uler ..... ................. .......[...]

P-870HW-I1 User’s Guide Table of Contents 17 Chapter 18 System ............ .................................................... ........................................... ....... 229 18.1 General Setup .. .......... ............. ................ ............. ............. ................ ............. 229 18.1.1 General Setup and System Name[...]

P-870HW-I1 User’s Guide 18 Table of Contents 24.3 IP Alias Setup .......... ............. ................ ................ ............. ................ ............. 262 24.4 Wireless LAN Set up ................... ................ ............. ................ ............. .......... 263 24.5 WLAN MAC Address Filter ................ .......[...]

P-870HW-I1 User’s Guide Table of Contents 19 30.6 Applying a Filter ........................... .... ............. ............ ................. ............ .......300 30.6.1 Applying LAN Filter s ................ ............. ............ ................. ............ ....... 300 30.6.2 Applying Remote No de Filters .................... ....[...]

P-870HW-I1 User’s Guide 20 Table of Contents 35.4.7 Uploading Firmware F ile Via Console Port .... ................ ................ ....... 329 35.4.8 Example Xmodem Firmware Upload Using HyperT erminal ..... ............. 330 35.4.9 Uploading Configurat ion File Via Console Port .......................... .......... 330 35.4.10 Example Xmodem C[...]

P-870HW-I1 User’s Guide Table of Contents 21 Appendix B Setting up Your Computer’s IP Address ............................................................ 365 Windows 95/98/Me ........ ................ ................ ............. ................ ............. ............... 365 Windows 2000/NT/XP ............ ............. ................[...]

P-870HW-I1 User’s Guide 22 Table of Contents Example Internal SPTGEN Menus ......... ....... .......... ............ ................. ............ ...... 418 Appendix I Services .......... .................................................... ........................................... ....... 431 Index ..................................... .....[...]

P-870HW-I1 User’s Guide List of Figure s 23 List of Figures Figure 1 Applications: Protecte d Internet Access .................. ................ ................ ............. 43 Figure 2 Applications: Management Server ................. ................ ................ ................ ....... 43 Figure 3 LEDs .......... ................. ....[...]

P-870HW-I1 User’s Guide 24 List of Figures Figure 39 S tatus .............. ............. ............. ................ ............. ................ ............. ............ .... 85 Figure 40 S tatus > BW MGMT Monitor .............. ................. ............ ................. ................ ... 88 Figure 41 S tatus > DHCP T able[...]

P-870HW-I1 User’s Guide List of Figure s 25 Figure 82 Ideal Firewall Setup .. ............ ................. ............. ............ ................. ............ ....... 151 Figure 83 “T riangle Route” Problem ................ ............. ............. ............. ................ ............. 152 Figure 84 IP Alias ............ ...[...]

P-870HW-I1 User’s Guide 26 List of Figures Figure 125 Add/Remove Progra ms: Windows Setup: Communication ..................... .......... 219 Figure 126 Add/Remove Progra ms: Windows Setup: Communication: Components ..... ... 220 Figure 127 Network Connections .............. ................ ................ ............. ................ .......[...]

P-870HW-I1 User’s Guide List of Figure s 27 Figure 168 Menu 1 1.1.5: Traf fi c Redirect Setup ..... ............. ................ ............. ................ ... 274 Figure 169 Menu 12: IP S tatic Route Setup ........................ ................ ................ ................ 275 Figure 170 Menu 12.1: Edit IP S tatic Route . ...... ..[...]

P-870HW-I1 User’s Guide 28 List of Figures Figure 21 1 Menu 24.6: Restore C onfiguration ... ....................... ............. ................ ............. 325 Figure 212 Menu 24.7: System Maintenance - Upload Firmware .................... ................ ... 325 Figure 213 Menu 24.7.1: System Maintenance - Upload System Firmware .........[...]

P-870HW-I1 User’s Guide List of Figure s 29 Figure 254 Macintosh OS X: Network ................ ................. ................ ............. ................ ... 374 Figure 255 Red Hat 9.0: KDE: Network Configur ation: D evices ..................... ............ ....... 375 Figure 256 Red Hat 9.0: KDE: Ethernet Device: General ...............[...]

P-870HW-I1 User’s Guide 30 List of Figures[...]

P-870HW-I1 User’s Guide List of Tables 31 List of T ables T able 1 LEDs ..................... ............. ............. ................ ............. ................ ............. ........ ..... 44 T able 2 Web Configurator: Navigation Panel and Icons . ................ .................... ................ 50 T able 3 Main Wizard Screen ....[...]

P-870HW-I1 User’s Guide 32 List of Tables T able 39 Network > Wireless LAN > General > 802.1x + Dynamic WEP .......................... 102 T able 40 Network > Wireless LAN > General > 802.1x + S tatic WEP ... ................ ............. 104 T able 41 Network > Wireless LAN > General > 8 02.1x + No WEP ...............[...]

P-870HW-I1 User’s Guide List of Tables 33 T able 82 Security > C ertificates > Trusted Remote Hosts > Edit ............................. .......... 188 T able 83 Security > C ertificates > Directory Servers ...... ................ ................. ................ ... 190 T able 84 Security > Certific ates > Directory Serv e[...]

P-870HW-I1 User’s Guide 34 List of Tables T able 125 Menu 1 1.1.4: Remote Node Filter ......... ............. ............ ................. ............ ....... 273 T able 126 Menu 1 1.1.5: T raffic Redirect Setup ..... ............. ................ ............. ............ ....... 274 T able 127 Menu 12: IP St atic Route Setup . ............[...]

P-870HW-I1 User’s Guide List of Tables 35 T able 168 Dev ice S pecif ications .. ................ ................ ............. ................ ................ .......... 363 T able 169 Net BIOS Filter Default Set tings ..................... ................ ................. ............ ....... 380 T able 170 NA T Definit ions ..............[...]

P-870HW-I1 User’s Guide 36 List of Tables[...]

P-870HW-I1 User’s Guide Preface 37 Preface Congratulations on you r purchase of the P-87 0HW -I1 (“ZyXEL Device“) VDSL router with built-in IEEE 802.1 1g wireless capability . This ZyXEL Device also has a 4-port hub that allows you to connect up to 4 computers to the ZyXEL Device without purchasing a switch/ hub. About This U ser's Guide[...]

P-870HW-I1 User’s Guide 38 Preface User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp., 6 Inno vatio n Road II, Science-Based Industrial Park, Hsinchu, 300, T aiwa n. Than[...]

P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 39 C HAPTER 1 Getting T o Know Y our ZyXEL Device This chapter describes the key features and applications of your ZyXEL Device . 1.1 Introducing the ZyXEL Device Y our ZyXEL Device is a VDSL router that provid es super high-spe ed Internet access through a telephone line. The Zy[...]

P-870HW-I1 User’s Guide 40 Chapter 1 Getting To Kn ow Your ZyXEL Device TR-069 Compliance TR-069 is a protocol that de fines how your ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Acce ss. The management server can securely manage and update configuration changes in ZyXEL Devices. PPPoE (RFC2516) PPPoE (Poin[...]

P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 41 Media Bandwid t h Management ZyXEL ’ s Media Bandwidth Management allows yo u to specify bandwidt h classes based on an application and/or subnet. Y ou can allocate specific amounts of bandwidth capacity (bandwidth budgets) to dif ferent bandwidth classes. Universal Plug and[...]

P-870HW-I1 User’s Guide 42 Chapter 1 Getting To Kn ow Your ZyXEL Device Note: The ZyXEL Device may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as micr owave ovens, wireless p hones, Bluetooth enabled devices, and other wireless LANs. Wi-Fi Protected Access and WP A2 W i-Fi Protected Access (WP A) is a subset of t[...]

P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 43 Figure 1 Applications: Protected Internet Access 1.3.2 Manage ment Server Y our ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Access. The management server can secure ly manage and update configuration changes for you. Figure 2 Applicatio[...]

P-870HW-I1 User’s Guide 44 Chapter 1 Getting To Kn ow Your ZyXEL Device The following table describes the LEDs. 1.5 Splitters and Microfilters This section describes how to connect VDSL splitters and micr ofilters. See your Quick Start Guide for details on other hardware connections. 1.5.1 Connecting a POTS Splitter Y ou can use a POTS (Plain Old[...]

P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 45 Figure 4 Connecting a POTS S plitter 1 Connect the side labeled “Phone” to your telephone. 2 Connect the side labeled “Mo dem” or “DSL” to your ZyXEL Devic e. 3 Connect the side labeled “Lin e” to the telephone wall jack. 1.5.2 T elephone Microfilters T elephon[...]

P-870HW-I1 User’s Guide 46 Chapter 1 Getting To Kn ow Your ZyXEL Device[...]

P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 47 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy ZyXEL Device setup and management via Internet brow[...]

P-870HW-I1 User’s Guide 48 Chapter 2 Introducing the Web Configurator Figure 6 Login Screen 3 The Password field may already contain the defa ult password 1234 . If it does not, enter it. Click Login . The following screen appears. Figure 7 Login: Change Password Screen 4 Follow the directions to change your password, or click Cancel to keep the [...]

P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 49 Figure 8 Login: Replace Certificate Screen 5 Follow the directions in this screen. If you click Ignor e , this screen appears the next time you log in. Afterwards, th e following screen appears. Figure 9 Login: Select Mode Screen 6 Select Go to Wizard setup to use the wi zards[...]

P-870HW-I1 User’s Guide 50 Chapter 2 Introducing the Web Configurator Figure 10 Main Screen Note: Click the icon (located in the upper right corner of most screens) to view embedded help. The panel on the left side is the navigation panel. Y ou can use this panel to open various screens in the web confi gurator . The following table describes the[...]

P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 51 Wireless LAN General Use this screen to configure basic wireless settings and wireless security . OTIST Use this screen to activate ZyXEL’ s One -T ouch Intelligent Security T echno logy (OTIST), which assigns the ZyXEL Device’s wireless security settings to OTI ST -compat[...]

P-870HW-I1 User’s Guide 52 Chapter 2 Introducing the Web Configurator Certificates My Certificates Use this screen to add, modify , or remove the ZyXEL Device’s current certificates. T rusted CAs Use this scre en to add, modi fy , or remove certificates for other computers. T rusted Remote Hosts Use this screen to add, modify , or remove certif[...]

P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 53 2.4 Resetting the ZyXEL Device Reset the ZyXEL Device in the following situations: • Y ou forgot your password. • Y ou cannot access the device using th e web c onfigurator or SMT . Check T roubleshooting to make sure you cannot access the device anymore. If you reset the [...]

P-870HW-I1 User’s Guide 54 Chapter 2 Introducing the Web Configurator[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 55 C HAPTER 3 Connection W izard This chapter provides informa tion on the W izard Setup scree ns for wireless settings and Internet access in the web configurator . 3.1 Main Wizard Screen Use this screen to select wh ich wizard you want to run. Figure 1 1 Main Wizard Screen The following table [...]

P-870HW-I1 User’s Guide 56 Chapter 3 Connection Wizard 3.2 W elcome Screen Use this screen to look at a preview of the Connection W izard . Figure 12 Connection Wizard: W elcome The following table describes the labels in this screen. 3.3 System Information Screen Use this screen to set up the system name and domain name for y our ZyXEL Device. T[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 57 Figure 13 Connection Wizard: System Informatio n The following table describes the labels in this screen. 3.4 Wireless LAN Screen Use this screen to set up the basic settings for your wireless network. Table 5 Connection Wizard: System Information LABEL DESCRIPTION System Name Choose a descri[...]

P-870HW-I1 User’s Guide 58 Chapter 3 Connection Wizard Figure 14 Connection Wizard: Wire less LAN The following table describes the labels in this screen. Table 6 Connection Wizard: Wireless LAN LABEL DESCRIPTION Name(SSID) The Service Set IDentity (SSID) is the na me of the wireless network. Every wirele ss client in the same wireless network mu[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 59 3.5 Wireless Security Screens The next screens depend o n which type of Security you select in the previous screen. 3.5.1 Wireless Security: None Use this screen to enable OTIST for your wireless network. Figure 15 Connection Wizard: Wireless Security: None The following table describes the l[...]

P-870HW-I1 User’s Guide 60 Chapter 3 Connection Wizard Figure 16 Connection Wizard: Wireless Secu rity : Basic Security Screen 1 The following table describes the labels in this screen. 3.5.3 Wireless Security: Basic Security Screen 2 Use this screen to enable OTIST for your wireless network. Table 8 Connection Wiza rd: Wireless Se curity: Basic [...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 61 Figure 17 Connection Wizard: Wireless Secu rity : Basic Security Screen 2 The following table describes the labels in this screen. 3.5.4 Wireless Security: Auto Use this screen to enable OTIST for your wireless network. Table 9 Connection Wiza rd: Wireless Se curity: Basic Se curity Screen 2 [...]

P-870HW-I1 User’s Guide 62 Chapter 3 Connection Wizard Figure 18 Connection Wizard: Wireless Security: Auto The following table describes the labels in this screen. 3.5.5 Wireless Security: Exte nd (WP A-PSK) Security Screen 1 Use this screen to set up the WP A pre -shared key for your wireless network. Table 10 Connection Wizard: Wireless Securi[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 63 Figure 19 Connection Wizard: Wireless Security: Extend (WP A-PSK ) Se curity Scre en 1 The following table describes the labels in this screen. 3.5.6 Wireless Security: Exte nd (WP A-PSK) Security Screen 2 Use this screen to enable OTIST for your wireless network. Table 11 Connection Wizard: [...]

P-870HW-I1 User’s Guide 64 Chapter 3 Connection Wizard Figure 20 Connection Wizard: Wireless Security: Extend (WP A-PSK ) Se curity Scre en 2 The following table describes the labels in this screen. 3.5.7 Wireless Security: Extend (WP A2-PSK) Security Screen 1 Use this screen to set up the WP A2 pr e-shared key for your wireless network. Table 12[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 65 Figure 21 Connection Wizard: Wireless Security: Extend (WP A 2-PSK) Security Screen 1 The following table describes the labels in this screen. Table 13 Connection Wizard: Wireless Security: Extend (WP A 2-PSK) Security Screen 1 LABEL DESCRIPTION Pre-Shared Key T ype a pre-shared key from 8 to[...]

P-870HW-I1 User’s Guide 66 Chapter 3 Connection Wizard 3.5.8 Wireless Security: Extend (WP A2-PSK) Security Screen 2 Figure 22 Connection Wizard: Wireless Security: Extend (WP A 2-PSK) Security Screen 2 The following table describes the labels in this screen. 3.6 Auto-Detection Screen W ait while your ZyXEL Device tries to detect your Internet co[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 67 Figure 23 Connection Wizard: Inter net Connection: Auto-Detection 3.7 ISP Parameters Screen Use these screens to set up you r Internet connection. The screen depends on which type of Connection T ype your Internet connection uses. If your ISP provided you a u ser name and password, select PPP[...]

P-870HW-I1 User’s Guide 68 Chapter 3 Connection Wizard Figure 24 Connection Wizard: ISP Par ameters: Ethernet The following table describes the labels in this screen. 3.7.2 ISP Parameters: PPPoE Screen Use this screen to set up a P PPoE connection t o the Internet. Table 15 Connection Wizard: ISP Par ameters: Ethernet LABEL DESCRIPTION Connection[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 69 Figure 25 Connection Wizard: ISP Parameters: PPPoE The following table describes the labels in this screen. 3.8 IP Address T ype Screen Use this screen to specify what type of IP address your ISP provides. Table 16 Connection Wizard: ISP Parameters: PPPoE LABEL DESCRIPTION Connection T yp e S[...]

P-870HW-I1 User’s Guide 70 Chapter 3 Connection Wizard Figure 26 Connection Wizard: IP Add ress T ype The following table describes the labels in this screen. 3.9 St atic IP Address Settings Screen Use these screens to set up a static IP ad dress. The screen depends on which type of Connection T ype your Internet connection uses. 3.9.1 St atic IP[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 71 Figure 27 Connection Wizard: S tatic IP Address: Ethernet The following table describes the labels in this screen. 3.9.2 ISP Parameters: PPPoE Screen Use this screen to set up a P PPoE connection t o the Internet. Table 18 Connection Wizard: S tatic IP Address: Ethernet LABEL DESCRIPTION My W[...]

P-870HW-I1 User’s Guide 72 Chapter 3 Connection Wizard Figure 28 Connection Wizard: ISP Parameters: PPPoE The following table describes the labels in this screen. 3.10 MAC Address Screen Use this screen to specify which MAC address the ZyXEL Device should use. Table 19 Connection Wizard: ISP Parameters: PPPoE LABEL DESCRIPTION My W AN IP Address [...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 73 Figure 29 Connection Wizard: MAC Address The following table describes the labels in this screen. Table 20 Connection Wizard: MAC Addr ess LABEL DESCRIPTION Fa ct ory d efa ul t Select this, unless you have spoofed (cl oned) your computer ’s MAC address before. S poof th is computer ’s MA[...]

P-870HW-I1 User’s Guide 74 Chapter 3 Connection Wizard 3.1 1 Internet Configuration Screen Figure 30 Connection Wizard: Inter net Configuration The following table describes the labels in this screen. 3.12 Auto-Detection Screen If you enabled OTIST , wait while your ZyXEL Device starts OTIST . Y ou have to start OTIST on the wireless clients with[...]

P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 75 Figure 31 Connection Wizard: OTIST : S tart 3.13 Congratulations Screen Use this screen to finish the Connection W izard . Figure 32 Connection Wizard: Cong ratulations The following table describes the labels in this screen. Table 22 Connection Wiza rd: Congratulations LABEL DESCRIPTION Fini[...]

P-870HW-I1 User’s Guide 76 Chapter 3 Connection Wizard[...]

P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 77 C HAPTER 4 Bandwid th Management Wizard This chapter provides informa tion o n the W izard Setup screens for bandwidth management. Bandwidth management is o nly useful when the ZyXEL Device is trying to send more traffic out through than the W AN port than the W AN po rt can suppor[...]

P-870HW-I1 User’s Guide 78 Chapter 4 Bandwidth Man agement Wizard Figure 33 Main Wizard Screen The following table describes the labels in this screen. 4.2 W elcome Screen Use this screen to look at a preview of the Bandwidt h Management Wizard . Table 23 Main Wizard Screen LABEL DESCRIPTION Connection Wizard Select this to set up a basic wireles[...]

P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 79 Figure 34 BWM Wizard: Welcome The following table describes the labels in this screen. 4.3 General Information Screen Use this screen to activate ba ndwidth management an d to set the amount of band width you want to allocate for each interface on the ZyXEL Device. Table 24 BWM Wiz[...]

P-870HW-I1 User’s Guide 80 Chapter 4 Bandwidth Man agement Wizard Figure 35 BWM Wizard: General In formation The following table describes the labels in this screen. Table 25 BWM Wizard: General In formation LABEL DESCRIPTION Active Select this to enable bandwidth management. LAN Managed Bandwidth Enter the amount of ba ndwidth for this interface[...]

P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 81 4.4 Services Setup Screen Use this screen to select the applications to which you want to allocate bandwidth. Y ou can use the applications you do not select, as well as on es that do not appear on this list, but they have lower priority . Figure 36 BWM Wizard: Services Setup W AN [...]

P-870HW-I1 User’s Guide 82 Chapter 4 Bandwidth Man agement Wizard The following table describes the labels in this screen. 4.5 Priority Setup Screen Use this screen to set the priority of the appl ications you selected in the previous screen. Table 26 BWM Wizard: Services Setu p LABEL DESCRIPTION Xbox Live This is Microsoft’ s online gaming ser[...]

P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 83 Figure 37 BWM Wizard: Priority Setup The following table describes the labels in this screen. 4.6 Congratulations Screen Use this screen to finish the Bandwidth Management Wi zard . Table 27 BWM Wizard: Priority Setup LABEL DESCRIPTION Service This field displays the appli cations [...]

P-870HW-I1 User’s Guide 84 Chapter 4 Bandwidth Man agement Wizard Figure 38 BWM Wizard: Congratulati ons The following table describes the labels in this screen. Table 28 BWM Wizard: Congratulat ions LABEL DESCRIPTION Finish Click this to close the wizard.[...]

P-870HW-I1 User’s Guide Chapter 5 Status Screen 85 C HAPTER 5 S t atus Screen This chapter introduces the St a t u s screen and the summary screens you can open from it. 5.1 St atus Screen T o open this screen, click St a t u s . This screen also appears when you log in and select Go to Advanced setup . Figure 39 S tatus[...]

P-870HW-I1 User’s Guide 86 Chapter 5 Status Screen The following table describes the labels shown in the St a t u s screen. Table 29 Status LABEL DESCRIPTION Refresh Interval Select a number of seconds or None from the drop-d own list box to refresh all screen statistics automatically at the e nd of every time interval or to not refresh the scree[...]

P-870HW-I1 User’s Guide Chapter 5 Status Screen 87 5.1.1 St atus: BW MGMT Monitor Use this screen to view the band width usage b ased on the rules you configure for the LAN, W AN and WLAN. T o access this screen, click St a t u s , and then click (Details...) next to BW MGMT Monitor . Memory Usage This field displays what percentage of the ZyXEL [...]

P-870HW-I1 User’s Guide 88 Chapter 5 Status Screen Figure 40 S tatus > BW MGMT Monitor 5.1.2 St atus: DHCP T able T o access this sc reen, click St a t u s , and then click (Details...) next to DHCP T able .[...]

P-870HW-I1 User’s Guide Chapter 5 Status Screen 89 Figure 41 S tatus > DHCP T able Each field is described in the following table. 5.1.3 St atus: Packet S t atistics Use this screen to view the port status, packet-s pecific statistics, and system up time. T o access this screen, click St a t u s , and then click (Details...) next to Packet S t[...]

P-870HW-I1 User’s Guide 90 Chapter 5 Status Screen The following table describes the fields in this screen. 5.1.4 St atus: WLAN St ation St atus Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. T o access this sc reen, click St a t u s , and then click (Details...) next to WLAN S tatus . Figure 43 S[...]

P-870HW-I1 User’s Guide Chapter 5 Status Screen 91 The following table describes the labels in this screen. Table 32 S tatus > WLAN S tation S tatus LABEL DESCRIPTION # This field is a sequential value. It is not associated with a specific entry . MAC Address This field displays the MAC (Medi a Acce ss Control) address of an associated wireles[...]

P-870HW-I1 User’s Guide 92 Chapter 5 Status Screen[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 93 C HAPTER 6 W ireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. 6.1 Wireless Network Overview The following figure provides an example o f a wireless n etwork. Figure 44 Example of a W ireless Network The wireless network is the part in the blu[...]

P-870HW-I1 User’s Guide 94 Chapter 6 Wireless LAN • Every wireless client in the same wirel ess network must use security compatible with the AP . Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. 6.2 Wireless Security Overview The following sections in[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 95 For wireless networks, there are two typical plac es to store the user names and passwords for each user . • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server u sed in businesses mo re than in homes. If your AP does not provide [...]

P-870HW-I1 User’s Guide 96 Chapter 6 Wireless LAN Note: It is recommended that wireless networks u se WP A-PSK , WP A , or stronger encryption. IEEE 802.1x and W EP encryption are better than none at all, bu t it is still possible for unauthori zed devices t o figure out the original informat ion pretty quickly . When you select WP A2 or WP A2-PS[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 97 T o open this screen, click Network > W ireless LAN . Figure 45 Network > Wireless LAN > General The following table describes the general wireless LAN labels in this screen. 6.4.1 General Wireless LAN Screen: No Security Use this screen to allow wireless stations to communicate with the [...]

P-870HW-I1 User’s Guide 98 Chapter 6 Wireless LAN Figure 46 Network > Wireless LAN > General > N o Security The following table describes the labels in this screen. 6.4.2 General Wireless LAN Screen: S t atic WEP Use this screen to enable and configure WEP en cryption in your wireless network.T o open this screen, click Network > Wir [...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 99 The following table describes the labels in this screen. 6.4.3 General Wirele ss LAN Screen: WP A-PSK Use this sc reen to enab le and config ure WP A- PSK encryptio n in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to WP A-PSK . Figure 48 Ne[...]

P-870HW-I1 User’s Guide 100 Chapter 6 Wireless LAN 6.4.4 General Wire less LAN Screen: WP A Use this screen to enable and configure WP A encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Se curity Mode to WP A . Figure 49 Network > Wireless LAN > General > W P A Idle T imeout Th e ZyXEL[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 101 The following table describes the labels in this screen. 6.4.5 General Wire less LAN Screen: 802. 1x + Dynamic WEP Use this sc reen to enab le and config ure I EEE 802.1x authenticatio n and dynamic WEP encryption in your wireless networ k. T o open this screen, click Network > Wi reless LAN ,[...]

P-870HW-I1 User’s Guide 102 Chapter 6 Wireless LAN Figure 50 Network > Wireless LAN > General > 802.1x + Dynamic WEP The following table describes the labels in this screen. Table 39 Network > Wireless LAN > Genera l > 802.1x + Dynamic WEP LABEL DESCRIPTION Security Mode Select 802 .1x + Dynamic WEP . ReAuthenticati on T imer S [...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 103 6.4.6 General Wire less LAN Screen: 802. 1x + S t atic WEP Use this screen to enable and configure IEEE 802.1x authentication an d static WEP encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to 802.1x + S tatic WEP . Figure 51 Net[...]

P-870HW-I1 User’s Guide 104 Chapter 6 Wireless LAN The following table describes the labels in this screen. 6.4.7 General Wireless LAN Screen: 802.1x + No WEP Use this scr een to enab le and configure IEEE 802.1x authentication without WEP encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Securi[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 105 Figure 52 Network > Wireless LAN > General > 802.1x + No WEP The following table describes the labels in this screen. Table 41 Network > Wireless LAN > Gene ral > 802.1x + No WEP LABEL DESCRIPTION Security Mode Select 802 .1x + No WEP . ReAuthenticati on T imer S pecify how ofte[...]

P-870HW-I1 User’s Guide 106 Chapter 6 Wireless LAN 6.4.8 General Wirele ss LAN Screen: WP A2-PSK Use this scr een to enab le and configure WP A2- PSK encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to WP A2-PSK . Figure 53 Network > Wireless LAN > General > W P A2-PSK Th[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 107 6.4.9 General Wire less LAN Screen: WP A2 Use this sc reen to enab le and config ure WP A2 en cryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Se curity Mode to WP A2 . Figure 54 Network > Wireless LAN > General > W P A2 Idle T imeout Th[...]

P-870HW-I1 User’s Guide 108 Chapter 6 Wireless LAN The following table describes the labels in this screen. 6.5 OTIST Screen Use this screen to set up and start OTIST on th e ZyXEL Device in your wireless network. T o open this screen, click Network > Wir eless LAN > OTIST . Table 43 Network > Wireless LAN > Gene ral > WP A2 LABEL [...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 109 Figure 55 Network > Wireless LAN > OTIST The following table describes the labels in this screen. Before you click St a r t , you shou ld enable OTIST on all the OTIST -enabled wireless clients in the wireless network. For most wireless clients, follow these steps. 1 Start the ZyXEL utility[...]

P-870HW-I1 User’s Guide 110 Chapter 6 Wireless LAN Figure 56 Example: Wireless Client OTIST Screen T o start OTIST in the wireless client, click St a r t in this screen. Note: Y ou must click Star t in the ZyXEL Device and in the wireless client(s) within three minutes of each other . Y ou can start OTIST in the wireless client s and the ZyXEL De[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 111 Figure 59 OTIST : In Progress on the Wireless Client These screens close when the tra nsfer is complete. 6.5.1 Notes on OTIST 1 If you enable OTIST in a wireless client, you see this screen each time you start the utility . Click Ye s to search for an OTIST -enable d AP (in other word s, the ZyXE[...]

P-870HW-I1 User’s Guide 112 Chapter 6 Wireless LAN Figure 61 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu. Table 45 Network > Wireless LAN > MAC Filter LABEL DESCRIPTION Active Select this to enable MAC address filtering. Filter Action Define the filter action for the MAC addresses in the M[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 113 6.7 Advanced Wireless LAN Screen Use this screen to enable and configure roamin g and other advanced wireless settings in your wireless network. T o open this screen, click Network > Wir eless LAN > Advanced . Figure 62 Network > Wireless LAN > Advanced The following table describes t[...]

P-870HW-I1 User’s Guide 114 Chapter 6 Wireless LAN[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 115[...]

P-870HW-I1 User’s Guide 116 Chapter 6 Wireless LAN[...]

P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 117[...]

P-870HW-I1 User’s Guide 118 Chapter 6 Wireless LAN[...]

P-870HW-I1 User’s Guide Chapter 7 WAN 119 C HAPTER 7 WA N This chapter describes how to configure outs ide connections to another network or the Internet. 7.1 W AN Overview 7.1.1 Nailed-Up Connection (PPP) A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand. The ZyXEL Device does two things w[...]

P-870HW-I1 User’s Guide 120 Chapter 7 WAN 7.2 Internet Connection Screens This screen depends on the Encapsulation your ISP uses. 7.2.1 Internet Connection Screen: Ethernet Use this screen to set up an Et hernet co nnection to the Internet. T o open this screen, click Network > W AN > Internet Connection , and set the Encapsulation to Ether[...]

P-870HW-I1 User’s Guide Chapter 7 WAN 121 7.2.2 Internet Connection Scre en: PPP over Ethernet (PPPoE) Use this screen to set up a PPP over Ethernet (PPPoE) connection to the Internet. T o open this screen, click Network > W AN > Internet Connection , and set the Encapsulation to PPP over Ethernet . Figure 64 Network > WAN > Internet [...]

P-870HW-I1 User’s Guide 122 Chapter 7 WAN The following table describes the labels in this screen. Table 48 Network > WAN > Internet Conn ection > PPP ov er Etherne t LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select PPP over Ethernet . Service Name Enter the service name provided by your ISP . Leave this field bl[...]

P-870HW-I1 User’s Guide Chapter 7 WAN 123 7.3 Advanced W AN Screen Use this screen to edit the advanced settings for your Internet co nnection. T o open this screen, click Network > W AN > Advanced . Figure 65 Network > W AN > Advanced The following table describes the labels in this screen. Table 49 Network > W AN > Advanced LA[...]

P-870HW-I1 User’s Guide 124 Chapter 7 WAN 7.4 T raffic Redirect Screen Use this screen to specify a backup gateway in case the default gatewa y ( your ISP) is not available. (If you do not have a backup gateway , do not use this screen.) T o access this screen, click Network > W AN > T raffic Redirect . RIP Direction Use this field to contr[...]

P-870HW-I1 User’s Guide Chapter 7 WAN 125 Figure 66 Networ k > W AN > T raf fic Re direct The following table describes the labels in this screen. Table 50 Networ k > W AN > T raf fic Re direct LABEL DESCRIPTION Active Select this to set up a backup gateway in case the default gateway is not available. (For example, this might ha ppe [...]

P-870HW-I1 User’s Guide 126 Chapter 7 WAN[...]

P-870HW-I1 User’s Guide Chapter 8 LAN 127 C HAPTER 8 LAN This chapter describes how to conf igure settings for the LAN port. 8.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a buildin[...]

P-870HW-I1 User’s Guide 128 Chapter 8 LAN The V ersion field controls the format and the broadc asting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries m ore information. RI P-1 is probably adequate for most networks, unless you have an unusual net[...]

P-870HW-I1 User’s Guide Chapter 8 LAN 129 Figure 67 Example: IP Alias 8.2 LAN IP Screen Use this screen to set up the IP address and su bnet mask of your LAN port. T o open this screen, click Network > LAN > IP . Figure 68 Network > LAN > IP The following table describes the fields in this screen. 8.3 LAN IP Alias Screen Use this scre[...]

P-870HW-I1 User’s Guide 130 Chapter 8 LAN Figure 69 Network > LAN > IP Alias The following table describes the fields in this screen. Table 52 Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1 IP Alias 1 Select this to add the specif ied subnet to the LAN port. IP Address Enter the IP address of the ZyXEL Device on the subnet. IP [...]

P-870HW-I1 User’s Guide Chapter 8 LAN 131 8.4 Advanced LAN Screen Use this screen to edit advanced settings, such as RIP and multicas t, on the LAN port. T o open this screen, click Network > LAN > Advanced . Figure 70 Network > LA N > Advanced RIP Direction Use this field to control how much r outing information the ZyXEL Device send[...]

P-870HW-I1 User’s Guide 132 Chapter 8 LAN The following table describes the fields in this screen. Table 53 Network > LAN > Advanced LABEL DESCRIPTION RIP & Multicast Setup RIP Direction RIP (Routing Information Protocol) allows a ro uter to exchange routing information with other routers. Use this field to control how much routing info[...]

P-870HW-I1 User’s Guide Chapter 9 DHCP Server 133 C HAPTER 9 DHCP Server This chapter describes how to configure the DHCP server for the LAN and WLAN ports. 9.1 DHCP Overview Dynamic Host Configuration Protoco l (DHCP , RFC 2131, RFC 2132 ) provides a way to automatically set up and maintain IP addresses , subnet masks, gateways, and some network[...]

P-870HW-I1 User’s Guide 134 Chapter 9 DHCP Server • DNS servers - The ZyXEL Device provides IP addresses for up to three DNS servers that provide DNS services for DHCP clients. Y ou can specify each IP address manually (for example, a company’ s own DNS server), or yo u can refer to the DNS servers the ZyXEL Device received from the ISP . 9.2[...]

P-870HW-I1 User’s Guide Chapter 9 DHCP Server 135 9.3 St atic DHCP Screen Use this screen to assign static IP address to specific computers. T o open this screen, click Network > DHCP Server > S tatic DHC P . Figure 72 Network > DHCP Server > S tatic DHCP The following table describes the labels in this screen. First DNS Server Second[...]

P-870HW-I1 User’s Guide 136 Chapter 9 DHCP Server 9.4 Client List Screen Use this screen to look at the current list of DHCP clients. It is empty if the DHCP server is disabled. T o open this screen, click Network > DHCP Server > Client List . Figure 73 Network > DHCP Server > Client List The following table describes the labels in th[...]

P-870HW-I1 User’s Guide Chapter 10 NAT 137 C HAPTER 10 NA T Use these screens to configure port forwarding , trigger ports, and other NA T rules for the ZyXEL Device. See Append ix D on page 381 for more background information about NA T . 10.1 NA T Overview 10.1.1 Port Forwarding: Services and Port Numbers A NA T server set is a list of inside ([...]

P-870HW-I1 User’s Guide 138 Chapter 10 NAT 10.1.2 T rigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedica ted range of ports on the server side. W ith regular port forwarding you set a forwarding port in NA T to forward a service (coming in from the server on the W AN) to the IP address of a computer [...]

P-870HW-I1 User’s Guide Chapter 10 NAT 139 10.1.2.2 T wo Point s T o Remember About T rigger Ports 1 T rigger events only happen on data that is going coming from insi de the ZyXEL Device and going to the outside. 2 If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trig[...]

P-870HW-I1 User’s Guide 140 Chapter 10 NAT 10.3 Port Forwarding Screen Use this screen to look at the current port-fo rwarding rules in the ZyXEL Device, and to enable, disable, activate, and de activate each one. Y ou can also set up a default server to handle ports not covere d by rules. T o op en this screen, click Network > NA T > Port [...]

P-870HW-I1 User’s Guide Chapter 10 NAT 141 10.3.1 Port Forwarding Edit Screen Use this screen to activate, deactiv ate, and edit each port-forwarding rule in the ZyXEL Device. T o open this screen, click an Edit icon in Network > NA T > Port Forwarding . Figure 78 Network > NA T > Po rt Forward ing > Edit The following table descri[...]

P-870HW-I1 User’s Guide 142 Chapter 10 NAT 10.4 T rigger Port Screen Use this screen to maintain port-triggering rule s in the ZyXEL Device. T o open this screen , click Network > NA T > T rigger Port . Figure 79 Network > NA T > T rigger Port The following table describes the fields in this screen. Apply Click this to save your chang[...]

P-870HW-I1 User’s Guide Chapter 10 NAT 143 10.5 Address Mapping Screen Use this screen to edit other NA T rules for your ZyXEL Device. T o open this screen, click Network > NA T > Address Mapping . Figure 80 Network > NA T > Ad dress Mapp ing St a r t P o r t End Port Enter the incoming port number or range of port numbers you want to[...]

P-870HW-I1 User’s Guide 144 Chapter 10 NAT The following table describes the fields in this screen. 10.5.1 Address Mapping Edit Screen Use this screen to activate, deactivate, and edit each address mapping rule in the ZyXEL Device. T o open this screen, click an Edit icon in Network > NA T > Address Mappin g . Figure 81 Network > NA T &g[...]

P-870HW-I1 User’s Guide Chapter 10 NAT 145 The following table describes th e fields in this screen. Table 63 Network > NA T > Addres s Mapping > Edit LABEL DESCRIPTION Ty p e Choose the port ma pping type from one of the follow ing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address. Note that port numb[...]

P-870HW-I1 User’s Guide 146 Chapter 10 NAT[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 147 C HAPTER 11 Firewalls This chapter gives some back ground information on firewa lls and introduces the ZyXEL Device firewall. 1 1.1 Firewall Overview Originally , the term firewall referred to a construction techni que designed to prevent the spread of fire from one room to another . The ne tworkin[...]

P-870HW-I1 User’s Guide 148 Chapter 11 Firewalls • The DSL port connects to the Internet. • The LAN (Local Area Network) ports attach to a network of computers, which needs security from the outside world. These computer s will have access to Internet services such as e-mail, FTP , and the W orld W ide W e b. However , “inbound access” wi[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 149 • Restrict use of certain protocols, such as T elnet, to authoriz ed users on the LAN. These custom rules work by comparing the Sour ce IP address, Destination IP address and IP protocol type of network traf fic to rules set by the administrator . Y our customized rules take precedence and overri[...]

P-870HW-I1 User’s Guide 150 Chapter 11 Firewalls In general, services are consist of two parts. First, each service has one or two IP protocol types (for example, TCP , UDP , or TCP/UDP). Second, each service has one or more port numbers. T ogether, these part s define the service. See Appendix I on p age 431 for examples of services. 1 1.1.6 DoS[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 151 When the number of existing half-ope n sessions rises above a threshold ( max-incomplete high ), the ZyXEL Device starts deleting half-o pen sessions as required to accommodate new connection requests. The ZyXEL De vice continues to delete half-open requests as necessa ry , until the number of exis[...]

P-870HW-I1 User’s Guide 152 Chapter 11 Firewalls 1 1.2.1 The “T riangle Route” Problem A traffic route is a path for sending or receiv ing data packets between two Ethernet devices. Y ou may have more than one connection to the Internet (through on e or more ISPs). If an alternate gateway is on the LAN (and its IP address is in the same subne[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 153 3 The reply from the W AN goes to the ZyXEL Device. 4 The ZyXEL Device then sends it to th e computer on the LAN in Subnet 1. Figure 84 IP Alias 1 1.3 Guidelines for Enhancing Security with Y our Firewall • Change the default password via CLI (Command Line Interpreter) or web config urator . • [...]

P-870HW-I1 User’s Guide 154 Chapter 11 Firewalls • Never e-mail sensitive information such as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via a web page unless the web site use s secure connections. Y ou ca n identify a secure connec tion by looking for a small “ke[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 155 The following table describes the labels in this screen. 1 1.5 Firewall Rules Screen Note: The ordering of your rule s is very import ant as rules are applie d in turn. Use this screen to activate the fi rewall and to set the default rule s for each direction. T o open this screen, click Security &[...]

P-870HW-I1 User’s Guide 156 Chapter 11 Firewalls Figure 86 Security > Firewall > Rules The following table describes the labels in this screen. Table 65 Security > Firewall > Rules LABEL DESCRIPTION Firewall Rules S torage Sp ace in Use This read-only bar shows how much of the ZyXEL De vice's memory for recording firewall rules i[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 157 1 1.5.1 Firewall Rule Edit Screen Use this screen to create a new firewall rule or to edit an existing one. T o open this screen, click Add or click an Edit icon in Security > Firewall > Rules . Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Remove icon [...]

P-870HW-I1 User’s Guide 158 Chapter 11 Firewalls Figure 87 Security > Firewall > Rules > Edit[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 159 The following table describes the labels in this screen. Table 66 Security > Firewall > Rules > Edit LABEL DESCRIPTION Active Select this option to ena ble this firewall rule. Action for Matched Packet Use the drop-down list box to select what the firewa ll is to d o with packets that matc[...]

P-870HW-I1 User’s Guide 160 Chapter 11 Firewalls 1 1.5.2 Customized Services Screen Use this screen to create or edit customized ser vices for firewall rules. Customized services and port numbers are not predefined by the ZyXEL Device. See Appendix I on page 4 31 for examples of services. For a comprehensive list of port numbers and services, vis[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 161 Figure 89 Security > Firewall > Rules > Edit > Edit Customized Services > Edit The following table describes the labels in this screen. 1 1.6 Anti-Probing Screen Use this screen to control the way the ZyXEL Device resp onds to ping requests and to requests for unsupported services. N[...]

P-870HW-I1 User’s Guide 162 Chapter 11 Firewalls Figure 90 Security > Firewall > Anti Probing The following table describes the labels in this screen. 1 1.7 Firewall Threshold Screen Use this screen to set various DoS thresholds and the maximum number of half-open se ssions. T o open this screen, c lick a rules number in Security > Firew[...]

P-870HW-I1 User’s Guide Chapter 11 Firewalls 163 Figure 91 Security > Fire wall > Thresh old The following table describes the labels in this screen. Table 70 Security > Firewall > Threshold LABEL DESCRIPTION Denial of Service Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deletin[...]

P-870HW-I1 User’s Guide 164 Chapter 11 Firewalls Deny New Connection Request for Select this radio button and specify for how long the ZyXEL Device should bl ock new connection requests when TCP Maximum Incomplete is reached. Enter the length of blocking time in minutes (betwe en 1 and 256). Apply Click this to save your changes back to the ZyXEL[...]

P-870HW-I1 User’s Guide Chapter 12 Content Filter 165 C HAPTER 12 Content Filter Use these screens to c reate and enforce policies th at restrict access to the Internet ba sed on content. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to their needs. Content filtering [...]

P-870HW-I1 User’s Guide 166 Chapter 12 Content Filter Figure 92 Security > Cont en t Filter > Filter Each field is described in the following table. Table 71 Security > Content Filter > Filt er LABEL DESCRIPTION T rusted IP Setup T rusted Computer IP Address Y ou can allow a speci fic computer to a ccess all Internet resources without[...]

P-870HW-I1 User’s Guide Chapter 12 Content Filter 167 12.2.2 Content Filter Schedule Screen Use this screen to set up the sc hedule when content filtering is effective. T o access this screen, click Security > Content Filter > Schedule . Figure 93 Security > Cont ent Filter > Schedule Each field is described in the following table. Ke[...]

P-870HW-I1 User’s Guide 168 Chapter 12 Content Filter[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 169 C HAPTER 13 Certificates This chapter explains how to use ce rtificates with your ZyXEL Device. 13.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authen ticate users and to let users authenticate the ZyX EL Device. Ce rtificates are bas ed on public-p[...]

P-870HW-I1 User’s Guide 170 Chapter 13 Certificates Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ). The ZyXEL Device can check a peer ’ s certificate against [...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 171 Figure 94 Security > Certificates > My Certificates The following table describes the labels in this screen. Table 73 Security > Certificates > My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays th e percentage of the Zy XEL Device’s PKI storage space th[...]

P-870HW-I1 User’s Guide 172 Chapter 13 Certificates 13.3 Import My Certificate Screen Use this screen to save an existing certificate to the ZyXEL Device. T o open this screen, click Import in Security > Certificates > My Certificates . Note: Y ou can only import a certificate that matches a corresponding certification request that was gene[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 173 Figure 95 Security > Certificates > My Certificates > Import The following table describes the labels in this screen. 13.4 Create My Certificate Screen Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authority or gener[...]

P-870HW-I1 User’s Guide 174 Chapter 13 Certificates Figure 96 Security > Certificates > My Certificates > Create The following table describes the labels in this screen. T able 75 Security > Certificates > My Certificates > Create LABEL DESCRIPTION Certificate Name T ype up to 31 ASCII characters (not includ ing sp aces ) to ide[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 175 After you click Apply , the following screen appears. Key Length Select a number from the drop-down list box to determine how many bits the key should use (512 to 2048). The longer the key , the more secure it is. A longer key also uses more PKI storage space. Enrollment Options These ra dio but[...]

P-870HW-I1 User’s Guide 176 Chapter 13 Certificates Figure 97 Security > Certificates > My Cert ificates > Create > In Progress W ait while the ZyXEL Device generates the se lf-signed certificate or certification request. Afterwards, the following screen should appear . Figure 98 Security > Certificates > My Ce rtificates > C[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 177 Figure 99 Security > Certificates > My Certificates > Edit The following table describes the labels in this screen. Table 76 Security > Certificates > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. If you want to chan[...]

P-870HW-I1 User’s Guide 178 Chapter 13 Certificates Refresh Click this to di splay the certification path. Certificate Informati ons These read-only fields disp lay detailed information about the certificate. T ype This field displ ays general information about the certificat e. CA-signed me ans that a Certification Authority signed the certifica[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 179 13.6 T rusted CAs Screen Use this screen to look at certificates from cer tification authorities that the ZyXEL Device trusts. The ZyXEL Device accepts any valid certif icate signed by these certification authorities as being trustworthy so that you do not need to import such certificates . T o [...]

P-870HW-I1 User’s Guide 180 Chapter 13 Certificates Figure 100 Security > Certif icates > Trusted CAs The following table describes the labels in this screen. Table 77 Security > Certific ates > T rusted CAs LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 181 13.7 Import T rusted CA Screen Use this screen to add the certificate of a trus ted certification authority to the ZyXEL Device. T o open this screen, click Import in Security > Certificates > T rusted CAs . Note: Y ou must remove any spaces in the cert ificate’ s file name before you im[...]

P-870HW-I1 User’s Guide 182 Chapter 13 Certificates Figure 102 Security > Certif icates > Trusted CAs > Edit The following table describes the labels in this screen. Table 79 Security > Certificates > T rusted CAs > Edit LABEL DESCRIPTION Name This field displays the iden tifying name of this certificate. If you want to change t[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 183 Refresh Click this to disp lay the certification path. Certificate Informati on These read-only fields display detail ed informa tion about the certificate. T ype This field displays general information about the certificate. CA-sign ed means that a Certification Authority signed the certificate[...]

P-870HW-I1 User’s Guide 184 Chapter 13 Certificates 13.9 T rusted Remote Host s Screen Use this screen to look at the certificates of peers that you trust but which are not signed by one of the trusted ce rtific ation authorities (on the Security > Certificates > T rusted CAs screen). T o open this screen, click Security > Certificates &[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 185 Figure 103 Security > Certificates > Trusted Remote Hosts The following table describes the labels in this screen. Table 80 Security > Certificates > T rusted Remote Host s LABEL DESCRIPTION PKI S torage S pace in Use This bar displays th e percentage of the Zy XEL Device’s PKI sto[...]

P-870HW-I1 User’s Guide 186 Chapter 13 Certificates 13.10 V erifying a T rusted Remote Host’ s Certificate Self-signed certificates only have the signatu re of the host itself. Y ou should be very careful about importing (and thereby trusting) a remote host’ s self-signed certificate. Y ou can follow these steps to check that you have the rem[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 187 Figure 105 Security > Certificates > Tr usted Remote Host > Import The following table describes the labels in this screen. 13.12 Edit T rusted Remote Host Screen Use this screen to view in-dep th information about the truste d remote host’ s certificate or change the certificate’ s[...]

P-870HW-I1 User’s Guide 188 Chapter 13 Certificates Figure 106 Security > Certificates > Trusted Remote Hosts > Edit The following table describes the labels in this screen. Table 82 Security > Certificates > T rusted Remote Hosts > Edit LABEL DESCRIPTION Name This field disp lays the identifyin g name of this certificate. If yo[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 189 V ersion This field displays the X.509 versi on number . Serial Number This fi eld displays the certificate’s ident ification number given by the devi ce that created the certificate. Subject This field displays information that iden tifies the owner of th e certificate, such as Common Name (C[...]

P-870HW-I1 User’s Guide 190 Chapter 13 Certificates 13.13 Directory Servers Screen Use this screen to look at the current list of di rectory servers, which the ZyXEL Device checks if the certificate does not list a server or if the listed server is not available. T o open this screen, click Security > Certificates > Directory Servers . Figu[...]

P-870HW-I1 User’s Guide Chapter 13 Certificates 191 13.14 Edit Directory Server Screen Use this screen to create or edit a director y server the ZyXEL Device should use if the certificate does not list a server or if the listed serv er is not available . T o open this screen, click Add or an Edit icon in Security > Certificates > Directory [...]

P-870HW-I1 User’s Guide 192 Chapter 13 Certificates Apply Click this to save your changes to the Z yXEL Device. Cancel Click this to return to the previous screen without saving any changes. a. At the time of writing, LDAP is the only choice of directory se rver access protocol. T able 84 Security > Certificates > Directo ry Servers > Ed[...]

P-870HW-I1 User’s Guide Chapter 14 Static Rout e 193 C HAPTER 14 S t atic Route Use these screens to configure static routes in the ZyXEL Device. 14.1 S t atic Route Overview Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the network s beyond. For insta nce, the Z[...]

P-870HW-I1 User’s Guide 194 Chapter 14 Static Route Figure 1 10 Management > S tatic Rout e > IP S tatic Route Each field is described in the following table. 14.2.1 Edit IP S t atic Route Screen Use this screen to edit a static route in the ZyXEL Device. T o access this screen, click an Edit icon in Management > S tatic Route > IP S [...]

P-870HW-I1 User’s Guide Chapter 14 Static Rout e 195 Figure 1 1 1 Management > S tatic Route > IP S ta tic Route > Edit Each field is described in the following table. Table 86 Management > Static Route > IP Static Route > Edit LABEL DESCRIPTION Route Name Enter the na me of the st atic ro ute. Active Select this if you want the[...]

P-870HW-I1 User’s Guide 196 Chapter 14 Static Route[...]

P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 197 C HAPTER 15 Bandwid th MGMT This chapter explains how to configure ba ndwidth management in your ZyXEL Device. 15.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to speci fy bandwidth management rules based on application. Y ou can allocate specific amou nts of ban[...]

P-870HW-I1 User’s Guide 198 Chapter 15 Bandwidth MGMT 15.1.3 Example: Unused and Unbudgeted Bandwid th The following table sh ows the priorities of appl ications and the amount of bandwidth that each application gets. Suppose that all of the applications exce pt for administration need more bandwi dth. • Each application gets up to its budgeted[...]

P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 199 15.1.5 Over Allotment of Bandw id th Y ou can set the bandwidth management speed fo r an interface higher than the interface’ s actual transmission speed. Higher priority traf fi c gets to use up to its allocated bandwidth, even if it takes up all of the interface’ s ava ilable bandwidth. [...]

P-870HW-I1 User’s Guide 200 Chapter 15 Bandwidth MGMT Figure 1 12 Management > Bandwid th MGMT > Configuration[...]

P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 201 See App endix I on page 431 for examples of services. The fo llowing table describes the labels in this screen. Table 90 Management > Bandwid th MGMT > Configuration LABEL DESCRIPTION Active Select this to enable bandwidth management. LAN BW Budget(kbps) Enter the amount of bandwidth for[...]

P-870HW-I1 User’s Guide 202 Chapter 15 Bandwidth MGMT 15.3 Edit Bandwid th Management Rule Screen Use this screen to create or edit band width manage ment rules. T o open this screen, click an Edit icon in Management > Bandwidth MGMT > Configuration . Figure 1 13 Management > Bandwid th MGMT > Configuration > Edit Priority Select a[...]

P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 203 See App endix I on page 431 for examples of services. The fo llowing table describes the labels in this screen. Table 91 Management > Bandwid th MGMT > Configuration > Edit LABEL DESCRIPTION Rule Configurati on Active Select this to have the ZyXEL Device apply this band width manageme[...]

P-870HW-I1 User’s Guide 204 Chapter 15 Bandwidth MGMT 15.4 Bandwid th Monitor Use this screen to view the ZyXEL Device’ s ba ndwidth usage and allotm ents. T o open this screen, click Management > Bandwidth MGMT > Monitor . Figure 1 14 Management > Bandwid th MGMT > Monitor Source Port Enter the port number of the so urce. Protocol [...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 205 C HAPTER 16 Remote MGMT Use these screens to c ontrol which computer s can us e which services to access the ZyXEL Device on each interface. 16.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from w[...]

P-870HW-I1 User’s Guide 206 Chapter 16 Remote MGM T 16.1.2 Remote Management and NA T When NA T is enabled: • Use the ZyXEL Device’ s W AN IP address when configuring from the W AN. • Use the ZyXEL Device’ s LAN IP address when configuring from the LAN. 16.1.3 System T imeout There is a default system management idle tim eout of five minu[...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 207 An SNMP managed network consis ts of two main types of comp onent: agen ts and a man ager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt information from the managed device into a form compatible with SN [...]

P-870HW-I1 User’s Guide 208 Chapter 16 Remote MGM T Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyXEL Device’ s physical ports. 16.2 WWW Screen Use this screen to control HTTP access to your ZyXEL Device. T o open this screen, click Management > Remote MGMT > WWW . Table 93 SNMP[...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 209 Figure 1 16 Management > Remote MGMT > WWW Each field is described in the following table. Table 95 Management > Remote MGMT > WWW LABEL DESCRIPTION HTTPS Server Certificate Select the certifi cate the ZyXEL Device provides to clients using this servi ce. Authenticate Client Certific[...]

P-870HW-I1 User’s Guide 210 Chapter 16 Remote MGM T 16.3 T elnet Screen Use this screen to control T elnet access to you r ZyXEL Device. T o open this screen, click Management > Remote MGMT > T elnet . Figure 1 17 Management > Remote MGMT > T elnet Each field is described in the following table. 16.4 FTP Screen Use this screen to cont[...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 211 Figure 1 18 Management > Remote MGMT > FTP Each field is described in the following table. 16.5 SNMP Screen Use this screen to control SNMP with your ZyXEL Device. T o open this scre en, click Management > Remote MGMT > SNMP . Table 97 Management > Remote MGMT > FTP LABEL DESCR[...]

P-870HW-I1 User’s Guide 212 Chapter 16 Remote MGM T Figure 1 19 Management > Remote MGMT > SNMP Each field is described in the following table. Table 98 Management > Remote MGMT > SNMP LABEL DESCRIPTION SNMP Configuration Get Community Enter the password for incoming Get requests and GetNext requests from the management station. The d[...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 213 16.6 DNS Screen Use this screen to control DNS access to your ZyXEL Device. T o open this screen, click Management > Remote MGMT > DNS . Figure 120 Management > Remo te MGMT > DNS Each field is described in the following table. 16.7 Security Screen Use this screen to control ho w you[...]

P-870HW-I1 User’s Guide 214 Chapter 16 Remote MGM T Each field is described in the following table. 16.8 SSH Screen Use this screen to control SSH access to your ZyXEL Device. T o open this screen, click Management > Remote MGMT > SSH . Figure 122 Management > Remo te MGMT > SSH Table 100 Management > Remote MGMT > Security LABE[...]

P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 215 Each field is described in the following table. 16.9 TR-069 TR-069 is a protocol that de fines how your ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Access. An administrator can use CNM Access to remotely set up the ZyXEL device, modify settings, perform f[...]

P-870HW-I1 User’s Guide 216 Chapter 16 Remote MGM T The following table gi ves a description of TR-069 commands. Table 102 TR-069 Comman ds Root Command or Subdirectory Comma nd Description wan tr069 All TR-069 related commands mu st be preceded by wan tr069 . load S tart configuring TR-069 on your ZyXEL Device. active [0:no/ 1:yes] Enable/disabl[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 217 C HAPTER 17 UPnP This chapter introduces the Univer sal Plug-and-Play (UPnP) feature. 17.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device can dynam[...]

P-870HW-I1 User’s Guide 218 Chapter 17 UPnP When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 219 17.4 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Contro l Panel . Double-click Add/Remove Pr ograms . 2 Click on the Win d o ws[...]

P-870HW-I1 User’s Guide 220 Chapter 17 UPnP Figure 126 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Programs Pr operties window and click Next . 5 Restart the computer when prompted. Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP . 1 Click St a r t[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 221 Figure 128 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 129 Networking Services[...]

P-870HW-I1 User’s Guide 222 Chapter 17 UPnP 6 Click OK to go back to the W indows Optional Networking Component Wizard window and click Next . 17.5 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device. Make[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 223 Figure 131 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.[...]

P-870HW-I1 User’s Guide 224 Chapter 17 UPnP Figure 132 Internet Connection Properties: Adva nced Settings Figure 133 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconn ected from your computer , all port mappings will be deleted automatically . 6 Select Show icon in noti fication ar ea when connect[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 225 Figure 134 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection sta tus. Figure 135 Internet Connection S tatus Web Configurator Eas y Access W ith UPnP , you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL [...]

P-870HW-I1 User’s Guide 226 Chapter 17 UPnP Figure 136 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your ZyXEL Device an d select Invoke . The web configurator login screen displays.[...]

P-870HW-I1 User’s Guide Chapter 17 UPnP 227 Figure 137 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device. Figure 138 Network Connections: My Networ k Places: Properties: Example[...]

P-870HW-I1 User’s Guide 228 Chapter 17 UPnP[...]

P-870HW-I1 User’s Guide Chapter 18 System 229 C HAPTER 18 System Use this screen to configure the ZyXEL Device’ s time and date settings. 18.1 General Setup 18.1.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. However , because some ISPs check this[...]

P-870HW-I1 User’s Guide 230 Chapter 18 Syst em 18.1.2.1 DYNDNS Wildcard Enabling the wi ldcard feature for your host causes *.y ourhost.dyndns.or g to be aliased to the same IP address as yourho st.dyndns.or g. This feature is useful if you want to be able to use, for example, www .yourhos t.dyndns.or g and still reach your hostname. 18.1.3 Reset[...]

P-870HW-I1 User’s Guide Chapter 18 System 231 18.3 Dynamic DNS Screen Use this screen to set up and maintain dynamic DNS on your ZyXEL Device. T o open this screen, click Maintenance > System > Dynamic DNS . Domain Name Enter the domai n name (if you know it) here. If you leave this field bla nk, the ISP may assign a domain name via DHCP . [...]

P-870HW-I1 User’s Guide 232 Chapter 18 Syst em Figure 140 Maintenance > System > Dynamic DNS The following table describes the fields in this screen. Table 105 Maintenance > System > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Enable Dynamic DNS Select this to use dynamic DNS. Service Provider Select the name of your Dy namic DNS [...]

P-870HW-I1 User’s Guide Chapter 18 System 233 18.4 T ime Setting Screen Use this screen to change the current ti me and time settings on your ZyXEL Device. T o open this screen, click Maintenance > System > T ime Setting . Figure 141 Maintenance > System > T ime Setting Dynamic DNS server auto detect IP Address Select this only when t[...]

P-870HW-I1 User’s Guide 234 Chapter 18 Syst em The following table describes the fields in this screen. Table 106 Maintenance > System > T ime Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the ti me of your ZyXE L Device. Each time you reload this page, the ZyXEL Device synch ronizes the time with the ti[...]

P-870HW-I1 User’s Guide Chapter 18 System 235 S tart Date Configure the day and time w hen Daylight Saving T ime starts if you selected Enable Daylight Saving . The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time st arts in most parts of the United S tates on the first Sunday of April. Each time zon[...]

P-870HW-I1 User’s Guide 236 Chapter 18 Syst em[...]

P-870HW-I1 User’s Guide Chapter 19 Logs 237 C HAPTER 19 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. Refer to the appendix for examples of log message explanations. 19.1 Logs Overview The web confi gurator allows you to choose which categories of events and/or alerts to ha[...]

P-870HW-I1 User’s Guide 238 Chapter 19 Logs Log entries in red indicate aler ts. The log wraps around and delete s the old entries after it fills up. Click a column heading to so rt the entries. A triangle indicates ascending or descending sort order . The following table desc ribes the fields in this screen. 19.3 Log Settings Screen Use this scr[...]

P-870HW-I1 User’s Guide Chapter 19 Logs 239 Figure 143 Maintenance > Logs > Log Settings The following table describes the fields in this screen. Table 108 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server En ter the server name or the IP address of the mail server for the e-mail addresses specified below . If this fi eld is le[...]

P-870HW-I1 User’s Guide 240 Chapter 19 Logs Send Log T o The ZyXEL Device sends log s to the e-mail addre ss specified in this field. If this fie ld is left blank, the ZyXEL Device does not send logs via e-mail. Send Alerts T o Alerts are real-time notifications that are sent as soon as an event, such as a DoS attack, system error , or fo rbidden[...]

P-870HW-I1 User’s Guide Chapter 20 Tools 241 C HAPTER 20 To o l s This chapter upload new firmware, manag e configuration and restart your ZyXEL Device. 20.1 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a.bin extension, for example, "P restige.bin". Only use firmware for your [...]

P-870HW-I1 User’s Guide 242 Chapter 20 Tools Figure 145 Upload Firmware: In Progress W ait two minutes before logging into the ZyXEL Device again. The ZyXEL Device automatically restarts in this time, which causes a temporary network disconnect. In some operating systems, you may see th e following icon on your desktop. Figure 146 Upload Firmware[...]

P-870HW-I1 User’s Guide Chapter 20 Tools 243 Figure 148 Maintenance > T ools > Co nfiguration The following table describes each field in the screen. Note: Do not turn of f the ZyXEL Device while configu ration file upload is in progress After you click Upload , the following screen appears. Table 110 Maintenance > Tools > Configur at[...]

P-870HW-I1 User’s Guide 244 Chapter 20 Tools Figure 149 Restore Configuration: Successfu l W ait one minute before logging into the ZyXEL Device again. The ZyXE L Device automatically restarts in this time, which causes a temporary network disconnect. In some operating systems, you may see th e following icon on your desktop. Figure 150 Restore C[...]

P-870HW-I1 User’s Guide Chapter 20 Tools 245 Figure 152 Restar t Screen Click Restart to have the ZyXEL Device reboot.[...]

P-870HW-I1 User’s Guide 246 Chapter 20 Tools[...]

P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 247 C HAPTER 21 Introducing the SMT The System Management T erminal (SMT) provides a text-based, menu-driven console to manage the ZyXEL Device. This chapter describ es how to access the SMT and then provides an overview of its menus. 21.1 Accessing the SMT Use T elnet to access the SMT . Fo[...]

P-870HW-I1 User’s Guide 248 Chapter 21 In troducing the SM T Figure 154 SMT Main Menu Note: There is an inactivity timeout, and the default value is five minutes. If there is no activity for longer than five minutes, your ZyXEL Device will automa tically log you out. Y ou will then have to telnet in to the ZyXEL Device again. Y ou can use the web[...]

P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 249 3.2 TCP/IP and DHCP Ethernet Setup Use this menu to set up the LAN IP address and to configure th e ZyXEL Device’ s DHCP server . The DHCP server assigns IP addresses and provides DNS server information to other computers on the LAN or WLAN. 3.2.1 IP Alias Setup Use this menu to partit[...]

P-870HW-I1 User’s Guide 250 Chapter 21 In troducing the SM T 21.1 Filter Set Configuration Use this menu to look at the filter set s in the ZyXEL Device. 21.1.x Filter Rules Summary Use this menu to look at the rules for each filter set. 21.1.x.y TCP/IP Filter Rule Use this menu to configure the rules for each filter set. 21.2 Firewall Setup Use [...]

P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 251 21.3 Navigating the SMT Interface Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . 24.8 Command Interpreter Mode Use this menu to use CI commands. 24.9 Call Control 24.9.1 Budget Management Use this menu [...]

P-870HW-I1 User’s Guide 252 Chapter 21 In troducing the SM T Entering information T ype in or press [SP ACE BAR], then press [ENTER]. Y ou need to fill in two types of fi elds. The first requires you to type in the appropriate information. The second allows you to cycle through the available choi ces by pressing [SP ACE BAR]. Required fields <[...]

P-870HW-I1 User’s Guide Chapter 22 General Setup 253 C HAPTER 22 General Setup Use this menu to set up the system name, domain name, DNS servers, and dynamic DNS. 22.1 General Setup Use this menu to set up the system name, domain name, and DNS servers. See Chapter 18 on page 229 and Chapter 7 on pa ge 1 19 for background information. T o open thi[...]

P-870HW-I1 User’s Guide 254 Chapter 22 General Setup 22.2 Configure Dynamic DNS Use this menu to configure your d ynamic DNS account settings. See Chapter 18 on page 229 for background information. T o open this menu, select Ye s in Edit Dynamic DNS in menu 1. Figure 156 Menu 1.1: Configure Dynamic DNS The following table describes the labels in [...]

P-870HW-I1 User’s Guide Chapter 22 General Setup 255 22.3 Configure Dynamic DNS Use this menu to configure your dynamic DNS domain name settings. See Ch apter 18 on page 229 for background information. T o open this menu, sele ct Ye s in Edit Host in menu 1.1. Figure 157 Menu 1.1.1: DDNS Edit Host The following table describes the labels in this [...]

P-870HW-I1 User’s Guide 256 Chapter 22 General Setup[...]

P-870HW-I1 User’s Guide Chapter 23 WAN Setup 257 C HAPTER 23 W AN Setup Use this menu to configure the W AN MAC address. See Chapter 7 on page 1 19 for background information. T o open this menu, enter 2 in the main menu. Figure 158 Menu 2: W AN Setup The following table describes the labels in this menu. Menu 2 - WAN Setup MAC Address : Assigned[...]

P-870HW-I1 User’s Guide 258 Chapter 23 WAN Setup[...]

P-870HW-I1 User’s Guide Chapter 24 LAN Setup 259 C HAPTER 24 LAN Setup Use this menu to set up the LAN IP address, DHCP server , additional subnets, and input and output filter sets for the LAN port. Y ou can also use this menu to configure the wireless network. 24.1 LAN Port Filter Setup Use this menu to specify input and output filter sets for [...]

P-870HW-I1 User’s Guide 260 Chapter 24 LAN Setup 24.2 TCP/IP and DHCP Ethernet Setup Use this menu to set up the LAN IP addre ss and to configure the ZyXEL Device’ s DHCP server . The DHCP server assigns IP addresses a nd provides DNS server information to other computers on the LAN or WLAN. See Chapter 8 on pa ge 127 and Chapter 9 on pa ge 133[...]

P-870HW-I1 User’s Guide Chapter 24 LAN Setup 261 First DNS Server Second DNS Server Third DNS Server Press [SP ACE BAR] to select From ISP , User Defined or None and press [ENTER]. These fields are not avai lable on all models. Select From ISP if your ISP dynamically assigns DNS server information. (In this case, the ISP assigns the WAN IP addres[...]

P-870HW-I1 User’s Guide 262 Chapter 24 LAN Setup 24.3 IP Alias Setup Use this menu to partition your LA N interface into subnets. See Chapter 8 on page 127 and Chapter 30 on page 287 for background information. T o open this me nu, select Ye s in Edit IP Alias in menu 3.2. Figure 161 Menu 3.2.1: IP Alias Setup The following table describes the la[...]

P-870HW-I1 User’s Guide Chapter 24 LAN Setup 263 24.4 Wireless LAN Setup Use this menu to configure basic wirele ss settings and wireless security . See Chapter 6 on page 93 for background information. T o open this menu, enter 5 in menu 3. Outgoing p rotocol filters Enter up to fou r filter sets. If you enter more th an one, separate each one wi[...]

P-870HW-I1 User’s Guide 264 Chapter 24 LAN Setup Figure 162 Menu 3.5: Wireless LAN Setup The ESSID in the SMT is the same as the SSID in the web configurator . The following table describes the labels in this menu. Menu 3.5 - Wireless LAN Setup Enable Wireless LAN= No ESSID= ZyXEL Hide ESSID= No Channel ID= CH06 2437MHz WEP= Disable Key1= N/A Edi[...]

P-870HW-I1 User’s Guide Chapter 24 LAN Setup 265 24.5 WLAN MAC Address Filter Use this menu to block or allow other devices to access the ZyXEL Device. See Chapter 6 on page 93 for background information. T o open this menu, select Ye s in Edit MAC Address Filter in menu 3.5. Figure 163 Menu 3.5.1: WL AN MAC Addres s Filter The following table de[...]

P-870HW-I1 User’s Guide 266 Chapter 24 LAN Setup[...]

P-870HW-I1 User’s Guide Chapter 25 In ternet Access Setup 267 C HAPTER 25 Internet Access Setup Use this menu to set up your Internet co nnection. See Chapter 7 o n page 1 19 and Chapter 10 on page 137 for background information. T o open this menu, enter 4 in the main menu. Figure 164 Menu 4: Internet Access Setup The following table describes t[...]

P-870HW-I1 User’s Guide 268 Chapter 25 Interne t Access Setup Gateway IP Address This field is not available if your ISP uses PPPoE encaps ulation. Enter the IP address of the gateway provided by your ISP . Network Address T ranslation Select None if you do not want to use port forwarding, trigg er ports, or NA T . Select SUA Only if you want to [...]

P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 269 C HAPTER 26 Remote Node Setup Use this menu to set up your Internet connection, input and ou tput filter sets for the W AN port, advanced features for the W AN port, or a backup gateway . 26.1 Remote Node Profile Use this menu to set up your Internet co nnection. See Chapter 7 o n page 1 1[...]

P-870HW-I1 User’s Guide 270 Chapter 26 Remo te Node Setup 26.2 Remote Node Network Layer Options Use this menu to set up the W AN IP address and advanced features for the W AN port. See Chapter 7 on page 1 19 and Chapter 10 on page 137 for background information. T o open this menu, select Ye s in Edit IP in menu 1 1.1. My Login Enter the user na[...]

P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 271 Figure 166 Menu 1 1.1.2: Remote Node Network Layer Op tions The following table describes the labels in this menu. Menu 11.1.2 - Remot e Node Network Layer Options IP Address Assig nment= Dynamic Rem IP Addr= N/A Rem Subnet Mask= N/A My WAN Addr= N/A Network Address Translation= SUA Only M[...]

P-870HW-I1 User’s Guide 272 Chapter 26 Remo te Node Setup 26.3 Remote Node Filter Use this menu to specify input and ou tput filter sets for the W AN port. See Chapter 30 on page 287 for background information. T o open this menu, sele ct Ye s in Edit Fil ter Sets in menu 11 . 1 . Private This field is rel ated to RIP . This field determines whet[...]

P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 273 Figure 167 Menu 1 1.1.4: Remote Node Filter The following table describes the labels in this menu. 26.4 T raffic Redirect Setup Use this menu to set up a backup router , if you have one, in case the ZyXEL Device cannot access the Internet. See Chapter 7 on pa ge 1 19 for background informa[...]

P-870HW-I1 User’s Guide 274 Chapter 26 Remo te Node Setup Figure 168 Menu 1 1.1.5: T raf fic Redirect Setup The following table describes the labels in this menu. Menu 11.1.5 - Traffic Redirect Setup Active= No Configuration: Backup Gateway IP Address= 0.0.0.0 Metric= 14 Check WAN IP A ddress= 0.0.0.0 Fail Toleran ce= 3 Period(sec)= 5 Timeout(sec[...]

P-870HW-I1 User’s Guide Chapter 27 Sta tic Routing Setup 275 C HAPTER 27 S t atic Routing Setup Use this menu to look at and confi gure IP static routes. 27.1 IP S t atic Route Setup Use this menu to look at IP static routes. See Chapter 14 on page 19 3 for background information. T o open this menu , enter 12 in the main menu. Figure 169 Menu 12[...]

P-870HW-I1 User’s Guide 276 Chapter 27 Static Routing Setup 27.2 Edit IP S t atic Route Use this menu to configure IP static routes. See Chapter 14 on page 193 for ba ckground information. T o open this menu, en ter an IP static route number in Enter selection number in menu 12. Figure 170 Menu 12.1: Edit IP S tatic Route The following table desc[...]

P-870HW-I1 User’s Guide Chapter 28 Dial-in User Setup 277 C HAPTER 28 Dial-in User Setup Use this menu to look at and confi gure local user profiles on the ZyXEL Device. 28.1 Dial-in User Setup Use this menu to look at local user profiles on the ZyXEL Device. See Chapter 6 on page 9 3 for background informatio n. T o open th is menu, enter 14 in [...]

P-870HW-I1 User’s Guide 278 Chapter 28 Dial-in User Setup Figure 172 Menu 14.1: Edit Dial-in User The following table describes the labels in this menu. Menu 14.1 - Edit Dial-in User User Name= ? Active= No Password= ? Table 130 Menu 14.1: Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to 31 alph anumeric characters long for th[...]

P-870HW-I1 User’s Guide Chapter 29 NAT Setup 279 C HAPTER 29 NA T Setup Use this menu to configure addr ess mapping, port forwarding, and trigger ports. 29.1 Address Mapping Set s Use this menu to select which address ma pping set you want to configure. See Chapter 10 on page 137 for background information. T o open this menu, enter 1 in menu 15.[...]

P-870HW-I1 User’s Guide 280 Chapter 29 NAT Setup Figure 174 Menu 15.1.1: Address Mappin g Rules The following table describes the labels in this menu. Menu 15.1.1 - Address Mapp ing Rules Set Name= ACL Default Set Idx Local Start I P Local End IP Global Start IP Global End IP Type --- --------------- --------------- --------- ------ -------------[...]

P-870HW-I1 User’s Guide Chapter 29 NAT Setup 281 29.3 Address Mapping Rule Use this menu to configure network ad dress translation ma pping rules. See Chapter 10 on page 137 for background information. T o open this menu, select one of the address mapping rules in menu 15.1.1. Figure 175 Menu 15.1.1.1: Address Mappin g Rule Ty p e 1-1 : One-to-on[...]

P-870HW-I1 User’s Guide 282 Chapter 29 NAT Setup The following table describes the labels in this menu. 29.4 NA T Server Setup Use this menu to look at servers for which you have configu red port forwarding rul es. See Chapter 10 on page 137 for background information. T o op en this menu, enter 2 in menu 15. Table 133 Menu 15.1.1.1: Addr ess Map[...]

P-870HW-I1 User’s Guide Chapter 29 NAT Setup 283 Figure 176 Menu 15.2: NA T Server Setup The following table describes the labels in this menu. 29.5 NA T Server Configuration Use this menu to configure port fo rwarding ru les for servers behind the ZyXEL Device. See Chapter 10 on page 137 for background informatio n. T o open this menu, select on[...]

P-870HW-I1 User’s Guide 284 Chapter 29 NAT Setup Figure 177 Menu 15.2.1: NA T Server Con figuration The following table describes the labels in this menu. 29.6 T rigger Port Setup Use this menu to change your ZyXEL Device’ s port triggering settings. See Chapter 10 on page 137 for background information. T o open this menu, enter 3 in menu 15. [...]

P-870HW-I1 User’s Guide Chapter 29 NAT Setup 285 Figure 178 Menu 15.3: T rigger Port Setup The following table describes the labels in this menu. Menu 15.3 - Trigger Port Setup I ncoming Trigger Rule Name Start P ort End Port Start Port End Port ------------------------------- --------------------------------- ------ 1. 0 0 0 0 2. 0 0 0 0 3. 0 0 [...]

P-870HW-I1 User’s Guide 286 Chapter 29 NAT Setup[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 287 C HAPTER 30 Filter Setup This chapter shows you how to create and apply filters. 30.1 Introduction to Filters Y our ZyXEL Device uses filters to decide whether to allow passage of a da ta packet and/or to make a call. There are two types of filter appli cations: data filtering an d call filterin[...]

P-870HW-I1 User’s Guide 288 Chapter 30 Filter Setup 30.1.1 The Filter Stru cture of the ZyXEL Device A filter set consists of one or more filter rules. Usually , you would group related rules, e.g., all the rules for NetBIOS, into a single set and give it a descriptive name . The ZyXEL Device allows you to configure up to twelve filter sets with [...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 289 Figure 180 Filter Rule Process Y ou can apply up to four filter sets to a particular port to block multiple types of packets. W ith each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. 30.2 Configuring a Filter Set The ZyXEL Device includes filteri[...]

P-870HW-I1 User’s Guide 290 Chapter 30 Filter Setup Figure 181 Menu 21: Filter and Firewa ll Setup 2 Enter 1 to bring up the following menu. Figure 182 Menu 21.1: Filter Set Configuration Select the filter set you wish to configure (1-12) and press [ENTER] . Enter a descriptive name or comment in the Edit Comments field and press [ENTER] . Press [...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 291 Figure 183 Menu 21.1.1: Filter Rules Summary This screen shows the summary of the existing rules in the filter set. The followi ng tables contain a brief description of the abbr eviations used in the previous menus. The protocol dependent filter rules abbreviation are listed as follows: Menu 21.[...]

P-870HW-I1 User’s Guide 292 Chapter 30 Filter Setup Refer to the next section for inform ation on configurin g the filter rules. 30.2.1 Configuring a Filter Rule T o configure a filter rule, type its number in Menu 21.1.1 - Filter Rules Summary an d press [ENTER] to open menu 21.1 .1.1 for the rule. T o speed up filtering, all rules in a filter s[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 293 Figure 184 Menu 21.1.1.1 TCP/IP Filter Rule. The following table describes how to co nfigure your TCP/IP filter rule. Menu 21.1.1 .1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP /IP Filter Rule Active= Yes IP Protocol= 0 IP Source Route= No Destination: IP Addr= IP Mask= Por t #= Por t # [...]

P-870HW-I1 User’s Guide 294 Chapter 30 Filter Setup The following figure illustrates th e logic flow of an IP filter . Port # Comp Press [SP ACE BAR] and then [ENTER] to select the comparison to apply to the destination port in the packet against the value given in Destination: Port # . None Less Greater Equal Not Equal Source IP Addr Enter the s[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 295 Figure 185 Executing an IP Filter 30.2.3 Configuring a Generic Filter Rule This section shows you how to configure a gen eri c filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP , it is generally easier to us e the IP rules directly .[...]

P-870HW-I1 User’s Guide 296 Chapter 30 Filter Setup For generic rules, the ZyXEL Device treats a pack et as a byte stream as oppos ed to an IP or IPX packet. Y o u specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes. The ZyXEL Device applies the Mask (bit-wise ANDing) to the data portion before[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 297 30.3 Example Filter Let’ s look at an example to block outside us ers from accessing the ZyXEL Device via telne t. Table 140 Generic Filter Ru le Menu Fields FIELD DESCRIPTION OPTIONS Filter # This i s the filter set, filter rule coordinates, i.e., 2,3 refers to the second filter set and the t[...]

P-870HW-I1 User’s Guide 298 Chapter 30 Filter Setup Figure 187 T elnet Filter Exam ple 1 Enter 21 from the main menu to open Menu 21 - Filter and Firewall Setup . 2 Enter 1 to open Menu 21.1 - Filter Set Configuration . 3 Enter the index of the f ilter set you wish to conf igure (say 3) and press [ENTER] . 4 Enter a descriptive name or comment in[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 299 •T h e Port # for the telnet service (TCP protocol) is 23. See RFC 1060 for port numbers of well-known services. • Select Equal from the Port # Comp field as you are looking for packets going to port 23 only . • Select Drop in the Action Matched field so that the packet will be dropped if [...]

P-870HW-I1 User’s Guide 300 Chapter 30 Filter Setup 30.4 Filter T ypes and NA T There are two classes of filter rules, Generic Filter (Device) rules and protocol filter ( TCP/ IP ) rules. Generic filter rules act on the raw data from/to LAN and W AN. Protocol filter rules act on the IP packets. Generic and TCP/IP filter rules are discussed in mor[...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 301 Figure 191 Filtering LAN T raffic 30.6.2 Applying Re mote Node Filters Go to menu 1 1.5 (shown be low – note that call filter set s are only present for PPPoE encapsulation) and enter the numb er(s) of the filter set(s) as appropriate. Y ou can cascade up to four filter sets by entering their [...]

P-870HW-I1 User’s Guide 302 Chapter 30 Filter Setup Figure 193 Menu 1 1.1: Remote Node Profile The following table describes the labels in this menu. Menu 11.1 - Remote Node Profile Rem Node Name= ChangeMe Route= IP Active= Yes Encapsulation= PPPoE Edit IP= No Telco Option: Service Name= Allocated Budget(min)= 0 Outgoing: Period(hr)= 0 My Login= [...]

P-870HW-I1 User’s Guide Chapter 30 Filter Setup 303 Nailed-Up Connectio n Select this if you want the ZyXEL Device to automatically connect to your ISP when it is turned on and to remain connected all the time. Th is is not recommended if you pay for your Internet con nected based on the amoun t of time you are connected. Session Options Edit Fil[...]

P-870HW-I1 User’s Guide 304 Chapter 30 Filter Setup[...]

P-870HW-I1 User’s Guide Chapter 31 Firewall Setup 305 C HAPTER 31 Firewall Setup Use this menu to activate or deactivate the firewall. See Chapter 1 1 on page 1 47 for background information. T o open this menu, enter 2 in menu 21. Figure 194 Menu 21.2: Fi rewall Setup Select Ye s to activate the firewall. Select No to deactivate the firewall. Me[...]

P-870HW-I1 User’s Guide 306 Chapter 31 Firewall Setup[...]

P-870HW-I1 User’s Guide Chapter 32 SNMP Configuration 307 C HAPTER 32 SNMP Configuration Use this menu to configure your Z yXEL Devi ce’ s settings for Simple Network Management Protocol (SNMP) management. See Chapter 16 on page 205 for background information. T o open this menu, enter 22 in the main menu. Figure 195 Menu 22: SNMP Configuration[...]

P-870HW-I1 User’s Guide 308 Chapter 32 SNMP Configuration[...]

P-870HW-I1 User’s Guide Chapter 33 System Security 309 C HAPTER 33 System Security Use this menu to configure the administ rator password and to configure wireless authentication for the ZyXEL Device. 33.1 Change Password Use this menu to change the ad ministrator password for the ZyXEL Device. This is the same password used to access the web con[...]

P-870HW-I1 User’s Guide 310 Chapter 33 Syst em Security Figure 197 Menu 23.2: System Security - RADIUS Server The following table describes the labels in this menu. 33.3 IEEE802.1x Use this menu to configure I EEE 802.1x wireless authenticatio n for the ZyXEL Device. See Chapter 6 on page 93 for background information . T o open this menu, enter [...]

P-870HW-I1 User’s Guide Chapter 33 System Security 311 Figure 198 Menu 23.4: System Security - IEEE802.1x The following table describes the labels in this menu. Menu 23.4 - Syst em Security - IEEE802.1x Wireless Port Control= No Auth entication Required ReAuthentication Timer (in sec ond)= N/A Idle Timeout (in second)= N/A Key Management Protocol[...]

P-870HW-I1 User’s Guide 312 Chapter 33 Syst em Security PSK This field is en abled if the Ke y Management Protoco l is WP A-PSK or WP A2- PSK . T ype a pre-shared key from 8 to 63 ASCII characters (includ ing spaces and symbols). The key is case-sensitive. WP A Mixed Mode This field is enabl ed if the Ke y Management Protoco l is WP A , WP A2 , o[...]

P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 313 C HAPTER 34 System Maintenance 24.1 - 24.4 This chapter covers menus 24.1 th rough 24.4. Use these menus to get a variety of system information and to perfo rm system diagnostics. 34.1 S t atus Use this menu to look at packet statistics, in terface status, and basic device info[...]

P-870HW-I1 User’s Guide 314 Chapter 34 System Maintenance 24.1 - 24.4 34.2 Information Use this menu to look at basic device information and LAN interface settings. See Chapter 5 on page 85 for background information. T o open this menu, enter 1 in menu 24.2. S tatus For the WA N port, this fi eld depends on the encapsulation. For Ethernet encaps[...]

P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 315 Figure 200 Menu 24.2.1: System Main tenance - Information The following table describes the labels in this menu. 34.3 Change Console Port S peed Note: The console port is intern al and reserved for technician use only . Use this menu to change th e console port speed. T o open [...]

P-870HW-I1 User’s Guide 316 Chapter 34 System Maintenance 24.1 - 24.4 Figure 201 Menu 24.2.2: System Maintenan ce - Change Console Port S peed The following table describes the labels in this menu. 34.4 Syslog Logging Use this menu to configure the ZyXEL Device to send log messages to a syslog server . See Chapter 19 on page 237 for background in[...]

P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 317 34.5 Call-T riggering Packet Use this menu to look at information about the p acket that triggered a dial-out call. The packet is displayed in an easy-to-read format. T o open this menu, en ter 4 in menu 24.3. Figure 203 Menu 24.3.4: Call-T rigge ring Packet (Example) 34.6 Diag[...]

P-870HW-I1 User’s Guide 318 Chapter 34 System Maintenance 24.1 - 24.4 Figure 204 Menu 24.4: System Maintenan ce - Diagnostic The following table describes the labels in this menu. Menu 24.4 - Syste m Maintenance - Diagnostic TCP/IP 1. Ping Host 2. WAN DHCP Re lease 3. WAN DHCP Re newal 4. PPPoE Setup Test System 11. Reboot Sys tem Enter Menu Sel [...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 319 C HAPTER 35 System Maintenance 24.5 - 24.7 This chapter covers menus 24.5 th rough 24.7. Use these menus to backup and restore your configuration file, as well as upload new firmware and configuration files. 35.1 Filename Conventions The configuration file (often ca lled the ro[...]

P-870HW-I1 User’s Guide 320 Chapter 35 System Maintenance 24.5 - 24.7 The following table is a summary . Please note that the internal filename refe rs to the filename on the ZyXEL Device and the external filename refers to the filename not on the ZyXEL Device, that is, on your comp uter , local network or FTP site and so the name (but not the ex[...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 321 Figure 205 Menu 24.5: Ba ckup Configuration 35.2.2 Using the FTP command from the DOS Prompt 1 Launch the FTP client on your computer . 2 Enter “open” and the IP add ress of your ZyXEL Device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested [...]

P-870HW-I1 User’s Guide 322 Chapter 35 System Maintenance 24.5 - 24.7 Figure 206 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients. 35.2.3 Backup Configuration Using TFTP The ZyXEL Device supports the up/downlo ading of the firmware and the configuratio n file using TFTP (T rivial [...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 323 3 Enter command “sys stdio 0” to disable th e SMT timeout, so the TF TP transfer will not be interrupted. Enter comman d “sys stdio 5” to restore the five-minute SMT timeout (default) when the file transfer is complete. 4 Launch the TFTP client on yo ur computer and con[...]

P-870HW-I1 User’s Guide 324 Chapter 35 System Maintenance 24.5 - 24.7 1 Display menu 24.5 and enter “y” at the following screen. Figure 207 System Maintenance: Backup Configuration 2 The following screen indicates that the Xmodem download has started. Figure 208 System Maintenance: S tarting Xmod em Download Screen 3 Run the HyperT erminal pr[...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 325 35.3.1 Restore Using FTP For details about backup usin g (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter . Figure 21 1 Menu 24.6: Restore Config uration 35.4 Uploading Firmware and Configuration Files Menu 24.7 – System Maintenance – Uplo[...]

P-870HW-I1 User’s Guide 326 Chapter 35 System Maintenance 24.5 - 24.7 35.4.1 Firmware Upload FTP is the preferred method for uploading the firm ware and configuration. T o use this feature, your computer must ha ve an FTP client. When you telnet into the Zy XEL Device, you will see the following screens for uploading firmware and the configuratio[...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 327 Figure 214 Menu 24.7.2: System Maintenan ce - Upload System Configuration File T o transfer the firmware and the conf iguration file, follo w these exam ples: 35.4.3 Using the FTP command from the DOS Prompt Exampl e 1 Launch the FTP client on your computer . 2 Enter “open”[...]

P-870HW-I1 User’s Guide 328 Chapter 35 System Maintenance 24.5 - 24.7 Figure 215 FTP Session Example More commands that you may find in third party FTP clients are listed earlier in this chapter . 35.4.4 TFTP File Upload The ZyXEL Device also supports the up/downloadi ng of the firmware and the configura tion file using TFTP (T rivial File T rans[...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 329 TFTP [-i] host put firmware.bin ras where “i” specifies binary image transfer mode (u se this mode when tran sferring binary files), “host” is the ZyXEL Device’ s IP address, “put” transfers the file so urc e on the computer (firmware.bin – name of the firm ware[...]

P-870HW-I1 User’s Guide 330 Chapter 35 System Maintenance 24.5 - 24.7 35.4.8 Example Xmodem Firmwa re Upload Using HyperT erminal Click T ransfer , then Send File to display the following screen. Figure 217 Example Xmodem Upload After the firmware upload process has comp leted, the ZyXEL Device will automatically restart. 35.4.9 Uploading Configu[...]

P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 331 Figure 218 Menu 24.7.2 as seen using the Co nsole Port 2 After the "Starting Xmodem upload" message appears, activate the Xmode m protocol on your computer . Follow the procedure as sh own previously for the HyperT ermina l program. The procedure for othe r serial com[...]

P-870HW-I1 User’s Guide 332 Chapter 35 System Maintenance 24.5 - 24.7[...]

P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 333 C HAPTER 36 System Maintenance 24.8 - 24.1 1 This chapter covers menus 24.8 th rough 24.1 1. Use these menus to get a use CI commands, see how long you have accessed the Internet and how much budgeted time remains, set the current date and time, and co nfigur e remote access t[...]

P-870HW-I1 User’s Guide 334 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 221 Menu 24.9.1: Budget Ma nagement The following table describes the labels in this menu. 36.3 Call History This menu is only applicable your In ternet connection uses PPPoE encapsulation. Use this menu to look at previous calls made to establish th e Internet connect[...]

P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 335 Figure 222 Menu 24.9.2: Call History The following table describes the labels in this menu. 36.4 T ime and Date Setting Use this menu to change your ZyXEL Device’ s time and date. See Chapter 18 on page 229 for background informatio n. T o open this menu, enter 10 in menu 24[...]

P-870HW-I1 User’s Guide 336 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 223 Menu 24.10: T ime and Date Setting The following table describes the labels in this menu. Menu 24.10 - System Mai ntenance - Time and Date Setting Time Protocol= Manual Time Server Address= N/A Current Time: 11 : 02 : 11 New Time (hh:mm:ss): 11 01 32 Current Date: [...]

P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 337 36.5 Remote Management Control Use this screen to configure through which interface(s) and from which IP address(es) users can use various protocols to manage the ZyXEL Device. See Chapter 16 on page 205 for background informatio n. T o open this menu, enter 1 1 in menu 24. S [...]

P-870HW-I1 User’s Guide 338 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 224 Menu 24.1 1: Remote Management Contr ol The following table describes the labels in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Clien t IP = 0.0.0.0 S[...]

P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 339 C HAPTER 37 IP Routing Policy Setup Use this menu to look at and confi gure policy routes. 37.1 Policy Route T raditionally , routing is based on the destinatio n address only and the ZyXEL Device takes the shortest path to forward a packet. IP Policy Routing (IPPR) prov ides a mecha[...]

P-870HW-I1 User’s Guide 340 Chapter 37 IP Routing Policy Setup IPPR follows the existing packet filtering fac ility of RAS in style and in implementation. 37.4 IP Routing Policy Summary Use this menu to look at polic y ro utes. T o open this menu , enter 25 in t he main menu. Figure 225 Menu 25: IP Routing Policy Summary The following table descr[...]

P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 341 37.5 IP Routing Policy Setup Use this menu to configure policy ro utes. T o open this menu, select Ed it and enter the appropriate r ule number in menu 25 . Figure 226 Menu 25.1: IP Routing Policy Setup The following table describes the labels in this menu. PR Precedence of incoming [...]

P-870HW-I1 User’s Guide 342 Chapter 37 IP Routing Policy Setup 37.6 IP Routing Policy Setup Use this menu to specify the ports from which traf fic comes to which the policy routes apply . T o open this menu, select Ye s in Edit policy to packets received fr om in menu 25.1. Criteria IP Protocol En ter a number that represents an IP layer 4 protoc[...]

P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 343 Figure 227 Menu 25.1.1: IP Routing Policy Setup The following table describes the labels in this menu. 37.7 IP Policy Routing Example If a network has both Internet and remote node connections, you can route W eb packets to the Internet using one policy and route FTP packets to a rem[...]

P-870HW-I1 User’s Guide 344 Chapter 37 IP Routing Policy Setup 1 Create a rule in Menu 25.1 - IP Routing Policy Setup as shown next. Figure 229 IP Routing Policy Example 1 2 Select Ye s in the LAN field in menu 25.1.1 to apply the policy to packets received on the LAN port. 3 Check Menu 25 - IP Routing Policy Summary to see if the rule is added c[...]

P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 345 Figure 230 IP Routing Policy Example 2 5 Select Ye s in the LAN field in menu 25.1.1 to apply th e policy to packets received on the LAN port. 6 Check Menu 25 - IP Routing Policy Summary to see if the rule is added correctly . Menu 25.1 - IP Routing Policy Setup Rule Index= 2 Active=[...]

P-870HW-I1 User’s Guide 346 Chapter 37 IP Routing Policy Setup[...]

P-870HW-I1 User’s Guide Chapter 38 Schedule Setup 347 C HAPTER 38 Schedule Setup Use this menu to look at and confi gure the schedule sets in the ZyXEL Device. 38.1 Schedule Set Overview Call scheduling (applicable for PPPoE encapsulation only) a llows the ZyXEL Device to manage a remote node and dictate wh en a remote node should be called and f[...]

P-870HW-I1 User’s Guide 348 Chapter 38 Schedule Setup Figure 231 Menu 26: Sche dule Setup The following table describes the labels in this menu. 38.3 Schedule Set Setup This menu is only a pplicable if your Internet connec tion uses PPPoE encapsulation. Use this menu to configure the schedule sets in the ZyXEL Device. T o open this menu, enter th[...]

P-870HW-I1 User’s Guide Chapter 38 Schedule Setup 349 Figure 232 Menu 26.1: Sche dule Set Setup The following table describes the labels in this menu. Menu 26.1 Schedule Set Setup Active= Yes How Often= Once Start Date(yyyy-mm-dd)= N/ A Once: Date(yyyy-mm-dd)= 2000 - 01 - 01 Weekdays: Sunday= N/A Monday= N/A Tuesday= N/A Wednesday= N/A Thursday= [...]

P-870HW-I1 User’s Guide 350 Chapter 38 Schedule Setup Duration Enter the maximum length of time this connection is allowed in hour-minute format. Action Forced On means that the connection is maintained whethe r or not there is a demand call on the line and will persist for the time period specified in the Duration field. Forced Down means that t[...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 351 C HAPTER 39 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 39.1 Problems St arting Up the ZyXEL Device The following table identifies some remedies if you have problems starting up the ZyXE L Device. 39.2 Problems with the LAN The following table iden[...]

P-870HW-I1 User’s Guide 352 Chapter 39 Troublesh ooting 39.3 Problems with the W AN The following table identifies some remedies if you have problems with the Internet connection. Table 166 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL light is off. Check the telephone wire and connection s between the ZyXEL Device DSL port and the wa[...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 353 39.4 Problems Accessi ng the ZyXEL Device The following table identifies some remedies if you have problems accessing the ZyXEL Device. 39.4.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows fro m your [...]

P-870HW-I1 User’s Guide 354 Chapter 39 Troublesh ooting Figure 233 Pop-up Blocker Y ou can also check if po p-up blocking is disable d in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen. This disa[...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 355 Figure 235 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocke d) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .[...]

P-870HW-I1 User’s Guide 356 Chapter 39 Troublesh ooting Figure 236 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 39.4.1.2 JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer , click T ool[...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 357 Figure 237 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the window .[...]

P-870HW-I1 User’s Guide 358 Chapter 39 Troublesh ooting Figure 238 Security Settings - Java Scripting 39.4.1.3 Java Permissions 1 From Internet Explorer , click To o l s , I nternet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that a safety level is selec[...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 359 Figure 239 Security Settings - Java 39.4.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , I nternet Options and then the Advance d tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to clos e the window .[...]

P-870HW-I1 User’s Guide 360 Chapter 39 Troublesh ooting Figure 240 Java (Sun) 39.4.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Services. Make sure that ActiveX controls are allowed in Internet Explorer . Screen shots for Internet Explorer 6 are [...]

P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 361 Figure 241 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button.[...]

P-870HW-I1 User’s Guide 362 Chapter 39 Troublesh ooting Figure 242 Security Setting ActiveX Controls[...]

P-870HW-I1 User’s Guide Appendix A Product Specifications 363 Appendix A Product S pecifications The values are accurate at the time of writing. Table 168 Device Specifications Default IP Address 192.168.1 .1 Default Subnet Mask 255.255 .255.0 (24 bits) Default Password 1234 Dimensions (W x D x H) 205 mm (L) x 160 mm (D) x 45 mm (H) Power S pecif[...]

P-870HW-I1 User’s Guide 364 Appendix A Product Specifications[...]

P-870HW-I1 User’s Guide 365 Appendix B Setting up You r Computer’s IP Ad dress Appendix B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software comp[...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 36 6 Figure 243 Windows 95/98/Me : Netw ork: Configuration Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter: 1[...]

P-870HW-I1 User’s Guide 367 Appendix B Setting up You r Computer’s IP Ad dress 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, select [...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 36 8 Figure 245 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your g ateway’ s IP address, remove previou sly installed gateways. • If you have a gateway IP address, type it in the New gateway field and click [...]

P-870HW-I1 User’s Guide 369 Appendix B Setting up You r Computer’s IP Ad dress Figure 246 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W i ndows 2000/NT). Figure 247 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr oper ties .[...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 0 Figure 248 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 249 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Propert[...]

P-870HW-I1 User’s Guide 371 Appendix B Setting up You r Computer’s IP Ad dress • Click Advanced . Figure 250 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK . Do one or more of the fo llowing if you want to conf[...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 2 Figure 251 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server[...]

P-870HW-I1 User’s Guide 373 Appendix B Setting up You r Computer’s IP Ad dress Figure 252 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Pr operties window . 9 Click Close ( OK in W indows 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections windo[...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 4 Figure 253 Macintosh O S X: App le Menu 2 Click Network i n the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configur[...]

P-870HW-I1 User’s Guide 375 Appendix B Setting up You r Computer’s IP Ad dress 6 Restart your computer (if prompted). V erifying Settings Check your TCP/IP properties in the Network window . Linux This section shows you how to configure your computer’ s TCP/IP settings in Red Hat Linux 9.0. Procedure, screens an d file location may vary depe [...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 6 Figure 256 Red Hat 9.0: KDE: Ethern et Device: General • If you have a dy namic IP address, clic k Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click S tatically set IP Addresses and fil[...]

P-870HW-I1 User’s Guide 377 Appendix B Setting up You r Computer’s IP Ad dress Figure 258 Red Hat 9.0: KDE: Network Con figuration: Activate 7 After the network card restart pro cess is complete, make sure the St a t u s is Active in the Network Configuration screen. Using Configuration Files Follow the steps below to edit the network co nfigur[...]

P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 8 Figure 260 Red Hat 9.0: S tatic IP Addres s Setting in ifconfig-eth0 2 If you know your DNS server IP address(es) , enter the DNS server information in the resolv.conf file in the /etc directory . The following fi gure shows an example where two DNS server IP address[...]

P-870HW-I1 User’s Guide Appendix C NetBIOS Filter Commands 379 Appendix C NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-up services such as[...]

P-870HW-I1 User’s Guide 380 Appendix C NetBIOS Filter Commands The filter types and their defa ult settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <ty pe> <on|off> where Table 169 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN and WAN This field displays whether NetBIOS pack[...]

P-870HW-I1 User’s Guide Appendix D NA T 381 A PPENDIX D NA T NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outg oing packet, used within one network is changed to a different IP address known within another network. NA T Definiti[...]

P-870HW-I1 User’s Guide 382 Appendix D NAT What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the response comes back, NA T translates the de stination address (the ins[...]

P-870HW-I1 User’s Guide Appendix D NA T 383 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the ZyXEL Devi ce can communicate with three distinct W AN networks. More examples follow at the end of this chapter . Figure 265 NA T Application With IP Alias NA[...]

P-870HW-I1 User’s Guide 384 Appendix D NAT Note: Port numbers do not change for One-to-One and Many One-to-One NA T mapping types. The following table summarizes these types. NA T T ypes This section discusses the following NA T types th at may be implemented on a router in front of the ZyXEL Device. • Full Cone • Restricted Cone • Port Res[...]

P-870HW-I1 User’s Guide Appendix D NA T 385 The following table summarizes how these NA T ty pes handle outgoin g and incoming pack ets. Read the following sections fo r more details and examples. The exampl es in these NA T type sections describe NA T translatio n between internal (private) and external (public) IP addresses. Full Cone NA T In f[...]

P-870HW-I1 User’s Guide 386 Appendix D NAT Figure 266 Full Cone NA T Example Restricted Cone NA T As in full cone NA T , a restricted cone NA T rou ter maps all outg oing packet s from an intern al IP address and port to a single IP address and port on the external network. In the following example, the NA T router maps the source addres s of all[...]

P-870HW-I1 User’s Guide Appendix D NA T 387 Figure 267 Restricted Cone NA T Example Port Restricted Cone NA T As in full cone NA T , a port restricted cone NA T router maps all outgoing packets from an internal IP address and port to a single IP ad dress and port on the ex ternal network. In the following example, the NA T router maps the so urce[...]

P-870HW-I1 User’s Guide 388 Appendix D NAT Figure 268 Port Restricted Cone NA T Example Symmetric NA T The full, restricted and port re stricted cone NA T types use the same mapping for an outgoing packet’ s source address regardless of the des tination IP address and port. In symmetric NA T , the mapping of an outgoing p acket’ s source addr[...]

P-870HW-I1 User’s Guide Appendix D NA T 389 Figure 269 Symmetric NA T SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The ZyXEL Device also supports Full Feature NA T to map multiple global IP addresses to multiple private [...]

P-870HW-I1 User’s Guide 390 Appendix D NAT[...]

P-870HW-I1 User’s Guide Appendix E Firewall Commands 391 Appendix E Firewall Commands The following describes the firewall commands. Table 173 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall Se tUp config edit firewall active <yes | no> This command turns the firewall on or off. config retrieve firewall This command returns the prev[...]

P-870HW-I1 User’s Guide 392 Appendix E Fi rewall Commands config edit firewall e-mail return-addr <e-mail address> This command sets the source e-mail add ress of the firewall e-mails. config edit firewall e-mail email-to <e-mail address> This command sets the e-mail address to which the fire wall e-mails ar e sent. config edit firewa[...]

P-870HW-I1 User’s Guide Appendix E Firewall Commands 393 config edit firewall attack minute-low <0-255> This command sets the threshold of half-open sessions where the ZyXEL Device stop s deleting half-opened sessions. config edit firewall attack max-incomplete-high <0-255> This command sets the threshold of half-open sessions where t[...]

P-870HW-I1 User’s Guide 394 Appendix E Fi rewall Commands Config edit firewall set <set #> log <yes | no> This command sets whether or not the ZyXEL Device creates logs for packets that match the firewall’s default rule set. Rules Config edit firewall set <set #> rule <rule #> permit <forward | block> This command [...]

P-870HW-I1 User’s Guide Appendix E Firewall Commands 395 config edit firewall set <set #> rule <rule #> destaddr- subnet <ip address> <subnet mask> This command sets a rule to have the ZyXEL Device check for traf fic with a p articular subnet destination (def ined by IP address and subnet mask). config edit firewall set &l[...]

P-870HW-I1 User’s Guide 396 Appendix E Fi rewall Commands[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 397 Appendix F Log Descriptions This appendix provides descrip tions of example log messages. Table 174 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server . Time calibration failed The router [...]

P-870HW-I1 User’s Guide 398 Appendix F Log De scriptions Successful HTTPS login Someone has logged on to the router's web configu rator interface using HTTPS protocol. HTTPS login failed Someo ne has failed to log on to the router's web config urator interface using HTTPS protocol. Table 175 System Error Logs LOG MESSAGE DESCRIPTION %s [...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 399 Table 177 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was u nder a SYN flood attack (the TCP incomplete count is per desti nation host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset packet [...]

P-870HW-I1 User’s Guide 400 Appendix F Log De scriptions Table 179 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting. For type and code details, see T able 191 on page 40[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 401 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing Th e PPP connection’s Internet Protocol Control Protocol stage is closing. Table 182 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pa ss through the firewall. Tab[...]

P-870HW-I1 User’s Guide 402 Appendix F Log De scriptions Connecting to content filter server fail The connection to the external content fi ltering server failed. License key is invalid The external content filter ing license key is invalid. Table 184 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall de[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 403 Table 185 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router re ceived and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered. A third party may have altered or tampered with the pack[...]

P-870HW-I1 User’s Guide 404 Appendix F Log De scriptions Cannot resolve Secure Gateway Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address. Peer ID: <peer id> <My remote type> -<My local type> The displayed ID information did not match between t[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 405 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer . Rule [%d] Phase 1 en[...]

P-870HW-I1 User’s Guide 406 Appendix F Log De scriptions Rule [%d] phase 2 mismatch The l isted rule’s IKE phase 2 di d not ma tch betwe en the router and the peer . Rule [%d] Phase 2 key length mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer . Table 187 PKI[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 407 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field. The maximu m size of di rectory data that the router allows is also r[...]

P-870HW-I1 User’s Guide 408 Appendix F Log De scriptions 26 Database method failed. 27 Path was not verified. 28 Maximum path length reached. Table 189 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database reports us er credential error. A user was not authen[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 409 Table 190 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the W AN. (W to L) WAN to LAN ACL set for packets traveling from the W AN to the LAN. (L to L/ZW) LAN to LAN/ ZyXEL Device ACL set for packet s traveling from[...]

P-870HW-I1 User’s Guide 410 Appendix F Log De scriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type. 0 T imestamp request message 14 T imestamp Reply 0 T imestamp reply message 15 Information Request 0 Information request message 16 Informat ion Repl[...]

P-870HW-I1 User’s Guide Appendix F Log Descriptions 411 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record. 2 Use sys logs category to view a list of the log c[...]

P-870HW-I1 User’s Guide 412 Appendix F Log De scriptions • Use the sys logs display [log category] comm and to show the logs in an individ ual ZyXEL Device log category . • Use the sys logs clear command to erase all of the ZyXEL Device’ s logs. Log Command Example This example shows how to set the ZyXEL Devi ce to record the acc ess logs a[...]

P-870HW-I1 User’s Guide Appendix G B oot Comm ands 413 Appendix G Boot Commands The BootModule A T comman ds execute from wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start ed. When you start up your ZyXEL Device, you are given a choice to go into debug mode by pressing a key at the prom[...]

P-870HW-I1 User’s Guide 414 Appendix G Boo t Commands Figure 273 Boot Module Commands AT just answer OK ATHE print help ATBAx change baud rate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k ATENx,(y) set BootExtension Debu g Flag (y=password) ATSE show the seed of passw ord generator ATTI(h,m,s) change system time to hour:min:sec or show current time[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 415 A PPENDIX H Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usag e. Actual menus for your produc t may differ . Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configurati[...]

P-870HW-I1 User’s Guide 416 Appendix H Internal SPTG EN Internal SPTGEN File Modification - Import ant Point s to Remember Each paramete r you enter must be pr eceded by one “=”sign and one spac e. Some parameters are dependent on othe rs. For example, if you disable the Configur e d field in menu 1 (see Figure 274 on page 415 ), then you dis[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 417 Figure 277 Internal SPTGEN FTP Download Example Note: Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you uplo ad it to your ZyXEL De vice. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter " bin &[...]

P-870HW-I1 User’s Guide 418 Appendix H Internal SPTG EN Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. Table 194 Abbreviations Used in the Example Internal SPT GEN Screens Table ABBREVIA TION MEANING FIN F ield Identification Number FN Field Name PV A Parameter V alues Allowed INPUT An example of what you may [...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 419 30100012 = Outp ut protocol filters Set 4 = 256 30100013 = Outp ut device filters Set 1 = 256 30100014 = Outp ut device filters Set 2 = 256 30100015 = Outp ut device filters Set 3 = 256 30100016 = Outp ut device filters Set 4 = 256 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 3[...]

P-870HW-I1 User’s Guide 420 Appendix H Internal SPTG EN 30201005 = Versio n <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Ali as #1 Incoming protocol filters Set 1 = 256 30201007 = IP Ali as #1 Incoming protocol filters Set 2 = 256 30201008 = IP Ali as #1 Incoming protocol filters Set 3 = 256 30201009 = IP Ali as #1 Incoming protocol [...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 421 FIN FN PVA INPUT 30500001 = ESSI D Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> = 0 30500003 = Chan nel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> = 1 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG . Threshold <256 ~ 2432> = 2432 30500006 = WEP <0(DISABLE)[...]

P-870HW-I1 User’s Guide 422 Appendix H Internal SPTG EN Table 197 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup FIN FN PVA INPUT 40000000 = Config ured <0(No) | 1(Yes)> = 1 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encaps ulation <[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 423 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sust ain Cell Rate (SCR) = 0 40000030 = Maxi mum Burst Size(MBS) = 0 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1) | 1(Ri[...]

P-870HW-I1 User’s Guide 424 Appendix H Internal SPTG EN Table 199 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup FIN FN PVA INPUT 150000001 = SUA Server IP address for default port = 0.0.0.0 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> = 0 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000004 = SUA Server[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 425 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> = 0 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000034 = SUA Server #8 Port Start = 0 150000035 = SUA Server #8 Port End = 0 150000036 = SUA Server #8 Loc[...]

P-870HW-I1 User’s Guide 426 Appendix H Internal SPTG EN 210101002 = IP Filter Set 1,Rule 1 Ac tive <0(No)|1(Yes)> = 1 210101003 = IP Filter Set 1,Rule 1 Pr otocol = 6 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0 210101005 = IP Filter Set 1,Rule 1 Dest Subnet Mask = 0 210101006 = IP Filter Set 1,Rule 1 De st Port = 137 210101[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 427 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 Table 200 Menu 21.1 Filter Set #1 (continued) Table 201 Menu 21.1 Filer Set #2 / Menu 21.1 filter set #2, [...]

P-870HW-I1 User’s Guide 428 Appendix H Internal SPTG EN 210202001 = IP Filter Set 2, Rule 2 T ype <0(none)|2(TC P/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 A ctive <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 P rotocol = 6 210202004 = IP Filter Set 2, Rule 2 D est IP address = 0.0.0.0 210202005 = IP Filter Set 2, Rule 2 D[...]

P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 429 230200005 = Authentication Server Sh ared Secret = 111111111111 111 111111111111 1111 230200006 = Accounting Server Config ured <0(No) | 1(Yes)> = 1 230200007 = Accounting Server Active <0(No) | 1(Yes)> = 1 230200008 = Accounting Server IP Add ress = 192.168.1.44 230200009 = Acco[...]

P-870HW-I1 User’s Guide 430 Appendix H Internal SPTG EN 241100002 = TELNET Server Access <0(all)|1(none)|2(L an)|3(Wan)> = 0 241100003 = TELNET Server Secured IP address = 0.0.0.0 241100004 = FTP Server Port = 21 241100005 = FTP Server Access <0(all)|1(none)|2(L an)|3(Wan)> = 0 241100006 = FTP Server Secured IP add ress = 0.0.0.0 2411[...]

P-870HW-I1 User’s Guide Appendix I Se rvices 431 Appendix I Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Pro tocol : This is the type of IP protocol u[...]

P-870HW-I1 User’s Guide 432 Appendix I Services HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic purposes. ICQ UDP 4000 This is a popular Internet cha t program. IGMP (MUL TICAST) User-Defined 2 Internet Group Multi cas t Protocol is used whe[...]

P-870HW-I1 User’s Guide Appendix I Se rvices 433 REAL_AUDIO TCP 7070 A streaming audio service that enab les real time sound over the we b. REXEC TCP 514 Remote Execution Daemon. RLOGIN TCP 513 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems. RTE L N ET TCP 10 7 Remote T elnet. RTS P TCP/UDP 554[...]

P-870HW-I1 User’s Guide 434 Appendix I Services[...]

P-870HW-I1 User’s Guide Index 435 Index A access point. See AP . AP 93 B backup 320 bandwidth management 41 , 197 bandwidth manager class configuration 202 bandwidth manager monitor 204 blocking time 151 , 164 C call control 333 , 334 call scheduling 347 precedence 348 precedence example 348 certifications 4 notices 5 viewing 5 change password at[...]

P-870HW-I1 User’s Guide 436 Index guidelines for enhancing securi ty 153 introduction 147 policies 148 rule checklist 149 rule logic 149 rule security ramifications 149 services 149 firewall setu p 305 firmware 241 upgrade 241 upload 241 upload error 242 , 244 FTP 205 , 389 FTP file transfer 326 FTP restrictions 205 full cone NA T 385 G general s[...]

P-870HW-I1 User’s Guide Index 437 mapping types 383 outside 381 port forwarding 137 server sets 137 symmetric 388 what NA T does 382 NA T mapping 383 many one-to-one 383 many-to-many overload 383 many-to-one 383 server 383 NA T setup 279 NA T traversal 217 NA T types 389 Network Address T ranslation. See NA T . O one-minute high 151 OTIST 96 note[...]

P-870HW-I1 User’s Guide 438 Index SNMPv1 206 SNMPv2 206 source-based routing 339 splitters 44 SPTGEN 415 FTP upload exampl e 417 points to remember 416 text file 415 SSID 93 , 94 hide 94 SSID security 94 weaknesse s 94 stateful inspection 40 , 147 static routing setup 275 SUA 389 SUA server set 389 subnet mask 127 , 159 supporting disk 37 symmetr[...]