ZyXEL Communications P-2802H(W)(L)-I Series manual

www .zyxel.com P-2802H(W)(L)-I Series VDSL V oIP IAD User ’ s Guide V ersion 3.70 6/2007 Edition 1[...]

[...]

About This User's Guide P-2802H(W)(L)-I Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Gu[...]

Document Conventions P-2802H(W)(L)-I Series User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or he[...]

Document Conventions P-2802H(W)(L)-I Series User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall T ele phone Switch Router[...]

Safety Warnings P-2802H(W)(L)-I Series User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs [...]

Safety Warnings P-2802H(W)(L)-I Series User’s Guide 7[...]

Safety Warnings P-2802H(W)(L)-I Series User’s Guide 8[...]

Contents Overview P-2802H(W)(L)-I Series User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 33 Introducing the ZyXEL Device ............... ............. ................ ................ ............. ................ .......[...]

Contents Overview P-2802H(W)(L)-I Series User’s Guide 10[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 11 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions.................................................................. ......................................... .4 Sa[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 12 Part II: Wizard ......................... .................................... ............................ 51 Chapter 3 Internet and Wireles s Setup Wizard ......................................................... ............................. 53 3.1 Introduction ............... ..........[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 13 7.3 LAN TCP/IP ........ ............. ............. ................ ............. ............. ............. ............. .......... ......... 90 7.3.1 IP Address and Subnet Mask ........... ................ ............. ................ ............. ............. ... 91 7.3.2 RIP Setu[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 14 9.4.2 Port Forwarding: Serv ices and Port Nu mbers ........ ............. ................ ............. ........ 122 9.4.3 Configuring Servers Behind Port Forwar ding (Example) .................... ................ ..... 122 9.5 Configuring Port Forwarding ............... ............. ...[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 15 10.16 PSTN Line Screen (“L” models only) .... ............. ............. ............ ............. ............. ........ 152 Chapter 1 1 Firewalls........................................................... ........................................................... ........... 155 1 [...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 16 13.4 IPSec and NA T ....... ............. ................ ............. ................. ............ ................. ............ . .... 182 Chapter 14 VPN Screens............................................................... ..................................................... .....[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 17 15.6 My Certificate Create .... ............. ............. ............. ................ ............. ............. ............ .. ... 216 15.7 My Certificate Details .... ................ ............. ................ ............. ............. ................ ....... .... 218 15.8 [...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 18 19.1.3 System Timeout ..................... .......... ...... ............. ............. ............. ................ ........ 256 19.2 WWW (HTTP and HTTPS) ......... ................ ............. ................ ............. ................ ........... 257 19.3 WWW ............... .[...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 19 22.2 Viewing the Logs ................. ............. ................ ............. ................ ............. ................ . .... 289 22.3 Configuring Log Settings ........... ............. ................ ............. ................ ............. .............. 290 22.4 SMTP [...]

Table of Contents P-2802H(W)(L)-I Series User’s Guide 20 25.5 Problems With Multiple SI P Accounts ........ ............. ............. ................ ............. ............. . 322 25.5.1 Outgoing Calls ...... ................ ............. ............. ................ ............. ................ ........... 3 22 25.5.2 Incoming Calls [...]

List of Figures P-2802H(W)(L)-I Series User’s Guide 21 List of Figures Figure 1 Secure Internet Access Application .. ............. ................ ............. ................ ............. ......... ....... 37 Figure 2 WLAN Application Example ................. ... ................ ............. ............. ............. ............. ....[...]

List of Figure s P-2802H(W)(L)-I Series User’s Guide 22 Figure 39 W AN Interface Setup ... ............. ................ ............. ................. ............ ................. ...... ............. 87 Figure 40 LAN and WAN IP Addresses .... ............. ................ ............. ................ ............. ................ . ....[...]

List of Figures P-2802H(W)(L)-I Series User’s Guide 23 Figure 82 Phone Book > S peed Dial ..... ............. ................ ............. ................ ............. ................ . ....... 149 Figure 83 Phone Book > Incoming C all Policy ... ................ ............. ................ ............. ................ ...... .. 1[...]

List of Figure s P-2802H(W)(L)-I Series User’s Guide 24 Figure 125 T rusted C A Details . ............. ................ ............. ................ ............. ................ ......... ........... . 224 Figure 126 T rusted R emote Hosts ... ............. ................ ................ ............. ................ ............. ..... [...]

List of Figures P-2802H(W)(L)-I Series User’s Guide 25 Figure 168 Network Connections ............. ............. ................ ............. ................ ............. ............ ........ . 276 Figure 169 Internet Connection P roperties ..... ............. ................ ................ ............. ................ ..... ...... 277[...]

List of Figure s P-2802H(W)(L)-I Series User’s Guide 26 Figure 21 1 Macintos h OS 8/9: Apple Menu ..... ................ ................ ............. ................ ................ ..... ... 345 Figure 212 Macintosh OS 8/9: TCP/IP ..................... ................. ................ ............. ................ ........ ..... . 345 Fig[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 27 List of Tables T able 1 VDSL S tandards ......................... ............. ................ ............. ................ ............. ....... ................ 35 T able 2 Models Cov ered .......... ............. ................ ............. ................ ............. ............[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 28 T able 39 NA T Mapping T ypes ............... ............. ................ ............. ................ ............. ............. .......... . 120 T able 40 NA T General ............. ............. ............. ................ ............. ................ ............. ........ .....[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 29 T able 82 T elecommuters Sharing One VPN Rule E xample ...... ................ ................ ............. .............. 208 T able 83 T elecommuters Using Unique V PN Rules Example ............... ................ ............. ................ . 209 T able 84 My Certificates .... .......[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 30 T able 125 PPP Logs ................... ................. ............ ............. ................. ............ ................. ......... ........ 297 T able 126 UPnP Logs .... ................. ............. ............ ................. ............. ............ ................. . .[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 31 T able 168 Abbreviations Used in th e Example Internal SPTGEN Screens T able .................... ........... 379 T able 169 Menu 1 General Setup ............ ................ ................. ............. ................ ................ ..... ......... 380 T able 170 Menu 3 .......... ...[...]

List of Tables P-2802H(W)(L)-I Series User’s Guide 32[...]

33 P ART I Introduction Introducing the ZyXEL Device (35) Introducing the W eb Configurator (43)[...]

34[...]

P-2802H(W)(L)-I Series User’s Guide 35 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Overview The P-2802HW(L) series are Integrated Access Device s (IADs) that combine a VDSL2 router with V oice over IP (V oI[...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 36 • “W” denotes wireless functionality . There is an embedded mini -PCI module for IEEE 802.1 1g wireless LAN connectivity . All wireless features documented in this user ’ s guide refer to the “W” models only . • “L” denotes the PSTN (Public Switched T [...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 37 1.3 Good Habit s for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more se c ure and t o manage the ZyXEL Device more effectively . • Change the password. Use a password that’ s not easy to guess and that consists of different [...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 38 Use content filtering to block access to web sit e s containing keywords that you specify . Y ou can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering. For example, y[...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 39 Figure 3 Internet T elephony Service Provider Application 1.4.4 Making Peer-to-peer Calls Y ou can call directly to someone’ s IP address without using a SIP proxy server . Peer-to-peer calls are also called “Point to Point” or “IP-to -IP” ca lls. Y ou must kn[...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 40 1.5 LEDs Figure 5 LEDs The following table describes your device’ s LEDs. T able 3 LEDs LED COLOR STATUS DESCRIPTION POWER Green On Y our device is receiving power and fun ctioning properl y . Blinking Y our device is rebooting and performing a se lf-test. Red On Y ou[...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 41 Refer to the Quick S tart Guide for in formation on hard ware connections. 1.6 The RESET Button Y ou can use the RESET button at the back o f the device to turn the wireless LAN off or on. Y ou can also use it to activate OTIST in order to assign your wireless security [...]

Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 42 T o set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts.[...]

P-2802H(W)(L)-I Series User’s Guide 43 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configur ator is an HTML-based mana geme nt interface that allows easy device setup and management via Interne t browser . Use In ternet Explorer 6.0 and[...]

Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 44 Figure 6 Password Screen 5 The following screen displays if you have no t yet changed your password. It is strongly recommended you change the default passwo rd. Enter a new passwor d, retype it to confirm and click Apply ; alternatively click Ignor e to proceed to[...]

Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 45 Figure 8 Replace Certificate Screen 7 A screen displays to let you choose whether to go to the wizard or the advanced screens. • Click Go to W izard setup if you are logging in for the first time or if you want to make basic changes. The wizard sel ection screen a[...]

Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 46 2.2 W eb Configurator Main Screen Figure 10 Main Screen As illustrated above, the main scr een is di vided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.2.1 T i tle Bar The title bar allows you to cha nge the [...]

Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 47 2.2.2 Navigation Panel Use the men u items on the na vig a tion panel to open screens t o configure ZyXEL Device features. The following tables describe each menu item. T able 5 Navigation Panel Summar y LINK TA B FUNCTION S tatus This screen contains administrative[...]

Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 48 Firewall General Use this screen to activate/deac tivate the firewall and the default action to take on network traffic g oing in specific directions. Rules This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule. Threshold Us[...]

Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 49 2.2.3 Main Window The main window displays informa tion and configuration fields. It is discussed in the rest of this document. Right after you log in, the St a t u s sc reen is displayed. See Chapter 5 on page 73 for more information about the St a t u s screen. 2.[...]

Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 50[...]

51 P ART II Wi z a r d Internet and W ireless Setup W izard (53) V oIP W izard And Example (65)[...]

52[...]

P-2802H(W)(L)-I Series User’s Guide 53 C HAPTER 3 Internet and Wireless Setup Wizard This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction Use the wizard setup sc reens to configure your system for Internet access with the information given to you by your ISP . " See th[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 54 Figure 1 1 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 12 Wizard Welcome 3 Enter your Internet access information in the wizard screen exactly as your service provider gave it to yo u.[...]

Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 55 Figure 13 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. 4 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields an[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 56 Figure 14 Internet Connection with PPPoE The following table describes the fields in this screen. T able 7 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user na me exactly as your ISP assigned. If assign ed a name in the form user@domain w[...]

Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 57 Figure 15 Internet Connection with Ethernet The following table describes the fields in this screen. 5 W ait for the ZyXEL Device to fini sh testing your W AN connection. T able 8 Internet Connection with Etherne t LABEL DESCRIPTION Obtain an IP Address Automati c[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 58 Figure 16 Connection T est • If the following screen displays, check if your account is activated or click Restart the Internet/Wir eless Setup Wizard to verify your In ternet access settings. Figure 17 Connection T est Failed . 3.3 Wireless Connection Wizard [...]

Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 59 Figure 18 Connection T est Successful 2 Use this screen to activate the wireless LAN and OTIST . Click Next to continue. Figure 19 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. T able 9 Wireless LAN Setup Wizard 1 LABEL DESCR[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 60 3 Configure your wireless settin gs in this screen. Click Next . Figure 20 Wireless LAN The following table describes the labels in this screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving. T able 10 W[...]

Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 61 " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication. 4 This screen varies depending on the security mode you selected in the prev[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 62 Figure 22 Manually Assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 23 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct[...]

Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 63 " No wireless LAN settings display if you chose not to configure wireless LAN settings. Figure 24 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to www .zyxel.com. Internet access is just the beginning. Refer to the res[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 64[...]

P-2802H(W)(L)-I Series User’s Guide 65 C HAPTER 4 VoIP Wizard And Example This chapter shows you how to configure your SIP account(s) and make a V oIP phone call. 4.1 Introduction The ZyXEL Device has V oice over IP (V oIP) co mmunication capabilities that allow you to use a traditional analog telephone to make Internet calls. Y ou can configure [...]

Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 66 Figure 26 Select a Mode 2 Click V OICE OVE R INTERNET SETUP to configure your SIP settings. Figure 27 Wizard: Welcome 3 Fill in the V OICE OVER INTERNET SETUP wizard screen with the information provided by your V oIP service provider . Y our V oIP service provider supplies y[...]

Chapter 4 VoIP Wizard A nd Example P-2802H(W)(L)-I Series User’s Guide 67 Figure 28 V oIP Wizard Configurat ion The following table describes the labels in this screen. Username V oIPUser This is the us ername you use to lo gin to your SIP account. Password Password This is the password you use to login to your SIP account. T able 14 VoIP Wizard [...]

Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 68 4 Y our ZyXEL Device will attempt to register your SIP account with your V oIP service provider . When your a ccount is registered your PHONE 1 light wi ll come on and yo u are ready to make and receive V oIP phone calls. Figure 29 SIP Registration T est 5 This screen displa[...]

Chapter 4 VoIP Wizard A nd Example P-2802H(W)(L)-I Series User’s Guide 69 Figure 31 V oIP Wizard Finish 7 T o call other V oIP users, you need to follow a similar proces s to ensure that their SIP account is registered and active. After it is re gistered, they need to provide you with their SIP number . Y ou ca n use your V oIP service pr ovider [...]

Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 70[...]

71 P ART III Advanced S tatus Screens (73) WA N S e t u p ( 8 3 ) LAN Setup (89) W ireless LAN (101) Network Address T ranslation (NA T) Screens (1 17) V oice (129) Firewalls (155) Content Filtering (175) Introduction to IPSec (179) VPN Screens (185) Certificates (21 1) S tatic Route (235) Quality of Service (QoS) (239) Dynamic DNS Setup (251) Remo[...]

72[...]

P-2802H(W)(L)-I Series User’s Guide 73 C HAPTER 5 Status Screens Use the St a t u s screens to look at the current status of the device, system resources, inte rfaces (LAN and W AN), and SIP accounts. Y ou can als o register and unregister SIP accounts. The St a t u s screen also provides detailed informatio n from Any IP and DHCP an d statistics[...]

Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 74 Each field is described in the following table. T able 15 Status Screen LABEL DESCRIPTION Refresh Interval Enter how often you want the ZyXEL Device to u pdate this screen. Apply Click this to update this screen immediatel y . Device Information Host Name This field displays the ZyX[...]

Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 75 System S tatus System Uptime This field displays how long the ZyXEL Device has been runni ng since it last started up. The ZyXEL Device starts up when you plug it in, when you restart it ( Maintenance > T ools > Restart ), or when you reset it (see Section 1.6 on page 41 ). Cur[...]

Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 76 5.2 Any IP T able Click S tatus > AnyIP T able to access this screen. Use this screen to view the IP addres s and MAC address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device. Figure 33 Any IP T able Each field is described in the[...]

Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 77 5.3 WLAN S t atus (“W” models only) Click St a t u s > W L A N St a t u s to access this screen. Use this screen to view the wireless stations that are currently ass ociated to the ZyXEL Device. Figure 34 WLAN S t atus The following table describes the labels in this screen. 5[...]

Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 78 Figure 35 Packet S tatistics The following table describes th e fields in this screen. T able 18 Packet S tatistics LABEL DESCRIPTION System Monitor System up T ime Thi s is the elapsed time the system has been up. Current Date/T ime This field displays your Z yXEL Device’s presen[...]

Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 79 5.5 V oIP St atistics Click St a t u s > V o I P St a t i s t i c s to access this screen. Figure 36 V oIP S tatistics Each field is described in the following table. Interface This field displays either Ethernet (LAN ports) or Wireless (WLAN port). S tatus For the LAN ports, this[...]

Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 80 Registration This field displays the current regi stration status of the SIP account. Y o u can change thi s in the Stat us screen. Registered - The SIP account is registered with a SIP server . Register Fail - The last time the ZyXEL Device tried to register the SIP account with th[...]

Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 81 Poll Interval(s) Enter how often you want the Z yXEL Device to upda te this screen, and cli ck Set Interval . Set Interval Click this to make the ZyXEL De vice update the screen ba sed on the amount of time you specified in Poll Interval . S top Click this to make the ZyXEL Device st[...]

Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 82[...]

P-2802H(W)(L)-I Series User’s Guide 83 C HAPTER 6 WAN Setup This chapter describes how to configure W AN settings. 6.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or t he Internet. 6.1.1 PPP over Ethernet The ZyXEL Device supports PPPoE (Point-to-Poin t Protocol over Ethernet ). PPPoE is an IETF Draft st[...]

Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 84 6.1.3 Nailed-Up Connection (PPP) A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand. The ZyXEL Device does two things wh en you specify a nailed-up connectio n. The first is that idle timeout is di sabled. The second is that the Zy X[...]

Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 85 The following table describes the labels in this screen. T able 20 Internet Access Setup LABEL DESCRIPTION General Mode Select Routing (default) from the drop-down list b ox if your ISP give you one IP address only and you want multiple com puters to shar e an Intern et account. Select Br[...]

Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 86 6.2.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the Inter net Access Setup screen. The sc reen appears as shown. Figure 38 Advanced Internet Access Setup The following table describes the lab[...]

Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 87 6.3 W AN Interface Setup Use this screen to configure your ZyX EL Device’ s W AN interface setting. Click Network > W AN > W AN Interface Setup . If you prefer not to use a VDSL line and you h ave another broadband modem o r router (such as ADSL) availa ble, you can set the first [...]

Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 88[...]

P-2802H(W)(L)-I Series User’s Guide 89 C HAPTER 7 LAN Setup This chapter describes how to configure LAN settings. 7.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building. The LAN [...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 90 7.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server , the ZyXEL Device provi[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 91 7.3.1 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number . Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 92 7.3.2 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange rou ting information with other routers. The RIP Direction field controls the sending a nd receiving of RIP packets. When set to: • Both - the ZyXEL Device will broadcast its routin g table periodically an [...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 93 7.3.4 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allo w the computer to access the Internet (through the ZyXEL Device). In cases where your computer is required to use a static IP address in an[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 94 The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the ZyXEL Device. 1 When a computer (which is in a different su bnet) first attempts to access the Internet, it sends packets to its defa ult gateway (which is not the ZyXEL D[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 95 7.4.1 Configuring Advanced LAN Setup Use this screen to edit your ZyXEL Device's RIP , multicast, any IP and W indows Networking settings. Click the Advanced Setup button in the LAN IP scree n. The screen appears as shown. Figure 43 Advanced LAN Setup The following table describes th[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 96 7.5 DHCP Setup Click Network > D HCP Setup to open this screen. Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devi ces on the LAN. Figure 44 DHCP Setup Windows Networking (NetBIOS over TCP/IP) NetBIOS (Network Basic Input/Output [...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 97 The following table describes the labels in this screen. 7.6 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. T able 25 DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server , your ZyXEL Device c[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 98 Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02. Click Network > LAN > Client List to open the following screen. Use this screen t[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 99 7.7 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The ZyXEL Device s upports three logical LA N interfaces via its single physical Ethernet interface with th e ZyXEL Device itself as the gateway for eac[...]

Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 100 Figure 47 LAN IP Alias The following table describes the labels in this screen. T able 27 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Sele ct the check box to confi gure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal nota[...]

P-2802H(W)(L)-I Series User’s Guide 101 C HAPTER 8 Wireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more de tailed information about wirele ss networks. This chap ter applies to the “W” models only . 8.1 Wireless Network Overview The following figure provides an e[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 102 Like radio stations or television channels, e ach wireless network uses a s pecific channel, or frequency , to send and receive information. • Every device in the same wireless networ k must use security compatible with the AP . Security stops unauthorized devices from using the wir[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 103 Unauthorized wireless devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and p assword. Then, they can use that user name and pas[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 104 8.2.5 One-T ouch Intelligent S ecurity T echnology (OTIST) W ith ZyXEL ’ s OTIST , you set up the SSID an d the encryption (WEP or WP A-PSK) on the ZyXEL Device. Then, the ZyXEL Device transfer s them to the devices in the wireless networks. As a result, you do not have to set up th[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 105 Figure 49 Wireless LAN > General The following table describes the labels in this screen. 8.4.1 No Security Select No Security to allow wireless stations to commun icate with the access points without any data encryption. T able 30 Wireless LAN > General LABEL DESCRIPTION Active[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 106 " If you do not enable any wi reless security on your Zy XEL Device, your network is accessible to any wireless network ing device that is within range. Figure 50 Wireless: No Security The following table describes the labels in this screen. 8.4.2 WEP Encryption Screen In order t[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 107 Figure 51 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 8.4.3 WP A(2)-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir ele ss LAN to display the Ge neral screen. Select WP A-PSK or[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 108 Figure 52 Wireless: WP A(2)-PSK The following table describes the wireless LAN security labels in this screen. T able 33 Wireless: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choo se WP A-PSK or WP A2-PSK from the drop-down list box. WP A Compatible This field is only avail able for WP[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 109 8.4.4 WP A(2) Au thentication Screen In order to configure and enable WP A Authentication; click the Wireless LAN link under Network to display the Wir e less screen. Select WP A or WP A2 from the Security list. Figure 53 Wirele ss: WP A(2) The following table describes the wireless L[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 0 8.4.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen. The screen appears as shown. Figure 54 Wireless LAN: Advanced Group Key Update Ti m e r The Group Key Update T imer is the rate at which the AP (if usin[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 111 The following table describes the labels in this screen. 8.5 OTIST Screen Use this screen to set up and start OTIST on th e ZyXEL Device in your wireless network. T o open this screen, click Network > Wir eles s LAN > OTIST . Figure 55 Network > Wireless LAN > OTIST T able[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 2 The following table describes the labels in this screen. Before you click St a r t , you should enable OTIST on all the OTIST -enabled devices in the wireless network. For most devices, follow these steps. 1 Start the ZyXEL utility 2 Click the Adapter tab. 3 Select the OTIST check bo[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 3 Figure 57 OTIST : Settings Y ou can use the key in this screen to set up WP A -PSK encryption manually for no n-OTIST devices in the wireless network. Review the settings, and click OK . The ZyXEL Device begins transferring OTIST settings. The following screens appear in the Zy XEL D[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 4 2 If an OTIST -enabled wireless device loses its wireless connection for more than ten seconds, it will search for an OTIST -enabled AP for up to one minute. (If you manually have the wireless device searc h for an OT IST -enabled AP , there is no timeout; click Cancel in the OTIST p[...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 5 The following table describes the labels in this screen. T able 37 MAC Address Filter LABEL DESCRIPTION Active MAC Filter Select the check box to en able MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address table. Select Deny [...]

Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 6[...]

P-2802H(W)(L)-I Series User’s Guide 11 7 C HAPTER 9 Network Address Translation (NAT) Screens This chapter discusses how to configure NA T on the ZyXEL Device. 9.1 NA T General Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing pa[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 11 8 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the resp onse co[...]

Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 11 9 Figure 63 NA T Application With IP Alias 9.1.5 NA T Mapp ing T yp es NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address. • Many to One : In Ma[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 120 The following table summarizes these types. 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The ZyXEL Device also supports Fu[...]

Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 121 Figure 64 NA T General The following table describes the labels in this screen. 9.4 Port Forwarding A port forwarding set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP , that you can make visible to the outside world even t[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 122 Y ou may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired serve r . The port numb er identifies a service; fo r example, web service is on port 80 and FTP on port 21. In some cases, such as fo[...]

Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 123 Figure 65 Multiple Servers Be hind NA T Example 9.5 Configuring Port Forwarding " If you do not assign a Default Server IP address, the Zy XEL Device discards all packet s received for ports that are not specified here or in the remote management set[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 124 The following table describes th e fields in this screen. 9.5.1 Port Forwarding Rule Edit Use this screen to edit a port forwarding rule. Cl ick the rule’ s edit icon in the Port Forwarding screen to display the screen show n next. Figure 67 Port Forwa[...]

Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 125 The following table describes th e fields in this screen. 9.6 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is important because the Zy XEL Device appl[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 126 Figure 68 Address Mapping Rule s The following table describes th e fields in this screen. 9.6.1 Address Mapping Rule Edit T o edit an address mapping rule, click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. T a[...]

Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 127 Figure 69 Edit Address Mapping Rule The following table describes th e fields in this screen. T able 44 Edit Address Mapping Rule LABEL DESCRIPTION Ty p e Cho ose the port mappin g type from one of the following. One-to-One : One-to-One mode maps one loca[...]

Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 128 9.6.2 SIP ALG Some NA T routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NA T by examining and translating IP addresses embedde d in the data stream. When the ZyXEL Device registers with th e SIP regis[...]

P-2802H(W)(L)-I Series User’s Guide 129 C HAPTER 10 Voice This chapter provides background informatio n on V oIP and SIP and explains how to configure your device’ s voice settings. 10.1 Introduction to V oIP V oIP is the sending of voice signals over Inte rnet Protoco l. This allows you to make phon e calls and send faxes over the In ternet at[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 130 10.2.1.2 SIP Service Domain The SIP service domain of the V oIP service provid er is the domain name in a SIP URI. For example, if the SIP address is 1 122334455@V oIP-provider .com , then “V oIP-provider .com” is the SIP service domain. 10.2.2 SIP Call Progression The following figure [...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 131 Figure 71 SIP User Agent 10.2.3.2 SIP Proxy Server A SIP proxy server receives requests from clie nts and forward s them to another server . In the following example, you want to use client device A to call someone who is using client device C. 1 The client de vice (A in the figure) sends a[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 132 Figure 73 SIP Redirect Server 10.2.3.4 SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your u ser name and password when you register . 10.2.4 RTP When you make a V oIP call using SIP , the R T[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 133 • G .729 is an Analysis-by-Synthe sis (AbS) hybrid waveform co dec that uses a filter based on information about how the human vocal tract produces sounds. G .729 provides good sound quality and reduces the re quired bandwidth to 8 kbps. 10.2.7 PSTN Call Setup Signaling Dual-T one MultiFr[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 134 1 Pick up the phone and press “****” on yo ur phone’ s keypad and wait for the message that says you are in the configuration menu. 2 Press a number from 1201~1208 followed by the “#” key to listen to the tone. 3 Y ou can continue to add, listen to, or delete tones, or you can han[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 135 Figure 74 Diff Serv: Differentiated Service Field The DSCP value determines the forwardi ng behavior , the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Base d on the marking ru le, different kinds of traf fic can be marked for different priorities of fo rwardin[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 136 Figure 75 SIP > SIP Settings Each field is described in the following table. T able 48 SIP > SIP Settings LABEL DESCRIPTION SIP Account Select the SIP account you want to see in this scree n. If you change thi s field, the screen automatically refreshes. SIP Settings Active SIP Accoun[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 137 10.5 Advanced SIP Setup Screen Click V oIP > SIP > SIP Settings to open the SIP Settings screen. Select a SIP account and click Advanced Setup to open the Advanced SIP Setup screen. Use this screen to maintain advanced settings for each SIP account. User Name En ter the user na me for[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 138 Figure 76 V oIP > SIP Settings > Advanced Each field is described in the following table. T able 49 VoIP > SIP Settings > Advanced LABEL DESCRIPTION SIP Account This field displ ays the SIP account you see in this screen. SIP Server Settings[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 139 URL T ype Select whether or not to include th e SIP service domain name when the ZyXEL Device sends the SIP number . SIP - include the SIP service domai n name. TEL - do not include the SIP service domain name. Expirat ion Duration Enter the number of seconds yo ur SIP acc ount is registere[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 140 Enable Select this if your V oIP service provi der has a SIP ou tbound server to handle voice calls. This allows the ZyXEL Device to work with any type of NA T router and eliminates the need fo r STUN or a SIP AL G . Tu rn off any SIP ALG on a NA T router in front of the ZyXEL Devic e to ke[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 141 10.6 SIP QoS Screen Use this screen to maintain T o S and VLAN se ttings for the ZyXEL De vice. T o access this screen, click V oIP > SIP > QoS . Figure 77 SIP > QoS Each field is described in the following table. 10.7 Phone Y ou can configure the volume, ec ho cancellation and V A[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 142 10.7.2 Comfort Noise Generation When using V AD, the ZyXEL Device generates co mfort noise when the other party is not speaking. The comfort noise lets you know that th e line is still connected as total silence could easily be mistaken for a lost connection. 10.7.3 Echo Cancellation G .168[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 143 10.9 Advanced Analog Phone Setup Screen Use this screen to edit advanced settings for eac h phone port. T o access this screen, click Advanced Setup in V oIP > Phone > Analog Phon e . Figure 79 Phone > Analog Phone > Advanced Each field is described in the following table. PSTN [...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 144 10.10 Common Phone Settings Screen Use this screen to activate and deactivate im mediate dialing. T o acces s this screen, click Vo I P > Phone > Common . Figure 80 Phone > Common Each field is described in the following table. Listening V olume Enter the loudness that the ZyXEL De[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 145 10.1 1 Phone Services Overview Supplementary services such as call hold, call waiting, call transfer , etc. are generally available from your V oIP service provider . Th e ZyXEL Device supports the following services: • Call Hold • Call W aiting • Making a Second Call • Call T ransf[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 146 10.1 1.2.1 European Call Hold Call hold allows you to put a call ( A ) o n hold by pressing the flash key . If you have anothe r call, press the flash key an d then “2” to switch back and forth between caller A and B by putting either one on hold. Press the flash key and then “0” to[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 147 2 Dial a phon e number directly to make another call. 3 When the second call is answered, pre ss the fl ash key and press “3” to create a three-way conversation. 4 Hang up the phone to drop th e connection. 5 If you want to separate the activated th ree-way conference into two individua[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 148 2 Dial a phone number d irectly to make another call (to part y B). 3 When party B answers the second call, press the flash key to create a three-wa y conversation. 4 Hang up the phone to drop th e connection. 5 If you want to separate the activated th ree-way conference into two individual[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 149 Use this screen to add, edit, or remove speed-d ial numbers for outgoing calls. T o access this screen, click V oIP > Phone Book > Speed Dial . In peer-to-peer calls, you call another V oIP device directly wi thout going through a V oIP service provider ’ s SIP server . Select Non-P[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 150 10.14 Incoming Call Policy Screen Use this screen to maintain rules for handlin g inco ming calls. Y ou can block, redirect, or accept them. T o a ccess this s creen, click V oIP > Phone Book > Incoming Call Policy . Figure 83 Phone Book > Incoming Call Policy Number This field dis[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 151 Y ou can create two sets of call-forwarding rules. Each one is stored in a ca ll-forwarding table. Each field is described in the following table. T able 58 Phone Book > Incoming Call Policy LABEL DESCRIPTION T able Number Select the ca ll-forwarding table you want to see in this screen.[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 152 10.15 PSTN Line (“L” models only) W ith PSTN line you can make an d receive regular PSTN phone call s. Use a prefix number to make a regular call. When the devic e does not have power , yo u can make regula r calls without dialing a prefix number . 1 When the ZyXEL Device does not have [...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 153 Each field is described in the following table. T able 59 PSTN Line > General LABEL DESCRIPTION PSTN Line Pre-fix Number Enter a prefix (one to seven numbers) you dial before you dial the ph one number , if you want to make a regular phone call while one of your SIP accounts is registere[...]

Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 154[...]

P-2802H(W)(L)-I Series User’s Guide 155 C HAPTER 11 Firewalls Use these screens to enable and configure the firewall that protects your ZyXEL Device and your LAN from unwanted o r malicious traffic. 1 1.1 Firewall Overview Originally , the term fir ewall referred to a construction tech nique designe d to prevent the spread of fire from one room t[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 156 • allows traffi c that originates from your LAN computers to go to all of the networks. • blocks traffic that originates on the other networks from going to the LAN. Y our customized rules take precedence and ove rride the ZyXEL Device’ s default settings. The ZyXEL Device checks [...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 157 • LAN to W AN These rules specify which computers on the LAN ca n access which computers or services on the W AN. By default, the ZyXEL Device’ s stateful pack et inspection drops packets traveling in the following directions: •W A N t o L A N These rules specify which computers o[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 158 1 1.3 Security Considerations " Incorrectly configuri ng the firewall may block valid access or introduce security risks to the ZyXEL Device and your protected network. Use caution when creating or deleting firewall rules and test your rules af ter you configure them. Consider thes[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 159 2 The ZyXEL Device reroutes the SYN packet through Gateway A on the LAN to the WA N . 3 The reply from the W AN goes directly to the computer on the LAN without going through the ZyXEL Device. As a result, the ZyXEL Device resets the co nnection, as the conn ection has not been acknowle[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 160 Figure 87 IP Alias 1 1.5 General Firewall Policy Click Security > Fir ew all to display the followi ng screen. Activate the firewall by selecting the Active Fir ewall check box as seen in the following screen. Refer to Section 1 1.5 on page 160 for more information. Figure 88 Firewal[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 161 The following table describes the labels in this screen. 1 1.6 Firewall Rules Summary " The ordering of your rules is very important as rules are applied in turn. Refer to Section 1 1.5 on page 160 for more information. T able 60 Firewall: General LABEL DESCRIPTION Active Firewall [...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 162 Click Security > Firewall > Rules to bring up the following scre en. This scree n displays a list of the configured firewall rules. Note the order in which the rules are listed. Figure 89 Firewall Rules The following table describes the labels in this screen. T able 61 Firewall Ru[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 163 1 1.6.1 Configuring Firewall Rules Refer to Section 1 1.5 on page 160 for more information. In the Rules screen, select an index number and click Add or click a rule’ s Edit icon to display this screen and refe r to the following table for information on the l a bels. Modify Click the[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 164 Figure 90 Firewall: Edit Rule The following table describes the labels in this screen. T able 62 Firewall: Edit Rule LABEL DESCRIPTION Activ e Select this option to enable th is firewall rule. Action for Matched Packet Use the drop-down list box to select whether to discard ( Drop ), de[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 165 Source/Destination Address Address T ype Do you want your rule to apply to packets with a p a rticular (single) IP , a range of IP addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or a ny IP address? Select an option from the d rop-down list box that incl udes: Single Ad[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 166 1 1.6.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix E on page 373 for some examples. Click the Edi[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 167 Figure 92 Firewall: Configure Customized Services The following table describes the labels in this screen. 1 1.7 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “MyService” connection from the Internet. 1 Click Security > Fir ew all >[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 168 Figure 93 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall rule co[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 169 Figure 95 Firewall Example: Edit Ru le: Des tination Addres s 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom services show up with an “*” before their nam[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 170 Figure 96 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through 10.0.0[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 171 Figure 97 Firewall Example: Rules: MyService 1 1.8 Firewall Thresholds For DoS attacks, the ZyXEL Device uses thresholds to determine when to start dropping sessions that do not become fully established (half-open sessions). These thresholds apply globally to all sessions. For TCP , hal[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 172 1 1.8.1 Threshold V alues If everything is working properly , you probably do not need to ch ange the threshold settings as the default threshold values should work for mo st small of fices. Tune these parameters when you believe the ZyXEL Device has been receiving DoS attacks that are [...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 173 The following table describes the labels in this screen. T able 65 Firewall: Threshold LABEL DESCRIPTION Denial of Service Thresholds The ZyXEL Device measures both the total number of existing ha lf-open sessions and the rate of session establishment attempts. Both TCP and UDP half-ope[...]

Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 174[...]

P-2802H(W)(L)-I Series User’s Guide 175 C HAPTER 12 Content Filtering This chapter covers how to configure content filtering. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block web sites that contain key word[...]

Chapter 12 Content Filtering P-2802H(W)(L)-I Series User’s Guide 176 The following table describes the labels in this screen. 12.3 Configuring the Schedule Use this screen to set the days and times for the ZyXEL Device to pe rform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown. Figure 101 Content[...]

Chapter 12 Con tent Filter ing P-2802H(W)(L)-I Series User’s Guide 177 The following table describes the labels in this screen. 12.4 Configuring T rusted Computers Use this screen to exclude a range of users on the LAN from content f iltering on your ZyXEL Device. Click Security > Content Filter > Tr u s t e d . The sc reen appears as shown[...]

Chapter 12 Content Filtering P-2802H(W)(L)-I Series User’s Guide 178[...]

P-2802H(W)(L)-I Series User’s Guide 179 C HAPTER 13 Introduction to IPSec This chapter introduces the basics of IPSec VPNs. 13.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications between sites without the expense of leased site-to-site lines. A secure VP N is a combination of tunneling, encryption, authentication, acce[...]

Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 180 Figure 103 Encryption an d Decryption 13.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network. 13.1.3.3 Dat a Integrity The IPSec receiver can validate packets se nt by the IPSec sender to ensure that the data has not be[...]

Chapter 13 Introdu ction to IPSec P-2802H(W)(L)-I Series User’s Guide 181 Figure 104 IPSec Architecture 13.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406 ) and AH (Authentication Header) protocol (RFC 2402 ) describe the packe t formats and the default standards for packet structure (including implemen tation alg[...]

Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 182 Figure 105 T ransport and T unnel Mode IPSec Encap sulation 13.3.1 T ransport Mode Tr a n s p o r t mode is used to protect upper layer p rot ocols and only affects the data in the IP packet. In Tr a n s p o r t mode, the IP packet contains the security protocol ( AH or ESP [...]

Chapter 13 Introdu ction to IPSec P-2802H(W)(L)-I Series User’s Guide 183 A NA T device in between the IPSec endpoints w ill rewrite either the source or destination address with one of it s own choosing. The VPN device at the receiving end wil l verify the integrity of the incoming packet by computing its own hash value, and complain that the ha[...]

Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 184[...]

P-2802H(W)(L)-I Series User’s Guide 185 C HAPTER 14 VPN Screens This chapter introduces the VPN screens. See Chapter 22 on page 289 for information on viewing logs and th e appendix for IPSec log descriptions. 14.1 VPN/IPSec Overview Use the screens documented in this chapter to configure rules for VPN connections and manage VPN connections. 14.2[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 186 14.3 My IP Address My IP Address is the W A N IP address of th e ZyXEL Device. The ZyXEL Device has to rebuild the VPN tunnel if My IP Address changes after setup. The following applies if this field is configured as 0.0.0.0 : • The ZyXEL Device uses the current ZyXEL Device W AN IP[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 187 If the remote secure gateway has a static W AN IP address, enter it in the Secure Gateway Address field. Y ou may alternatively enter the remote secure gatewa y’ s domain name (if it has one) in the Secure Gateway A ddress field. Y ou can also enter a remote secure gateway’ s dom[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 188 Figure 107 VPN Setup The following table describes the fields in this screen. T able 71 VPN Setup LABEL DESCRIPTION No. This is the VPN policy index number . Click a number to edit VPN policies. Activ e This field displays whether the VPN policy is acti ve or not. A Ye s signifies tha[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 189 14.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the ZyX EL Device automatically renegotiates the tunnel wh en the IPSec SA lifetime period expires (see Section 14.12 on page 198 for more on the IPSec SA lifetime). In ef fe ct, the IPSec tunnel becomes an ?[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 190 NA T is not normally compatible with ESP in transport mode either , but the ZyXEL Device’ s NA T T raversal feature provides a way to handle this. NA T traversal allows you to set up an IKE SA when there are NA T routers between the two IPSec routers. Figure 108 NA T Router Between [...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 191 The following figure depicts an example wh ere three VPN tunnels are created from ZyXEL Device A; one to branch office 2, one to branch of fice 3 and anoth er to headquarters. In orde r to access computers that use private domain names on the he adquarters (HQ) n etwork, the ZyXEL De[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 192 14.9.1 ID T ype and Content Examples T wo IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two ZyXEL Devices in this example ca n complete negotiation and establish a VPN tunnel. T able 73 Local ID Type and Content Fields LOCAL ID[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 193 The two ZyXEL Devices in this example cann ot complete their negotiation because ZyXEL Device B’ s Local ID type is IP , but ZyXEL Device A ’ s Peer ID type is set to E-mail . An “ID mismatched” message displays in the IPSEC LOG . 14.10 Pre-Shared Key A pre-shared key identif[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 194 Figure 1 10 VPN Setup: Edit The following table describes the fields in this screen. T able 77 VPN Setup; Edit LABEL DESCRIPTION IPSec Setup Activ e Select this check box to activate this VPN policy . This opti on determines whether a VPN rule is applied before a packet leaves the fir[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 195 NA T Traversal This function is availabl e if the VPN protocol is ESP . Select this check box if you want to set up a VPN tunnel when there are NA T routers between the ZyXEL Device and remote IPSec router . The remote IPSec router must also enable NA T traversal, and the NA T router[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 196 IP Address S tart Wh en the Remote Address T ype fi eld is configured to Single , ente r a (static) IP address on the network behind the remote IPSec router . When the Remote Address T ype field is configure d to Range , en ter the beginning (static) IP address, in a range of computer[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 197 Content The configuration of the peer c ontent depend s on the peer ID type. For IP , typ e the IP address of the comput er with which you will make the VPN connection. If you configure this field to 0 .0.0.0 or leave it blank, the ZyXEL Device will use the address in the Secu re Gat[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 198 14.12 IKE Phases There are two phases to every IKE (Internet Key Exchange) ne gotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA a nd the second one uses that SA to negotiate SAs for IPSe c. Figure 1 1 1 T wo Phases to Set Up t[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 199 • Choose an encryption algorithm. • Choose an authentication algorithm. • Choose a Dif fie-Hellman public-key cryptography key grou p ( DH1 or DH2 ) . • Set the IKE SA lifetime. This field allows you to determin e how l ong an IKE SA should stay up before it times out. An IKE[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 200 14.12.3 Perfect Fo rward Secrecy (PFS) Enabling PFS means that the key is transient. The key is thrown away an d replaced by a brand new key using a new Diffie-Hellman exchange for each new IPSec SA setup. W ith PFS enabled, if one ke y is comp romised, previous and subseque nt keys a[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 201 Enable Repla y Detection As a VPN setup is processing intensive, the system is vulnera ble to Denial of Service (DoS) attacks The IPSec receiver c an detect and reject old or duplicate packet s to protect agains t replay attacks. Select YES from the drop-down menu to enable replay de[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 202 14.14 Manual Key Setup Manual key managemen t is useful if you have pro blems with IKE key managemen t. 14.14.1 Security Parameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol. This data allows for the[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 203 14.15 Configuring Manual Key Y ou only config ure VPN manual key wh en you select Manual in the IPSec Key Mode field on the VPN Setup-Edit screen. This is the VPN Setup - Manual Key screen as shown next. Figure 1 13 VPN Setup: Manu al Key The following table describes the fields in t[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 204 Encapsulation Mode Select T unnel mode or T ransport mode from the drop-down list box. DNS Server (for IPSec VPN) If there is a private D NS server that se rvices the VPN, type its IP address here. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device 's DHCP cl[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 205 14.16 V iewing SA Monitor Click Security > VPN > Monitor to open the s creen as shown. Use this scre en to display and manage active VPN connections. A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel. This screen displays active VP[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 206 When there is outbound traffic but no inbound tr affic, the SA times out automatically after two minutes. A tunnel with no outb ound or inbound traffic is "idle" and does not timeo ut until the SA lifetime period expires. See Section 14. 6 on page 189 on keep alive to have t[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 207 14.17 Configuring Global Setting T o change your ZyXEL Devi ce’ s global settings, click VPN > VPN Global Setting . The screen appears as shown. Figure 1 15 VPN: Global Setting The following table describes the fields in this screen. 14.18 T elecommuter VPN/IPSec Examples The fo[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 208 Figure 1 16 T elecommuters Sharing One VPN Rule Example 14.18.2 T elecommuters Usin g Unique VPN Rules Example In this example the telecommuters (A, B and C in the figure) use IPSec routers with domain names that are mapped to their dynamic W AN IP addresses (use Dynamic DNS to do thi[...]

Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 209 Figure 1 17 T elecommuters Using Unique VPN R ules Example T able 83 T elecommuters Using Uniq ue VPN Rules Example T ELECOMMUTERS HEADQUARTER S All T e lecommuter Rules: All Headquarters Rules: My IP Address 0.0.0.0 My IP Address: bigcompanyhq.com Secure Gateway Ad dress: bigcompany[...]

Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 210 14.19 VPN and Remote Management If a VPN tunnel uses T elnet, FTP , WWW , then you should configure remote management ( Remote Management ) to allow access for that service.[...]

P-2802H(W)(L)-I Series User’s Guide 21 1 C HAPTER 15 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 15.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users. Certificates are based on public -private key pairs. A certifica[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 212 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ). The ZyXEL Device can check a peer ’ s certific[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 213 Figure 1 19 My Certificates The following table describes the labels in this screen. T able 84 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use. The bar turns from green t[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 214 15.5 My Certificate Import Click Security > Certificates > My Certificates and then Im port to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device. " Y ou can only import a cert ificate that ma[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 215 " Y ou must remove any spaces from th e certificate’s filename before you can import it. 15.5.1 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.509: This is an ITU-T recommen dati[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 216 15.6 My Certificate Create Click Security > Certificates > My Certificates > Crea te to open the My Certificate Create screen. Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authorit y or generate a certif[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 217 Country T ype up to 127 characters to identify the nation where the ce rtificate owner is located. Y ou may use any character , including spaces, but the ZyXEL Device drops tra iling spaces. Key Length S elect a number from the drop-down list box to determine how many bits the key sh[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 218 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request. After the ZyXEL Device successfully enrolls a ce rtificate or generates a certification request or a self-s[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 219 Figure 122 My Certificate Details[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 220 The following table describes the labels in this screen. T able 87 My Certificate Details LABEL DESCRIPTION Certificate Name This field displays the identifying name of this certificate. If you want to change the name, type up to 31 characters to ident ify this certificate. Y ou may [...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 221 15.8 T rusted CAs Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted. The ZyXEL De vice accepts any valid cer[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 222 Figure 123 T rusted CAs The following table describes the labels in this screen. T able 88 T rusted CAs LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the ZyXEL Device’s PKI storage sp a ce that is currently in use. The bar turns from blue to red w[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 223 15.9 T rusted CA Import Click Security > Cer tificates > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’ s certificate to the ZyXEL Devi[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 224 15.10 T rusted CA Det ails Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. Click the details icon to open the T rusted CA Details screen. Use this screen to view in-depth information about the certification authority’ s certif icate, change the c[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 225 The following table describes the labels in this screen. T able 90 T rusted CA Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate . If you want to change the name, type up to 31 characters to i dentify this ke y cert ificate. Y o[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 226 15.1 1 T rusted Remote Host s Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen. This screen displays a list of the certificates of peers that you trust but which are not signed by one of the certification authorities on the T rusted[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 227 Figure 126 T rusted Remote Hosts The following table describes the labels in this screen. T able 91 T rusted Remote Hosts LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use. The bar turns f[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 228 15.12 V erifying a T rusted Remote Host’ s Certificate Certificates issued by certific ation authorities have the certificat ion authority’ s signature for you to check. Self-sig ned certificates only have th e signature of the host itself. This means that you must be very carefu[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 229 15.13 T rusted Remote Host s Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen. Follow the instructions in this screen to save a truste d host’ s certific [...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 230 Figure 130 T rusted Remote Host Details The following table describes the labels in this screen. T able 93 T rusted Remote Host Details LABEL DESCRIPTION Certificate Name Thi s field displays the identifyin g name of this certificate. If you want to change the name, ty pe up to 31 ch[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 231 V ersion This field displays the X.509 version number . Serial Number This field displays the certificat e’s identification number given by the de vice that created the certificate. Subject This field displays informa tion that i dentifies the owner of the certificate, such as Comm[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 232 15.15 Directory Servers Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. This screen display s a summary list of directory servers (tha t contain lists of valid and revoked certificates) that have been save d into the ZyXEL Device. If yo[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 233 15.16 Directory Server Add and Edit Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. Click Add (or the details icon) to open the Direc tory Server Add screen. Use this screen to configure information about a directory server that the ZyX[...]

Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 234 Login Setting Login The ZyXEL Device may need to authenticat e itself in order to assess the directory server . T ype the login name (up to 31 ASCII characters) from the entity maintaining the directory server (u sually a certification auth ority). Password T ype the password (up to [...]

P-2802H(W)(L)-I Series User’s Guide 235 C HAPTER 16 Static Route This chapter shows you how to configure static routes for your ZyXEL Device. 16.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the ne tworks beyond. For insta nce, the ZyXEL Device k[...]

Chapter 16 Static Rou te P-2802H(W)(L)-I Series User’s Guide 236 Figure 134 S tatic Route The following table describes the labels in this screen. 16.2.1 S tatic Route Edit Select a static route index numb er and click Edit . The screen shown next appears. Use this screen to configure the required information for a static route. T able 96 Static [...]

Chapter 16 Static Route P-2802H(W)(L)-I Series User’s Guide 237 Figure 135 S tatic Route Edit The following table describes the labels in this screen. T able 97 Static Rou te Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route. Route Name Enter the name of the IP static route. Leave this fie ld blank to [...]

Chapter 16 Static Rou te P-2802H(W)(L)-I Series User’s Guide 238[...]

P-2802H(W)(L)-I Series User’s Guide 239 C HAPTER 17 Quality of Service (QoS) This chapter contains information about configuring QoS, editing classifiers and viewing the ZyXEL Device’ s QoS packet statistics. 17.1 QoS Overview Quality of Service (QoS) refers to both a networ k’ s ability to deliver data with minimum delay , and the networking[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 240 17.1.2 IP Precedence Similar to IEEE 802.1p prioritization at laye r -2, you can use IP precedence to prioritize packets in a layer-3 network. IP precedence u ses three bits of the eight-bit T oS (T ype of Service) field in the IP header . There are eigh t classes of serv[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 241 17.1.4 Automatical Priority Queue A ssignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assi gn priority to traffic which does not match a class. The following ta[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 242 Figure 136 QoS: General The following table describes the labels in this screen. 17.3 Class Setup Use this screen to add, edit or delete classifier s. A classifier groups traf fic into data flows according to specific criteria such as the sour ce address, destination addr[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 243 Click Advanced > QoS > Class Setup to open the following screen. Figure 137 QoS: Class Setup The following table describes the labels in this screen. 17.3.1 Class Configuration Click the Add button or the Edit icon in the Modify field to configure a classifier . T a[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 244 Figure 138 QoS Class Configuration See Appendix E on page 3 73 for a list of commonly-used services. The following table describes the labels in this screen. T able 102 QoS Clas s Configurat ion LABEL DESCRIPTION Class Configuration Activ e Select the check box to enable [...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 245 T ag Config uration DSCP V alue Select Same to keep the DSCP fields in the packets. Select Auto to map the DSCP value to 802.1 priority level automatically . Select Mark to set the DSCP field with the value you configure in the field provided. 802.1Q T a g Select Same to [...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 246 17.3.2 QoS Example In the following figure, your In ternet connection has an upstream transmission speed of 50 Mbps. Y ou configure a classifier to assign the highest priority queue (6 ) to V oIP traffic from the LAN interface, so that voice traf fic wo uld not get delaye[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 247 Figure 141 QoS Class Examp le: V oIP -2 Figure 142 QoS Class Example: Boss -1[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 248 Figure 143 QoS Class Example: Boss -2 17.4 QoS Monitor T o view the ZyXEL Device’ s QoS packet statistics, click Advan ced > QoS > Monitor . The screen appears as shown. Figure 144 QoS Monitor[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 249 The following table describes the labels in this screen. T able 103 QoS Monitor LABEL DESCRIPTION Priority Queue This shows the priority queue number . T raffic assigned to higher ind ex queues gets through faster while traffic in lower index queues is drop ped if the net[...]

Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 250[...]

P-2802H(W)(L)-I Series User’s Guide 251 C HAPTER 18 Dynamic DNS Setup This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. 18.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou[...]

Chapter 18 Dy namic DNS Se tup P-2802H(W)(L)-I Series User’s Guide 252 Figure 145 Dynamic DNS The following table describes th e fields in this screen. T able 104 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS. Service Prov ider This is the name o f your Dynamic DN S service provider. [...]

Chapter 18 Dynamic DNS Setup P-2802H(W)(L)-I Series User’s Guide 253 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server . Th is feature has the DDNS server a utomatically detect and use the IP address of the NA T router that has a public IP addres[...]

Chapter 18 Dy namic DNS Se tup P-2802H(W)(L)-I Series User’s Guide 254[...]

P-2802H(W)(L)-I Series User’s Guide 255 C HAPTER 19 Remote Management Configuration This chapter provides information on config uring remote management. 19.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. The following figure sho[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 256 " When you choose WA N only or LAN & W AN , you still need to configure a firewall rule to allow access. T o disable remote management of a service, select Disable in the corresponding Access S tatus field. Y ou may only have one remote management session [...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 257 19.2 WWW (HTTP and HTTPS) HTTPS (HyperT ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application- level protocol that enables secure transactions of data[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 258 19.3 WWW Use this screen to configure the ZyXEL De vice’ s HTTP and HTTPS management settings. Click Advanced > Remote MGMT to display the WWW screen. Figure 148 Remote Mana gement: WWW The following table describes the labels in this screen. T able 105 Remote[...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 259 19.4 HTTPS Example If you haven’t changed the default HTTPS port on the ZyXEL Device, then in your browser enter “https://ZyXEL Device IP Address/” as the web site ad dress where “ZyXEL Device IP Address” is the IP address or domain na me of the ZyXEL De[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 260 19.4.2 Net scape Navigator W arning Messages When you attempt to access the ZyXEL Device HTTPS server , a W ebsite Certified by an Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the [...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 261 • The issuing certificate author ity of the ZyXEL Device’ s HT TPS server certificate is not one of the browser ’ s trusted certificate authoritie s. The issui ng certificate authority of the ZyXEL Device's factory default certificate is the ZyXEL Devic[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 262 Figure 152 Example: Lock Denotin g a Secure Connec tion Click Login and you then see the next sc reen. The factory default certificate is a common de fault certificate for all ZyXEL Device models. Figure 153 Replace Certificate Click Apply in the Replace Certificat[...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 263 Figure 154 Device-specific Certificate Click Ignore in the Replace Certificate screen to use the common ZyXEL Device certificate. Y ou will then see this information in the My Certificates screen. Figure 155 Common ZyXEL Device Certificate 19.5 T elnet Y ou can us[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 264 Figure 156 Remote Mana gement: T elnet The following table describes the labels in this screen. 19.7 Configuring FTP Y ou can use FTP (File T ransfer Protocol) to upload and download the ZyXEL Device’ s firmware and configuration files, please see the User ’ s [...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 265 Figure 157 Remote Mana gement: FTP The following table describes the labels in this screen. 19.8 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a member of the TCP/IP pr[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 266 Figure 158 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt inf[...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 267 19.8.2 SNMP T rap s The ZyXEL Device will send traps to the SNMP manager when any on e of the following events occurs: 19.8.3 Configuring SNMP T o change your ZyX EL Device’ s SNMP settings , click Advanced > Remote MGMT > SNMP . The screen appears as show[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 268 The following table describes the labels in this screen. 19.9 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to Chapter 7 on page 89 for background information. Click Advanced > Remote MGMT[...]

Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 269 Figure 160 Remote Mana gement: DNS The following table describes the labels in this screen. 19.10 Configuring ICMP T o change your ZyX EL Device’ s security settin gs, click Advanced > Remote MGMT > ICMP . The screen appears as shown. If an outside user at[...]

Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 270 Figure 161 Remote Mana gement: ICMP The following table describes the labels in this screen. Ta b l e 1 1 1 Remote Management: ICMP LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-reporting protocol between a host server and [...]

P-2802H(W)(L)-I Series User’s Guide 271 C HAPTER 20 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 20.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A [...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 272 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configura[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 273 20.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove [...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 274 Figure 164 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Pr ograms Properties window and click Next . 5 Restart the computer when prompted. Inst alling UPnP in Windows XP Follow the steps below to install the[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 275 Figure 166 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 167 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 276 20.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device. Make sure the computer is co nnected to a LAN port of the ZyXEL D[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 277 Figure 169 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 278 Figure 170 Internet Connection Properties: Adva nced Settings Figure 171 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically . 6 Select Show ic[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 279 Figure 172 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet connection st atus. Figure 173 Internet Connection S tatus Web Configurator Eas y Access W ith UPnP , you can access the web-ba sed configurator on the ZyXEL Device without fi[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 280 Figure 174 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for y our ZyXEL Device an d select Invoke . The web co nfigurator login screen displays.[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 281 Figure 175 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device. Figure 176 Network Connections: My Networ k Places: Properties: Ex[...]

Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 282[...]

283 P ART IV Maintenance, T roubleshooting and S pecifications System (285) Logs (289) T ools (303) Diagnostic (315) T roubleshooting (317) Product Specification s (325)[...]

284[...]

P-2802H(W)(L)-I Series User’s Guide 285 C HAPTER 21 System Use this screen to configure the ZyXEL Device’ s time and date settings. 21.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. However , because some ISPs c heck this name you s hould enter yo[...]

Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 286 Figure 177 System General Setu p The following table describes the labels in this screen. T able 1 13 System General Setup LABEL DESCRIPTION General Setup System Name Choose a descripti ve name for identificatio n purposes. It is recommended you enter your computer ’s “Computer name”[...]

Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 287 21.2 T ime Setting T o change your ZyX EL Device’ s time and date, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the ZyXEL Device’ s time based on your local time zone. Figure 178 System T ime Setting The following table des[...]

Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 288 New Date (yyyy/mm/dd) This field displays th e last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new date in th is field and then click Apply . Get from T ime Serve r Select this radio button to have the ZyX[...]

P-2802H(W)(L)-I Series User’s Guide 289 C HAPTER 22 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. 22.1 Logs Overview The web confi gurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then di splay the logs or have the Zy XE[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 290 Figure 179 Vi ew Log The following table describes the fields in this screen. 22.3 Configuring Log Settings Use the Log Settings screen to configure to where the Zy XEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts t[...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 291 Figure 180 Log Settings The following table describes th e fields in this screen. T able 1 16 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail se rver for the e-mai l addresses specified below . If this field is left blank, l[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 292 22.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. Send Alerts to Alerts are real-time notificat ions that are sent as soon as an event, such as a DoS attack, system error , or forbidden web access attempt occurs . Enter the E-mail addre[...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 293 “SMTP action request failed. ret= ??". The “??"are described in the following table. 22.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edi[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 294 22.5 Log Descriptions This section provides descriptio ns of example log messages. T able 1 18 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router h as adjusted its time based on in formation from the time server . Time calibration failed The router fail[...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 295 T able 1 19 System Erro r Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NA T session exceeds the maximum number of NA T session table entries allowed to be created per host. setNetBIOSFilter: calloc error The router fail ed to alloca t[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 296 For type and code details, see T able 131 on page 29 9 . Exceed MAX incomplete, sent TCP RST The router sent a TCP reset packet when the nu mber of incomplete connections (TCP and UDP) exceeded the user- configured threshold. (Incomplete count is for all TCP and UDP connections through the f[...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 297 For type and code details, see T able 131 on page 29 9 . board %d line %d channel %d, call %d, %s C02 OutCall Connected %d %s The PPPoE, PPTP or dial -up call is connected. board %d line %d channel %d, call %d, %s C02 Call Terminated The PPPoE, PPTP or dial- up call was di sconnected. T abl[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 298 ip spoofing - WAN [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected an IP spoofing attack on the W A N port. ip spoofing - WAN ICMP (type:%d, code:%d) The firewall detected an ICMP IP spoofing attack on the W AN port. icmp echo : ICMP (type:%d, code:%d) The firewall dete cted an [...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 299 User logout because of no authentication response from user. The router logge d out a user from which there was no authentication response. User logout because of idle timeout expired. The router l ogged out a us er whose idle ti meout period expired. User logout because of user request. A [...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 300 0 A gateway may discard internet datagrams if it does not have th e buffer space needed to queue the datagrams for output to the next network on th e route to the destination network. 5 Redirect 0 Redirect datagrams for the Netw ork 1 Redirect datagrams for the Host 2 Redirect datagrams for [...]

Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 301 SIP UnRegistration Success by SIP:SIP Phone Number The listed SIP account’s registration was deleted from the SIP register server . SIP UnRegistration Fail by SIP:SIP Phone Number An attempt to delete the l isted SIP account’s registration from th e SIP register server failed. T able 13[...]

Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 302 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to RFC 2408 for detail ed information on each type. T able 138 RFC-2408 ISAKMP Payload Types LOG DISPLA Y P A YLOAD TYPE SA Security Association PROP Proposal TRANS T ransform KE Key Exchange ID Ident[...]

P-2802H(W)(L)-I Series User’s Guide 303 C HAPTER 23 Tools This chapter explains how to upload new firm ware, manage configuration files and restart your ZyXEL Device. 1 Do not interrupt the fi le transfer process as this may PERMANENTL Y DAMAGE your ZyXEL Device. 23.1 Introduction Use the instructions in this chapter to change the device’ s con[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 304 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filena me extension. Find this firmware at www .zyxel.com.W ith many FTP and TFTP clients, the filenames are similar to those seen next. ftp> put firmware.bin ra[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 305 23.4 Firmware Upgrade Screen Click Maintenance > T ools to open the Firmware screen. Follow the in structions in this screen to upload firmware to your ZyXEL Devi ce. The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minu tes. After a successful upload, t[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 306 Figure 183 Firmware Uplo ad In Progres s The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop. Figure 184 Network T emporarily Disconnected After two minutes, log in again an d[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 307 Figure 186 Configuration 23.5.1 Backup Configuration Backup Configuration allows you to back up (save) the ZyXE L Device’ s current configuration to a file on your co mputer . Once your ZyXEL Dev ice is configured and functionin g properly , it is highly recommended that you b ack up your[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 308 Figure 187 Configuration Upload Successfu l The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop. Figure 188 Network T emporarily Disconnected If you uploaded the default co nf[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 309 Figure 191 Reset In Process Message Y ou can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.6 on p age 41 for more information on the RESET button. 23.6 Rest art System restart allows you t o reboot the Zy XEL Device with[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 310 computer and renames it “ config.rom ”. See earlier in this chapter for more information on filename con ventions. 7 Enter “ quit ” to exit the ftp prompt. 23.7.2 FTP Command Conf iguration Backup Example This figure gives an example of using FTP co mmands from the DOS comm and prom[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 31 1 1 Use telnet from your computer to connect to the ZyXEL Device and log in. B ecause TFTP does not have any security checks, th e ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address. 2 Enter command “ sys stdio 0 ” to disable the man[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 312 23.8 Using FTP or TFTP to Restore Configuration This section shows you how to restore a previ ously saved configuration. Note that this function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup conf[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 313 23.9.1 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer . 2 Enter “open”, followed by a space and the IP address of your device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is “1234”). 5 E[...]

Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 314 2 Enter the command “sys stdio 0” to disable the management idle timeout, so the TFTP transfer will not be interrupted . Enter “command sys stdio 5” to restore the five-minute management idle timeout (default) when the file transfer is complete. 3 Launch the TFTP client on your comp[...]

P-2802H(W)(L)-I Series User’s Guide 315 C HAPTER 24 Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 24.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 196 Diagnostic: General The following table describes th e fields in this screen. 24.2 DSL L[...]

Chapter 24 Diagnostic P-2802H(W)(L)-I Series User’s Guide 316 Figure 197 Diagnostic: DSL Line The following table describes th e fields in this screen. T able 145 Diagnostic: DSL Line LABEL DESCRIPTION VDSL L ine S tatus Click this button to check the DSL connection status. Reset VDSL Line Click this button to reinitia lize the VDSL li ne. The la[...]

P-2802H(W)(L)-I Series User’s Guide 317 C HAPTER 25 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • Phone Calls and V oIP 25.1 Power , [...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 318 25.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP addre ss of the ZyXEL Device by looking up th e IP address of the default ga t[...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 319 5 Reset the device to its factory defaults, an d try to access the ZyXEL Device with the default IP address. See Section 1.6 on page 41 . 6 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns. Advanced Suggestions • T [...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 320 25.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1.5 on page 40 . 2 Make sure you entered your ISP account information correctly in the wizard. These f[...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 321 • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowe ring the priority fo r some applications. 25.4 Phone Calls and V oIP V The telephone port won’t work or the telephone la cks a dial tone. Ch[...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 322 25.5 Problems With Multiple SIP Account s Y ou can se t up two SIP accoun ts on your ZyX EL Device and your ZyXEL Device is equipp ed with two phone ports. By default you r ZyXEL Device uses SIP account 1 with both phone ports for outgoing calls, and it uses SIP accounts 1 and 2 [...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 323 25.5.2 Incoming Calls The following example shows the default behavior of your ZyXEL Device for inc oming calls when two SIP accounts are configured and yo u are using two phones. When a call comes in from your SIP account 1, the phon es connected to both phon e port 1 and phone [...]

Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 324[...]

P-2802H(W)(L)-I Series User’s Guide 325 C HAPTER 26 Product Specifications This chapter gives details about your ZyX EL Device’ s hardware and firmware features. Hardware Specifications Firmware S pecifications T able 146 Hardware Specifications Dimensions (168 W) x (37 D) x (248 H) mm Weight 390g Power S pecification 18V AC 1A Built-in Switch [...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 326 Wireless Functionality (wireless devices only) Allow the IEEE 802.1 1b and/or IEEE 802.1 1g wireless clien ts to connect to the ZyXEL Device wirelessly . Enabl e wireless security (WEP , WP A(2), WP A(2)-PSK) and/or MAC filtering to protect your wireless network. Firmware U[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 327 Firewall Y our device h as a stateful inspecti on firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming tra ffic from the W A N to the LAN i s blocked unless it is initiated from the LAN. The firewall supports TCP/UDP ins[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 328 Other Protocol Support PPP (Point-to-Poin t Protocol) link layer protocol T ransparent bridging for un supported network layer protocols RIP I/RIP II ICMP AT M Q o S SNMP v1 and v2c with MIB II support (RFC 1213) IP Multicasting IGMP v1 and v2 IGMP Proxy Management Embedded[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 329 V oice Specifications " T o take full advantage of the supplem ent ary phone services available through the ZyXEL Device's phone ports, you may need to s ubscribe to the services from your V oIP service provider . " Not all features are suppor ted by all serv[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 330 Call waiting This feature allows you to hear an alert when you are already using the phone and another person calls you. Y ou can then either reject the new incoming cal l, put your current call on hold and receive the new incoming call, or end the current call and receive [...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 331 Wireless Features IEEE 802.1 1g Wireless LAN IEEE 802.1 1g is fully compa tible wit h the IEEE 802.1 1b standard. This means an IEEE 802.1 1b radio card can interface directly with an IEEE 802.1 1g ac cess point (and vice versa) at 1 1 Mbps or lower depe nding on range. IEE[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 332 " Y our device may be prone to RF (Radio Frequency) interfer ence from other 2.4 GHz devices such as microwav e ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. St andards Supported The following list, which is not exhaustive, i llustrates th[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 333 Power Adaptor Specifications T able 152 P-2802HWL-I Series Power Adaptor Sp ecifications North American PLUG standards LEI (LEADER ELECTRONICS INC.) AC Power Adapter Mo del MU18-21801 00-A1 Input Power AC 100~240V olts/50/60Hz/0.6A Output Power DC 18V olts/1A Power Co nsump[...]

Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 334[...]

335 P ART V Appendices and Index " The appendices provide general informatio n. Some details may not apply to your ZyXEL Device. Setting up Y our Computer ’ s IP Address (337) Pop-up W indows, JavaScripts and Java Permissions (349) IP Addresses and Subnetting (355) W ireless LANs (363) Services (373) Command Interpreter (1) Internal SP TGEN [...]

336[...]

P-2802H(W)(L)-I Series User’s Guide 337 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/I[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 338 Figure 202 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need th[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 339 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static I[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 340 Figure 204 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field [...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 341 Figure 205 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 206 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 342 Figure 207 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 208 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Pro[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 343 Figure 209 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP ad[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 344 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 210 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click OK to close the L[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 345 Figure 21 1 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 212 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 346 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the [...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 347 Figure 214 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP[...]

Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 348[...]

P-2802H(W)(L)-I Series User’s Guide 349 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are used here. Screens [...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 350 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have ena bled. Figure 216 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers wi[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2802H(W)(L)-I Series User’s Guide 351 Figure 217 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of All[...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 352 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer , click [...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2802H(W)(L)-I Series User’s Guide 353 Figure 220 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , In ternet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions m[...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 354 JA V A (Sun) 1 From Internet Explorer , click To o l s , In ternet Options and then the Advance d tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 222 Java (Sun)[...]

P-2802H(W)(L)-I Series User’s Guide 355 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking d[...]

Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 356 Figure 223 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are p[...]

Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 357 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of[...]

Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 358 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, t[...]

Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 359 Figure 225 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).[...]

Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 360 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 158 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VA[...]

Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 361 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 12 9 158 159 6 160 16 1 190 191 7 192 19 3 222 223 [...]

Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 362 Configuring IP Addresses Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask[...]

P-2802H(W)(L)-I Series User’s Guide 363 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless stations (A, B, C). Any time two [...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 364 Figure 227 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type [...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 365 Figure 228 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice of channels (for your region) so you should use a dif ferent channel th an an adjacen[...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 366 Figure 229 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of [...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 367 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype A preamble is used [...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 368 • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a netw ork RADIUS server . • Support for EAP (Extensible Authentication Protocol, RF[...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 369 In order to ensure network security , the access point and the RADIUS server us e a shared secret key, which is a password, they both know . The key is not sent over the network. In addition to the shared key , pass word information exchanged is also encrypted to protect the network[...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 370 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods through the secured connection to authenticate the clients, thus hiding client identity . However , PEAP only supports[...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 371 Encryption WP A impr oves data encryption by usin g T emporal Key In tegrity Protocol (TKIP) or Advanced Encryption Standard (AES), Messag e Integrity Check (MIC) and IEEE 802.1x. TKIP uses 128-bit keys that are dyna mically genera ted and distributed by the authe ntication server .[...]

Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 372 Shared WEP No Enable with Dynamic WEP Key Y es Enable without Dynami c WEP Key Y es Disable WP A WEP No Y es WP A TKIP No Y es WP A-PSK WEP Y es Y es WP A-PSK TKIP Y es Y es T able 166 Wireless Security Relati onal Matrix (continued) AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL EN[...]

P-2802H(W)(L)-I Series User’s Guide 373 A PPENDIX E Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Pro tocol : This is the type of IP protoc ol used by [...]

Appendix E Services P-2802H(W)(L)-I Series User’s Guide 374 H.323 TCP 1720 NetMeeting uses this protocol. HTTP TCP 80 Hyper T ext T ransfer Protoco l - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for d[...]

Appendix E Services P-2802H(W)(L)-I Series User’s Guide 375 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unnel ing Protocol) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service. REAL_AUDIO TCP 7070 A streami ng audio service that enables real time sound over the we b. R[...]

Appendix E Services P-2802H(W)(L)-I Series User’s Guide 376 TFTP UDP 69 T r ivial File Transfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution. The UDP port number is spe cifie[...]

P-2802H(W)(L)-I Series User’s Guide 377 A PPENDIX F Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple ZyXEL Devices. Internal SP TGEN lets you configure, save and upload multiple menus at the same time using just one configurat[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 378 Internal SPTGEN File Modification - Importa nt Points to Remember Each paramete r you enter must be pr eceded by one “=”sign and one spac e. Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 230 on page 377 ), the[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 379 Figure 233 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your ZyXEL Device. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter [...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 380 The following are the Internal SP TGEN menus. PV A Par ameter V a lues Allowed INPUT An example of what you may enter * Applies to the ZyXEL Device. T able 168 Abbreviations Used in the Example Inte rnal SPTGEN Screens Table ABBREVIA TION MEAN ING T able 169 Menu 1 General Setup /[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 381 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server = 0.0.0.0 30200006 = Remote DHCP Server = 0.0.0.0 30200008 = IP Address = 172.21.2.200 30200009 = IP Subnet Ma[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 382 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filters Set 3 = 256 30201013 = IP Alias #1 Outgoing protocol filters Set 4 = 256 30201014 = IP Alias 2 <0(No) | 1(Yes)> = 0 30201015 = IP Address = 0.0.0.0 30201016 = IP Sub[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 383 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Key3 = 30500011 = WEP Key4 = 30500012 = Wlan Active <0(Disable) | 1(Enable)> = 0 */ MENU 3.5.1 WLAN MAC ADDRESS FI LTER FIN FN PVA INPUT 30501001 = Mac Filter Active <0[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 384 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name <Str> = any 40000009 = My Login <Str> = test@pqa 40000010 = My Password <Str> = 1234 40000011 = Single User Account <0(No) | 1(Yes)> = 1 40000012 = IP Address Assignment <0(Static)|1( Dyn[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 385 T able 172 Menu 12 / Menu 12.1.1 IP Static Route Setup FIN FN PVA INPUT 120101001 = IP Static Route set #1, Name <Str> = 120101002 = IP Static Route set #1, Active <0(No) |1(Yes)> = 0 120101003 = IP Static Route set #1, Destination IP address = 0.0.0.0 120101004 = IP[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 386 120104005 = IP Static Route set #4, Gateway = 0.0.0.0 120104006 = IP Static Route set #4, Metric = 0 120104007 = IP Static Route set #4, Private <0(No) |1(Yes)> = 0 / Menu 12.1.5 IP Static Route Setup FIN FN PVA INPUT 120105001 = IP Static Route set #5, Name <Str> = 12[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 387 120108004 = IP Static Route set #8, Destination IP subnetmask = 0 120108005 = IP Static Route set #8, Gateway = 0.0.0.0 120108006 = IP Static Route set #8, Metric = 0 120108007 = IP Static Route set #8, Private <0(No) |1(Yes)> = 0 */ Menu 12.1.9 IP Static Route Setup FIN F[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 388 120112003 = IP Static Route set #12, Destination IP address = 0.0.0.0 120112004 = IP Static Route set #12, Destination IP subnetmask = 0 120112005 = IP Static Route set #12, Gateway = 0.0.0.0 120112006 = IP Static Route set #12, Metric = 0 120112007 = IP Static Route set #12, Priv[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 389 120116001 = IP Static Route set #16, Name <Str> = 120116002 = IP Static Route set #16, Active <0(No) |1(Yes)> = 0 120116003 = IP Static Route set #16, Destination IP address = 0.0.0.0 120116004 = IP Static Route set #16, Destination IP subnetmask = 0 120116005 = IP S[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 390 150000023 = SUA Server #6 Pro tocol <0(All)|6(T CP)|17(U DP)> = 0 150000024 = SUA Server #6 Por t Start = 0 150000025 = SUA Server #6 Por t End = 0 150000026 = SUA Server #6 Loc al IP address = 0.0.0.0 150000027 = SUA Server #7 Act ive <0(No) | 1(Yes)> = 0 150000028 = [...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 391 T able 174 Menu 21.1 Filter Set #1 / Menu 21 Filter set #1 FIN FN PVA INPUT 210100001 = Filter Set 1, Name <Str> = / Menu 21.1.1.1 set #1, rule #1 FIN FN PVA INPUT 210101001 = IP Filter Set 1,Rule 1 Type <2(TCP/IP)> = 2 210101002 = IP Filter Set 1,Rule 1 Active <0[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 392 210102009 = IP Filter Set 1,Rule 2 Src Subnet Mask = 0 210102010 = IP Filter Set 1,Rule 2 Src Port = 0 210102011 = IP Filter Set 1,Rule 2 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(f[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 393 210104005 = IP Filter Set 1,Rule 4 Dest Subnet Mask = 0 210104006 = IP Filter Set 1,Rule 4 Dest Port = 137 210104007 = IP Filter Set 1,Rule 4 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210104008 = IP Filter Set 1,Rule 4 Src IP address = 0.0.0.0[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 394 / Menu 21.1.1.6 set #1, rule #6 FIN FN PVA INPUT 210106001 = IP Filter Set 1,Rule 6 Type <2(TCP/IP)> = 2 210106002 = IP Filter Set 1,Rule 6 Active <0(No)|1(Yes)> = 1 210106003 = IP Filter Set 1,Rule 6 Protocol = 17 210106004 = IP Filter Set 1,Rule 6 Dest IP address = 0[...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 395 210201007 = IP Filter Set 2, Rule 1 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210201008 = IP Filter Set 2, Rule 1 Src I P address = 0.0.0.0 210201009 = IP Filter Set 2, Rule 1 Src Subnet Mask = 0 210201010 = IP Filter Set 2, Rule 1 Src P ort =[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 396 210202014 = IP Filter Set 2, Rule 2 Act N ot Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.1.2.3 Filter set #2, rule #3 FIN FN PVA INPUT 210203001 = IP Filter Set 2, Rule 3 Type <0(none)|2(TCP/ IP)> = 2 210203002 = IP Filter Set 2, Rule 3 Activ e <0(No)|1([...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 397 210204007 = IP Filter Set 2, Rule 4 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210204008 = IP Filter Set 2, Rule 4 Src I P address = 0.0.0.0 210204009 = IP Filter Set 2, Rule 4 Src Subnet Mask = 0 210204010 = IP Filter Set 2, Rule 4 Src P ort =[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 398 210205014 = IP Filter Set 2, Rule 5 Act N ot Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.1.2.6 Filter set #2, rule #6 FIN FN PVA INPUT 210206001 = IP Filter Set 2, Rule 6 Type <0(none)|2(TCP/ IP)> = 2 210206002 = IP Filter Set 2, Rule 6 Activ e <0(No)|1([...]

Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 399 230000000 = System Password = 1234 */ Menu 23.2 System security: radius server FIN FN PVA INPUT 230200001 = Authentication Server Configured <0(No) | 1(Yes)> = 1 230200002 = Authentication Server Active <0(No) | 1(Yes)> = 1 230200003 = Authentication Server IP Addres[...]

Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 400 Command Examples The following are example Internal SP TGEN screens associated with the ZyXEL Device’ s command interpreter commands. T able 177 Menu 24.1 1 Remote Mana gement Cont rol / Menu 24.11 Remote Management Control FIN FN PVA INPUT 241100001 = TELNET Server Port = 23 24[...]

P-2802H(W)(L)-I Series User’s Guide 401 A PPENDIX G Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic,[...]

Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 402 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving ant[...]

Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 403 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or wo[...]

Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 404[...]

P-2802H(W)(L)-I Series User’s Guide 405 A PPENDIX H Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it[...]

Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 406 • Re g u l a r Ma i l : ZyXEL Communications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.[...]

Appendix H Customer Support P-2802H(W)(L)-I Series User’s Guide 407 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91 -11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l a r Ma i l : India - ZyXEL T echnology Indi a Pvt Ltd. , I I [...]

Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 408 • Re g u l a r M a i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u l a [...]

Appendix H Customer Support P-2802H(W)(L)-I Series User’s Guide 409 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g u l ar M a il : ZyXEL Communications A/S, Sjö porten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: su[...]

Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 410[...]

Index P-2802H(W)(L)-I Series User’s Guide 41 1 Index A ACK message 130 Address Resolution Protocol (ARP) 93 AH 181 AH protocol 185 ALG 128 , 330 alternative subnet mask notation 357 antenna 325 any IP 93 , 326 how it works 93 note 93 any IP setup 95 AP (Access Point) 365 Application Layer Gateway 128 , 330 applications 37 Internet access 37 attac[...]

Index P-2802H(W)(L)-I Series User’s Guide 412 creating/editing 166 customer support 405 customized services 166 D data confidentiality 180 data integrity 180 data origin authentication 180 DBPSK 331 default 308 default LAN IP address 43 DH 199 DHCP 90 , 251 , 285 , 327 DHCP client 327 DHCP relay 327 DHCP server 327 diagnostic 315 Differential Bin[...]

Index P-2802H(W)(L)-I Series User’s Guide 413 three-way handshake 171 firmware 304 upload 305 upload error 306 flash key 145 flashing 145 fragment ation threshold 366 frequency range 331 FTP 122 , 264 file upload 313 FTP restrictions 304 G G . 168 142 , 330 G. 7 1 1 330 G . 726 330 G . 729 330 G . 993.1 327 general setup 285 H hidden node 36 5 ho[...]

Index P-2802H(W)(L)-I Series User’s Guide 414 K keep alive 189 keys and certificates 21 1 L LAN setup 83 , 89 LAN TCP/IP 90 LEDs 40 listening port 140 log out 45 log out (aut omatic) 45 logs 289 M MAC address filter actio n 11 5 MAC filter 11 4 Management Information Base (MIB) 266 managing the device good habits 37 using FTP . See FT P . using T[...]

Index P-2802H(W)(L)-I Series User’s Guide 415 PSTN call setup signaling 133 Public Switched T elephone Network 36 public-key cryptology , and certificates 21 1 public-private keys and certificates 21 1 pulse dialing 13 3 Q QoS 134 , 240 , 330 QoS class configuration 242 Quality of Service 134 , 330 Quality of Service (QoS) 239 quick dialing 330 Q[...]

Index P-2802H(W)(L)-I Series User’s Guide 416 SIP server address 67 SIP servers 130 SIP service domain 67 , 130 SIP URI 129 SIP user agent 130 SIP version 2 330 SMTP error messages 292 SNMP 265 , 32 8 manager 266 MIBs 266 speed dial 148 SPI 202 S tateful Inspection 155 stateful inspection 327 stateful packet inspection 328 static route 235 storag[...]

Index P-2802H(W)(L)-I Series User’s Guide 417 Wi-Fi Protected Access (WP A) 331 wireless LAN MAC address filteri ng 331 WLAN interference 365 security parameters 371 Z ZyNOS 304 ZyNOS (ZyXEL Network Operating System) 304 ZyNOS F/W version 304[...]

Index P-2802H(W)(L)-I Series User’s Guide 418[...]