ZyXEL Communications P-660HN-F1 manual

www .zyxel.com www .zyxel.com P-660HN-F1 802.1 1n Wireless ADSL2+ 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.7 Edition 1, 10/2010 Default Login Details IP Address http://192.168.1.1 Admin Pa ss wo rd 12 34 User Pa ss wo rd us er[...]

[...]

About This User's Guide P-660HN-F1 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y o u should have at least a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Guide The Quic[...]

Document Conventions P-660HN-F1 User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or helpful tip s)[...]

Document Conventions P-660HN-F1 User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyX EL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall T elephone Router Switch[...]

Safety Warnings P-660HN-F1 User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the devic[...]

Safety Warnings P-660HN-F1 User’s Guide 7[...]

Safety Warnings P-660HN-F1 User’s Guide 8[...]

Contents Overview P-660HN-F1 User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 31 Introducing the ZyXEL Device ............... ................ ................ ............. ................ ................ ...... .3 3 Int[...]

Contents Overview P-660HN-F1 User’s Guide 10 Appendices and Index ........................................................ ................................................. 3 19[...]

Table of Contents P-660HN-F1 User’s Guide 11 Table of Contents About This User's Guide ................................ ..................................................... ................... .. 3 Document Conventions.................................................................. ......................................... .4 Safety Warni[...]

Table of Contents P-660HN-F1 User’s Guide 12 Chapter 3 St atus Screens ................................................................................ ................................. ....... 45 3.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... ...[...]

Table of Contents P-660HN-F1 User’s Guide 13 5.5.5 Nailed-Up Connection (PPP) .............. ................................................ ............. .......... 84 5.5.6 NA T ........ ... ... ............. ... .... ... ............. ... ... ... ............. .... ... ... ............. ... ... .... ............ ....... 84 5.6 Metric ........[...]

Table of Contents P-660HN-F1 User’s Guide 14 7.4 The WPS Screen ................... .... ... ... ... ... .... ... ... ... .... ............. ... ... ... ... .... ... ... ... .... ... ........... ....1 17 7.5 The WPS S t ation Screen ........... ... ... ... ... ............. .... ... ... ... .... ... ... ... ... .... ... ... ... .... ... .........[...]

Table of Contents P-660HN-F1 User’s Guide 15 9.1.3 Firewall Rule Setup Example .............. ... ... .... ... ... ... .... ............ .... ... ... ... .... ... ... ... ... .... . 1 52 9.2 The Firewall General Screen ........ ............. ................ ................ ................ ................ ........ 15 6 9.3 The Firewall Rule Sc[...]

Table of Contents P-660HN-F1 User’s Guide 16 12.1.1 What Y ou Can Do in th e Certificates Screens ............. ............. ................ ............. . 187 12.1.2 What Y ou Need to Know About Certificates ... ............. ................ ................ ........... 188 12.2 The My Certificates Screen ........ ............. .............[...]

Table of Contents P-660HN-F1 User’s Guide 17 15.1.1 What Y ou Can Do in the Q oS Screens ............. ................ ............. ................ ........ 227 15.1.2 What Y ou Need to K now About QoS ... ................ ................ ................. ............ ..... 227 15.1.3 QoS Class Setup Example ... ................ ... ........[...]

Table of Contents P-660HN-F1 User’s Guide 18 18.3 Installing UPnP in Window s Example ......... ................ ............. ................ ............. ........... 259 18.4 Using UPnP in Windows XP Example . ................. ................ ................ ............. .............. 2 62 Part VI: Maintenance .............. ............[...]

Table of Contents P-660HN-F1 User’s Guide 19 Part VII: T roubleshooting and S pecifications ........................... ........ 305 Chapter 23 Product Sp ecifications .............................................................................. ........................... 307 23.1 Hardware S pecifications ................... ............. .....[...]

Table of Contents P-660HN-F1 User’s Guide 20[...]

List of Figures P-660HN-F1 User’s Guide 21 List of Figures Figure 1 ZyXEL Device’s Router Features ......... ................ ............. ................ ............. ................ .... ...... 35 Figure 2 LEDs on the T op of the Device .......... ................ ................ ................ ................ .............. .........[...]

List of Figure s P-660HN-F1 User’s Guide 22 Figure 39 T raffic Redirect LAN Setup .............. ............. ................ ................ ................ ............... .... ....... 87 Figure 40 Network > LAN > IP ......... ................ ................ ............. ................ ................ ............ ....... ......[...]

List of Figures P-660HN-F1 User’s Guide 23 Figure 82 Firewall Example: Edit Rule: Destination Address ............ ................ ................. ................ . 154 Figure 83 Firewall Example: Edit Rule: Select Customized Servic es ..... ................ ................ .............. 1 55 Figure 84 Firewall Example: Rules: MyService . .[...]

List of Figure s P-660HN-F1 User’s Guide 24 Figure 125 802.1Q/1P ................. ................. ................ ............. ................ ................ ........... ........ ........ 217 Figure 126 802.1Q/1P Example ............ ................ ................ ................. ................ ................ ..... ......... 218 [...]

List of Figures P-660HN-F1 User’s Guide 25 Figure 168 Maintenance > System > Time Setting ....... ................ ................ ................ ................ ........ 2 73 Figure 169 Maintenance > Logs > View Log ......................... ................. ................ ............. ............... .. 278 Figure 170 Mainte[...]

List of Figure s P-660HN-F1 User’s Guide 26 Figure 21 1 Red Hat 9.0: KDE: Netw ork Conf iguration: Devices ..... ................ ................ ............. ........ 338 Figure 212 Red Hat 9.0: KDE: Ethernet Device: Gene ral ... .... ... ... ... .... ............ .... ... ... ... .... ... ............. . 3 38 Figure 213 Red Hat 9.0: KDE: Netw[...]

List of Tables P-660HN-F1 User’s Guide 27 List of Tables T able 1 LED Descriptions ........ ................ ................ ............. ................. ................ ............... ....... .......... 35 T able 2 Web Configurator Icons in the T itle Bar ....................... ................ ................ ................ ....... ..[...]

List of Tables P-660HN-F1 User’s Guide 28 T able 39 Network > Wireless LAN > WDS ........... ................ ................. ................ ............. ............... .. 120 T able 40 Network > Wireless LAN > QoS ............. ............. ................ ................ ................. ............. .... 1 20 T able 41 N[...]

List of Tables P-660HN-F1 User’s Guide 29 T able 82 Advanced > 802.1Q/1P > Port Setting ............. ................ ................ ................ ................ .... .2 2 4 T able 83 Advanced > QoS > General ................... ................ ............. ................ ................. ........... ...... 231 T able 84 [...]

List of Tables P-660HN-F1 User’s Guide 30 T able 125 Maintenance > Diagnostic > DSL Line ........... ................ ................ .................... ................ . 303 T able 126 Hardware S pecifications ......... ................ ................. ................ ................ ............. ..... ......... 307 T able 127 Fir[...]

31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (39) S tatus Screens (45)[...]

32[...]

P-660HN-F1 User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Overview The P-660HN-F1 series are AD SL2+ routers. By integrating DSL and NA T , you are provided with ease of installation and high-s[...]

Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 34 • Command Line Interface. Line commands are mostly used for troubleshooting by service engineers. • FTP for firmware upgrades and configuration backup/restore. • SNMP . The device can be monitored by an SN MP manager . See the SN MP chapter in this User ’ s Guide. • SP TG[...]

Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 35 Figure 1 ZyXEL Device’s Router Featur es Y ou can also configure firewall and content filte ring on the ZyXEL Device for secure Internet access. When the firewall is on, all incoming traffic from the Internet to your network is blocked unless it is initiated from your network. Th[...]

Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 36 Refer to the Quick S tart Guide for in formation on hard ware connections. 1.6 The RESET Button If you forget your password or cannot access th e web configurator , you will need to us e the RESET button at the back of the device to reload the factory-default configuration file. Th[...]

Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 37 1.7.1 T urn the Wireless LAN Off or On 1 Make sure the POWER LED is on (not blinking). 2 Press the WPS WLAN ON/OFF button for less than five seconds and release it. The WLAN/WPS LED should change from on to of f or vice versa. 1.7.2 Activate WPS 1 Make sure the POWER LED is on (not[...]

Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 38[...]

P-660HN-F1 User’s Guide 39 C HAPTER 2 Introducing the Web Configurator 2.1 Overview The web configur ator is an HTML-based managem e nt interface that allows easy device setup and management via Interne t browser . Use In ternet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommende d screen resolution is 1024 by 768 [...]

Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 40 Figure 3 Password Screen 5 The following screen displays if you have no t yet changed your password. It is strongly recommended you change the default passwo rd. Enter a new passwor d, retype it to confirm and click Apply ; alternatively click Ignor e to proceed to the main me[...]

Chapter 2 Introducing the Web Configurator P-660HN-F1 User’s Guide 41 Figure 5 Replace Factory Default Certificate Screen 2.2 W eb Configurator Main Screen Figure 6 Main Screen As illustrated above, the main scr een is di vided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.2.1 T itle Bar The[...]

Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 42 The icons provide th e following functions. 2.2.2 Navigation Panel Use the men u items on th e na vigation panel to op en screens to configure ZyXEL Device features. The following tables describe each menu item. T able 2 Web C onfigurator Icons in the Title Bar ICON DESCRIPTIO[...]

Chapter 2 Introducing the Web Configurator P-660HN-F1 User’s Guide 43 Firewall General Use this screen to activate/deac tivate the firewall and the default action to take on network traffic going in specific directions. Rules This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule. Threshold Use this screen [...]

Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 44 2.2.3 Main Window The main window displays informa tion and configuration fields. It is discussed in the rest of this document. Right after you log in, the St a t u s screen is displayed. See Chapter 3 on page 45 for more information about the St a t u s screen. 2.2.4 St atus [...]

P-660HN-F1 User’s Guide 45 C HAPTER 3 Status Screens 3.1 Overview Use the St a t u s screens to look at the current status of the device, system res ources, and interfaces (LAN a nd W AN). The St a t u s screen al so provide s de tailed inform ation from Any IP and DHCP and statistics from bandwidth management, and traf fic. 3.2 The St atus Scree[...]

Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 46 Device Information Host Name This field displays the ZyXEL Device system name. It is used for identification. Y ou can change th is in the Maintenance > System > General screen’s System Name field. Model Number This is the model name of your device. MAC Address This is the MAC (Media Ac[...]

Chapter 3 Status Screens P-660HN-F1 User’s Guide 47 Firewall This displays whether or not the ZyXEL Device’s firewall is activated. Click this to go to the screen w here you can change it. Content Filte r This displays whether or not the ZyXEL Device ’s content filtering is activated. Click this to go to the screen where you can change it. Sy[...]

Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 48 3.3 Client List See Section 6.4 on page 9 5 for information on this screen. 3.4 WLAN S t atus Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. Click S tatus > WLAN S tatus to access this screen. Figure 8 WLAN S t atus The following table descri[...]

Chapter 3 Status Screens P-660HN-F1 User’s Guide 49 Figure 9 Packet S t atistics The following table describes th e fields in this screen. T able 6 Packet S t atistics LABEL DESCRIPTION System Monitor System up T ime This is the elapsed time the system has been up. Current Date/T ime This field displays you r ZyXEL Device’s present date and tim[...]

Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 50 3.6 Any IP T able Click S tatus > AnyIP T able to access this screen. Use this screen to view the IP address and MAC address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device. Figure 10 Any IP T able Each field is described in the following ta[...]

51 P ART II Wi z a r d Internet and W ireless Setup W izard (53)[...]

52[...]

P-660HN-F1 User’s Guide 53 C HAPTER 4 Internet and Wireless Setup Wizard 4.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP . " See the advanced menu chapters for ba ckground information on these fields. 4.2 Internet Access Wizard Setup 1 After you enter the pa[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 54 Figure 12 Wizard Welcome 3 Y our ZyXEL device attempts to detect your DSL co nnection and your connection type. 3a The following scree n app e ars if a conn ec tio n is not detected. Check your hardware connections and click Restart the INTERNET/WIRELESS SETUP Wizard to[...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 55 Figure 14 Auto-Detection: PPPoE 3c The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 4.2 .1 on page 55 on how to manually configure the ZyXEL Device for Internet access. Figure 15 Auto Detection:[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 56 Figure 16 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. T able 8 Internet Access Wizar d Setup: ISP Paramete rs LABEL DESCRIPTION Mode Select Routing (default) from the drop-down list box if your ISP give you one I[...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 57 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Next to continue. See Section 4.3 on page 60 for wireless connection wizard setup Figure 17 Internet Connection with[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 58 The following table describes the fields in this screen. Figure 19 Internet Connection with ENET ENCAP The following table describes the fields in this screen. T able 10 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select[...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 59 Figure 20 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password setup to [...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 60 Figure 21 Connection T est Failed- 1 • If the following screen displays, check if your account is activated or click Restart the Internet/Wir eless Setup Wizard to verify your In ternet access settings. Figure 22 Connection T est Failed- 2. 4.3 Wireless Connection Wiz[...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 61 Figure 23 Connection T est Successful 2 Use this screen to activate the wireless LAN. Click Next to continue. Figure 24 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. 3 Configure your wireless settin gs in this screen. Click Next . T able[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 62 Figure 25 Wireless LAN The following table describes the labels in this screen. " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication. 4 [...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 63 4.3.1 Manually Assign a WP A-PSK key Choose Manually assign a WP A-PSK key in the W ireless LAN setup screen to set up a Pr e- Shar ed Key . Figure 26 Manually Assign a WP A-PSK key The following table describes the labels in this screen. 4.3.2 Manually Assign a WEP Key Choos[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 64 The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 28 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct. Click Finish to complete and save the wiza[...]

Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 65 Figure 29 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to www .zyxel.com. Inte rnet access is just the beginning. Refer to the rest of this guide for more detailed inform ation on the complete range of ZyXEL Device features. If you ca[...]

Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 66[...]

67 P ART III Network WA N S e t u p ( 6 9 ) LAN Setup (89) W ireless LAN (105) Network Address T ranslation (NA T) (135)[...]

68[...]

P-660HN-F1 User’s Guide 69 C HAPTER 5 WAN Setup 5.1 Overview This chapter describes how to configure W AN settings from the WA N screens. Use these screens to configure your ZyXEL Device for Internet access. A W AN (W ide Area Network) connection is an outside connection t o another network or the Internet. It connects your priv ate networks (suc[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 70 W AN IP Address The W AN IP address is an IP address for th e ZyXEL Device, which makes it accessible from an outside network. It is use d by the ZyXEL Device to communicate with oth er devices in other networks. It can be static (fixed) or dynamically assigned by the ISP ea ch time the ZyXEL Device [...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 71 Figure 31 Network > W AN >Internet Access Setup (PPPoE) The following table describes the labels in this screen. T able 17 Network > WAN > Int ernet Access Setup LABEL DESCRIPTION Line Modulation Select the modulation supported by your ISP . Use Multi Mo de if you are not sure which mo de[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 72 Mode Select Routing (default) f rom the drop-down li st box if your ISP gives you one IP address only and you want multiple com puters to sha re an Intern et account. Select Bridge when your ISP provides you more than on e IP address and you want the connected computers to get individual IP add ress [...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 73 5.2.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the Inter net Access Setup screen. The screen a ppears as shown. Figure 32 Network > W AN > Internet A ccess Setup: Advanced Setup Nailed-Up Connecti[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 74 The following table describes the labels in this screen. T able 18 Network > WAN > Internet Access Setup: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup This secti on is not avail able when you configure the ZyXEL Device to be in bridge mode. RIP Direction RIP (Routing Information P[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 75 5.3 The More Connections Screen The ZyXEL Device allows you to configure more than one Internet access connection. T o configure additional Internet access connections click Network > W AN > More Connections . The screen differs by the encapsu lation yo u select. When you use the W AN > Inte[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 76 The following table describes the labels in this screen. 5.3.1 More Connections Edit Use this screen to configure a conn ection. Click the edit icon in the Mor e Connections screen to display the following screen. T able 19 Network > W AN > More Connections LABEL DESCRIPTION # This is an index [...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 77 Figure 34 Network > W AN > More Conn ections: Edit The following table describes the labels in this screen. T able 20 Network > W AN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection. Name Enter [...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 78 User Name (PPPoA and P PPoE encapsulati on only) Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password (PPPoA and P PPoE en capsulation only) Enter the pa ssword associ[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 79 5.3.2 Configuring More Connections Advanced Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 35 Network > W AN > More Connectio ns: Edit: Advanced Setup The fo[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 80 5.4 The W AN Backup Setup Screen Use this screen to configure your ZyXEL Device’ s W AN backup. Click Network > W AN > W AN Backup Setup . A TM QoS T ype Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwi dth for voice or dat a traffic. Select UBR (Unspecified Bit Rate) for [...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 81 Figure 36 Network > W AN > W AN Backu p The following table describes the labels in this screen. T able 22 Network > WAN > W AN Backup LABEL DESCRIPTION W AN Backup Setup Backup T ype Select the method that the ZyXEL Device uses to check the DSL connection. Select DSL Link to have the ZyX[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 82 5.5 W AN T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 5.5.1 Encap sulation Be sure to use the encapsulat ion method required by your IS P . The ZyXEL Devi ce supports the following methods. 5.5.1.1 ENET ENCAP The MAC Enca[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 83 One of the benefits of PPPoE is the ability to let you access on e of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals. Operationally , PPPoE saves significant effort for bo th you an[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 84 5.5.4 IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Si ngle User Account feature can be enabled or disabled if you have either a dynamic or static IP . Howeve r the encapsulation method assigned i[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 85 The metric sets the priority for the ZyXE L Devi ce’ s routes to the Internet. If any two of the default routes have the same metric, the ZyXEL Device uses the following pre-defined priorities: • Normal route: designated by the ISP (see Section 5.2 on page 70 ) • T raf fic-redirect route (see S[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 86 5.7.1 A TM T raffic Classes These are the basic A TM traffic classes define d by the A TM Forum T raf fic Management 4.0 Specification. Const ant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is genera lly time-sens[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 87 Figure 38 T raf fic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is co nnected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the ZyXEL Device itself as the gateway for each LAN networ[...]

Chapter 5 WAN Setup P-660HN-F1 User’s Guide 88[...]

P-660HN-F1 User’s Guide 89 C HAPTER 6 LAN Setup 6.1 Overview A Local Area Network (LAN) is a shared commun ication system to which many network ing devices are connected. It is usually located in on e immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP serve r and manage IP addresses. 6.1[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 90 Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. Y o u can also use subnet masks to divide one network in to multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration P rotocol) server can assign your ZyXEL Device an IP address, subnet mask, DNS and other ro [...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 91 2 Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automati cally compute a subnet mask based upon the IP addres s you entered. 3 Click Apply to save your settings. Figure 40 Network > LAN > IP The followin[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 92 Figure 41 Network > LA N > IP: Advanc ed Setup The following table describes the labels in this screen. T able 24 Network > LAN > IP: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Out Only . RIP V ersion Se[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 93 6.3 The DHCP Setup Screen Use this screen to configure th e DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen. Allow between LAN and W AN Select this check box to forward NetBIOS packet s from the LAN to the W A[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 94 Figure 42 Network > LAN > DHCP Setup The following table describes the labels in this screen. T able 25 Network > LAN > DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server , your ZyXEL Device can assign IP addresses, an IP default gateway and DNS serve rs to Windows 95 , Windows[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 95 6.4 The Client List Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec im[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 96 The following table describes the labels in this screen. 6.5 The IP Alias Screen IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The ZyXEL Device s upports three logical LA N interfaces via its single physical Ethernet interface [...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 97 Figure 44 Physical Network & Partitioned Logical Networks 6.5.1 Configuring th e LAN IP Alias Screen Use this screen to change your Zy XEL Device’ s IP alias settings. Click Ne twork > LAN > IP Alias to open the following screen. Figure 45 Network > LAN > IP Alias The following tabl[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 98 6.6 LAN T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 6.6.1 LANs, W ANs and the ZyXEL Device The actual physi ca l co nn ec tio n dete rm ine s wh ether the ZyXEL Device ports are LAN or W A N ports. There are two separate[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 99 6.6.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individu al clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server , the ZyXEL Device provides the TCP[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 100 Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP did not expl icitly give you an IP network n[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 101 6.6.5 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange rou ting i nformation with other routers. The RIP Direction field controls the sending an d receiving of RIP packets. When set to: • Both - the ZyXEL Device will broadcast its routin g table periodically an d inco rpo[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 102 6.6.7 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allo w the computer to access the Internet (through the ZyXEL Device). In cases where your computer is required to use a static IP address in another netwo[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 103 The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the ZyXEL Device. 1 When a computer (which is in a different su bnet) first attempts to access the Internet, it sends packets to its defa ult gateway (which is not the ZyXEL Device) by l[...]

Chapter 6 LAN Setup P-660HN-F1 User’s Guide 104[...]

P-660HN-F1 User’s Guide 105 C HAPTER 7 Wireless LAN 7.1 Overview This chapter describes how to perfo rm tasks related to setting up and optimizing your wireless network, including the following. • T urning the wireless connection on or off. • Configuring a name, wireless channel a nd security for the network. • Using W iFi Pro tected Setup [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 106 7.1.2 What Y ou Need to Know About Wireless Wireless Basics “W ireless” is essentially radio communication. In the same way that walkie-talkie ra dios send and receive information over the airwaves, wire less networking devices exchange information with one another . A wireless networking dev[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 107 7.2 The AP Screen Use this screen to configure the wirel ess settings of your ZyXEL Device. Click Network > Wir eless LAN to open the AP screen. Figure 48 Network > Wireless LAN > AP The following table describes the labels in this screen. T able 28 Network > Wireless LAN > AP LABE[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 108 7.2.1 No Security In the Network > Wir eless LAN > AP screen, sele ct No Security from the Security Mode list to allow wireless devices to communicat e with the ZyXEL Device without any data encryption or authentication. 802.1 1 Mode Select 802.1 1b Only to allow only IEEE 802.1 1b complian[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 109 " If you do not enable any wi reless security on your Zy XEL Device, your network is accessible to any wireless network ing device that is within range. Figure 49 Network > Wireless LAN > AP: No Security The following table describes the labels in this screen. 7.2.2 WEP Encryption Use [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 0 Figure 50 Network > Wireless LAN > AP: WEP Auto The following table describes the wireless LAN security labels in this screen. 7.2.3 WP A(2)-PSK Use this screen to configure and enab le WP A(2)-PSK authentication. Click Network > Wir eless LAN to display the AP screen. Select WP A-PSK ,[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 111 Figure 51 Network > Wireless LAN > AP: WP A(2)-PSK The following table describes the wireless LAN security labels in this screen. 7.2.4 WP A(2) Auth en tication Use this screen to configure and enable WP A or WP A2 authentication. Click the W ireless LAN link under Network to display the AP[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 2 Figure 52 Network > Wireless LAN > AP: WP A(2) The following table describes the wireless LAN security labels in this screen. T able 32 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION Security Mode Choose WP A , WP A2 or WP AMixed from the drop-down list box. Select WP AMixed i[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 3 7.2.5 Wireless LAN Advanced Setup Use this screen to configure adva nced wireless settings. Click the Advanced Setup button in the AP screen. The screen appears as shown. See Section 7.9.2 on page 123 for detailed definitions of th e terms listed in this screen. Figure 53 Network > Wireless L[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 4 The following table describes the labels in this screen. 7.2.6 MAC Filter Use this screen to change your ZyXEL Device’ s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 54 Network > Wireless LAN > AP: MA C Address Filter T able 33 Network [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 5 The following table describes the labels in this screen. 7.3 The More AP Screen This screen allows you to enable and configur e multiple Basic Service Set s (BSSs) on the ZyXEL Device. Click Network > Wi reless LAN > More AP . The following screen displays . Figure 55 Network > Wireless[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 6 7.3.1 More AP Edit Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Mor e AP screen. The following screen displays. Figure 56 Network > Wireless LAN > More AP: Edit The following table describes the fields in this screen. SSID An SSID profile is the set o[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 7 7.4 The WPS Screen Use this screen to configure W iFi Prot ected Setup (WPS) on your ZyXEL Device. WPS allows you to quickly set up a wireless ne twork with strong security , without having to configure security settings manually . Set up ea ch WPS connection between two devices. Both devices mu[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 8 7.5 The WPS S t ation Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS S tation . The following screen displays. Figure 58 Network > Wireless LAN > WPS S tation The following[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 9 7.6 The WDS Screen An AP using the Wireless Distribution System (WDS) can function as a wireless network bridge allowing you to wirelessly c onnect two wired network segments. Th e WDS screen allows you to configure the ZyXEL Device to co nnect to two or more APs wirelessly when WDS is enabled. [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 120 The following table describes the labels in this screen. 7.7 The QoS Screen Y ou can turn on W i-Fi MultiMedia (WMM) QoS to i mprove the performance of voice and video applications in the wirele ss network. QoS gives high priority to voice and video, which makes them run more smoothly . Similarly[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 121 7.8 The Scheduling Screen Use the wireless LAN scheduling to configure th e days you want to enable or disable the wireless LAN. Click Network > Wireless LAN > Scheduling . The following screen displays. Figure 61 Network > Wireless LAN > Scheduling The following table describes the l[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 122 • An access point is a radio with a wired conn ection to a network, which can connect with numerous wireless clients and let them access the network. • A bridge is a radio that relays communicatio ns between access points and wireless clients, extending a network’ s range. T raditionally , [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 123 Radio Channels In the radio spectrum, there are certain frequen cy bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a variety of networks to exist in the same place withou t interfering with one anot[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 124 7.9.3 Wireless Security Overview By their nature, radio communications are simple to intercept. For wireless data networks, this means that anyone within range of a wireless ne twork without security can not only read the data passing over the airwaves, but also join the network. Once an unauthor[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 125 Y ou can use the MAC address filter to tell the ZyXEL Device which devices are al lowed or not allowed to use the wireless network. If a devi ce is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security). If a device i s not allowed to use t[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 126 " It is recommended that wireless networks use WP A-PSK , WP A , or stronger encryption. The other types of encryption are better than none at all, but it is still possible for unauthoriz ed wireless devices to fi gure out the original information pretty quickly . When you select WP A2 or WP[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 127 Figure 63 Basic Service set 7.9.6 MBSSID T raditionally , you need to use di fferent APs to configure dif fer ent Basic Service Sets (BSSs). As well as the cost of buying extra APs, ther e is also the possibility of channel interference. The ZyXEL Device’ s MBSSID (Mu ltiple Basic Service Set I[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 128 The following figure illustrates how WDS link works between APs. Notebook computer A is a wireless client connecting to access point AP 1 . AP 1 has no wired Internet con nection, but can establish a WDS link with access point AP 2 , which does. When AP 1 has a WDS link with AP 2 , the notebook c[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 129 7.9.8.2 PIN Configuration Each WPS-enabled device has its own PIN (Personal Identificatio n Number). This may either be static (it cannot be chang ed) or dynamic (i n some devices you can generate a n ew PIN by clicking on a button in th e configuration interface). Use the PIN method instead of t[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 130 Figure 65 Example WPS Process: PIN Method 7.9.8.3 How WPS Works When two WPS-enabled devices connect, each de vice must assume a spe cific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that rec[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 131 Figure 66 How WPS works The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary . The WPS connection process is like a handshake; only two devices participate in each WP[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 132 Figure 67 WPS: Example Network S tep 1 In step 2 , you add ano ther wireless client to the network. Y ou know that Cli ent 1 supports registrar mode, but it is better to use AP1 for the WPS handshake w ith the new client since you must connect to the access point anyway in order to use the networ[...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 133 Figure 69 WPS: Example Network S tep 3 7.9.8.5 Limit ations of WPS WPS has some limitati ons of which you should be aware. • WPS works in Infrastructure networks on ly (where an AP and a wireless client communicate). It does not work in Ad-H oc networks (where there is no AP). • When you use [...]

Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 134 Y ou can easily check to see if this has happ ened. WPS works between only two devices simultaneously , so if another device has enrolle d you r device will be un able to enroll, and will not have access to the network. If this happens, open the access point’ s configuration interface and look [...]

P-660HN-F1 User’s Guide 135 C HAPTER 8 Network Address Translation (NAT) 8.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device. NA T (Network Address T ranslation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing pack et, used within one network to[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 136 NA T In the simplest form, NA T c hanges the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side . When the response comes back, NA T translates the dest[...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 137 The following table describes the labels in this screen. 8.3 The Port Forwarding Screen " This screen is available only when you select SUA only in the NA T > General screen. Use this screen to forward inco ming service requests to the se rver(s) on your local networ[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 138 " Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Y our ISP may periodically check for serv ers and may suspend your a ccount if it discovers any active services at your location. [...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 139 Figure 72 Network > NA T > Port Forward ing The following table describes the fields in this screen. 8.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule. Cl ick the rule’ s edit icon in the Port Forwarding screen to display the s[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 140 Figure 73 Network > NA T > Port Forward ing: Edit The following table describes the fields in this screen. 8.4 The Address Mapping Screen " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your [...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 141 rules. For example, if you have already configur ed rules 1 to 6 in your current set and now you configure rule number 9. In the set summary scr een, the new rule will be rule 7, not 9. Now if you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 and[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 142 8.4.1 The Address Mapping Rule Edit Screen Use this screen to edit an address mapping rule. Click the rule’ s edit icon in the Addr ess Mapping screen to display the screen shown next. Figure 75 Network > NA T > Address Mapping : Edit The following table describes[...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 143 8.5 The SIP ALG Screen Some NA T routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NA T by e xamining and translating IP addresses embedded in the data stream. When the ZyXEL Device registers with th e SIP register s erver [...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 144 Note that inside/outside refers to the locat ion of a host, while global/local refers to the IP address of a host used in a pack et. Thus, an inside local address (ILA) is the IP address of an inside host in a packet when the packet is s till in the local network, while a[...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 145 Figure 77 How NA T Works 8.6.4 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP alias) behind the ZyXEL Devi ce can communicate with three distinct W AN networks. 192.168.1.13 192.168.1.10 192.168.[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 146 Figure 78 NA T Application With IP Alias 8.6.5 NA T Mapping T ypes NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the [...]

Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 147 Port numbers do NOT change for One-to-One and Many-to-Many No Overload NA T mapping types. The following table summarizes these types. T able 51 NA T Mapping T ypes TYPE IP MAPPING One-to-One ILA1 ÅÆ IGA1 Many-to- On e (SU A/P A T) ILA1 ÅÆ IGA1 ILA2 ÅÆ IGA1 … Many-to[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 148[...]

149 P ART IV Security Firewalls (151) Content Filtering (171) Packet Filter (177) Certificates (187)[...]

150[...]

P-660HN-F1 User’s Guide 151 C HAPTER 9 Firewalls 9.1 Overview This chapter shows you how to enable and configure the ZyXEL Device firewall. Use these screens to enable and configure the firewall th at protects your ZyX EL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: • allows traff[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 152 9.1.2 What Y ou Need to Know About Firewall DoS Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disable a d evice or network so users no longer have access to network resources. The ZyXEL Device i[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 153 Figure 80 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall rule configuration s[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 154 Figure 82 Firewall Example: Edit Ru le: Des tination Addres s 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom services show up with an “*” before their names in the Ser[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 155 Figure 83 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LA[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 156 Figure 84 Firewall Example: Rules: MyService 9.2 The Firewall General Screen Use this screen to configur e the firewall settings. Click Security > Firewall to di splay the following screen. Figure 85 Security > Firewall > General[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 157 The following table describes the labels in this screen. 9.3 The Firewall Rule Screen " The ordering of your rules is very important as rules are applied in turn. Refer to Section 9.5 on page 166 for more information. T able 52 Security > Firewall > General LABEL DESCRIPTION Active Firewa[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 158 Click Security > Firewall > Rules to bring up the following scre en. This screen displays a list of the configured firewall rules. Note the order in which the rules are listed. Figure 86 Security > Firewall > Rules The following table describes the labels in this screen. T able 53 Securi[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 159 9.3.1 Configuring Firewa ll Rules Refer to Section 9.1.2 on pa ge 152 for more information. Use this screen to configur e firewall rules. In the Rules screen, select an index number and click Add or click a rule’ s Edit icon to display this screen and refer to the following table for information o[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 160 Figure 87 Security > Fire wa ll > Rules: Edit The following table describes the labels in this screen. T able 54 Security > Firewall > Rules: Edit LABEL DESCRIPTION Edit Rule Activ e Select this option to enable this firewall rule.[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 161 Action for Matched Packet Use the drop-down li st box to select whether to discard ( Dro p ), deny and send an ICMP destination-unreachable message to the sender of ( Reject ) or allow th e passage of ( Permit ) packet s that match this rule. Source/Destination Address Address T ype Do you wa nt you[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 162 9.3.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix E on page 373 for some examples. Click the Edit Customized Se[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 163 Figure 89 Security > Firewall > Rules: Edit: Edit Custom ized Services: Config The following table describes the labels in this screen. 9.4 The Firewall Threshold Screen For DoS attacks, the ZyXEL Device uses thresholds to determine when to start dropping sessions that do not become fully esta[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 164 Figure 90 Three-W ay Hand shake For UDP , half-open means that the fire wall has detected no return traffic. An unusually high number (or arrival rate) of half-ope n sessions could indicate a DOS attack. 9.4.1 Threshold V alues If everything is working properly , you probably do not need to ch ange [...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 165 Figure 91 Security > Fire wall > Thresho ld The following table describes the labels in this screen. T able 57 Security > Firewall > Threshold LABEL DESCRIPTION Denial of Service Thresholds The ZyXEL Device me asures both the total number of existing half-open sessions and the rate of se[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 166 9.5 Firewall T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 9.5.1 Firewall Rules Overview Y our customized rules take precedence and ove rride the ZyXEL Device’ s default settings. The ZyXEL Device checks the source IP a[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 167 " Y ou can also configure t he remote management sett ing s to allow only a specific computer to manage the ZyXEL Device. • LAN to W AN These rules specify which computers on the LAN ca n access which computers or services on the W AN. By default, the ZyXEL Device’ s stateful pack et inspec[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 168 9.5.2 Guidelines For Enhancing Security With Y our Firewall 1 Change the default password via web configurator . 2 Think about access control before you connect to the network in any way . 3 Limit who can access your router . 4 Don't enable any local service (such as teln et or FTP) that you do[...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 169 Figure 92 Ideal Firewall Setup 9.5.4.1 The “T riangle Route” Problem A traffic route is a path for sending or receiv ing data packets between two Ethernet devices. Y ou may have more than one co nnection to the Internet (through on e or more ISPs). If an alternate gateway is on the LAN (and its [...]

Chapter 9 Firewalls P-660HN-F1 User’s Guide 170 It’ s like having multiple LAN networks that actu ally use t he same physical cables and ports. By putting your LAN and Gateway A in dif ferent subnets, all returning network traffic must pass through the ZyXEL Device to yo ur LAN. The following steps describe such a scena rio. 1 A computer on the[...]

P-660HN-F1 User’s Guide 171 C HAPTER 10 Content Filtering 10.1 Overview Internet content filtering allows you to bl ock web sites based on keywords in the URL. See Section 10.1.4 on page 1 71 for an example of setting up content filtering. 10.1.1 What Y ou Can Do in the Content Filter Screens • Use the Keyword screen ( Section 10. 2 on page 173[...]

Chapter 10 Content Filtering P-660HN-F1 User’s Guide 172 Figure 95 Security > Cont ent Filter > Keyword: Exam ple Bob’ s son arrives home from school at four , while his parents arrive later , at about 7pm. So keyword blocking is en ab led for these times on weekdays and not on the weekend when the parents are at home. 1 Click Security &g[...]

Chapter 10 Co n te nt F ilt ering P-660HN-F1 User’s Guide 173 2 In the S tart IP Address and End IP Addr ess fi elds, type 192.168.1. 3. 3 Click Apply . Figure 97 Security > Cont ent Filter > T rusted: Exa mple That finishes setting up keyword blocking on the home computer . 10.2 The Keyword Screen Use this screen to block sites containing [...]

Chapter 10 Content Filtering P-660HN-F1 User’s Guide 174 10.3 The Schedule Screen Use this screen to set the days and times for the ZyXEL Device to pe rform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown. Figure 99 Security > Cont ent Filter > Schedule The following table describes the labe[...]

Chapter 10 Co n te nt F ilt ering P-660HN-F1 User’s Guide 175 10.4 The T rusted Screen Use this screen to exclude a range of users on the LAN from content f iltering on your ZyXEL Device. Click Security > Content Filter > Tr u s t e d . The screen appears as shown. Figure 100 Security > Content Filter: T rusted The following table descri[...]

Chapter 10 Content Filtering P-660HN-F1 User’s Guide 176[...]

P-660HN-F1 User’s Guide 177 C HAPTER 11 Packet Filter 1 1 .1 Overview Y our ZyXEL Device uses filters to decide whethe r to allow passage of traffic. This chapter discusses how to create and apply filters. 1 1.1.1 What Y ou Can Do in the Packet Filter Screen Use the Packet Filter screens ( Section 1 1.2 on page 1 77 ) to display the filter sets a[...]

Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 178 Figure 101 Security > Packet Filter The following table describes the labels in this screen. 1 1.2.1 Editing Protocol Filters Use this screen to display a protoco l filter set on your ZyXEL Device. Pro tocol rules allow you to base the rule on the fields in t he IP and th e upper layer p[...]

Chapter 11 Packet Filter P-660HN-F1 User’s Guide 179 Figure 102 Security > Packet Filter > Edit (Protocol Filter) The following table describes the labels in this screen. 1 1.2.2 Configuring Protocol Filter Rules Use this screen to configure pr otocol filter rules. In the Edit (Pr otocol Filter) screen, click an Edit icon to display th e fo[...]

Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 180 Figure 103 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule The following table describes the labels in this screen. T able 63 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule LABEL DESCRIPTION Active Select the check box to enab le th e filter ru[...]

Chapter 11 Packet Filter P-660HN-F1 User’s Guide 181 1 1.2.3 Editing Generic Filters Use this screen to display a generic filter set on your ZyXEL Device. The purpose of generic rules is to allow you to filter non -IP packets. For IP packets, it is generally easier to use the IP rules directly . For generic rules, the ZyXEL Device treats a pack e[...]

Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 182 The following table describes the labels in this screen. 1 1.2.4 Configuring Generic Packet Rules Use this screen to configure generic filter rules. In the Edit (Generic Filter) screen, click the Edit button from the Modify field to display the following screen. Figure 105 Security > Pac[...]

Chapter 11 Packet Filter P-660HN-F1 User’s Guide 183 1 1 .3 Packet Filter T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 1 1.3.1 Filter T ypes and NA T There are two classes of filter rules, generic filter rules and protocol filter rules. Generic filter rules act on the[...]

Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 184 1 1.3.2 Firewall V ersus Filters Below are some comparisons be tween the ZyXEL Device’ s filtering and firewall functions. Packet Filtering • The router filters packets as they pass through the router ’ s interface according to the filter rules you designed. • Packet filtering is a [...]

Chapter 11 Packet Filter P-660HN-F1 User’s Guide 185[...]

Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 186[...]

P-660HN-F1 User’s Guide 187 C HAPTER 12 Certificates 12.1 Overview This chapter describes how your ZyXEL De vice can use certificates as a means of authenticating wireless clients. It gives backgr ound information about public-k ey certificates and explains how to use them . A certificate contains the certificate owner ’ s id entity and public [...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 188 12.1.2 What Y ou Need to Know About Certificates Certification Authority A Certification Authority (CA) issues certif icates and guarantees the identity of each certificate owner . There are commercial certifica tion authorities like CyberT rust or V eriSign and government certification authorit[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 189 The following table describes the labels in this screen. T able 66 My Certificates LABEL DESCRIPTION PKI S torage S p ace in Use T his bar displays the percentage of the Zy XEL Device’s PKI storage sp ace that is currently in use. The bar turns from green to red when the maximum is being appro[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 190 12.2.1 My Certificate Import Follow the instructions in this screen to save an existing ce rtificate to the ZyXEL Device. Click Security > Ce rtificates > My Certificates and the n Import to open the My Certificate Import screen. " Y ou can only import a cert ificate that matches a co[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 191 The following table describes the labels in this screen. 12.2.2 My Certificate Create Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authority or gene rate a certification request. Click Security > Certificates > My Cert[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 192 Common Name Select a radio button to identify th e certificate’s owner by IP address, domain name or e-mail address. T ype the IP address (in dotted decimal notation), domain name or e-mail address in the field provide d. The domain name or e- mail address can be up to 31 ASCII characte rs. Th[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 193 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request. After the ZyXEL Device successfully enrolls a ce rtificate or generates a certification request or a self-signed certif[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 194 Figure 1 1 1 My Certificate Details The following table describes the labels in this screen. T able 69 My Certificate Details LABEL DESCRIPTION Certificate Name This field displays the identifying name of this ce rtificate. If you want to change the name, type up to 31 characters to ident ify th[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 195 Certification Path Click the Refresh button to have this read-only te xt bo x display the hierarchy of certification authorities that validate th e ce rtificate (and th e certificate itself). If the issuing certification authority is one that you have imported as a trusted certification author i[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 196 12.3 The T rusted CAs Screen This screen displays a summary list of certificat es of the certification authorities that you have set the ZyXEL Device to accept as trusted. Th e ZyXEL Device accepts any valid certificate signed by a certification authority on this list as being trustworthy; thu s[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 197 The following table describes the labels in this screen. 12.3.1 T rusted CA Import Follow the instructions in this screen to save a tr usted certification aut hority’ s certificate to the ZyXEL Device. Click Security > Certificates > Tr u s t e d C A s to open the T rusted CAs screen and[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 198 Figure 1 13 Trusted CA Import The following table describes the labels in this screen. 12.3.2 T rusted CA Det ails Use this screen to view in-dep th information about the certif ication authority’ s certificate, change the certificate’ s name and set whether or not you want the ZyXEL Device [...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 199 Figure 1 14 Trusted CA Det ails The following table describes the labels in this screen. T able 72 T rusted CA Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate. If you wa nt to chang e the name, type up to 31 characters to i dentify this k[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 200 Certificate Path Click th e Refresh button to have this read-only text box disp lay the end entity’s certificat e and a list of cert ification authority certificat es that shows the hierarchy of certification author ities that validate the end entity’ s certificate. If the issuing certificat[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 201 12.4 The T rusted Remote Host s Screens This screen displays a list of the certificates of peers that you trust but which are not signed by one of the certification authorities on the Tr u s t e d C A s screen. Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remo[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 202 Figure 1 15 Trusted Remote Host s The following table describes the labels in this screen. T able 73 T rusted Remote Host s LABEL DESCRIPTION PKI S torage S p ace in Use T his bar displays the percentage of the Zy XEL Device’s PKI storage sp ace that is currently in use. The bar turns from gre[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 203 12.4.1 T rusted Remote Host s Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen. Follow the instructions in this screen to save a truste d host’ s certificate to the Z[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 204 Figure 1 17 Trusted Remote Host Details The following table describes the labels in this screen. T able 75 T rusted Remote Host De t ails LABEL DESCRIPTION Certificate Name This field displays the identifyin g name of this certificate. If you want to change the name, ty pe up to 31 charac ters t[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 205 V ersion This fiel d displays the X.509 versio n number . Serial Number This field displays the certificat e’s identification n umber given by the device that created the certificate. Subject This field displays i nformation th at i dentifies the owner of the certificate, such as Common Name ([...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 206 12.5 The Directory Servers Screens This screen display s a summary list of dire ctory servers (that co ntain lists of va lid and revoked certificates) that have been save d into the ZyXEL Device. If you decide to have the ZyXEL Device check incoming certificates against the i ssuing certificatio[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 207 12.5.1 Directory Se rver Add and Edit Use this screen to configure in formation about a directory server that the ZyXEL Device can access. Click Security > C ertificates > Directory Servers to open the Directory Servers screen. Click Add (or the details icon) to open the Directory Server A[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 208 12.6 Certificates T echnical Reference This section provides technical background in formation about the topics covered in this chapter . 12.6.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users. Certificates are based on public -private[...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 209 • Key distribution is simple and very secure si nce you can freely distribute p ublic keys and you never need to transm it priv ate keys. Self-signed Certificates Y ou can have the ZyXEL Device act as a certific ation authority and sign its own certificates. 12.6.2 Private-Public Certificates [...]

Chapter 12 Certificates P-660HN-F1 User’s Guide 210 Figure 120 Remote Host Certificates 3 Double-click the certificate’ s icon to open the Certificate window . Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 121 Certificate Details 4 V erify (over the phone for exam ple) that the remote host h as [...]

21 1 P ART V Advanced S tat ic Route (213) 802.1Q/1P (217) Quality of Service (QoS) (227) Dynamic DNS Setup (241) Remote Management (245) Universal Plug-and-P lay (UPnP) (257)[...]

212[...]

P-660HN-F1 User’s Guide 213 C HAPTER 13 Static Route 13.1 Overview The ZyXEL Device usually uses the default ga teway to route outbound traf fic from compu ters on the LAN to the Internet. T o have the ZyX EL Device send data to devices not reachable through the default gatewa y , use static routes. For example, the next figure shows a computer ([...]

Chapter 13 Stat ic Route P-660HN-F1 User’s Guide 214 13.2 The S t atic Route Screen Use this screen to view the static route rules. Click Advanced > S tatic Route to open the St a t i c R o u t e screen. Figure 123 Advanced > S t atic Route The following table describes the labels in this screen. T able 78 Advanced > Static Rout e LABEL [...]

Chapter 13 Static Route P-660HN-F1 User’s Guide 215 13.2.1 S t atic Route Edit Use this screen to configure the required informa tion for a sta tic route. Select a static route index number and click Edit . The screen shown next appears. Figure 124 Advanced > S tatic Route: Edit The following table describes the labels in this screen. T able 7[...]

Chapter 13 Stat ic Route P-660HN-F1 User’s Guide 216[...]

P-660HN-F1 User’s Guide 217 C HAPTER 14 802.1Q/1P 14.1 Overview This chapter describes how to co nfigure the 802.1Q/1P settings. A V irtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. A VLAN group can be treated as an individual device. Each group can have its own rules about where and how[...]

Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 218 PVC A virtual circuit is a logical point-to-point ci rcuit between customer s ites. Permanent means that the circuit is preprogrammed by the carrier as a path through the network. It does not need to be set up or torn down for each session. Forwarding T agged and Unt agged Frames Each port on th e [...]

Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 219 1 Click Advanced > 802.1Q/1P > Group Setting , and then click the Edit button to display the following screen. 2 In the Name field type V oIP to identify the group. 3 In the VLAN ID field type in 2 to identify the VLAN group. 4 Select PVC1 from the Default Gateway drop-down list box. 5 In th[...]

Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 220 Figure 128 Advanced > 802 .1Q/1P > Port Setting: Example Ports 3 and 4 are connected to desktop computers an d are used for Internet traffic. Y ou want to create low priority for this type of traffic, so you want to group these ports and PVC2 into one VLAN (VLAN3). PVC2 priority is set to low[...]

Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 221 Figure 129 Advanced > 802.1Q/1P > Group Setting: Exa mple This completes th e 802.1Q/1P setup. 14.2 The 802.1Q/1P Group Setting Screen Use this screen to activate 802.1Q/1 P and display the VLAN groups. Click Ad vanced > 802.1Q/1P to display the following screen.[...]

Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 222 Figure 130 Advanced > 802 .1Q/1P > Gro up Setting The following table describes the labels in this screen. T able 80 Advanced > 802.1Q/1P > Group Setting LABEL DESCRIPTION 802.1P/1Q Active Select this check box to activate the 802.1P/1Q feature. Management Vlan ID Enter the ID number of[...]

Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 223 14.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure th e settings for each VL AN group. In the 802.1Q/1P screen, click the Edit button from the Modify filed to display the following screen. Figure 131 Advanced > 802.1Q/1P > Group Setting > Edit The following table describe[...]

Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 224 14.3 The 802.1Q/1P Port Setting Screen Use this screen to c onfigure the PVID and assi gn traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to display the following screen. Figure 132 Advanced > 80 2.1Q /1P > Port Setting The following table describes the labels [...]

Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 225 802.1P Priority Assign a priority for the tr affic transmitted through the port. Select Same if you do not want to modify the priority . Y ou may choose a priority level from 0-7 , with 0 being the lowest level and 7 being the highest level . Apply Click this to save your changes. Cancel Click thi[...]

Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 226[...]

P-660HN-F1 User’s Guide 227 C HAPTER 15 Quality of Service (QoS) 15.1 Overview Use the QoS screens to set up yo ur ZyXEL Device to use QoS for traffic management. Quality of Service (QoS) refers to both a networ k’ s ability to deliver data with minimum delay , and the networking methods used to control bandwidth. QoS allows the ZyXEL Device to[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 228 CoS technologies include IEEE 80 2.1p layer 2 tagging and Differ entiated Services (Dif fServ or DS). IEEE 802.1p tag ging makes use of three bits in the packet header , while Dif fServ is a new protocol and defines a new DS field, whic h replaces the eight-bit T ype of Service (T oS[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 229 Figure 134 QoS Class Examp le: V oIP -1 Figure 135 QoS Class Examp le: V oIP -2[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 230 Figure 136 QoS Class Example: Boss -1 Figure 137 QoS Class Example: Boss -2[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 231 15.2 The QoS General Screen Use this screen to enable or disable QoS an d have the ZyXEL Device automatically assign priority to traffic according to the IEEE 802.1p priority level, IP precedence and/or pack et length. Click Advanced > QoS to open the screen as shown next. Figure [...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 232 15.3 The Class Setup Screen Use this screen to add, edit or delete classifier s. A classifier groups traf fic into data flows according to specific criteria such as the sour ce address, destination address, source port number , destination port number or inco ming interfa ce. For exa[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 233 Figure 140 Advanced > QoS > Class Setup: Edit[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 234 See Appendix E on page 3 73 for a list of commonly-used services. The following table describes the labels in this screen. T able 85 Advanced > QoS > Class Setup: Edit LABEL DESCRIPTION Class Configuration Activ e Select the check box to enable this classifie r . Name The text [...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 235 Port Select the ch eck box and enter the port number of the so urce. 0 means any source port number . See Appendix E on page 373 for some common services and port numbers. MAC Select the check box a nd enter the source MAC a ddress of the packet. MAC Mask T ype the mask for the sp ec[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 236 15.4 The QoS Monitor Screen Use this screen to view the ZyXEL Device’ s QoS packe t statistics. Click Advanced > QoS > Monitor . The screen a ppears as shown. Figure 141 Advanced > QoS > Monitor The following table describes the labels in this screen. Ethernet Priority [...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 237 15.5 QoS T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 15.5.1 IEEE 802.1Q T ag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across brid[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 238 15.5.3 DiffServ QoS is used to prioritize source-to-destination traf fic flows. All packets in the flow are given the same priority . Y ou can use CoS (class of serv ice) to give different priorities to different packet types. Differentiated Services (Dif fServ) is a Class of Service[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 239 3 3 1 0 0 111 0 001 100 001010 001000 250~1 1 00 44 2 0 1 0 1 1 0 010100 010010 010000 5 5 3 0 1111 0 01 1 100 01 1010 01 1000 <250 66 4 1 0 0 1 1 0 100100 100010 100000 5 1 0 111 0 101000 7 7 6 1 10000 1 1 1000 7 T able 88 Internal Layer2 and Layer3 QoS Ma pping PRIORITY QUEUE LA[...]

Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 240[...]

P-660HN-F1 User’s Guide 241 C HAPTER 16 Dynamic DNS Setup 16.1 Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in Ne tMeeting, CU-SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name (for instance [...]

Chapter 16 Dy namic DNS Se tup P-660HN-F1 User’s Guide 242 Figure 142 Advanced > Dynamic DNS The following table describes th e fields in this screen. T able 89 Advanced > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS. Service Prov ider This is the name of your Dynamic DNS servi[...]

Chapter 16 Dynamic DNS Setup P-660HN-F1 User’s Guide 243 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server . This feature has the DDNS serve r automati cally detect and use the IP address of the NA T router that has a public IP address. Note: The[...]

Chapter 16 Dy namic DNS Se tup P-660HN-F1 User’s Guide 244[...]

P-660HN-F1 User’s Guide 245 C HAPTER 17 Remote Management 17.1 Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. The following figure shows remote management of the ZyXEL Device coming in from the WA N . Figure 143 Remote Manage ment From the W AN &q[...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 246 1 Te l n e t 2 HTTP 17.1.1 What Y ou Can Do in th e Remote Management Screens • Use the WWW screen ( Section 17.2 on page 247 ) to configure throug h which interface(s) and from which IP address( es) users can use HTTP to manage the ZyXEL Device. • Use the Te l n e t screen ( Section 17[...]

Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 247 17.2 The WWW Screen Use this screen to specify how to connect to the ZyXEL Device from a web browser , suc h as Internet Explorer . 17.2.1 WWW and HTTPS HTTPS (HyperT ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.[...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 248 17.2.2 Configuring the WWW Screen Click Advanced > Remote MGMT to display the WWW screen. Figure 145 Advanced > Re mote Manage ment > WW W The following table describes the labels in this screen. T able 90 Advanced > Remote Mana gement > W WW LABEL DESCRIPTION WWW Port Y ou m[...]

Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 249 17.3 The T elnet Screen Y ou can use T elnet to access the ZyXEL De vice’ s command line inte rface. Specify which interfaces allow T elnet access a nd fro m which IP address the access can come. Click Advanced > Remote MGMT > Te l n e t tab to display the screen as shown. Figure 1[...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 250 17.4 The FTP Screen Y ou can use FTP (File T ransfer Protocol) to upload and download the ZyXEL Device’ s firmware and configuration files. Please see the User ’ s Guide chapter on firmware and configuration file maintenance for details. T o use this feature, yo ur c omputer must have a[...]

Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 251 " SNMP is only available if TCP/IP is configured. Figure 148 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent : ag ents and a man age r . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent tra[...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 252 17.5.1 Supported MIBs The ZyXEL Device supports MIB II, which is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect st atistical data a nd monitor status and performance. 17.5.2 SNMP T rap s The ZyXEL Device will send traps to the SNMP manager when any [...]

Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 253 Figure 149 Advanced > Re mote Manage ment > SNMP The following table describes the labels in this screen. T able 94 Advanced > Remote Mana gement > SN MP LABEL DESCRIPTION SNMP Port Y ou may change the server port number for a service, if needed. However , you must use the same[...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 254 17.6 The DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to Chapter 6 on page 89 for background information. Use this screen to set from which IP address the ZyXEL De vice will accept DNS queries and on which interface it ca[...]

Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 255 " If you want your device to respond to pings and requests for unauthorized services, you may also need to configure the firewall anti probing settings to match. Figure 151 Advanced > Re mote Manage ment > ICM P The following table describes the labels in this screen. T able 96 [...]

Chapter 17 Remote Management P-660HN-F1 User’s Guide 256[...]

P-660HN-F1 User’s Guide 257 C HAPTER 18 Universal Plug-and-Play (UPnP) 18.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device can dynamically join a network, obta in an IP address, convey its capabilities and learn about [...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 258 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disabl[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 259 18.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove Pr ograms . [...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 260 Figure 154 Add/Remove Programs: Wind ows Setup: Communication: Co mponents 4 Click OK to go back to the Add/Remove Programs Pr operties window and click Next . 5 Restart the computer when prompted. Inst alling UPnP in Windows XP Follow the steps below to inst all the UPnP in W [...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 261 Figure 156 Windows Optiona l Networking Components Wiza rd 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 157 Networking Services 6 Click OK to go back to the W indows Optional Networking Compon ent Wizard window and click Next .[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 262 18.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device. Make sure the computer is co nnected to a LAN port of the ZyXEL Device. T urn[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 263 Figure 159 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings.[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 264 Figure 160 Internet Connection Properties: Adva nced Settings Figure 161 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconn e cted from your computer , all port mappings will be deleted automatically . 6 Select Show icon in noti [...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 265 Figure 162 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet conn ection status. Figure 163 Internet Connection S tatus Web Configurator Eas y Access W ith UPnP , you can access the web-based configurator on the ZyXEL Device without finding out the[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 266 Figure 164 Network Connections 4 An icon with the description for e ach UPnP-enabled device display s under Local Network . 5 Right-click on the icon for y our ZyXEL Device an d select Invoke . The web config urator login screen displays.[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 267 Figure 165 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device. Figure 166 Network Connections: My Networ k Places: Properties: Example[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 268[...]

269 P ART VI Maintenance System Settings (271) Logs (277) T ools (289) Diagnostic (301)[...]

270[...]

P-660HN-F1 User’s Guide 271 C HAPTER 19 System Settings 19.1 Overview This chapter shows you how to configure sy stem related settings, such as system time, password, name, th e domain name and the inactivity timeout interval. 19.1.1 What Y ou Can Do in the System Se ttings Screens • Use the Gene ral screen ( Section 19.2 on page 271 ) to confi[...]

Chapter 19 System Settings P-660HN-F1 User’s Guide 272 • In W indows XP , click start , My Computer , View system information and then click the Computer Name tab. No te the entry i n the Full computer name field and enter it as the ZyXEL Device System Name . Click Maintenance > System to open the General screen. Figure 167 Maintenance > [...]

Chapter 19 System Settings P-660HN-F1 User’s Guide 273 19.3 The T ime Setting Screen Use this screen to configure the ZyXEL Devi ce’ s time based on your local time zone. T o change your ZyXEL Device’ s time and date, click Mainte nance > System > Ti me Setting . The screen appears as shown. Figure 168 Maintenance > System > T ime[...]

Chapter 19 System Settings P-660HN-F1 User’s Guide 274 The following table describes th e fields in this screen. T able 99 Maintenance > System > T ime Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the time of your ZyXEL Devi ce. Each time you reload this page, the ZyXEL Device synchronizes the time with[...]

Chapter 19 System Settings P-660HN-F1 User’s Guide 275 St a r t D a t e Configure the day and time when Daylight Sa ving Time start s if you selected Enable Daylight Saving . The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time star ts in most parts of the United S tates on the second Sunday of March[...]

Chapter 19 System Settings P-660HN-F1 User’s Guide 276[...]

P-660HN-F1 User’s Guide 277 C HAPTER 20 Logs 20.1 Overview This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. The web confi gurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then di splay the logs or have the Zy XEL Device send the[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 278 Figure 169 Maintenance > Logs > Vi e w Log The following table describes th e fields in this screen. 20.3 The Log Settings Screen Use the Log Settings screen to configure the mail server , the syslog server , when to send logs and what logs to send. T o change your ZyXEL Device’ s log settings,[...]

Chapter 20 Logs P-660HN-F1 User’s Guide 279 Figure 170 Maintenance > Logs > Log Settings The following table describes th e fields in this screen. T able 101 Maintenance > Logs > Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server fo r the e-mail addresses specified[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 280 20.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. “SMTP action request failed. ret= ??". The “??"are described in the following table. Log Schedule T his drop-d own menu is used to config ure the frequency of log messages being sent [...]

Chapter 20 Logs P-660HN-F1 User’s Guide 281 20.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. •" End of Log " message shows that a complete log has been sent. Figure 171 E-m[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 282 TELNET login failed Someone has fai led to log on to the router via telnet. Successful FTP login Someone has logg ed on to the router via ftp. FTP login failed Someone has failed to log on to the router via ftp. NAT Session Table is Full! The maximum number of NA T session table entri es has been excee[...]

Chapter 20 Logs P-660HN-F1 User’s Guide 283 T able 105 Access Control Logs LOG MESSAGE DESCRIPTION Firewall default policy: [ TCP | UDP | IGMP | ESP | GRE | OSPF ] <Packet Direction> Attempted TCP/UDP/IGMP/ESP/GRE/ OSPF access matched the d efault policy and was b locked or forwarded according to the de fault policy’s setting. Firewall ru[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 284 For type and code details, see T ab le 1 16 on page 287 . T able 107 Packet Filter Logs LOG MESSAGE DESCRIPTION [ TCP | UDP | ICMP | IGMP | Generic ] packet filter matched (set: %d, rule: %d) Attempted access matched a conf igured filter rule (den oted by its set and rule number) and was blocked or for[...]

Chapter 20 Logs P-660HN-F1 User’s Guide 285 For type and code details, see T ab le 1 16 on page 287 . ppp:IPCP Starting The PPP connection’s Internet Protocol Control Protoco l stage is starting. ppp:IPCP Opening The PPP connection’s Internet Protocol Con trol Protocol stage is opening. ppp:LCP Closing The PPP connecti on’s Link Control Pro[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 286 NetBIOS TCP The firewall detected a TCP NetBIOS att ack. ip spoofing - no routing entry [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall classified a packet with no source routing entry as an IP spoofing attack. ip spoofing - no routing entry ICMP (type:%d, code:%d) The firewall classified an ICMP [...]

Chapter 20 Logs P-660HN-F1 User’s Guide 287 T able 1 16 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fra gmentation was dropped because it was set to Don't Fragment (DF) 5 Source route failed 4[...]

Chapter 20 L ogs P-660HN-F1 User’s Guide 288 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to RFC 2408 for detail ed information on each type. T able 1 17 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon dd hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstIP[...]

P-660HN-F1 User’s Guide 289 C HAPTER 21 Tools 21.1 Overview This chapter explains how to upload new firm ware, manage configuration files and restart your ZyXEL Device. Use the instructions in this chapter to change the device’ s configuration file or upgrade its firmware. After you configure your d evice, you can backup the config uration file[...]

Chapter 21 To ols P-660HN-F1 User’s Guide 290 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filena me extension. Find this firmware at www .zyxel.com.W ith many FTP and TFTP clients, the filenames are similar to those seen next. ftp> put firmware.bin ras This is a[...]

Chapter 21 Tools P-660HN-F1 User’s Guide 291 21.1.4 T ool Examples Using FTP or TFTP to Restore Configuration This example shows you how to restore a previously saved configuration. Note that this function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup [...]

Chapter 21 To ols P-660HN-F1 User’s Guide 292 2 Enter “open”, followed by a space an d the IP address of yo ur device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the computer to the devic[...]

Chapter 21 Tools P-660HN-F1 User’s Guide 293 4 Use the TFTP client (see the exam ple below) to transfer file s between the device and the computer . The file name for the firmware is “ras”. Note that the telnet connection must be active an d the device in CI mode before and during the TFTP transfer . For details on TFTP commands (see followin[...]

Chapter 21 To ols P-660HN-F1 User’s Guide 294 Configuration Backup Using GUI- based FTP Client s The following table describes some of the commands that you may see in GUI-based FTP clients. Backup Configuration Using TFTP The ZyXEL Device supports the up/downlo ading of the firmware and the configuration fil e using TFTP (T rivial File T ransfer[...]

Chapter 21 Tools P-660HN-F1 User’s Guide 295 Configuration Backup Using GUI- based TFTP Client s The following table describes some of the fiel ds that you may see in GUI-based TFTP clients. Refer to Section 21.1.2 on p age 28 9 to read about configurations that disallow TFTP and FTP over W AN. 21.2 The Firmware Screen Click Maintenance > T oo[...]

Chapter 21 To ols P-660HN-F1 User’s Guide 296 The following table describes the labels in this screen. After you see the Firmware Upload in Pr ogre ss screen, wait two minutes before logging into the ZyXEL Device again. Figure 176 Firmware Uplo ad In Progres s The ZyXEL Device automatically restarts in this time causing a temporary network discon[...]

Chapter 21 Tools P-660HN-F1 User’s Guide 297 Figure 178 Error Message 21.3 The Configuration Screen See Section 21.1.4 on page 2 91 for transferring configuration files using FTP/TFTP commands. Click Main tenance > T ools > Configurat ion . Information related to facto ry defaults, backup configuration, and restorin g configuration app ears[...]

Chapter 21 To ols P-660HN-F1 User’s Guide 298 Restore Configuration Restore Configuration allows yo u to upload a n e w or previously saved configuration file from your computer to your ZyXEL Device. 1 Do not turn off the ZyXEL Device while configuration file upload is in progress. After you see a “restore configuration successf ul” scree n, [...]

Chapter 21 Tools P-660HN-F1 User’s Guide 299 Figure 182 Configuration Upload Err or Reset to Factory Default s Click the Reset button to clear all user-entered conf iguration information and return the ZyXEL Device to its factory defaults . The following warning screen appears. Figure 183 Reset W arning Message Figure 184 Reset In Process Message[...]

Chapter 21 To ols P-660HN-F1 User’s Guide 300 Figure 185 Maintenance > T ools >Restart[...]

P-660HN-F1 User’s Guide 301 C HAPTER 22 Diagnostic 22.1 Overview These read-only screens display information to help you identify problems with the ZyXEL Device. 22.1.1 What Y ou Can Do in the Diagnostic Screens • Use the General Diagnostic screen ( Section 22.2 on page 3 01 ) to ping an IP address. • Use the DSL Line Diagnostic scree n ( Sec[...]

Chapter 22 Diagnostic P-660HN-F1 User’s Guide 302 The following table describes th e fields in this screen. 22.3 The DSL Line Diagnostic Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 187 Maintenance > Diagnostic > DSL Line[...]

Chapter 22 Diagnostic P-660HN-F1 User’s Guide 303 The following table describes th e fields in this screen. T able 125 Maintenanc e > Diagno stic > DSL L ine LABEL DESCRIPTION AT M S t a t u s Click this to view your DSL connection ’s Asynchronous T ransfer Mod e (A TM ) statistics. A TM is a networking technology that provides high-speed[...]

Chapter 22 Diagnostic P-660HN-F1 User’s Guide 304 Reset ADSL Line Click this to reinitialize the ADSL line. The large text box above then disp lays th e progress and results of this operation, for example: "Start to reset ADSL Loading ADSL modem F/W... Reset ADSL Line Successfully!" Capture All Logs Click this to display information and[...]

305 P ART VII T roubleshooting and S pecifications Product Specification s (307) T roubleshooting (3 15)[...]

306[...]

P-660HN-F1 User’s Guide 307 C HAPTER 23 Product Specifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. 23.1 Hardware Sp ecifications 23.2 Firmware S pecifications T able 126 Hardware Specifications Dimensions (362 W) x (200 D) x (1 10 H) mm Weight 365 g Power S pecification 12VDC 1A Built-in Switch Fo[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 308 S tatic Routes 16 Device Management Use the web configurator to easi ly configure the rich range of features on the ZyXEL Device. Wireless Functionality (wireless devices only) Allow the IEEE 802.1 1b, IEEE 802. 1 1g and/or IEEE 802.1 1n wireless clients to connect to the ZyXEL Device [...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 309 Any IP The Any IP feat ure al lows a co mputer to access t he Inter net and t he ZyXEL Device without changing the network settings (such a s IP address and subnet mask) of the computer , when th e IP addresses of the computer an d the ZyXEL Device are not in the same subnet. PPPoE Sup[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 310 23.3 Wireless Features Other Protocol Support PPP (Point-to-Point Protocol) link layer protocol IP routing T ransparent bridging for unsupported network layer protocol s RIP I/RIP II ICMP AT M Q o S SNMP v1 and v2c with MIB II support (RFC 1213) IP Multicasting IGMP v1, v2 and v 3 IGMP[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 31 1 The following list, which is not exhaustive, i llustrates the standards su pported in the ZyXEL Device. WMM QoS WMM (Wi-Fi MultiMedia) QoS (Q ual ity of Service) allo ws you to prioritize wireless traffic according to the deli very requirements of individual services. Other Wireless F[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 312 23.4 Power Adaptor Sp ecifications IEEE 802.1 1 Also known by the brand Wi-Fi, deno tes a set of Wireless LAN/WLAN standards developed by working group 1 1 of the IEEE LAN/MAN S tandards Committee (IEEE 802) . IEEE 802.1 1b Uses the 2.4 gigahertz (GHz) band IEEE 802.1 1g Uses the 2.4 g[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 313 Input Power AC 230V olts/50Hz Output Power DC 12V olts/1.0 A Power Co nsumption 8.3 W att max Safety S tandards CE, GS or TUV , EN60950-1 T able 130 ZyXEL Device Series Power Adap tor Specifications (continued)[...]

Chapter 23 Product Specifications P-660HN-F1 User’s Guide 314[...]

P-660HN-F1 User’s Guide 315 C HAPTER 24 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access 24.1 Power , Hardware Connections, and LEDs V The Z[...]

Chapter 24 Tro u blesh oo tin g P-660HN-F1 User’s Guide 316 24.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP address o f the ZyXEL Device by looking up th e IP address of the default ga te way fo[...]

Chapter 24 Trou bleshooting P-660HN-F1 User’s Guide 317 5 Reset the device to its factory defaults, an d try to access the ZyXEL Device with the default IP address. See Section 1.6 on page 36 . 6 If the problem continues, contact the network administrator or vendor , or try o ne of the advanced suggestio ns. Advanced Suggestions • T ry to acces[...]

Chapter 24 Tro u blesh oo tin g P-660HN-F1 User’s Guide 318 24.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1 .5 on page 35 . 2 Make sure you entered your ISP account information correctly in the wizard. These fields a[...]

319 P ART VIII Appendices and Index " The appendices provide general informatio n. Some details may not apply to your ZyXEL Device. Setting up Y our Computer ’ s IP Address (321) Pop-up W indows, JavaScript and Java Permissions (343) IP Addresses and Subnetting (351) W ireless LANs (359) Services (373) Internal SP TGEN (377) Legal Informatio[...]

320[...]

P-660HN-F1 User’s Guide 321 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98 /Me/NT/2000/XP/V ista, Macintos h OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP o[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 322 Figure 188 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Mic rosoft Networks. If you need the adapter: 1[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 323 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP address, s[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 324 Figure 190 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r ga teway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click A[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 325 Figure 191 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indows 2000/NT). Figure 192 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 326 Figure 193 Windows XP: Control Panel: Network Connections: Pro per ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 194 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Properti[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 327 Figure 195 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK . Do one or more of the fo llowing if you want to configure additional IP ad[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 328 Figure 196 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 329 Figure 197 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Pr operties window . 9 Click Close ( OK in W indow s 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections window[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 330 Figure 198 Windows V ista: S tart Menu 2 In the Control Panel , double-click Network and Internet . Figure 199 Windows V ista: Contro l Panel 3 Click Network and Sharing Center . Figure 200 Windows V ista: Ne twork And Internet 4 Click Manage network connections . Figu[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 331 5 Right-click Local Area Connection and then click Pr operties . " During this procedure, click Continue whenever Windows displays a screen saying that it needs y our permission to continue. Figure 202 Windows V ista: Network and Sharing Ce nter 6 Select Internet [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 332 7 The Internet Protocol V ers ion 4 (TCP/IPv4) Properties window opens (th e General tab ). • If you have a dynamic IP address click Obtain an IP address automatically . • If you have a static IP address click Use the follow ing IP address and fi ll in the IP addre[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 333 Figure 205 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Protocol V ersion 4 (TCP/IPv4) Properties window , (the General tab ): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 334 Figure 206 Windows V ista: Internet Protocol V ersion 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Pr otocol V ersion 4 (TCP/IPv4) Pr operties window . 11 Click Close to close the Local Ar ea Connection Pr operties window . 12 Close the Network Connections[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 335 Figure 207 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 208 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the follow[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 336 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Contr ol Panel . 6 Click Save if prompted, to save chan ges to your configura[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 337 Figure 210 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 338 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and cl[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 339 • If you have a dyna mic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click S tatically set IP Addresses and fill in the Address , Sub net mask , and Default Gateway Addr[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 340 Figure 215 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth 0 • If you have a static IP address, enter static in t he BOOTPROTO= field. T ype IPADDR = followed by the IP address (in do tted decimal notation) and type NETMASK = followed by the subnet mask. The [...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 341 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 219 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.23.19.129 B cast:172.23.19.255 Mask:[...]

Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 342[...]

P-660HN-F1 User’s Guide 343 A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are used here. Screens for other Inter[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 344 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen. This disables any web po p-up blockers you ma y have enabled . Figure 221 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions [...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 345 Figure 222 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites . F[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 346 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configura tor do not display properly in Internet Explorer , check that JavaScript are allowed. 1 In Internet Explorer , click T ools , Interne[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 347 Figure 225 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that a[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 348 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to clos e the wind ow . Figure 227 Java (Sun) Mozilla Firefox Mozil[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 349 Figure 228 Mozilla Firefox: T ools > Options Click Content .to show the screen below . Select the check boxes as shown in th e following screen. Figure 229 Mozilla Firefox Content Security[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 350[...]

P-660HN-F1 User’s Guide 351 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (including computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devices a re a[...]

Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 352 Figure 230 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of the ho[...]

Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 353 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Network Size The size of the network number determines the maximum number of po ssible ho[...]

Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 354 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the foll owing example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the company n[...]

Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 355 Figure 232 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192.168.1.0[...]

Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 356 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 136 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCT ET BIT VA L U E IP Add[...]

Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 357 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 2[...]

Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 358 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP[...]

P-660HN-F1 User’s Guide 359 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). An y time two or more wire[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 360 Figure 234 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless [...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 361 Figure 235 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your g eographical area. Y ou may have a choice of channels (for your region) so you should use a channel different from an adjacent A[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 362 Figure 236 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages for [...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 363 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to signal that[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 364 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity . The following figure shows th e relative effectiveness of th ese wireless security methods available on[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 365 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and the network RA[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 366 For EAP-TLS authentication type, you must firs t have a wired connectio n to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the identity of eac[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 367 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature is enabled, i[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 368 Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. WP A and WP A2 use Advanced Encryption S tandard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol (CC[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 369 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyssey client.[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 370 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temp[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 371 Antenna Overview An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF signals fro m the air . Positioning the antennas properly incre[...]

Appendix D Wireless LANs P-660HN-F1 User’s Guide 372 Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point ap plication, position both antennas at the same height and in a direct line of si ght to each othe r to attain the best performance. For omni-directional an[...]

P-660HN-F1 User’s Guide 373 A PPENDIX E Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Pro tocol : This is the type of IP protoc ol used by the service.[...]

Appendix E Serv ices P-660HN-F1 User’s Guide 374 H.323 TCP 1720 NetMeeting uses this proto c ol. HTTP TCP 80 Hyper T ext T ransfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic [...]

Appendix E Services P-660HN-F1 User’s Guide 375 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unneling Protocol ) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service. REAL_AUDIO TCP 7070 A streami ng audio service that enables real time sound over the we b. REXEC TCP 514[...]

Appendix E Serv ices P-660HN-F1 User’s Guide 376 TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (T ransmission Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution. The UDP port number is spe cified in the a[...]

P-660HN-F1 User’s Guide 377 A PPENDIX F Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple ZyXEL Devices. Internal SP TGEN lets you configure, save and upload multiple menus at the same time using just one configuration text fil[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 378 Internal SPTGEN File Modification - Importa nt Points to Remember Each paramete r you enter must be pr ece ded by one “=”sign and one space. Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 239 on page 377 ), then you disabl[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 379 Figure 242 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your ZyXEL Device. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter " bin &[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 380 The following are the Internal SP TGEN menus. PV A Parameter V alues Allowed INPUT An example of what you may enter * Applies to the ZyXEL Device. T able 147 Abbreviations Used in the Example In ternal SPTGEN Screens Table ABBREVIA TION MEANING T able 148 Menu 1 General Setup / Menu 1 General[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 381 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server = 0.0.0.0 30200006 = Remote DHCP Server = 0.0.0.0 30200008 = IP Address = 172.21.2.200 30200009 = IP Subnet Mask = 16 3020[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 382 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filters Set 3 = 256 30201013 = IP Alias #1 Outgoing protocol filters Set 4 = 256 30201014 = IP Alias 2 <0(No) | 1(Yes)> = 0 30201015 = IP Address = 0.0.0.0 30201016 = IP Subnet Mask = 0[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 383 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Key3 = 30500011 = WEP Key4 = 30500012 = Wlan Active <0(Disable) | 1(Enable)> = 0 */ MENU 3.5.1 WLAN MAC ADDRESS FI LTER FIN FN PVA INPUT 30501001 = Mac Filter Active <0(No) | 1(Yes[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 384 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name <Str> = any 40000009 = My Login <Str> = test@pqa 40000010 = My Password <Str> = 1234 40000011 = Single User Account <0(No) | 1(Yes)> = 1 40000012 = IP Address Assignment <0(Static) |1( Dynamic)> =[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 385 T able 151 Menu 12 / Menu 12.1.1 IP Static Route Setup FIN FN PVA INPUT 120101001 = IP Static Route set #1, N ame <Str> = 120101002 = IP Static Route set #1, A ctive <0(No) |1(Yes)> = 0 120101003 = IP Static Route set #1, Destination IP address = 0.0.0.0 120101004 = IP Static Ro[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 386 120104005 = IP Static Route set #4, G ateway = 0.0.0.0 120104006 = IP Static Route set #4, M etric = 0 120104007 = IP Static Route set #4, P rivate <0(No) |1(Yes)> = 0 / Menu 12.1.5 IP Static Route Setup FIN FN PVA INPUT 120105001 = IP Static Route set #5, N ame <Str> = 120105002 [...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 387 120108004 = IP Static Route set #8, Destination IP subnetmask = 0 120108005 = IP Static Route set #8, G ateway = 0.0.0.0 120108006 = IP Static Route set #8, M etric = 0 120108007 = IP Static Route set #8, P rivate <0(No) |1(Yes)> = 0 */ Menu 12.1.9 IP Static Route Setup FIN FN PVA INP[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 388 120112003 = IP Static Route set #12, Destination IP address = 0.0.0.0 120112004 = IP Static Route set #12, Destination IP subnetmask = 0 120112005 = IP Static Route set #12, Gateway = 0.0.0.0 120112006 = IP Static Route set #12, Metric = 0 120112007 = IP Static Route set #12, Private <0(No[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 389 120116001 = IP Static Route set #16, Name <Str> = 120116002 = IP Static Route set #16, Active <0(No) |1(Yes)> = 0 120116003 = IP Static Route set #16, Destination IP address = 0.0.0.0 120116004 = IP Static Route set #16, Destination IP subnetmask = 0 120116005 = IP Static Route [...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 390 150000023 = SUA Server #6 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000024 = SUA Server #6 Port Start = 0 150000025 = SUA Server #6 Port End = 0 150000026 = SUA Server #6 Local IP address = 0.0.0.0 150000027 = SUA Server #7 Active <0(No) | 1(Yes)> = 0 150000028 = SUA Server #7 Prot[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 391 T able 153 Menu 21.1 Filter Se t #1 / Menu 21 Filter set #1 FIN FN PVA INPUT 210100001 = Filter Set 1, Name <Str> = / Menu 21.1.1.1 set #1, rule #1 FIN FN PVA INPUT 210101001 = IP Filter Set 1,Rule 1 Type <2(TCP/IP)> = 2 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 392 210102009 = IP Filter Set 1,Rule 2 Src Subnet Mask = 0 210102010 = IP Filter Set 1,Rule 2 Src Port = 0 210102011 = IP Filter Set 1,Rule 2 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(d[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 393 210104005 = IP Filter Set 1,Rule 4 Dest Subnet Mask = 0 210104006 = IP Filter Set 1,Rule 4 Dest Port = 137 210104007 = IP Filter Set 1,Rule 4 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210104008 = IP Filter Set 1,Rule 4 Src IP address = 0.0.0.0 210104009 =[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 394 / Menu 21.1.1.6 set #1, rule #6 FIN FN PVA INPUT 210106001 = IP Filter Set 1,Rule 6 Type <2(TCP/IP)> = 2 210106002 = IP Filter Set 1,Rule 6 Active <0(No)|1(Yes)> = 1 210106003 = IP Filter Set 1,Rule 6 Protocol = 17 210106004 = IP Filter Set 1,Rule 6 Dest IP address = 0.0.0.0 21010[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 395 210201007 = IP Filter Set 2, Rule 1 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210201008 = IP Filter Set 2, Rule 1 Src IP address = 0.0.0.0 210201009 = IP Filter Set 2, Rule 1 Src Subnet Mask = 0 210201010 = IP Filter Set 2, Rule 1 Src Port = 0 210201011 =[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 396 210202014 = IP Filter Set 2, Rule 2 Act Not Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.1.2.3 Filter set #2, rule #3 FIN FN PVA INPUT 210203001 = IP Filter Set 2, Rule 3 Type <0(none)|2(TCP/ IP)> = 2 210203002 = IP Filter Set 2, Rule 3 Active <0(No)|1(Yes)> = 1 2[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 397 210204007 = IP Filter Set 2, Rule 4 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210204008 = IP Filter Set 2, Rule 4 Src IP address = 0.0.0.0 210204009 = IP Filter Set 2, Rule 4 Src Subnet Mask = 0 210204010 = IP Filter Set 2, Rule 4 Src Port = 0 210204011 =[...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 398 210205014 = IP Filter Set 2, Rule 5 Act Not Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.1.2.6 Filter set #2, rule #6 FIN FN PVA INPUT 210206001 = IP Filter Set 2, Rule 6 Type <0(none)|2(TCP/ IP)> = 2 210206002 = IP Filter Set 2, Rule 6 Active <0(No)|1(Yes)> = 1 2[...]

Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 399 Command Examples The following are example Internal SP TGEN screens associated with the ZyXEL Device’ s command interpreter commands. FIN FN PVA INPUT 230000000 = System Password = 1234 T able 155 Menu 23 System Menus (contin ued ) T able 156 Menu 24.11 Re mo te Ma na ge m ent Co nt ro l [...]

Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 400[...]

P-660HN-F1 User’s Guide 401 A PPENDIX G Legal Information Copyright Copyright © 2010 by ZyXEL Communications Corporat ion. The contents of this publication may not be reprod uced in any part or as a whole, tr anscribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechan ic[...]

Appendix G Legal In formation P-660HN-F1 User’s Guide 402 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna. 2 Inc[...]

Appendix G Legal Information P-660HN-F1 User’s Guide 403 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Vie wing Ce rtifi cations 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Lim[...]

Appendix G Legal In formation P-660HN-F1 User’s Guide 404[...]

Appendix H Customer Support P-660HN-F1 User’s Guide 405 A PPENDIX H Customer Support In the event of problems that cannot be solved by using this manual, you should contact yo ur vendor . If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the dev ice. Regional of fices are listed below (see also http[...]

Appendix H Customer Support P-660HN-F1 User’s Guide 406 • Sales E-mail: sales@zyxel.cn • T elephone: +86-021-61 199055 • Fax: +86-021-52 069033 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .zyxel.cn Cost a Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co[...]

Appendix H Customer Support P-660HN-F1 User’s Guide 407 • Re g u l a r M a i l: ZyXEL France, 1 rue des V ergers, Bat. 1 / C, 69760 Limonest, France Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909 -69 • Fax: +49-2405-6909-99 • W eb: www .zyxel.de • Re g u l ar M a il : ZyXEL Deut[...]

Appendix H Customer Support P-660HN-F1 User’s Guide 408 • Re g u l a r M a i l : ZyXEL Kaza khstan, 43 Dostyk A ve., Office 414, Dostyk Business Centre, 050010 Almaty , Republic of Kazakh stan Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.com.my • T elephone: +603-8076-9933 • Fax: +603-8076- 9833 • W eb: [...]

Appendix H Customer Support P-660HN-F1 User’s Guide 409 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy #03-28, Sin gapore 60993[...]

Appendix H Customer Support P-660HN-F1 User’s Guide 410 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 5 5 22 • Fax: +90-212-220-2 526 • W eb: http:www .zyxel.com.tr • Address: Kaptanpasa Mahallesi Piyalep asa Bulvari Ortadogu Plaza N:14/13 K:6 Okmeydani/Sisli Istanbul/T urkey Ukraine • Support E-mail: su pport@u[...]

Index P-660HN-F1 User’s Guide 41 1 Index Numerics 802.1 1 mo de 108 802.1Q/1P 217 activation 221 example 218 group settings 223 management VLAN 222 port settings 224 priority 217 , 225 PVC 218 PVID 224 tagg ing fram es 217 , 218 , 224 A activation 802.1Q/1P 221 Any IP 92 classifiers 232 content filtering 173 dynamic DNS 242 DYNDNS wildcard 242 fi[...]

Index P-660HN-F1 User’s Guide 412 C CA 188 , 192 , 366 algorithm 200 CRL 201 enrollment protocols 192 property 199 trusted 196 , 198 CBR 74 , 80 , 86 Certificate Authority See CA. Certificate Management Protocol, see CMP certificates 187 , 208 advantages 208 algorithm 195 , 200 CA 188 , 192 trusted 196 , 198 creation 189 , 191 CRL 197 , 199 , 201[...]

Index P-660HN-F1 User’s Guide 413 Denials of Service, see DoS DHCP 90 , 94 , 99 , 271 diagnostic 301 Differentiated Services, see DiffServ DiffServ 238 DiffServ Code Point, see DSCP directory servers 206 configuration 207 LDAP 207 login 208 disclaimer 401 DNS 72 , 90 , 94 , 99 , 254 Domain Name System, see DNS DoS 152 three-way handshake 163 thre[...]

Index P-660HN-F1 User’s Guide 414 upgrading 291 version 46 forwarding ports 136 , 13 7 activation 140 configuration 138 example 138 rules 139 fragment ation thresh ol d 11 4 , 123 , 362 FTP 34 , 250 backing up configuration 293 limitations 290 QoS 235 restoring configuration 291 upgrading firmware 291 , 292 G generic filters 181 , 183 activation [...]

Index P-660HN-F1 User’s Guide 415 e-mail 279 error messages 280 example 281 firewalls 161 generic filters 183 protocol filters 181 schedules 280 settings 278 M MAC address 96 , 11 5 filter 106 , 108 , 11 4 , 124 MAC address filter activation 11 5 management VLAN 222 mapping address 140 rules 142 types 141 , 142 , 146 Maximum Burst Size, see MBS m[...]

Index P-660HN-F1 User’s Guide 416 port forwarding 136 , 137 activation 140 configuration 138 example 138 rules 139 PPPoA 72 , 77 , 83 PPPoE 72 , 77 , 82 passthrough 74 preamble 11 4 , 123 preamble mode 363 pre-shared key 111 Privacy Enhanced Mail, see PEM private IP address 100 probing, firewalls 152 product registration 403 property , certifica [...]

Index P-660HN-F1 User’s Guide 417 content filtering 174 firewalls 161 logs 280 wireless LAN 121 SCR 74 , 80 , 85 security network 168 wireless LAN 108 , 124 Service Set IDentifier , see SSID Session Initiation Protocol, see SIP setup 297 classifiers 232 DHCP 94 directory servers 207 firewalls 156 , 159 , 164 IP alias 97 logs 278 packet filtering [...]

Index P-660HN-F1 User’s Guide 418 CRL 197 , 199 , 201 exporting 201 importing 197 MD5 fingerprint 201 PEM 201 SHA1 fingerprint 201 U UBR 74 , 80 , 86 unicast 70 Universal Plug an d Pl ay , see UPnP upgrading firmware 291 , 295 UPnP 257 activation 258 cautions 257 example 259 installation 259 NA T traversal 257 URL 171 V VBR 86 VBR-nRT 74 , 80 , 8[...]

Index P-660HN-F1 User’s Guide 419 MBSSID 127 preamble 11 4 , 123 QoS 120 activation 120 RADIUS server 125 RTS/CTS threshold 11 4 , 123 scheduling 121 security 124 SSID 106 , 108 , 11 6 , 124 activation 11 5 status 46 WDS 11 9 , 127 activation 120 compatibility 11 9 encryption 120 example 128 WEP 109 , 125 key 11 0 wizard 60 WP A 111 , 126 authent[...]

Index P-660HN-F1 User’s Guide 420[...]