ZyXEL Communications P-660HW-TX V3 manual

www .zyxel.com www .zyxel.com P-660HW -Tx v3 Series 802.1 1g Wireless ADSL2+ 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.70 Edition 2, 10/2010 Default Login Details IP Address http://192.168.1.1 Admin Pa ss wo rd 12 34 User Pa ss wo rd us er[...]

[...]

About This User's Guide P-660HW-Tx v3 Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL Device using the web configur ator . Y ou should hav e at least a basic knowledge of T CP/IP networking concepts and topology . Related Document ation •Q u i c k S t[...]

About This User's Guide P-660HW-Tx v3 Series User’s Guide 4 Customer Support In the event of probl ems that cannot be solved by using t his manua l, you s hould contact your vendor . If y ou canno t cont act your vendor , then contact a Z y XEL office for the region in wh ic h you bou g ht the device. See htt p :/ /w ww.zyx el.com/ web/conta[...]

Document Conventions P-660HW-Tx v3 Series User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help f[...]

Document Conventions P-660HW-Tx v3 Series User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the followi n g generic icons. The Z yXEL Device icon is not an exact represent ation of your device. ZyX E L D e v i c e Computer Notebook computer Server Firewall Te l e p h o n e Ro ut e r Sw itch[...]

Safety Warnings P-660HW-Tx v3 Series User’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm[...]

Safety Warnings P-660HW-Tx v3 Series User’s Guide 8[...]

Contents Overview P-660HW-Tx v3 Series User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 21 Introducing the ZyXEL Device ............... ................ ................ ............. ................ ................ .....[...]

Contents Overview P-660HW-Tx v3 Series User’s Guide 10 Product S pecifications .... ................. ................ ............. ................ ................ ............. ......... ..... 341 Appendices and Index ........................................................ ................................................. 3 49[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 11 Table of Contents About This User's Guide ..................................................................................... ................... .. 3 Document Conventions.................................................................. ......................................... .5 Saf[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 12 3.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... .... ............ 35 3.2 The S tatus Screen ........... ................ ............. ................ ................ ............. ..........[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 13 5.3 Wireless Connection Wizard Se tup ....... ............. ................. ............ ................. ............ ....... 92 5.3.1 Manually Assign a WP A-PSK key .... ... ... ... ............. .... ... ... ... ... .... ... ... ... .... ............ .... ... 94 5.3.2 Manually Assign a [...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 14 7.6.2 DHCP Setup . ... .... ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... . 1 30 7.6.3 DNS Server Addresses ............. ... .... ... ... ............. ... .... ... ... ... ............. ... .... ... ... ... ........[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 15 9.3.1 Configuring the Port Forwarding Screen .......... ............. ............. ................ ............. . 175 9.3.2 The Port Forwarding Rule Edit Screen ......................... ............. ................ ............. . 177 9.4 The Address Mapping Screen ............... .....[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 16 1 1.2 The Keyword Screen .... ................ ............. ................ ................ ............. ................ ........ 214 1 1.3 The Schedule Screen ............. ................ ................ ................ ............. ................ ........... 215 1 1.4 The T rust[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 17 15.1 Overview ........... ................ ............. ................ ................ ............. ................ ............ ......... 243 15.1.1 What Y ou Can Do in the 802.1Q/1P Sc reens .......... ............ ................. ............ ..... 243 15.1.2 What Y ou Need to Know[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 18 Chapter 19 Universal Plug-and-Play (UPnP) .................................................... ...................................... 281 19.1 Overview ........... ................ ............. ................ ................ ............. ................ ............ ......... 281 19.1.1[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 19 Chapter 23 Diagnostic........................................................ ..................................................... ........... ...... 329 23.1 Overview ........... ................ ............. ................ ................ ............. ................ ............ ...[...]

Table of Contents P-660HW-Tx v3 Series User’s Guide 20[...]

21 P ART I Introduction Introducing the Z yXEL Device (23) Introducing the W e b Configurator (29) Status Screens (35) Tu t o r i a l s ( 4 3 )[...]

22[...]

P-660HW-Tx v3 Series User’s Guide 23 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applicat ions and features of the Z yXEL Device. It also introduces the wa ys you can manage the Z yXEL Device. 1.1 Overview The P-660HW- Tx v3 is an AD SL2+ router . By integrating DSL and NA T , you are provided with ease of installatio[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 24 • FTP for firmware upgr ades and configur ation backup/restore. • TR -069. This is an auto-configur ation se rver used to remotely configure your device. 1.3 Good Habit s for Ma naging the ZyXEL Device Do the following things regularly t o make the Z yXEL Device mo re[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 25 1.4.1 Internet Access Y our ZyXEL Device pro vides shared Intern et ac cess by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the Z yXEL Device’ s LAN ports (or wirelessly) . Figure 1 ZyXEL Device’ s Rou[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 26 1.5 LEDs (Light s) The following gr aphic displays the l abels of the LEDs. Figure 2 LEDs on the T op of the Device None of the LEDs are on if the Z y XEL Device is not receiving power . T able 1 LED Descriptions LED COLO R ST A TUS DESCRIPTION POWER Green On The Z yXEL D[...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 27 Refer to the Quick Start Guid e for in formation on hardware connections. 1.6 The RESET Button If you forget your password or cannot acces s the web configurator , you will need to use the RE SET button at the back of the device to reload the factory -default configurati [...]

Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 28 1.7.1 T urn the Wireless LAN Off or On 1 Make sure the POWER LED is on (not blinking). 2 Press the WPS WLAN ON/OFF button for less than five seconds and release i t. The WLAN/WPS LED should change from on to off or vice versa. 1.7.2 Activate WPS 1 Make sure the POWER LED [...]

P-660HW-Tx v3 Series User’s Guide 29 C HAPTER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML -based management interface that allows easy device setup and management via Internet browser . Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The rec ommended screen resolution is 1024 b[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 30 Z yXEL Device, type the admin password ( 1234 by default) in the password screen and click Login . Click Cancel to revert t o the default user password in the password field. If you have c hanged the password, enter your password and click Login . Figure 3 Password S[...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 Series User’s Guide 31 6 Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, se lect Go to Advanced setup and click Apply to displ ay th e Status screen. Figure 5 Replace Facto ry Default Certificate Screen Note: For security reasons, the ZyXEL Device aut[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 32 As illustr ated above, the main screen is divided into these parts: • A - title bar • B - navigati on panel • C - main window • D - status b a r 2.2.1 T itle Bar The title bar prov ides some icons in the upper right corner . The icons provide the following fu[...]

Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 Series User’s Guide 33 Wireless LAN AP Use this screen to configure the wireless LAN settings and WLAN authentication/security settings. More AP Use this screen to configure multiple BSSs on the Z yXEL Device. WPS Use this screen to configur e WPS (Wi-Fi Protected Setup) settings. WPS Stati[...]

Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 34 2.2.3 Main Window The main window displays information and configurati on fields. It is discussed i n the rest of this d ocument. Right after y ou log in, the Status scre en is displayed. See Chapter 3 on page 35 for more inform ation about the Status screen. 2.2.4 S[...]

P-660HW-Tx v3 Series User’s Guide 35 C HAPTER 3 Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, sys te m resources, and interfaces (LAN and W AN). The Status screen also provides detailed information from Any IP and DHCP and statist ics from bandwidth management, and traffi c. 3.2 The S t atus Scree[...]

Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 36 Each field is desc ribed in the followi ng table. T able 4 Status Screen LABEL DESCRIPTION R efresh Interval Select how often you w ant the Z yXEL Device to update this screen. Apply Click this to update this screen immediately . Device Information Host Name This field displays the Zy[...]

Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 37 WLAN Information SSI D This is the descriptive name used to identify the Z yXEL Device in a wireless LAN. Click this to go to the screen where you can change it. Channel This is the channel number used by the ZyXEL Dev ice now . Security This displays the type of security mo de the Z y[...]

Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 38 3.3 Client List See Section 7.4 on page 126 for information on this screen. Status This field indicates whether or not the ZyXEL Device is using the interface. For the DSL interface, this field displa ys Down (line is down), Up (line is up or connected) if y ou're using Ethernet [...]

Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 39 3.4 WLAN S t atus Use this screen to view the wireless statio ns that are currently associated to t he Z yXEL Device. Click Status > WLAN Status to access this screen. Figure 8 WLAN S tatus The following table describes t he labels in this screen. 3.5 Any IP T able Click Status >[...]

Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 40 Each field is desc ribed in the followi ng table. 3.6 Packet S t atistics Read- only information here includes port status and packet specific statisti cs. Also provided are "system up time" and "pol l interval( s)". The Poll Interval(s) field is configu rable . Cl[...]

Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 41 The following table describes t he fields in this screen. T able 7 Packet S t atistics LABEL DESCRIPTION Syst e m M on it or Syst e m u p T im e This is the elapsed time the system has been up. Current Date/ Time This field displays your ZyXEL Device’ s present date and time. CPU Usa[...]

Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 42[...]

P-660HW-Tx v3 Series User’s Guide 43 C HAPTER 4 Tutorials 4.1 Overview This chapter shows you how t o use th e Z yXEL Device’ s vario us features. • Setting Up a Secure Wireless Network , see page 43 • Setting Up Multiple Wireless Groups , see page 52 • Configuring the MAC Address Filter , see page 56 • Setting Up NA T Port F orwarding [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 44 4.2.1 Configuring the Wireless Network Settings This example uses the following par ameters to set up a wireless net work. 1 Click Netw ork > Wireless LAN to open the AP screen. Conf igure the screen using the provided parameters (see page 44 ). Click Apply . SSID Example Security Mode W[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 45 2 Click the Advanced Se tup button and select Mixed in th e 802.11 Mod e field. Click Apply . Thomas can now use the WPS feature to establish a wireless connec tion between his notebook and the Z yXEL Devi ce (see Section 4.2.2 on page 45 ) . He can also use the notebook’ s wireless clien[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 46 3 In the wireless client utility , go to th e WPS setting page. Enable WPS and pres s the WPS bu tt on ( Start or WPS butt on ) 4 Push and hold the WPS but ton located on the Z yXEL Device’ s rear panel for more than 5 seconds. Alternativ ely , you may lo g into Z yXEL Device’ s web con[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 47 The following figure shows y ou an example of how to set up a wireless network and its security by pressing a button on both Z yXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device SECURITY INFO COMMUNICA TION WITHIN 2 MINUTES Press and hold for more [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 48 PIN Configuration When you use the PIN configuration meth od, y ou need to use both the Z yXEL Device’ s web configurator and the wireless client’ s utility . 1 Launch your wireless client’s configuration utility . Go to the WPS settings and select the PIN method to get a PIN number .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 49 The following figure shows y ou how to set up a wireless network and it s security on a Z yXEL Device and a wireless client by using PIN method. Example W PS Process: PIN Method Authentication by PIN SECURITY INFO WITHIN 2 MINUTES Wireless Client ZyXEL Device COMMUNICA TION[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 50 4.2.3 Without WPS Use the wireless adapt er’s utilit y installed on the notebook to search for the “Example” SSID . Then enter the “DoNotSt ealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The ZyXEL Device supports IEEE 8 02.1 1b and IEEE 80[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 51 2 Configure the screen as foll ows. T urn on the wireless network from Mondays to Fridays between 18:00 and 23:30. T urn on the wirele ss network a l l d ay on Saturdays and Sundays . Click Appl y .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 52 4.3 Setting Up Multiple Wireless Group s Company A wants to create different wirele ss network groups for different types of users as shown in the following figure. Each group has its own SSID , security mode and QoS control. • Employees in Compan y A will use a general Compan y wireless [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 53 1 Click Network > Wireless LAN to op en the AP screen. Use t his screen to set up the company’ s general wireless network gr oup. Configure the screen using the provided par ameters and click Apply . 2 Click Netw ork > Wireless LAN > More AP to open the following screen. Click th[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 54 3 Configure the screen using the pr o vided parameters and cl ick Apply . 4 In the More AP screen, click the Edit icon to configure the third wireless network group.[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 55 5 Configure the screen using the pr o vided parameters and cl ick Apply . 6 Activ ate the wireless network groups and cl ick Apply .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 56 4.4 Configuring the MAC Address Filter Thomas noticed that his daughter Joseph ine spend s too much time surfing the web and downloading media files. He dec i ded to prevent Josephine from accessing the Internet so that sh e can concentrate on preparing for her final exams. Josephine’ s c[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 57 2 Click Netw ork > Wireless LAN to open the AP screen. Click the Edit but ton in the MAC Filter field. 3 Select Active MAC Filter and Deny Filter Action . Enter the MAC address you found in the Client List screen. Click Ap ply . Josephine will no longer be able to acce ss the Internet th[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 58 4.5 Setting Up NA T Port Forwarding Thomas recently received an Xbo x 360 as his birthda y gift. His friends in vited him to play online games with them on Xbox LIVE. In order to communicate and pla y with other gamers on Xbox LIVE, Thomas needs t o configure the port settings on his Z yXEL[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 59 2 Click Netw ork > NAT to open the General screen. Select Active Network Address Translation and SUA Only . Click Apply . 3 Click Netw ork > NAT to open the General screen. Enter the Xbox 360’ s IP address in the Default Server field. Click Apply . 4.5.2 Port Forwarding If the defau[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 60 2 Click Netw ork > NAT > Port Forwarding to open the following screen. Select User define from the Service Name field. 3 Configure the screen as foll ows to open T CP/UDP p ort 53 for Xbo x 360. Click Apply . 4 Repeat steps 2 and 3 to open the rest of the ports for Xb ox 360. The port[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 61 Thomas can then connect his Xbox 360 to the Internet and play online games with his friends. In this tutorial, all port 80 traffic is forw arded to Xbox 360, but port 80 is also the default listening port for remote manageme nt via WWW . If Thomas also wants to manage the Z yXEL Device from[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 62 • Adding a Firewall R ule for R emote Management • T esting the DDNS Setting Note: If you have a private W AN IP address, then you cannot use DDNS. 4.6.1 Registering a DDNS Account on www .dyndns.org 1 Open a browser and type http://www.dyndns.org . 2 Apply for a user account. This tuto[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 63 2e Select Use WAN IP Address for the IP addres s update polic y . 2f Click Apply . 4.6.3 Adding a Firewall Rule for Remote Management By default, y our Z yXEL Device firewall is enabled to secure y our network from attacks. In this tutorial, y ou add a firew a ll rule that lets y ou manage [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 64 3c In the Source Address section, select Single Address and enter the IP address of the computer that you allo w to access the Z yXEL Device from t he Internet. Click Add . Select Any in the Source Address List and click De lete . Note: If the computer gets a different IP address, this fire[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 65 3 The Z yXEL Device’ s login page should a ppear . Y ou can then log into the ZyXEL Device and manage it. 4.7 Configuring S t atic Route for Routing to Another Network In order to extend your Intr anet and co ntrol traffic flowing directions, you may connect a router to the Z yXEL Device?[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 66 Y ou need to specify a static routing rule on the Z yXEL Device to specify R as the router in charge of forwarding tr affic to N2 . In this case, the Z yXEL Device routes traffic from A to R and then R routes the tr affic to B . This tutorial uses the following example IP settings: T o conf[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 67 4 Configure th e Static Route Se tup screen using the following sett ings: 4a Select Active . 4b Specify a descriptiv e name for this routing rule. 4c Ty p e 192.168.10 .0 and subnet ma s k 255.255.255.0 for the destination, N2 . 4d Select Gateway Address for the gatew ay type. 4e Ty p e 19[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 68 This tutorial uses the following example settings: T o do this, you can use either of the followi ng settings: • Full F eature NA T with many-to- many no overload mapping • Full Feature NA T with one-to-one mapping 4.8.1 Full Feature NA T + Many-to-Many No Overload Mapping Use this sett[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 69 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply . 3 Click the Address Mapping tab , and then click the Edit icon on a new rule. 4 Configure the rule using the following settings: •T y p e : Many-to-Many No Overload • Local IP addresse[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 70 4.8.2 Full Feature NA T + One-to-One Mapping Use this setting if your applications must use fix ed public IP addresses and t he applications can be ini tiated eith er from the Intranet computers ( A and B ) or the Internet computer ( C ). For example, gaming application. T o configure this [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 71 • Rule 2 (This map s the public IP address 172. 16.1.254 to the priv ate IP address 192.168.1.3) Ty p e : One-to-One Local Start IP: 192.168.1.3 Global Start IP: 172.16.1.25 4 Click Apply on each of the screens. 4.9 Multiple W AN Connections Example This example shows an app lication for [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 72 • The connection with VPI/VCI, 0/35 , is dedicated for gener al data tr ansmission. Figure 1 1 Example for Multiple W AN Connections 4.10 Multiple P VCs with QoS This tutorial is onl y applicable for an ISP engineer . An ISP may configure multiple PVCs for seper ating different subscriber[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 73 4.10.1 Configuring Multiple P VCs and A TM-QoS This section shows y ou how to configure two PVCs and specify a proper A TM-QoS type for each PVC. 1 Click Netw ork > WAN > Internet Access Setup , configure the settings you (ISP) want to pro vide to the subscriber fo r gener al data tr [...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 74 2 Click the Advanced Setup button to disp lay the fol lowing opt ions. Sele ct UBR in the ATM QoS Type field. Click Apply . 3 Click the More Connections tab and then click the Edit icon next to the entry two. 4 Then configure the screen using the following example settings: • Select Activ[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 75 •P V C : LLC , 0 / 33 Click Apply . 5 Click the Advanced Se tup button and then select CBR in the ATM QoS Type field. Click Apply .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 76 4.10.2 Configuring T raffic Classifiers This section shows y ou how to map differen t port tr affic to the different outgoing PVCs that the traffi c should go . In this tutorial, v oice traffic sent f rom port 4 should be transmi tted to PVC PVC-for-VoIP wit h WAN index 2. Gener al data tra[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 77 Click Apply .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 78 3 The Class Setup screen appears. Click Add to create another QoS c lassifier rule for general data. 4 Configure this rule using the following example settings. • Class Configur ation: • Select Active . • Enter a descripti ve name for this rule. F or example, General Data . •I n t e[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 79 • Physical P ort: 1~3 (means to ex clude port 4) Click Apply .[...]

Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 80 5 Click the General tab. The n select Active QoS and click Apply . Now you can connect a V oIP phone to the Z yXEL Device’s LAN port 4 and computers to port 1~3. The Z y XEL Device classifies and prioritizes v oice tr affic to optimize voice quality .[...]

81 P ART II Wi z a r d Internet and Wireless Setup Wizard (83)[...]

82[...]

P-660HW-Tx v3 Series User’s Guide 83 C HAPTER 5 Internet and Wireless Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information giv en to you by yo ur ISP . Note: See the advanced menu chapters for background information on th ese fields. 5.2 Internet Access Wizard Setup 1 After you e[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 84 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 13 Wizard W elcome 3 Y our ZyXEL device attempts to detect y our DSL connection and your connection type. 3a The following screen appears if a connectio[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 85 3b The following screen displays if a PP PoE or PPP oA connection is detected. Enter your Internet account informatio n (username, password and/or service name) exactly as provided by your ISP . Then click Next and see Section 5.3 on page 92 for wireless connection [...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 86 5.2.1 Manual Configuration 1 If the Z yXEL Device fail s to detect your DSL connection type but the physical line is connected, enter y our Internet access information in the wi zard screen exactly as your service prov ider gave it to you. Leav e the defaults [...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 87 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with rout ing mode. Configure the fields and click Next to continue. See Section 5.3 on page 92 for wireless connection wizard setup Figure 18 Internet Conne[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 88 The following table describes t he fields in this screen. Figure 19 Internet Connection with RFC 1483 T able 1 1 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@ d[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 89 The following table describes t he fields in this screen. Figure 20 Internet Con nection with ENET ENCAP T able 12 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is av ailable if you select Routing in the Mode field. T ype your ISP assigne[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 90 The following table describes t he fields in this screen. Figure 21 Internet Connection with PPPoA T able 13 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an I P Address Automatically A static IP address is a fixed IP that your ISP give s you. A[...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 91 The following table describes t he fields in this screen. • If the user name and /or password you entered for PPP oE or PPPoA connect ion are not correct, the screen disp lays as shown next. Click Back to Username and Password setup to go back to the screen where [...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 92 5.3 Wireless Connection W izard Setup After you configure the Internet access in formation, use the following screens to set up your wirel ess LAN. 1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to Step 6 . Figure 24 [...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 93 3 Configure your wireless sett ings in this screen. Cli ck Next . Figure 26 Wirele ss LAN The following table describes t he labels in this screen. Next Click this to continue to the next w izard screen. Exit Click this to close the wizard screen without saving. T a[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 94 Note: The wireless stations and Z yXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wireless communication. 4 This screen varies dependi ng on the security mode you selected in the [...]

Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 95 5.3.2 Manually Assign a WEP Key Choose Manually assign a WEP key to setup WEP Encryption par ameters. Figure 28 Manually Assign a WEP key The following table describes t he labels in this screen. 5 Click Apply t o save y our wireless LAN settings. Figure 29 Wireless[...]

Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 96 6 Use the read-only summary table to check whether what you hav e configured is correct. Click Finish to complete and s ave th e wi zard se tup. Note: No wireless LAN settings display if you chose not to configure wireless LAN settings. Figure 30 Internet Acce[...]

97 P ART III Network WAN Setup (99) LAN Setup (119) Wireless LAN (137) Network Address T ranslation (NA T) (171)[...]

98[...]

P-660HW-Tx v3 Series User’s Guide 99 C HAPTER 6 WAN Setup 6.1 Overview This chapter describes how to co nfigure WAN settings from the WAN screens. Use these screens to conf igure your Z yXEL Device for Int ernet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private netwo[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 100 they should also provide a username an d password (and service name) for user authentication. W AN IP Address The WAN IP address is an IP address for the Z yXEL Device, which mak es it accessible from an outside network. It is used by the Z yXEL Device to communicate with other devices in [...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 101 6.2 The Internet Access Setup Screen Use this screen to change y our Z yXEL Device’ s W AN settings. Click Network > WAN > Internet Access Setup . The screen diff ers by the WAN t ype and encapsulation you select. Figure 32 Network > W AN >Internet Access Setup (PPPoE)[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 102 The following table describes t he labels in this screen. T able 19 Network > WAN > Internet Access Setup LABEL DESCRIPTION Line Modulation Select the modulation supported by your ISP . Use Multi Mode if you are not sure which mode to choose from. The Z yXEL Device dynamically diagno[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 103 IP Address This option is av ailable if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP giv es you. A dynamic IP address is not fi xed; the ISP assigns you a different one each time you connect to the Internet. Select Obtain an IP Address Automatically[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 104 6.2.1 Advanced Internet Access Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown. Figure 33 Network > W AN > Internet Access Setup: Advanced Setup The foll[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 105 Multicast Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast pack ets (packets sent to one computer) and broadcast packets (packets sent to every computer). Internet Group Multicast Protocol (IGMP) is a network -layer protocol used to establish [...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 106 Protocol F ilter Select the protocol filter(s) to control incoming traffic. Y ou may choose up to 4 sets of filters. Y ou can configure packet filters in the Packet Filter screen. See Chapter 12 on page 219 for more details. Generic Filter Select the generic filter(s) to control incoming t[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 107 6.3 The More Connections Screen The Z yXEL Device allows y ou to conf igure more than one Internet access connection. T o configure additional Internet ac cess connections click Network > WAN > More Connections . The screen differs by the encapsulation you select . When you use the W[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 108 6.3.1 More Connections Edit Use this screen to configure a conn ection. Click the ed it icon in the More Connections screen to display the following screen. Figure 35 Network > W AN > More Connections: Edit The following table descri bes the labels in this screen. T able 22 Network &[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 109 Mode Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge , the ZyXEL Device will forw ard any packet that it does not route to this remote node; otherwise, the packets are discarded. Encapsulation Select the me[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 0 Gateway IP address This option is av ailable if you select ENET ENCAP in the Encapsulation field. Specify a gateway IP address (supplied by your ISP). Connection Nailed-Up Connection Select Nailed-Up Connection when you w ant your connection up all the time. The Z yXEL Device will try to [...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 111 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 36 Network > W AN > More Connections: Edit: Advanced [...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 2 AT M Q o S Ty p e S e l e c t CBR (Continuous Bit Rate) to specify fixed (alwa ys-on) bandwidth for voice or data tr affic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR-nRT (V ariable Bit Rate-non Real Time) or VBR-RT (V ariabl[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 3 6.4 W AN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 6.4.1 Encap sulation Be sure to use the encapsulation method required by your ISP . The Z yXEL Device supports the following methods. 6.4.1.1 ENET ENCAP[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 4 since the Z yXEL Device does that part of the task. Furthermore, with NA T , all of the LANs’ computers will ha ve access. 6.4.1.3 PPPoA PPP oA stands for P oint to P oint Protocol o ver A TM Adaptation Lay er 5 (AAL5). A PPPoA connection functi ons li ke a di al - u p Internet connecti[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 5 and for the VCI is 32 to 65535 (0 to 31 is reserved for local manag ement of A T M traffic ). Please see the appendix f or more information. 6.4.4 IP Address Assignment A static IP is a fix e d IP that your ISP g iv e s y ou. A dynamic IP is not fix e d; the ISP assigns you a different on[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 6 packet, used wit hin one network to a di fferent IP address known within anot her network. 6.5 T raffic Shaping T raffi c Shaping is an agreement between th e ca rrier and the subscriber to regulate the aver age rate and fluctuations of data t ransmission o ver an A TM network. This agree[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 7 6.5.1 A TM T raffic Classes These are the basic A TM traffic classes d efined by the A TM Forum T raffic Management 4.0 Specificati on. Const ant Bit Rate (CBR) Constant Bit R ate (CBR) provid es fixed bandwidth that is always a vail able even if no data is being sent. CBR traffic i s gen[...]

Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 8[...]

P-660HW-Tx v3 Series User’s Guide 11 9 C HAPTER 7 LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communicat ion system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addre[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 120 7.1.2 What Y ou Need T o Know About LAN IP Address IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are also known as hos[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 121 Finding Out More See Section 7.6 on page 129 for technical background information on LANs. 7.1.3 Before Y ou Begin Find out the MAC addresses of your networ k d evices if you intend to add them to the DHCP Client List screen. 7.2 The LAN IP Screen Use this screen to set the Lo cal Area Net[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 122 The following table describes t he fields in this screen. 7.2.1 The Advanced LAN IP Setup Screen Use this screen to edit your Z yXEL Devi ce's RIP , multicast, Any IP and Wi ndows Networking settings. Click t h e Advanced Setup button in the LAN IP screen. The screen appears as shown.[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 123 The following table describes t he labels in this screen. T able 25 Network > LAN > IP: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Out Only . RIP V ersion Select the RIP version from RIP-1 , RIP-2B [...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 124 7.3 The DHCP Setup Screen Use this screen to configure the DNS se rv er information that the Z y XEL Device sends to the DHCP client devices on the LAN. Cl ick Network > DHCP Set up to open this screen. Figure 40 Network > LAN > DHCP Setup Protocol Filter Select the protocol filte[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 125 The following table describes t he labels in this screen. T able 26 Network > LAN > DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server , your Z yXEL Device can assign IP addresses, an IP default gateway and DNS serv ers to Windows 95, Windows NT and other systems that supp[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 126 7.4 The Client List Screen This table allows y ou to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet dev ice has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 127 7.5 The IP Alias Screen IP alias al lo ws you to partit ion a physica l network into differe nt logical networks over the same Ethernet interface. The Z yXEL Device supports t hree logical LAN interfaces via its single physical Et hernet int erface with the Z yXEL Device itself as the gate[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 128 7.5.1 Configuring the LAN IP Alias Screen Use this screen to change yo ur Z yXEL Device’s IP alias sett ings. Click Network > LAN > IP Alias to open the following screen. Figure 43 Network > LAN > IP Alias The following table describes t he labels in this screen. T able 28 Ne[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 129 7.6 LAN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 7.6.1 LANs, W ANs and the ZyXEL Device The actual physical connec tion determines whether the Z y XEL Device ports are LAN or W AN ports. There are two se[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 130 7.6.2 DHCP Setup DHCP (Dynamic Host Configur ation Protocol , RFC 2131 and RFC 2132) allows individual clients to obtai n T CP/IP configur ation at start -up from a server . Y ou can configure the Z yXEL Device as a DHCP serv er or disable it. When configured as a server , the ZyXEL Device[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 131 7.6.4 LAN TCP/IP The Z yXEL Device has built -in DHCP server capabilit y that assigns IP addresses and DNS servers to systems t hat support DHCP client capabilit y . IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN sh[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 132 • 192.168.0.0 — 192.168 .255.255 Y ou can obtain your IP address from the IANA, from an ISP or it c an be assigned from a private network. If y o u belong to a small organization and your Internet access is through an ISP , the ISP ca n pr o vid e you with the Internet addresses for yo[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 133 IGMP (Internet Group Mu lticast Protocol) is a ne twork - layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) i s an improvement ov er version 1 (R FC 1112) but IGMP version 1 is still in wide use. IGMP v ersion 3 [...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 134 without changing the network settings, even when the IP addresses of the computer and the Z yXEL Device are not in the same subnet. Figure 45 Any IP Example The Any IP feature does not apply to a computer using ei ther a dynami c IP address or a static IP address that i s in t he same subn[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 135 4 The computer updates the MAC address for the default gatewa y to the ARP table. Once the ARP table is updated, the comp uter is able to access the Internet through the Z yXEL Device. 5 When the Z yXEL Device receives packets fr om the computer , it creates an entry in the IP routing tabl[...]

Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 136[...]

P-660HW-Tx v3 Series User’s Guide 137 C HAPTER 8 Wireless LAN 8.1 Overview This chapter describes how to perform task s related to setting up and optimizing your wirele ss net w or k, includi ng the foll owi n g . • T urning the wireless connection on or off . • Configuring a name, wireless cha nnel and security for the networ k. • Using Wi[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 138 Y ou don’ t necessarily need to use all these screens to set up your wireless connection. F or example, yo u may just want to set up a network name, a wireless radio channel and security in the AP screen. 8.1.2 What Y ou Need to Know About Wireless Wireless Basics “Wireless” is es[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 139 • What wireless st andards do the other wi reless devices in your network support (IEEE 802.11g, for example)? What is the most appropriate standard to use? • What security options do the other wire less devices in your network support (WPA -PSK, for example) ? What is the strongest[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 140 The following table describes t he labels in this screen. T able 29 Network > Wireless LAN > AP LABEL DESCRIPTION Wireless Setup Active Wireless LAN Click the check box to activ ate wireless LAN. Auto -Sc an Channel Select this option to have th e Z yXEL Device automatically scan [...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 141 8.2.1 No Security In the Network > Wireless LAN > AP screen, select No Sec urit y from the Security Mode list to allow wireless devices to communicate with the Z yXEL Device without any data encr yption or authen tication. Note: If you do not enable any wireless security on your Z[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 142 8.2.2 WEP Encryption Use this screen to configure an d enable WEP encryption. Click Network > Wireless LAN to display the AP screen. Select Static WEP from the Security Mode list. Note: WEP is extremely insecure. It s encryption can be broken by an attacker , using widely-available s[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 143 8.2.3 WP A(2)-PSK Use this screen to configure and enab le WP A(2)-PSK authentication. Cl ick Network > Wireless LAN to di splay the AP screen. Select WPA-PSK or WPA2- PSK from the Security Mode li s t. Figure 49 Network > Wireless LAN > AP: WP A(2)-PSK The following table desc[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 144 8.2.4 WP A(2) Authentication Use this screen to configure and enable WPA or WP A2 authentication. Click the Wireless LAN link under Network to display the AP screen. Sel ect WPA , WPA2 or WPAMixed from the Security Mode list. Figure 50 Network > Wireless LAN > AP: WP A(2) Idle Tim[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 145 The following table describes t he wirele ss LAN security labels in this screen. T able 33 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION Security Mode Choose WPA or WPA2 from the drop-down list box. WP A Compatible This check box is av ailable only when you select WPA2-PSK[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 146 8.2.5 Wireless LAN Advanced Setup Use this screen to configure adva nced wireless settings. Cl ick the Advanced Setup button in th e AP screen. The screen appears as shown. See Section 8.8.2 on page 158 for detailed defini tions of the terms listed in this screen. Figure 51 Network >[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 147 8.2.6 MAC Filter Use this screen to change y our Z yXEL Device’ s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 52 Network > Wireless LAN > AP: MAC Ad dress Filter 802.11 Mode Select 802.11b Only to allow only IEEE 802.11b compl[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 148 The following table describes t he labels in this screen. 8.3 The More AP Screen This screen allows y ou to enable and conf igure multiple Basi c Service Sets (BS Ss) on the Z yXEL Device. Click Network > Wireless LAN > More AP . The following screen displays. Figure 53 Network &g[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 149 The following table describes t he labels in this screen. 8.3.1 More AP Edit Use this screen to ed it an SSID profile. Click the Edit icon next to an S SID in the More AP screen. The following screen displays. Figure 54 Network > Wireless LAN > More AP: Edit T able 36 Network >[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 150 The following table describes t he fields in this screen. T able 37 Network > Wireless LAN > More AP: Edit LABEL DESCRIPTION Network Name (SSID) The SSID (Service Set IDentity) iden tifies the service set with which a wireless device is associated. Enter a descriptive name (up to [...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 151 8.4 The WPS Screen Use this screen to configure WiFi Prot ected Setup (WPS) on your Z yXEL Device. WPS allows you to q uickly set up a wirele ss network with strong securit y , without having to conf ig ur e security se tt i ng s man ually . Set up eac h W P S con ne ction between two d[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 152 8.5 The WPS S t ation Screen Use this screen to set up a WPS wire less network using ei ther Push Butt on Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS Station . The following screen displays. Figure 56 Network > Wireless LAN > WPS S tation Re[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 153 The following table describes t he labels in this screen. 8.6 The WDS Screen An AP using the Wireless Distribution S y stem (WDS) can function as a wireless network bridge allowing y ou to wirele ssly connect two wired network segments. The WDS screen allows you to configure the Z yXEL [...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 154 Click Network > W ireless LAN > WDS . The following screen displays. Figure 57 Network > Wireless LAN > WDS The following table describes t he labels in this screen. T able 40 Network > Wireless LAN > WDS LABEL DESCRIPTION Enable WDS Security Select this option and the[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 155 8.7 The Scheduling Screen Use the wireless LAN scheduling to config ure the da ys you want to enable or disable the wireless LAN. Cl ick Network > Wireless LAN > Scheduling . The following screen displays. Figure 58 Network > Wireless LAN > Scheduling The following table des[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 156 8.8 Wireless LAN T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. 8.8.1 Wireless Network Overview Wireless networks c onsist of wireless clients, access points and bridges. • A wireless cl ient is a r adio connected to a user[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 157 The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point ( AP ) to interact wit h the other devices (such as the printer) or with the Intern et. Y our ZyXEL Dev ice is the AP . Every wireless network must fol low these basic gui[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 158 8.8.2 Additional Wireless T erms The following table descri bes some wirele ss net work terms and acronyms used in the Zy XEL Device’s W eb Configurator . 8.8.3 Wireless Security Overview By their nature, rad io communications are si mple to intercept. F or wireless data networks, thi[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 159 These security standards v ary in effectiv eness. S o m e ca n be broken, such as the old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at all, but it will not k eep a determined attack er out. Other security standards are secure in themselves but can be br[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 160 Y ou can use the MAC address filter to t ell the Z yXEL Device which devices are allowed or not all owed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (S SID, channel , and security). If a device is not allo[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 161 For example, if the wireless networ k has a RADIUS server , you can choose WPA or WPA2 . If users do not log i n to the wireless network, you can choose no encryption, Static WEP , WPA-PSK , or WPA2-PSK . Usually , you should set up the stronges t encryption that ev ery device in the wi[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 162 and communicate with each other . When Intr a-BSS tr affic blocking is enabled, wireless station A and B can stil l access the wired network but cannot communicate with each other . Figure 60 Basic Service set 8.8.6 MBSSID T raditionally , you need to use different APs to configure diff[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 163 8.8.7 Wireless Distribution System (WDS) The Z yXEL Device can act as a wireless network bri dge and establish WDS (Wireless Distribution System) links wi th other APs. Y ou need to know the MAC addresses of the APs you w ant to link to. Once the security sett ing s of peer sides match [...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 164 8.8.8.1 Push Button Configu ration WPS Push Bu t ton Conf iguration (PBC) is initiate d by pressin g a button on ea c h WPS-enabled device, and allowing them to connect automatically . Y ou do not need to enter any information. Not every WPS-enabled device has a ph ysical WPS button. So[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 165 T ake the following steps to set up a WP S connection between an access point or wireless router (referred to here as th e AP) and a c lient device using the PIN method. 1 Ensure WPS is enabled on both devices. 2 Access th e WPS sectio n of the AP’s configur ation interface. See the d[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 166 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 62 Example WPS Process: PIN Method 8.8.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 167 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 63 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes). The next time you use WPS, a[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 168 8.8.8.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured. When WPS is activ ated on both, they perform the handshake. In this exa[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 169 point. However , you know that Client 2 supports the registrar function, so y ou use it to perform the WPS handshak e instead. Figure 66 WPS: Example Network S tep 3 8.8.8.5 Limit ations of WPS WPS has some limitations of which you should be a ware. • WPS works in Infrastructure netwo[...]

Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 170 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network. This is because the registrar has no wa y of id entifying the “corr[...]

P-660HW-Tx v3 Series User’s Guide 171 C HAPTER 9 Network Address Translation (NAT) 9.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device. NA T (Network Address T ranslation - NA T , RFC 1631) is the tr anslation of the IP address of a host in a packet, for example, the source addr ess of an outgoing packet, used within one[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 172 NA T In the simplest form, NA T changes the source IP address in a packet receiv ed from a subscriber (the inside l ocal address) to another (the inside global address) before forwarding t he packet to the WA N side. When the response comes back, NA T translates[...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 173 9.2 The NA T General Setup Screen Use this screen to activ ate NA T . Click Network > NAT to open the following screen. Note: Y ou must create a firewall rule in ad dition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded throu gh the ZyXEL[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 174 9.3 The Port Forwarding Screen Note: This screen is avail able only when you select SUA only in the NA T > General screen. Use this screen to forw ard incoming servic e requests to the server(s) on your local network. Y ou may enter a single port number or a [...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 175 Configuring Servers Behind Port Forw arding (Example) Let's say you want to assi gn ports 21-25 to o n e F T P , T e ln e t a n d S M T P s er v e r ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.168.1[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 176 The following table describes t he fields in this screen. T able 45 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to the servers for specif ied services, NA T supports a default server . A default server [...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 177 9.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule . Click t he rule ’ s edit icon in t he Port Forwarding screen to display the screen shown next. Figure 70 Network > NA T > Port Forwarding: Edit The following table d[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 178 9.4 The Address Mapping Screen Note: The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify . When a rul[...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 179 9.4.1 The Address Mapping Rule Edit Screen Use this screen to ed it an address mapping rul e. Click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. Figure 72 Network > NA T > Address Mapping: Edit Global End IP This is [...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 180 The following table describes t he fields in this screen. T able 48 Network > NA T > Address Mapping: Edit LABEL DESCRIPTION Ty p e Choose the port mapping type from one of the following. One-to-One : One-to-One mode maps one local IP ad dress to one globa[...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 181 9.5 The SIP ALG Screen Some NA T routers may include a SIP Application Layer Gateway (AL G). A SIP ALG allows SIP calls to pass through NA T by examining and translati ng IP addresses embedded in the data stream. When the Z yXEL Device registers with the SIP regist[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 182 packet is in the local network, while the gl obal address refers to the IP address of the host when the same packet is traveling in the WAN side. Note that inside/outside refers t o the locati on of a host, while gl obal/local refers to the IP address of a host [...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 183 9.6.3 How NA T Works Each packet has two addres ses – a source address and a destination address. For outgoing packets, t h e ILA (Inside Local Addr ess) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the W AN. F or[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 184 9.6.4 NA T Application The following figure illustr ates a possible NA T application, where three inside LANs ( l o g i c a l L A N s u s i n g I P a l i a s ) b e h i n d t h e ZyXEL Device can communicat e with three distinct W AN networks. Figure 75 NA T Appl[...]

Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 185 P ort numbers do NO T change for One-to- One and Many-to-Many No Overload NA T mapping types. The following table summarizes these types. T able 51 NA T Mapping T ypes TYPE IP MAPPING One-to-On e ILA1 ÅÆ IGA1 Many -to-On e (SUA/P A T) ILA1 ÅÆ IGA1 ILA2 ÅÆ IGA[...]

Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 186[...]

187 P ART IV Security Firewalls (189) Content Filtering (211) P acket Filter (219) Certificates (229)[...]

188[...]

P-660HW-Tx v3 Series User’s Guide 189 C HAPTER 10 Firewalls 10.1 Overview This chapter shows you how t o enable an d configure the Z yXE L Device firewall. Use these screens to enable and configure the firew all that protects your Z yXEL Device and network from attacks by hacker s on the Internet and control ac cess to it. By default the fi rewal[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 190 •U s e t h e Threshold screen ( Section 10.4 on page 202 ) to set the thresholds that the Z yXEL Device uses to determine when to start dropping sessions that do not become fully established (half -open sessions). 10.1.2 What Y ou Need to Know About Firewall DoS Denials of Service (DoS)[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 191 10.1.3 Firewall Rule Setup Example The following Internet firewall rule ex ample allows a hypothetical “MyService” connection from the Internet. 1 Click Security > Firewall > Rul es . 2 Select WAN to LAN in the Packet Direction field. Firewall E xample: R ules 3 In the Rules scr[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 192 6 Click an index number to displa y the Customized Services Config screen and configure the screen as follows and click Apply . Edit Custom Port Example 7 Select Any in the Destination Address List box and then clic k Delete . 8 Configure the destination ad dre ss screen as follows and cl[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 193 9 Use the Add >> and Remove butt ons between Available Services and Selected Services list boxes to configure i t as follows. Click Apply when you are done. Note: Custom services show up with an “*” before their names in the Services list box and the Rules list box. Firewall Exa[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 194 On comple ti ng th e configu ration proc e dure for this In t ern et firewall rul e, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Firewall E xample: R ules: MySe rvice 10.2[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 195 The following table describes t he labels in this screen. T able 52 Security > Firewall > General LABEL DESCRIPTION Active Firewall Select this check box to activ ate the firew all. The Zy XEL Device performs access control and protects against Denial of Service (DoS) attacks when t[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 196 10.3 The Firewall Rule Screen Note: The ordering of your rules is very impo rtant as rules are applied in turn. Ref e r t o Section 10.5 on page 205 for more information. Click Security > Firewall > Rules to bring up the following s creen. This screen displays a li st of the configu[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 197 Destination IP This drop-down list box displa ys the destination addresses or ranges of addresses to which this firewall rule applies. Please note that a blank source or destination address is equiv alent to Any . Service This drop-down list box displays the services to which this firew a[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 198 10.3.1 Configuring Firewall Rules Ref e r t o Section 10.1.2 on page 190 for more information. Use this screen to configure firewall rules. In the Rules screen, select an index number and click Add or click a ru le’s Edit ic on to display this screen and refer to the following table for[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 199 The following table describes t he labels in this screen. T able 54 Security > Firewall > Rules: Edit LABEL DESCRIPTION Edit Rule Active Select this option to enable this firewall rule. Action for Matched Pack et Use the drop-down list box to select whether to discard ( Drop ), deny[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 200 10.3.2 Customized Services Configure customized servi ces and port numbers not predefined by the Z yXEL Device. For a comprehensive list of port numbers and services, visi t the IANA (Internet Assigned Number Authority) website. See Appendix E on page 411 for some examples. Click the Edit[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 201 10.3.3 Configuring a Customized Service Use this screen to add a customized rul e or edit an existing rule. Click a rule number in the Firewall Customized Services screen to displa y the following screen. Figure 81 Security > Firewall > Rules: Edit: Ed it Customized Services: Config[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 202 10.4 The Firewall Threshold Screen For D o S attacks, the ZyXEL Device uses thresholds to determine when to start dropping sessions that d o not become fully esta blished (half -open sessions). These thresholds apply global ly to all sessions. For T CP , half-open means that the session h[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 203 5 T ype of traffic for certain servers. Re duce the threshold v alues if your netw ork is slower than average for any of these factors (especially i f you have serv ers that are slow or handle many tasks and are often busy). • If you often use P2P applications such as file sharing with [...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 204 One Minute H igh This is the rate of new half -open sessions per minute that causes the firewall to start deleting half -open sessions. When the rate of new connection attempts rises above this n umber , the ZyXEL Device deletes half-open sessions as required to accommodate new connection[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 205 10.5 Firewall T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 10.5.1 Firewall Rules Overview Y our customized rules take prec edence and ov erride the Z yXEL Device’ s default settings. The Z yXEL Device ch [...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 206 •W A N t o W A N / R o u t e r By default the Z y XEL Device stops computers on the WAN from managing the Z yXEL Device or using the Z yXEL Device as a gateway to communicate with other computers on the WAN. Y ou co uld configure on e of these rules to allow a WAN computer to manage t h[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 207 10.5.3 Security Considerations Note: Incorrectly configuring the firewall ma y block valid access or introduce security risks to the ZyXEL Device and your protected net work. Use caution when creating or deleting firewall rules and test your rules after you configure them. Consider these [...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 208 10.5.4.1 The “T riangle Route” Problem A tr affic route is a path for sending or receiving data packets between two Ethernet devices. Y ou may have more than one connection to the Interne t (through one or more ISPs). If an alte rnate gatew ay is on the LAN (and its IP address is in t[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 209 It’ s like having multipl e LAN networks that actually use the same ph ysical cables and ports. By putting your LAN an d Ga teway A in different subnet s, all returning network tr affic must pass through t he Z yXEL Device to your LAN. T he following steps describe such a sc enario. 1 A[...]

Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 210[...]

P-660HW-Tx v3 Series User’s Guide 21 1 C HAPTER 11 Content Filtering 1 1.1 Overview Internet content filtering allows y ou to block web sites based on keywords in the URL. See Section 11.1.4 on page 212 for an example of setting up c ontent filtering. 1 1.1.1 What Y ou Can Do in the Content Filter Screens •U s e t h e Keyword screen ( Section 1[...]

Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 212 1 1.1.4 Content Filtering Example The following shows the steps required for a parent (Bob) to set up content filtering on a home network in order t o li mit his children’ s access to certain web sites. In the following example, all URLs containing th e word ‘bad’ are block [...]

Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 213 4 Click Apply . Security > Conten t Filter > S chedule: Example The childre n ca n access th e fa mily comp ut er in the living room , while only the parents use another comput er in the stud y room. So keyword blocking is only needed on the family comp uter and the stu[...]

Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 214 1 1.2 The Keyword Screen Use this screen to block si tes containing certain keywords i n the URL. F or example, if y ou enable the k eyword "bad", the Z yXEL Devi ce blocks all sites containing this keyword including th e URL http://www .website.com/bad.html. T o h a v e[...]

Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 215 1 1.3 The Schedule Screen Use this screen to set the days and time s for the Z yXEL Device to perform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown. Figure 88 Security > Content Filter > Schedule Add Keyword Click th i[...]

Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 216 The following table describes t he labels in this screen. 1 1.4 The T rusted Screen Use this screen to exclude a r ange of us ers on the LAN from content filtering on your Z yXEL Device. Click Security > Content Filter > Trusted . The screen appears as shown. Figure 89 Secur[...]

Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 217 Apply Click this to save yo ur changes. Cancel Click this to restore your previously saved settings. T able 60 Security > Content Filter: T rusted (continued) LABEL DESCRIPTION[...]

Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 218[...]

P-660HW-Tx v3 Series User’s Guide 219 C HAPTER 12 Packet Filter 12.1 Overview Y our ZyXEL Device uses filters to decide whether to allow passage of tr affic. This chapter discusses how to create and apply filters. 12.1.1 What Y ou Can Do in the Packet Filter Screen Use the Packet Filter screens ( Section 12.2 on page 220 ) to displa y the filter [...]

Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 220 12.2 The Packet Filter Screen Use this screen to set up p acket filters on your Z yXEL Device. Click Security > Packet Filter to display the fo llowing scre en. Figure 90 Security > Packet Filter The following table describes t he labels in this screen. T able 61 Security &g[...]

Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 221 12.2.1 Editing Protocol Filters Use this screen to display a protocol filter set on y our Zy XEL De vice. Protocol rules allow you t o base the rule on the fields in the IP and the upper layer protocol, for example, UDP and TCP headers. In the Packet Filter screen, select Protocol Fil[...]

Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 222 12.2.2 Configuring Protocol Filter Rules Use this screen to configure pr otocol filter rules. In the Edit (Protocol Filter) screen, click an Edit ic on to display the following screen. Figure 92 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule The following t[...]

Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 223 12.2.3 Editing Generic Filters Use this screen to disp lay a generic filt er set on y our Z yXEL Device. The purpose of generic rules is to allow you to filter non- IP packets. F or IP packets, it is generall y easier to use the IP rules di rectly . For g eneric rules, the Z yXEL Devi[...]

Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 224 Offset (from 0) and the Length fields, both in bytes. The Z yXEL Device applies the Mask (bit-wise AN Di ng ) to th e d ata portio n before com p a r ing the resu lt against the V alue to determine a match. The Mask and Value are specified in hexadecimal numbers. Note that it take[...]

Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 225 12.2.4 Configuring Generic Packet Rules Use this screen to configure generic filter rules. In the Edit (Generic Filter) screen, click the Edit button from the Modify field to displ ay the fol lowing screen. Figure 94 Security > Packet Filte r > Edit (Generic Filter) > Edit Ru[...]

Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 226 12.3 Packet Filter T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 12.3.1 Filter T ypes and NA T There are two classes of filter rules, generic filter rules and protocol filter rules. Generic filter ru[...]

Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 227 receiving and sending the pack ets; that is the interface. The interface can be an Ethernet port or any other hardware port . The fol lowing d iagram illu strates th is. Figure 95 Protocol and Generic F ilter Sets 12.3.2 Firewall V ersus Filters Below are some comparisons between the [...]

Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 228 • The firew all performs stateful inspection. It takes into account t he state of connections it handles so that, for examp le, a legitimate incoming packet can be matched with the out bound request for th at pack et and allowed in. Conv ersely , an incoming packet masquerading [...]

P-660HW-Tx v3 Series User’s Guide 229 C HAPTER 13 Certificates 13.1 Overview This chapter describes how y our Z yXEL Devi ce can use certificates as a means of authenticating wireless cl ients. It giv e s background information about public - key certificates and explains how to use them. A certificate contains the certificate owner’ s identit [...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 230 information and pub lic keys and then send t he certification requests to a certification authority . Certificate File Format s The certification authority cert ifi cate that you want to import has to be in one of these file formats: • Binary X.509: This is an ITU- T recomm endation [...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 231 The following table describes t he labels in this screen. T able 66 T rusted CAs LABEL DESCRIPTION PKI Storage Space in Use This bar displays the percentage of the ZyXEL Device’ s PKI storage space that is currently in use. The bar turns from blue to red when the maximum is being app[...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 232 13.2.1 T rusted CA Import Fol low the instructions in this screen to save a trusted certification authorit y’ s certificate to the Z yXEL Device. Click Security > Certificates to open the Trusted CAs screen and then click Import to open the Trusted CA Import screen. Note: Y ou mus[...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 233 13.2.2 T rusted CA Det ails Use this screen to view in-depth inform ation about the certification authority’ s certificate, change the certificate’ s na me and set whether or not you want the Z yXEL Device to check a certification author ity’ s list of revoked certificates before[...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 234 V ersion This field displays the X.509 version number . Serial Number This field displays the certificate’ s identification number given by the certification authority . Signature Algorithm This field displays the type of algorithm that w as used to sign the certificate. Some certifi[...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 235 13.3 Certificates T echnical Reference This section provides technical background information about the topics cov ered in this chapter . 13.3.1 Certificates Overview The Z yXEL Device can use certifica tes (als o called digital IDs) to authenticate users. Certificates are based on pub[...]

Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 236 1 Tim wants to send a message to Jenn y . He needs her to be sure that it comes from him, and that the message content has not been altered by an yone else along the way . Tim generates a public k ey pair (one public key and one priv ate k ey). 2 Tim keeps the private key and makes the[...]

237 P ART V Advanced Static R oute ( 239) 802.1Q/1P (243) Quality of Service (QoS) (253) Dynamic DNS Setup (269) Re mote Management (273) Universal Plug-and-Pla y (UPnP) (281)[...]

238[...]

P-660HW-Tx v3 Series User’s Guide 239 C HAPTER 14 Static Route 14.1 Overview The Z yXEL Device usually uses the default gatewa y to route outbound tr affic from computers on the LAN to the Internet. T o have the Z yXEL Device send data to devices not reachable through the de fault g ateway , use stat ic routes. For example, the next figure shows [...]

Chapter 14 Stat ic Route P-660HW-Tx v3 Series User’s Guide 240 14.2 The S t atic Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen. Figure 101 Advanced > S tatic Route The following table describes t he labels in this screen. T able 69 Advanced > Static Route LABEL [...]

Chapter 14 Static Route P-660HW-Tx v3 Series User’s Guide 241 14.2.1 S t atic Route Edit Use this screen to configure the required information for a static route. Select a static route index numb er and click Edit . The screen shown next app ears. Figure 102 Advanced > S tatic Route: Edit The following table describes t he labels in this scree[...]

Chapter 14 Stat ic Route P-660HW-Tx v3 Series User’s Guide 242 Gateway IP Address This field is available when you select Gateway Address from Gateway Type . Enter the IP address of the gatew ay . The gateway is a rou ter or switch on the same network segment as the device's LAN or W AN port. The gateway helps forw ard packets to their desti[...]

P-660HW-Tx v3 Series User’s Guide 243 C HAPTER 15 802.1Q/1P 15.1 Overview This chapter describes how to c onfigure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partit ioned into multiple logi cal networks. A VLAN gr oup can be treated as an individual device. Each group can have it s own rules about [...]

Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 244 IEEE 802.1Q T agged VLAN T agged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a fr ame across bri dges - they are not confined to the device on which they were c reated. The VLA N ID associates a fr ame with a speci fic VLAN and provides the inf[...]

Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 245 15.1.3 802.1Q/1P Example This example shows how to configur e the 802.1Q/1P settings on the Z y XEL Device. 802.1Q/1P Example LAN1 and LAN2 are c o nn ected to A T As (An alogue T ele ph one Adapters ) an d used for V oIP tr affic. Y ou want to create high priority for this type of tr af[...]

Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 246 6 Click Apply . Advanced > 802.1Q/ 1P > Group Setting > Edit: Ex ample T o set a high priority for V oIP traffi c, follow these steps. 1 Click Advanc ed > 802.1Q/1P > Port Setting to display the following sc reen. 2 Ty p e 2 i n t h e 802.1Q PVID column for LAN1, LA N 2 and[...]

Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 247 4 Click Apply . Advanced > 802.1Q/ 1P > Port Setting: Example P orts 3 and 4 are connected to desktop computers and are used for Internet traffic. Y ou want to cre ate low p riority for th is type o f traffic, so yo u want to gro up these ports and PVC2 into one VLAN (VLAN3). PVC2 [...]

Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 248 Fol low the same steps as in VLAN2 to co nfigure the setting s for VLAN3 and VLAN4. The summary screen should then displa y as follows. Advanced > 8 02.1Q/1P > Grou p Setting: Ex ample This completes the 802.1Q/1P setup .[...]

Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 249 15.2 The 802.1Q/1P Group Setting Screen Use this screen to activ ate 802.1Q/1P and d isplay the VLAN groups . Click Advanced > 802.1Q/1P to display the following screen. Figure 104 Advanced > 802.1Q/1P > Group Se tting The following table describes t he labels in this screen. T [...]

Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 250 15.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure th e setti ngs for each VLAN group . In the 802.1Q/1P screen, click the Edit button from the Modify filed to displ ay the following screen. Figure 105 Advanced > 802.1Q/1P > Group Se tting > Edit Name This field [...]

Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 251 The following table describes t he labels in this screen. T able 72 Advanced > 802.1Q/1P > Group Setting > Edit LABEL DESCRIPTION Name Enter a descriptive name for the VLAN group for identification purposes. The text may consist of up to 8 letters, numerals, “-” , “_” an[...]

Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 252 15.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID and a ssig n traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to displa y the foll owing screen. Figure 106 Advanced > 8 02.1Q/1P > Port Setting The following table describes [...]

P-660HW-Tx v3 Series User’s Guide 253 C HAPTER 16 Quality of Service (QoS) 16.1 Overview Use the QoS screens to set up your Z yXEL Device to use QoS for tr affic management. Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking meth ods used to control bandwidth. QoS allows the Z yX[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 254 16.1.2 What Y ou Need to Know About QoS QoS versus C os QoS is used to prioritize s o urce-to-destinat i on traffic flows. All packets in the same flow are given the same priority . Class of Service (CoS) is a way of managing traffic in a network by grouping similar t y pes[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 255 these two classes are assigned priorit y queue based on the internal QoS mapping table on the ZyXEL Device. Figure 107 QoS Example Figure 108 QoS Class Example: V oIP -1 50 Mbps DSL V oIP: Queue 6 Boss: Queue 5 IP=192.168.1.23[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 256 Figure 109 QoS Class Example: V oIP -2 Figure 1 10 QoS Class Example: Bo ss -1[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 257 Figure 1 1 1 QoS Class Example: Boss -2[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 258 16.2 The QoS General Screen Use this screen to enable or disable QoS and ha ve the Z yXEL Device automatically assign priority to tr affic accordi ng to the IEEE 802.1p priorit y level, IP precedence and/or packet length. Click Advanc ed > QoS to open the screen as shown[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 259 16.3 The Class Setup Screen Use this sc reen to add, ed it or delete classi fiers. A classifier groups tr affic into data flows according to specific criteria su ch as the source address, destination address, source port number , destination port number or incoming interfac[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 260 The following table describes t he labels in this screen. T able 75 Advanced > QoS > Class Setup LABEL DESCRIPTION Create a new Class Click this to create a new classifier . No This is the number of each classifier . The ordering of the classifiers is important as the[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 261 16.3.1 The Class Configuration Screen Use this screen to configure a classifier . Click the Add button or the Edit icon in the Modify field to displa y the following screen. Figure 1 14 Advanced > QoS > Class Setup: Edit[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 262 See Appendix E on page 411 for a list of commonly-use d services. The following table des c r ib es the labe ls in this scre en. T able 76 Advanced > QoS > Class Setup: Edit LABEL DESCRIPTION Class Configur ation Active Select the check box to enable this classifier .[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 263 802.1Q T a g Select Same to keep the priority setting and VLAN ID of the frames. Select Auto to map the 802.1 priority level to the DSCP v alue automatically . Select Remove to delete th e priority queue tag and VLAN ID of the frames. Select Mark to replace the 802.1 priori[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 264 MAC Mask T ype the mask for the specified MAC address to determine which bits a packet’ s MAC address should match. Enter “f ” for each bit of the specified destination MAC address that the traffic’ s MAC address should match. Enter “0“ for the bit(s) of the mat[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 265 16.4 The QoS Monitor Screen Use this screen to view the Z yXEL De vice’ s QoS packet statistics. Click Advanced > QoS > Moni tor . The screen appears as shown. Figure 1 15 Advanced > QoS > Monitor The following table describes t he labels in this screen. T abl[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 266 16.5 QoS T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 16.5.1 IEEE 802.1Q T ag The IEEE 802.1Q standard defi nes an exp licit VLAN tag in the MAC header to identify the VLAN membership of a fr[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 267 16.5.3 DiffServ QoS is used to prioritize source-to- desti nat ion traffic flows. All packets in the flow are given the same priority . Y ou ca n use CoS (class of service) to give different priorities to different pac ket types. Differentiated Services (DiffSer v) is a Cla[...]

Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 268 gets through faster while traffic in lower index queues is dropped if the network is congested. T able 79 Internal Layer2 and Layer3 QoS Mapping PRIORITY QUEUE LAYER 2 LAYER 3 IEEE 802.1P USER PRIORITY (ETHERNET PRIORITY) T O S (IP PRECEDENCE) DSCP IP PACKET LENGTH (BYTE) 0[...]

P-660HW-Tx v3 Series User’s Guide 269 C HAPTER 17 Dynamic DNS Setup 17.1 Overview Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also access your FTP server or W e b site on your own computer using a domain name (for[...]

Chapter 17 Dy namic DNS Se tup P-660HW-Tx v3 Series User’s Guide 270 17.2 The Dynamic DNS Screen Use this screen to change your Z yXEL Device’ s DDNS. Click Advanced > Dynamic DNS . The screen appears as shown. Figure 1 16 Advanced > Dynamic DNS The following table describes t he fields in this screen. T able 80 Advanced > Dynamic DNS [...]

Chapter 17 Dynamic DNS Setup P-660HW-Tx v3 Series User’s Guide 271 Enable Wildcard Optio n Select the check box to enable DynDNS Wildcard. Enable off line optio n This option is available when CustomDNS is selected in the DDNS Type field. Check with your Dynam ic DNS service provider to have tr affic redirected to a URL (that you can specify) whi[...]

Chapter 17 Dy namic DNS Se tup P-660HW-Tx v3 Series User’s Guide 272[...]

P-660HW-Tx v3 Series User’s Guide 273 C HAPTER 18 Remote Management 18.1 Overview Re mote management allows you to determi ne which services/protocols can acces s which Z yXEL Device interface (if any) from which computers. The following figure shows remote manage ment of the Z yXEL Device c oming in from the WAN. Figure 1 17 Remote Mana gement F[...]

Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 274 T o disable remote management of a service, select Disable in the corresponding Access Status field. Y ou may onl y have one remote management session running at a time. The Z yXEL Device automatically disconnects a remote management session of lower pri ority when another remote [...]

Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 275 • There is a firewall rule that bloc ks it. Remote Management and NA T When NA T is enabled: • Use the Z yXEL Device’ s WAN IP ad dr ess when configuring from the W AN. • Use the Z yXEL Device’ s LAN IP address when configuring from the LAN. System Timeout There is a de[...]

Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 276 The following table describes t he labels in this screen. 18.3 The T elnet Screen Y ou can use T elnet to access the Z yXEL Device’s command line interface. Specify which interfaces allow T elnet access an d from which IP address the access can come. Click Advanced > Remote M[...]

Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 277 The following table describes t he labels in this screen. 18.4 The FTP Screen Y ou can use F TP (File T ransfer Protocol) to upload and download the ZyXEL Device’s firmware and config uration files. Please see the User ’s Guide chapter on firmware and configur ation file main[...]

Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 278 The following table describes t he labels in this screen. 18.5 The DNS Screen Use DNS (Domain Name S ystem) to map a domain name to i ts corresponding IP address and vice v ersa. R efer to Chapter 7 on page 119 for background informat ion. Use this screen to set f rom which IP ad [...]

Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 279 The following table describes t he labels in this screen. 18.6 The ICMP Screen T o change your Z yXEL Device’ s security settings, clic k Advanced > Remote MGMT > ICMP . The screen appears as shown. If an outside user attem pts to p rob e an unsupported port on your Z yXE[...]

Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 280 The following table describes t he labels in this screen. T able 85 Advanced > Remote Management > ICMP LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error - reporting protocol between a host server and a gateway to the Internet. ICMP uses[...]

P-660HW-Tx v3 Series User’s Guide 281 C HAPTER 19 Universal Plug-and-Play (UPnP) 19.1 Overview Universal Plug and Play (UPnP) is a d ist ributed, open networking standard that uses TCP/IP for simple peer -to-peer ne twork connec t iv ity be tween dev ice s. A UPnP device can dynamically join a network, ob tain an IP address, convey i ts capabilit[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 282 Windows Messenger is an example of an application that supports NA T traversal and UPnP . See the NA T chapter for more inform ation on NA T . Cautions with UPnP The automated nature of NA T trav ersal applications in estab lishing their own services and opening firew[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 283 19.2 The UPnP Screen Use the following screen to configure the UPnP settings on your Z yXEL Device. Click Advanc ed > UPnP to display the screen shown next. See Section 19.1 on page 281 for more information. Figure 123 Advanced > UPnP > Gene ral The following[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 284 19.3 Inst alling UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP . Inst alling UPnP in Windows Me Fol low the steps below to install the UPnP in Windows Me. 1 Click Start and Control Panel . Double-click Add/Remove Programs [...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 285 3 In the Communications window , select the Universal Plug and Play check box in the Compone nts selection bo x. Add/Remove Programs: Wi ndows Setup: Communicatio n: Component s 4 Click OK to go back to the Add/Remove Programs Properties window and click Next . 5 Rest[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 286 3 In the Network Connections window , click Adv anced in the m ain me nu and select Optional Networking Components … . Network Co nnection s 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection bo[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 287 5 In the Networking Services window , select the Universal Plug and Play check box. Networki ng Services 6 Click OK to go back to the Windows Optional Networking Component Wizar d window and click Next . 19.4 Using UPnP in Windows XP Example This section shows y ou ho[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 288 2 Right- click the icon and select Properties . Network Co nnection s 3 In the Internet Connection Properties window , click Settings to see the por t mappings there were automatically created. Internet Connec tion Properties[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 289 4 Y ou may edit or delete the port mapping s or click Add to manually add port mappings. Internet Connec tion Properties : Advanced Settin gs Internet Connec tion Properties : Advanced Settin gs: Add 5 When the UPnP-enabled device is discon nected from your computer ,[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 290 6 Select Show icon in notification area when connected option and click OK . An icon displays in the system tr ay . System Tray Icon 7 Double-click on the icon to display y o ur current In te rnet connection status. Internet Conn ection Status Web Configurator Eas y A[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 291 3 Select My Network Places under Other Places . Network Co nnection s 4 An icon with the description f or each UPnP-enabled device displays under Local Network .[...]

Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 292 5 Right- click on the icon for your Z yXEL Device and select Invoke . The web configurator login screen displays. Network Co nnection s: My Netw ork Plac es 6 Right- click on t he icon for y our Z yXEL Device and select Properties . A properties window displays with b[...]

293 P ART VI Maintenance System Settings (295) Logs (301) T ools (315) Diagnostic (329)[...]

294[...]

P-660HW-Tx v3 Series User’s Guide 295 C HAPTER 20 System Settings 20.1 Overview This chapter shows you how to configure system related settings, suc h as system time, password, name, the domain name an d the inactivity timeout interv al. 20.1.1 What Y ou Can Do in the System Settings Screens •U s e t h e General screen ( Section 20.2 on page 29[...]

Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 296 20.2 The General Screen Use this screen to configure system se ttings such as the system and domain name, inactivity timeout interval and system password . The System Name is for identification purposes. However , because some ISPs check this name you should enter your computer&apos[...]

Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 297 The following table describes t he labels in this screen. T able 87 Maintenance > System > General LABEL DESCRIPTION Syst e m S et up Syst e m N am e Choose a descriptive name for identification purp oses. It is recommended you enter y our computer’s “Computer name” in t[...]

Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 298 20.3 The T ime Setting Screen Use this screen to configure the Z yXEL De vi ce’ s time based on y our local time zone. T o change your Z yXEL Device’ s time and date, click Mainten ance > System > Time Setting . The screen appears as shown. Figure 125 Maintenance > Syst[...]

Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 299 New Time (hh:mm:ss) This field displays the last updated time from the time server or the last time configured manually . When you set Time and Date Setup to Manual , enter the new time in this field and then click Apply . New Date (yyyy/mm/dd) This field displays the last updated d[...]

Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 300 End Date Configure the day and time when Da ylight Sa ving Time ends if you selected Enable Daylight Saving . The o'clock field uses the 24 hour format. H er e are a coup l e o f exa m p l es: Daylight Sa ving Time ends in the United States on the first Sunday of November . Eac[...]

P-660HW-Tx v3 Series User’s Guide 301 C HAPTER 21 Logs 21.1 Overview This chapter contains information abou t configuring general log set tings and viewing the Z yXEL Device’ s logs. The web configurator allows y ou to choos e which categories of events and/o r alerts to hav e the Z yXEL Device log and then displa y the logs or have the Z yXEL [...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 302 21.2 The V iew Log Screen Use the View Log screen to see the logs for the ca tegories that you selected in the Log Settings screen (see Section 21.3 on page 303 ). Click Maintenance > Logs to open the View Log screen. Entries in red indicat e alerts. The log wraps around and d eletes the o[...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 303 21.3 The Log Settings Screen Use the Log Settings scree n to configure the mail se rver , the syslog server , when to send logs and what logs to send. T o change your Z yXEL Device’ s log settings, click Main tenance > Logs > Log Settings . The screen appears as shown. Alerts are e-mai[...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 304 The following table describes t he fields in this screen. T able 90 Maintenance > Logs > Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name o r the IP address of the mail serv er for the e-mail addresses specified below. If this field is left blank, log[...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 305 21.4 SMTP Error Messages If there are difficulties in sending e-ma i l the following error message appears. “SMTP action request failed. ret= ??". The “??"are described in the f ollowing table. 21.4.1 Example E-mail Log An "End of Log" message dis plays for each mail in[...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 306 •" End of Log " message shows that a complete log has been sent. Figure 128 E-mail Log Examp le 21.5 Log Descriptions This section provides descripti ons of example log messages. Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1[...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 307 FTP login failed Someone has failed to log on to the router via ftp. NAT Session Table is Full! The maximum number of NA T session table entries has been exceeded and the table is full. Starting Connectivity Monitor Starting Connectivity Monitor . Time initialized by Daytime Server The router [...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 308 T able 94 Access Control Logs LOG MESSAGE DESCRIPTION Firewall default policy: [ TCP | UDP | IGMP | ESP | GRE | OSPF ] <Packet Direction> Attempted T CP/UDP/IGMP/ESP/GRE/OSPF access matched the default policy and was blocked or forwarded according to the default policy’ s setting. Fir[...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 309 For type and code details, see T able 105 on page 312 . Exceed MAX incomplete, sent TCP RST The router sent a TCP reset packet when the number of incomplete connections (TCP and UDP) e xceeded the user-configured threshold. (Incomplete count is for all TCP and UDP connections through the firew[...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 310 T able 98 CDR Logs LOG MESSAGE DESCRIPTION board %d line %d channel %d, call %d, %s C01 Outgoing Call dev=%x ch=%x %s The router received the setup requirements for a call. “call” is the reference (count) number of the call. “dev” is the device type (3 is for dial-up, 6 is for PPPoE, [...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 31 1 For type and code details, see T able 105 on page 312 . T able 102 Attack Logs LOG MESSAGE DESCRIPTION attack [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detected an ICMP attack. land [ TCP | UDP[...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 312 User logout because of user deassociation. The router logg e d out a user who ended the session. User logout because of no authentication response from user. The router logg ed out a user from which th ere was no authentication response. User logout because of idle timeout expired. The router[...]

Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 313 4 Source Quench 0 A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagr ams for output to the next network on the route to the destination network. 5 Red ir e c t 0 R edirect datagrams for the Network 1 R edirect datagrams for the Host 2 Re di[...]

Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 314 The following table shows RFC -2408 ISAKMP payload t ypes that the log displays. Please refer to RFC 2408 for detailed information on each type. T able 107 RFC-2408 ISAKMP Payload Types LOG DISPLA Y P A YLOAD TYPE SA Security Association PROP Proposal TRANS Tr a n s f o r m KE Ke y E xc h a n[...]

P-660HW-Tx v3 Series User’s Guide 315 C HAPTER 22 Tools 22.1 Overview This chapter explains how to upload new firmware, manage confi guration files and restart your Z yXEL Device. Use the instructions in this chapter to ch ange the device’ s configuration file or upgrade i ts firmware. After you configure y our device, you can backup the config[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 316 22.1.2 What Y ou Need T o Know About T ools Filename Conventions The configur ation file (often c alled the romfile or rom-0) contains the factory d e f a u l t s e t t i n g s i n t h e m e n u s s u c h a s p a s s w o r d , D H C P S e t u p , T C P / I P S e t u p , e t c . I t arrives f[...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 317 FTP Restrictions FTP will no t work when: 1 The firewall is active (turn the firewal l off or create a firewall rule t o allow access from the WAN). 2 Y ou have disabled th e F TP service in the Rem ote Management scr een. 3 The IP you entered in the Secured Client IP f ield does not match th[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 318 Restore Using FTP Session Example Figure 129 Restore Using FTP Session Example Ref e r t o Section 22.1.2 on page 316 to read about configurations that disal low TFTP and F TP over WAN. FTP and TFTP Firmware and C onfiguration File Uploads These examples show you how to upload firmware and c[...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 319 FTP Session Example of Firmware File Upload Figure 130 FTP Session Example of Firmwa re File Upload More commands (found in GUI-based FTP clients) are listed in this chapter . Ref e r t o Section 22.1.2 on page 316 to read about configurations that disal low TFTP and F TP over WAN. TFTP File [...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 320 UNIX, use “get” to tr ansfer from the device to the computer , “put” the other way around, and “binary” to set binary transfer mod e. TFTP Upload Co mmand Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras Where “i” specifies binary image tr[...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 321 FTP Command Configurat ion Backup Example This figure giv es an example of usin g FTP commands from the DOS command prompt to sav e your device’ s configuration ont o your computer . Figure 131 FTP Session Example Configuration Backup Usin g GUI-based FTP Clients The following table describ[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 322 1 Use telnet from your computer to connect to the ZyXEL Device and log in. Bec ause TFTP does not have any security checks, the ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address. 2 Enter command “ sys stdio 0 ” to disabl e the manag[...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 323 Ref e r t o Section 22.1.2 on page 316 to read about configurations that disallow TFTP and F TP over WAN. 22.2 The Firmware Screen Click Maintenance > T ools to open the Firmware screen. Follow the instructions in t his screen to upload fi rmware to your Z yXEL Device. The upload process u[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 324 After you see the Firmware Upload in Progress screen, wait two minutes before logging into the Z yXEL Devi ce again. Figure 133 Firmware Upload In Progre ss The Z yXEL Device automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see [...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 325 If the upload was not successful, the following screen will appear . Click Return to go back to the Firmware screen. Figure 135 Error Message 22.3 The Configuration Screen See Section 22.1.4 on page 317 for tr ansferring configurati on files using FTP/TF TP commands. Click Maintenance > To[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 326 Backup Configuration Backup Configur ati on allows you to back up (save) the Z yXEL Device’ s current configuration to a fi le on your comp ut er . Onc e your Z yXEL De vi c e is con figured and functioning properl y , it is highly recommended that you back up y our configuration f ile bef[...]

Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 327 The Z yXEL Device automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see the following icon on your desktop. Figure 138 Network T emporarily Disconnected If you uploaded the default con figuration file you may need to change the IP[...]

Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 328 Reset to Factory Default s Click the Reset button to clear all user-enter ed configur ation information and return the Z yXEL Device to its factor y defaults. The following wa rning screen appears. Figure 140 Reset W arning Message Figure 141 Reset In Process Message Y ou can also press the [...]

P-660HW-Tx v3 Series User’s Guide 329 C HAPTER 23 Diagnostic 23.1 Overview These read-only screens display information to help y ou identify problems with the Zy X E L D e v i c e . 23.1.1 What Y ou Can Do in the Diagnostic Screens •U s e t h e General Diagnostic screen ( Section 23.2 on pa ge 329 ) to ping an IP address. •U s e t h e DSL Lin[...]

Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 330 The following table describes t he fields in this screen. 23.3 The DSL Line Diagnostic Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 144 Maintenance > Diagnostic >[...]

Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 331 The following table describes t he fields in this screen. T able 1 14 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION AT M S t a t u s Click this to view your DSL connection’s Asynchron ous T ransfer Mode (A TM) statistics. A TM is a networking technology that provides high[...]

Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 332 DSL Line Status Click this to view statistics about the DSL connections. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the Z yXEL Device from the ISP). It is measured in decibels. The higher the number the more signal and less[...]

333 P ART VII T roubleshooting and S pecifications T roubleshooting (335) Product Specifications (341)[...]

334[...]

P-660HW-Tx v3 Series User’s Guide 335 C HAPTER 24 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Z yXEL Device Access and Login • Internet Access 24.1 Power , Hardware Connections, a[...]

Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 336 2 Check the hardware connections. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the Z yXEL Device off and on. 5 If the problem continues, contac t the vendor . 24.2 ZyXEL Device Access and Login I forgot the IP address for the ZyXE[...]

Chapter 24 Trou bleshooting P-660HW-Tx v3 Series User’s Guide 337 • If you c hanged the IP address ( Section 7.2 on page 121 ), use the new IP address. • If you c hanged the IP address and have forgotten it, see the troubles hooting suggestions for I forgot the IP address for the Z yXEL Device. 2 Check the hardware connections, and ma k e sur[...]

Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 338 3 T urn the Z yXEL Device off and on. 4 If this does not work, you have to reset the device to its fact ory defaults. See Section 24.1 on page 335 . I cannot T elnet to the ZyXEL Device. See the troubleshooting suggestions for I cannot see or access the Login screen in the web [...]

Chapter 24 Trou bleshooting P-660HW-Tx v3 Series User’s Guide 339 I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL Device), but my Internet con nection is not av ailable anymore. 1 Check the hardware connections, and ma k e sure the LEDs are behav i n g as expected. See the Quick Start Guide and Section 1.5 on pa[...]

Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 340[...]

P-660HW-Tx v3 Series User’s Guide 341 C HAPTER 25 Product Specifications The following tables summarize the Z yXEL Device’ s hardware and firm ware features. 25.1 Hardware S pecifications 25.2 Firmware S pecifications T able 1 15 Hardware Specifications Dimensions (362 W) x (200 D) x (110 H) mm We i g h t 365 g P ower Specification 12VDC 1A Bui[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 342 Default User P assword user Default Admin P assword 1234 DHCP Server IP P ool 192.168.1.32 to 192.168.1.6 4 Static DHCP Addresses 10 Content Filtering W eb page blocking by URL keyword. Static Routes 16 Device Management Use the web configurator to easily configure the rich r[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 343 Universal Plug and Play (UPnP) A UPnP-enabled device can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the networ k. Firewall Y our device has a stateful inspection firewall with DoS (Denial of Service) protection. By default[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 344 ADSL Standards ANSI T1.4 13, Issue 2 ; G.dmt (G.992.1) ADSL2 G.dmt.bis (G.992.3) ADSL2+ (G.992.5) R e ach-Extend e d AD SL (RE AD SL ) SRA (Seamless R ate Adaptation) Auto-negotiating rate adaptation ADSL physical connection A TM AAL5 (A TM Adaptation Layer type 5) Multi-prot[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 345 25.3 Wireless Features T able 1 17 Wireless Features External Antenna The ZyXEL Device is equipped with one fix ed antenna to provide a clear radio signal between the wireless stations and the access points. Wireless LAN MAC Address Filtering Y our device can check the MAC ad[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 346 The following list, which is not exhaust ive , illust rates the standards supported in the ZyXEL Device. T able 1 18 Standards Supported ST ANDARD DESCRIPTION RFC 867 Da ytime Protocol RFC 868 Time Protocol. RFC 1058 RIP-1 (R outing Information Protocol) RFC 1112 IGMP v1 RFC [...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 347 25.4 Power Adaptor S pecifications Microsoft PPTP MS PPTP (Microsoft's impl ementation of Point to P oint T unneling Protocol) MBM v2 Media Bandwidth Management v2 RFC 2383 ST2+ over A TM Protocol Specification - UNI 3.1 V ersion TR -069 TR -069 DSL F orum Standard for C[...]

Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 348[...]

349 P ART VIII Appendices and Index Note: The appendices provide general information. Some det ails may not apply to your ZyXEL Device. Setting up Y our Computer’ s IP Address (351) P op-up Windows, Jav aScripts and Java P ermissions (375) IP Addresses and Subnetting (385) Wireless LANs (395) Services (411) Legal Information (415) Index (419)[...]

350[...]

P-660HW-Tx v3 Series User’s Guide 351 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must ha ve a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vis ta, Maci ntosh OS 7 and l ater operating systems and all versions of UNIX/LINUX include the software components you need to install and use [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 352 Windows 95/98/Me Click Start , Settings , Control Panel and double-click the Network icon to open the Network window . Figure 145 WIndows 95/98/Me: Netwo rk: Configuration Inst alling Component s The Network window Configuration tab displays a list of install[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 353 3 Select Microsoft from the list of manufacturers . 4 Select TCP/IP from the list of network protocols and then click OK . If you need Client for Microsoft Networks: 1 Click Add . 2 Select Client and then click Add . 3 Select Microsoft from the list of manuf [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 354 3 Click the DNS Configuration t ab. • If you d o not know your DNS information, select Disable D NS . • If you k now your DNS information, select Enable DNS and type the information in the fields below (y ou may not need to fill them all in). Figure 147 W[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 355 Windows 2000/NT/XP The following example figures use the defa ult Windo ws XP GU I theme. 1 Click start ( Start in Windows 2000/NT), Settings , Control Panel . Figure 148 Windows XP: S tart Menu 2 In the Control Panel , double-cli ck Network Connections ( Net[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 356 3 Right- click Local Area Connection and then click Properties . Figure 150 Windows XP: Control Panel: Ne twork Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties . Figure 151 Windows XP: Lo[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 357 • If you ha ve a dynamic IP address cli ck Obtain an IP address automatically . • If you hav e a static IP address click Use the following IP Address and fill in the IP address , Subnet mask , and Default gateway fields. •C l i c k Advanced . Figure 152[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 358 •C l i c k OK when finished. Figure 153 Windows XP: Adva nced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties windo w (the General tab in Windows XP): •C l i c k Obtain DNS server address automatically if you do not know your DNS server IP [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 359 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 154 Windows XP: Internet Protocol (T CP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close ( OK in Wind[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 360 1 Click the Start icon, Control Panel . Figure 155 Windows V ista: S tart Menu 2 In the Control Panel , double-cli ck Network and Internet . Figure 156 Windows V ista: Control Panel 3 Click Network and Sharing Center . Figure 157 Windows V ista: Network And I[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 361 4 Click Manage network conne ctions . Figure 158 Windows V ista: Network and Sharing Center 5 Right- click Local Area Connection and then click Properties . Note: During this procedure, click Continue whenever Windo ws displays a screen saying that it needs y[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 362 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties . Figure 160 Windows V ista: Local Area Connection Properties 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens (the General tab ). • If you ha ve a dynamic IP address [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 363 •C l i c k Advanced . Figure 161 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 8 If you do not know your gatewa y's IP address, remov e any previously i nstalled gateways in the IP Settings tab and click OK . Do one or more of the[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 364 •C l i c k OK when finished. Figure 162 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window , (the General tab ): •C l i c k Obtain DNS server address automatically if you do not know your DNS serv[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 365 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 163 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Versio n 4 (TCP/IPv4) Proper ties wi[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 366 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and do uble-cl ick TCP/IP to open the TCP/ IP Control Panel . Figure 164 Macintosh OS 8/9: Apple Menu[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 367 2 Select Ethernet built-in from the Connect via list. Figure 165 Macintosh OS 8/9: TCP/IP 3 For d ynamically assigned settings, select Using DHCP Server fro m the Configure: list. 4 For s tatically assigned settings, do t he following: •F r o m t h e Config[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 368 Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window . Figure 166 Macintosh OS X: Apple Menu 2 Click Netw ork in the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 369 •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of yo ur ZyXEL Device in the Router add ress box. 5 Click Apply Now and close the wi[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 370 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 169 Red Hat 9.0: KDE: Ethernet Device: General • If you ha ve a dynamic IP address, cl ick Automatically obtain IP address [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 371 6 Click the Activate button to apply the changes. The following sc reen displays. Click Yes to save the changes in all screens. Figure 171 Red Hat 9.0: KDE: Network Configuration: Act ivate 7 After the network card restart proc ess is complete, make sure the [...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 372 • If you ha ve a static IP address, ent er static in the BOOTPROTO= field. T ype IPADDR = followed by the IP address (in dotted decimal notation) and type NETMASK = followed by the subnet mask. The following example shows an example where the static IP addr[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 373 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 176 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.23.19.129 B cast:172.23.19[...]

Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 374[...]

P-660HW-Tx v3 Series User’s Guide 375 A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up wind ows from your device. • Jav aScript (enabled by default). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screens fo[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 376 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 178 Internet Options: Priva[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 377 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 179 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to hav e blocked) wi th the prefix “http://” . For example, http://192.[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 378 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 180 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configur ator do not display p[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 379 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 181 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected (t[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 380 6 Click OK to close the window . Figure 182 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 381 5 Click OK to close the window . Figure 183 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 382 3 Click OK to close the window . Figure 184 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Jav a, Jav ascript and pop-ups in one screen. Click Tools, then click Option[...]

Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 383 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 186 Mozilla Firefox Content Security[...]

Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 384[...]

P-660HW-Tx v3 Series User’s Guide 385 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devi[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 386 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 187 Network Number and Host ID How much of the IP address is the networ k number and how much is the h[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 387 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part ([...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 388 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us [...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 389 The following figure shows the company network before subnetting. Figure 188 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divi de the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.25[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 390 In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all zeroes is the subnet’ s address itself , all ones is the subnet’ s broadcast address). 192.168.1.0 with mask 255.255.255.128 i s subn[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 391 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. T able 126 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VA L U E I[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 392 Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number . The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network numbe[...]

Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 393 addresses, follow their instructions i n selecting th e IP addresse s and the sub n et mask. If the ISP did not explicitly give you an IP network nu mber , then most likely y ou have a single user account and the ISP will assign you a dynamic IP address when the connecti[...]

Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 394[...]

P-660HW-Tx v3 Series User’s Guide 395 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discuss es ad-hoc and infr astructure wi reless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configur ation is an in depend ent (Ad-hoc) WLAN that connect s a set of computers with wireless adapters (A, B, C). An y time tw[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 396 with each other . When Intra-BS S is disabled, wireless client A and B can still access the wired network but cannot communicate with eac h other . Figure 191 Basic Service Set ESS An Extended Service Set (ESS) c onsists of a series of overlapping BS Ss, each containing an access poin[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 397 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate. Figure 192 Infrastructure WLAN Channel A channel is the r adio frequency(i es) used by wirele[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 398 wireless gatewa y , but out-of -r ange of ea ch other , so t hey cannot "h ear" ea c h other , that is they do not know if the channel is current ly being used. Therefore, they are consider ed hi dden from each other . Figure 193 RTS / C T S When station A sends data to the [...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 399 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames. A large Fragmentation Threshold is recommended for networks no[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 400 sever al intermediate rate steps between the maximum and minimum data r ates. The IEEE 802.11g data rate and modulation are as follows: Wireless Security Overview Wireless security is vital to your ne twork to protect wireless communication between wireless client s, ac ce ss points a[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 401 IEEE 802.1x In June 2001, the IEEE 802.1x standard w a s designed to extend the features of IEEE 802.11 to support extended authentica tion as well as providing addi tional accounting and control features. It is su pported by Windows XP and a number of network devices. Some advantages[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 402 • Access-Challeng e Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message . The following types of RADIUS messages are exchanged between the access point and[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 403 However , MD5 authen tication has some weaknesses. Since the authentication server needs to get the plaintext password s, t he p assword s must be stored. Thus someone other th an the authenti c a tion server may access th e p a s sw ord fi le. In addition, it is possible to impersona[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 404 Dynamic WEP Key Exchange The AP maps a unique key that is generated with t he RADIUS server . This key expires when the wireless connection ti me s out, disconnec ts or reauthentication times out. A new WEP key is generated ea ch time reauthenticati on is performed. If this feature is[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 405 If the AP or the wireless clients do no t support WP A2, just use WP A or WP A-PSK depending on whether you hav e an external RADIUS server or not. Select WEP only when the AP and/or wirel ess clients do not support WPA or WP A2. WEP is less secure than WP A or WP A2. Encryption WP A [...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 406 keys. This prev ent all wireless d evices sharing the same encryption ke ys. (a weakness of WEP) User Authentication WP A and WPA2 apply IEEE 802.1x and Extens ible Authentication Protocol ( EAP) to authenticate wireless clients using an ex ternal RADIUS database. WPA2 reduces the num[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 407 4 The RADIUS server distributes the PMK to the AP . The AP th en set s up a key hierarchy and management system, usin g the PMK to dynamica lly generate unique data encryption k eys. The k eys are used to encrypt every data packet that is wirelessly communicated bet ween the AP and th[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 408 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tempor al encryption keys. They use these keys to encrypt data exchanged between them. Figure 195 WP A(2)-PSK Authentication Security Parameters Summary Re [...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 409 Antenna Overview An antenna couples RF signals onto air . A transmitter wit hin a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air . P ositioning the antennas pro[...]

Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 410 • Omni-directional antennas send t he RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a room environment. With a wide cove rage area, it is possible to make circular ov erlapping cov erag[...]

P-660HW-Tx v3 Series User’s Guide 41 1 A PPENDIX E Services The following table lists some commonl y-used services and their associated protocol s and port n umbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Protocol : This is the type of IP protocol used by th[...]

Appendix E Serv ices P-660HW-Tx v3 Series User’s Guide 412 T able 135 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Aut hentica tion Header) tunneling protocol uses this service. AIM TCP 51 90 AOL ’s Internet Messenger service. AUTH TCP 11 3 Authentication protocol used by som e servers. [...]

Appendix E Services P-660HW-Tx v3 Series User’s Guide 413 MSN Messenger TCP 18 63 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP / U DP TCP / U DP TCP / U DP TCP / U DP 137 138 139 445 The Network Basic Input/Output System is used for communication between computers in a LAN. NEW- ICQ TCP 51 90 An Internet chat program. N[...]

Appendix E Serv ices P-660HW-Tx v3 Series User’s Guide 414 SFTP TC P 115 The Simple F ile T ransfer Protocol is an old way of tr ansferring files between computers. SMTP TC P 25 Simple Mail T ransfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another . SMTPS TC P 465 Thi[...]

P-660HW-Tx v3 Series User’s Guide 415 A PPENDIX F Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, elect[...]

Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 416 • This dev ice m u st accept any in terferen ce received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 15 of th e FCC Rules. These limi ts are designed [...]

Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 417 本機限在不干擾合法電臺與不受 被干擾保障條件下於室內使用。 減少電磁波影響，請妥適使用。 Notices Changes or modifications not expressly appro ved by the party responsible for compliance could v oid the user's authority to oper ate the e[...]

Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 418 Note Re pair or replacement, as provided under this wa rranty , is the exclusi ve remedy of the purchaser . This warranty is in lieu of all other warr anties, express or impli ed, including any implied w arr anty of merchantability or fitness for a particul ar use or purpose. Z yX[...]

Index P-660HW-Tx v3 Series User’s Guide 419 Index Numerics 802.1Q/1P 243 activation 249 example 245 group settings 250 management VLAN 249 port settings 252 priority 243 , 252 PVC 244 PVID 252 tagging frames 244 , 251 A activation 802.1Q/1P 249 Any IP 123 classifiers 260 content filtering 214 dynamic DNS 270 DYNDNS wildcard 271 firewalls 195 gene[...]

Index P-660HW-Tx v3 Series User’s Guide 420 C CA 229 , 403 algorithm 234 trusted 230 , 233 CBR 105 , 11 2 , 11 7 Certificate Authority See CA. certificates 229 , 235 advantages 235 algorithm 234 CA 229 trusted 230 , 233 example 229 exporting 234 formats 230 PEM 234 Certification Authority , see CA certifications 415 notices 417 viewing 417 channe[...]

Index P-660HW-Tx v3 Series User’s Guide 421 DSL connections, status 332 dynamic DNS 269 activation 270 wildcard 269 activation 271 Dynamic Host Configuration Pro tocol, see DHCP dynamic WEP key exchange 404 DYNDNS wildcard 269 activation 271 E EAP Authentication 402 e-mail logs 304 encapsulation 99 , 102 , 109 ENET ENCA P 11 3 PPPoA 11 4 PPPoE 11[...]

Index P-660HW-Tx v3 Series User’s Guide 422 limitations 317 QoS 264 restoring configuration 31 7 , 318 upgrading firmware 318 , 319 G generic filters 223 , 226 activation 224 length 225 logs 226 mask 225 offset 225 H half-open sessions 204 hidden node 397 I IANA 393 Internet Assigned Numbers Authority see IANA IBSS 395 ICMP 190 , 279 IEEE 802.11g[...]

Index P-660HW-Tx v3 Series User’s Guide 423 M MAC address 126 , 148 filter 138 , 140 , 147 , 159 MAC address filter activation 148 management VLAN 249 mapping address 178 rules 179 types 179 , 180 , 184 Maximum Burst Size, see MBS maximum incomplete 204 Maximum T ransmission Unit, see MTU MBS 105 , 11 2 , 11 6 MBSSID 162 MD5 fingerprint 234 monit[...]

Index P-660HW-Tx v3 Series User’s Guide 424 port forwarding 172 , 174 activation 177 configuration 175 example 175 rules 177 PPPoA 10 2 , 109 , 11 4 PPPoE 10 2 , 109 , 11 3 passthrough 105 preamble 146 , 158 preamble mode 399 pre-shared key 143 private IP address 131 probing, firewalls 190 product registration 41 8 protocol filters 221 , 226 acti[...]

Index P-660HW-Tx v3 Series User’s Guide 425 firewalls 199 logs 304 wireless LAN 155 SCR 105 , 11 2 , 11 6 security network 206 wireless LAN 140 , 158 Service Set IDen tifier , see SSID Session Initiation Protocol, see SIP setup 325 classifiers 261 DHCP 125 firewalls 194 , 198 , 203 IP alias 128 logs 303 packet filtering 222 , 225 port forwarding [...]

Index P-660HW-Tx v3 Series User’s Guide 426 algorithm 234 exporting 234 importing 231 MD5 fingerprint 234 PEM 234 SHA1 fingerprint 234 U UBR 105 , 11 2 , 11 7 unicast 100 Universal Plug and Play , see UPnP upgrading firmware 318 , 323 UPnP 281 activation 283 cautions 282 example 284 installation 284 NA T t rav ersal 281 URL 21 1 V VBR 11 7 VBR -n[...]

Index P-660HW-Tx v3 Series User’s Guide 427 limitations 161 MAC address filter 138 , 14 0 , 147 , 148 , 159 MBSSID 162 preamble 146 , 158 RADIUS server 160 RTS / C T S t hr e s h o l d 146 , 158 scheduling 155 security 158 SSID 138 , 14 0 , 150 , 159 activation 149 status 37 WDS 153 , 163 compatibility 153 example 163 WEP 142 , 161 key 142 wizard[...]

Index P-660HW-Tx v3 Series User’s Guide 428[...]