ZyXEL Communications zyxel manual

www .zyxel.com www .zyxel.com P-870HN-51D 802.1 1n Wireless VDSL2 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 1.01 Edition 1, 07/2010 Default Login Details IP Address https://192.168.1.1 User Name admin Pa ss wo r d 1234[...]

[...]

About This User's Guide P-870HN-51D User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people wh o want to configure the P-870HN-51D us ing the web configu rator . Related Document ation •Q u i c k S t a r t G u i d e The Quick Start Guide is designed to help you get up an d running ri ght away . It c[...]

About This User's Guide P-870HN-51D User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface R eference Guide in ord er to better understand how to use your product[...]

Document Conventions P-870HN-51D User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help ful tips) [...]

Document Conventions P-870HN-51D User’s Guide 6 Icons Used in Figures Figures in this User’s Guide ma y use th e following generic icons. The P-870HN- 51D icon is not an exac t representation of your device. P-870HN-51D Compute r Notebook computer Server DSLAM Firewa ll Te l e p h o n e Swi tch Ro u te r[...]

Safety Warnings P-870HN-51D User’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swim ming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There [...]

Safety Warnings P-870HN-51D User’s Guide 8[...]

Contents Overview P-870HN-51D User’s Guide 9 Contents Overview User ’ s Guide ................................................... ........... .................................................... ......... 19 Introducing the P-870HN-51D .. ............. ............. ................ ............. ............. ................ ............. 21 [...]

Contents Overview P-870HN-51D User’s Guide 10[...]

Table of Contents P-870HN-51D User’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions.................................................................. ......................................... .5 Safety Warni[...]

Table of Contents P-870HN-51D User’s Guide 12 2.5.3 T esting the DDNS Setting ...... ... ... .... ............. ... ... ... .... ... ............. ... ... ... .... ... ............. ... 40 2.6 Configuring St atic Route for Routing to A nother Network ............ ................ ................ ....... 40 2.7 Configuring QoS Queue and Class Set[...]

Table of Contents P-870HN-51D User’s Guide 13 6.1.1 What Y ou Can Do in this Chapter ................. ............. ................ ................ ................ 91 6.2 What Y ou Need T o Know ....................... .... ............. ... ... ... .... ... ... ... ............. ... .... ... ... ... ... ....... 92 6.3 The LAN IP Screen .....[...]

Table of Contents P-870HN-51D User’s Guide 14 9.1 Overview ..... .... ... ... ... .... ............. ... ... ... ... ............. .... ... ... ... .... ............ .... ... ... ... .... ....... .......... 141 9.1.1 What Y ou Can Do in this Chapter ................. ............. ................ ................ .............. 141 9.2 What Y ou[...]

Table of Contents P-870HN-51D User’s Guide 15 14.1.1 What Y ou Can Do in this Chapter ..... ................ ................ ............. ............. ........... 169 14.2 What Y ou Need to Know ...... ................ ............. ................. ............ ............. ................ ..... 17 0 14.3 The Quality of Service General Scr[...]

Table of Contents P-870HN-51D User’s Guide 16 18.1.1 What Y ou Can Do in this Chapter ..... ................ ................ ............. ............. ........... 209 18.2 The T ime Restriction Screen ...................... ...... ............. ................ ............. ................ ..... 209 18.2.1 Adding a Schedule .................[...]

Table of Contents P-870HN-51D User’s Guide 17 Chapter 24 T roubleshooting ......................... ..................................................... .................................. .... 239 24.1 Power , Hardwa re Connections, and LEDs .............. ... ... .... ... ... ... ... .... ............. ... ... ... ... .... . 239 24.2 P-870HN-51[...]

Table of Contents P-870HN-51D User’s Guide 18[...]

19 P ART I User ’ s Guide[...]

20[...]

P-870HN-51D User’s Guide 21 C HAPTER 1 Introducing the P-870HN-51D 1.1 Overview The P-870HN-51D is a VDSL2 device that all ows super-fast, secure Internet access. It extends the range of y our ex isting wired net work without additional wiring, providing easy network access to mobile users. Y o u ca n se t up a wireless network with other IEEE 80[...]

Chapter 1 Introducing the P-870 HN-51D P-870HN-51D User’s Guide 22 Computers can connect to the P-870H N-51D’s L AN ports (or wirelessly). Figure 1 P-870HN-51D’ s Internet Acce ss Application Y ou can also configure the firewall on the P-870HN-51D for secure Internet access. When the firewall is on, all inco ming tr affic from the Internet to[...]

Chapter 1 Introducing the P-870HN-51D P-870HN-51D User’s Guide 23 • Back up the configuration (and mak e sure you know how to restore it). Restoring an e arlier wo rking conf iguratio n may be usef ul if the device becomes unstable or even cr ashes. If you forget your password, you will have to reset the P-870HN-51D to its factory default setti[...]

Chapter 1 Introducing the P-870 HN-51D P-870HN-51D User’s Guide 24 None of the LEDs are on if the P-870HN-51D is not receiving power . Refer to the Quick Start Guid e for in formation on hardware connections. T able 1 LED Descriptions LED COLO R ST A TUS DESCRIPTION PWR/SYS Green On The P-870HN-51D is receiving power and ready for use. Blinking T[...]

Chapter 1 Introducing the P-870HN-51D P-870HN-51D User’s Guide 25 1.6 The RESET Button If you forget your password or cannot acces s the web configurator , you will need to use the RE SET button at the back of the device to reload the factory -default configurati on file. This means that you will lose all configurations that you had previously an[...]

Chapter 1 Introducing the P-870 HN-51D P-870HN-51D User’s Guide 26 4 Press the WPS button for more than five second s and release it. Press the WPS button on another WPS -enabled device within r ange of the P-870HN-51D. The WLAN/WPS LED should flash while the P-870HN-51D sets up a WPS connection with the wireless device. Note: Y o u must activate[...]

P-870HN-51D User’s Guide 27 C HAPTER 2 Tutorials 2.1 Overview This chapter describes: • How to Set up a Wireless Network on page 27 . • Configuring the MAC Address Filter on page 36 . • Setting Up NA T Port F orw arding on page 37 . • Access the P-870HN-51D Using DDNS on p age 38 . • Configuring Static R oute for R outing to Another Net[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 28 W e use the P-870HN-51D web screens and M-302 utility screens as an example. The screens may vary slight ly for diff erent mo dels. 2.2.2 Configuring the AP Fol low the steps below to configure the wireless set tings on your AP . 1 Open the Network > Wireless LAN screen in the AP’ s web configu[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 29 5 Click the Advanced Se tup tab and sele c t 802.1 1b/g/n Mixed in the 802.11 Mode field. Clic k Apply . Figure 4 AP: Wireless LAN > Advanced Setup 6 Open the Status screen.V erify your wireless an d wireless security settings under Device Information and check if the WLAN connection is up under [...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 30 7 Click the WLAN Station List hyperlink in the AP’ s Status screen. Y o u can see if any wireless client has connec ted to the AP . Figure 6 AP: S tatus: WLAN S tation List 2.2.3 Configuring the Wireless Client This section describes how to connect the wireless c lient to a network. 2.2.3.1 Connec[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 31 1 Open the ZyXEL ut ility and click the Site Su rvey tab to open the screen shown next. Figure 7 ZyXEL Utility: Site Survey 2 The wireless client automatically searches for av ai lable wireless networks. Click Scan if you want to search again. If no entry displa ys in the Available Network List , th[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 32 4 The Confirm Sav e window appears. Check your settings and click Save to continue. Figure 9 ZyXEL Utili ty: Confirm Save 5 The ZyXEL utility returns to th e Link Info screen while it connects to the wi reless network using your settings. When the wireless link is established, the Zy XEL utility ico[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 33 networks, for example if you connect a note book computer to wireless networks at home and at work. This example illustr ates how to set up a pr ofile and connect t he wireless client to an access point configured for WPA -PSK se curity . In this example, the SSID is “SSID_Example3” , the profil[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 34 4 Choose the same encryption method as th e AP to which you want to connect (In this example, WP A-PSK). Figure 13 ZyXEL Utility: Pro file Security 5 This screen vari es depending on the en cryption method yo u selected in the previous screen. Enter the pre-shared key and leave th e encryption type [...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 35 7 V erify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 16 Profile: Confirm Save 8 Click Activate Now to use the new profi le immediately . Ot herwise, click the Activate Later button. If you clicked Activate Later , you can select the profile fro[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 36 2.3 Configuring the MAC Address Filter Thomas noticed that his daughter Joseph ine spend s too much time surfing the web and downloading media files. He dec i ded to prevent Josephine from accessing the Internet so that sh e can concentrate on preparing for her final exams. Josephine’ s computer c[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 37 Thomas can also grant access to the co mputers of other members of his family and friends. However , Josephine and others no t li sted in this screen will no longer be able to access the Internet through the P-870HN-51D. 2.4 Setting Up NA T Port Forwarding Thomas recently received an Xbo x 360 as hi[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 38 2 Configure the screen as foll ows to open T CP/UDP p ort 53 for Xbo x 360. Click Apply . 3 Repeat steps 2 and 3 to open the rest of the ports for Xbox 360. Use a different service name for each port y ou want to add The port forw arding settings you configured are listed in the Port Forwarding scre[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 39 870HN-51D’ s WAN IP address changes dyna mically . Dynamic DNS (DDNS) allows you to acces s the P-870HN-51D using a domain name. T o use this fe ature, you have to ap ply for DDNS service at www.dyndns.org. This tutorial shows y ou how to: • Re gi stering a DDNS Account on www. dyndns.org • Co[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 40 2 Configure the following setting s in the Advanced > Dynamic DNS screen. 2a Select WWW.DynDNS.ORG for the Service Provider . 2b Ty p e zyxelro uter.dyndns.org in the Host Name field. 2c Select interface for which the DDNS applies. 2d Enter the us er name ( UserName1 ) and password ( 12345 ). 2e [...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 41 In the following figure, rout er R is connected t o the P-870HN-51D’ s LAN. R connects to two ne tworks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you w ant to send traf fic from computer A (in N1 network) to computer B (in N2 network), the tr affic is sent to the P-870HN-51D’ s WAN defau[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 42 This tutorial uses the following example IP settings: T o configure a static route to route traffic from N1 to N2 : 1 Log into the P-870HN-51D’ s W eb Configurator in adv anced mode. 2 Click Advanc ed > Static Route . 3 Click Add to add a new rule in the Static Route screen. 4 Configure th e St[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 43 Now B should be able to receive t raffic from A . Y ou may need to additionally configure B ’ s firewal l settings to allow specific tr affic to pas s through. 2.7 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure th e QoS screen. Let’ s say you are a[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 44 1 Click Advanced > QoS > General and check Acti ve . Set your WAN Managed Upstream Bandwidth to 10,000 kbps (or lea ve this blank to ha ve the P-870HN- 51D automatically dete rmine this figure). Tutoria l: Advanced > QoS 2 Go to Advanced > QoS > Queue Setup . Click Add to create a new[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 45 3 Go to Advanced > QoS > Class Setup . Click Add to create a new class. Check Active and follow the settings as shown in the screen below . Tutoria l: Advanced > QoS > Class Setup Class Name Give a class name to this tr affic, such as E-mail in this example. To Queue Link this to an item[...]

Chapter 2 Tutorials P-870HN-51D User’s Guide 46 This maps e-mail tr affic comi ng from port 25 to the highest priorit y , which you have created in the previous screen (see the IP Protocol field). This also maps your computer’ s IP addre ss and MA C address to the E-mail queue (see the Source fields). 4 V erif y that the queue se tup works by c[...]

P-870HN-51D User’s Guide 47 C HAPTER 3 Introducing the Web Configurator 3.1 W eb Configurator Overview The web configurator is an HTML -based management interface that allows easy device setup and management via Internet browser . Use Internet Explorer 6.0 and later version s or Mozilla F ire fox 3.6 an d later versions. The recommended screen re[...]

Chapter 3 Introducing the Web Configur ator P-870HN-51D User’s Guide 48 4 A password screen displa ys. Enter the default admin user name admin and default admin password 1234 . The password displays in non-readable char acters. If you hav e changed the password, enter y our password and click OK . Click Cancel to revert to the defaul t password i[...]

Chapter 3 Introducing the Web Configurator P-870HN-51D User’s Guide 49 As illustr ated above, the main screen is divided into these parts: • A - navigation panel • B - main window • C - status bar 3.2.1 Navigation Panel Use the menu items on th e navigation panel to open screens to configure P- 870HN-51D features. The following tables descr[...]

Chapter 3 Introducing the Web Configur ator P-870HN-51D User’s Guide 50 Certificate Local Certificates Use this screen to view a summary list of ce rtificates and manage certificates and certification requests. Tr u s t e d C A Use this screen to view and manage the list of the trusted CAs. Advance d Static R oute IP Static R oute Use this screen[...]

Chapter 3 Introducing the Web Configurator P-870HN-51D User’s Guide 51 3.2.2 Main Window The main window displays information and configurati on fields. It is discussed i n the rest of this d ocument. Right after y ou log in, the Status scre en is displayed. See Chapter 4 on page 55 for more inform ation about the Status screen. 3.2.3 S t atus Ba[...]

Chapter 3 Introducing the Web Configur ator P-870HN-51D User’s Guide 52[...]

53 P ART II T echnical Reference[...]

54[...]

P-870HN-51D User’s Guide 55 C HAPTER 4 Status Screens 4.1 Overview Use the Status screens to look at the current status of the device, sys te m resources and interfaces (LAN, W AN and WLAN). The Status screen also provides detailed information from DHCP and statistics from tr affic. 4.2 S t atus Screen Click Status to open this screen. Figure 20 [...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 56 Each field is desc ribed in the followi ng table. T able 4 Status Screen LABEL DESCRIPTION R efresh Interval Enter how often you want the P-870HN-51D to update this screen. Apply Click this to update this screen immediately . Device Information User Name This field displays the P-870HN-51D sys[...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 57 WPS Status This field displays the status of WPS (Wi-Fi Protected Setup). Click this to go to the screen where you can change it. AP Information ESSID This is the descriptive name used to identify the P-870HN- 51D in this wireless network. Click this to go to the screen where you can change it.[...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 58 4.2.1 W AN Service S t atistics Click Status > WLAN Service Statistics to access this screen. Use this scre en to view the WAN stat istics. Figure 21 S tatus > W AN Service S tatistics Rate For the DSL interface, it disp lays the downstream and upstream transmission r ate. For the LAN or[...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 59 The following table describes t he labels in this screen. T able 5 S tatus > W AN Service S tatistics LABEL DESCRIPTION Interface This shows the name of the WAN interface used by this connection. A default name ipoa0 , pppoa1, atmx (where x starts from 0 and is the index number of A TM la ye[...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 60 4.2.2 Route Info Routi ng is based on the destination a ddress only and the P-870HN-51D tak es the shortest path to forward a packet. Click Status > Route Info t o access this screen. Use this s creen to view the in ternal routing table on the P-870HN-51D. Figure 22 S tatus > Route Info [...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 61 4.2.3 WLAN S t ation List Click Status > WLAN Station List to access this screen. Use this screen to view the wireless stations that are current l y associated to the P-870HN-51D. Figure 23 S tatus > WLAN S tation List The following table describes t he labels in this screen. Service This[...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 62 4.2.4 VDSL S t atistics Click Status > VDSL Statistics to open the following screen. Use this screen to check VDSL status and detailed performance data. Figure 24 S tatus > VDSL S tatistics The following table describes t he labels in this screen. T able 8 S tatus > VDSL S tatistics L[...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 63 VDSL Port Details These are the maximum Upstream and Downstream tr ansfer rates for the ports that belong to this profile. Upstream tr affic refe rs to traffic from the P-870HN-51D to the Centr al Organization Equipment (COE ). Downstream traf fic refers to traffic from the COE to the P-870HN-5[...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 64 UAS This indicates the number of UnAv ailable Seconds (UAS) since the last reset. LOS This indicates the number of Loss of Signal (L OS) failures since the last reset. LOF This indicates the number of Loss of Framing (LOF) failures since the last reset. Latest 15 minutes time This indicates VD[...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 65 ES This indicates the number of port endpoint errored seconds (ESs) since the last 1-day period. SES This indicates the number of port endpoint severely errored seconds (SESs) since the last 1-day period. UAS This indicates the number of UnAv ailable Seconds (UAS) since the last 1- day period. [...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 66 4.2.5 LAN S t atistics Click Status > LAN Statistics to access this screen. Use this screen to view the LAN statistics. Figure 25 S tatus > LAN S tatistics The following table describes t he labels in this screen. 4.2.6 Client List DHCP (Dynamic Host Configur ation Protocol , RFC 2131 an[...]

Chapter 4 Status Screens P-870HN-51D User’s Guide 67 DHCP service is disabled, y ou must hav e another DHCP server on your LAN, or else the computer must be manually configured. Click Status > Client List to open the following scree n. The read-only DHCP ta ble shows current DHCP client information (including IP Address , Host Name and MAC Add[...]

Chapter 4 Sta tus Screens P-870HN-51D User’s Guide 68[...]

P-870HN-51D User’s Guide 69 C HAPTER 5 WAN Setup 5.1 Overview This chapter discusses the P-870HN-51D’ s WAN screens. Use these screens to configure your P- 870HN-51D for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Int ern et . It con nects your private networks, such as a LAN (Local A[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 70 5.2 What Y ou Need to Know Encap sulation Method Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. T o set up a WAN connection to the Int er n et, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If y our ISP of[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 71 5.3 Before Y ou Begin Y ou need to know your Internet access se ttings such as encapsulation and W AN IP address. Get this inf ormation from your ISP . 5.4 The Layer 2 Interface Screen The P-870HN-51D must have a l ayer-2 interface to allow users to use the DSL port to access the Internet. Figure 28[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 72 5.4.1 Layer 2 Interface Configuration Click the Add button in the Layer 2 Interface screen to open the following screen. Use this screen to create a new la yer-2 interface. At the ti me of writing, you can configure onl y one PTM layer -2 interface on the P- 870HN-51D. Figure 29 Layer 2 Interfac e C[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 73 5.5 The Internet Connection Screen Use this screen to change your P-870HN-51D’ s WAN settings. Click Network > WAN > Internet Connection . The summary table shows you the configured WAN servi ces (connections) on the P-870HN-51D. T o use NA T , firewall or IGMP proxy in the P-870HN-51D, y ou[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 74 5.5.1 W AN Connection Configuration Click the Edit or Add button in the WAN Se rvice screen to configure a WAN connection. 5.5.1.1 W AN Interface This screen displays when y ou add a new W AN connection. Figure 31 WAN Configuration: W AN Interface Vlan8021p This indicates the 802.1P priority level a[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 75 The following table describes t he labels in this screen. 5.5.1.2 Service T ype Use this screen to configure how you wa nt the P-870HN-51D to connect to the Internet. Figure 32 WAN Configuration: Ser vice T ype The following table describes t he labels in this screen. T able 15 WAN Configuration: W [...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 76 5.5.1.3 W AN IP Address and DNS Server The screen differs by the e ncapsulation yo u selected in th e pr e vious screen. See Section 5.6 on page 84 for more information. Rate Limit Enter the maximum transmission r ate in Kbps for traffic sent through the WA N connection. Otherwi se, leav e this fiel[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 77 PPPoE This screen displays when y ou select PPP over Ethernet (PPPoE) in the WAN Service Configuration screen. Figure 33 WAN Configuration: PPPoE The following table describes t he labels in this screen. T able 17 WAN Configuration: PPPoE LABEL DESCRIPTION PPP User Name Enter the user name exactly a[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 78 Authentication Method The P-870HN-51D supports P AP (Password Authentication Protocol) and CHAP (Challenge Handshake A uthentication Protocol). CHAP is more secure than PAP; however , PAP is readily av ailable on more platforms. Use the drop-down list box to select an authentication pr otocol for ou[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 79 IPoE This screen displays when y ou select IP over Ethernet in the WAN Service Configuration screen. Figure 34 WAN Configuration: I PoE Bridge PPPoE Frames Between WA N a n d L o c a l Po r t s Select this option to forward PPPoE pack ets from the W AN port to the LAN ports and from the LAN ports to[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 80 The following table describes t he labels in this screen. T able 18 WAN Configuration: IPoE LABEL DESCRIPTION Obtain an I P address automatically A static IP address is a fixed IP that your ISP giv es you. A dynamic IP address is not fi xed; the ISP assigns you a different one each time you connect [...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 81 5.5.1.4 NA T , IGMP Multi cast and Firewall Activation The screen is av ailable onl y when you select IP over Ethernet in the WAN Service Configuration screen. Figure 35 WAN Configuration: NAT, IGMP Mult icast and Firewall Activation The following table describes t he labels in this screen. T able 1[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 82 5.5.1.5 Default Gateway The screen is not av ailable when you select Bridging in the WAN Service Configuration screen. Figure 36 WAN Configuration: Def ault Gateway The following table describes t he labels in this screen. 5.5.1.6 DNS Server The screen is not av ailable when you select Bridging in t[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 83 The following table describes t he labels in this screen. 5.5.1.7 Configuration Summary This read-only screen shows the current W AN connection settings. Figure 38 WAN Configuration: Con figuration Summary T able 21 WAN Configuration: DNS Server LABEL DESCRIPTION Obtain DNS info from a WA N interfac[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 84 The following table describes t he labels in this screen. 5.6 T echnical Reference The following section contains additional technical information ab out the P-870HN- 51D features described in this chapter . Encap sulation Be sure to use the encapsulation method required b y y our ISP . The P-870HN-[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 85 PPP over Ethernet P oint -to-P oint Protocol over Ethernet (P PP oE) provides access control and billing functionality in a manner similar to dial-up services using PPP . PPP oE is an IETF standard (RFC 2516) specifying how a personal computer ( PC) interacts wi th a broadband modem (DSL, cable, wi [...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 86 packets sent t o IP address 2 and port B and forwards them to IP address 1 , port A . Figure 39 Full Cone NA T Example Symmetric NA T The full, restricted and port restrict ed cone NA T types use the same mapping for an outgoing packet’ s source address rega rdless of the destination IP address an[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 87 the example, only 3, C is allowed to send packets to 2, B and onl y 4, D is allowed to send packets to 2, M . Figure 40 Symmetric NA T Introduction to VLANs A Virtual Local Area Network (VLAN) allows a physical network to be partit ioned into multiple logical networks. Devices on a logical network b[...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 88 contains two bytes of TPID (T ag Protocol Identifier), residing with in the type/ length field of the Ethernet fr ame) and tw o bytes of TCI (T ag Control Information), starts after the source address field of the Ethernet fr ame). The CFI (Canonical F ormat In dicator) is a single-bit flag, always [...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 89 204.217.0.2. The DNS server is extremel y important because without it, you must know the IP addres s of a com puter be fore you can acce ss it . The P-870HN-51D can get the DNS server addresses in the following ways. 1 The ISP tells you the DNS serv er addresses, usually in th e form o f an inform [...]

Chapter 5 WAN Setup P-870HN-51D User’s Guide 90[...]

P-870HN-51D User’s Guide 91 C HAPTER 6 LAN Setup 6.1 Overview A Local Area Network (LAN) is a shared communicat ion system to which many computers are attached. A LAN is usually lo cated in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses. • See Sectio[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 92 6.2 What Y ou Need T o Know IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common ne twork num be r . This is known as a n Internet Protocol address. Subnet Mask The subnet mask specifies th e network number portion of an IP addres[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 93 DNS DNS (Domain Name System) maps a doma i n name to its corresponding IP address and vice v ersa. The DNS serv er is ext remely important because wi thout it, you must know the IP address of a co mputer before you can access it . The DNS server addresses you enter when you se t up DHCP are passed t[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 94 The following table describes t he fields in this screen. T able 23 LAN > IP LABEL DESCRIPTION LAN TCP/IP Group Name Select the interface group for which you w ant to configure the LAN TCP/IP settings. See Chapter 19 on page 213 for how to create a new interface group. IP Address Enter the LAN IP[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 95 6.4 T echnical Reference The following section contains additional technical information ab out the P-870HN- 51D features described in this chapter . LANs, W ANs and the ZyXEL Device The actual physical connec tion determines whether the P-870HN-51D ports are LAN or W AN ports. There are two sepa ra[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 96 IP Pool Setup The P-870HN-51D is pre-configured with a pool of IP addresses for the DHCP clients (D HCP Pool). See the pr oduct spe c if ic a t i o ns in the appen d ic es . Do not assign static IP addres ses from th e DHCP pool to your LAN computers. LAN TCP/IP The P-870HN-51D has built -in DHCP se[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 97 Assigned Numbers Authori ty (IANA) has rese rved the following three blocks of IP addresses specifically for priv at e networks: • 10.0.0.0 — 10.255.255. 255 • 172.16.0.0 — 172.31.2 55.255 • 192.168.0.0 — 192.168.255.25 5 Y ou can obtain your IP address from the IANA, from an ISP or it c[...]

Chapter 6 LAN Setup P-870HN-51D User’s Guide 98 IP Alias IP alias al lo ws you to partit ion a physica l network into differe nt logical networks over the same Ethernet interface. Th e P-870HN-51D supports three logical LAN interfaces via its single physi cal Ethernet interface wi th the P-870HN-51D itself as the gateway for each LAN ne twork. Wh[...]

P-870HN-51D User’s Guide 99 C HAPTER 7 Wireless LAN 7.1 Overview This chapter describes how to perform task s related to setting up and optimizing your wirele ss net w or k, includ i ng th e following . • T urning the wireless connection on or off . • Configuring a name, wireless cha nnel and security for the network. • Using WiFi Protected[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 100 •T h e Advanced Setup screen lets you change the wireless mode, and mak e other advanced wireless c onf iguration changes ( Section 7.8 on page 116 ). Y ou don’ t necessarily need to use all these screens to se t up your wireless connection. F or example, yo u may just want to set up a netwo[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 101 Radio Channels In the r adio spectrum, there are certain frequency bands allocated for unli censed, civilian use. F o r the purposes of wireless networking, t hese bands are divided into numerous channels. This allows a variety of networks to exist in the same place without interfering with one [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 102 (which you know was made in 1971) you could use “70dodchal71v anpoi” as y our security key . Signal Problems Because wireless networks are radio ne tworks, their signal s are subject to limitations of distanc e, interference and absorption. Problems with distance occur when the two r adios a[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 103 Click Network > Wireless LAN to open the General screen. Figure 44 Network > Wireless LAN > General The following table describes t he labels in this screen. T able 24 Network > Wireless LAN > General LABEL DESCRIPTION Active Wireless LAN Click the check box to activ ate wireless [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 104 7.4.1 No Security Select No Security to allow wireless devices to communicate with the access points without any data encrypti on or authentication. Bandwidth Select whether the P -870HN-51D uses a wireless channel width of 20MHz or 40MHz . A standard 20MHz channel offers transfer speeds of up t[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 105 Note: If you do not enable an y wireless security on your P-870HN-51D, your net work is accessible to any wireless ne tworking device that is within range. Figure 45 Wireless LAN > General: No Security The following table describes t he labels in this screen. T able 25 Wireless LAN > Gene [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 106 7.4.2 WEP Encryption In order to configure and en able WEP enc ryption; click Network > Wireless LAN to display the General screen. Select WEP from the Security Mode list. Figure 46 Wirele ss LAN > General: S tatic WEP Encryption The following table describes t he wirele ss LAN security la[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 107 7.4.3 WP A(2)-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wireless LAN to display the General scre en. Select WPA-PSK or WPA2-PSK from the Security Mode lis t. Figure 47 Wireless LAN > General: WP A(2)-PSK WEP Encryption WEP (Wired Equivalent Priv acy) [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 108 The following table describes t he wirele ss LAN security labels in this screen. 7.4.4 WP A(2) Authentication Use this screen to configure and enable WP A or WP A2 authentication; click the Wireless LAN link under Network to display the Genera l screen. Select WPA or WPA2 from the Security Mode [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 109 Note: If you select WP A or WP A2 in the Wireless LAN > General screen, the WDS and WPS features are not available on the P-870HN-51D. Figure 48 Wireless LAN > General: WP A(2) The following table describes t he wirele ss LAN security labels in this screen. T able 28 Wireless LAN > Gene[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 0 7.4.5 MAC Filter This screen allows you to configure the P-870HN-51D to give exclusiv e access to specific devi ces ( Allow ) or exclude specific devices from accessing the P-870HN- 51D ( Deny ). Every Ethernet devi ce has a unique MAC (Media Access Control) address. The MAC address is assigned[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 111 The following table describes t he labels in this screen. 7.4.6 Adding a New MAC Filtering Rule Click the Add button in the MAC Filter screen. The following screen displays. Figure 50 Wireless LAN > MAC Filter > Add The following table describes t he labels in this screen. T able 29 Wirele[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 2 7.5 The More AP Screen This screen allows you to enable and conf igure multiple wireless networks on the P-870HN-51D. Click Network > Wireless LAN > More AP . The following screen displays. Figure 51 Network > Wireless LAN > More AP The following table describes t he labels in this [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 3 7.5.1 More AP Edit Use this screen to ed it an SSID profile. Click the Edit icon next to an S SID in the More AP screen. The following screen displays. Figure 52 Network > Wireless LAN > More AP: Edit See Section 7.4 on page 102 for more details about the fields in this screen. 7.6 The WP[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 4 Click Network > Wi reless LAN >WPS . The following screen di splays. Figure 53 Network > Wireless LAN > WPS The following table describes t he labels in this screen. T able 32 Network > Wireless LAN > WPS LABEL DESCRIPTION WPS Setup Enable WPS Select the check box to activate [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 5 7.7 The WPS S t ation Screen Use this screen to set up a WPS wire less network using ei ther Push Butt on Configuration (PBC) or PIN Configuration. Note: If you select No Security in the W ireless LAN > General screen and click Push Button in the WPS S t ation screen, the P-870HN-51D automat[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 6 7.8 The Advanced Setup Screen T o configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup . The screen appears as shown. Figure 55 Wirele ss LAN > Advanced Setup The following table describes t he labels in this screen. T able 34 Wireless LAN > Advanced S[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 7 7.9 T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. Number of Wireless Stations Allowed Specify the maximum number (from 1 to 64) of the wireless stations that may connect to the P-870HN-51D. Output Power Set the output power of the P[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 8 7.9.1 Wireless Network Overview The following figure provides an example of a wireless network. Figure 56 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point ( AP ) to inter act with the other devices [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 11 9 7.9.2 Additional Wireless T erms The following table descri bes some wirele ss net work terms and acronyms used in the P-870HN-51D’ s W eb Configurator . 7.9.3 Wireless Security Overview The following sections introduce diff erent types of wi reless security you c an set up in the wirel e s s[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 120 characters 2 ; for example, 00A0C5000002 or 00:A0:C5:00:00: 02. T o get the MAC address for each device in the wireless ne twork, see the device’ s User’s Guide or other documentation. Y ou can use the MA C address filte r to tell th e P-870H N-51D which devices are allowed or not all owed t[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 121 The types of encryption y ou can choose de pend on the type of authentication. (See Section 7.9.3.3 on page 120 for information about this.) For example, if the wireless networ k has a RADIUS server , you can choose WPA or WPA2 . If users do not log i n to the wireless network, you can choose no[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 122 between two devices. Both devices must support WPS (check each device’s documentation to make sure). Depending on the de vices you have, you can either press a button (on the device itself , or in its configuration utility) or en ter a PIN (a unique P ersonal Identification Number that allows [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 123 Use the PIN method instead of the push-b utton configuration (PBC) method if you want to ensure that the connection is es tablished b e tween the devices y ou specify , not just the first two devices to activ ate WPS i n range of each ot her . However , you need to log into the configuration int[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 124 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 57 Example WPS Process: PIN Method 7.9.4.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. On[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 125 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 58 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes). The next time you use WPS, a differen[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 126 7.9.4.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured. When WPS is activ ated on both, they perform the handshake. In this example, AP1[...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 127 point. However , you know that Client 2 supports the registrar function, so you use it to perform the WPS handshak e instead. Figure 61 WPS: Example Network S tep 3 7.9.4.5 Limit ations of WPS WPS has some limitations of which you should be a ware. • WPS works in Infrastructure networks on ly [...]

Chapter 7 Wireless LAN P-870HN-51D User’s Guide 128 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network. This is because the registrar has no wa y of id entifying the “corre ct” e[...]

P-870HN-51D User’s Guide 129 C HAPTER 8 Network Address Translation (NAT) 8.1 Overview This chapter discusses how to co nfigure NA T on the P-870HN-51D. Network Address T ranslation (NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the so urce address of an ou tgoing packet, used within one network to a di[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 130 Port Forwarding A port forw arding set is a list of insi de (behind NA T on the LAN) servers, for example, web or FTP , that you can mak e visible to the outsid e world even though NA T mak es your whole inside network appear as a si ngle computer to the outside world. 8[...]

Chapter 8 Network Address Tran slation (NAT) P-870HN-51D User’s Guide 131 The following table describes t he labels in this screen. T able 37 NA T Port Forwarding LABEL DESCRIPTION Service Name Select a pre-defined se rvice from the drop-down list box. The pre- defined service port number(s) and protocol will display in the External port , Intern[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 132 8.3.1 The Port Forwarding Edit Screen This screen lets you create or edit a port forwarding rule. Select User Define in the Service Name field or click the rule’ s Edit icon in the Port Forwarding screen to open the following screen. Figure 63 Port Forwarding Edit The [...]

Chapter 8 Network Address Tran slation (NAT) P-870HN-51D User’s Guide 133 8.4 The T rigger Port Screen Some services use a dedicated r ange of ports on the client side and a dedicated rang e of ports on the server sid e. Wi th regul ar port forwarding you set a forwarding port in NA T to forward a serv ice (coming in from the server on the WAN) t[...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 134 another computer on the LAN can use the service in the same manner . This way you do not need to configure a new IP a ddress each time you want a different LAN computer to use the application. For example: Figure 64 T rigger Port Forwarding Process: Example 1 Jane reques[...]

Chapter 8 Network Address Tran slation (NAT) P-870HN-51D User’s Guide 135 The following table descri bes the labels in this screen. T able 39 NA T Trigger Port LABEL DESCRIPTION Service Name Select a pre-defined se rvice from the drop-down list box. The pre- defined service port number(s) and protocol will display in the Trigger port , Open port [...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 136 8.4.1 T rigger Port Configuration This screen lets you create new port triggering rules. Click the Add icon in the NAT - Trigger Port screen to open the following screen. Figure 66 NA T > T rigger Port > Add The following table describes t he labels in this screen.[...]

Chapter 8 Network Address Tran slation (NAT) P-870HN-51D User’s Guide 137 8.5 The DMZ Host Screen In addition to the servers for specified services, NA T supports a default server IP address. A default serv er rec eiv es pack ets from ports that are not specifi ed in the NAT Port Forwarding Setup screen. Figure 67 NAT > DMZ Host The following [...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 138 8.6 The ALG Screen Some NA T routers ma y include a SIP Application Lay er Gateway (AL G). A SIP ALG allows SIP calls to pass through NA T by examining and translating IP addres ses embedded in the data stream. The SIP AL G tr anslates the P-870HN-51D’ s priv ate IP ad[...]

Chapter 8 Network Address Tran slation (NAT) P-870HN-51D User’s Guide 139 Port Forwarding: Services and Port Numbers The most often used port numbers are show n in the following table. Please refer to RFC 1700 for further information about port numb ers. Please also refer to the Supporting CD for more examples and details on port fo rwarding and [...]

Chapter 8 Net wo rk Addr ess Translation (NAT ) P-870HN-51D User’s Guide 140[...]

P-870HN-51D User’s Guide 141 C HAPTER 9 Firewall 9.1 Overview This chapter shows you how t o enable and configure the P-870HN-51D firewall settings. The P-870HN-51D firewall is a packet filter ing firewall and res tricts access based on the source/destination comput er networ k address of a packet and the t ype of application. 9.1.1 What Y ou Can[...]

Chapter 9 Firew all P-870HN-51D User’s Guide 142 Some of the most common IP ports are: Default Filtering Policies Filtering rules are grouped ba sed on the direction of tr av el of packets to which they appl y . The default rule for incoming traffic bl ocks all incomi ng connections from the W AN to the LAN. If y ou wish to allow certain W AN use[...]

Chapter 9 Firew all P-870HN-51D User’s Guide 143 The following table describes t he labels in this screen. T able 45 Firewall > Incoming LABEL DESCRIPTION Active Firewall Select this check box to enable the firewall on the P-870HN-51D. When the firewall is enabled, the P-870HN-51 D blocks all incoming traffic from the W AN to the LAN. Create c[...]

Chapter 9 Firew all P-870HN-51D User’s Guide 144 9.3.1 Creating Incoming Firewall Rules In the Incoming screen, click Add to display this screen and refer to the following table for information on the labels. Figure 71 Firewall > Incoming: Add The following table describes t he labels in this screen. T able 46 Firewall > Incoming: Add LABEL[...]

Chapter 9 Firew all P-870HN-51D User’s Guide 145 Interface Select Select All to apply the rule to all interfaces on the P-870HN- 51D or select the specific WAN interf ace(s) to which this rule applies. Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. T able 46 Firewall >[...]

Chapter 9 Firew all P-870HN-51D User’s Guide 146[...]

P-870HN-51D User’s Guide 147 C HAPTER 10 Certificate 10.1 Overview The P-870HN-51D can use certificates (also call ed digital IDs) to authenticate users. Certificates are based on public-pri v ate key pairs. A certificate contains the certificate owner’ s identity and public k ey . Certificates provide a way to ex change public keys fo r u s e [...]

Chapter 10 Certificate P-870HN-51D User’s Guide 148 10.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the P-870HN-51D’ s summary list of certificates and certifi cation requests. Figure 72 Local Certificates The following table describes t he labels in this screen. T able 47 Local[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 149 10.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the My Certificate Create screen. Use this screen to have the P-870HN-51D generate a certification request. Figure 73 Create Certificat e Request The following t[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 150 After you cli ck Apply , the Certificate Request Details screen displays. Click Load Signed Certificate to import a certificate signed by the CA to replace the request ( see Section 10.3.4 on page 153 ). Otherwise, click Back to return to the Local Certificates screen. See Section 10.3.3 on p ag[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 151 Note: Y ou must remove any sp aces from th e certificate’ s filename before you can import it. Figure 75 Import Local Certificate The following table describes t he labels in this screen. T able 49 Import Local Certificate LABEL DESCRIPTION Certificate Name T ype up to 31 ASCII characters (not[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 152 10.3.3 Certificate Det ails Click Security > Certificates > Local Certificates to open the My Certificates screen (see Figure 72 on page 148 ). Click the View icon to open the Certificate Details screen. Use this screen to view in -depth ce rtificat e in format ion a nd change the certific[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 153 10.3.4 Load Signed Certificate Click Security > Certificates > Local Certificates and then Load Signed or the Load Signed Certificate button in the Certificate Details screen of a certification request to open the Load Certificate screen. F ollow the instruct ions in this scre en to save a[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 154 Figure 77 Load Certificate The following table describes t he labels in this screen. 10.4 The T rusted CA Screen Click Advanced Setup > Certificates > Trusted CA to open the following screen. This screen disp lays a summary lis t of certificates of the certification authorities that yo u h[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 155 list as being trus tworthy; thus you do not need t o import any certif icate that is signed by one of these certific ation authorities. Figure 78 T rusted CA The following table describes t he fields in this screen. T able 52 T rusted CA LABEL DESCRIPTION Name This field displays the name used t[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 156 10.4.1 V iew T rusted CA Certificate Click the View button i n the Trusted CA screen to open the following screen. Use this screen to view in-dep th information about the certification authori ty’ s certificate. Figure 79 T rusted CA: View The following table describes t he fields in this scre[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 157 10.4.2 Import T rusted CA Certificate Click the Import Certificate button in the Tru sted CA screen to open the following screen. The P-870HN-51D trusts an y valid certificate signed by an y of the imported trusted CA certificates. Figure 80 T rusted CA: Import Certificate The following table de[...]

Chapter 10 Certificate P-870HN-51D User’s Guide 158[...]

P-870HN-51D User’s Guide 159 C HAPTER 11 Static Route 1 1.1 Overview The P-870HN-51D usually uses the default ga teway to route outboun d traffic from computers on the LAN to the Internet. T o have the P- 870HN-51D send data to devices not reachable through the de fault g ateway , use static routes. For example, the next figure shows a computer ([...]

Chapter 11 Stat ic Route P-870HN-51D User’s Guide 160 1 1.2 The St atic Route Screen Click Advanced > Static Route to open the Static Route screen. Figure 82 Advanced > S tatic Route The following table describes t he labels in this screen. T able 55 Advanced > Static Route LABEL DESCRIPTION # This is the number of an individual static r[...]

Chapter 11 Static Route P-870HN-51D User’s Guide 161 1 1.2.1 St atic Route Edit Click the Add button in the Static Route screen. Use this screen to configure the required information for a static route. Figure 83 S tatic Route: Add The following table describes t he labels in this screen. T able 56 Static Route: Add LABEL DESCRIPTION Destination [...]

Chapter 11 Stat ic Route P-870HN-51D User’s Guide 162[...]

P-870HN-51D User’s Guide 163 C HAPTER 12 Policy Forwarding 12.1 Overview T raditionally , routing is based on the destination address only and the P-870HN- 51D takes the sho rtest pa th to forward a packet. P o li cy forwarding allows the P- 870HN-51D to override the default rout i ng beha vior and alter the packet forwarding based on the pol icy[...]

Chapter 12 Policy F or wa rding P-870HN-51D User’s Guide 164 The following table describes t he labels in this screen. 12.2.1 Policy Forwarding Setup Click the Add button in the Policy Forwarding screen. Use this screen to configure the required information for a policy route. Figure 85 Policy Forwarding: Add The following table describes t he la[...]

Chapter 12 Policy Forwarding P-870HN-51D User’s Guide 165 Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the P-870HN-51D. Cancel Click Cancel to begin configuring this screen afresh. T able 58 Policy Forwarding: Add LABEL DESCRIPTION[...]

Chapter 12 Policy F or wa rding P-870HN-51D User’s Guide 166[...]

P-870HN-51D User’s Guide 167 C HAPTER 13 RIP 13.1 Overview Routi ng Information Protocol (RIP , RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers . 13.1.1 What Y ou Can Do in this Chapter The RIP screen lets you set up RI P settings on the P-870HN-51D ( Section 13.2 on page 167 ). 13.2 The RIP Screen Click [...]

Chapter 13 RI P P-870HN-51D User’s Guide 168 The following table describes t he labels in this screen. T able 59 Advanced > RIP LABEL DESCRIPTION Interface This is the name of the interface in which the RIP setting is used. Ve r s i o n The RIP version controls the format and the broadcasting method of the RIP packets that the P-870HN-51D send[...]

P-870HN-51D User’s Guide 169 C HAPTER 14 Quality of Service (QoS) 14.1 Overview Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking me thods used to control the use of bandwidth. Without QoS , all tr affic data is equally likely to be dropped when the network is congested. This ca[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 170 •T h e Monitor screen lets you view the P-870HN-51D's QoS-related pac ket statistics ( Section 14.7 on page 183 ). 14.2 What Y ou Need to Know QoS versus C oS QoS is used to prioritize s o urce-to-destinat i on traffic flows. All packets in the same flow are given the same pr[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 171 Click Advanc ed > QoS to open the screen as shown next. Figure 87 QoS General The following table describes t he labels in this screen. T able 60 QoS General LABEL DESCRIPTION Active QoS Select the check box to turn on QoS to improve your netwo rk performance. WA N M a na g ed Up[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 172 14.4 The Queue Setup Screen Click QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. Figure 88 QoS Queue Setup The following table describes t he labels in this screen. Upstream traffic priority will be automatically assigned by[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 173 14.4.1 Adding a QoS Queue Click the Add button or the edit icon in the Queue Setup screen to configure a queue. Figure 89 QoS Queue Setup: Add The following table describes t he labels in this screen. Buffer Management This shows the queue management algorithm used for this queue. Q[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 174 14.5 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number , destination port number or incoming interface. F or ex[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 175 The following table describes t he labels in this screen. T able 63 QoS Class Setup LABEL DESCRIPTION Add Click this button to create a new classifier . Order This field displays the index number of the classifier . Active Select the check box to enable the classifier . Class Name T[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 176 14.5.1 QoS Class Edit Click the Add button or the Edit icon in the Class Setup screen to configure a classifier . Figure 91 QoS Class Setup: Add[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 177 The following table describes t he labels in this screen. T able 64 QoS Class Configuration LABEL DESCRIPTION Class Configuration Enable Select to enable or disable this classifier . Class Name Enter a descriptive name of up to 20 printable English keyboard characters, including spa[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 178 Ether T ype Select a predefined application to configure a class for the matched traffic. If you select IP , you also need to configure source or destination MAC address, IP address, DHCP options, DSCP v alue or the protocol type. If you select 8021 Q , you can configure an 802.1p p[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 179 802.1P This field is available only when you select 802.1Q in the Ether Type field. Select this option and select a priority level (between 0 and 7) from the drop down list box. "0" is the lowest priority level and "7" is the highest. VLAN ID This field is availa[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 180 14.6 The Policer Setup Screen A policer is a QoS policy . Click QoS > Policer Setup to open the following screen. The P-870HN-51D can control ingress (or incoming) t raffic b y dropping pack ets that exceed the committed rate and/ or committ ed burst size specified in this screen[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 181 14.6.1 Policer Setup Add/Edit Figure 93 QoS > Policer: Edit Action Conforming Action - This shows the action that the P-870HN-51D applies to packets that conform to the meter type selected, and can be Pass , Drop or DSCP mark . Non Confor ming Acti on - This shows the action that[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 182 The following table describes t he labels in this screen. T able 66 QoS > Policer Setup: Edit LABEL DESCRIPTION Enable Select this to have the P-870HN-51D pass, drop or mark pac kets that exceed the commit ted rate and/or committed burst size specified in this screen. Meter T ype[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 183 14.7 The QoS Monitor Screen T o view the P-870HN-51D’s QoS pac ket statistics, c lick Advanced > QoS > Monitor . The screen appears as show n. Figure 94 QoS > Monitor The following table describes t he labels in this screen. T able 67 QoS > Monitor LABEL DESCRIPTION R [...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 184 14.8 T e chnical Reference The following section contains additional technical information ab out the P-870HN- 51D features described in this chapter . IEEE 802.1Q T ag The IEEE 802.1Q standard defi nes an exp licit VLAN tag in the MAC header to identify the VLAN membership of a fra[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 185 service desired. This allows the intermed iary Diff Serv-compliant n etwork dev ices to handle the pack ets differently depending on the code points without the need to negotiate paths or remember state information for every flow . In addit ion, applications do not hav e to request [...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 186 14.8.2 T raffic Policing Meter T ypes T raffic pol ici ng is the limiting of the input or output transmission r ate of a class of traffic on the basis of user- defined criteria. T raffic policing methods measure t raffic flows against user -defined crit eria and iden tif y it as eit[...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 187 refer to packet loss priority (PLP) levels . High PLP level is referred to as red, medium is referred to as y ellow and low is referred to as green. The difference between the two meters is the t ypes of parameters used to evaluate pack ets. SR TCM uses committed information r ate ([...]

Chapter 14 Quality of Service (QoS) P-870HN-51D User’s Guide 188[...]

P-870HN-51D User’s Guide 189 C HAPTER 15 Dynamic DNS Setup 15.1 Overview Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name (for instance [...]

Chapter 15 Dy namic DNS Se tup P-870HN-51D User’s Guide 190 15.3 The Dynamic DNS Screen T o change your P-870HN-51D’ s DDNS, click Advanced > Dynam ic DNS . The screen appears as shown. Figure 95 Advanced > Dynamic DNS The following table describes t he fields in this screen. T able 70 Advanced > Dynamic DNS LABEL DESCRIPTION Service P[...]

P-870HN-51D User’s Guide 191 C HAPTER 16 Remote Management 16.1 Overview This chapter explains how to confi gure the remote management and access control settings on the P-870HN-51D. 16.1.1 What Y ou Can Do in this Chapter •T h e TR -069 screen lets you configure the P-870HN-51D’ s TR -069 auto- configur ation settings ( Section 16.3 on page [...]

Chapter 16 Remote Management P-870HN-51D User’s Guide 192 Click Advanced > Remote MGMT to open the following screen. Use this screen to configure your P-870HN-51D to be managed by an A C S. Figure 96 TR-069 The following table describes t he fields in this screen. T able 71 TR-069 LABEL DESCRIPTION Inform Select Enable to activate remote manag[...]

Chapter 16 Remote Management P-870HN-51D User’s Guide 193 16.3 The TR-064 Screen TR -064 is a LAN-Side DSL CPE Configurat io n protocol defined by the DSL Forum. TR -064 is built on top of UPnP . It allows the users to use a TR -064 compli ant CPE management application on their computer s from the LAN t o discover the CPE and configure user-spec[...]

Chapter 16 Remote Management P-870HN-51D User’s Guide 194 16.4 The Service Control Screen Click Advanced > Remote MGMT > Service Control to open the following screen. Use this s creen to decide what services you may use to ac ce ss which P- 870HN-51D interface. Figure 98 Service Control The following table describes t he fields in this scre[...]

Chapter 16 Remote Management P-870HN-51D User’s Guide 195 16.5 The IP Address Screen Click Advanced > Remote MGMT > IP Address to open the following screen. Use this screen to specify the “trusted ” computers f rom which an administr ator may use a service to manage the P-870HN-51D. Figure 99 IP Address The following table describes t h[...]

Chapter 16 Remote Management P-870HN-51D User’s Guide 196 16.5.1 Adding an IP Address Click the Add button in the IP Address screen to open the following screen. Figure 100 IP Address: Add The following table describes t he fields in this screen. T able 75 IP Address: Add LABEL DESCRIPTION IP Address Enter the IP address of the trusted com puter [...]

P-870HN-51D User’s Guide 197 C HAPTER 17 Universal Plug-and-Play (UPnP) 17.1 Overview Universal Plug and Play (UPnP) is a d ist ributed, open networking standard that uses TCP/IP for simple peer -to-peer ne twork connec t iv ity be tween dev ice s. A UPnP device can dynamically join a network, ob tain an IP address, convey i ts capabilities and l[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 198 Windows Messenger is an example of an application that supports NA T tr aversal and UPnP . See the NA T chapter fo r more infor mation on NA T . Cautions with UPnP The automated nature of NA T trav ersal applications in establishing their own services and opening firewall port[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 199 The following table describes t he fields in this screen. 17.4 Inst alling UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP . Inst alling UPnP in Windows Me Fol low the steps below to install the UPnP in Windows Me. 1 Click Start and [...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 200 3 In the Communications window , select the Universal Plug and Play check box in the Compone nts selection bo x. Figure 103 Add/Remove Progr ams: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next . 5 Rest[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 201 3 In the Network Connections window , click Adv anced in the m ain me nu and select Optional Networking Components … . Figure 104 Network Conne ctions 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection b[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 202 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 106 Networking Serv ices 6 Click OK to go back to the Windows Optional N etworking Component Wizard window and click Next . 17.5 Using UPnP in Windows XP Example This section shows y ou [...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 203 2 Right- click the icon and select Properties . Figure 107 Network Conne ctions 3 In the Internet Connection Properties window , click Settings to se e the por t mappings there were automatically created. Figure 108 Internet Co nnection Properties[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 204 4 Y ou may edit or delete the port mappings or click Add to manually add port mappings. Figure 109 Internet Co nnection Pro perties: Advanced Settings Figure 1 10 Internet Connection Properti es: Advanced Settings: Add 5 When the UPnP-enabled device is discon nected from your [...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 205 6 Select Show icon in notification area when connected option and click OK . An icon displays in the system tr ay . Figure 1 1 1 System T ray Icon 7 Double-click on the icon to display y o ur current In te rnet connection status. Figure 1 12 Internet Connection S tatus Web Con[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 206 3 Select My Network Places under Other Places . Figure 1 13 Network Connections 4 An icon with the description f or each UPnP-enabled device displays under Local Network .[...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 207 5 Right- click on the icon for yo ur P-870HN-51D and select Invoke . The web configurator login screen displays. Figure 1 14 Network Connections: My Network Places 6 Right- click on the icon for y our P-870HN-51D and select Properties . A properties window displays with basic [...]

Chapter 17 Universal Plug-and-Play (UPnP) P-870HN-51D User’s Guide 208[...]

P-870HN-51D User’s Guide 209 C HAPTER 18 Parental Control 18.1 Overview P arental control all ows you to b lock web sites with t he specific URL. Y ou can also define time periods and da ys during which the P-870HN-51D performs parental control on a specific user . 18.1.1 What Y ou Can Do in this Chapter •T h e Tim e Restriction screen lets you[...]

Chapter 18 Pare n ta l Cont ro l P-870HN-51D User’s Guide 210 The following table describes t he fields in this screen. 18.2.1 Adding a Schedule Click the Add button in the Time Restriction screen to open the following screen. Use this scr een to configure a restri cted access schedule for a specif ic user on your network. Figure 1 17 T ime Restr[...]

Chapter 18 Parental Control P-870HN-51D User’s Guide 21 1 The following table describes t he fields in this screen. 18.3 The URL Filter Screen Use this screen to configure URL filtering settings to allow or block the users on your network from accessi ng certian web sites. Click Advanced Setup > Parental Control > URL Filter to open the fol[...]

Chapter 18 Pare n ta l Cont ro l P-870HN-51D User’s Guide 212 18.3.1 Adding URL Filter Click the Add button in the URL Filter screen to open the following screen. Figure 1 19 URL Filter Configu ration The following table describes t he fields in this screen. Active Select the check bo x to enable the filtering rule. Address This is the URL o f th[...]

P-870HN-51D User’s Guide 213 C HAPTER 19 Interface Group 19.1 Overview By default, all LAN and WAN interfaces on the P-870HN-51D are in the same group and can communicate with each othe r . Y ou can create multiple groups to have the P-870HN- 51D assign the IP addres ses in different domains to different groups. Each group acts as an in dependent[...]

Chapter 19 In te r fac e Gr ou p P-870HN-51D User’s Guide 214 In the following example, the cl ient th at sends packets with the source MAC address 00:19:cb:01:23:45 is assigned the IP addres s 192.168.2.2 and uses the WAN i nterface ptm0_2. Figure 120 Interface Grouping Application Click Advanced Setup > Interface Group to open the following [...]

Chapter 19 Interface Group P-870HN-51D User’s Guide 215 19.2.1 Interface Group Configuration Click the Add butt on in the Interface Group screen to open the following screen. Use this screen to creat e a new interface group . Note: An interface can belong to a group only . Figure 122 Interface Group Configuration The following table describes t h[...]

Chapter 19 In te r fac e Gr ou p P-870HN-51D User’s Guide 216 19.2.2 Interface Grouping Criteria Click the Add button in the Interface Grouping Configuration screen to open the following screen. Figure 123 Interface Grouping Criteria The following table describes t he fields in this screen. Rem o v e Click the Remove icon to delete this rule from[...]

Chapter 19 Interface Group P-870HN-51D User’s Guide 217 DUID T yp e Select DUID-LLT (DUID Based on Link -layer Address Plus Time) to enter the hardware type, a time value and the MAC address of the device. Select DUID-EN (DUID Assigned by V endor Based upon Enterprise Number) to enter the vendor’s registered enterprise number . Select DUID-LL ([...]

Chapter 19 In te r fac e Gr ou p P-870HN-51D User’s Guide 218[...]

P-870HN-51D User’s Guide 219 C HAPTER 20 System Settings 20.1 Overview This chapter shows you how to configure system related settings, suc h as system time, password, name, the domain name an d the inactivity timeout interv al. 20.1.1 What Y ou Can Do in this Chapter •T h e General screen lets you configure system settings ( Section 20 .2 on p[...]

Chapter 20 System Settings P-870HN-51D User’s Guide 220 The following table describes t he labels in this screen. 20.3 The T ime Setting Screen T o change your P-870HN-51D’ s time and dat e, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the P- 870HN-51D’ s time based on your local [...]

Chapter 20 System Settings P-870HN-51D User’s Guide 221 The following table describes t he fields in this screen. T able 85 Maintenance > System > T ime Setting LABEL DESCRIPTION Current Time Current Time This field displays the time of your P-870HN-51D. Each time you reload this page, the P-870HN-51D synchronizes the time with the time ser[...]

Chapter 20 System Settings P-870HN-51D User’s Guide 222[...]

P-870HN-51D User’s Guide 223 C HAPTER 21 Logs 21.1 Overview This chapter contains information abou t configuring general log set tings and viewing the P-870HN-51D’ s logs. The web configurator allows y ou to choos e which categories of events and/o r alerts to hav e the P-870HN-51D log and then displa y the logs or hav e the P- 870HN-51D send t[...]

Chapter 21 L ogs P-870HN-51D User’s Guide 224 The log wr aps around and deletes the old ent ries after it fills. Figure 126 Maintenance > L ogs > View Lo g The following table describes t he fields in this screen. 21.3 The Log Settings Screen Use the Log Settings screen to configure to where the P-870HN-51D is to send logs and which logs an[...]

Chapter 21 Logs P-870HN-51D User’s Guide 225 T o change your P-870HN-51D’ s log settings, click Maintenance > Logs > Log Settings . The screen appears as shown. Figure 127 Maintenance > L ogs > Log Settings The following table describes t he fields in this screen. T able 87 Maintenance > Logs > Log Settings LABEL DESCRIPTION A[...]

Chapter 21 L ogs P-870HN-51D User’s Guide 226[...]

P-870HN-51D User’s Guide 227 C HAPTER 22 Tools Do not interrupt the file tr ansfer process as this may PERMANENTL Y DAMAGE your P-870HN-51D. 22.1 Overview This chapter explains how to upload new firmware, manage confi guration files and restart your P-870HN-51D. Use the instructions in this chapter to ch ange the device’ s configuration file or[...]

Chapter 22 To ols P-870HN-51D User’s Guide 228 22.2 The Firmware Screen Click Maintenance > T ools to open the Firmware screen. Follow the instructions in t his screen to upload fi rm ware to your P- 870HN-51D. The upload process uses HT TP (Hypertext T ransfer Prot ocol) and may take up to two minutes. After a successful upload, the system wi[...]

Chapter 22 Tools P-870HN-51D User’s Guide 229 After you see the Firmware Upload in Progress screen, wait two minutes before logging into the P-870HN-51D again. Figure 129 Firmware Upload In Progre ss The P-870HN-51D automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see the following i[...]

Chapter 22 To ols P-870HN-51D User’s Guide 230 22.3 The Configuration Screen Click Maintenance > Tools > Configurat ion . Information related to factory defaults, backup configuration, and restor ing configuration appears in this screen, as shown next. Figure 132 Maintenance > T ools > Configuration Backup Configuration Backup Configu[...]

Chapter 22 Tools P-870HN-51D User’s Guide 231 Do not turn off the P-870HN-51D wh ile configuration file upload is in progress. After you see a “restore configuration successf ul” screen, you must then w ait one minute before logging into the P-870HN- 51D again. Figure 133 Configu ration Upload Successful The P-870HN-51D automatically restarts[...]

Chapter 22 To ols P-870HN-51D User’s Guide 232 If the upload w as not successful, th e follo wing sc reen will appear . Clic k Tools > Configuration to go back to the Configuration screen. Figure 135 Configuratio n Upload E rror Reset to Factory Default s Click the Reset button to clear all user-enter ed configur ation information and return t[...]

Chapter 22 Tools P-870HN-51D User’s Guide 233 Click Maintenance > Too ls > Restart . Click Restart to have the P-870HN-51D reboot. This does not affect the P-870HN-51D's configuration. Figure 137 Maintenance > T ools >Restart[...]

Chapter 22 To ols P-870HN-51D User’s Guide 234[...]

P-870HN-51D User’s Guide 235 C HAPTER 23 Diagnostic 23.1 Overview The Diagnostic screens display information to hel p you identify problems wi th the P-870HN-51D. The route between a CO VDSL switch and one of its CPE may go through switches owned by independent organizations. A co nnect ivity fault point generally tak es time to discover and i mp[...]

Chapter 23 Diagnostic P-870HN-51D User’s Guide 236 • Loopback test - checks if the MEP port receives it s Loop Back R esponse (LBR) from its target after it sends the Loop Back Message (LBM). If no response is received, there might be a conn ectivity f a ul t b e t wee n them. • Link trace t est - provides addit ional connectivity faul t anal[...]

Chapter 23 Diagnostic P-870HN-51D User’s Guide 237 23.4 The 802.1ag Screen Click Diagnosti c to open the followi ng screen. Use this screen to perform CFM actions. Figure 139 802.1ag The following table describes t he fields in this screen. T able 91 Maintenance > Diagnostic > 802.1ag LABEL DESCRIPTION 802.1ag Connectivity Fa u l t Manageme[...]

Chapter 23 Diagnostic P-870HN-51D User’s Guide 238 Maintenance Association (MA) For m a t Select the format which the P-870HN-51D uses to send this MA information in the domain (MD). Options are VID , String and Integer . If you select VID or Integer , the P-870HN-51D adds the VLAN ID you specified for an MA in the CCM. If you select String , the[...]

P-870HN-51D User’s Guide 239 C HAPTER 24 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • P-870HN-51D Access and Login • Internet Access • Wireless LAN T r oubleshooting 24.1 Power ,[...]

Chapter 24 Tro u blesh oo tin g P-870HN-51D User’s Guide 240 2 Check the hardware connections. See the Quick Start Guide. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the P-870HN-51D off and on. 5 If the problem continues, contac t the vendor . 24.2 P-870HN-51D Access and Login I forgot the IP addre[...]

Chapter 24 Troubleshooting P-870HN-51D User’s Guide 241 • If you changed the IP address ( Sectio n on page 96 ), use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubleshooti ng suggestions for I forgot the IP address for the P-870HN-51 D. 2 Check the hardware connections, and ma k e sure the LEDs are [...]

Chapter 24 Tro u blesh oo tin g P-870HN-51D User’s Guide 242 I cannot use FTP to upload / download the configuration fi le. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configu rator . Ignore the suggestions about your browser . I cannot access the P-870HN- 5[...]

Chapter 24 Troubleshooting P-870HN-51D User’s Guide 243 2 Make sure you configured a proper A TM or PTM la yer-2 interface and WAN services with the Internet account information p rovided by your ISP . 3 If you set up a WAN connection using bridging service, make sure you turn off the DHCP feature in the LAN screen to hav e the clients get W AN I[...]

Chapter 24 Tro u blesh oo tin g P-870HN-51D User’s Guide 244 1 Check the hardware connections, and ma k e sure the LEDs are behav i n g as expected. See the Quick Start Guide and Section 1.5 on page 23 . 2 T urn the P-870HN-51D off and on. 3 If the problem continues, contac t your ISP . The Internet conn ection is slow or intermittent. 1 There mi[...]

Chapter 24 Troubleshooting P-870HN-51D User’s Guide 245 3 Make sure the wireless adapt er installed on your computer is IEEE 802.11 compatible and supports the same wi reless standard as the P-870HN-51D. 4 Make sure your computer (wi th a wireless adapter installed) is within the transmission r ange of the P-870HN-51D. 5 Check that both the P-870[...]

Chapter 24 Tro u blesh oo tin g P-870HN-51D User’s Guide 246[...]

P-870HN-51D User’s Guide 247 C HAPTER 25 Product Specifications The following tables summarize the P-870HN-51D’ s hardwa re and firmware features. 25.1 Hardware S pecifications 25.2 Firmware S pecifications T able 92 Hardware Specifications Dimensions 21.5 cm (L) x 12.3 cm (W) x 3.6 cm (D) We i g h t 417 g P ower Specification 12 V D C 1.5A Bui[...]

Chapter 25 Product Specifications P-870HN-51D User’s Guide 248 Default User Name admin Default P assword 1234 DHCP Server IP P ool 192.168.1.33 to 192.168.1.6 5 Static Routes 16 Device Management Use the web configurator to easily configure the rich r ange of features on the P-870HN-51D. Wireless Functionality (wireless devices only) Allow the IE[...]

Chapter 25 Product Specifications P-870HN-51D User’s Guide 249 Universal Plug and Play (UPnP) A UPnP-enabled device can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the networ k. QoS (Quality of Service) Y ou can efficiently manage traffic on your network by reserving bandwidth and giving priori[...]

Chapter 25 Product Specifications P-870HN-51D User’s Guide 250 The following list, which is not exhaust ive , illust rates the standards supported in the P-870HN-51D. Other Protocol Support PPP (Point -to-Po int Protocol) link layer protocol T ransparent bridging for unsupported network lay er protocols RIP I/RIP II ICMP AT M Q o S SNMP v1 and v2[...]

Chapter 25 Product Specifications P-870HN-51D User’s Guide 251 IEEE 802.11d Standard for Local and Metropolitan Area Networks: Media Access Control (MAC) Bridges IEEE 802.11x Port Based Network Access Control. IEEE 802.11e QoS IEEE 802.11 e Wireless LA N for Quality of Service ITU- T G.99 3.2 (VDSL2) ITU standard that defines VDSL2. TR -069 DSL F[...]

Chapter 25 Product Specifications P-870HN-51D User’s Guide 252[...]

P-870HN-51D User’s Guide 253 A PPENDIX A Network T roubleshooting Overview The three most basic utilities for troubles hooting network connection issues are: ipconfig , ping and tracert . This appendix giv e s a quick o verview of them as well as some common usage examples. More over , three slightly mor e advanced utilities are also discuss ed: [...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 254 Note: Most operating systems ship with TCP/IP already inst alled and enabled. See your Windows document ation for det ails on installing or co nfiguring TCP/IP . The Command Line Interface T o open the Window s command line inte rface: 1 Click Start > Run . 2 In the Run dialog bo[...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 255 For example, the date command has the optional /t and date par ameters . If you do not use either of them and enter just date by itself , then the system shows you the dat e it is curren tl y using and t hen prompt s you to chang e it . Howev e r , if you use th e /t parameter it j u[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 256 Here you can see that the device has IP address of 1.1.1.1 and example.com is its Domain Name Server (DNS). If the device is disconnected then y ou would see the following instead: If the device is connected but cannot get an IP address then you would see: I n s o m e c a s e s , y [...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 257 ping The ping command line utility allows you to verify the connection and latency between your computer and either th e P-870HN-51D or other devi ces on the network. If you cannot reach a target us ing this command, then it may indi cate possible network trouble. Syntax : ping targe[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 258 If your ping test fails to get a response, then you ma y see a message lik e this: When a request ti mes out it may mean: • your computer is not connected to the network • your Internet access device is not connected to the network • or the device which you are pinging i s not[...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 259 tracert The tracert command line utility allows y ou to determine the network path between your computer and a host you specify . When you communicate with other devices on a ne two rk, the data i s no t often sent direc t ly from p oi nt A t o point B; r ather , it mo ves through a [...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 260 The following examples show the ty pical output of this command: Here, the tracert to www.example.com took 18 ho ps to reach it s destinat ion. Looking at the latency data, you’ll see the first slow down happens at hop 10. The extremely low latency on the first few hops indicates [...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 261 In this example, we abridge the tracert results table to show only server IP addresses and not domain names by using t he -d parameter . W e also use the -h parameter to limit the number of hops to 5 to test local connections only . arp Local network tr ansmission is based on MAC add[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 262 T o check the ARP table on a Windows XP computer: 1 Click Start > Programs > Accessories > Command Prompt . The Command Prompt screen appears. 2 Ty p e arp -a and press [Enter] . The following examples show the typical outpu t of this c ommand: In this example, the Physical[...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 263 and other route information. When your computer want s to access an IP address on another network, it references this table. Syntax : route print Parameters : F or the purposes of this section, the print par ameter is the most importan t. If you enter route by itself , the command’[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 264 In this example, the 172.16.1.0 is the network address. The 172.16.1.32 is t he address of the local computer . 172.16.1.255 is the network broadcast address which sends broadcast p ackets to all computers on the 172. 16.1.x network. 172.16.1.254 is the default gatew ay . Y ou may h[...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 265 net st at The netstat command line utility is used to show Et hernet statistics and current TCP/IP network connections. Syntax : netstat With no par ameters, this command si mply displays only activ e statistics for ports that are currently in use by one process or another . Paramete[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 266 Use the -a par amet er to display all possible connections to your device, not just the ones that are currently in use: The following table describes t he thre e entries in the output example above: C:>netstat -a Active Connections Proto Local Address Fore ign Address State TCP [...]

Appendix A Network Troubleshooting P-870HN-51D User’s Guide 267 Additionally , you can use netstat -e to display Ethernet st atistics as the follow ing example. C: >netstat -e Interface Statistics Received Sent Bytes 25250033 7060325 Unicast packets 38838 34744 Non-unicast packets 38227 175 Discards 0 0 Errors 0 35 Unknown protocols 787[...]

Appendix A Network Troublesho oting P-870HN-51D User’s Guide 268[...]

P-870HN-51D User’s Guide 269 A PPENDIX B Setting Up Y our Computer ’ s IP Address Note: Y our specific P-870HN-51D may not support all of the operating systems described in this appendix. See the produc t specifications for mo re information about which operating systems are sup ported. This appendix shows you how to conf igure the IP setti ngs[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 270 1 Click Start > Control Panel . Figure 141 Windows XP: S tart Menu 2 In the Control Panel , click the Network Connections icon. Figure 142 Windows XP: Control Panel[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 271 3 Right- click Local Area Connection and then select Properties . Figure 143 Windows XP: Control Panel > Ne twork Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties . Figure 144 Windows XP: Local Area Conne[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 272 5 The Internet Protocol TCP/IP Properties window opens. Figure 145 Windows XP: Internet Protocol (T CP/IP) Properties 6 Select Obtain an IP address automatically if your network admini strator or ISP assigns your IP addres s dynamically . Select Use the following IP[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 273 2 In the Command Prompt window , type "ipconfi g" and then press [ENTER]. Y ou can also go to Start > Control Panel > Network Connections , right-click a network connection , click Sta tus and then click the Support tab to view your IP address and conn[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 274 3 Click the Network and Sharing Center icon. Figure 148 Windows V ista: Network And Internet 4 Click Manage network conne ctions . Figure 149 Windows V ista: Network and Sharing Center 5 Right- click Local Area Connection and then select Properties . Figure 150 Wind[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 275 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties . Figure 151 Windows V ista: Local Area Connection Properties[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 276 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens. Figure 152 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 8 Select Obtain an IP address automatically if your network admini strator or ISP assigns your IP addres s dynamical[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 277 2 In the Command Prompt window , type "ipconfi g" and then press [ENTER]. Y ou can also go to Start > Control Panel > Network Connections , right-click a network connection , click Sta tus and then click the Support tab to view your IP address and conn[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 278 3 Click Change adapter settings . Figure 155 Windows 7: Network And Shar ing Center 4 Double c lick Local Area Connection and then select Properties . Figure 156 Windows 7: Local Area Conne ction S t atus Note: During this procedure, click Continue whenever Windo ws[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 279 5 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties . Figure 157 Windows 7: Local Area Conne ction Properties[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 280 6 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens. Figure 158 Windows 7: Internet Pro tocol V ersion 4 (TCP/IPv4) Properties 7 Select Obtain an IP address automatically if your network admini strator or ISP assigns your IP addres s dynamically . [...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 281 3 The IP settings are display ed as follows. Figure 159 Windows 7: Internet Pro tocol V ersion 4 (TCP/IPv4) Properties Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences . Figure[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 282 2 In the System Preferences window , click the Network icon. Figure 161 Mac OS X 10.4: System Pr eferences 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 162 Mac OS X 10.4: [...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 283 4 For d ynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 163 Mac OS X 10.4: Network Preferences > TCP/IP T ab. 5 For s tatically assigned settings, do t he following: •F r o m t h e Configure IPv4 list, select[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 284 •I n t h e Router field, t ype the IP address of your device. Figure 164 Mac OS X 10.4: Network Preferences > Ethernet 6 Click Apply Now and close the window . V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 285 Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. 1 Click Apple > System Preferences . Figure 166 Mac OS X 10.5: Apple Menu 2 In System Preferences , click the Net work ic on. Figure 167 Mac OS X 10.5: Systems Pr[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 286 3 When the Network preferences pane opens, select Ethe rnet from the list of available conn ecti on ty pes. Figure 168 Mac OS X 10.5: Network Preferences > Ethernet 4 From the Configure lis t, sele ct Using DHCP for dynamically assigned settings. 5 For s taticall[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 287 •I n t h e Router field, enter the IP address of your P-870HN-51D. Figure 169 Mac OS X 10.5: Network Preferences > Ethernet 6 Click Apply and close the wi nd ow .[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 288 V erifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities , and then selecting the appropriat e Network interface from the Info tab. Figure 170 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section [...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 289 1 Click System > Administration > Network . Figure 171 Ubuntu 8: System > Administration Menu 2 When the Network Settings wi ndow opens, click Unl ock to open the Authenticate window . (By default, the Unloc k button is greyed out until clicked. ) Y ou cannot[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 290 3 In the Authenticate window , enter your admin a ccount name and password then click the Authenticate button. Figure 173 Ubuntu 8: Administrator Account Authentication 4 In the Network Settings window , select the connection that you wa nt to configure, then click [...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 291 5 The Properties dialog box opens. Figure 175 Ubuntu 8: Network Settings > Properties •I n t h e Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. •I n t h e Configuration li st, select Static IP address if you hav e a [...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 292 7 If you know yo ur DNS server IP address(es), click the DNS tab in the Net work Settings window and then enter the DNS se rv er information in the fields provided. Figure 176 Ubuntu 8: Network Settings > DNS 8 Click the Close button to apply the changes. V erify[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 293 tab. The Interface Statistics column shows data if your connection is working properly . Figure 177 Ubuntu 8: Network T ools Linux: openSUSE 10.3 (KDE) This section shows y ou how to configure y o ur computer’s T CP/IP settings in the K Desktop Environment (KDE) usi[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 294 1 Click K Menu > Computer > Administrator Se ttings (YaST) . Figure 178 openSUSE 10.3: K Menu > Computer Menu 2 When the Run as R oot - KDE su dialog opens, enter the admin password and click OK . Figure 179 openSUSE 10.3: K Menu > Computer Menu[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 295 3 When the YaST Contro l Center window opens, select Network Devices and then clic k the Network Card icon. Figure 180 openSUSE 10.3: Y aST Control Center 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the[...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 296 5 When the Network Card Setup window opens, click the Address tab Figure 182 openSUSE 10.3: Ne twork Card Setup 6 Select Dynamic Address (DHCP) if you ha ve a dynamic IP add ress. Select Statically assigned IP Address if y ou ha ve a static IP address. Fill in the I[...]

Appendix B Setting Up Your Computer’s IP Address P-870HN-51D User’s Guide 297 8 If you know yo ur DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server informat ion in the fields provided. Figure 183 openSUSE 10.3: Ne twork Settings 9 Click Finish to sa ve your settings and close the window . V [...]

Appendix B Se tting Up Your Computer’s IP Addres s P-870HN-51D User’s Guide 298 When the Connection Statu s - KNetwork Manager window opens, click the Statistics tab to see if your connecti on is working properly . Figure 185 openSUSE: Connection S tatus - KNetwork Manager[...]

P-870HN-51D User’s Guide 299 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up wi nd ows from your device. • Jav aScripts (enabled by default). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screens for othe[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-870HN-51D User’s Guide 300 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 187 Internet Options: Privacy 3 Click [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-870HN-51D User’s Guide 301 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 188 Internet Options: Privacy 3 T ype the IP address of y our device (the web page that you do not want to have blocked) wi th the prefix “http://” . For example, http://192.168.1.1[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-870HN-51D User’s Guide 302 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 189 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configur ator do not display properly i[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-870HN-51D User’s Guide 303 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 190 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected (the defa[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-870HN-51D User’s Guide 304 6 Click OK to close the window . Figure 191 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM . 4 Under [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-870HN-51D User’s Guide 305 5 Click OK to close the window . Figure 192 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-870HN-51D User’s Guide 306 3 Click OK to close the window . Figure 193 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Java, Javascript s and pop-ups in one screen. Click Tools, then click Options in the sc[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns P-870HN-51D User’s Guide 307 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 195 Mozilla Firefox Content Security[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions P-870HN-51D User’s Guide 308[...]

P-870HN-51D User’s Guide 309 A PPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are a[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 310 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 196 Network Number and Host ID How much of the IP address is the networ k number and how much is the host ID va[...]

Appendix D IP Addresses and Subnetting P-870HN-51D User’s Guide 31 1 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 312 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us ua lly sp[...]

Appendix D IP Addresses and Subnetting P-870HN-51D User’s Guide 313 The following figure shows the company network before subnetting. Figure 197 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.255.128 or /[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 314 In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all zeroes is the subnet’ s address itself , all ones is the subnet’ s broadcast address). 192.168.1.0 with mask 255.255.255.128 i s subnet A itse[...]

Appendix D IP Addresses and Subnetting P-870HN-51D User’s Guide 315 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. T able 103 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTE T BIT VA L U E IP Addres[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 316 Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number . The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network number depends[...]

Appendix D IP Addresses and Subnetting P-870HN-51D User’s Guide 317 addresses, follow their instructions i n selecting th e IP addresse s and the sub n et mask. If the ISP did not explicitly give you an IP network nu mber , then most l ikely yo u have a single user account and the ISP will assign you a dynamic IP address when the connection is es[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 318 IP Address Conflict s Each device on a network must ha ve a un ique IP address. Device s with duplic at e IP addresses on the same network will not be able to access the Internet or ot her resources. The devices may also be unreachab le through the network. Conflicting Computer [...]

Appendix D IP Addresses and Subnetting P-870HN-51D User’s Guide 319 following example, the LAN and W AN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 200 Conflictin g Router IP Addresses Example Conflicting Computer and R outer IP Addresses Example More than one devic[...]

Appendix D IP Addresses a nd Subnetting P-870HN-51D User’s Guide 320[...]

P-870HN-51D User’s Guide 321 A PPENDIX E W ireless LANs Note: Y our specific P-870HN-51D may not support all of the wireless security types described in this appendix. See the produc t specifications for mo re information about which wireless security types are supporte d. Wireless LAN T opologies This section discuss es ad-hoc and infr astructur[...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 322 Intra-BS S traffic is traffic between wirele ss clients in the BS S. When Intra-BS S is enabled, wireless client A and B can access the wired network and communicate with each other . When Intra-BSS i s disabled, wireless client A and B can still access the wired network but cannot communica[...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 323 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate. Figure 204 Infrastructure WLAN Channel A channel is the r adio frequency(i es) used by wireless devi [...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 324 hidden node. Both stations (ST A) are with in range of the access point (AP) or wireless gatewa y , but out-of -range of ea ch other , so they canno t "h ear" each other , that is they do not know if the channel is currently being used. Therefore, they are consider ed hi dden from [...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 325 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames. A large Fragmentation Threshold is recommended for networks not prone [...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 326 sever al intermediate rate steps between the maximum and minimum data r ates. The IEEE 802.11g data rate and modulation are as follows: Wireless Security Overview Wireless security is vital to your ne twork to protect wireless communication between wireless client s, ac ce ss points and t he[...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 327 accounting and control features. It is su pported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows fo r roaming. • Support for RADIUS (R emote Authentication Dial In User Service, R FC 2138, 2139) for central ized u[...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 328 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: •A c c o u n t i n g - R e q u e s t Sent by the ac cess point requesting accounting. • Accounting-R esponse Sent by the RADIUS server to indicate th at it has started[...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 329 authentication method does not support data encryption wi th dynamic session key . Y ou must configure WEP encry ption keys for d ata encryption. EAP-TLS (T ransp ort Layer Security) With EAP- TLS, digital certifications are n eeded by both the server and the wireless clients for mutu al auth[...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 330 Note: EAP-MD5 cannot be used with Dynamic WEP Key Exchange For ad ded security , certificate-based au thenti cations (EAP- TLS, EAP- TTLS and PEAP) use dynamic keys for data encryption . They are often deployed in corporate environments, but for pub lic deployment, a simple user name and pas[...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 331 required for compatibility reasons, but offe rs stronger encryption t han TKIP with Advanced Enc ryption Standard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol (CCMP). TKIP uses 128-bit k eys that are dynami cal ly generated and d istributed by the [...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 332 authentication. These two features are op tional and ma y not be supported in all wireless dev ices. K ey caching allows a wireless client to store th e PMK it deriv e d through a successful authentication wit h an AP . The wi reless cl ient uses the PMK when it tries to connect to the same [...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 333 4 The RADIUS server distributes the PMK to the AP . The AP th en sets up a key hierarchy and management system, usin g the PMK to dynamica lly generate unique data encryption k eys. The k eys are used to encrypt every data packet that is wirelessly communicated bet ween the AP and the wireles[...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 334 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tempor al encryption keys. They use these keys to encrypt data exchanged between them. Figure 207 WP A(2)-PSK Authentication Security Parameters Summary Re fer to [...]

Appendix E Wir eless LANs P-870HN-51D User’s Guide 335 Antenna Overview An antenna couples RF signals onto air . A tr ansmitter within a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air . P ositioning the antennas properly in[...]

Appendix E Wirele ss LA Ns P-870HN-51D User’s Guide 336 • Omni-directional antennas send the RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a room environment. With a wide cove rage area, it is possible to make circular ov erlapping cov erage areas [...]

P-870HN-51D User’s Guide 337 A PPENDIX F Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive[...]

Appendix F Comm o n Ser vice s P-870HN-51D User’s Guide 338 ESP (IPSEC_TUNNEL) User -Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr am t[...]

Appendix F Common Services P-870HN-51D User’s Guide 339 PPTP TCP 1723 Point -to-P oint T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel. PPTP_TUNNEL (GRE) User -Defined 47 PPTP (P oint -to-Point T unne ling Protocol) enables secure transfer of data over public networks. This is the data channe[...]

Appendix F Comm o n Ser vice s P-870HN-51D User’s Guide 340 TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) r ather than TCP (T ransmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. T able 1 12 Commonly Used Services (contin[...]

P-870HN-51D User’s Guide 341 A PPENDIX G Open Sof tware Announcement s End-User License Agreement for "P-870HN-51D" W ARNING: ZyXEL Communicatio ns Corp. IS WILLING TO LICENSE THE SOFTW ARE TO YOU ONL Y UPON THE CONDITION THA T YOU ACCEPT ALL OF TH E TERMS CONT AINED IN THIS LICENSE AGREEMENT . PLEASE READ THE TERMS CAREFULL Y BEFORE CO[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 342 3 Copyright The Software and Documentation contain mat erial that is protected by International Copyright Law and tr ade secr et law , and by international treat y provisions. All right s not gr anted to you herein are expressly reserv ed by Z yXEL. Y ou may not remove an y pro[...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 343 and conditions of this License Agreemen t to those persons employ ed by you who come into contact with the Software, and to use reasonable best efforts to ensure their compliance with such terms and cond itions, including, without limit ation, not knowingly permitting such perso[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 344 DOCUMENT A TION W ITHO UT COMPL YING WI TH SUCH LAWS, REGULA TIONS, ORDERS, OR O THER RESTRICT IONS. YOU AGREE TO INDEMNIFY Z yXEL AGA INST ALL CLAIMS, L OSSES, DAMAGES, LIABILITIES, COSTS AND EXPENSES , INCLUDING REASONABLE A T T ORNEYS' FE ES, T O THE EXTENT SUCH CLAIM S[...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 345 Open-Source Packages for "P-870HN-51D" Notice Information herein is subject to change without notice. Comp anies, names, and data used in exampl es herein are fictit ious unless otherwise noted. No part may be reproduced or transmi tted in any fo rm or by any means, el[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 346 GNU GENERAL PUBLIC LICENSE V ersion 2, June 1991 Copyright (C) 1989, 1991 Free Software F oundation, Inc. 59 T emple Place - Suite 330, Boston, MA 02111-1307, USA Everyone is permi tted to copy and distribute verbatim copies of this license document, but changing it is not allo[...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 347 patent licenses, in effect making the pr ogr am proprietary . T o prevent this, we h a v e m a d e i t c l e a r t h a t a n y p a t e n t m u s t b e l i c e n s e d f o r e v e r y o n e ' s f r e e u s e o r n o t licensed at all. The precise terms and conditio ns for co[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 348 and telling the user how to view a copy o f this License. (Excep tion: if the Program itself is interacti ve but does not normally print such an anno un cement, your work based on the Program is not requ ired to print an announcement.) These requirements apply to th e modified [...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 349 place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the ob ject code. 4. Y ou may not copy , modify , sublicense, or distribute the Program ex cept as expressly provided under this License. Any attempt otherw[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 350 8. If the distribution and/or use of the Progr am is restricted in certain count ries either by patents or by copyrighted inte rfac es, the original copyright holder who places the Progr am under this License may add an expli cit geographi cal distribution li mitation exc ludin[...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 351 IF SUCH HOLDER OR OTHER P AR TY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS All other trademarks or tr ade names mentio ned herein, if any , are the property of their respective owners. This Product incl udes Ssh server drop bear v0.46 under [...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 352 1. R edistributions of source code must re tain the above cop yright notice, this list of conditions and the followi ng disclaimer . 2. R edistributions in binary form must reproduce the above copyright notice, this list of conditions and the following d isclaimer in the docume[...]

Appendix G O pen Software Announcements P-870HN-51D User’s Guide 353 All rights reserved. This package is an S SL implementation written by Eric Y oung (eay@cryptsoft. com). The implementation w as written so as to conform with Netscapes SSL. This l ibrary is free for co mmercial and non-commercial use as long as the following conditions are ahea[...]

Appendix G Op en Software An nouncements P-870HN-51D User’s Guide 354 The licence and distribution terms for an y pu blically av ailable v ersion or deriv ative of this code cannot be changed. i .e. th is code cannot simply be copied and put under another distribution licence [i ncluding the GNU Public Licence. ][...]

P-870HN-51D User’s Guide 355 A PPENDIX H Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electronic, me[...]

Appendix H Lega l Inform a tio n P-870HN-51D User’s Guide 356 • This device may not cause harmful interference. • This dev ice must acc e pt any inte rf eren ce received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 1[...]

Appendix H Legal Information P-870HN-51D User’s Guide 357 This device has been designed t o oper ate with an antenna having a maximum gain of 2dBi. Antenna having a higher gain is strictly prohib ited per reg u lations of Industry Canada. The required antenna impedance is 50 ohms. T o reduce potential radio interference to other users, the antenn[...]

Appendix H Lega l Inform a tio n P-870HN-51D User’s Guide 358 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications 1 Go to http://www . zyxel.com . 2 Select your prod uct on the Z yXEL home page to go to that product's page. 3 Select the certification y ou wish to view from this page. ZyXE[...]

Index P-870HN-51D User’s Guide 359 Index A ACS 191 Advanced Encryption Standard See AES. AES 331 ALG 138 alternative subnet mask notation 312 antenna 247 directional 336 gain 335 omni-directional 336 AP (access point) 323 Application Layer Gatewa y 138 arp 261 Auto Configuration Server , see ACS 191 B backup 230 Basic Service Set, See BSS 321 bli[...]

Index P-870HN-51D User’s Guide 360 DHCP 66 , 92 , 95 , 96 , 189 DHCP client 66 DHCP client list 66 DHCP relay 248 DHCP server 248 diagnostic 236 Differentiated Services, see DiffServ 184 DiffServ 184 marking rule 185 digital IDs 147 disclaimer 355 DNS 93 DNS server address assignment 88 Domain Name 139 domain name system see DNS Domain Nam e Syst[...]

Index P-870HN-51D User’s Guide 361 See IANA 317 IP Address 137 IP address 96 IP Address Assignment 85 IP filter basics 141 creating or eiding rules 144 introduction 141 policies 142 IP multicasting 250 IP pool 94 IP pool setup 96 ipconfig 255 ipconfig, release 256 ipconfig, renew 256 L LAN statistics 62 , 66 LAN TCP/IP 96 LAN-Side DSL CPE Configu[...]

Index P-870HN-51D User’s Guide 362 Pairwise Master K ey (PMK) 331 , 333 Per -H o p Be h av i o r , s e e PH B 185 PHB 185 ping 257 timeout 258 Po int-to-P oint T unneling Protocol 139 POP3 139 , 141 , 142 ports 24 power adaptor 250 power specifications 247 PPP (P oint-to-P oint Protocol) Link Layer Protocol 250 PPPoE 85 Benefits 85 PPPoE (P oint [...]

Index P-870HN-51D User’s Guide 363 Sym me tr i c N A T , Ou t go in g 87 syntax conv entions 5 system name 56 T T ag Control Information See TCI T ag Protocol Identifier See TPID TCI TCP / I P 14 1 temperature 247 T emporal K ey Integrity Protocol (TKIP) 330 TPID 87 TR -064 193 TR -069 191 ACS setup 191 authentication 192 tracert 259 trademar ks [...]

Index P-870HN-51D User’s Guide 364 WPS status 57[...]