ZyXEL Communications 802.11g HomePlug AV ADSL2+ Gateway P-660HWP-Dx manual

www .zyxel.com P-660HWP-Dx 802.1 1g HomePlug A V ADSL2+ Gateway User ’ s Guide V ersion 3.40 7/2007 Edition 1[...]

[...]

About This User's Guide P-660HWP-Dx User’s Guide 35 About This User's Guide Intended Audience This manual is intended for people who want to configure the P-66 0HWP-Dx using the web configurator . Y ou should have at least a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Guide The Qui[...]

Document Conventions P-660HWP-Dx U ser’s Guide 36 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other import ant information (for example, other things yo u may need to configure or help ful t[...]

Document Conventions P-660HWP-Dx User’s Guide 37 Icons Used in Figures Figures in this User ’ s Guide may use the follo wing generic icons. The P-660HWP-Dx ico n is not an exact representation of your device. P-660HWP-Dx Computer Notebook computer Server DSLAM Firewall T elephon e Switch Router[...]

Safety Warnings P-660HWP-Dx U ser’s Guide 38 Safety Warnings 1 For your safety , be sure to read and follow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the dev[...]

Safety Warnings P-660HWP-Dx User’s Guide 39[...]

Safety Warnings P-660HWP-Dx U ser’s Guide 40[...]

Contents Overview P-660HWP-Dx User’s Guide 35 Contents Overview Introduction .......................................... ........................................................................ .......... 33 Introducing the P-660HWP-Dx ................. .......... ...... ............. ............. ................ ............. .......... 3 5 Int[...]

Contents Overview P-660HWP-Dx U ser’s Guide 36[...]

Table of Contents P-660HWP-Dx User’s Guide 35 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions.................................................................. ......................................... .4 Safety Warnin[...]

Table of Contents P-660HWP-Dx U ser’s Guide 36 2.4.4 S tatus: WLAN S tatus ................. ............. ............. ................ ............. ............. ............. 52 2.4.5 S tatus: Bandwidth S tatus ............. ............. ............. ................ ............. ............. .......... 52 2.4.6 S tatus: Powerline S tati[...]

Table of Contents P-660HWP-Dx User’s Guide 37 5.5 Internet Connection ..... ................ ......... ................. ............. ............ ............. ............. .... ...... 86 5.5.1 Configuring Advanced In ternet Connection Setup ..................... ............. ................ ... 88 5.6 Configuring More Connections ..... ....[...]

Table of Contents P-660HWP-Dx U ser’s Guide 38 7.4.5 Wireless LAN Advanced Setup . ................ .......... ............. ............. ............. .............. 1 22 7.5 OTIST .............. ............. ............. ................ ............. ............. ................ ............. ...... ........... 1 23 7.5.1 Enabling OTIST .[...]

Table of Contents P-660HWP-Dx User’s Guide 39 Part IV : Security ..................... .............................. ........................ ........ 155 Chapter 10 Firewalls........................................................... ........................................................... ........... 157 10.1 Firewall Overview ......... ...[...]

Table of Contents P-660HWP-Dx U ser’s Guide 40 1 1.8 Predefined Servic es ............. ............. ................ ............. ................ ............. ................ .. ... 183 1 1.9 Anti-P robing ... ................ ............. ............. ................ ............. ................ ............. ...... ........ 185 1 1.1[...]

Table of Contents P-660HWP-Dx User’s Guide 41 14.2 Configuring S tatic Route ......... ............ ................. ............. ............ ............. ................ .... .2 1 9 14.2.1 S tatic Route Edit .... ................ ............. ................ ............. ............. ................ ........ 2 20 Chapter 15 Bandwid th [...]

Table of Contents P-660HWP-Dx U ser’s Guide 42 17.6.3 Configuring SNMP ..... .................... ............. ................ ............. ............. ............ ..... 245 17.7 Configuring DNS ..................... ............ ................. ............. ............ ................. ............ . .... 246 17.8 Configuring ICMP ...[...]

Table of Contents P-660HWP-Dx User’s Guide 43 21.2 Configuration Screen ..... ...... ............. ............. ............. ................ ............. ............. ......... .. 291 21.2.1 Backup Configur ation . ............. ............. ................ ............. ............. ................ ........ 291 21.2.2 Restore Configur a[...]

Table of Contents P-660HWP-Dx U ser’s Guide 44[...]

List of Figures P-660HWP-Dx User’s Guide 35 List of Figures Figure 1 Protected Internet Access Applications ...... ................. ............. ............ ............. ................ .. ..... 36 Figure 2 LAN-to-LAN Application Example ........... ............. ............. ............. ................ ............. ........ ..... 36 Fi[...]

List of Figure s P-660HWP-Dx U ser’s Guide 36 Figure 39 Select a Mode ....................... ................ ............. ................ ............. ................ ...... .............. ... 74 Figure 40 Wizard: We lc ome ..... ............. ............. ............. ............. ................ ............. ............. .. ........[...]

List of Figures P-660HWP-Dx User’s Guide 37 Figure 82 Network > Powerline > Remote Setting ....................... ............. ................ ............. .............. 1 39 Figure 83 Network > Pow erline > S tatus .................. ................. ............. ................ ............. ........... ...... 1 40 Figure 84[...]

List of Figure s P-660HWP-Dx U ser’s Guide 38 Figure 125 Security > Certificates > Directory Server > Add ........ ............. ................ ............. .............. 216 Figure 126 Example of S tatic Routing T opology . ...... ............. ............. ............. ................ ............. ...... .. 219 Figure 127 S tat[...]

List of Figures P-660HWP-Dx User’s Guide 39 Figure 168 Error Message .. ............. ................ ............. ................ ................ ............. ............. ......... ..... 291 Figure 169 Maintenance > T ools > Configuration .. ... ............. ................. ............ ............. ............. ....... .2 9 1 [...]

List of Figure s P-660HWP-Dx U ser’s Guide 40 Figure 21 1 Red Hat 9.0: Checking TCP/ IP Properties ................... ............. ............. ............. ............. . 3 56 Figure 212 Displaying Log Categories Example ...... ............. ................. ............ ............. ............. ........ 366 Figure 213 Displaying Log Pa[...]

List of Tables P-660HWP-Dx User’s Guide 35 List of Tables T able 1 ADSL St andards ............ ................. ............ ................. ............. ................ ............. ... ................ 36 T able 2 Front Panel LEDs ..................... ................ ............. ................ ............. ................ ...... [...]

List of Tables P-660HWP-Dx U ser’s Guide 36 T able 39 MAC Address Filt er ....................... ................ ............. ................ ............. ................ . ............. 127 T able 40 WMM QoS Priorities .............. ................ ............. ................ ................ ............. .......... ........... 128 T[...]

List of Tables P-660HWP-Dx User’s Guide 37 T able 82 Security > C ertificates > Di rectory Server > Add ................ ................ ................. ............ ..... 216 T able 83 S tatic Route ...................... ............. ............ ................. ............. ................ ........... ........... ........ 220 [...]

List of Tables P-660HWP-Dx U ser’s Guide 38 T able 125 Certificate Path V erification Failure Reas on Codes .... ................ ............. ............. .............. 285 T able 126 ACL Setting Notes ............... ................ ............. ............. ................ ............. ............ ........... . 285 T able 127 ICMP Not[...]

List of Tables P-660HWP-Dx User’s Guide 39 T able 168 Firewall Commands ............. ................ ............. ................ ................ ............. ........... .......... 3 69 T able 169 NetBIO S Filter Default Settings ........................... ................. ............ ................. ........... ...... 382[...]

List of Tables P-660HWP-Dx U ser’s Guide 40[...]

35 P ART I Introduction Introducing the P- 660HWP-Dx (35) Introducing the W eb Configurator (43)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 1 Introducing the P-660HWP-Dx This chapter introduces the ma in applications and features of the P-660HWP-Dx. It also introduces the ways you can manage the P-660HWP-Dx. 1.1 Overview The P-660HWP-Dx is an IEE E 802.1 1b/g wirele ss ADSL2+ ga teway that allows super-fast, secure Internet access over analog (POT[...]

Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 36 Figure 1 Protected Internet Access Applications Y ou can also use the P-660HWP-Dx to connect two geograp hically dispersed networks over the ADSL line. A typical LAN-to-LAN ap plication example is shown as follows. Figure 2 LAN-to-LAN Applic ation Example The P-660HWP-Dx is compa[...]

Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 37 " The st andard your ISP support s determines the maximum up stream and downstream speeds att ainable. Actual speeds att ained also depend on the dist ance from your ISP , line quality , etc. 1.2 W ays to Manage the P-660HWP-Dx Use any of the following method s to manage the P[...]

Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 38 Figure 3 Front Panel The following table describes the LEDs. 1.5 Hardware Connections Refer to the Quick S tart Guide for in formation on hard ware connections. T able 2 Fr ont Panel LEDs LED COLOR ST ATUS DESCRIPTION POWER Green On The P-660HWP-Dx is receiving power and function[...]

Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 39 1.5.1 Connecting a POTS Splitter When you use the Full Rate (G .dmt) ADSL standard, you can use a POTS (Plain Old T elephone Service) splitter to separate th e telephone and ADSL si gnals. This allows simultaneous Internet access and telephone service on the same lin e. A splitter [...]

Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 40 Figure 5 Connecting a Microfilter Y ou can also use a Y -Connector with a microfilter in order to connect both yo ur modem and a telephone to the same wall jack wi thout using a POTS splitter . 1 Connect a phone cable from the wall jack to the single jack end of the Y -Connector [...]

Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 41 Figure 7 P-660HWP-Dx with ISDN[...]

Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 42[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configur ator is an HTML-based mana ge ment interface that allows easy P-660HWP- Dx setup and management via Internet browser . Use Internet Explorer 6.0 and later [...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 36 5 A window displays as shown. Figure 8 Password Screen 2.2.1 User Access 1 For user access enter the default user password user to view the status only . The following window will appear . Figure 9 User status scree n 2.2.2 Administrator Access 1 For administrator access ent[...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 37 " If you do not change the p assword at least once, the following sc reen appears every time you log in with the admi n password. Figure 10 Change Password at Lo gin 4 Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, select Go to Adv[...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 38 2.3 Resetting the P-660HWP-Dx If you forget your password or cannot access th e web configurator , you will need to use the RESET button at the back of the P-660HWP-Dx to reload the factory-default configuration file. This means that you will lose all configura tions that yo[...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 39 " Click the icon (located in the top right corner of most screens) to view embedded help. T able 3 W eb Configur ator Scre ens Summar y LINK/ICON SUB-LINK FUNCTION Wizard INTERNET/ WIRELESS SETUP Use these screens for initial configuration including general setup, ISP par[...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 40 NA T General Use this screen to enable NA T . Port Forwarding Use this screen to configure servers behind the P-6 60HWP- Dx. Secur ity Firewall General Use this screen to ac tivate/deactivate th e firewall and the direction of network traffic to which to apply th e rule. Rul[...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 41 2.4.2 St atus Screen The following summarizes how to navigate the web configurator from the St a t u s screen. Some fields or links are not available if yo u entered the user password in the login password screen (see Figure 8 on page 36 ). Not all fields are available on all [...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 42 The following table describes the labels shown in the St a t u s screen. T able 4 S tatus Screen LABEL DESCRIPTION Refresh Int erval Select a nu mber of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of eve ry time inter[...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 43 2.4.3 St atus: Any IP T able Click the Any IP T able hyperlink in the St a t u s screen. The Any IP table shows current read- only information (including the IP address and the MAC address) of all network devices that use the Any IP feature to communicate with the P-660HWP-Dx.[...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 44 The following table describes the labels in this screen. 2.4.4 St atus: WLAN S tatus Click the WLAN S tatus hyperlink in the St a t u s screen to view the wireless stations that are currently associated to the P-660HWP-Dx. Figure 15 S tatus: WLAN S t atus The following table[...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 45 Figure 16 S tatus: Bandwidth S tatus 2.4.6 St atus: Powerline S tatistics Click the Powerline S tatistics hyperlink in the St a t u s screen. The following screen will appear . Figure 17 S tatus: Powerline See Figure 46 on page 140 for information on the he adings on this scre[...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 46 Figure 18 S tatus: Packet S tatistics The following table describes th e fields in this screen. T able 7 St atus: Packet S tatistics LABEL DESCRIPTION System Monitor System up T ime This is the elapsed time the system has been up. Current Date/T ime This field displays your [...]

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 47 2.4.8 Changing Login Password It is highly recommended that you periodical ly change the password for accessing the P- 660HWP-Dx. If you d idn’t change the default one after you logged in or you want to chang e to a new password again, then click Maintenance > System to d[...]

Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 48[...]

35 P ART II W izards W izard Setup for Interne t/W ireless Access (59) Bandwidth Management W izard (73)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 3 Wizard Setup for Internet/ Wireless Access This chapter provides information on the W izard Setup screens for Internet/W ireless acce ss in the web configurat or . 3.1 Introduction Use the wizard setup screens to configure your system fo r Internet/W ireless access with the information given to y ou by your [...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 36 Figure 20 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access. Figure 21 Wizard: Welcome 3 The wizard attempts to detect whic h W AN connection type you are using. If the wizard detects your connection type and your ISP uses PPPo[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 37 Figure 22 Auto Detection: No DSL Connection If the wizard still cannot detect a connection type and the following screen appears (see Figure 23 on page 37 ), click Next and refer to Section 3.2.2 on page 38 on how to configure the P-660HWP-Dx for Internet access manua[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 38 Figure 24 Auto-Detection: PPPoE 3.2.2 Manual Configuration 1 If the P-660HWP-Dx fails to detect your D SL connection type, enter the Internet access information given to you by your ISP exactly in the wizard screen. If not given, leave the fields set to the default. [...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 39 The following table describes the fields in this screen. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Next to continue. Figure 26 Internet Connection wit[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 40 The following table describes the fields in this screen. Figure 27 Internet Connection with RFC 1483 The following table describes the fields in this screen. T able 9 Internet Connec tion with PPPoE LABEL DESCRIPTION User Name Enter the user na me exactly as your ISP[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 41 Figure 28 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Ta b l e 1 1 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP Address Automati cally A static IP address is a fixed IP that your ISP gives you. A d[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 42 Figure 29 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password [...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 43 Figure 31 Connection T est Failed-2. 3.3 Wireless Connection Wizard Setup After you configure the Internet access informatio n, use the following scr eens to set up your wireless LAN. This section is availa ble on the wireless devices only . 1 Select Ye s an d click N[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 44 Figure 33 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. 3 Configure your wireless settin gs in this screen. Click Next . T able 13 Wireless LAN Setup Wizard 1 LABEL DESCRIPTION Active Select the check box to turn o n the w irele[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 45 Figure 34 Wireless LAN Setup Wizard 2 The following table describes the labels in this screen. T able 14 Wireless LAN Setup Wizard 2 LABEL DESCRIPTION Network Name (SSID) Enter a descriptive name (up to 32 printable 7-bit English keyboard characters) for the wireless [...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 46 " The wireless st ations and P-660HWP-Dx must use the same SSID, c hannel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wireless communication. 4 This screen varies depending on the security mode you selected in the previou[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 47 Figure 36 Manually assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 37 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct. Clic[...]

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 48 Figure 38 Internet Access and Wireless Wizard Setup Complete 7 Launch your web browser and navigate to www .zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed inform ation on the complete range of P-660HWP-Dx features.[...]

P-660HWP-Dx User’s Guide 49 C HAPTER 4 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens. 4.1 Introduction Bandwidth management allows y o u to control the amount of b andwidth going out through the P-660HWP-Dx’ s W AN port and prioritize the di stribution of the bandwidth ac[...]

Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 50 4.3 Bandwid th Management Wizard Setup 1 After you enter the admin password to access the web configura tor , se lect Go to Wizard setup and click Apply . Otherwise, click the wizard icon ( ) in the top right corner of the web configurat or to display the wizard main screen. Figu[...]

Chapter 4 Bandwidth Manage ment Wizard P-660HWP-Dx User’s Guide 51 2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet access. Figure 40 Wizard: Welcome 3 Activate bandwidth mana gement and select to alloc ate bandwidth to packets ba sed on the service requirements. Figure 41 Bandwidt h Management Wizard: General Information T[...]

Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 52 Figure 42 Bandwidt h Management Wizard: Configuration The following table describes the labels in this screen. 5 Follow the on-screen in structions and click Finish to complete the wizard setup and save your configuratio n. T able 19 Bandwidth Management Wizard: Configuration LAB[...]

Chapter 4 Bandwidth Manage ment Wizard P-660HWP-Dx User’s Guide 53 Figure 43 Bandwid th Management Wizard: Complete[...]

Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 54[...]

35 P ART III Network WA N S e t u p ( 8 1 ) LAN Setup (99) W ireless LAN (1 1 1) Powerline (135) Network Address T ranslation (NA T) (143)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 5 WAN Setup This chapter describes how to configure W AN settings. 5.1 W AN Overview A W AN (Wide Area Network) is an outside conn ection to another network or the Internet. 5.1.1 Encap sulation Be sure to use the encapsulation method required by your ISP . The P-660HWP-Dx supports the following methods. 5.1.1[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 36 5.1.1.3 PPPoA PPPoA stands for Point to Point Protocol over A TM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial -up Internet connection. The P-660HWP-Dx encapsulates the PPP session based on RF C1483 and sends it through an A TM PVC (Permanent V irtual Circuit) to the Internet [...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 37 5.1.3.2 Scenario 2: One VC, One Protocol (IP) Selecting RFC-1483 encapsulation with VC-based multiplexing requires the least amount of overhead (0 octets). However , if there is a po tential need for multiple protocol support in the future, it may be safer to select PPPoA encapsula tion instead of R[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 38 Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern 5.1.7 NA T NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, th[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 39 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traf fic source. It specifies the maximum average rate at which c ells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum numb er of cells that can be sent at the PCR. Af[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 40 The VBR-nR T (non real-time V ariable Bit Rate) ty pe is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example [...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 41 Figure 45 Internet Conne ction (PPPoE) The following table describes the labels in this screen. T able 20 Internet Connection LABEL DESCRIPTION General Name Enter the name of your Internet Servic e Provider , e.g., MyISP . This information is for identification purposes only . Mode Select Routing (d[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 42 5.5.1 Configuring Advanced Internet Connection Setup T o edit your P-660 HWP-Dx's advanced W AN se ttings, click the Ad vanced Setu p button in the Internet Connection screen. The screen appears as shown. VPI The valid range for the VPI is 0 to 2 55. Enter the VPI assigned to you. VCI The vali[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 43 Figure 46 Advanced Intern et Connection Setup The following table describes the labels in this screen. T able 21 Advanced Internet Connection Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Ou t Only . RIP V ersion Select the RI[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 44 5.6 Configuring More Connections This section describes the protocol-independent parameters for a remote network. They are required for placing calls to a remote gate way and the network behind it across a W AN connection. When you use the W AN > Internet Connection scree n to set up Internet ac[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 45 The following table describes the labels in this screen. 5.6.1 More Connections Edit Click the edit icon ( ) in the Mor e Connections screen to configure a connection. T able 22 More Connections LABEL DESCRIPTION # This is the index number of a connection. Active This display whether this conne ctio[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 46 Figure 48 More Connections Edit The following table describes the labels in this screen. T able 23 More Connections Edit LABEL DESCRIPTION Active Select the check box to activate or clear the check box to deactivate this connection. Name Enter a unique, descri ptive name of up to 13 English keyboar[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 47 Multiplexing Select the method of multiplexing used by your ISP fro m the drop-down list. Choices ar e VC or LL C . By prior agreement, a protocol is assigned a specifi c virtual circuit, for exampl e, VC1 will carry IP . If you select VC, spec ify separate VPI and VCI numbers for each protocol. For[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 48 5.6.2 Configuring More Co nnections Advanced Setup T o edit your P-660 HWP-Dx's advanced W AN se ttings, click the Ad vanced Setu p button in the Mor e Connections Edit screen. The scree n appears as shown. Figure 49 More Connections Advanced Setup The following table describes the labels in t[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 49 5.7 T raffic Redirect T raffic redirect forwards traffic to a ba ckup gateway when the P-660HWP-Dx cann ot connect to the Internet. An example is shown in the figure below . Figure 50 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 50 Figure 52 W AN Backup Setup The following table describes the labels in this screen. T able 25 WAN Backup Setup LABEL DESCRIPTION W AN Backup Setup Backup T ype Select the method that the P-660H WP-Dx use s to check the DSL connection. Select DSL Link to have the P-660HWP-Dx check if the connection[...]

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 51 T imeout T ype the number of se conds (3 reco mmended) for your P-660HWP-Dx to wait for a ping response from one of the IP addresses in the Check W AN IP Address field before timing out the request. The W AN connectio n is considered "down" after the P-660HWP-Dx times out the numb er of ti[...]

Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 52[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 6 LAN Setup This chapter describes how to configure LAN settings. 6.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building. The LAN screen s ca[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 36 6.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a se rver . Y ou can configure the P- 660HWP-Dx as a DHCP server or disable it. When configured as a server , the P-660HWP-Dx provides the TC[...]

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 37 • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. • The P-660HWP-Dx acts as a DNS prox y when the Primary and Secondary DNS Server[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 38 Y ou can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small or ga nization and your Internet access is through an ISP , the ISP can provide you with the Internet addresses for y our local networks. On the other hand, if you are p[...]

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 39 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address 224.0.0.1 is used for query messages and is assi gned to the permanent group of all IP hosts (including gateways). All hosts must join the 22 4.0 .0.1 group in orde r to participate in IGMP . The address 224.0.[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 40 " Y ou must enable NA T/SUA to use the Any IP feature on the P-660HWP-Dx. 6.2.4.1 How Any IP W orks Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the[...]

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 41 The following table describes th e fields in this screen. 6.3.1 Configuring Advanced LAN Setup T o edit your P-660HWP-Dx's a dvanced LAN settings, click the Advanced Setup button in the LAN IP screen. The screen appears as shown. Figure 56 Advanced LAN Setup The following table describes the la[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 42 6.4 DHCP Setup Use this screen to configure th e DNS server information that the P-660HWP-Dx sends to the DHCP client devices on the LAN. Figure 57 DHCP Setup The following table describes the labels in this screen. Active Select the Active check box to enable the Any IP fe ature. This allows a com[...]

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 43 6.5 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal cha[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 44 Figure 58 LAN Client List The following table describes the labels in this screen. 6.6 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The P-660HWP-Dx supp orts three logical LAN interfaces via its single physical [...]

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 45 When you use IP alias, you can also configur e firewall rules to control access between the LAN's logical networ ks (subnets ). " Make sure that the subnet s of the logical networks do not ov erlap. The following figure shows a LAN divided into subnets A, B, and C. Figure 59 Physical Netwo[...]

Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 46 The following table describes the labels in this screen. T able 30 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Select the check box to confi gure another LAN network for the P-660 HWP-Dx. IP Address Enter the IP address of your P-660HWP-Dx in dotted decimal notation. Alternatively , click the righ[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 7 Wireless LAN This chapter discusses how to configure the wireless network settings in your P-660HWP-Dx. See the appendices for more detailed information ab out wireless networks. 7.1 Wireless Network Overview The following figure provides an exampl e of a wireless network. Figure 61 Example of a Wireless Net[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 36 • Every wireless client in the same wireless network must use security c ompatible with the AP . Security stops unauthorized devices from using the wireless network. It ca n also protect the information that is sent in the wireless network. 7.2 Wireless Network Setup If you want to access the [...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 37 ( ) WP A2-PSK (TKIP or AES):______________ ( ) WP A2 (TKIP or AES) • Preamble type (if available): auto, short or long T o set up your w ireless network without an AP or wireless router , make sure wireless network cards/adapters use the same following settings: • Network type: Ad-Hoc • SSI[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 38 This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devi ces to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the wireless network. 7.3.3 User Authentication A[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 39 " It is recommended that wireless networks us e WP A-PSK, WP A, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly . It is not possible to use WP A-PSK , W[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 40 Figure 62 Wireless LAN: General The following table describes the general wi reless LAN labels in this screen. See the rest of this chapter for informa tion on the other labels in this screen. 7.4.1 No Security Select No Security to allow wireless clients to commun icate with the access points w[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 41 " If you do not enable any wireless security on your P-660HWP-Dx, your network is accessible to any wireless n etworking device that is within range. Figure 63 Wireless: No Security The following table describes the labels in this screen. 7.4.2 WEP Encryption WEP encryption scrambles the da [...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 42 Figure 64 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 7.4.3 WP A-PSK/WP A2-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir eless LAN to display the Ge neral screen. Select WP A-PSK or WP A[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 43 Figure 65 Wireless: WP A-PSK/WP A2-PSK The following table describes the wireless LAN security labels in this screen. T able 35 Wireless: WP A-PSK/WP A2-PSK LABEL DESCRIPTION Security Mode Choose WP A-PSK or WP A2-PSK from the drop-down list box. WP A Co mpatible This check box is available onl y[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 44 7.4.4 WP A/WP A2 In order to configure and enable WP A/WP A2; click the Wir eless LAN link under Network to display the General screen. Select WP A or WP A2 from the Security Mode list. Figure 66 Wireless: WP A/WP A2 Group Key Update T imer (In Seconds) The Group Key Up date Timer is the rate at[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 45 The following table describes the wireless LAN security labels in this screen. T able 36 Wireless: WPA/WPA2 LABEL DESCRIPTION WP A Co mpatible This check box is available only when you select WP A2-PSK or WP A2 in the Security Mode field. Select the check box to have both WP A2 and WP A wireless [...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 46 7.4.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen. The screen appears as shown. Figure 67 Advanced The following table describes the labels in this screen. T able 37 Wireless LAN: Advanced LABEL DESCRIPTION Wireless[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 47 7.5 OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it. T raditionally th is meant that you ha d to configure the settings on the AP an[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 48 " If you hold in the RESET button too long, the device will reset to the factory default s! 7.5.1.1.2 W eb Configurator Click the Network > Wireless LAN > OTIST . The following screen displays. Figure 68 OTIST The following table describes the labels in this screen. 7.5.1.2 Wireless C[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 49 Figure 69 Example Wireless Client OTIST Screen 7.5.2 St arting OTIST " Y ou must click St art in the AP OTIST web config urator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). Y ou can st art OTIST in the wireless client s and AP in any [...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 50 Figure 72 OTIST in progress (Client) In the wireless client, you see th is screen if i t can’t find an OTIST -enabled AP (with the same Setup key ). Click OK to go back to the ZyXEL utility mai n screen. Figure 73 No AP with OTIST Found • If there is more than one OTIST -enabled AP within ra[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 51 7.6 MAC Filter The MAC filter screen allows you to configure the P-660HWP-Dx to give exclusive access to up to 32 devices ( Allow ) or exclude up to 32 devic es from accessing the P-660HWP-Dx ( Deny ). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assig[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 52 7.7 WMM QoS WMM (W i-Fi MultiMedia) QoS (Quality of Service) allows you to prioritize wireless traf fic according to the delivery requirements of individual services. WMM is a part of the IEEE 802.1 1e QoS enhanc ement to certified W i-Fi wireless networks. 7.7.1 WMM QoS Example When WMM QoS is [...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 53 7.7.3 Services The commonly used services and port numbers ar e shown in the following table . Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets. The first field indicat es the IP protocol type (TCP , UDP , or ICMP)[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 54 T able 41 Commonly Used Services SERVICE DESCRIPTION AIM/New-ICQ(TCP:5190) AOL ’s Internet Messenger service, used as a listening port by ICQ. AUTH(TCP:1 13) Auth entication protocol used by some servers. BGP(TCP:179) Border Gateway Protocol. BOOTP_CLIENT(UDP:68) DHCP Client. BOOTP_SERVER(UDP [...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 55 7.8 QoS Screen The QoS screen by default allows you to au tomatically give a service a priority level according to the T oS value in the IP header of the packets it sends. 7.8.1 T oS (T ype of Service) and WMM QoS T oS defines the DS (Differentiated Service) fiel d in the IP packet header . The T[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 56 Click Network > Wi reless LAN > QoS . The following screen displays. Figure 76 Wireless LAN: QoS The following table describes the fields in this screen. T able 42 Wireless Lan: QoS LABEL DESCRIPTION QoS Enable WMM QoS Select the check box to enable WMM QoS on the P-660HWP-Dx. WMM QoS Poli[...]

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 57 7.8.2 Application Pr iority Configuration T o edit a WMM QoS application entr y , click the edit icon ( ) under Modify . The following screen displays. Figure 77 Application Priority Configuration The following table describes the fields in this screen. T able 43 Application Priori ty Configurati[...]

Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 58 Apply Click Apply to save your ch anges back to the P-660H WP-Dx. Cancel Click Cance l to return to the previous sc reen without savin g your changes. T able 43 Application Priority Co nf iguration (con tinued) LABEL DESCRIPTION[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 8 Powerline This chapter introduces the ma in applications and manageme nt of the powerline feature. 8.1 Overview The P-660HWP-Dx is a HomePl ug A V adaptor integrated DSL product. The P-660HWP -Dx and other HomePlug A V powerline adap ters in your network communicate with each other by sending and receiving i[...]

Chapter 8 Power line P-660HWP-Dx U ser’s Guide 36 In this User ’ s Guide the electrical wiring network may be referred to as the “powerline network”. 8.2 Privacy and Powerline Adapters When the P-66 0HWP-Dx communicates with each other HomePlug A V compliant powerline adapters, they use encryption to scramble th e information that is sent i[...]

Chapter 8 Powerline P-660HWP-Dx User’s Guide 37 In both cases the powerline adapters reside on the same electrica l circuit. In scenario A all the powerline adapters can communicate w ith each other . In scenario B only the adapters with the same NMK can receive and unscramble communication between each other . 8.2.2 Setting Up Multip le Powerlin[...]

Chapter 8 Power line P-660HWP-Dx U ser’s Guide 38 8.3 Configuring Local Settings Use the Local Setting screen to enter the network password for the network you wish to configure. Y ou can also change the Device Acc ess Key for your P-660HWP-Dx from this screen. Click Network > P owerline to access the settings of your local station. Figure 81 [...]

Chapter 8 Powerline P-660HWP-Dx User’s Guide 39 8.4 Configuring Remote Settings Use this screen to a ccess the other powerline ad apters on your network. Y ou can configure these adapters and add or re move them from you r network. Click Network > Po werline > Remote S ettings to access and set up the adapters on your powerline network. Fig[...]

Chapter 8 Power line P-660HWP-Dx U ser’s Guide 40 8.5 Powerline Network S tatus Use this screen to check the status of your powerline network and for expert troubleshooting. Click on Network > Powerline > St a t u s to access advanced information on the status of your powerline network. Figure 83 Network > Powerline > S tatus The foll[...]

Chapter 8 Powerline P-660HWP-Dx User’s Guide 41 TEI TEI refers to T e rminal Equipm ent Identifier . In th is case the number identifie s the CCo on the powerline network. NID NID refers to Network Identifier . This number identifies a network with a common password. SNID SNID refers to Short Network Identifier . This number is a short form of th[...]

Chapter 8 Power line P-660HWP-Dx U ser’s Guide 42[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 9 Network Address Translation (NAT) This chapter discusses how to configure NA T on the P-660HWP-Dx. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one netwo[...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 36 9.1.2 What NA T Do es In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the respon se comes back, NA T tran[...]

Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 37 Figure 85 NA T Application With IP Alias 9.1.5 NA T Mapping T ypes NA T suppo rts five types of IP/port mapping. They are: • One to One : In One-to-One mode, the P-660HWP-D x maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the P-6[...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 38 The following table summarizes these types. 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The P-660HWP-Dx also supports Full Feature NA T to m[...]

Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 39 9.4 NA T General Setup Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the P-660HWP-Dx. Click Network > NA T to open the following screen. Figure 86 NA T General The following table describes the[...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 40 9.5 Port Forwarding A port forwarding set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP , that you can make visible to the outsid e world even though NA T makes your whole inside network appear as a single computer to the outside world. Y ou[...]

Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 41 9.5.3 Configuring Servers Behi nd Port Forwarding (Example) Let's say you want to assign po rts 21-2 5 to one FTP , T elnet and SMTP server ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.168.1.35 to a third ( C [...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 42 Figure 88 NA T Port Forwarding The following table describes th e fields in this screen. 9.6.1 Port Forwarding Rule Edit T o edit a port forwarding rule, clic k the rule’ s edit icon ( ) in the Port Forwarding screen to display the screen shown next. T able 51 NAT Port F[...]

Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 43 Figure 89 Port Forwarding Rule Setup The following table describes th e fields in this screen. 9.7 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is impo rtant because the [...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 44 rules. For example, if you have already configur ed rules 1 to 6 in your current set and now you configure rule number 9. In the set summary scr een, the new rule will be rule 7, not 9. Now if you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 a[...]

Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 45 9.7.1 Address Mapping Rule Edit T o edit an address mapping rule, click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. Figure 91 Edit Address Mapping Rule The following table describes th e fields in this screen. T able 54 Edit Addres[...]

Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 46 Apply Click Apply to save your change s to the P-6 60HWP-Dx. Cancel Click Cancel to b egin configuring this screen afresh. T able 54 Edit Address Mapping Rule (continued) LABEL DESCRIPTION[...]

35 P ART IV Security Firewalls (157) Firewall Configuration (169) Content Filtering (191) Certificates (195)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 10 Firewalls This chapter gives some backgr ound information on firewalls and introduces the P-660HWP- Dx firewall. 10.1 Firewall Overview Originally , the term firewall referred to a construction techni que designed to prevent the spread of fire from one room to another . The ne tworking term “firewall” i[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 36 10.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP, FTP and tel net, they can evaluate network packets for valid ap plication-sp ecific data. Appl[...]

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 37 10.3.1 Denial of Service Att acks Figure 92 Firewall Application 10.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disable a device or ne twork so users no longer have access[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 38 10.4.2 T ypes of DoS Att acks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoofing. 5 " Ping of Death " and "[...]

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 39 Figure 94 SYN Flood •I n a LAND Attack , hackers flood SYN packets into the network with a spoofed source IP address of the targeted system . This makes it appear as if the host computer sent the packets to itself, making the sy stem unavaila ble while the target system tries to respond to itself[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 40 10.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that works in concert with IP . The following ICMP types trigger an alert: 10.4.2.2 Illegal Commands (NetBIOS and SMTP) The only legal NetBIOS commands are the following - all others are illegal. All SMTP commands are illegal except[...]

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 41 are allowed in. The P-660HWP-Dx uses stateful packet inspection to protect the private LAN from hackers and vandals on the Internet. By de fault, the P-660HWP-Dx’ s stateful inspection allows all communications to the Internet that or iginate from the LAN, and blocks all traffic to the LAN that o[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 42 6 Later , an inbound packet reac hes the interface . This packet is part of the connection previously established with the outbound packet. The inbound packet is ev aluated against the inbound access list, and is permitted because of the temporary access list entry previously crea ted. 7 The packe[...]

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 43 If an initiation packet originates on the LAN, this means that someone is trying to make a connection from the LAN to the In ternet. Assuming that this is an acceptable part of the security policy (as is the case w ith the default policy), the connection will be allowed. A cache entry is added whic[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 44 10.6 Guidelines for Enhancing Security with Y our Firewall • Change the default password via CLI (Co mmand Line Interpreter) or web configurator. • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled servi[...]

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 45 • Always shred confidential inform ation, particularly about your computer , before throwing it away . Some hackers dig through the trash of c ompanies or indivi duals for information that might help them in an attack. 10.7 Packet Filtering Vs Firewall Below are some comparisons between the P-660[...]

Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 46 • T o selectively b lock/allow inbound or outb ound traffic between inside host/networks and outside host/networks. Remember that filters can not distinguish traf fic originating from an inside host or an ou tside host by IP address. • The firewall performs better than filtering if you need to[...]

P-660HWP-Dx User’s Guide 47 C HAPTER 11 Firewall Configuration This chapter shows you how to enable and configur e the P-660HWP-Dx firewall. 1 1 .1 Access Methods The web configurator is, by far , the most comp rehensive firewall configuration tool your P- 660HWP-Dx has to offer . For th is reason, it is recommended t hat you configure your firew[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 48 " If you configure firewall rules without a good understanding of how they work, you might inadvertently introduce security risk s to the firewall and to the protected network. Make sure you test your rules a fter you configure them. For example, you may create rules to: • Blo[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 49 3 Is it possible to modify the rule to be more specific? For ex ample, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, [...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 50 1 1.4.1 LAN to W AN Rules The default rule for LAN to W AN traf fic is that all users on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essence want to limit some or all users from accessing cer tain services on the W A N. W AN [...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 51 The following table describes the labels in this screen. 1 1 .6 Firewall Rules Summary " The ordering of your rules is very import ant as rules are applied in turn. Refer to Section 10.1 on page 35 for more information. Click Security > Firewall > Rules to bring up the foll[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 52 Figure 98 Firewall Rules The following table describes the labels in this screen. T able 60 Firewall Rules LABEL DESCRIPTION Firewall Rules S torage S pace in Use This read-only bar shows how much of the P-660HWP-Dx's memory for recording firewall rules it is currently using. Wh[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 53 1 1.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 35 for more information. In the Rules screen, select an index number and cl ick Add or click a rule’ s Edit icon to display this screen and refer to the following table for information on the labels. Log This field sho[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 54 Figure 99 Firewall: Edit Rule[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 55 The following table describes the labels in this screen. T able 61 Firewall: Edit Rule LABEL DESCRIPTION Activ e Select this option to enable th is firewall rule. Action for Matched Packet Use the drop-down list box to select what the firewall is to do with p ackets that match this ru[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 56 1 1.6.2 Customized Services Configure customized services and port numbers not predefined by th e P-660HWP-Dx. Fo r a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further inform ation on these services, please read [...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 57 Refer to Section 10.1 on page 35 for more information. Figure 101 Firewall: Configure Customized Services The following table describes the labels in this screen. 1 1 .7 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “MyService” connecti[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 58 Figure 102 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall rul[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 59 Figure 104 Firewall Example: Edit Ru le: Destination Address 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom services show up with an “*” before th eir n[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 60 Figure 105 Firewall Example: Edit Rule : Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through 1[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 61 Figure 106 Firewall Example: Rules: MyService 1 1.8 Predefined Services The A vailable Services list box in the Edit Rule screen (see Section 1 1.6.1 on page 53 ) displays all predefined services that the P-660HWP-Dx already su pports. Next to th e name of the service, two fields appe[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 62 HTTP(TCP:80) Hyper T ext Transfer Protoco l - a c lient/server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICQ(UDP:4000) This is a popu lar Intern et chat program. IPSEC_TRANSPORT/ TUNNEL(AH:0) The IPSEC AH (Authentic ation Header)[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 63 1 1 .9 Anti-Probing If an outside user attempts to probe an unsu pported port on your P-66 0HWP-Dx, an ICMP response packet is automatica lly returned. This allows the outside user to know the P- 660HWP-Dx exists. The P-660HWP -Dx supports anti-probing, which prevents th e ICMP respon[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 64 The following table describes the labels in this screen. 1 1 .10 DoS Thresholds For DoS attacks, the P-660HWP-Dx uses thresholds to determine when to drop sessions that do not become fully established. These thresholds ap ply globally to all sessions. Y ou can use the default thresho[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 65 1 1.10.2 Half-Open Sessions An unusually high number of half-open sessions (either an absolute number or measured as the arrival rate) could indicate that a Denial of Service a ttack is occurring. For TCP , "half- open" means that the session has not reached the establis hed[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 66 Figure 108 Firewall: Threshold The following table describes the labels in this screen. T able 66 Firewall: Threshold LABEL DESCRIPTION DEF AUL T V ALUES Denial of Service Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deleting h[...]

Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 67 Maximum Incomplete High This is the number of e xisting half-op en sessions that causes the firewall to st art deleting half-open sessi ons. When the number of existing half-open sessions rises above this number , the P-660HWP-Dx deletes half-open sessions as required to accommodate n[...]

Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 68[...]

P-660HWP-Dx User’s Guide 69 C HAPTER 12 Content Filtering This chapter covers how to configure content filtering. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block web sites that contain key words (that you [...]

Chapter 12 Content Filtering P-660HWP-Dx U ser’s Guide 70 The following table describes the labels in this screen. 12.3 Configuring the Schedule T o set the days and times for the P-660H WP-Dx to perform content filtering, click Secu rity > Content Filter > Schedule . The screen appears as shown. Figure 1 10 Content Filter: Sched ule T able[...]

Chapter 12 Con tent Filter ing P-660HWP-Dx User’s Guide 71 The following table describes the labels in this screen. 12.4 Configuring T rusted Computers T o exclude a range of users on the LAN from content filtering on your P -660HWP-Dx, click Security > Content Filter > Tr u s t e d . The screen appears as shown. Figure 1 1 1 Content Filter[...]

Chapter 12 Content Filtering P-660HWP-Dx U ser’s Guide 72[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 13 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 13.1 Certificates Overview The P-660HWP-Dx can use certificates (also called digital IDs) to authe nticate users. Certificates are based on public -private key pairs. A certificate contains th[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 36 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List). The P-660HWP-Dx can check a peer ’ s certificate against a[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 37 Figure 1 13 Certificate Det ails 4 Use a secure method to verify that the certificate owner ha s the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connectio[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 38 13.5 My Certificates Cli ck Security > Certificates > My Certificates to open the My Certificates screen. This is the P-660HWP-Dx’ s summary list of certificates and certification requests. Certificates display in black and certification requests display in gray . Figure 1 15 Security &[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 39 13.6 My Certificates > Det ails Click Security > Certificates > My Certificates to open the My Certifica tes screen (se e Figure 1 15 on page 38 ). Click the edit icon to open the My Certificate Details screen. Y ou can use this screen to view in-depth certificate information and change[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 40 T able 71 Security > Certificates > My Certificates > Edit The following table describes the labels in this screen. T able 72 Security > Certificates > My Certificates > Details LABEL DESCRIPTION Certificate Name This field displa ys the identifying name of this certificate. I[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 41 T ype This field displays general informa ti on about the certificat e. CA-signed means that a Certification Authority signed the certificate . Self-signed means that the certificate’s owner signed the certificate (not a certification authority). “X.509” means that this certificate was cre[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 42 13.7 My Certificates > Create Click Security > Certificates > My Certificates > Create to open the My Certificate Cr eate screen. Use this screen to have the P-660HWP- Dx create a self-signed certificate, enroll a certificate with a certification authorit y or generate a certificati[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 43 The following table describes the labels in this screen. T able 73 Security > Certificates > My Certificates > Create LABEL DESCRIPTION Certificate Name T ype up to 31 ASC II characters (not including spaces) to identify this certificate. Subject Information Use these fields to record i[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 44 After you click Apply in the My Certificate Create screen, you see a screen that tells you the P-660HWP-Dx is generating the self-signe d certificate or certification request. After the P-660HWP-Dx successfully enrolls a certificate or generates a certification request or a self-signed certific[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 45 • Y ou can only import a certificate that matc hes a corresponding certification request that was generated by the P-660HWP-Dx (the certification request contains the private ke y). The certificate you import replaces the co rresponding request in the My Certificates screen. One exception is t[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 46 13.9 T rusted CAs Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the ce rtification authorities that you have set the P- 660HWP-Dx to accept as trusted. The P-660HWP- Dx accepts any valid certificate sig[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 47 13.10 T rusted CA Det ails Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. Click the edit icon to open the T rusted CA Details screen. Use this screen to view in-depth information about the certification authority’ s certificate, ch ange the certificate’ s[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 48 The following table describes the labels in this screen. T able 76 Security > Certificates > T rusted CAs > Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate . If you want to change the name, type up to 31 characters to i dentify [...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 49 13.1 1 T rusted CA > Import Click Security > Certificates > T rusted CAs to open the T rusted CAs screen and the n click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’ s certificate from a computer to the[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 50 Figure 120 Security > Certif icates > Trusted CAs > Impor t The following table describes the labels in this screen. 13.12 T rusted Remote Host s Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen. This screen displays a list of the cer[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 51 The following table describes the labels in this screen. 13.13 T rusted Remote Host s > Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen. Y ou may have peers with ce[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 52 " The trusted remote host cert ificate must be a self-signed certificate; and you must remove any sp aces from it s filename before you can import it. Figure 122 Security > Certificates > Tr usted Remote Hosts > Import The following table describes the labels in this screen. 13.14[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 53 Figure 123 Security > Certificates > Trusted Remote Hosts > Details The following table describes the labels in this screen. T able 80 Security > Certificates > T r us ted Remote Hosts > Det ails LABEL DESCRIPTION Certification Name Thi s field displays the identifyin g name of[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 54 Subject This field displays info rmation th at i dentifies the owner of the certificate, such as Common Name (CN), Organizationa l Unit (OU), Organization (O) and Country (C). Issuer Thi s field displays i dentifying in fo rmation about the default self-si gned certificate on the P-660HWP-Dx th[...]

Chapter 13 Certificates P-660HWP-Dx User’s Guide 55 13.15 Directory Servers Click Security > Certificates > Directory Servers to open the Directory Servers screen. This screen display s a summary list of directory servers (tha t contain lists of valid and revoked certificates) that have been saved into the P-660HWP-Dx. If you d ecide to hav[...]

Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 56 Figure 125 Security > Certificates > Directory Serv er > Add The following table describes the labels in this screen. T able 82 Security > Certificates > Directory Server > Add LABEL DESCRIPTION Directory Service Setting Name T ype up to 31 ASCII characters (spa ces are not pe[...]

35 P ART V Advanced S tatic Route (219) Bandwidth Management (2 23) Dynamic DNS Setup (235) Remote Management Configurat ion (239) Universal Plug-and-P lay (UPnP) (251)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 14 Static Route This chapter shows you how to c onfigure static routes for your P-660H WP-Dx. 14.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the P-660HWP-Dx has no kn owledge of the ne tworks beyond. For instance, t he P-660HWP- Dx knows abou t [...]

Chapter 14 Static Rou te P-660HWP-Dx U ser’s Guide 36 Figure 127 S tatic Route The following table describes the labels in this screen. 14.2.1 S tatic Route Edit Select a static route index numb er and click Edit ( ). The screen shown next appears. Use this screen to configure the requir ed information for a static route. T able 83 Static Route L[...]

Chapter 14 Static Route P-660HWP-Dx User’s Guide 37 Figure 128 S tatic Route Edit The following table describes the labels in this screen. T able 84 Static Ro ute Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route. Route Name Enter the name of the IP static route. L eav e this field blank to delete this[...]

Chapter 14 Static Rou te P-660HWP-Dx U ser’s Guide 38[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 15 Bandwidth Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the P-660HWP-Dx ’ s bandwidth management logs. 15.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to specify bandwidth management rules based on an applica[...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 36 Figure 129 Subnet-based Ba ndwidt h Management Example 15.4 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth classes based on a combination of a subnet and an application. The following exam ple table shows bandwidth alloca tions for application spec[...]

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 37 15.5.2 Fairness-based Scheduler The P-660HWP-Dx divides bandwidth equall y among bandwidth cl asses when using the fairness-based scheduler; thus preventing one ba ndwidth class from using all of the interface’ s bandwidth. 15.6 Maximize Bandwid th Usage The maximize bandwidth usage op[...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 38 15.6.2 Maximize Ba ndwid th Usage Exam ple Here is an example of a P-660HWP-Dx that has maximize bandwidth usage enabled on an interface. The following table shows each ba nd width class’ s bandwidth budget. The classes are set up based on subnets. The interface is set to 10240 kbps[...]

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 39 15.6.2.2 Fairness-based Allot ment of Unused and Unbudgeted Bandwid th The following table shows the amount of bandwidth that each class gets. Suppose that all of the classes except for th e administration class need more bandwidth. • Each class gets up to its budg eted bandwidth. The [...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 40 If you use V oIP and NetMeeting at the same time, the device allocates up to 500 Kbps of bandwidth to each of them befo re it allocates any bandwidth to FTP . As a result, FTP can only use bandwidth when V oIP and NetMeeting do not use all of their allocated bandwidth . Suppose you tr[...]

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 41 15.9 Bandwid th Management Rule Setup Y ou must use the Bandwidth Management Summary scr een to enable bandwi dth management on an interface before yo u can configure rules for that interface. Click Advanced > Bandwidth MGMT > Rule Setup to open the following screen. Figure 131 Ban[...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 42 15.10 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that they receive specific per- hop treatment at DiffServ-compliant network de vices along the route based on the application types and traf fic flow . Packets are marked with DiffServ Code Points (DSCPs[...]

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 43 PHB consists of two types of services: EF (Expedited Forwarding) and AF (Assured Forwarding). EF has higher p riority . EF guaran tees ser v ices with minimal loss and delay . AF has four sub-classes, each with three levels of importance (drop precedence). A high drop precedence means lo[...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 44 The following table describes the labels in this screen. T able 94 Bandwidth Management Rule Configura t ion LABEL DESCRIPTION Rule Configuration Activ e Select this check box to have the P-660 HWP-Dx apply this ba ndwidth management rule. Enable a bandwidth management rule to give tr[...]

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 45 Destination Subnet Netmask Enter the destination subnet mask. Thi s field is N/A if you do not specify a Destination Addre ss . Refer to the appendices fo r more information on IP subnetting. Destination Port Ente r the port number of the destination. See T able 95 on page 45 for some co[...]

Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 46 15.1 1 Bandwid th Monitor T o view the P-660HWP-Dx’ s bandwidth usage and allotme nts, click Advanced > Bandwidth MGMT > Mon itor . The screen appears as shown. Selec t an interface from the drop-down list box to view the bandwidth usage of its bandwidth rules . The gray secti[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 16 Dynamic DNS Setup This chapter discusses how to configure your P-660HWP-Dx to use D ynamic DNS. 16.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou can also ac[...]

Chapter 16 Dy namic DNS Se tup P-660HWP-Dx U ser’s Guide 36 Figure 135 Dynamic DNS The following table describes th e fields in this screen. T able 97 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS. Service Prov ider This i s the name of your Dynamic DNS service provider . Dynamic DNS [...]

Chapter 16 Dynamic DNS Setup P-660HWP-Dx User’s Guide 37 Dynamic DNS server auto detect IP Address Select this option only whe n there are one or more NA T routers between the P- 660HWP-Dx and the DDNS server. Th is feature has the DDNS server automatically detect and use t he IP address of the NA T rout er that has a public IP address. Note: The[...]

Chapter 16 Dy namic DNS Se tup P-660HWP-Dx U ser’s Guide 38[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 17 Remote Management Configuration This chapter provides information on config uring remote management. 17.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which P- 660HWP-Dx interface (if any) from which computers. " When you configure remote man[...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 36 17.1.1 Remote Management Limit ations Remote management over LAN or W AN will not work when: • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e client IP address. If it does not ma[...]

Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 37 The following table describes the labels in this screen. 17.3 T elnet Y ou can configure your P-660HWP-Dx for remote T elnet access as shown next. The administrator uses T elnet from a computer on a remote netw ork to access the P-660HWP-Dx. Figure 137 T e lnet Configuration [...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 38 17.4 Configuring T elnet Click Advanced > Remote MGMT > Te l n e t tab to display the screen as shown. Figure 138 Remote Mana gement: T elnet The following table describes the labels in this screen. 17.5 Configuring FTP Y ou can upload and download the P-660HWP-Dx’ s [...]

Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 39 Figure 139 Remote Mana gement: FTP The following table describes the labels in this screen. 17.6 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a member of the TCP/IP protocol suite[...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 40 Figure 140 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a managemen t software module that resid es in a managed device (the P-660HWP- Dx). An agent translates the local management information fr[...]

Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 41 17.6.2 SNMP T raps The P-660HWP-Dx will send traps to the SNMP manager when any one of the following events occurs: 17.6.3 Configuring SNMP T o change your P-660HWP-Dx’ s SNMP settings, click Advance d > Remote MGMT > SNMP . The screen appears as show n. Figure 141 Re[...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 42 The following table describes the labels in this screen. 17.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on LAN for background information. T o change yo ur P-660HWP-Dx’ s DNS settin[...]

Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 43 Figure 142 Remote Mana gement: DNS The following table describes the labels in this screen. 17.8 Configuring ICMP T o change your P-660HWP-Dx’ s security settings, click Ad vanced > Remote MGMT > ICMP . The scre en appears as shown. If an outside user attempts to prob[...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 44 Figure 143 Remote Mana gement: ICMP The following table describes the labels in this screen. 17.9 TR-069 TR-069 is a DSL Forum standa rd that defines ho w CPE (Customer Prem ise Equipment), for example your P-660HWP-Dx, can be manage d over the W AN by an Auto Configuratio n [...]

Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 45 Follow the procedure below to co nfigure your P-660HWP-Dx to be managed by CNM Access. See the Command Interpreter appendix for information on the command structure and how to access the CLI (Command Line Interface) on the P-660HWP-Dx. " In this example a.b.c.d is the IP[...]

Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 46[...]

P-660HWP-Dx User’s Guide 47 C HAPTER 18 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 18.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device [...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 48 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the P-660HWP-Dx allows multicas t messages only on the LAN. All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disabl[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 49 18.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . 18.3.1 Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove Pr og[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 50 Figure 147 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Re move Programs Pr oper ties window and click Next . 5 Restart the computer when prompted. 18.3.2 Inst alling UPnP in Windows XP Follow the steps below to install the U[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 51 Figure 149 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 150 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 18.4[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 52 Make sure the computer is co nnected to a LAN port of the P-660HWP-Dx. T urn on your computer and the P-660HWP-Dx. 18.4.1 Auto-discover Y our UPnP-enabled Network Device 1 Click start and Control Panel . Double-click Network Connections . An icon displays under Internet Gatewa[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 53 Figure 152 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings. Figure 153 Internet Connection Properties: Adva nced Settings[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 54 Figure 154 Internet Connection Proper ties: Adva nced Settings: Add " When the UPnP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically . 5 Select Show icon in noti fication area when connected option and click OK . An icon[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 55 Figure 156 Internet Connection S tatus 18.4.2 We b Configurator Easy Access W ith UPnP , you can access the web-based configurat or on the P-660HWP-Dx without finding out the IP address of the P-660HWP-Dx first. Th is comes helpful if you do not know the IP address of the P-660[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 56 Figure 157 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your P-660HWP-Dx and sel ect Invoke . The web co nfigurator login screen displays.[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 57 Figure 158 Network Connections: My Network Places 6 Right-click on the icon for your P-660H WP-Dx and select Properties . A properties window displays with basic in formation about the P-660HWP-Dx. Figure 159 Network Connections: My Networ k Places: Properties: Example[...]

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 58[...]

35 P ART VI Maintenance and T roubleshooting System (265) Logs (271) T ools (289) Diagnostic (295) T roubleshooting (297)[...]

36[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 19 System Use this screen to configure the P- 660HWP-Dx’ s time and date settings. 19.1 General Setup 19.1.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. However , because some ISPs c heck this name you s hould[...]

Chapter 19 System P-660HWP-Dx U ser’s Guide 36 Figure 160 System General Setu p The following table describes the labels in this screen. T able 107 System G eneral Setu p LABEL DESCRIPTION General Setup System Name Choose a descriptive name for identificatio n pu rposes. It is recommended you enter your computer ’s “Computer name” in this f[...]

Chapter 19 System P-660HWP-Dx User’s Guide 37 19.2 T ime Setting T o change yo ur P-660HWP-Dx’ s time and date, clic k Maintenance > System > T ime Setting . The screen appears as shown. Use this screen to configure the P-660HWP-Dx’ s time based on your local time zone. Figure 161 System T ime Setting Old Password T ype the default admi[...]

Chapter 19 System P-660HWP-Dx U ser’s Guide 38 The following table describes th e fields in this screen. T able 108 System Time Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the time of your P-660HWP-Dx. Each time you reload this page, the P- 660HWP-Dx synchronizes the time with the time server . Current Date [...]

Chapter 19 System P-660HWP-Dx User’s Guide 39 St a r t D a t e Con figure the day and time when Dayli ght Saving Time st arts if you selected Enable Daylight Saving . The o' clock field uses the 24 ho ur format. Here are a couple of examples: Daylight Saving T ime start s in most parts of the United St ate s on the first Sund ay of April. Ea[...]

Chapter 19 System P-660HWP-Dx U ser’s Guide 40[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 20 Logs This chapter contains informa tion about configuring general log settings and viewing the P- 660HWP-Dx’ s logs. Refer to the appendix for example log message explanations. 20.1 Logs Overview The web confi gurator allows you to choose which categories of events and/or alerts to have the P-660HWP-Dx lo[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 36 Figure 162 Vi ew Log The following table describes th e fields in this screen. 20.3 Configuring Log Settings Use the Log Settings screen to configure to where the P-660HWP-Dx is to send logs; the schedule for when the P-660HWP-Dx is to send the logs and which lo gs and/or immedia te alerts the P-660HWP[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 37 Figure 163 Log Settings The following table describes the fields in this screen. T able 1 10 Log Settin gs LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below . If this field is left blank, logs and alert [...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 38 20.3.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. • The date format here is Day-Month-Y ear . • The date format here is Month-Day-Y ear [...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 39 Figure 164 E-mail Log Example 20.4 Log Descriptions This section provides descriptio ns of example log messages. Subject: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1| Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 [...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 40 Starting Connectivity Monitor S tarting Connectivity Monitor . Time initialized by Daytime Server The router got the time and da te from the Daytime serve r . Time initialized by Time server The router got the time and date from the time server . Time initialized by NTP server The router got the time a[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 41 Triangle route packet forwarded: [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall allowe d a triangle route sessi on to pass through. Packet without a NAT table entry blocked: [TCP | UDP | IGMP | ESP | GRE | OSPF] The router blocked a packet that didn't h ave a corresponding NA T table entry . R[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 42 T able 1 16 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default pol icy and was blocked or forwarded according to the user's setting. For type and code d etails, see T able 127 on page 50 . Firew[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 43 T able 1 19 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can p ass throu gh the firewall . T able 120 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: Keyword blocking The conte nt of a requested web page matched a user defined keyword. %s: Not in trusted web list The web[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 44 T able 121 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TCP/ UDP/IGMP/ESP/GR E/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detected an ICMP attack. For type and code details, see T able 127 on page 50 . land [TCP | UDP | IGMP | ES[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 45 Rule <%d> idle time out, disconnect The router droppe d a connection that had outbound tra ffic and no inbound traffic for a certain time perio d. Y ou can use the "ipsec timer chk_conn" CI command to set the ti me period. The d efault value is 2 minutes. WAN IP changed to <IP> Th[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 46 Recv <packet> IKE uses ISAKMP to transmit dat a. Each ISAKMP packet contains many different types of payloads. All of them show in the LOG . Refer to RFC2408 – ISAKMP for a list of all ISAKMP payload types. Recv <Main or Aggressive> Mode request from <IP> The router received an IKE [...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 47 Rule [%d] Phase 1 authentication method mismatch The listed rule’s IKE phase 1 authentication metho d did not match between the router and the peer. Rule [%d] Phase 1 key group mismatch The listed rule’s IKE phase 1 key group did not match between the router a nd the peer. Rule [%d] Phase 2 protoco[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 48 T able 124 PKI Logs LOG MESSAGE DESCRIPTION Enrollment successful The SCEP online certificate enrollment was successful. The Destination field records the certific ation autho rity server IP address and port. Enrollment failed The SCEP online certificate enro llment failed. The Destination fi eld recor[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 49 T able 125 Certificate Path Verification Failure Reason Codes CODE DESCRIPTION 1 Algorithm mismatch between the cert ificate and the search constraints. 2 Key usage mismatch between the cert ificate and the search co nstraints. 3 Certificat e was not valid in the time interval. 4 (Not used) 5 Certifica[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 50 T able 127 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fra gmentation was dropped because it was set to Don't Fragment (DF) 5 Source route failed 4[...]

Chapter 20 Lo gs P-660HWP-Dx User’s Guide 51 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type. T able 128 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon dd hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstIP:ds[...]

Chapter 20 Logs P-660HWP-Dx U ser’s Guide 52[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 21 Tools This chapter describes how to up load new firmware, man a ge configuration and restart your P- 660HWP-Dx. 21.1 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, "P-660HWP-Dx.bin". The upload process uses H[...]

Chapter 21 Tools P-660HWP-Dx U ser’s Guide 36 1 Do NOT turn off the P-660HWP-Dx while firmware upload is in p rogress! After you see the Firmware Upload in Pr ogress screen, wait two minutes before logging into the P-660HWP-Dx again. Figure 166 Firmware Uplo ad In Progres s The P-660HWP-Dx automatically restarts in this time causing a temporary n[...]

Chapter 21 Tools P-660HWP-Dx User’s Guide 37 Figure 168 Error Message 21.2 Configuration Screen Use this screen to manage your the co nfiguration settings o n your de vice. 21.2.1 Backup Configuration Click Maintenance > T ools > Configuration . Information related to factory defaults, backup configuration, and rest oring configuration appe[...]

Chapter 21 Tools P-660HWP-Dx U ser’s Guide 38 21.2.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your P-660HWP-Dx. 1 Do not turn off the P-660HWP-Dx whil e configuration file upload is in progress After you see a “Restore Configuration successful” screen, [...]

Chapter 21 Tools P-660HWP-Dx User’s Guide 39 Figure 171 T e mporarily Disconnected If you uploaded the default co nfiguration file you may ne ed to change the IP address of your computer to be in the sam e subnet as that of the default P-660HWP-Dx IP address (192.168.1.1). See the appendix for details on how to set up your computer ’ s IP addre[...]

Chapter 21 Tools P-660HWP-Dx U ser’s Guide 40[...]

P-660HWP-Dx User’s Guide 41 C HAPTER 22 Diagnostic These read-only screens display information to help you identify problems with the P- 660HWP-Dx. 22.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 174 Diagnostic: General The following table describes th e fields in this screen. T able 133 Diagnos tic[...]

Chapter 22 Diagnostic P-660HWP-Dx U ser’s Guide 42 22.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen shown next . Figure 175 Diagnostic: DSL Line The following table describes th e fields in this screen. T able 134 Diagnos tic: DSL Line LABEL DESCRIPTION AT M S t a t u s Click this button to view A TM sta[...]

P-660HWP-Dx User’s Guide 35 C HAPTER 23 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • P-660HWP-Dx Access and Login • Internet Access • Powerline Issues 23.1 Power , Hardware Connectio[...]

Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 36 23.2 P-660HWP-Dx Access and Login V I forgot the IP address for the P-660HWP-Dx . 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP addre ss of the P-660HWP-Dx by looking u p the IP address of the default gatewa y for your[...]

Chapter 23 Trou bleshooting P-660HWP-Dx User’s Guide 37 5 Reset the device to its factory defaults, and try to access the P-660HWP-Dx with the default IP address. See Section 2.3 on page 46 . 6 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns. Advanced Suggestions • T ry to access t[...]

Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 38 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1.4 on page 37 . 2 If your ISP gave you Internet connection information, make sure you entered it correctly in the Network > WA N > Internet Connection screen. [...]

Chapter 23 Trou bleshooting P-660HWP-Dx User’s Guide 39 Advanced Suggestions • Check the settings for ba ndwidth management. If it is disab led, you might consider activating it. If it is enab led, you might consider changing the allocations. 23.4 Powerline Issues V I cannot st art my powerline device. 1 Check your power supply . Powerline adap[...]

Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 40 4 A void wiring that is old, low quality or with a long wiring path, as this may affect the quality of your powerline signal.[...]

35 P ART VII Appendices and Index Product Specifications and W all Mounting (305) W ireless LANs (31 1) Internal SP TGEN (325) Setting up Y our Computer ’ s IP Address (341) IP Subnetting (357) Command Interpreter (365) Firewall Commands (369) Pop-up W indows, JavaScripts and Java Permissions (375) NetBIOS Filter Commands (381) T riangle Route (3[...]

36[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX A Product S pecifications and W all Mounting Product S pecifications The following tables summarize the P-660HWP -Dx’ s hardware and firmware features.M4 T able 135 Hardware Specifications Dimensions (W x D x H) 250 x 170 x 36 mm Power S pecification Input: 100~240 V AC, 50 -60 Hz Output: 12V AC 1A Built-in[...]

Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 36 Firmware Upgrade Downlo ad new firmware (when available) from the ZyXEL web site and use the web config urator , an FTP or a TFTP tool to put it on the P- 660HWP-Dx. Note: Only upload firmware for your specific model! Configuration Backup & Restoration Make a co[...]

Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 37 T able 137 Wireless Firmware Specifications Content Filter The P-660HWP-Dx blocks or allows access to web site s that you specify and blocks access to web sites with URLs tha t contain keywords that you specify . Y ou can define time periods and days du ring which con[...]

Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 38 The following list, which is not exhaustive, illustrates the standard s su pported in the P- 660HWP-Dx. Output Power Management Th is allows you to alter the level of power used by the P-660HW P-Dx. For example, when access points ar e placed closely together power [...]

Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 39 W all-mounting Instructions Complete the following step s to hang your P-660HWP-Dx on a wall. " See the Hardware S pecifications table for the s ize of screws to use and how far ap art to place them. 1 Select a high position on a sturdy wa ll that is free of obst[...]

Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 40 Figure 176 W all-mounting Example The following are dimension s of an M4 tap screw and maso nry plug used for wall mounting. All measurements are in millimeters (mm). Figure 177 Masonry Plug and M4 T ap Screw[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX B W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C). An y time two or more wir[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 36 Figure 179 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 37 Figure 180 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice of channels (for your region) so you should use a dif ferent channel th an an adjacent AP (acces[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 38 Figure 181 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages for[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 39 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to signal tha[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 40 W ireless security methods available on the P-66 0HWP-Dx are data encryption, wirele ss client authentication, restricting access by devi ce MAC address and hiding the P-660HWP-Dx identity . The following figure shows th e relative effectiveness of th ese wireless security methods available on[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 41 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and the network R[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 42 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the identity of ea[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 43 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS server . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature is enabled, i[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 44 Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. WP A and WP A2 use Advanced Encryption S tandard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol (C[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 45 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyssey client[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 46 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them. Figure 183 WP A(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other secur ity parameters you should configure for each Authentication Method/ key man[...]

Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 47 Positioning the antennas properly increases the range and coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11 b) or 5GHz(IEEE 802.1 1a) is needed to communicate efficiently in a wireless LAN. Radiation Pattern A radiation patter[...]

Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 48 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenn a down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. Fo[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX C Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menu s for your product may differ . Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for effic[...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 36 " DO NOT alter or delete a ny field except parameters in the Input column. This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menu s for your product may differ . Internal SPTGEN File Modification - Importa[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 37 Figure 187 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your P-660HWP-Dx. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter " bin &q[...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 38 Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. T able 143 Abbreviations Used in the Example Intern al SPTGEN Screens Table ABBREVIA TION MEAN ING FIN Field Identification Number FN Field Name PV A Parameter V alues Allowed INPUT An e xample of what you m[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 39 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of C lient IP Pool = 32 30200004 = Primary D NS Server = 0.0.0.0 30200005 = Secondary DNS Server = [...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 40 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol filters Set 4 = 256 30201010 = IP Alias #1 Outgoing protocol filters Set 1 = 256 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filter[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 41 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encapsulation <2(PPPOE) | 3(RFC 1483)| 4(PPPoA )| 5(ENET ENCAP)> = 2 40000005 = Multiplexing <1(LLC-based) | 2(VC-based) = 1 40000006 = VPI # = 0 [...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 42 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 40000033= Nailed-up Connection <0(No) |1(Yes)> = 0 T able 146 Menu 4 Internet Access Setup (continued) T able 147 Menu 12 / Menu 12.1.1 IP[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 43 150000004 = SUA Server #2 Por t Start = 0 150000005 = SUA Server #2 Por t End = 0 150000006 = SUA Server #2 Loc al IP address = 0.0.0.0 150000007 = SUA Server #3 Act ive <0(No) | 1(Yes)> = 0 150000008 = SUA Server #3 Pro tocol <0(All)|6(T CP)|17(U DP)> = 0 150000009 = SUA Server[...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 44 150000038 = SUA Server #9 Pro tocol <0(All)|6(T CP)|17(U DP)> = 0 150000039 = SUA Server #9 Por t Start = 0 150000040 = SUA Server #9 Por t End = 0 150000041 = SUA Server #9 Loc al IP address = 0.0.0.0 150000042 = SUA Server #10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 45 210101009 = IP Filter Set 1,Rule 1 Src Subnet Mask = 0 210101010 = IP Filter Set 1,Rule 1 Src Port = 0 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Set 1,Rule 1 Act Match <1(check next)|2(forward)| 3[...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 46 FIN FN PVA INPUT 210201001 = IP Filter Set 2, Rule 1 Type <0(none)|2(TCP/ IP)> = 2 210201002 = IP Filter Set 2, Rule 1 Active <0(No)|1(Yes)> = 1 210201003 = IP Filter Set 2, Rule 1 Protocol = 6 210201004 = IP Filter Set 2, Rule 1 Dest IP address = 0.0.0.0 210201005 = IP Filter S[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 47 210202009 = IP Filter Set 2, Rule 2 Src Subnet Mask = 0 210202010 = IP Filter Set 2,Rule 2 Src Port = 0 210202011 = IP Filter Set 2, Rule 2 Src Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 0 210202013 = IP Filter Set 2, Rule 2 Act Match <1(check next)|2(forward)[...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 48 230400002 = ReAuthentication Timer (in second) = 555 230400003 = Idle Timeout (in second) = 999 230400004 = Authentication Databases <0(Local User Database Only) |1(RADIUS Only) |2(Local,RADIUS) |3(RADIUS,Local)> = 1 230400005 = Key Management Protocol <0(8021x) |1(WPA) |2(WPAPSK)&[...]

Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 49 Command Examples The following are example Internal SP TGEN screens associated with the P-660HWP-Dx’ s command interpreter commands. T able 153 Command Examples FIN FN PV A INPUT /ci command (for annex a): wan adsl openc md FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.413 )|2([...]

Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 50[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX D Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your c[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 36 Figure 189 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter: 1[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 37 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP address, s[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 38 Figure 191 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click A[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 39 Figure 192 Windows XP: S t art Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 193 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 40 Figure 194 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 195 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Pr operti[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 41 Figure 196 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP a[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 42 Figure 197 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS server address automatically if yo u do not know your DNS server IP address(es). • If you know your DNS serv[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 43 Figure 198 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W indows 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections w indow [...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 44 Figure 199 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 200 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the follo[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 45 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your P-660HWP-Dx in the Router address box. 5 Close the TCP/IP Contr ol Panel . 6 Click Save if prompted, to save chan ges to your configurat[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 46 Figure 202 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 47 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and cl[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 48 • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click S tatically set IP Addresses and fill in the Address , Sub net mask , and Default Gateway Addres[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 49 Figure 207 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 • If you have a static IP address, enter static in t he BOOTPROTO= field. T ype IPADDR = followed by the IP address (in do tted decimal notation) and type NETMASK = followed by the subnet mask. The f[...]

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 50 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 21 1 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.23.19.129 B cast:172.23.19.255 Mas[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX E IP Subnetting This appendix introduces addresses, IP address class es and subnet masks. Introduction to IP Addresses An IP address is made up of four octets, written in dotted decimal notation (for example, 192.168.1.1). An o ctet is an 8-digit binary number . Therefore, each octet has a possible range o f [...]

Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 36 IP Address Classes and Network ID The value of the first octet of an IP ad dress determines the class of an address. • Class A address es have a 0 in the leftmost bit. • Class B address es have a 1 in the leftmost bit and a 0 in the next leftmost bit. • Class C addresses start with 1 1 0[...]

Appendix E IP Subne tting P-660HWP-Dx User’s Guide 37 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, fo llowed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a con[...]

Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 38 " In the following chart s, shaded/bolded last oc tet bit values indicate host ID bit s “borrowed” to make network ID bit s. The number of “borrowed” host ID bit s determines the number of subnets you can hav e. The remaining number of host ID bit s (after “borrowing”) dete rm[...]

Appendix E IP Subne tting P-660HWP-Dx User’s Guide 39 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a clas s “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to giv e four possible combinations (00, 01, 10 [...]

Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 40 Example Eight Subnet s Similarly use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning. Subnetting With Class[...]

Appendix E IP Subne tting P-660HWP-Dx User’s Guide 41 4 255.255.240.0 (/20) 16 4094 5 255.255.248.0 (/21) 32 2046 6 255.255.252.0 (/22) 64 1022 7 255.255.254.0 (/23) 128 510 8 255.255.255.0 (/24) 256 254 9 255.255.255.128 (/2 5) 512 126 10 255.255.255.192 (/2 6) 1024 62 11 255.255.255.224 (/2 7) 2048 30 12 255.255.255.240 (/2 8) 4096 14 13 255.25[...]

Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 42[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX F Command Interpreter The following describes how to u se the command interpreter . Y o u can telnet to access the CLI (Command Line Interface) on th e P-660HWP-Dx. See the includ ed disk or zyxel.com for more detailed informatio n on these commands. 1 Use of undocumented commands or misconfiguration can dama[...]

Appendix F C ommand Interpreter P-660HWP-Dx U ser’s Guide 36 Log Commands This section provides some general examples of how to use the log commands. The items that display with your device may vary but the basic function should be the same. Go to the command in terpreter interface. Configuring What Y ou W ant the P-660HWP-Dx to Log 1 Use the sys[...]

Appendix F Command Interpreter P-660HWP-Dx User’s Guide 37 • Use the sys logs display [log category] comm and to show the logs in an individual P- 660HWP-Dx log categ ory . • Use the sys logs clear command to erase all of the P-660HWP-Dx’ s logs. Log Command Example This example shows how to set the P-660HWP-D x to record the access logs an[...]

Appendix F C ommand Interpreter P-660HWP-Dx U ser’s Guide 38[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX G Firewall Commands The following describes the firewall commands. T able 168 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall SetUp config edit firewall active <yes | no> This command turns the firewall on or off. config retrieve firewall This c ommand return s the previously saved firewall se t[...]

Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 36 Edit E-mail config edit firewall e-ma il mail-server <ip address of mail server> This command set s the IP address to which the e-mail messages are sent. config edit firewall e-mail return-addr <e-mail address> This command sets the source e-mail address of the firewall e-mails[...]

Appendix G Firewall Commands P-660HWP-Dx User’s Guide 37 config edit firewall attack minute-high <0-255> This command sets the threshold rate of new half-open sessions per min ute where the P- 660HWP-Dx starts deleting old half-opened sessions until it gets them down to the minute-low threshold . config edit firewall attack minute-low <0[...]

Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 38 Config edit firewall set <set #> tcp-idle-timeout <seconds> This command sets how long P-660HWP-Dx lets an inactive TCP connection remai n open before considering it closed. Config edit firewall set <set #> log <yes | no> This command sets whether or not the P- 660H[...]

Appendix G Firewall Commands P-660HWP-Dx User’s Guide 39 config edit firewall set <set #> rule <rule #> destaddr- single <ip address> This command sets the rule to have the P- 660HWP-Dx check for traf fic with this individual destination add ress. config edit firewall set <set #> rule <rule #> destaddr- subnet <ip[...]

Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 40 config delete firewall set <set #> rule<rule #> This command removes th e specified rule in a firewall co nfiguration se t. T able 168 Firewall Commands (continued) FUNCTION COMMAND DESCRIPTION[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX H Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are u sed here. Screens for other In[...]

Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 36 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have ena bled. Figure 215 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Exceptions A[...]

Appendix H Pop-up Windows, JavaScripts and Java Per m issions P-660HWP-Dx User’s Guide 37 Figure 216 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocke d) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites [...]

Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 38 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer , click T ools , Intern[...]

Appendix H Pop-up Windows, JavaScripts and Java Per m issions P-660HWP-Dx User’s Guide 39 Figure 219 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that[...]

Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 40 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 221 Java (Sun)[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX I NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-up services such as PPPoE or PP TP , NetBIOS packets [...]

Appendix I NetBIOS Filter Commands P-660HWP-Dx U ser’s Guide 36 The filter types and their defa ult settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <ty pe> <on|off> where T able 169 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN and W AN This field displays whether NetBIOS p[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX J T riangle Route The Ideal Setup When the firewall is on, your P-660 HWP-Dx act s as a se cure gateway between your LAN and the Internet. In an ideal network topology , a ll incoming and outgoing network traf fic passes through the P-660HWP-Dx to pro tect your LAN agains t attacks. Figure 222 Ideal Setup The[...]

Appendix J Triangle Route P-660HWP-Dx U ser’s Guide 36 Figure 223 “T riangle Route” Prob lem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Y our P-660HWP-Dx suppor[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX K Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical [...]

Appendix K Legal In formation P-660HWP-Dx U ser’s Guide 36 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna. 2 In[...]

Appendix K Legal Information P-660HWP-Dx User’s Guide 37 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have i[...]

Appendix K Legal In formation P-660HWP-Dx U ser’s Guide 38[...]

P-660HWP-Dx User’s Guide 35 A PPENDIX L Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it. “+” is[...]

Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 36 • Re g u l a r Ma i l: ZyXEL Communications, C zech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.dk • Re g[...]

Appendix L Customer Support P-660HWP-Dx User’s Guide 37 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91-1 1-30888153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l a r Ma i l : India - ZyXEL T echnology Indi a Pvt Ltd. , I I - Fl o o r, F[...]

Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 38 • Re g u l ar M a i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u l a r M a i l: Z[...]

Appendix L Customer Support P-660HWP-Dx User’s Guide 39 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g u l ar M ai l : ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: support@zyxel.c[...]

Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 40[...]

Index P-660HWP-Dx User’s Guide 35 Index A AAL5 82 access point see AP address assignment 100 Address Resolution Protocol see ARP ADSL standards 36 ADSL line reinitialize 296 ADSL standards 36 Advanced Encryption St andard See AES. AES 320 alerts 271 ALG 146 alternative subnet mask notation 359 antenna directional 323 gain 323 omni-directional 323[...]

Index P-660HWP-Dx U ser’s Guide 36 upload 293 configuration text file 325 connection failure 307 contact information 389 content filtering 191 categories 191 schedule 192 trusted comp uters 193 URL keywor d blocking 191 Continuous Bit Rate see CBR copyright 385 CoS 230 CTS (Clear to Send) 314 custom ports creating / editing 178 customer support 3[...]

Index P-660HWP-Dx User’s Guide 37 alerts 172 anti-probing 185 commands 369 creating/editing rules 175 custom ports 178 enabling 172 firewall vs filters 167 guidelines for enhancing securi ty 166 introduction 158 LAN to W AN rule s 172 policies 169 rule checklist 170 rule configuration ke y fields 171 rule logic 170 rule security ramifications 170[...]

Index P-660HWP-Dx U ser’s Guide 38 action 127 MAC address filtering 12 7 MAC filter 127 maintenance 291 Management Information Base see MIB management server 307 managing the device good habits 37 using FTP . See FTP . using T e lnet. See command interface. using the command interface. See command interface. maximize bandwidth usage 225 Maximum B[...]

Index P-660HWP-Dx User’s Guide 39 Q quick start guide 43 R RADIUS 316 message types 317 messages 317 shared secret key 317 RADIUS server 11 4 reboot 293 registration product 387 related documentation 3 remote management and NA T 240 remote management limitations 240 reset 293 reset button 46 resetting the ZyXEL device 46 restart 289 , 293 restore[...]

Index P-660HWP-Dx U ser’s Guide 40 system errors 271 system name 265 , 266 System Parameter T able Generator see SPTGEN system restart 293 system timeout 240 T TCP maximum incomplete 187 TCP security 164 TCP/IP 159 , 160 , 341 TCP/IP address 295 teardrop 160 Te l n e t 73 , 241 temperature 305 T emporal Key Integrity Protocol (TKIP) 320 TFTP rest[...]

Index P-660HWP-Dx User’s Guide 41 wireless networks channel 111 encryption 11 4 MAC address filter 11 3 security 11 2 SSID 111 wireless security 11 2 , 315 wizard icon 59 WLAN interference 313 security parameters 322 world wide web 240 WP A 319 key caching 320 pre-authentication 320 user authentication 320 vs WP A-PSK 320 wireless client supplica[...]

Index P-660HWP-Dx U ser’s Guide 42[...]