Manuale d’uso / di manutenzione del prodotto P-334U del fabbricante ZyXEL Communications
Vai alla pagina of 335
P-334U/P-335U 802.1 1a/g Wireless Router User ’ s Guide V ersi on 3.60 Edition 2 1 1/2006.
.
P-334U/P-335U User’s Guide Copyright 3 Copyright Copyright © 2006 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribe.
P-334U/P-335U User’s Gu ide 4 Certifications Certifications Federal Communications Commissi on (FCC) Interference St atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference.
P-334U/P-335U User’s Guide Certifications 5 者均不得擅自變更頻率、加大功 率或變更原設計之特性及功能。 第十四條 低功率 射頻電機之使用不得影響飛航安全.
P-334U/P-335U User’s Gu ide 6 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
P-334U/P-335U User’s Guide ZyXEL Limited Warranty 7 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
P-334U/P-335U User’s Gu ide 8 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice.
P-334U/P-335U User’s Guide Customer Support 9 POLAND info@pl.zyxel.com +48 (22) 333 82 50 www .pl.zyxel.com ZyXEL Communications ul. Okrzei 1A 03-715 W arszawa Poland +48 (22) 333 8251 RUSSIA http://zyxel.ru/support +7-095-542-89-29 www .zyxel.ru Zy XEL Russia Ostrovityanova 37a S tr .
P-334U/P-335U User’s Gu ide 10 Customer Suppo rt.
P-334U/P-335U User’s Guide Table of Contents 11 T able of Content s Copyright .................................................. ................................................................ 3 Certifications ......................................
P-334U/P-335U User’s Gu ide 12 Table of Contents Chapter 3 Connection Wizard ........................................................ ......................................... 49 3.1 Wizard Setup ... ............. ................ ............. ....
P-334U/P-335U User’s Guide Table of Contents 13 4.5 MAC Filter ....... ................ ............. ............. ............. ................ ............. ............. ..81 4.6 Wireless LAN Advanced Screen ...................... .............
P-334U/P-335U User’s Gu ide 14 Table of Contents Chapter 9 Network Address T ranslation (NA T) ............................ ....................................... 11 5 9.1 NA T Ov erview ................. ............. ............. ...............
P-334U/P-335U User’s Guide Table of Contents 15 Chapter 13 IPSec VPN ................................................................................. ............................ 139 13.1 IPSec VPN Ov erview ............ ............. .............
P-334U/P-335U User’s Gu ide 16 Table of Contents 15.2 Application-based Band width Management ............... ............. ................ ....... 173 15.3 Subnet-based Bandwidth Management ............ ................ ............. .............
P-334U/P-335U User’s Guide Table of Contents 17 Chapter 18 Print Server ............................................... ..................................................... ....... 199 18.1 Print Server Overview ..... ............. ............. ..
P-334U/P-335U User’s Gu ide 18 Table of Contents 24.5 Problems with Restricted Web Pages and Keyword Blocking ............. .......... 233 24.5.1 Pop-up Windows, JavaScripts a nd Java Permissions ................ .......... 235 24.5.1.1 Internet Explorer Pop-up Blockers .
P-334U/P-335U User’s Guide 19 List of Figures Figure 1 Secure Internet A ccess via Cable or DSL Modem ... ................ ................ ............. 32 Figure 2 WLAN Application Example .............. ... ............. ................ ........
P-334U/P-335U User’s Gu ide 20 Figure 37 Wireless: WP A-PSK/ WP A2-PSK ........ ................. ............ .......................... .......... 74 Figure 38 Wireless: WP A/W P A2 ........ ............. ................ ................ ........
P-334U/P-335U User’s Guide 21 Figure 80 Content Filt er: Filter ..................... ............. ............. ................ ............. ................ 13 4 Figure 81 Content Filt er: Sc hedule .... ................ ................. .....
P-334U/P-335U User’s Gu ide 22 Figure 123 Add Printer Help ............ ............. ................ ................ ............. ................ .......... 207 Figure 124 Add Printer Wizard: Welcome ................. ................ .........
P-334U/P-335U User’s Guide 23 Figure 166 Windows 95/98/Me: TCP/IP Properti es: IP Address .................. ............. .......... 257 Figure 167 Windows 95/98/Me: TCP/IP Properti es: DNS Configuration .................. .......... 258 Figure 168 Windows XP: St art Menu .
P-334U/P-335U User’s Gu ide 24.
P-334U/P-335U User’s Guide 25 List of T ables T able 1 Front Panel LEDs .............. ................ ............. ................ ................ ............. .......... 35 T able 2 S tatus Screen Icon Key ..... ................ .............
P-334U/P-335U User’s Gu ide 26 T able 37 Advanced LAN .... ............. ................ ................ ............. ................ ................ ....... 108 T able 38 DHCP Server General ........ ................ ................. ........
P-334U/P-335U User’s Guide 27 T able 80 Maintenance Firmware Up load .. ................ ............. ................ ............. ............. ... 223 T able 81 Maintenance Restore Configuration .................... ................ ...........
P-334U/P-335U User’s Gu ide 28 T able 123 Content Filtering Logs .......................... ................ ................ ................ ............. 297 T able 124 Attack Logs ................. ............. ................ ............. ..
P-334U/P-335U User’s Guide Preface 29 Preface Congratulations on your p u rchase of the P-334U or P-335U 802.1 1a/g W ireless Router . This manual is designed to gu ide you through the config uration of your P-334U or P-335U fo r its various applications .
P-334U/P-335U User’s Gu ide 30 Pref ace • The P-334U or P-335U series may be referre d to as the “ZyXEL Device” in this User ’ s Guide. Graphics Icons Key ZyXEL Device Computer Notebook comp.
P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Devi ce 31 C HAPTER 1 Getting to Know Y our ZyXEL Device This chapter introduces the main features and applications of the ZyXEL Device.
P-334U/P-335U User’s Gu ide 32 Chapter 1 Getting to Know Your ZyXEL Device The ZyXEL Device guarantees not only high sp eed Internet acces s, but secure internal network protection an d traffic management as well.
P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device 33 1.2.3 Print Server and Router Combin ed Application (P-335U Only) The P-335U’ s built-in prin t server allows your network’ s comp uters to share a printer . Simply connect a USB printer to the USB port on the ZyXEL Device.
P-334U/P-335U User’s Gu ide 34 Chapter 1 Getting to Know Your ZyXEL Device 1.4 Good Habit s for Managing Y our ZyXEL Device Here are some things you should do regularly . • Change the password. Use a password that’ s not easy to guess and that consists of different types of characters, such as numbers and letters.
P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device 35 The following table describes the LEDs. Table 1 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR Green On The ZyXEL Device is receiving power and functionin g properl y . Blinking T he ZyXEL Device is performing testing.
P-334U/P-335U User’s Gu ide 36 Chapter 1 Getting to Know Your ZyXEL Device.
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 37 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access the ZyX EL Device web configurator and provides an overview of its screens.
P-334U/P-335U User’s Gu ide 38 Chapter 2 Introducing the Web Configurator Figure 7 Change Password Screen Note: The management session automatically time s out when the time period set in the Administrator Inactivity T imer field expires (default five minutes).
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 39 Figure 8 Web Configur ator S tatus Scre en The following table describ es the icons shown in the St a t u s screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the dro p-down list box to have the web configurat or display in that language.
P-334U/P-335U User’s Gu ide 40 Chapter 2 Introducing the Web Configurator The following table describes the labels shown in the St a t u s screen. Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics.
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 41 2.4.1 Navigation Panel After you enter the password, us e the sub-menu s on the navigation panel to configure ZyXEL Device featur es. - CPU Usage This number shows how many kilob ytes of the heap memory the ZyXEL Device is using.
P-334U/P-335U User’s Gu ide 42 Chapter 2 Introducing the Web Configurator The following table describes the sub-menus. Table 4 Screens Summary LINK TA B FUNCTION S tatus This screen shows the ZyXEL Device’s general device, system and interface status information.
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configur ator 43 2.4.2 Summary: Bandwid th Management Monitor Select the BW MGMT Monitor (Details...) hyperlink in St a t u s screen. V iew the bandwidth usage of the W AN configured bandwidth rul es.
P-334U/P-335U User’s Gu ide 44 Chapter 2 Introducing the Web Configurator Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP T able DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server .
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 45 2.4.4 Summary: Packet St atistics Click the Packet S tatistics (Details...) hyperlink in the St a t u s screen. Read-only information here includes port status and packet specific st atistics.
P-334U/P-335U User’s Gu ide 46 Chapter 2 Introducing the Web Configurator 2.4.5 VPN Monito r Click VPN Monitor (Details...) hyperlink in the St a t u s screen. This screen displays read-only information about the ac tive VPN connections. A Security As sociation (SA) is the group of security settings related to a specific VPN tunnel.
P-334U/P-335U User’s Guide Chapter 2 Introdu cing the Web Configurator 47 Figure 14 Summary: Wireless Association List The following table describes the labels in this screen. T able 7 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station.
P-334U/P-335U User’s Gu ide 48 Chapter 2 Introducing the Web Configurator.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 49 C HAPTER 3 Connection W izard This chapter provides informa tion o n the W izard setup screens in the web configurato r . 3.1 Wizard Setup The web confi gurator ’ s W izard setup helps you co nfigure your device to access the Internet.
P-334U/P-335U User’s Gu ide 50 Chapter 3 Connection Wizard Figure 16 Select a Languag e 4 Read the on-screen in formation and click Next . Figure 17 Welcome to the Con nection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 51 3.2.2 Domain Name The Domain Name entry is what is propagated to th e DHCP clients on the LAN.
P-334U/P-335U User’s Gu ide 52 Chapter 3 Connection Wizard Figure 19 Wizard S tep 2: Wireless LAN The following table describes the labels in this screen. Table 9 Wizard S tep 2: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII character s) for the wireless LAN.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 53 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encr yption parameters. Figure 20 Wizard S tep 2: Basic(WEP) Security The following table describes the labels in this screen.
P-334U/P-335U User’s Gu ide 54 Chapter 3 Connection Wizard 3.3.2 Extend(WP A-PSK or WP A2-PSK) Secu rity Choose Extend(WP A-PSK) or Extend(WP A2-PSK) security in the W ireless LAN setup screen to set up a Pr e-Shared Key . Figure 21 Wizard S tep 2: Extend(WP A- PSK or WP A2-PSK) Security The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 55 3.3.3 OTIST The following screen allows you to enable ZyXEL Device One-T ouch Intelligent Security T echnology (OTIST).
P-334U/P-335U User’s Gu ide 56 Chapter 3 Connection Wizard 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Devic e of fers three Internet connection types. They a re Ethernet , PPP over Ethernet or PP TP . The wizard attempts to detect whic h W AN connection type y ou are using.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 57 Figure 24 Wizard S tep 3: Ethernet Connection 3.4.2 PPPoE Connection Point-to-Point Protocol ov er Ethernet (PPPoE) function s as a dial-up connection.
P-334U/P-335U User’s Gu ide 58 Chapter 3 Connection Wizard Figure 25 Wizard S tep 3: PPPoE Connection The following table describes the labels in this screen. T able 14 Wizard S tep 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access Connection T ype Select the PPP over Ethernet option for a dial-up connection.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 59 Figure 26 Wizard S tep 3: PPTP Connection The following table describes the fields in this screen Table 15 Wizard S tep 3: PPTP Connection LABEL DESCRIPTION ISP Parameters fo r Internet Access Connection T ype Select PPTP from the drop-down list box.
P-334U/P-335U User’s Gu ide 60 Chapter 3 Connection Wizard 3.4.4 Y our IP Address The following wizard screen allows you to a ssign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on y our ISP .
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 61 Y ou can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small or ganization an d your Internet access is through an ISP , the ISP can provide you with the Intern et addresses for your local networks.
P-334U/P-335U User’s Gu ide 62 Chapter 3 Connection Wizard 1 The ISP tells you the DNS server addresses, usua lly in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the W izard and/or WA N > Internet Connection screen.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 63 3.4.9 W AN MAC Address Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02.
P-334U/P-335U User’s Gu ide 64 Chapter 3 Connection Wizard The following table describes the fields in this screen. T able 20 Wizard S tep 3: W AN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assign ed default MAC address.
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard 65 3.6 Connection Wizard Complete Click Apply to save your configuration. Figure 31 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup.
P-334U/P-335U User’s Gu ide 66 Chapter 3 Connection Wizar d.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 67 C HAPTER 4 W ireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more detailed information ab out wireless networks. 4.
P-334U/P-335U User’s Gu ide 68 Chapter 4 Wireless LAN • Every wireless client in the same wirel ess network must use security compatible with the AP . Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 69 For wireless networks, there are two typical plac es to store the user names and passwords for each user . • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server u sed in businesses mo re than in homes.
P-334U/P-335U User’s Gu ide 70 Chapter 4 Wireless LAN Note: It is recommended that wireless networks u se WP A-PSK , WP A , or stronger encryption. IEEE 802.1x and W E P encryption are better than none at all, bu t it is still possible for unauthori zed devices t o figure out the original informat ion pretty quickly .
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 71 Figure 34 Wireless General The following table describes the general wireless LAN labels in this screen. Table 23 Wireless General LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN.
P-334U/P-335U User’s Gu ide 72 Chapter 4 Wireless LAN Note: If you do not enable an y wireless security on your ZyXEL Device, your network is accessible to any wireless network ing device tha t is within range. Figure 35 Wireless: No Security The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 73 Figure 36 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 25 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate .
P-334U/P-335U User’s Gu ide 74 Chapter 4 Wireless LAN 4.3.3 WP A-PSK/WP A2-PSK Click Network > W ireless LAN to display the General screen . Figure 37 Wireless: WP A-PSK/WP A2-PSK Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 75 The following table describes the labels in this screen. Table 26 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION WP A Compatible This check box is available only when you select WP A2-PSK or WP A2 in th e Security Mode field.
P-334U/P-335U User’s Gu ide 76 Chapter 4 Wireless LAN Figure 38 Wireless: WP A/WP A2 The following table describes the labels in this screen. Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION WP A Compatible This check box is available only when you select WP A2-PSK or WP A2 in th e Security Mode field.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 77 4.4 OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it.
P-334U/P-335U User’s Gu ide 78 Chapter 4 Wireless LAN 4.4.1 Enabling OTIST Y ou must enable OTIST on both the AP and wi reless client before you start transferring settings. Note: The AP and wireless client(s) MUST use the same Setup key . 4.4.1.1 AP Y ou can enable OTIST using the OTIST button or th e web configurator .
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 79 The following table describes the labels in this screen. Table 28 OTIST LABEL DESCRIPTION Setup Key T ype an OTIST Setup Key of exactly eight ASCII characters in leng th. The default OTIST setup key is "01234567".
P-334U/P-335U User’s Gu ide 80 Chapter 4 Wireless LAN 4.4.2 St arting OTIST Note: Y ou must press the OTIST button or click Sta rt in the AP OTIST web configurator screen and in the wireless clie nt(s) Adapter screen all within three minutes (at the time of writing).
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 81 Figure 45 S tart OTIST? 2 If an OTIST -enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST -enabled AP for up to one minute.
P-334U/P-335U User’s Gu ide 82 Chapter 4 Wireless LAN Figure 46 MAC Addres s Filter The following table describes the labels in this menu. Table 29 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering.
P-334U/P-335U User’s Guide Chapter 4 Wireles s LAN 83 4.6 Wireless LAN Advanced Screen Click Network > W ireless LAN > Advanced . The screen appears as shown.
P-334U/P-335U User’s Gu ide 84 Chapter 4 Wireless LAN Apply Click Apply to save your changes b ack to the ZyXEL Device. Reset Click Reset to reload the previo us configuration for this screen.
P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 85 C HAPTER 5 W ireless T u torial This chapter gives you examples of how to set up an access point and wireless client for wireless communication using the following pa rameters. The wireless clients can acc ess the Internet through an AP wirelessly .
P-334U/P-335U User’s Gu ide 86 Chapter 5 Wireless Tutorial Figure 48 AP: Wireless LAN > General 3 Make sure the Enable Wir eless LAN check box is selected.
P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 87 Figure 49 AP: S tatus 7 Click the W L A N St a t i o n St a t u s hyperlink in the AP’ s St a t u s screen. Y ou can see if any wireless client has connected to the AP . Figure 50 AP: S tatus: WLAN S tation S tatus 5.
P-334U/P-335U User’s Gu ide 88 Chapter 5 Wireless Tutorial 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless networ k using the ZyXEL utility , as in the following diagram. The wireless client is labeled C and the access point is labeled AP .
P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 89 3 When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting.
P-334U/P-335U User’s Gu ide 90 Chapter 5 Wireless Tutorial Figure 53 ZyXEL Utility: Link Info 6 Open your Internet browser and enter http://www .zyxel.com or the URL of any other web site in the address bar . If you are able to access the web site, your wireless connection is successfully configured.
P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 91 you want to search again. Y ou can also conf igure your prof ile for a wireless network that is not in the list. Figure 55 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters).
P-334U/P-335U User’s Gu ide 92 Chapter 5 Wireless Tutorial 6 In the next screen, leave both boxes checked. Figure 58 Profile: Wireless Protocol Settings. 7 V erify the profile settings in the read-only screen. Click Save to save and go to the next screen.
P-334U/P-335U User’s Guide Chapter 5 Wireles s Tutorial 93 10 Open your Internet browser , enter http://www .zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the we b site, your new profile is successfully configured.
P-334U/P-335U User’s Gu ide 94 Chapter 5 Wireless Tutorial.
P-334U/P-335U User’s Guide Chapter 6 WAN 95 C HAPTER 6 WA N This chapter describes how to configure W AN settings. 6.1 W A N Overview See the chap ter about the connection wiz ard for more information on the fields in the W AN screens.
P-334U/P-335U User’s Gu ide 96 Chapter 6 WA N Figure 61 Ethernet Encapsulation The following table describes the labels in this screen. Table 31 Ethernet Encapsulat ion LABEL DESCRIPTION Encapsulation Y ou must choose the Ethern et option when the W AN port is used as a regular Ethernet.
P-334U/P-335U User’s Guide Chapter 6 WAN 97 6.3.2 PPPoE Encap sulation The ZyXEL Device supports PPPoE (Point-to-Poin t Protocol over Ethernet ). PPPoE is an IETF standard (RFC 2516) speci fying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wi reless, etc.
P-334U/P-335U User’s Gu ide 98 Chapter 6 WA N Operationally , PPPoE saves significant effort for bo th you and the ISP or carrier, as it requires no specific configuration of the broa dband modem at the customer site.
P-334U/P-335U User’s Guide Chapter 6 WAN 99 The following table describes the labels in this screen. Table 32 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE.
P-334U/P-335U User’s Gu ide 100 Chapter 6 WA N 6.3.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks.
P-334U/P-335U User’s Guide Chapter 6 WAN 101 Figure 63 PPTP Encapsulation.
P-334U/P-335U User’s Gu ide 102 Chapter 6 WA N The following table describes the labels in this screen. Table 33 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulatio.
P-334U/P-335U User’s Guide Chapter 6 WAN 103 6.4 Advanced W A N Screen T o change your ZyXEL Device’ s advanced W AN settings, click Network > WA N > Advanced . The screen appears as shown. Private This parameter determines if the ZyXEL Device will include the route to this remote node in its RIP broadcast s.
P-334U/P-335U User’s Gu ide 104 Chapter 6 WA N Figure 64 Advanced The following table describes the labels in this screen. Table 34 Advanced LABEL DESCRIPTION Multicast Setup Multicast Select IGMP V -1 or IGMP V -2 or None .
P-334U/P-335U User’s Guide Chapter 7 LAN 105 C HAPTER 7 LAN This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communic ation system to which many computers are attached.
P-334U/P-335U User’s Gu ide 106 Chapter 7 LAN 7.2.2 IP Address and Subnet Mask Refer to the IP Address and Subnet Mask section in the Connection W izard chapter for this information.
P-334U/P-335U User’s Guide Chapter 7 LAN 107 The following table describes the labels in this screen. Table 35 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address T ype th e IP address of your ZyXEL D evice in dotted decimal notation 192.168.1 .1 (factory defau lt).
P-334U/P-335U User’s Gu ide 108 Chapter 7 LAN The following table describes the labels in this screen. Table 36 LAN IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to confi gure anot her LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
P-334U/P-335U User’s Guide Chapter 7 LAN 109 Allow between LAN and WAN Select this check box to forward NetBIOS packet s from the LAN to the W AN and from the WAN to the LAN.
P-334U/P-335U User’s Gu ide 110 Chapter 7 LAN.
P-334U/P-335U User’s Guide Chapter 8 DHCP Server 111 C HAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it.
P-334U/P-335U User’s Gu ide 112 Chapter 8 DHCP Server 8.3 DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Y ou can also use this screen to configure the DNS server information that the ZyXEL Devi ce sends to the DHCP clients.
P-334U/P-335U User’s Guide Chapter 8 DHCP Server 113 The following table describes the labels in this screen. Table 39 DHCP Server Adva nced LABEL DESCRIPTION # This is the index number of the s tatic IP table entry (row). MAC Address T ype the MAC address (with colons) of a computer on your LAN.
P-334U/P-335U User’s Gu ide 114 Chapter 8 DHCP Server Figure 70 Client List The following table describes the labels in this screen. Table 40 Client List LABEL DESCRIPTION # This is the index number of the host computer . IP Address This field displays the IP address relative to the # field liste d above.
P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 115 C HAPTER 9 Network Address T r anslation (NA T) This chapter discusses how to configure NA T on the ZyXEL Device. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet.
P-334U/P-335U User’s Gu ide 116 Chapter 9 Network Addr ess Translation (NAT) 9.2.2 Configuring Servers Behi nd Port Forwarding (Example) Let's say you want to assign po rts 21-2 5 to one FTP , T elnet and SMTP server ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.
P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 117 The following table describes the labels in this screen. Table 41 NAT General LABEL DESCRIPTION Network Address T ransla .
P-334U/P-335U User’s Gu ide 118 Chapter 9 Network Addr ess Translation (NAT) Figure 73 NA T Application The following table describes the labels in this screen. Table 42 NA T Application LABEL DESCRIPTION Game List Update A game list includes the pre-defined se rv ice name(s) and port number(s).
P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 119 9.4.1 Game List Example Here is an example game list text file. The in dex number , service name and associated port(s) are specified by semi-colons (no spaces). Use th e name=xxx (where xxx is the service name) to create a new service.
P-334U/P-335U User’s Gu ide 120 Chapter 9 Network Addr ess Translation (NAT) Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=145 67,22000,23000-23009,27900,28900 2;name=Call of Duty;port=28960 3;name=Civilization IV;port=2056 4;name=Diablo I and II;port=6112 -6119,4000 5;name=Doom 3;port=27666 6;name=F.
P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 121 9.5.1 T rigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 75 T rigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070).
P-334U/P-335U User’s Gu ide 122 Chapter 9 Network Addr ess Translation (NAT) Figure 76 NA T Advanced The following table describes the labels in this screen. Table 43 NA T Advanced LABEL DESCRIPTION Max NA T/Firewall Session Per User T ype a number ranging from 1 to 204 8 to lim it the number of NA T/firewall se ssions that a host can create.
P-334U/P-335U User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 123 Incoming Incoming is a port (or a range of ports) that a server on the WAN u ses when it sends out a particular service. The ZyXEL De vice forwards the traffic with this port (or range of p orts) to the client computer on the LAN that requested the service.
P-334U/P-335U User’s Gu ide 124 Chapter 9 Network Addr ess Translation (NAT).
P-334U/P-335U User’s Guide Chapter 10 Dynamic D NS 125 C HAPTER 10 Dynamic DNS 10.1 Dynamic DNS Introduction Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.
P-334U/P-335U User’s Gu ide 126 Chapter 10 Dynamic D NS Figure 77 Dynamic DNS The following table describes the labels in this screen. Table 44 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select the name of yo ur Dynamic DNS servic e provider .
P-334U/P-335U User’s Guide Chapter 11 Firewall 127 C HAPTER 11 Firewall This chapter gives some bac kground information on firewalls and explains how to get started with the ZyXEL Device firewall.
P-334U/P-335U User’s Gu ide 128 Chapter 11 Firewall The ZyXEL Device is installed between the LA N and a br oadband mode m connecting to the Internet. This allows it to act as a secure gatewa y for all data passing betwee n the Internet and the LAN.
P-334U/P-335U User’s Guide Chapter 11 Firewall 129 The following table describes the labels in this screen. Table 45 Firewall General LABEL DESCRIPTION Enable Firewall Select this check box to ac tivate the firewall. The ZyXEL Device per forms access control and protects against Denial of Se rvice (DoS) attacks when the firewall is activated.
P-334U/P-335U User’s Gu ide 130 Chapter 11 Firewall Figure 79 Services The following table describes the labels in this screen. Table 46 Firewall Services LABEL DESCRIPTION ICMP Internet Control Message Protocol is a messag e control and error-reporting protocol between a host server and a gate way to the Internet.
P-334U/P-335U User’s Guide Chapter 11 Firewall 131 Do not respond to requests for unauthorized services Select this option to prevent hackers from finding the ZyXEL Device by probing for unused ports.
P-334U/P-335U User’s Gu ide 132 Chapter 11 Firewall.
P-334U/P-335U User’s Guide Chapter 12 Content Filtering 133 C HAPTER 12 Content Filtering This chapter provides a brief overview of co ntent filtering using the embedded web GUI. 12.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
P-334U/P-335U User’s Gu ide 134 Chapter 12 Content Filter ing Figure 80 Content Filter: Filter The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Chapter 12 Content Filtering 135 12.5 Schedule Click Security > Content Filter > Schedul e . The following screen displays. Figure 81 Content Filter: Schedule Keyword T ype a keyword in this field. Y ou may use any character (up to 64 charac ters).
P-334U/P-335U User’s Gu ide 136 Chapter 12 Content Filter ing The following table describes the labels in this screen. Table 48 Content Filter: Sched ule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the ZyXEL Device to perform content filtering.
P-334U/P-335U User’s Guide Chapter 12 Content Filtering 137 12.6.3 File Name URL Checking Filename URL checking has the ZyXEL Devi ce check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www .
P-334U/P-335U User’s Gu ide 138 Chapter 12 Content Filt ering.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 139 C HAPTER 13 IPSec VPN This chapter explains how to set up and mainta in IPSec VPNs in the ZyXEL Device. First, it provides an overview of IPSec VPNs. Then, it introduces each screen for IPSec V PN in the ZyXEL Device.
P-334U/P-335U User’s Gu ide 140 Chapter 13 IPSec VPN Figure 83 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging data with a computer in network B . Inside networks A and B , the data is transmitte d the same way data is normally transmitted in the networks.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 141 13.1.2.1 IKE SA Proposal The IKE SA proposal is used to identify the encryption algorithm, au thentication algorithm, and Diffie-Hellman (DH) key group that the ZyXEL Device and remote IPSec router use in the IKE SA.
P-334U/P-335U User’s Gu ide 142 Chapter 13 IPSec VPN In main mode, the ZyXEL Dev ice and remote I PSec router authenticate each other in steps 5 and 6, as illustrated below . Th eir identities are encrypted usin g the encryption algorithm and encryption key the ZyXEL Device and remote IPSec router selected in previous steps.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 143 13.1.2.4 Negotiation Mode There are two negotiation modes: main mode and aggressive mode. Main mode prov ides better security , while aggressive mode is faster . Main mode takes six steps to establish an IKE SA.
P-334U/P-335U User’s Gu ide 144 Chapter 13 IPSec VPN Most routers like router A now have an IPSec pa ss-through f eature. This feature helps router A recognize VPN packets and route them appropriately . If router A has this feature, router X and router Y can establish a VPN tunnel as long as the IPSec protocol is ESP .
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 145 Usually , you should select ESP . AH does not support encry ption, and ESP is more suitable with NA T . 13.1.3.3 Encap sulation There are two ways to e ncapsulate packets. Usua lly , you should use tunn el mode because it is more secure.
P-334U/P-335U User’s Gu ide 146 Chapter 13 IPSec VPN If you do not enable PFS, the ZyXEL Device and remote IPSec router use the same root key that was generated when the IKE SA was established to generate encryption keys. The DH key exchan ge is time-consuming and may be unnecessary for data that does not require such security .
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 147 13.2 Remote DNS Server In cases where you want to use domain names to access Intranet servers on a remote network that has a DNS server , you must identify that DNS server .
P-334U/P-335U User’s Gu ide 148 Chapter 13 IPSec VPN The following table describes the fields in this screen. T able 51 Security > VPN > Summary LABEL DESCRIPTION # This is the VPN policy index numb er . Active This field displays whether the VPN policy is active or not.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 149 Figure 92 Security > VPN > Rule Setup: IKE (Basic ) The following table describes the labels in this screen. Table 52 Security > VPN > Rule Setup: IK E (Basic) LABEL DESCRIPTION Property Activ e Select this check box to ac tivate this VPN policy .
P-334U/P-335U User’s Gu ide 150 Chapter 13 IPSec VPN NA T Traversal Select this check box to enable NA T traversal. NA T tra versal allows you to set up a VPN connection when there are NA T ro uters between the two IPSec routers. Note: The remote IPSec router must also have NA T traversal enabled.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 151 Remote Address For a single IP address, enter a (stati c) IP address on the network behind the remote IPSec router . For a specific range of IP addresses, enter the be ginning (static) IP address, in a range of computers on the network behind the remote IPSec router .
P-334U/P-335U User’s Gu ide 152 Chapter 13 IPSec VPN Secure Gateway Address T ype the W AN IP ad dress or the domain na me (up to 31 characters) of the IPSec router with which you're making the VPN connection.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 153 13.5 Advanced VPN Rule Setup (IKE) Click Advanced.. . in the Rul e Setup screen to open this scre en. Pre-Shared Key T ype your pre-shared key in this field. A pre-sh ared key identifies a communicating party during a phase 1 IKE negotiation.
P-334U/P-335U User’s Gu ide 154 Chapter 13 IPSec VPN Figure 93 Security > VPN > Rule Setup: IKE (Advanced).
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 155 The following table describes the labels in this screen. Table 53 Security > VPN > Rule Setup: IKE (A dvanced) LABEL DESCRIPTION Property Activ e Select this check box to activate this VPN policy .
P-334U/P-335U User’s Gu ide 156 Chapter 13 IPSec VPN Local Address For a sing le IP address, enter a (static) IP address on the LAN behind your ZyXEL Device. For a specific range of IP addresses, enter the beg inning (static) IP address, in a range of computers on your LAN behind your ZyXEL Device.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 157 My IP Addr ess Enter the ZyXEL Device's static WAN IP addr ess (if it has on e) or leave the field set to 0.0.0.0 . The ZyXEL Device uses its current W AN IP address (static or dynamic) in setting up the VPN tunnel if you leave this field as 0.
P-334U/P-335U User’s Gu ide 158 Chapter 13 IPSec VPN Peer Content The configuration of the peer co ntent depe nds on the peer ID type. For IP , type the IP address of the computer with which you will ma ke the VPN connection. If you configure this field to 0.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 159 13.6 IPSec SA Using Manual Keys Y ou might set up an IPSec SA using ma nual keys when you wa nt to establish a VPN tunne l quickly , for example, for trou bleshooting. Y ou should only do this as a temporary solution, however , because it is not as secure as a regular IPSec SA .
P-334U/P-335U User’s Gu ide 160 Chapter 13 IPSec VPN 13.6.1 IPSec SA Prop osal Using Manual Keys In IPSec SA using manual keys, you can on ly specify one encryp tion algorithm and one authentication algorithm.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 161 Figure 94 Security > VPN > Rule Setup: Manual The following table describes the labels in this screen. Table 54 Security > VPN > Rule Setup: Manual LABEL DESCRIPTION Property Active Select this check box to activate this VPN policy .
P-334U/P-335U User’s Gu ide 162 Chapter 13 IPSec VPN DNS Server (for IPSec VPN) If there is a private DNS se rver that services the VPN, type its IP address here. The ZyXEL Device assigns this additio nal DNS server to the ZyXEL Device's DHCP clients that have IP addresses in this IPSec ru le's range of local addresses.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 163 Remote Address End /Mask When the remote IP address is a single address, typ e it a second time here. When the remote IP address is a range, en ter the end (static) IP address, in a range of computers on the network behind the remote IPSec router .
P-334U/P-335U User’s Gu ide 164 Chapter 13 IPSec VPN 13.8 VPN SA Monitor In the web configurator , click SECURIT Y > VPN > SA Monitor . Us e this screen to display and manage ac tive VPN conn ections. A Security Association (SA) is the group of secu rity settings related to a specific VPN tunnel.
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 165 The following table describes the labels in this screen. Table 55 SECURITY > VPN > SA Monitor LABEL DESCRIPTION # This is the security association index number . Name This field displays the identifi cation name for this VPN policy .
P-334U/P-335U User’s Gu ide 166 Chapter 13 IPSec VPN 13.10.1 T elecommuters Shar ing One VPN Rule Example See the following figure and table for an exampl e configuration that allows multiple telecommuters ( A , B and C in the figure) to use one VPN rule to simultaneously access a ZyXEL Device at headquarters ( HQ in the figure).
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN 167 See the following table and figure for an ex ample where three telecommuters each use a different VPN rule for a VPN connection with a ZyXEL Device located at headquarters .
P-334U/P-335U User’s Gu ide 168 Chapter 13 IPSec VPN 13.1 1 VPN and Remote Management Y ou can allow someone to use a service (like T elnet or HTTP) through a VPN tunnel to manage the ZyXEL Device. One of the ZyXEL Device’ s ports must be part of the VPN rule’ s local network.
P-334U/P-335U User’s Guide Chapter 14 Static Route Screens 169 C HAPTER 14 S t atic Route Screens This chapter shows you how to configure static routes for your ZyXEL Device.
P-334U/P-335U User’s Gu ide 170 Chapter 14 Static Route Screens 14.2 IP S tatic Route Screen Click Management > St a t i c R o u t e to open the IP S tatic Route scre en. The following screen displays. Figure 101 IP S tatic Route The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Chapter 14 Static Route Screens 171 14.2.1 S t atic Rout e Setup Screen T o edit a static route, click the edit icon under Modify . The following screen displays. Fill in the required information for each static route. Figure 102 S tatic Route Setup The following table describes the labels in this screen.
P-334U/P-335U User’s Gu ide 172 Chapter 14 Static Route Screens.
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Management 173 C HAPTER 15 Bandwid th Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the ZyXEL Device’ s bandwidth man agement logs. 15.
P-334U/P-335U User’s Gu ide 174 Chapter 15 Bandwidth Manag ement 15.3 Subnet-based Bandwid th Management Y ou can create bandwidth classes based on subnets. The following figure shows LAN subnets. Y ou could configure one bandwidth class fo r subnet A and another for subnet B .
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 175 15.5 Bandwid th Management Priorities The following table describes the priorities th at you can apply to traf fic that the ZyXEL Device forwards out through an interface.
P-334U/P-335U User’s Gu ide 176 Chapter 15 Bandwidth Ma nagement 15.6.1 Services and Port Numbers The commonly used services and port numbers ar e shown in the following table. Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets.
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Management 177 IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Securi ty Protocol) tun neling protocol uses this service. IRC(TCP/UDP:6667) This is another popula r Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol.
P-334U/P-335U User’s Gu ide 178 Chapter 15 Bandwidth Manag ement 15.7 Default Bandwid th Management Classes and Priorities If you enable bandwidth management but do not configure a rule for critical traf fic like V oIP , the voice traffic may then get de layed due to insuf ficient bandwi dth.
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 179 15.8 Bandwid th Management General Configuration Click Management > Bandwidth MGMT to open the b andwidth mana gement General screen. Figure 104 Bandwidth Ma nagement: General The following table describes the labels in this screen.
P-334U/P-335U User’s Gu ide 180 Chapter 15 Bandwidth Manag ement 15.9 Bandwid th Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth managemen t Advanced screen.
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 181 The following table describes the labels in this screen. Table 67 Bandwidth Manage ment: Adva nced LABEL DESCRIPTION Upstream Bandwidth (kbps) Enter the amount of bandwidth in kbps (2 to 100,000) that you want to allocate for traffic.
P-334U/P-335U User’s Gu ide 182 Chapter 15 Bandwidth Manag ement 15.9.1 Rule Configuration with the Pre-defined Service T o edit a bandwidth management ru le for the pr e-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen.
P-334U/P-335U User’s Guide Chapter 15 Bandwidth Managemen t 183 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to ed it a bandwidth manag ement rule for other applications an d/or subnet s, click the Edit icon in the User-defined Service table of the Advanced screen.
P-334U/P-335U User’s Gu ide 184 Chapter 15 Bandwidth Manag ement 15.10 Bandwid th Management Monitor Click Management > Bandwidth MGMT > Monitor to open the band width management Monitor screen. V iew the ba ndwidth usage of the W AN configured bandwidth rule s.
P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 185 C HAPTER 16 Remote Management Screens This chapter provides information on the Remote Management screens. 16.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers.
P-334U/P-335U User’s Gu ide 186 Chapter 16 Remot e Manageme nt Screens 3 There is already another remote management session with an equal or higher priority running. Y ou may only have one remote management sessio n running at one time. 4 There is a firewall rule that blocks it.
P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 187 16.3 T elnet Y ou can use T elnet to access the ZyXEL Device. Specify which inte rfaces allow T elnet acce ss and from which IP addres s the access can come.
P-334U/P-335U User’s Gu ide 188 Chapter 16 Remot e Manageme nt Screens 16.5 FTP Screen Y ou can use FTP (File T ransfer Protocol) to upload and download the ZyXEL Device’ s firmware and configuration files, please see the User ’ s Guide chapter on firmware and configuration file maintenance for details.
P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens 189 16.6 DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on W izard Setup for background information. T o change your ZyXEL Device’ s DNS settings, click Management > Remote MGMT > DNS .
P-334U/P-335U User’s Gu ide 190 Chapter 16 Remot e Manageme nt Screens.
P-334U/P-335U User’s Guide Chapter 17 UPnP 191 C HAPTER 17 UP N P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
P-334U/P-335U User’s Gu ide 192 Chapter 17 UPnP All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implementers Corp.
P-334U/P-335U User’s Guide Chapter 17 UPnP 193 The following table describes the labels in this screen. Table 74 Configuring U PnP LABEL DESCRIPTION Enable the Universal Plug and Play (UPnP) feature Select this checkbox to activate UPnP .
P-334U/P-335U User’s Gu ide 194 Chapter 17 UPnP 1 Click St a r t and Contro l Panel . Double- click Add/Remove Programs . 2 Click on the Win d ow s S et u p tab and se lect Communication in the Components selection box. Click Details . 3 In the Communications window , select the Universal Plug and Play check box in the Components selection box.
P-334U/P-335U User’s Guide Chapter 17 UPnP 195 4 Select Networking Service in the Components selection box and click Details . 5 In the Networking Services window , select the Universal Plug and Play check box. 6 Click OK to go back to the W indows Optional Networking Component Wiz ar d window and click Next .
P-334U/P-335U User’s Gu ide 196 Chapter 17 UPnP 3 In the Internet Connection Properties window , click Settings to see the port mappings that were automatically created. 4 Y ou may edit or delet e the port mappings or click Add to manually add port mappings.
P-334U/P-335U User’s Guide Chapter 17 UPnP 197 1 Click St a r t and then Contr ol Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with th e description for each UPnP-enabled de vice displays under Local Network .
P-334U/P-335U User’s Gu ide 198 Chapter 17 UPnP 1 Click St a r t and then Contr ol Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network .
P-334U/P-335U User’s Guide Chapter 18 Pr int Server 199 C HAPTER 18 Print Server This chapter discusses how to configure the print server on the ZyXEL Device. 18.1 Print Server Overview A print server is a device or software that pr ovides users on a network with shared access to one or more printers.
P-334U/P-335U User’s Gu ide 200 Chapter 18 Print Server 18.3 Print Server Screen Click the Print Server link unde r Management to display the Print Server screen. Figure 1 14 Configuring Print Server The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 201 C HAPTER 19 Print Server Driver Setup This chapter shows you h ow to set up a prin t server driver for a W indows or Macintosh computer .
P-334U/P-335U User’s Gu ide 202 Chapter 19 Print Server Dr iver Setup 3 Y ou can either •u s e t h e Setup Wizard for W indows NT/2000/XP to install the print monitor and open the setup wizard aut.
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 203 1 The We l c o m e screen displays. Click Next to continue. Figure 1 17 Network Print Server Setup Wizard: W elcome 2 The Select A Print Server screen displays. The wizard automa tically detects whether or not a print server is connected to your comp uter .
P-334U/P-335U User’s Gu ide 204 Chapter 19 Print Server Dr iver Setup 3 The Change Set tings screen di splays. If you want to change your print server ’ s IP address, select Y es, I want to change settings , leave the Password field blank and click Next .
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 205 4 Select the USB printer that is connected to the ZyXEL Device if you have adde d it on your computer already and click Ne xt . If your printer is not listed, click Add New Printer and see Section 19.
P-334U/P-335U User’s Gu ide 206 Chapter 19 Print Server Dr iver Setup 5 A Summary screen displays. Check your settings and click Next to continue. Figure 121 Network Print Server Setup Wizard: Summary 6 Click Finish to save and close your Network Print Server Setup W izard .
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 207 19.2.2 Adding a New Printer 1 Click Add New Printer in the Network Print Server Setup Wizard: Select A Printer screen (see Figure 120 on page 20 5 ). A help dialog box pops up to guide you through the adding printer process.
P-334U/P-335U User’s Gu ide 208 Chapter 19 Print Server Dr iver Setup 3 Select Local printer and click Next . Figure 125 Add Printer Wizard: Local or Network Printer 4 Select an LP T (Line Printing T erminal) port (a pa rallel port) as the computer interface for the USB printer .
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 209 5 Select the make of the printer that you wa nt to connect to the print server in the Manufacturers list of printers.
P-334U/P-335U User’s Gu ide 210 Chapter 19 Print Server Dr iver Setup 10 T ype a name to identify the printer and then click Next to continue. Figure 129 Add Printer Wizard: Name Y our Printer 11 Th.
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 211 12 Select Ye s and then click the Next b u tton if you want to p rint a test page. A p op-up screen displays to ask if the test pa ge printed correctly . Otherwise selec t No and then click Next to continue.
P-334U/P-335U User’s Gu ide 212 Chapter 19 Print Server Dr iver Setup 2 On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window . Figure 133 Macintos h HD 3 Double-click the Applications folder . Figure 134 Macintosh HD folder 4 Double-click the Utilities folder .
P-334U/P-335U User’s Guide Chapter 19 Print Serv er Driver Setup 213 6 Click the Add icon at the top of the screen. Figure 137 Printer List Folder 7 Set up your pri nter in the Printer List configuratio n sc reen. Select IP Printin g from the drop-down list box.
P-334U/P-335U User’s Gu ide 214 Chapter 19 Print Server Dr iver Setup 12 Click Add to select a printer model, save and close the Printer List configuratio n screen. Figure 139 Printer Model 13 The Name LP1 on 192.168.1. 1 displays in the Printe r List field.
P-334U/P-335U User’s Guide Chapter 20 Syste m 215 C HAPTER 20 System This chapter provides informa tion on the System screens. 20.1 System Overview See the chapter about wizard setup for mo re information on th e next few screens. 20.2 System General Screen Click Maintenance > System .
P-334U/P-335U User’s Gu ide 216 Chapter 20 System The following table describes the labels in this screen. Table 76 System General LABEL DESCRIPTION System Name Syste m Name is a unique name to id entify the ZyXEL Device in an Ethernet network.
P-334U/P-335U User’s Guide Chapter 20 Syste m 217 Figure 142 T ime Setting The following table describes the labels in this screen. Table 77 Time Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays th e time of your ZyXEL Device.
P-334U/P-335U User’s Gu ide 218 Chapter 20 System New Date (yyyy/mm/dd) This field displays the last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new date in this field and then click Apply .
P-334U/P-335U User’s Guide Chapter 21 Logs 219 C HAPTER 21 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs.
P-334U/P-335U User’s Gu ide 220 Chapter 21 Logs The following table describes the labels in this screen. Table 78 View Logs LABEL DESCRIPTION Display Th e categories that you select in the Lo g Settings page (see Section 21.2 on page 220 ) display in the drop -down list box.
P-334U/P-335U User’s Guide Chapter 21 Logs 221 Figure 144 Log Settings The following table describes the labels in this screen. Table 79 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP addre ss of the mail server for the e-mail addresses specified below .
P-334U/P-335U User’s Gu ide 222 Chapter 21 Logs Send Log T o The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail.
P-334U/P-335U User’s Guide Chapter 22 Tools 223 C HAPTER 22 To o l s This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the ZyXEL Devic e. 22.1 Firmware Upload Screen Find firmware at www .zyxel .
P-334U/P-335U User’s Gu ide 224 Chapter 22 Tools After you see the Firmware Upload In Pr ocess screen, wait two minut es before logging into the ZyXEL Device again. Figure 146 Upload W arning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect.
P-334U/P-335U User’s Guide Chapter 22 Tools 225 Click Maintenance > T ools > Configuration . Information related to factory defaults, backup configuration, and rest oring configuratio n appears as shown next .
P-334U/P-335U User’s Gu ide 226 Chapter 22 Tools Figure 150 Configuration Restore Su ccessful The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop.
P-334U/P-335U User’s Guide Chapter 22 Tools 227 22.3 Rest art Screen System restart allows you t o reboot the Zy XEL Device without tu rning the power off. Click Maintenance > T ools > Restart . Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration.
P-334U/P-335U User’s Gu ide 228 Chapter 22 Tools.
P-334U/P-335U User’s Guide Chapter 23 Configurat ion Mode 229 C HAPTER 23 Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route.
P-334U/P-335U User’s Gu ide 230 Chapter 23 Configuration Mod e Management S tatic Route IP S tatic Route Bandwidth MGMT Advanced Monitor Remote MGMT Te l n e t FTP DNS Maintenance Logs Log Settin gs.
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 231 C HAPTER 24 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 24.1 Problems St arting Up the ZyXEL Device Table 83 Troubleshooting Sta rting Up Your ZyXEL Device PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the ZyXEL Device.
P-334U/P-335U User’s Gu ide 232 Chapter 24 Trou bleshooting 24.3 Problems with the W AN Table 85 Troubleshootin g the WAN PROBLEM CORRECTIVE ACTION The W AN LED is off. Check the connections between the ZyXEL Device W AN port and the cabl e/DSL modem or ethernet jack.
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 233 24.4 Problems Accessi ng the ZyXEL Device Table 86 Troubleshoot ing Accessin g the ZyX EL Device PROBLEM CORRECTIVE ACTION I cannot access the ZyXEL Device. The username is “admin”. The default password is “1234”.
P-334U/P-335U User’s Gu ide 234 Chapter 24 Trou bleshooting Problems with the Password Problems with Remote Management Parental Control is configured correctly , but I can still access restricted web pag es . Restart the device to clear the cache. The content filter server may be u navailable.
Table 90 Troubleshootin g the Print Server PROBLEM CORRECTIVE ACTION Cannot print anything using the USB printer connected to the P- 335U. V erify that the printer uses USB 1.1 or 1.0 by checking your printer's specifications. Make sure the USB printer is powered on and can work properly .
P-334U/P-335U User’s Gu ide 236 Chapter 24 Trou bleshooting Y ou can also check if pop-up blocking is dis abled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen.
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 237 Figure 157 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .
P-334U/P-335U User’s Gu ide 238 Chapter 24 Trou bleshooting Figure 158 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 24.5.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , check that JavaScripts are allowed.
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 239 Figure 159 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default).
P-334U/P-335U User’s Gu ide 240 Chapter 24 Trou bleshooting Figure 160 Security Settings - Java Scripting 24.5.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button.
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 241 Figure 161 Security Settings - Java 24.5.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected.
P-334U/P-335U User’s Gu ide 242 Chapter 24 Trou bleshooting Figure 162 Java (Sun) 24.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer .
P-334U/P-335U User’s Guide Chapter 24 Trou bleshooting 243 Figure 163 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
P-334U/P-335U User’s Gu ide 244 Chapter 24 Trou bleshooting Figure 164 Security Setting ActiveX Controls.
P-334U/P-335U User’s Guide Appendix A Prod uct Specification s 245 A PPENDIX A Product S pecifications The following table is a summary of other features available.
P-334U/P-335U User’s Gu ide 246 Appendix A Product Specifications Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator , an FTP or a TFTP tool to put it on the ZyXEL Device.
P-334U/P-335U User’s Guide Appendix A Prod uct Specificatio ns 247 IPSec VPN (P-335U only) Establish a Virtual Private Network (VPN) to connect with busine ss partners and branch offices using data encryption and the Internet to provide secure communications w it hout the expense of leased site-to- site lines.
P-334U/P-335U User’s Gu ide 248 Appendix A Product Specifications.
P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 249 A PPENDIX B Print Server S pecifications This appendix provides details on the pr int server interface and system requirements. Table 93 Print Server Interface PRINT SERVER INTERFACE USB USB 1.
P-334U/P-335U User’s Gu ide 250 Appendix B Print Server Specifica tions ZyXEL Device Print Server Comp atible USB Printers The following is a list of USB printer models compatible with the Zy XEL Device print server .
P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 251 CANON MP-13 0 MFP EPSON Aculaser C1900 Color Laser EPSON EPL-6100 Laser Disable bi-directional support on printer. EPSON S tylus C20 Inkjet Disable bi-directional sup port on printer.
P-334U/P-335U User’s Gu ide 252 Appendix B Print Server Specifica tions HP DeskJet 5550 Inkjet HP DeskJet 810C Inkjet HP DeskJet 845C Inkjet HP DeskJet 920C Inkjet HP Deskjet 1 180c Inkjet HP DeskJet 930C Inkjet HP LaserJet 1200 La ser Disable bi-directional support on printer.
P-334U/P-335U User’s Guide Appendix B Print Serv er Specifications 253 KYOCERA FS-1920 Laser KONICA MINOLTA PagePro 1350W Lase r LEXMARK C750 Color Laser LEXMARK E210 Laser LEXMARK E322 Laser LEXMAR.
P-334U/P-335U User’s Gu ide 254 Appendix B Print Server Specifica tions.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Addr ess 255 A PPENDIX C Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
P-334U/P-335U User’s Gu ide 256 Appendix C Setting up Your Compu ter’s IP Address Figure 165 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 257 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect.
P-334U/P-335U User’s Gu ide 258 Appendix C Setting up Your Compu ter’s IP Address Figure 167 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previ ously installed gateways.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 259 Figure 168 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 169 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
P-334U/P-335U User’s Gu ide 260 Appendix C Setting up Your Compu ter’s IP Address Figure 170 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 261 • If you have a static IP address click Us e the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields.
P-334U/P-335U User’s Gu ide 262 Appendix C Setting up Your Compu ter’s IP Address Figure 173 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS se rver address automatically if you do not know your DNS server IP address(es ).
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 263 Figure 174 Windows XP: Internet Protocol (TCP/IP) P roperties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W ind ows 2000/NT) to close the Local Area Connection Properties window .
P-334U/P-335U User’s Gu ide 264 Appendix C Setting up Your Compu ter’s IP Address Figure 175 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 176 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 265 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box.
P-334U/P-335U User’s Gu ide 266 Appendix C Setting up Your Compu ter’s IP Address Figure 178 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 267 Note: Make sure you are logged in as the ro ot administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE.
P-334U/P-335U User’s Gu ide 268 Appendix C Setting up Your Compu ter’s IP Address • If you have a dynamic IP addres s click Automatically obtain IP address settings with and select dhcp from the drop down list.
P-334U/P-335U User’s Guide Appendix C Setting up Your Computer’s IP Address 269 1 Assuming that you have only one network card on th e computer , locate the ifconfig- eth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor .
P-334U/P-335U User’s Gu ide 270 Appendix C Setting up Your Compu ter’s IP Address Figure 186 Red Hat 9.0: Resta rt Ethernet Card [root@localhost init.
P-334U/P-335U User’s Guide Appendix D IP Subnetting 271 A PPENDIX D IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID.
P-334U/P-335U User’s Gu ide 272 Appendix D IP Subnetting Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
P-334U/P-335U User’s Guide Appendix D IP Subnetting 273 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
P-334U/P-335U User’s Gu ide 274 Appendix D IP Subnetting Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have.
P-334U/P-335U User’s Guide Appendix D IP Subnetting 275 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets.
Table 106 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT V ALUE IP Address 192.168.1. 192 IP Address (Binary) 1 1000000.10101 000.00000001. 11 000000 Subnet Mask (Binary) 11111111 . 11111 111 . 111 11111 . 11 000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.
P-334U/P-335U User’s Guide Appendix D IP Subnetting 277 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID.
P-334U/P-335U User’s Gu ide 278 Appendix D IP Subnetting.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 279 A PPENDIX E Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies.
P-334U/P-335U User’s Gu ide 280 Appendix E Wireless LANs Figure 189 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 281 Figure 190 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.
P-334U/P-335U User’s Gu ide 282 Appendix E Wireless LANs Figure 191 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 283 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference.
P-334U/P-335U User’s Gu ide 284 Appendix E Wireless LANs Wireless Security Overview W ireless security is vital to your network to p rotect wireless commu nication betw een wireless clients, access points and the wired network.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 285 • Authentication Determines the identity of the users. • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity .
P-334U/P-335U User’s Gu ide 286 Appendix E Wireless LANs T ypes of Authentication This section discusses some po pular authentication types: EAP-MD5 , EAP-TLS , EAP- TTLS , PEAP and LEAP . The type of authentication you use depends on the RADIUS ser ver or the AP .
P-334U/P-335U User’s Guide Appendix E Wireless LANs 287 LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS server .
P-334U/P-335U User’s Gu ide 288 Appendix E Wireless LANs If both an AP and the wireless clients suppor t WP A2 and you have an external RADIUS server , use WP A2 for stronger data encryption.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 289 User Authentication WP A and WP A2 apply IEEE 802.1x an d Exte nsible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database.
P-334U/P-335U User’s Gu ide 290 Appendix E Wireless LANs Figure 192 WP A(2) with RADIUS Application Example WP A(2)-PSK Application Example A WP A(2)-PSK applica tion looks as follows. 1 First enter identical passwords into the AP an d all wireless c lients.
P-334U/P-335U User’s Guide Appendix E Wireless LANs 291 Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features.
P-334U/P-335U User’s Gu ide 292 Appendix E Wireless LANs.
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 293 A PPENDIX F Log Descriptions This appendix provides descrip tions of example log messages. Table 114 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server .
P-334U/P-335U User’s Gu ide 294 Appendix F Log De scriptions Table 116 Access Control Log s LOG MESSAGE DESCRIPTION Firewall default policy: [TC P | UDP | IGMP | ESP | GRE | OSP F] <Packet Direct.
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 295 Table 117 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.
P-334U/P-335U User’s Gu ide 296 Appendix F Log De scriptions Table 119 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICM P <Packet Direction>, <type:%d >, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting.
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 297 Table 122 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can p ass through the firewall. ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.
P-334U/P-335U User’s Gu ide 298 Appendix F Log De scriptions Table 124 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TC P/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detecte d an ICMP attack.
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 299 Table 125 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router received and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered.
P-334U/P-335U User’s Gu ide 300 Appendix F Log De scriptions Cannot resolve Secure Gateway Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address.
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 301 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer .
P-334U/P-335U User’s Gu ide 302 Appendix F Log De scriptions Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 di d not match betwe e n the router and the peer . Rule [%d] Phase 2 key length mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer .
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 303 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field.
P-334U/P-335U User’s Gu ide 304 Appendix F Log De scriptions Table 129 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database repo rts user credential error. A user was not authenticated by the local user database because of an incorrect user password.
Table 130 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to W AN ACL set for packets traveling from the LAN to the W AN. (W to L) W AN to LAN ACL set for pa ckets travelin g from the W AN to the LAN. (D to L) DMZ to LAN ACL set for packets travelin g from the DM Z to the LAN.
P-334U/P-335U User’s Gu ide 306 Appendix F Log De scriptions Table 132 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon d d hr:mm:ss hostname src="<srcIP:srcPort>".
P-334U/P-335U User’s Guide Appendix F Log Descr iptions 307 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record.
P-334U/P-335U User’s Gu ide 308 Appendix F Log De scriptions Use 0 to not record logs for that category , 1 to record only logs fo r that category , 2 to record only alerts for that category , and 3 to record both logs and alerts for that category .
P-334U/P-335U User’s Guide Appendix G Serv ices 309 A PPENDIX G Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
P-334U/P-335U User’s Gu ide 310 Appendix G Services HTTP TCP 80 Hyper T ext Transfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic purposes.
P-334U/P-335U User’s Guide Appendix G Serv ices 311 RCMD TCP 512 Remote Command Se rvice. REAL_AUDIO TCP 7070 A streaming audio service that enab les real time sound over the we b. REXEC TCP 514 Remote Execution Daemon. RLOGIN TCP 513 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems.
P-334U/P-335U User’s Gu ide 312 Appendix G Services TFTP UDP 69 T rivial File Transfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (T ransmi ssion Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 313 A PPENDIX H Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage. Actual menus for yo ur product may differ .
P-334U/P-335U User’s Gu ide 314 Appendix H Internal SPTGEN Internal SPTGEN File Modification - Import ant Points to Remember Each paramete r you enter must be pr eceded by one “=”sign and one space.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 315 Figure 199 Internal SP TGEN FTP Download Example c:ftp 192.168.1.1 220 PPP FTP version 1.0 read y at Sat Jan 1 03:22:12 2000 User (192.
P-334U/P-335U User’s Gu ide 316 Appendix H Internal SPTGEN Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. Table 135 Abbreviations Used in the Exam ple Internal S.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 317 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3 = 256 30100016 = Output device filters Set 4 = 256 / Menu 3.
P-334U/P-335U User’s Gu ide 318 Appendix H Internal SPTGEN 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Alias #1 Incoming protocol filters Set 1 = 256 30201007 = IP A.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 319 FIN FN PVA INPUT 30500001 = ESSID Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> = 0 30500003 = Channel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> = 1 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG.
P-334U/P-335U User’s Gu ide 320 Appendix H Internal SPTGEN Table 138 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup FIN FN PVA INPUT 40000000 = Configured <0(No) | 1(Yes)> = 1 400.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 321 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sustain Cell Rate (SCR) = 0 40000030 = .
P-334U/P-335U User’s Gu ide 322 Appendix H Internal SPTGEN Table 140 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup FIN FN PVA INPUT 150000001 = SUA Server IP address for default port = 0.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 323 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> = 0 150000033 = SUA Server #8 P.
P-334U/P-335U User’s Gu ide 324 Appendix H Internal SPTGEN 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1( Yes)> = 1 210101003 = IP Filter Set 1,Rule 1 Protocol = 6 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 325 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 Table 141 Menu 21.
P-334U/P-335U User’s Gu ide 326 Appendix H Internal SPTGEN 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.
P-334U/P-335U User’s Guide Appendix H Internal SPTGEN 327 230200005 = Authentication Server Shared Secret = 111111111111 111 111111111111 1111 230200006 = Accounting Server Configured <0(No) | 1(Yes)> = 1 230200007 = Accounting Server Active <0(N o) | 1(Yes)> = 1 230200008 = Accounting Server IP Address = 192.
P-334U/P-335U User’s Gu ide 328 Appendix H Internal SPTGEN Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 145 Command Examples FIN FN PV A INPUT /ci command (for annex a): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.
P-334U/P-335U User’s Guide Appendix I Triangle Route 329 A PPENDIX I T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology , all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks.
P-334U/P-335U User’s Gu ide 330 Appendix I Triangle Route Figure 202 “T riangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface.
P-334U/P-335U User’s Guide 331 Index A access point 67 access point. See also AP . active protocol 144 AH 144 and encapsulation 145 ESP 144 ActiveX 134 Advanced Encryption St andard 28 8 AH 144 and transport mode 145 Alternative Subnet Mask Notation 273 AP 67 AP (access point) 281 AP .
P-334U/P-335U User’s Gu ide 332 transport mode 145 tunnel mode 145 VPN 145 Encryption 288 encryption 69 and local (user) database 70 key 70 WP A compatible 70 encryption algori thms 141 , 146 and ac.
P-334U/P-335U User’s Guide 333 IPSec SA. See also VPN. IPSec. See also VPN. J Java 134 K Keep alive 146 L LAN Setup 95 , 105 LAN TCP/IP 105 Liability 3 License 3 Link type 41 local (user) database 6.
P-334U/P-335U User’s Gu ide 334 S SA life time 146 Safety W arnings 6 security associations. See VPN. Security Parameters 291 Service Set 71 Service Set IDentity .
P-334U/P-335U User’s Guide 335 channel 67 encryption 69 MAC address filter 68 security 68 SSID 67 Wireless security 284 wireless security 68 WLAN Interference 281 Security parameters 291 WP A 287 WP.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL Communications P-334U è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL Communications P-334U - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL Communications P-334U imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL Communications P-334U ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL Communications P-334U, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL Communications P-334U.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL Communications P-334U. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL Communications P-334U insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
