Manuale d’uso / di manutenzione del prodotto P-660HW-TX V3 del fabbricante ZyXEL Communications
Vai alla pagina of 428
www .zyxel.com www .zyxel.com P-660HW -Tx v3 Series 802.1 1g Wireless ADSL2+ 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.
.
About This User's Guide P-660HW-Tx v3 Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL Device using the web configur ator . Y ou should hav e at least a basic knowledge of T CP/IP networking concepts and topology .
About This User's Guide P-660HW-Tx v3 Series User’s Guide 4 Customer Support In the event of probl ems that cannot be solved by using t his manua l, you s hould contact your vendor . If y ou canno t cont act your vendor , then contact a Z y XEL office for the region in wh ic h you bou g ht the device.
Document Conventions P-660HW-Tx v3 Series User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide.
Document Conventions P-660HW-Tx v3 Series User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the followi n g generic icons. The Z yXEL Device icon is not an exact represent ation of your device.
Safety Warnings P-660HW-Tx v3 Series User’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device.
Safety Warnings P-660HW-Tx v3 Series User’s Guide 8.
Contents Overview P-660HW-Tx v3 Series User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 21 Introducing the ZyXEL Device ....
Contents Overview P-660HW-Tx v3 Series User’s Guide 10 Product S pecifications .... ................. ................ ............. ................ ................ ............. ......... ..... 341 Appendices and Index ...........................
Table of Contents P-660HW-Tx v3 Series User’s Guide 11 Table of Contents About This User's Guide ..................................................................................... ................... .. 3 Document Conventions................
Table of Contents P-660HW-Tx v3 Series User’s Guide 12 3.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... .... ............ 35 3.2 The S tatus Screen ..
Table of Contents P-660HW-Tx v3 Series User’s Guide 13 5.3 Wireless Connection Wizard Se tup ....... ............. ................. ............ ................. ............ ....... 92 5.3.1 Manually Assign a WP A-PSK key .... ... ... ... .......
Table of Contents P-660HW-Tx v3 Series User’s Guide 14 7.6.2 DHCP Setup . ... .... ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... . 1 30 7.6.3 DNS Server Addresses ..........
Table of Contents P-660HW-Tx v3 Series User’s Guide 15 9.3.1 Configuring the Port Forwarding Screen .......... ............. ............. ................ ............. . 175 9.3.2 The Port Forwarding Rule Edit Screen ......................... ....
Table of Contents P-660HW-Tx v3 Series User’s Guide 16 1 1.2 The Keyword Screen .... ................ ............. ................ ................ ............. ................ ........ 214 1 1.3 The Schedule Screen ............. ...............
Table of Contents P-660HW-Tx v3 Series User’s Guide 17 15.1 Overview ........... ................ ............. ................ ................ ............. ................ ............ ......... 243 15.1.1 What Y ou Can Do in the 802.1Q/1P Sc reens .
Table of Contents P-660HW-Tx v3 Series User’s Guide 18 Chapter 19 Universal Plug-and-Play (UPnP) .................................................... ...................................... 281 19.1 Overview ........... ................ .............
Table of Contents P-660HW-Tx v3 Series User’s Guide 19 Chapter 23 Diagnostic........................................................ ..................................................... ........... ...... 329 23.1 Overview ........... .............
Table of Contents P-660HW-Tx v3 Series User’s Guide 20.
21 P ART I Introduction Introducing the Z yXEL Device (23) Introducing the W e b Configurator (29) Status Screens (35) Tu t o r i a l s ( 4 3 ).
22.
P-660HW-Tx v3 Series User’s Guide 23 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applicat ions and features of the Z yXEL Device. It also introduces the wa ys you can manage the Z yXEL Device. 1.1 Overview The P-660HW- Tx v3 is an AD SL2+ router .
Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 24 • FTP for firmware upgr ades and configur ation backup/restore. • TR -069.
Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 25 1.4.1 Internet Access Y our ZyXEL Device pro vides shared Intern et ac cess by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the Z yXEL Device’ s LAN ports (or wirelessly) .
Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 26 1.5 LEDs (Light s) The following gr aphic displays the l abels of the LEDs. Figure 2 LEDs on the T op of the Device None of the LEDs are on if the Z y XEL Device is not receiving power .
Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 27 Refer to the Quick Start Guid e for in formation on hardware connections.
Chapter 1 Introducing the ZyXEL Device P-660HW-Tx v3 Series User’s Guide 28 1.7.1 T urn the Wireless LAN Off or On 1 Make sure the POWER LED is on (not blinking). 2 Press the WPS WLAN ON/OFF button for less than five seconds and release i t. The WLAN/WPS LED should change from on to off or vice versa.
P-660HW-Tx v3 Series User’s Guide 29 C HAPTER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML -based management interface that allows easy device setup and management via Internet browser . Use Internet Explorer 6.0 and later or Netscape Navigator 7.
Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 30 Z yXEL Device, type the admin password ( 1234 by default) in the password screen and click Login . Click Cancel to revert t o the default user password in the password field.
Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 Series User’s Guide 31 6 Select Go to Wizard setup and click Apply to display the wizard main screen.
Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 32 As illustr ated above, the main screen is divided into these parts: • A - title bar • B - navigati on panel • C - main window • D - status b a r 2.2.1 T itle Bar The title bar prov ides some icons in the upper right corner .
Chapter 2 Introducing the Web Configurator P-660HW-Tx v3 Series User’s Guide 33 Wireless LAN AP Use this screen to configure the wireless LAN settings and WLAN authentication/security settings. More AP Use this screen to configure multiple BSSs on the Z yXEL Device.
Chapter 2 Introducing the Web Configur ator P-660HW-Tx v3 Series User’s Guide 34 2.2.3 Main Window The main window displays information and configurati on fields. It is discussed i n the rest of this d ocument. Right after y ou log in, the Status scre en is displayed.
P-660HW-Tx v3 Series User’s Guide 35 C HAPTER 3 Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, sys te m resources, and interfaces (LAN and W AN). The Status screen also provides detailed information from Any IP and DHCP and statist ics from bandwidth management, and traffi c.
Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 36 Each field is desc ribed in the followi ng table. T able 4 Status Screen LABEL DESCRIPTION R efresh Interval Select how often you w ant the Z yXEL Device to update this screen. Apply Click this to update this screen immediately .
Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 37 WLAN Information SSI D This is the descriptive name used to identify the Z yXEL Device in a wireless LAN. Click this to go to the screen where you can change it. Channel This is the channel number used by the ZyXEL Dev ice now .
Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 38 3.3 Client List See Section 7.4 on page 126 for information on this screen. Status This field indicates whether or not the ZyXEL Device is using the interface.
Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 39 3.4 WLAN S t atus Use this screen to view the wireless statio ns that are currently associated to t he Z yXEL Device. Click Status > WLAN Status to access this screen. Figure 8 WLAN S tatus The following table describes t he labels in this screen.
Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 40 Each field is desc ribed in the followi ng table. 3.6 Packet S t atistics Read- only information here includes port status and packet specific statisti cs. Also provided are "system up time" and "pol l interval( s)".
Chapter 3 Status Screens P-660HW-Tx v3 Series User’s Guide 41 The following table describes t he fields in this screen. T able 7 Packet S t atistics LABEL DESCRIPTION Syst e m M on it or Syst e m u p T im e This is the elapsed time the system has been up.
Chapter 3 Sta tus Screens P-660HW-Tx v3 Series User’s Guide 42.
P-660HW-Tx v3 Series User’s Guide 43 C HAPTER 4 Tutorials 4.1 Overview This chapter shows you how t o use th e Z yXEL Device’ s vario us features. • Setting Up a Secure Wireless Network , see pa.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 44 4.2.1 Configuring the Wireless Network Settings This example uses the following par ameters to set up a wireless net work. 1 Click Netw ork > Wireless LAN to open the AP screen. Conf igure the screen using the provided parameters (see page 44 ).
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 45 2 Click the Advanced Se tup button and select Mixed in th e 802.11 Mod e field. Click Apply . Thomas can now use the WPS feature to establish a wireless connec tion between his notebook and the Z yXEL Devi ce (see Section 4.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 46 3 In the wireless client utility , go to th e WPS setting page. Enable WPS and pres s the WPS bu tt on ( Start or WPS butt on ) 4 Push and hold the WPS but ton located on the Z yXEL Device’ s rear panel for more than 5 seconds.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 47 The following figure shows y ou an example of how to set up a wireless network and its security by pressing a button on both Z yXEL Device and wireless client.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 48 PIN Configuration When you use the PIN configuration meth od, y ou need to use both the Z yXEL Device’ s web configurator and the wireless client’ s utility . 1 Launch your wireless client’s configuration utility .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 49 The following figure shows y ou how to set up a wireless network and it s security on a Z yXEL Device and a wireless client by using PIN method.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 50 4.2.3 Without WPS Use the wireless adapt er’s utilit y installed on the notebook to search for the “Example” SSID . Then enter the “DoNotSt ealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 51 2 Configure the screen as foll ows. T urn on the wireless network from Mondays to Fridays between 18:00 and 23:30. T urn on the wirele ss network a l l d ay on Saturdays and Sundays . Click Appl y .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 52 4.3 Setting Up Multiple Wireless Group s Company A wants to create different wirele ss network groups for different types of users as shown in the following figure. Each group has its own SSID , security mode and QoS control.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 53 1 Click Network > Wireless LAN to op en the AP screen. Use t his screen to set up the company’ s general wireless network gr oup. Configure the screen using the provided par ameters and click Apply .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 54 3 Configure the screen using the pr o vided parameters and cl ick Apply . 4 In the More AP screen, click the Edit icon to configure the third wireless network group.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 55 5 Configure the screen using the pr o vided parameters and cl ick Apply . 6 Activ ate the wireless network groups and cl ick Apply .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 56 4.4 Configuring the MAC Address Filter Thomas noticed that his daughter Joseph ine spend s too much time surfing the web and downloading media files. He dec i ded to prevent Josephine from accessing the Internet so that sh e can concentrate on preparing for her final exams.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 57 2 Click Netw ork > Wireless LAN to open the AP screen. Click the Edit but ton in the MAC Filter field. 3 Select Active MAC Filter and Deny Filter Action . Enter the MAC address you found in the Client List screen.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 58 4.5 Setting Up NA T Port Forwarding Thomas recently received an Xbo x 360 as his birthda y gift.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 59 2 Click Netw ork > NAT to open the General screen. Select Active Network Address Translation and SUA Only . Click Apply . 3 Click Netw ork > NAT to open the General screen. Enter the Xbox 360’ s IP address in the Default Server field.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 60 2 Click Netw ork > NAT > Port Forwarding to open the following screen. Select User define from the Service Name field. 3 Configure the screen as foll ows to open T CP/UDP p ort 53 for Xbo x 360.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 61 Thomas can then connect his Xbox 360 to the Internet and play online games with his friends. In this tutorial, all port 80 traffic is forw arded to Xbox 360, but port 80 is also the default listening port for remote manageme nt via WWW .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 62 • Adding a Firewall R ule for R emote Management • T esting the DDNS Setting Note: If you have a private W AN IP address, then you cannot use DDNS. 4.6.1 Registering a DDNS Account on www .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 63 2e Select Use WAN IP Address for the IP addres s update polic y . 2f Click Apply . 4.6.3 Adding a Firewall Rule for Remote Management By default, y our Z yXEL Device firewall is enabled to secure y our network from attacks.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 64 3c In the Source Address section, select Single Address and enter the IP address of the computer that you allo w to access the Z yXEL Device from t he Internet. Click Add . Select Any in the Source Address List and click De lete .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 65 3 The Z yXEL Device’ s login page should a ppear . Y ou can then log into the ZyXEL Device and manage it.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 66 Y ou need to specify a static routing rule on the Z yXEL Device to specify R as the router in charge of forwarding tr affic to N2 . In this case, the Z yXEL Device routes traffic from A to R and then R routes the tr affic to B .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 67 4 Configure th e Static Route Se tup screen using the following sett ings: 4a Select Active . 4b Specify a descriptiv e name for this routing rule. 4c Ty p e 192.168.10 .0 and subnet ma s k 255.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 68 This tutorial uses the following example settings: T o do this, you can use either of the followi ng settings: • Full F eature NA T with many-to- many no overload mapping • Full Feature NA T with one-to-one mapping 4.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 69 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 70 4.8.2 Full Feature NA T + One-to-One Mapping Use this setting if your applications must use fix ed public IP addresses and t he applications can be ini tiated eith er from the Intranet computers ( A and B ) or the Internet computer ( C ).
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 71 • Rule 2 (This map s the public IP address 172. 16.1.254 to the priv ate IP address 192.168.1.3) Ty p e : One-to-One Local Start IP: 192.168.1.3 Global Start IP: 172.16.1.25 4 Click Apply on each of the screens.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 72 • The connection with VPI/VCI, 0/35 , is dedicated for gener al data tr ansmission. Figure 1 1 Example for Multiple W AN Connections 4.10 Multiple P VCs with QoS This tutorial is onl y applicable for an ISP engineer .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 73 4.10.1 Configuring Multiple P VCs and A TM-QoS This section shows y ou how to configure two PVCs and specify a proper A TM-QoS type for each PVC.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 74 2 Click the Advanced Setup button to disp lay the fol lowing opt ions. Sele ct UBR in the ATM QoS Type field. Click Apply . 3 Click the More Connections tab and then click the Edit icon next to the entry two.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 75 •P V C : LLC , 0 / 33 Click Apply . 5 Click the Advanced Se tup button and then select CBR in the ATM QoS Type field.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 76 4.10.2 Configuring T raffic Classifiers This section shows y ou how to map differen t port tr affic to the different outgoing PVCs that the traffi c should go . In this tutorial, v oice traffic sent f rom port 4 should be transmi tted to PVC PVC-for-VoIP wit h WAN index 2.
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 77 Click Apply ..
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 78 3 The Class Setup screen appears. Click Add to create another QoS c lassifier rule for general data. 4 Configure this rule using the following example settings. • Class Configur ation: • Select Active .
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 79 • Physical P ort: 1~3 (means to ex clude port 4) Click Apply ..
Chapter 4 Tutorials P-660HW-Tx v3 Series User’s Guide 80 5 Click the General tab. The n select Active QoS and click Apply . Now you can connect a V oIP phone to the Z yXEL Device’s LAN port 4 and computers to port 1~3. The Z y XEL Device classifies and prioritizes v oice tr affic to optimize voice quality .
81 P ART II Wi z a r d Internet and Wireless Setup Wizard (83).
82.
P-660HW-Tx v3 Series User’s Guide 83 C HAPTER 5 Internet and Wireless Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information giv en to you by yo ur ISP . Note: See the advanced menu chapters for background information on th ese fields.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 84 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 13 Wizard W elcome 3 Y our ZyXEL device attempts to detect y our DSL connection and your connection type.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 85 3b The following screen displays if a PP PoE or PPP oA connection is detected. Enter your Internet account informatio n (username, password and/or service name) exactly as provided by your ISP .
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 86 5.2.1 Manual Configuration 1 If the Z yXEL Device fail s to detect your DSL connection type but the physical line is connected, enter y our Internet access information in the wi zard screen exactly as your service prov ider gave it to you.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 87 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with rout ing mode. Configure the fields and click Next to continue.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 88 The following table describes t he fields in this screen. Figure 19 Internet Connection with RFC 1483 T able 1 1 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 89 The following table describes t he fields in this screen. Figure 20 Internet Con nection with ENET ENCAP T able 12 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is av ailable if you select Routing in the Mode field.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 90 The following table describes t he fields in this screen. Figure 21 Internet Connection with PPPoA T able 13 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an I P Address Automatically A static IP address is a fixed IP that your ISP give s you.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 91 The following table describes t he fields in this screen. • If the user name and /or password you entered for PPP oE or PPPoA connect ion are not correct, the screen disp lays as shown next.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 92 5.3 Wireless Connection W izard Setup After you configure the Internet access in formation, use the following screens to set up your wirel ess LAN. 1 Select Yes and click Next to configure wireless settings.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 93 3 Configure your wireless sett ings in this screen. Cli ck Next . Figure 26 Wirele ss LAN The following table describes t he labels in this screen. Next Click this to continue to the next w izard screen.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 94 Note: The wireless stations and Z yXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wireless communication.
Chapter 5 Internet and Wireless Setup Wizard P-660HW-Tx v3 Series User’s Guide 95 5.3.2 Manually Assign a WEP Key Choose Manually assign a WEP key to setup WEP Encryption par ameters. Figure 28 Manually Assign a WEP key The following table describes t he labels in this screen.
Chapter 5 Inter n et an d Wireless Set up Wi zar d P-660HW-Tx v3 Series User’s Guide 96 6 Use the read-only summary table to check whether what you hav e configured is correct. Click Finish to complete and s ave th e wi zard se tup. Note: No wireless LAN settings display if you chose not to configure wireless LAN settings.
97 P ART III Network WAN Setup (99) LAN Setup (119) Wireless LAN (137) Network Address T ranslation (NA T) (171).
98.
P-660HW-Tx v3 Series User’s Guide 99 C HAPTER 6 WAN Setup 6.1 Overview This chapter describes how to co nfigure WAN settings from the WAN screens. Use these screens to conf igure your Z yXEL Device for Int ernet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 100 they should also provide a username an d password (and service name) for user authentication. W AN IP Address The WAN IP address is an IP address for the Z yXEL Device, which mak es it accessible from an outside network.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 101 6.2 The Internet Access Setup Screen Use this screen to change y our Z yXEL Device’ s W AN settings. Click Network > WAN > Internet Access Setup . The screen diff ers by the WAN t ype and encapsulation you select.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 102 The following table describes t he labels in this screen. T able 19 Network > WAN > Internet Access Setup LABEL DESCRIPTION Line Modulation Select the modulation supported by your ISP .
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 103 IP Address This option is av ailable if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP giv es you. A dynamic IP address is not fi xed; the ISP assigns you a different one each time you connect to the Internet.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 104 6.2.1 Advanced Internet Access Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 105 Multicast Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast pack ets (packets sent to one computer) and broadcast packets (packets sent to every computer).
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 106 Protocol F ilter Select the protocol filter(s) to control incoming traffic. Y ou may choose up to 4 sets of filters. Y ou can configure packet filters in the Packet Filter screen. See Chapter 12 on page 219 for more details.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 107 6.3 The More Connections Screen The Z yXEL Device allows y ou to conf igure more than one Internet access connection. T o configure additional Internet ac cess connections click Network > WAN > More Connections .
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 108 6.3.1 More Connections Edit Use this screen to configure a conn ection. Click the ed it icon in the More Connections screen to display the following screen. Figure 35 Network > W AN > More Connections: Edit The following table descri bes the labels in this screen.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 109 Mode Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge , the ZyXEL Device will forw ard any packet that it does not route to this remote node; otherwise, the packets are discarded.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 0 Gateway IP address This option is av ailable if you select ENET ENCAP in the Encapsulation field. Specify a gateway IP address (supplied by your ISP). Connection Nailed-Up Connection Select Nailed-Up Connection when you w ant your connection up all the time.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 111 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your Z yXEL De vice's adv anced W AN settings. Click the Advanced Setup button in the More Connections Edit screen.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 2 AT M Q o S Ty p e S e l e c t CBR (Continuous Bit Rate) to specify fixed (alwa ys-on) bandwidth for voice or data tr affic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 3 6.4 W AN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 6.4.1 Encap sulation Be sure to use the encapsulation method required by your ISP .
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 4 since the Z yXEL Device does that part of the task. Furthermore, with NA T , all of the LANs’ computers will ha ve access. 6.4.1.3 PPPoA PPP oA stands for P oint to P oint Protocol o ver A TM Adaptation Lay er 5 (AAL5).
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 5 and for the VCI is 32 to 65535 (0 to 31 is reserved for local manag ement of A T M traffic ). Please see the appendix f or more information. 6.4.4 IP Address Assignment A static IP is a fix e d IP that your ISP g iv e s y ou.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 6 packet, used wit hin one network to a di fferent IP address known within anot her network. 6.5 T raffic Shaping T raffi c Shaping is an agreement between th e ca rrier and the subscriber to regulate the aver age rate and fluctuations of data t ransmission o ver an A TM network.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 7 6.5.1 A TM T raffic Classes These are the basic A TM traffic classes d efined by the A TM Forum T raffic Management 4.0 Specificati on. Const ant Bit Rate (CBR) Constant Bit R ate (CBR) provid es fixed bandwidth that is always a vail able even if no data is being sent.
Chapter 6 WAN Setup P-660HW-Tx v3 Series User’s Guide 11 8.
P-660HW-Tx v3 Series User’s Guide 11 9 C HAPTER 7 LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communicat ion system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 120 7.1.2 What Y ou Need T o Know About LAN IP Address IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 121 Finding Out More See Section 7.6 on page 129 for technical background information on LANs. 7.1.3 Before Y ou Begin Find out the MAC addresses of your networ k d evices if you intend to add them to the DHCP Client List screen.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 122 The following table describes t he fields in this screen. 7.2.1 The Advanced LAN IP Setup Screen Use this screen to edit your Z yXEL Devi ce's RIP , multicast, Any IP and Wi ndows Networking settings.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 123 The following table describes t he labels in this screen. T able 25 Network > LAN > IP: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Out Only .
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 124 7.3 The DHCP Setup Screen Use this screen to configure the DNS se rv er information that the Z y XEL Device sends to the DHCP client devices on the LAN. Cl ick Network > DHCP Set up to open this screen.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 125 The following table describes t he labels in this screen. T able 26 Network > LAN > DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If se.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 126 7.4 The Client List Screen This table allows y ou to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet dev ice has a unique MAC (Media Access Control) address.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 127 7.5 The IP Alias Screen IP alias al lo ws you to partit ion a physica l network into differe nt logical networks over the same Ethernet interface.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 128 7.5.1 Configuring the LAN IP Alias Screen Use this screen to change yo ur Z yXEL Device’s IP alias sett ings. Click Network > LAN > IP Alias to open the following screen. Figure 43 Network > LAN > IP Alias The following table describes t he labels in this screen.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 129 7.6 LAN T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 7.6.1 LANs, W ANs and the ZyXEL Device The actual physical connec tion determines whether the Z y XEL Device ports are LAN or W AN ports.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 130 7.6.2 DHCP Setup DHCP (Dynamic Host Configur ation Protocol , RFC 2131 and RFC 2132) allows individual clients to obtai n T CP/IP configur ation at start -up from a server . Y ou can configure the Z yXEL Device as a DHCP serv er or disable it.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 131 7.6.4 LAN TCP/IP The Z yXEL Device has built -in DHCP server capabilit y that assigns IP addresses and DNS servers to systems t hat support DHCP client capabilit y .
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 132 • 192.168.0.0 — 192.168 .255.255 Y ou can obtain your IP address from the IANA, from an ISP or it c an be assigned from a private network.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 133 IGMP (Internet Group Mu lticast Protocol) is a ne twork - layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) i s an improvement ov er version 1 (R FC 1112) but IGMP version 1 is still in wide use.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 134 without changing the network settings, even when the IP addresses of the computer and the Z yXEL Device are not in the same subnet.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 135 4 The computer updates the MAC address for the default gatewa y to the ARP table. Once the ARP table is updated, the comp uter is able to access the Internet through the Z yXEL Device.
Chapter 7 LAN Setup P-660HW-Tx v3 Series User’s Guide 136.
P-660HW-Tx v3 Series User’s Guide 137 C HAPTER 8 Wireless LAN 8.1 Overview This chapter describes how to perform task s related to setting up and optimizing your wirele ss net w or k, includi ng the foll owi n g . • T urning the wireless connection on or off .
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 138 Y ou don’ t necessarily need to use all these screens to set up your wireless connection. F or example, yo u may just want to set up a network name, a wireless radio channel and security in the AP screen.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 139 • What wireless st andards do the other wi reless devices in your network support (IEEE 802.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 140 The following table describes t he labels in this screen. T able 29 Network > Wireless LAN > AP LABEL DESCRIPTION Wireless Setup Active Wireless LAN Click the check box to activ ate wireless LAN.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 141 8.2.1 No Security In the Network > Wireless LAN > AP screen, select No Sec urit y from the Security Mode list to allow wireless devices to communicate with the Z yXEL Device without any data encr yption or authen tication.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 142 8.2.2 WEP Encryption Use this screen to configure an d enable WEP encryption. Click Network > Wireless LAN to display the AP screen. Select Static WEP from the Security Mode list. Note: WEP is extremely insecure.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 143 8.2.3 WP A(2)-PSK Use this screen to configure and enab le WP A(2)-PSK authentication. Cl ick Network > Wireless LAN to di splay the AP screen. Select WPA-PSK or WPA2- PSK from the Security Mode li s t.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 144 8.2.4 WP A(2) Authentication Use this screen to configure and enable WPA or WP A2 authentication. Click the Wireless LAN link under Network to display the AP screen. Sel ect WPA , WPA2 or WPAMixed from the Security Mode list.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 145 The following table describes t he wirele ss LAN security labels in this screen. T able 33 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION Security Mode Choose WPA or WPA2 from the drop-down list box.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 146 8.2.5 Wireless LAN Advanced Setup Use this screen to configure adva nced wireless settings. Cl ick the Advanced Setup button in th e AP screen. The screen appears as shown. See Section 8.8.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 147 8.2.6 MAC Filter Use this screen to change y our Z yXEL Device’ s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 52 Network > Wireless LAN > AP: MAC Ad dress Filter 802.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 148 The following table describes t he labels in this screen. 8.3 The More AP Screen This screen allows y ou to enable and conf igure multiple Basi c Service Sets (BS Ss) on the Z yXEL Device.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 149 The following table describes t he labels in this screen. 8.3.1 More AP Edit Use this screen to ed it an SSID profile. Click the Edit icon next to an S SID in the More AP screen. The following screen displays.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 150 The following table describes t he fields in this screen. T able 37 Network > Wireless LAN > More AP: Edit LABEL DESCRIPTION Network Name (SSID) The SSID (Service Set IDentity) iden tifies the service set with which a wireless device is associated.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 151 8.4 The WPS Screen Use this screen to configure WiFi Prot ected Setup (WPS) on your Z yXEL Device. WPS allows you to q uickly set up a wirele ss network with strong securit y , without having to conf ig ur e security se tt i ng s man ually .
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 152 8.5 The WPS S t ation Screen Use this screen to set up a WPS wire less network using ei ther Push Butt on Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS Station .
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 153 The following table describes t he labels in this screen. 8.6 The WDS Screen An AP using the Wireless Distribution S y stem (WDS) can function as a wireless network bridge allowing y ou to wirele ssly connect two wired network segments.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 154 Click Network > W ireless LAN > WDS . The following screen displays. Figure 57 Network > Wireless LAN > WDS The following table describes t he labels in this screen.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 155 8.7 The Scheduling Screen Use the wireless LAN scheduling to config ure the da ys you want to enable or disable the wireless LAN. Cl ick Network > Wireless LAN > Scheduling . The following screen displays.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 156 8.8 Wireless LAN T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. 8.8.1 Wireless Network Overview Wireless networks c onsist of wireless clients, access points and bridges.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 157 The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point ( AP ) to interact wit h the other devices (such as the printer) or with the Intern et.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 158 8.8.2 Additional Wireless T erms The following table descri bes some wirele ss net work terms and acronyms used in the Zy XEL Device’s W eb Configurator . 8.8.3 Wireless Security Overview By their nature, rad io communications are si mple to intercept.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 159 These security standards v ary in effectiv eness. S o m e ca n be broken, such as the old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at all, but it will not k eep a determined attack er out.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 160 Y ou can use the MAC address filter to t ell the Z yXEL Device which devices are allowed or not all owed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (S SID, channel , and security).
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 161 For example, if the wireless networ k has a RADIUS server , you can choose WPA or WPA2 . If users do not log i n to the wireless network, you can choose no encryption, Static WEP , WPA-PSK , or WPA2-PSK .
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 162 and communicate with each other . When Intr a-BSS tr affic blocking is enabled, wireless station A and B can stil l access the wired network but cannot communicate with each other . Figure 60 Basic Service set 8.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 163 8.8.7 Wireless Distribution System (WDS) The Z yXEL Device can act as a wireless network bri dge and establish WDS (Wireless Distribution System) links wi th other APs. Y ou need to know the MAC addresses of the APs you w ant to link to.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 164 8.8.8.1 Push Button Configu ration WPS Push Bu t ton Conf iguration (PBC) is initiate d by pressin g a button on ea c h WPS-enabled device, and allowing them to connect automatically . Y ou do not need to enter any information.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 165 T ake the following steps to set up a WP S connection between an access point or wireless router (referred to here as th e AP) and a c lient device using the PIN method. 1 Ensure WPS is enabled on both devices.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 166 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 62 Example WPS Process: PIN Method 8.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 167 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 63 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes).
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 168 8.8.8.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 169 point. However , you know that Client 2 supports the registrar function, so y ou use it to perform the WPS handshak e instead. Figure 66 WPS: Example Network S tep 3 8.8.8.5 Limit ations of WPS WPS has some limitations of which you should be a ware.
Chapter 8 Wireless LAN P-660HW-Tx v3 Series User’s Guide 170 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network.
P-660HW-Tx v3 Series User’s Guide 171 C HAPTER 9 Network Address Translation (NAT) 9.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 172 NA T In the simplest form, NA T changes the source IP address in a packet receiv ed from a subscriber (the inside l ocal address) to another (the inside global address) before forwarding t he packet to the WA N side.
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 173 9.2 The NA T General Setup Screen Use this screen to activ ate NA T .
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 174 9.3 The Port Forwarding Screen Note: This screen is avail able only when you select SUA only in the NA T > General screen. Use this screen to forw ard incoming servic e requests to the server(s) on your local network.
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 175 Configuring Servers Behind Port Forw arding (Example) Let's say you want to assi gn ports 21-25 to o n e F T P , T e ln e t a n d S M T P s er v e r ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 176 The following table describes t he fields in this screen. T able 45 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to the servers for specif ied services, NA T supports a default server .
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 177 9.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule . Click t he rule ’ s edit icon in t he Port Forwarding screen to display the screen shown next.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 178 9.4 The Address Mapping Screen Note: The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify .
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 179 9.4.1 The Address Mapping Rule Edit Screen Use this screen to ed it an address mapping rul e. Click the rule’ s edit icon in the Address Mapping screen to display the screen shown next.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 180 The following table describes t he fields in this screen. T able 48 Network > NA T > Address Mapping: Edit LABEL DESCRIPTION Ty p e Choose the port mapping type from one of the following.
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 181 9.5 The SIP ALG Screen Some NA T routers may include a SIP Application Layer Gateway (AL G). A SIP ALG allows SIP calls to pass through NA T by examining and translati ng IP addresses embedded in the data stream.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 182 packet is in the local network, while the gl obal address refers to the IP address of the host when the same packet is traveling in the WAN side.
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 183 9.6.3 How NA T Works Each packet has two addres ses – a source address and a destination address. For outgoing packets, t h e ILA (Inside Local Addr ess) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the W AN.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 184 9.6.4 NA T Application The following figure illustr ates a possible NA T application, where three inside LANs ( l o g i c a l L A N s u s i n g I P a l i a s ) b e h i n d t h e ZyXEL Device can communicat e with three distinct W AN networks.
Chapter 9 Network Address Tran slation (NAT) P-660HW-Tx v3 Series User’s Guide 185 P ort numbers do NO T change for One-to- One and Many-to-Many No Overload NA T mapping types.
Chapter 9 Net wo rk Addr ess Translation (NAT ) P-660HW-Tx v3 Series User’s Guide 186.
187 P ART IV Security Firewalls (189) Content Filtering (211) P acket Filter (219) Certificates (229).
188.
P-660HW-Tx v3 Series User’s Guide 189 C HAPTER 10 Firewalls 10.1 Overview This chapter shows you how t o enable an d configure the Z yXE L Device firewall. Use these screens to enable and configure the firew all that protects your Z yXEL Device and network from attacks by hacker s on the Internet and control ac cess to it.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 190 •U s e t h e Threshold screen ( Section 10.4 on page 202 ) to set the thresholds that the Z yXEL Device uses to determine when to start dropping sessions that do not become fully established (half -open sessions).
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 191 10.1.3 Firewall Rule Setup Example The following Internet firewall rule ex ample allows a hypothetical “MyService” connection from the Internet. 1 Click Security > Firewall > Rul es .
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 192 6 Click an index number to displa y the Customized Services Config screen and configure the screen as follows and click Apply . Edit Custom Port Example 7 Select Any in the Destination Address List box and then clic k Delete .
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 193 9 Use the Add >> and Remove butt ons between Available Services and Selected Services list boxes to configure i t as follows. Click Apply when you are done. Note: Custom services show up with an “*” before their names in the Services list box and the Rules list box.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 194 On comple ti ng th e configu ration proc e dure for this In t ern et firewall rul e, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 195 The following table describes t he labels in this screen. T able 52 Security > Firewall > General LABEL DESCRIPTION Active Firewall Select this check box to activ ate the firew all.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 196 10.3 The Firewall Rule Screen Note: The ordering of your rules is very impo rtant as rules are applied in turn. Ref e r t o Section 10.5 on page 205 for more information. Click Security > Firewall > Rules to bring up the following s creen.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 197 Destination IP This drop-down list box displa ys the destination addresses or ranges of addresses to which this firewall rule applies. Please note that a blank source or destination address is equiv alent to Any .
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 198 10.3.1 Configuring Firewall Rules Ref e r t o Section 10.1.2 on page 190 for more information.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 199 The following table describes t he labels in this screen. T able 54 Security > Firewall > Rules: Edit LABEL DESCRIPTION Edit Rule Active Select this option to enable this firewall rule.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 200 10.3.2 Customized Services Configure customized servi ces and port numbers not predefined by the Z yXEL Device. For a comprehensive list of port numbers and services, visi t the IANA (Internet Assigned Number Authority) website.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 201 10.3.3 Configuring a Customized Service Use this screen to add a customized rul e or edit an existing rule. Click a rule number in the Firewall Customized Services screen to displa y the following screen.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 202 10.4 The Firewall Threshold Screen For D o S attacks, the ZyXEL Device uses thresholds to determine when to start dropping sessions that d o not become fully esta blished (half -open sessions).
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 203 5 T ype of traffic for certain servers. Re duce the threshold v alues if your netw ork is slower than average for any of these factors (especially i f you have serv ers that are slow or handle many tasks and are often busy).
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 204 One Minute H igh This is the rate of new half -open sessions per minute that causes the firewall to start deleting half -open sessions.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 205 10.5 Firewall T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 10.5.1 Firewall Rules Overview Y our customized rules take prec edence and ov erride the Z yXEL Device’ s default settings.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 206 •W A N t o W A N / R o u t e r By default the Z y XEL Device stops computers on the WAN from managing the Z yXEL Device or using the Z yXEL Device as a gateway to communicate with other computers on the WAN.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 207 10.5.3 Security Considerations Note: Incorrectly configuring the firewall ma y block valid access or introduce security risks to the ZyXEL Device and your protected net work. Use caution when creating or deleting firewall rules and test your rules after you configure them.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 208 10.5.4.1 The “T riangle Route” Problem A tr affic route is a path for sending or receiving data packets between two Ethernet devices. Y ou may have more than one connection to the Interne t (through one or more ISPs).
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 209 It’ s like having multipl e LAN networks that actually use the same ph ysical cables and ports. By putting your LAN an d Ga teway A in different subnet s, all returning network tr affic must pass through t he Z yXEL Device to your LAN.
Chapter 10 Firewalls P-660HW-Tx v3 Series User’s Guide 210.
P-660HW-Tx v3 Series User’s Guide 21 1 C HAPTER 11 Content Filtering 1 1.1 Overview Internet content filtering allows y ou to block web sites based on keywords in the URL. See Section 11.1.4 on page 212 for an example of setting up c ontent filtering.
Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 212 1 1.1.4 Content Filtering Example The following shows the steps required for a parent (Bob) to set up content filtering on a home network in order t o li mit his children’ s access to certain web sites.
Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 213 4 Click Apply . Security > Conten t Filter > S chedule: Example The childre n ca n access th e fa mily comp ut er in the living room , while only the parents use another comput er in the stud y room.
Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 214 1 1.2 The Keyword Screen Use this screen to block si tes containing certain keywords i n the URL. F or example, if y ou enable the k eyword "bad", the Z yXEL Devi ce blocks all sites containing this keyword including th e URL http://www .
Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 215 1 1.3 The Schedule Screen Use this screen to set the days and time s for the Z yXEL Device to perform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown.
Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 216 The following table describes t he labels in this screen. 1 1.4 The T rusted Screen Use this screen to exclude a r ange of us ers on the LAN from content filtering on your Z yXEL Device.
Chapter 11 Co n te nt F ilt ering P-660HW-Tx v3 Series User’s Guide 217 Apply Click this to save yo ur changes. Cancel Click this to restore your previously saved settings.
Chapter 11 Content Filtering P-660HW-Tx v3 Series User’s Guide 218.
P-660HW-Tx v3 Series User’s Guide 219 C HAPTER 12 Packet Filter 12.1 Overview Y our ZyXEL Device uses filters to decide whether to allow passage of tr affic. This chapter discusses how to create and apply filters. 12.1.1 What Y ou Can Do in the Packet Filter Screen Use the Packet Filter screens ( Section 12.
Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 220 12.2 The Packet Filter Screen Use this screen to set up p acket filters on your Z yXEL Device. Click Security > Packet Filter to display the fo llowing scre en. Figure 90 Security > Packet Filter The following table describes t he labels in this screen.
Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 221 12.2.1 Editing Protocol Filters Use this screen to display a protocol filter set on y our Zy XEL De vice. Protocol rules allow you t o base the rule on the fields in the IP and the upper layer protocol, for example, UDP and TCP headers.
Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 222 12.2.2 Configuring Protocol Filter Rules Use this screen to configure pr otocol filter rules. In the Edit (Protocol Filter) screen, click an Edit ic on to display the following screen.
Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 223 12.2.3 Editing Generic Filters Use this screen to disp lay a generic filt er set on y our Z yXEL Device. The purpose of generic rules is to allow you to filter non- IP packets. F or IP packets, it is generall y easier to use the IP rules di rectly .
Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 224 Offset (from 0) and the Length fields, both in bytes. The Z yXEL Device applies the Mask (bit-wise AN Di ng ) to th e d ata portio n before com p a r ing the resu lt against the V alue to determine a match.
Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 225 12.2.4 Configuring Generic Packet Rules Use this screen to configure generic filter rules. In the Edit (Generic Filter) screen, click the Edit button from the Modify field to displ ay the fol lowing screen.
Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 226 12.3 Packet Filter T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 12.3.1 Filter T ypes and NA T There are two classes of filter rules, generic filter rules and protocol filter rules.
Chapter 12 Packet Filter P-660HW-Tx v3 Series User’s Guide 227 receiving and sending the pack ets; that is the interface. The interface can be an Ethernet port or any other hardware port . The fol lowing d iagram illu strates th is. Figure 95 Protocol and Generic F ilter Sets 12.
Chapter 12 Pa ck et F ilt er P-660HW-Tx v3 Series User’s Guide 228 • The firew all performs stateful inspection. It takes into account t he state of connections it handles so that, for examp le, a legitimate incoming packet can be matched with the out bound request for th at pack et and allowed in.
P-660HW-Tx v3 Series User’s Guide 229 C HAPTER 13 Certificates 13.1 Overview This chapter describes how y our Z yXEL Devi ce can use certificates as a means of authenticating wireless cl ients. It giv e s background information about public - key certificates and explains how to use them.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 230 information and pub lic keys and then send t he certification requests to a certification authority . Certificate File Format s The certification authority cert ifi cate that you want to import has to be in one of these file formats: • Binary X.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 231 The following table describes t he labels in this screen. T able 66 T rusted CAs LABEL DESCRIPTION PKI Storage Space in Use This bar displays the percentage of the ZyXEL Device’ s PKI storage space that is currently in use.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 232 13.2.1 T rusted CA Import Fol low the instructions in this screen to save a trusted certification authorit y’ s certificate to the Z yXEL Device. Click Security > Certificates to open the Trusted CAs screen and then click Import to open the Trusted CA Import screen.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 233 13.2.2 T rusted CA Det ails Use this screen to view in-depth inform ation about the certification authority’ s certificate, change the.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 234 V ersion This field displays the X.509 version number . Serial Number This field displays the certificate’ s identification number given by the certification authority . Signature Algorithm This field displays the type of algorithm that w as used to sign the certificate.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 235 13.3 Certificates T echnical Reference This section provides technical background information about the topics cov ered in this chapter . 13.3.1 Certificates Overview The Z yXEL Device can use certifica tes (als o called digital IDs) to authenticate users.
Chapter 13 Certificates P-660HW-Tx v3 Series User’s Guide 236 1 Tim wants to send a message to Jenn y . He needs her to be sure that it comes from him, and that the message content has not been altered by an yone else along the way . Tim generates a public k ey pair (one public key and one priv ate k ey).
237 P ART V Advanced Static R oute ( 239) 802.1Q/1P (243) Quality of Service (QoS) (253) Dynamic DNS Setup (269) Re mote Management (273) Universal Plug-and-Pla y (UPnP) (281).
238.
P-660HW-Tx v3 Series User’s Guide 239 C HAPTER 14 Static Route 14.1 Overview The Z yXEL Device usually uses the default gatewa y to route outbound tr affic from computers on the LAN to the Internet. T o have the Z yXEL Device send data to devices not reachable through the de fault g ateway , use stat ic routes.
Chapter 14 Stat ic Route P-660HW-Tx v3 Series User’s Guide 240 14.2 The S t atic Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen. Figure 101 Advanced > S tatic Route The following table describes t he labels in this screen.
Chapter 14 Static Route P-660HW-Tx v3 Series User’s Guide 241 14.2.1 S t atic Route Edit Use this screen to configure the required information for a static route.
Chapter 14 Stat ic Route P-660HW-Tx v3 Series User’s Guide 242 Gateway IP Address This field is available when you select Gateway Address from Gateway Type . Enter the IP address of the gatew ay . The gateway is a rou ter or switch on the same network segment as the device's LAN or W AN port.
P-660HW-Tx v3 Series User’s Guide 243 C HAPTER 15 802.1Q/1P 15.1 Overview This chapter describes how to c onfigure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partit ioned into multiple logi cal networks.
Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 244 IEEE 802.1Q T agged VLAN T agged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a fr ame across bri dges - they are not confined to the device on which they were c reated.
Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 245 15.1.3 802.1Q/1P Example This example shows how to configur e the 802.1Q/1P settings on the Z y XEL Device. 802.1Q/1P Example LAN1 and LAN2 are c o nn ected to A T As (An alogue T ele ph one Adapters ) an d used for V oIP tr affic.
Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 246 6 Click Apply . Advanced > 802.1Q/ 1P > Group Setting > Edit: Ex ample T o set a high priority for V oIP traffi c, follow these steps. 1 Click Advanc ed > 802.1Q/1P > Port Setting to display the following sc reen.
Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 247 4 Click Apply . Advanced > 802.1Q/ 1P > Port Setting: Example P orts 3 and 4 are connected to desktop computers and are used for Internet traffic. Y ou want to cre ate low p riority for th is type o f traffic, so yo u want to gro up these ports and PVC2 into one VLAN (VLAN3).
Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 248 Fol low the same steps as in VLAN2 to co nfigure the setting s for VLAN3 and VLAN4. The summary screen should then displa y as follows. Advanced > 8 02.1Q/1P > Grou p Setting: Ex ample This completes the 802.
Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 249 15.2 The 802.1Q/1P Group Setting Screen Use this screen to activ ate 802.1Q/1P and d isplay the VLAN groups . Click Advanced > 802.1Q/1P to display the following screen. Figure 104 Advanced > 802.
Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 250 15.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure th e setti ngs for each VLAN group . In the 802.1Q/1P screen, click the Edit button from the Modify filed to displ ay the following screen.
Chapter 15 802.1 Q/1P P-660HW-Tx v3 Series User’s Guide 251 The following table describes t he labels in this screen. T able 72 Advanced > 802.1Q/1P > Group Setting > Edit LABEL DESCRIPTION Name Enter a descriptive name for the VLAN group for identification purposes.
Chapter 15 802.1Q/1P P-660HW-Tx v3 Series User’s Guide 252 15.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID and a ssig n traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to displa y the foll owing screen.
P-660HW-Tx v3 Series User’s Guide 253 C HAPTER 16 Quality of Service (QoS) 16.1 Overview Use the QoS screens to set up your Z yXEL Device to use QoS for tr affic management. Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking meth ods used to control bandwidth.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 254 16.1.2 What Y ou Need to Know About QoS QoS versus C os QoS is used to prioritize s o urce-to-destinat i on traffic flows. All packets in the same flow are given the same priority .
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 255 these two classes are assigned priorit y queue based on the internal QoS mapping table on the ZyXEL Device. Figure 107 QoS Example Figure 108 QoS Class Example: V oIP -1 50 Mbps DSL V oIP: Queue 6 Boss: Queue 5 IP=192.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 256 Figure 109 QoS Class Example: V oIP -2 Figure 1 10 QoS Class Example: Bo ss -1.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 257 Figure 1 1 1 QoS Class Example: Boss -2.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 258 16.2 The QoS General Screen Use this screen to enable or disable QoS and ha ve the Z yXEL Device automatically assign priority to tr affic accordi ng to the IEEE 802.1p priorit y level, IP precedence and/or packet length.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 259 16.3 The Class Setup Screen Use this sc reen to add, ed it or delete classi fiers.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 260 The following table describes t he labels in this screen. T able 75 Advanced > QoS > Class Setup LABEL DESCRIPTION Create a new Class Click this to create a new classifier .
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 261 16.3.1 The Class Configuration Screen Use this screen to configure a classifier .
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 262 See Appendix E on page 411 for a list of commonly-use d services. The following table des c r ib es the labe ls in this scre en. T able 76 Advanced > QoS > Class Setup: Edit LABEL DESCRIPTION Class Configur ation Active Select the check box to enable this classifier .
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 263 802.1Q T a g Select Same to keep the priority setting and VLAN ID of the frames. Select Auto to map the 802.1 priority level to the DSCP v alue automatically . Select Remove to delete th e priority queue tag and VLAN ID of the frames.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 264 MAC Mask T ype the mask for the specified MAC address to determine which bits a packet’ s MAC address should match. Enter “f ” for each bit of the specified destination MAC address that the traffic’ s MAC address should match.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 265 16.4 The QoS Monitor Screen Use this screen to view the Z yXEL De vice’ s QoS packet statistics. Click Advanced > QoS > Moni tor . The screen appears as shown. Figure 1 15 Advanced > QoS > Monitor The following table describes t he labels in this screen.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 266 16.5 QoS T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter .
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 267 16.5.3 DiffServ QoS is used to prioritize source-to- desti nat ion traffic flows. All packets in the flow are given the same priority . Y ou ca n use CoS (class of service) to give different priorities to different pac ket types.
Chapter 16 Quality of Service (QoS) P-660HW-Tx v3 Series User’s Guide 268 gets through faster while traffic in lower index queues is dropped if the network is congested. T able 79 Internal Layer2 and Layer3 QoS Mapping PRIORITY QUEUE LAYER 2 LAYER 3 IEEE 802.
P-660HW-Tx v3 Series User’s Guide 269 C HAPTER 17 Dynamic DNS Setup 17.1 Overview Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.
Chapter 17 Dy namic DNS Se tup P-660HW-Tx v3 Series User’s Guide 270 17.2 The Dynamic DNS Screen Use this screen to change your Z yXEL Device’ s DDNS. Click Advanced > Dynamic DNS . The screen appears as shown. Figure 1 16 Advanced > Dynamic DNS The following table describes t he fields in this screen.
Chapter 17 Dynamic DNS Setup P-660HW-Tx v3 Series User’s Guide 271 Enable Wildcard Optio n Select the check box to enable DynDNS Wildcard. Enable off line optio n This option is available when CustomDNS is selected in the DDNS Type field.
Chapter 17 Dy namic DNS Se tup P-660HW-Tx v3 Series User’s Guide 272.
P-660HW-Tx v3 Series User’s Guide 273 C HAPTER 18 Remote Management 18.1 Overview Re mote management allows you to determi ne which services/protocols can acces s which Z yXEL Device interface (if any) from which computers. The following figure shows remote manage ment of the Z yXEL Device c oming in from the WAN.
Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 274 T o disable remote management of a service, select Disable in the corresponding Access Status field.
Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 275 • There is a firewall rule that bloc ks it. Remote Management and NA T When NA T is enabled: • Use the Z yXEL Device’ s WAN IP ad dr ess when configuring from the W AN. • Use the Z yXEL Device’ s LAN IP address when configuring from the LAN.
Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 276 The following table describes t he labels in this screen. 18.3 The T elnet Screen Y ou can use T elnet to access the Z yXEL Device’s command line interface. Specify which interfaces allow T elnet access an d from which IP address the access can come.
Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 277 The following table describes t he labels in this screen. 18.4 The FTP Screen Y ou can use F TP (File T ransfer Protocol) to upload and download the ZyXEL Device’s firmware and config uration files.
Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 278 The following table describes t he labels in this screen. 18.5 The DNS Screen Use DNS (Domain Name S ystem) to map a domain name to i ts corresponding IP address and vice v ersa. R efer to Chapter 7 on page 119 for background informat ion.
Chapter 18 Remote Manag ement P-660HW-Tx v3 Series User’s Guide 279 The following table describes t he labels in this screen. 18.6 The ICMP Screen T o change your Z yXEL Device’ s security settings, clic k Advanced > Remote MGMT > ICMP . The screen appears as shown.
Chapter 18 Remote Management P-660HW-Tx v3 Series User’s Guide 280 The following table describes t he labels in this screen. T able 85 Advanced > Remote Management > ICMP LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error - reporting protocol between a host server and a gateway to the Internet.
P-660HW-Tx v3 Series User’s Guide 281 C HAPTER 19 Universal Plug-and-Play (UPnP) 19.1 Overview Universal Plug and Play (UPnP) is a d ist ributed, open networking standard that uses TCP/IP for simple peer -to-peer ne twork connec t iv ity be tween dev ice s.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 282 Windows Messenger is an example of an application that supports NA T traversal and UPnP .
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 283 19.2 The UPnP Screen Use the following screen to configure the UPnP settings on your Z yXEL Device. Click Advanc ed > UPnP to display the screen shown next. See Section 19.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 284 19.3 Inst alling UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP . Inst alling UPnP in Windows Me Fol low the steps below to install the UPnP in Windows Me.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 285 3 In the Communications window , select the Universal Plug and Play check box in the Compone nts selection bo x. Add/Remove Programs: Wi ndows Setup: Communicatio n: Component s 4 Click OK to go back to the Add/Remove Programs Properties window and click Next .
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 286 3 In the Network Connections window , click Adv anced in the m ain me nu and select Optional Networking Components … . Network Co nnection s 4 The Windows Optional Networking Components Wizard window displays.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 287 5 In the Networking Services window , select the Universal Plug and Play check box. Networki ng Services 6 Click OK to go back to the Windows Optional Networking Component Wizar d window and click Next .
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 288 2 Right- click the icon and select Properties . Network Co nnection s 3 In the Internet Connection Properties window , click Settings to see the por t mappings there were automatically created.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 289 4 Y ou may edit or delete the port mapping s or click Add to manually add port mappings.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 290 6 Select Show icon in notification area when connected option and click OK . An icon displays in the system tr ay . System Tray Icon 7 Double-click on the icon to display y o ur current In te rnet connection status.
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 291 3 Select My Network Places under Other Places . Network Co nnection s 4 An icon with the description f or each UPnP-enabled device displays under Local Network .
Chapter 19 Universal Plug-and-Play (UPnP) P-660HW-Tx v3 Series User’s Guide 292 5 Right- click on the icon for your Z yXEL Device and select Invoke . The web configurator login screen displays. Network Co nnection s: My Netw ork Plac es 6 Right- click on t he icon for y our Z yXEL Device and select Properties .
293 P ART VI Maintenance System Settings (295) Logs (301) T ools (315) Diagnostic (329).
294.
P-660HW-Tx v3 Series User’s Guide 295 C HAPTER 20 System Settings 20.1 Overview This chapter shows you how to configure system related settings, suc h as system time, password, name, the domain name an d the inactivity timeout interv al. 20.1.1 What Y ou Can Do in the System Settings Screens •U s e t h e General screen ( Section 20.
Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 296 20.2 The General Screen Use this screen to configure system se ttings such as the system and domain name, inactivity timeout interval and system password . The System Name is for identification purposes.
Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 297 The following table describes t he labels in this screen. T able 87 Maintenance > System > General LABEL DESCRIPTION Syst e m S et up Syst e m N am e Choose a descriptive name for identification purp oses.
Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 298 20.3 The T ime Setting Screen Use this screen to configure the Z yXEL De vi ce’ s time based on y our local time zone. T o change your Z yXEL Device’ s time and date, click Mainten ance > System > Time Setting .
Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 299 New Time (hh:mm:ss) This field displays the last updated time from the time server or the last time configured manually . When you set Time and Date Setup to Manual , enter the new time in this field and then click Apply .
Chapter 20 System Settings P-660HW-Tx v3 Series User’s Guide 300 End Date Configure the day and time when Da ylight Sa ving Time ends if you selected Enable Daylight Saving . The o'clock field uses the 24 hour format. H er e are a coup l e o f exa m p l es: Daylight Sa ving Time ends in the United States on the first Sunday of November .
P-660HW-Tx v3 Series User’s Guide 301 C HAPTER 21 Logs 21.1 Overview This chapter contains information abou t configuring general log set tings and viewing the Z yXEL Device’ s logs.
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 302 21.2 The V iew Log Screen Use the View Log screen to see the logs for the ca tegories that you selected in the Log Settings screen (see Section 21.3 on page 303 ). Click Maintenance > Logs to open the View Log screen.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 303 21.3 The Log Settings Screen Use the Log Settings scree n to configure the mail se rver , the syslog server , when to send logs and what logs to send. T o change your Z yXEL Device’ s log settings, click Main tenance > Logs > Log Settings .
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 304 The following table describes t he fields in this screen. T able 90 Maintenance > Logs > Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name o r the IP address of the mail serv er for the e-mail addresses specified below.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 305 21.4 SMTP Error Messages If there are difficulties in sending e-ma i l the following error message appears. “SMTP action request failed. ret= ??". The “??"are described in the f ollowing table.
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 306 •" End of Log " message shows that a complete log has been sent. Figure 128 E-mail Log Examp le 21.5 Log Descriptions This section provides descripti ons of example log messages. Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 307 FTP login failed Someone has failed to log on to the router via ftp. NAT Session Table is Full! The maximum number of NA T session table entries has been exceeded and the table is full. Starting Connectivity Monitor Starting Connectivity Monitor .
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 308 T able 94 Access Control Logs LOG MESSAGE DESCRIPTION Firewall default policy: [ TCP | UDP | IGMP | ESP | GRE | OSPF ] <Packet Direction> Attempted T CP/UDP/IGMP/ESP/GRE/OSPF access matched the default policy and was blocked or forwarded according to the default policy’ s setting.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 309 For type and code details, see T able 105 on page 312 . Exceed MAX incomplete, sent TCP RST The router sent a TCP reset packet when the number of incomplete connections (TCP and UDP) e xceeded the user-configured threshold.
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 310 T able 98 CDR Logs LOG MESSAGE DESCRIPTION board %d line %d channel %d, call %d, %s C01 Outgoing Call dev=%x ch=%x %s The router received the setup requirements for a call. “call” is the reference (count) number of the call.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 31 1 For type and code details, see T able 105 on page 312 . T able 102 Attack Logs LOG MESSAGE DESCRIPTION attack [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF attack.
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 312 User logout because of user deassociation. The router logg e d out a user who ended the session. User logout because of no authentication response from user. The router logg ed out a user from which th ere was no authentication response.
Chapter 21 Logs P-660HW-Tx v3 Series User’s Guide 313 4 Source Quench 0 A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagr ams for output to the next network on the route to the destination network.
Chapter 21 L ogs P-660HW-Tx v3 Series User’s Guide 314 The following table shows RFC -2408 ISAKMP payload t ypes that the log displays. Please refer to RFC 2408 for detailed information on each type.
P-660HW-Tx v3 Series User’s Guide 315 C HAPTER 22 Tools 22.1 Overview This chapter explains how to upload new firmware, manage confi guration files and restart your Z yXEL Device. Use the instructions in this chapter to ch ange the device’ s configuration file or upgrade i ts firmware.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 316 22.1.2 What Y ou Need T o Know About T ools Filename Conventions The configur ation file (often c alled the romfile or rom-0) contains the factory d e f a u l t s e t t i n g s i n t h e m e n u s s u c h a s p a s s w o r d , D H C P S e t u p , T C P / I P S e t u p , e t c .
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 317 FTP Restrictions FTP will no t work when: 1 The firewall is active (turn the firewal l off or create a firewall rule t o allow access from the WAN). 2 Y ou have disabled th e F TP service in the Rem ote Management scr een.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 318 Restore Using FTP Session Example Figure 129 Restore Using FTP Session Example Ref e r t o Section 22.
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 319 FTP Session Example of Firmware File Upload Figure 130 FTP Session Example of Firmwa re File Upload More commands (found in GUI-based FTP clients) are listed in this chapter . Ref e r t o Section 22.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 320 UNIX, use “get” to tr ansfer from the device to the computer , “put” the other way around, and “binary” to set binary transfer mod e. TFTP Upload Co mmand Example The following is an example TFTP command: tftp [-i] host put firmware.
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 321 FTP Command Configurat ion Backup Example This figure giv es an example of usin g FTP commands from the DOS command prompt to sav e your device’ s configuration ont o your computer .
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 322 1 Use telnet from your computer to connect to the ZyXEL Device and log in. Bec ause TFTP does not have any security checks, the ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address.
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 323 Ref e r t o Section 22.1.2 on page 316 to read about configurations that disallow TFTP and F TP over WAN. 22.2 The Firmware Screen Click Maintenance > T ools to open the Firmware screen. Follow the instructions in t his screen to upload fi rmware to your Z yXEL Device.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 324 After you see the Firmware Upload in Progress screen, wait two minutes before logging into the Z yXEL Devi ce again. Figure 133 Firmware Upload In Progre ss The Z yXEL Device automatically restarts in this time causing a temporary network disconnect.
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 325 If the upload was not successful, the following screen will appear . Click Return to go back to the Firmware screen. Figure 135 Error Message 22.3 The Configuration Screen See Section 22.1.4 on page 317 for tr ansferring configurati on files using FTP/TF TP commands.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 326 Backup Configuration Backup Configur ati on allows you to back up (save) the Z yXEL Device’ s current configuration to a fi le on your comp ut er .
Chapter 22 Tools P-660HW-Tx v3 Series User’s Guide 327 The Z yXEL Device automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see the following icon on your desktop.
Chapter 22 To ols P-660HW-Tx v3 Series User’s Guide 328 Reset to Factory Default s Click the Reset button to clear all user-enter ed configur ation information and return the Z yXEL Device to its factor y defaults. The following wa rning screen appears.
P-660HW-Tx v3 Series User’s Guide 329 C HAPTER 23 Diagnostic 23.1 Overview These read-only screens display information to help y ou identify problems with the Zy X E L D e v i c e . 23.1.1 What Y ou Can Do in the Diagnostic Screens •U s e t h e General Diagnostic screen ( Section 23.
Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 330 The following table describes t he fields in this screen. 23.3 The DSL Line Diagnostic Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next.
Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 331 The following table describes t he fields in this screen. T able 1 14 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION AT M S t a t u s Click this to view your DSL connection’s Asynchron ous T ransfer Mode (A TM) statistics.
Chapter 23 Diagnostic P-660HW-Tx v3 Series User’s Guide 332 DSL Line Status Click this to view statistics about the DSL connections. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the Z yXEL Device from the ISP).
333 P ART VII T roubleshooting and S pecifications T roubleshooting (335) Product Specifications (341).
334.
P-660HW-Tx v3 Series User’s Guide 335 C HAPTER 24 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Z yXEL Device Access and Login • Internet Access 24.
Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 336 2 Check the hardware connections. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the Z yXEL Device off and on. 5 If the problem continues, contac t the vendor .
Chapter 24 Trou bleshooting P-660HW-Tx v3 Series User’s Guide 337 • If you c hanged the IP address ( Section 7.2 on page 121 ), use the new IP address. • If you c hanged the IP address and have forgotten it, see the troubles hooting suggestions for I forgot the IP address for the Z yXEL Device.
Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 338 3 T urn the Z yXEL Device off and on. 4 If this does not work, you have to reset the device to its fact ory defaults. See Section 24.1 on page 335 . I cannot T elnet to the ZyXEL Device.
Chapter 24 Trou bleshooting P-660HW-Tx v3 Series User’s Guide 339 I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL Device), but my Internet con nection is not av ailable anymore. 1 Check the hardware connections, and ma k e sure the LEDs are behav i n g as expected.
Chapter 24 Tro u blesh oo tin g P-660HW-Tx v3 Series User’s Guide 340.
P-660HW-Tx v3 Series User’s Guide 341 C HAPTER 25 Product Specifications The following tables summarize the Z yXEL Device’ s hardware and firm ware features.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 342 Default User P assword user Default Admin P assword 1234 DHCP Server IP P ool 192.168.1.32 to 192.168.1.6 4 Static DHCP Addresses 10 Content Filtering W eb page blocking by URL keyword.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 343 Universal Plug and Play (UPnP) A UPnP-enabled device can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the networ k. Firewall Y our device has a stateful inspection firewall with DoS (Denial of Service) protection.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 344 ADSL Standards ANSI T1.4 13, Issue 2 ; G.dmt (G.992.1) ADSL2 G.dmt.bis (G.992.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 345 25.3 Wireless Features T able 1 17 Wireless Features External Antenna The ZyXEL Device is equipped with one fix ed antenna to provide a clear radio signal between the wireless stations and the access points.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 346 The following list, which is not exhaust ive , illust rates the standards supported in the ZyXEL Device. T able 1 18 Standards Supported ST ANDARD DESCRIPTION RFC 867 Da ytime Protocol RFC 868 Time Protocol.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 347 25.4 Power Adaptor S pecifications Microsoft PPTP MS PPTP (Microsoft's impl ementation of Point to P oint T unneling Protocol) MBM v2 Media Bandwidth Management v2 RFC 2383 ST2+ over A TM Protocol Specification - UNI 3.
Chapter 25 Product Specifications P-660HW-Tx v3 Series User’s Guide 348.
349 P ART VIII Appendices and Index Note: The appendices provide general information. Some det ails may not apply to your ZyXEL Device. Setting up Y our Computer’ s IP Address (351) P op-up Windows,.
350.
P-660HW-Tx v3 Series User’s Guide 351 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must ha ve a 10M or 100M Ethernet adapter card and TCP/IP installed.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 352 Windows 95/98/Me Click Start , Settings , Control Panel and double-click the Network icon to open the Network window .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 353 3 Select Microsoft from the list of manufacturers . 4 Select TCP/IP from the list of network protocols and then click OK . If you need Client for Microsoft Networks: 1 Click Add .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 354 3 Click the DNS Configuration t ab. • If you d o not know your DNS information, select Disable D NS . • If you k now your DNS information, select Enable DNS and type the information in the fields below (y ou may not need to fill them all in).
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 355 Windows 2000/NT/XP The following example figures use the defa ult Windo ws XP GU I theme.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 356 3 Right- click Local Area Connection and then click Properties . Figure 150 Windows XP: Control Panel: Ne twork Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 357 • If you ha ve a dynamic IP address cli ck Obtain an IP address automatically . • If you hav e a static IP address click Use the following IP Address and fill in the IP address , Subnet mask , and Default gateway fields.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 358 •C l i c k OK when finished. Figure 153 Windows XP: Adva nced TCP/IP Properties 7 In the Internet Protocol .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 359 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 154 Windows XP: Internet Protocol (T CP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 360 1 Click the Start icon, Control Panel . Figure 155 Windows V ista: S tart Menu 2 In the Control Panel , double-cli ck Network and Internet . Figure 156 Windows V ista: Control Panel 3 Click Network and Sharing Center .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 361 4 Click Manage network conne ctions . Figure 158 Windows V ista: Network and Sharing Center 5 Right- click Local Area Connection and then click Properties .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 362 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties . Figure 160 Windows V ista: Local Area Connection Properties 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens (the General tab ).
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 363 •C l i c k Advanced . Figure 161 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 8 If you do not know your gatewa y's IP address, remov e any previously i nstalled gateways in the IP Settings tab and click OK .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 364 •C l i c k OK when finished. Figure 162 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Proto.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 365 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 366 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and do uble-cl ick TCP/IP to open the TCP/ IP Control Panel .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 367 2 Select Ethernet built-in from the Connect via list. Figure 165 Macintosh OS 8/9: TCP/IP 3 For d ynamically assigned settings, select Using DHCP Server fro m the Configure: list.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 368 Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window . Figure 166 Macintosh OS X: Apple Menu 2 Click Netw ork in the icon bar .
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 369 •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of yo ur ZyXEL Device in the Router add ress box.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 370 2 Double-click on the profile of the network card you wish to configure.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 371 6 Click the Activate button to apply the changes. The following sc reen displays.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 372 • If you ha ve a static IP address, ent er static in the BOOTPROTO= field. T ype IPADDR = followed by the IP address (in dotted decimal notation) and type NETMASK = followed by the subnet mask.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 373 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 176 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.
Appendix A Setting up Your Computer’s IP Address P-660HW-Tx v3 Series User’s Guide 374.
P-660HW-Tx v3 Series User’s Guide 375 A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up wind ows from your device. • Jav aScript (enabled by default). • Jav a permissions (enabled by default).
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 376 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 377 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 179 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to hav e blocked) wi th the prefix “http://” .
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 378 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 180 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 379 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 181 Internet Options: Secu rity 2 Click the Custom Level... button .
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 380 6 Click OK to close the window . Figure 182 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 381 5 Click OK to close the window . Figure 183 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab.
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 382 3 Click OK to close the window . Figure 184 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary .
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HW-Tx v3 Series User’s Guide 383 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen.
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HW-Tx v3 Series User’s Guide 384.
P-660HW-Tx v3 Series User’s Guide 385 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.
Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 386 The following figure shows an example IP address in which the first three octets (192.
Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 387 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits.
Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 388 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet.
Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 389 The following figure shows the company network before subnetting. Figure 188 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divi de the network 192.
Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 390 In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all zeroes is the subnet’ s address itself , all ones is the subnet’ s broadcast address).
Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 391 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net.
Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 392 Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number . The following table is a summary for subnet planning on a network with a 16-bit network number .
Appendix C IP Addresses and Subnetting P-660HW-Tx v3 Series User’s Guide 393 addresses, follow their instructions i n selecting th e IP addresse s and the sub n et mask.
Appendix C IP Addresses a nd Subnetting P-660HW-Tx v3 Series User’s Guide 394.
P-660HW-Tx v3 Series User’s Guide 395 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discuss es ad-hoc and infr astructure wi reless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configur ation is an in depend ent (Ad-hoc) WLAN that connect s a set of computers with wireless adapters (A, B, C).
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 396 with each other . When Intra-BS S is disabled, wireless client A and B can still access the wired network but cannot communicate with eac h other .
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 397 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 398 wireless gatewa y , but out-of -r ange of ea ch other , so t hey cannot "h ear" ea c h other , that is they do not know if the channel is current ly being used. Therefore, they are consider ed hi dden from each other .
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 399 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 400 sever al intermediate rate steps between the maximum and minimum data r ates. The IEEE 802.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 401 IEEE 802.1x In June 2001, the IEEE 802.1x standard w a s designed to extend the features of IEEE 802.11 to support extended authentica tion as well as providing addi tional accounting and control features.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 402 • Access-Challeng e Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message .
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 403 However , MD5 authen tication has some weaknesses. Since the authentication server needs to get the plaintext password s, t he p assword s must be stored. Thus someone other th an the authenti c a tion server may access th e p a s sw ord fi le.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 404 Dynamic WEP Key Exchange The AP maps a unique key that is generated with t he RADIUS server . This key expires when the wireless connection ti me s out, disconnec ts or reauthentication times out.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 405 If the AP or the wireless clients do no t support WP A2, just use WP A or WP A-PSK depending on whether you hav e an external RADIUS server or not. Select WEP only when the AP and/or wirel ess clients do not support WPA or WP A2.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 406 keys. This prev ent all wireless d evices sharing the same encryption ke ys. (a weakness of WEP) User Authentication WP A and WPA2 apply IEEE 802.1x and Extens ible Authentication Protocol ( EAP) to authenticate wireless clients using an ex ternal RADIUS database.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 407 4 The RADIUS server distributes the PMK to the AP . The AP th en set s up a key hierarchy and management system, usin g the PMK to dynamica lly generate unique data encryption k eys.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 408 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tempor al encryption keys. They use these keys to encrypt data exchanged between them.
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 409 Antenna Overview An antenna couples RF signals onto air . A transmitter wit hin a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air .
Appendix D Wireless LANs P-660HW-Tx v3 Series User’s Guide 410 • Omni-directional antennas send t he RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a room environment.
P-660HW-Tx v3 Series User’s Guide 41 1 A PPENDIX E Services The following table lists some commonl y-used services and their associated protocol s and port n umbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
Appendix E Serv ices P-660HW-Tx v3 Series User’s Guide 412 T able 135 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Aut hentica tion Header) tunneling protocol uses this service. AIM TCP 51 90 AOL ’s Internet Messenger service.
Appendix E Services P-660HW-Tx v3 Series User’s Guide 413 MSN Messenger TCP 18 63 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP / U DP TCP / U DP TCP / U DP TCP / U DP 137 138 139 445 The Network Basic Input/Output System is used for communication between computers in a LAN.
Appendix E Serv ices P-660HW-Tx v3 Series User’s Guide 414 SFTP TC P 115 The Simple F ile T ransfer Protocol is an old way of tr ansferring files between computers. SMTP TC P 25 Simple Mail T ransfer Protocol is the message-exchange standard for the Internet.
P-660HW-Tx v3 Series User’s Guide 415 A PPENDIX F Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any .
Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 416 • This dev ice m u st accept any in terferen ce received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 15 of th e FCC Rules.
Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 417 本機限在不干擾合法電臺與不受 被干擾保障條件下於室內使用。 減少電磁波影響，請妥適使用。 No.
Appendix F Legal Information P-660HW-Tx v3 Series User’s Guide 418 Note Re pair or replacement, as provided under this wa rranty , is the exclusi ve remedy of the purchaser . This warranty is in lieu of all other warr anties, express or impli ed, including any implied w arr anty of merchantability or fitness for a particul ar use or purpose.
Index P-660HW-Tx v3 Series User’s Guide 419 Index Numerics 802.1Q/1P 243 activation 249 example 245 group settings 250 management VLAN 249 port settings 252 priority 243 , 252 PVC 244 PVID 252 tagging frames 244 , 251 A activation 802.
Index P-660HW-Tx v3 Series User’s Guide 420 C CA 229 , 403 algorithm 234 trusted 230 , 233 CBR 105 , 11 2 , 11 7 Certificate Authority See CA. certificates 229 , 235 advantages 235 algorithm 234 CA .
Index P-660HW-Tx v3 Series User’s Guide 421 DSL connections, status 332 dynamic DNS 269 activation 270 wildcard 269 activation 271 Dynamic Host Configuration Pro tocol, see DHCP dynamic WEP key exch.
Index P-660HW-Tx v3 Series User’s Guide 422 limitations 317 QoS 264 restoring configuration 31 7 , 318 upgrading firmware 318 , 319 G generic filters 223 , 226 activation 224 length 225 logs 226 mask 225 offset 225 H half-open sessions 204 hidden node 397 I IANA 393 Internet Assigned Numbers Authority see IANA IBSS 395 ICMP 190 , 279 IEEE 802.
Index P-660HW-Tx v3 Series User’s Guide 423 M MAC address 126 , 148 filter 138 , 140 , 147 , 159 MAC address filter activation 148 management VLAN 249 mapping address 178 rules 179 types 179 , 180 ,.
Index P-660HW-Tx v3 Series User’s Guide 424 port forwarding 172 , 174 activation 177 configuration 175 example 175 rules 177 PPPoA 10 2 , 109 , 11 4 PPPoE 10 2 , 109 , 11 3 passthrough 105 preamble .
Index P-660HW-Tx v3 Series User’s Guide 425 firewalls 199 logs 304 wireless LAN 155 SCR 105 , 11 2 , 11 6 security network 206 wireless LAN 140 , 158 Service Set IDen tifier , see SSID Session Initi.
Index P-660HW-Tx v3 Series User’s Guide 426 algorithm 234 exporting 234 importing 231 MD5 fingerprint 234 PEM 234 SHA1 fingerprint 234 U UBR 105 , 11 2 , 11 7 unicast 100 Universal Plug and Play , s.
Index P-660HW-Tx v3 Series User’s Guide 427 limitations 161 MAC address filter 138 , 14 0 , 147 , 148 , 159 MBSSID 162 preamble 146 , 158 RADIUS server 160 RTS / C T S t hr e s h o l d 146 , 158 sch.
Index P-660HW-Tx v3 Series User’s Guide 428.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL Communications P-660HW-TX V3 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL Communications P-660HW-TX V3 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL Communications P-660HW-TX V3 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL Communications P-660HW-TX V3 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL Communications P-660HW-TX V3, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL Communications P-660HW-TX V3.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL Communications P-660HW-TX V3. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL Communications P-660HW-TX V3 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
