ZyXEL Communications Network Device P-2302 User Manual Download Page 180 | Manualshive

Page: 180 / 359

background image

Chapter 14 Firewall

P-2302HWUDL-P1 Series User’s Guide

180

The ZyXEL Device has one Ethernet WAN port and four Ethernet LAN ports, which are used
to physically separate the network into two areas.The WAN (Wide Area Network) port
attaches to the broadband (cable or DSL) modem to the Internet.
The LAN (Local Area Network) port attaches to a network of computers, which needs security
from the outside world. These computers will have access to Internet services such as e-mail,
FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless
the remote host is authorized to use a specific service.

14.1.3 Guidelines For Enhancing Security With Your Firewall

1

Change the default password via web configurator.

2

Think about access control before you connect to the network in any way, including
attaching a modem to the port.

3

Limit who can access your router.

4

Don't enable any local service (such as telnet or FTP) that you don't use. Any enabled
service could present a potential security risk. A determined hacker might be able to find
creative ways to misuse the enabled services to access the firewall or the network.

5

For local services that are enabled, protect against misuse. Protect by configuring the
services to communicate only with specific peers, and protect by configuring rules to
block packets for the services at specific interfaces.

6

Protect against IP spoofing by making sure the firewall is active.

7

Keep the firewall in a secured (locked) room.

14.1.4 The Firewall, NAT and Remote Management

Figure 103

Firewall Rule Directions

14.1.4.1 LAN-to-WAN rules

LAN-to-WAN

rules are local network to Internet firewall rules. The default is to forward all

traffic from your local network to the Internet.
You can block certain

LAN-to-WAN

traffic in the

Services

screen (click the

Services

tab).

All services displayed in the

Blocked Services

list box are

LAN-to-WAN

firewall rules that

block those services originating from the LAN.

«
...
178
179
180
181
182
...
»

Summary of Contents for Network Device P-2302

Page 1: ...www zyxel com P 2302HWUDL P1 Series 802 11g Wireless VoIP Station Gateway with Built in DECT Base Station User s Guide Version 3 60 10 2006 Edition 1 ...

Page 2: ......

Page 3: ...right away It contains information on setting up your network and configuring for Internet access Supporting Disk Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications User Guide Feedback Help us help you Send all User Guide related comments questions or suggestions for improvement to the followin...

Page 4: ...font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket within a screen name denotes a mouse click For example Maintenance Log Log Setting means you first...

Page 5: ...s Guide 5 Icons Used in Figures Figures in this User s Guide may use the following generic icons The ZyXEL Device icon is not an exact representation of your device ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ...

Page 6: ...ays disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect the power adaptor or cord to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do...

Page 7: ...Safety Warnings P 2302HWUDL P1 Series User s Guide 7 This product is recyclable Dispose of it properly ...

Page 8: ...Safety Warnings P 2302HWUDL P1 Series User s Guide 8 ...

Page 9: ... Status Screens 67 Network 77 Wireless LAN 79 WAN 95 LAN 105 NAT 117 VoIP 125 SIP 127 Phone 141 Phone Book 155 PSTN Line 159 VoIP Trunking 161 Security 177 Firewall 179 Content Filter 187 Management 191 Static Route 193 Bandwidth MGMT 197 Remote MGMT 209 UPnP 217 Sharing a USB Printer 229 File Sharing 243 Maintanence and Troubleshooting 251 System 253 Logs 261 Tools 273 Troubleshooting 279 ...

Page 10: ...Contents Overview P 2302HWUDL P1 Series User s Guide 10 Appendices and Index 285 ...

Page 11: ...2 VoIP Trunking Gateway 34 1 1 3 DECT Base Station Feature 34 1 1 4 ZyXEL Device s USB Support 35 1 1 5 ZyXEL Device s Router Features 35 1 2 Ways to Manage the ZyXEL Device 36 1 3 Good Habits for Managing the ZyXEL Device 36 1 4 LEDs Lights 36 Chapter 2 Introducing the Web Configurator 39 2 1 Web Configurator Overview 39 2 2 Accessing the Web Configurator 39 2 3 Resetting the ZyXEL Device 41 2 3 ...

Page 12: ...idth Management Wizard 60 3 4 1 Welcome 61 3 4 2 General Information 62 3 4 3 Services Setup 63 3 4 4 Priority Setup 64 3 4 5 Finish 65 Chapter 4 Status Screens 67 4 1 Status Screen 67 4 2 Any IP Table Window 71 4 3 DHCP Table Window 71 4 4 VoIP Statistics Window 72 4 5 BW MGMT Monitor Window 73 4 6 Packet Statistics Window 75 Part II Network 77 Chapter 5 Wireless LAN 79 5 1 Wireless Network Overv...

Page 13: ...NS Server Address Assignment 96 6 2 WAN Screens 97 6 2 1 WAN Internet Connection Screen Ethernet 97 6 2 2 WAN Internet Connection Screen Roadrunner 98 6 2 3 WAN Internet Connection Screen PPPoE 99 6 2 4 WAN Advanced Screen 101 6 2 5 WAN Traffic Redirect Screen 103 Chapter 7 LAN 105 7 1 LAN Overview 105 7 1 1 IP Address and Subnet Mask 105 7 1 2 DHCP Setup 106 7 1 3 LAN TCP IP 106 7 1 4 DNS Server ...

Page 14: ... 1 Introduction to VoIP 127 9 1 2 Introduction to SIP 127 9 1 3 SIP Identities 127 9 1 4 SIP Call Progression 128 9 1 5 SIP Client Server 128 9 1 6 RTP 130 9 1 7 NAT and SIP 130 9 1 8 Voice Coding 131 9 1 9 PSTN Call Setup Signaling 132 9 1 10 MWI Message Waiting Indication 132 9 2 Custom Tones IVR 132 9 2 1 Quality of Service QoS 133 9 3 SIP Screens 134 9 3 1 SIP Settings Screen 134 9 3 2 Advance...

Page 15: ...pter 13 VoIP Trunking 161 13 1 VoIP Trunking Overview 161 13 2 VoIP Trunking and Security 161 13 2 1 Auto Attendant and Authentication 161 13 2 2 Peer Call Authentication 162 13 3 Call Rules 163 13 4 VoIP Trunking Scenarios 163 13 4 1 VoIP Phone To PSTN Phone 163 13 4 2 PSTN Phone To VoIP Phone 163 13 4 3 PSTN Phone To PSTN Phone via VoIP 164 13 5 Trunking General Screen 164 13 6 Trunking Peer Cal...

Page 16: ... 14 2 2 Solving the Triangle Route Problem 182 14 3 Firewall Screens 183 14 3 1 General Firewall Screen 183 14 3 2 Firewall Services Screen 184 Chapter 15 Content Filter 187 15 1 Content Filtering Overview 187 15 2 Content Filtering Screens 187 15 2 1 Content Filter Screen 187 15 2 2 Content Filter Schedule Screen 189 Part V Management 191 Chapter 16 Static Route 193 16 1 Static Route Overview 193...

Page 17: ...ote MGMT 209 18 1 Remote Management Overview 209 18 1 1 Remote Management Limitations 209 18 1 2 Remote Management and NAT 209 18 1 3 System Timeout 210 18 2 Remote Management Screens 210 18 2 1 WWW Screen 210 18 2 2 Telnet Screen 210 18 2 3 FTP Screen 211 18 3 SNMP 212 18 3 1 Supported MIBs 213 18 3 2 SNMP Traps 213 18 3 3 Configuring SNMP 213 18 3 4 DNS Screen 214 18 3 5 Security Screen 215 Chap...

Page 18: ... Files via the ZyXEL Device 247 21 5 1 Using Windows Explorer to Share Files 247 21 5 2 Using the Run Utility to Share Files 248 21 5 3 Using the Workgroup Name to Access Files 248 Part VI Maintanence and Troubleshooting 251 Chapter 22 System 253 22 1 System Overview 253 22 1 1 System Name 253 22 1 2 Domain Name 253 22 1 3 General System Screen 253 22 2 Dynamic DNS Overview 254 22 2 1 DNS Server A...

Page 19: ...Hardware Connections and LEDs 279 25 2 ZyXEL Device Access and Login 280 25 3 Internet Access 281 25 4 Phone Calls and VoIP 282 25 5 Problems With Multiple SIP Accounts 282 25 5 1 Outgoing Calls 283 25 5 2 Incoming Calls 283 Part VII Appendices and Index 285 Appendix A Product Specifications 287 Appendix B Pop Up Windows Java and JavaScript Permissions 293 25 6 Pop up Windows JavaScripts and Java ...

Page 20: ...Table of Contents P 2302HWUDL P1 Series User s Guide 20 Appendix G Services 339 Appendix H Legal Information 343 Appendix I Customer Support 347 Index 351 ...

Page 21: ...et 53 Figure 18 Connection Wizard IP Address PPPoE 54 Figure 19 Connection Wizard MAC Address 55 Figure 20 Connection Wizard Finish 56 Figure 21 VoIP Setup Wizard SIP Settings 57 Figure 22 VoIP Setup Wizard Registration Test 58 Figure 23 VoIP Setup Wizard Registration Complete Success 59 Figure 24 VoIP Setup Wizard Registration Complete Fail 60 Figure 25 Bandwidth Management Wizard Welcome 61 Figu...

Page 22: ...k LAN Static DHCP 111 Figure 58 Network LAN Client List 112 Figure 59 Network LAN IP Alias 113 Figure 60 Network LAN Advanced 114 Figure 61 Multiple Servers Behind NAT Example 118 Figure 62 Trigger Port Forwarding Process Example 118 Figure 63 Network NAT General 119 Figure 64 Network NAT Port Forwarding 120 Figure 65 Network NAT Port Forwarding Edit 121 Figure 66 Network NAT Trigger Port 122 Figu...

Page 23: ...STN to PSTN Example Call Rule 174 Figure 102 PSTN to PSTN Example Incoming Authentication 174 Figure 103 Firewall Rule Directions 180 Figure 104 Ideal Firewall Setup 181 Figure 105 Triangle Route Problem 182 Figure 106 IP Alias 183 Figure 107 Security Firewall General 183 Figure 108 Security Firewall Services 184 Figure 109 Security Content Filter Filter 188 Figure 110 Security Content Filter Sche...

Page 24: ...29 Figure 142 Open Printers Window 230 Figure 143 Open Printer Properties 231 Figure 144 Printer Properties Window 231 Figure 145 Add a Port Window 231 Figure 146 Add a Port Wizard 232 Figure 147 Enter IP Address of the ZyXEL Device 232 Figure 148 Custom Port Settings 233 Figure 149 Custom Port Settings 233 Figure 150 Finish Adding the TCP IP Port 234 Figure 151 Configuring Print Server 234 Figure...

Page 25: ...re 187 Configuration Upload Successful 276 Figure 188 Network Temporarily Disconnected 276 Figure 189 Configuration Upload Error 277 Figure 190 Maintenance Tools Restart 277 Figure 191 Maintenance Tools Restart In Progress 277 Figure 192 Outgoing Calls Default 283 Figure 193 Outgoing Calls Individual Configuration 283 Figure 194 Incoming Calls Default 284 Figure 195 Incoming Calls Individual Confi...

Page 26: ... Red Hat 9 0 KDE Ethernet Device General 318 Figure 221 Red Hat 9 0 KDE Network Configuration DNS 318 Figure 222 Red Hat 9 0 KDE Network Configuration Activate 319 Figure 223 Red Hat 9 0 Dynamic IP Address Setting in ifconfig eth0 319 Figure 224 Red Hat 9 0 Static IP Address Setting in ifconfig eth0 319 Figure 225 Red Hat 9 0 DNS Settings in resolv conf 320 Figure 226 Red Hat 9 0 Restart Ethernet ...

Page 27: ...le 16 VoIP Setup Wizard Registration Complete Fail 60 Table 17 Bandwidth Management Wizard Welcome 61 Table 18 Bandwidth Management Wizard General Information 62 Table 19 Bandwidth Management Wizard Services Setup 63 Table 20 Bandwidth Management Wizard Priority Setup 64 Table 21 Bandwidth Management Wizard Finish 65 Table 22 Status Screen 68 Table 23 Any IP Table Window 71 Table 24 DHCP Table Win...

Page 28: ...ettings 135 Table 58 VoIP SIP SIP Settings Advanced 137 Table 59 VoIP SIP QoS 140 Table 60 European Type Flash Key Commands 142 Table 61 USA Type Flash Key Commands 143 Table 62 VoIP Phone Analog Phone 145 Table 63 VoIP Phone Analog Phone Advanced 146 Table 64 DECT Phone Calls Summary 149 Table 65 VoIP Phone DECT Phone 151 Table 66 VoIP Phone Common 152 Table 67 VoIP Phone Region 153 Table 68 VoIP...

Page 29: ...gement Remote MGMT Telnet 211 Table 97 Management Remote MGMT FTP 211 Table 98 SNMP Traps 213 Table 99 Remote Management SNMP 214 Table 100 Management Remote MGMT DNS 215 Table 101 Management Remote MGMT Security 216 Table 102 Management UPnP 227 Table 103 Configuring Print Server 234 Table 104 Management File Sharing 246 Table 105 Maintenance System General 254 Table 106 Maintenance System Dynami...

Page 30: ... 137 Subnet 1 303 Table 138 Subnet 2 304 Table 139 Subnet 3 304 Table 140 Subnet 4 304 Table 141 Eight Subnets 304 Table 142 24 bit Network Number Subnet Planning 305 Table 143 16 bit Network Number Subnet Planning 305 Table 144 Abbreviations Used in the Example Internal SPTGEN Screens Table 326 Table 145 Menu 1 General Setup 326 Table 146 Menu 3 326 Table 147 Menu 4 Internet Access Setup 329 Tabl...

Page 31: ...31 PART I Introduction Wizards and Status Introducing the ZyXEL Device 33 Introducing the Web Configurator 39 Wizard Setup 47 Status Screens 67 ...

Page 32: ...32 ...

Page 33: ... P1 adds a Public Switched Telephone Network PSTN line feature which allows you to use your regular phone services and internet telephone services at the same time This user s guide refers to these models simply as the ZyXEL Device Please refer to Appendix A on page 287 for a complete list of features for your model 1 1 1 VoIP Features You can use the ZyXEL Device to make and receive VoIP telephon...

Page 34: ...a built in Digital Enhanced Cordless Telecommunications DECT base station DECT is an ETSI European Telecommunications Standards Institute standard for digital cordless phones which specifies how they transmit receive and process data and voice communication You can register any DECT GAP phone with the ZyXEL Device Figure 3 DECT Base Station Feature You can use your DECT phone to make calls to othe...

Page 35: ...rnet access through your existing Internet access gateway company network or your cable or DSL modem for example Computers can connect to the ZyXEL Device s LAN ports or wirelessly Figure 5 ZyXEL Device s Router Features You can also configure firewall and content filtering on the ZyXEL Device for secure Internet access When the firewall is on all incoming traffic from the Internet to your network...

Page 36: ...rs FTP for firmware upgrades and configuration backup restore Chapter 18 on page 211 SNMP The device can be monitored by an SNMP manager See the SNMP chapter in this User s Guide SPTGEN SPTGEN is a text configuration file that allows you to configure the device by uploading an SPTGEN file This is especially convenient if you need to configure many devices of the same type 1 3 Good Habits for Manag...

Page 37: ...d an error while self testing or there is a device malfunction Off The ZyXEL Device is not receiving power ETHERNET 1 4 Green On The ZyXEL Device has an Ethernet connection with a device on the Local Area Network LAN Blinking The ZyXEL Device is sending receiving data to from the LAN Off The ZyXEL Device does not have an Ethernet connection with the LAN WLAN Green On The wireless network is activa...

Page 38: ...EL Device does not detect any network connection USB 2 0 Green On The ZyXEL Device recognizes a USB connection Blinking The ZyXEL Device is sending receiving data to from the USB device connected to it Off The ZyXEL Device does not detect a USB connection PHONE 1 2 Green On A SIP account on this phone port is registered Blinking The phone is off the hook Orange On There is a voice message for a SI...

Page 39: ...In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default See the troubleshooting chapter if you want to make sure these functions are allowed in Internet Explorer or Netscape Navigator 2 2 Accessing the Web Configurat...

Page 40: ...fault password appears automatically if this is the case click Login The Change Password screen appears Figure 8 Change Password Screen 5 It is highly recommended to change your password To change your password type a new password retype it to confirm it and click Apply Otherwise click Ignore if you do not want to change your password right now The Options screen should appear ...

Page 41: ... security reasons the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes If this happens log in again 2 3 Resetting the ZyXEL Device Reset the ZyXEL Device in the following situations You forgot your password You cannot access the device using the web configurator Check Troubleshooting in the Quick Start Guide to make sure you cannot access the device a...

Page 42: ...arting and log in to the web configurator The password is 1234 You have finished If the ZyXEL Device does not restart automatically disconnect and reconnect the ZyXEL Device s power Then follow the directions above again 2 3 1 Reset Button and WLAN You can also use the RESET button to turn on off your wireless network Press the RESET button for 1 second to turn on off the WLAN 2 4 Web Configurator...

Page 43: ...security settings to wireless clients MAC Filter Use this screen to configure the ZyXEL Device to give exclusive access to specific wireless clients or exclude specific wireless clients from accessing the ZyXEL Device Advanced Use this screen to configure wireless features such as the transmission mode WAN Internet Connection Use this screen to set up ISP parameters IP addresses and MAC addresses ...

Page 44: ...ial Use this screen to configure speed dial numbers for SIP phone numbers PSTN Line General Use this screen to configure your ZyXEL Device s settings for PSTN calls Trunking General Use this screen to enable trunking on your ZyXEL Device Peer Call Use this screen to configure peer device authentication for trunking calls Call Rule Use this screen to configure forwarding rules on your ZyXEL Device ...

Page 45: ...XEL Device DNS Use this screen to configure through which interface s and from which IP address es users can send DNS queries to the ZyXEL Device Security Use this screen to change your anti probing settings Print Server General Use this screen to give a name to the printer connected to your ZyXEL Device File Sharing General Use this screen to enable file sharing via the ZyXEL Device and setup a u...

Page 46: ...Chapter 2 Introducing the Web Configurator P 2302HWUDL P1 Series User s Guide 46 ...

Page 47: ...n the wizards in the web configurator 3 1 Main Wizard Screen Use this screen to open one of the wizards in the ZyXEL Device To access this screen click Go to Wizard setup in the Login Options screen or click the Wizard icon in the upper right corner of the main screen Figure 11 Main Wizard Screen ...

Page 48: ...cases you must use the screens discussed in Chapter 6 on page 95 Some ISPs such as Telstra send UDP heartbeat packets to verify that the customer is still online In this case you have to create a WAN to LAN firewall rule for those packets Contact your ISP to find the correct port number Table 4 Main Wizard Screen LABEL DESCRIPTION CONNECTION WIZARD Click this to open the Connection Wizard See Sect...

Page 49: ...abels in this screen 3 2 2 System Information Usually you should just click Next in this screen Figure 13 Connection Wizard System Information Table 5 Connection Wizard Welcome LABEL DESCRIPTION Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen ...

Page 50: ...ion 22 1 on page 253 for more information This is for identification purposes but some ISPs also check this field This name can be up to 30 alphanumeric characters long Spaces are not allowed but dashes and underscores _ are accepted Domain Name Enter the domain name entry that is propagated to DHCP clients on the LAN If you leave this blank the domain name obtained from the ISP is used Use up to ...

Page 51: ...ion Wizard ISP Parameters PPPoE The following table describes the labels in this screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen Table 7 Connection Wizard ISP Parameters Ethernet LABEL DESCRIPTION Table 8 Connection Wizard ISP Parameters PPPoE LABEL DESCRIPTION Connection Type Select PPP over Ethernet Service Name Enter the PPP ser...

Page 52: ...creen to set up your static IP address The fields depend on the Connection Type you select in the ISP Parameters screen Table 9 Connection Wizard IP Address LABEL DESCRIPTION Get automatically from your ISP Select this if your ISP did not assign you a static IP address Use fixed IP address provided by your ISP Select this if your ISP assigned you a static IP address Back Click this to go to the pr...

Page 53: ...because without it you must know the IP address of a computer before you can access it The ZyXEL Device uses a system DNS server in the order you specify here to resolve domain names for VPN DDNS and the time server First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information In this case the ISP assigns the WAN IP address too See Netwo...

Page 54: ...e PPPoE remote server cannot be discovered automatically Figure 18 Connection Wizard IP Address PPPoE Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen Table 10 Connection Wizard IP Address Ethernet LABEL DESCRIPTION ...

Page 55: ...ns the WAN IP address too See Network WAN Internet Connection The field to the right is read only and it displays the IP address provided by your ISP Select User Defined if you have the IP address of a DNS server You might get it from your ISP or from your network Enter the IP address in the field to the right Select None if you do not want to use this DNS server If you select None for all of the ...

Page 56: ...yXEL Device Spoof this computer s MAC Address Select this if you do not want to use the default MAC address for the ZyXEL Device IP Address This field is enabled if you select Spoof WAN MAC Address Enter the IP address of the computer whose MAC address you want the ZyXEL Device to use instead of the default MAC address Back Click this to go to the previous screen Next Click this to configure the Z...

Page 57: ...u make phone calls over the Internet did not provide any information See Chapter 9 on page 127 for more information You must have a SIP account before you can use this wizard 3 3 1 SIP Settings Figure 21 VoIP Setup Wizard SIP Settings Table 13 Connection Wizard Finish LABEL DESCRIPTION Go to Bandwidth Management Wizard optional Click this to start the Bandwidth Management Wizard See Section 3 4 on...

Page 58: ...ike 1234 VoIP provider com this is the part after the symbol You can use up to 127 printable ASCII Extended set characters Authentication User Name Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printable ASCII characters Password Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printa...

Page 59: ...ter your SIP account s see the Quick Start Guide for troubleshooting suggestions Table 15 VoIP Setup Wizard Registration Complete Success LABEL DESCRIPTION Return to Wizard Main Page Click this to open the main wizard screen See Section 3 1 on page 47 Go to Advanced Setup page Click this to close this screen and return to the main screen Finish Click this to close this screen and return to the mai...

Page 60: ... first service uses as much of the remaining bandwidth as it needs If there is no more bandwidth for the second service then it waits If you do not select a service in this wizard or if you do not find a particular service the service can still use bandwidth but it does not have any guaranteed amount and it has the lowest priority See Chapter 17 on page 197 for more information Table 16 VoIP Setup...

Page 61: ...Management Wizard Welcome The following table describes the labels in this screen Table 17 Bandwidth Management Wizard Welcome LABEL DESCRIPTION Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen ...

Page 62: ...the router Managed Bandwidth kbps Enter the total amount of traffic the device can send to the WAN It is recommended to set this speed to what the device connected to the WAN can handle For example set this field to 1000 kbps if a broadband device connected to the WAN port has a maximum speed of 1000 kbps This does not affect the total amount of traffic the device can send to the LAN See Managemen...

Page 63: ...idth is allocated If you do not select a service or if you do not see it in the list the service can still use bandwidth However it has the lowest priority Note You must select at least one service in this screen Each service you select except WWW becomes a LAN sub class and a WAN sub class in Management Bandwidth MGMT Class Setup If you select WWW it only becomes a LAN sub class Back Click this t...

Page 64: ...e you selected in the previous screen Priority Set the priority of each service If a service has higher priority than other services then it can use as much remaining bandwidth as it needs If there is no more bandwidth left other services have to wait Select Others only if you want to set up the sub class manually in the Bandwidth Class Edit Screen Back Click this to go to the previous screen Next...

Page 65: ...Guide 65 3 4 5 Finish Figure 29 Bandwidth Management Wizard Finish The following table describes the labels in this screen Table 21 Bandwidth Management Wizard Finish LABEL DESCRIPTION Finish Click this to close this screen and return to the main screen ...

Page 66: ...Chapter 3 Wizard Setup P 2302HWUDL P1 Series User s Guide 66 ...

Page 67: ...an also register and unregister SIP accounts The Status screen also provides detailed information from Any IP and DHCP and statistics from VoIP bandwidth management and traffic 4 1 Status Screen Use this screen to look at the current status of the device system resources interfaces LAN and WAN and SIP accounts You can also register and unregister SIP accounts Click Status to open this screen ...

Page 68: ...ys the ZyXEL Device system name It is used for identification You can change this in the Configuration Wizard or Maintenance System General screen Firmware Version This field displays the current version of the firmware inside the ZyXEL Device It also shows the date the firmware version was created You can change the firmware version by uploading new firmware in Maintenance Tools Firmware WAN Info...

Page 69: ...e This field displays how long the ZyXEL Device has been running since it last started up The ZyXEL Device starts up when you plug it in when you restart it Maintenance Tools Restart or when you reset it see Section 2 3 on page 41 Current Date Time This field displays the current date and time in the ZyXEL Device You can change this in Maintenance System Time Setting System Resource CPU Usage This...

Page 70: ...the VoIP Statistics window See Section 4 4 on page 72 BW MGMT Monitor Click Details to open the BW MGMT Monitor window See Section 4 5 on page 73 Packet Statistics Click Details to open the Packet Statistics window See Section 4 6 on page 75 VoIP Status Account This column displays each SIP account in the ZyXEL Device Registration This field displays the current registration status of the SIP acco...

Page 71: ...ield is a sequential value It is not associated with a specific entry IP Address This field displays the IP address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device MAC Address This field displays the MAC address of the computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device Refresh Click this to update this scree...

Page 72: ... Device Registration This field displays the current registration status of the SIP account You can change this in the Status screen Registered The SIP account is registered with a SIP server Register Fail The last time the ZyXEL Device tried to register the SIP account with the SIP server the attempt failed The ZyXEL Device automatically tries to register the SIP account when you turn on the ZyXE...

Page 73: ... hanging up disconnecting the current call DISC The ZyXEL Device has hung up N A There is no phone connected to this phone port Codec This field displays the type of voice compression used in the current call Peer Number If the current call is a peer to peer call this field displays the SIP number of the other party Otherwise it displays N A Duration This field displays how long the current call h...

Page 74: ...s went to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed This might include SIP traffic FTP traffic e mail or web traffic depending on what traffic is allocated to sub classes You can change what traffic is allocated to sub classes in Management Bandwidth MGMT Class Setup WAN VoIP SIP This field displays how ...

Page 75: ...displays each port in the ZyXEL Device Status If the port is not connected to anything this field displays Down If the interface uses Ethernet encapsulation this field displays the port speed and the Ethernet duplex setting Duplex settings are Full The ZyXEL Device is using full duplex Ethernet Half The ZyXEL Device is using half duplex Ethernet You cannot change the Ethernet duplex setting in the...

Page 76: ...umber of bytes received one second before the last time the screen updated refreshed Up Time This is the total amount of time the port has been connected System Up Time This field displays how long the ZyXEL Device has been running since it last started up The ZyXEL Device starts up when you plug it in when you restart it Maintenance Tools Restart or when you reset it see Section 2 3 on page 41 Po...

Page 77: ...77 PART II Network Wireless LAN 79 WAN 95 LAN 105 NAT 117 ...

Page 78: ...78 ...

Page 79: ...in the blue circle In this wireless network devices A and B use the access point AP to interact with the other devices such as the printer or with the Internet Your ZyXEL Device is the AP Every wireless network must follow these basic guidelines Every device in the same wireless network must use the same SSID The SSID is the name of the wireless network It stands for Service Set IDentity If two wi...

Page 80: ... for example 00A0C5000002 or 00 A0 C5 00 00 02 To get the MAC address for each device in the wireless network see the device s User s Guide or other documentation You can use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed to use the wireless network If a device is allowed to use the wireless network it still has to have the correct information SSID channel...

Page 81: ...at every device in the wireless network supports For example suppose you have a wireless network with the ZyXEL Device The ZyXEL Device does not have a local user database and you do not have a RADIUS server Therefore there is no authentication Suppose the wireless network has two devices Device A only supports WEP and device B supports WEP and WPA Therefore you should set up Static WEP in the wir...

Page 82: ...less LAN to open the Wireless LAN General screen Table 29 Additional Wireless Terms TERM DESCRIPTION RTS CTS Threshold In a wireless network which covers a large area wireless devices are sometimes not aware of each other s presence This may cause them to send information to the AP at the same time and result in information colliding and not getting through By setting this value lower than the def...

Page 83: ... ZyXEL Device from a computer connected to the wireless LAN and you change the ZyXEL Device s SSID or WEP settings you will lose your wireless connection when you press Apply to confirm You must then change the wireless settings of your computer to match the ZyXEL Device s new settings Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID...

Page 84: ... is within range Figure 38 Wireless No Security The following table describes the labels in this screen 5 4 2 WEP Encryption Screen In order to configure and enable WEP encryption click Network Wireless LAN to display the General screen Select Static WEP from the Security Mode list Table 31 Wireless No Security LABEL DESCRIPTION Security Mode Choose No Security from the drop down list box ...

Page 85: ... bit WEP 128 bit WEP or 256 bit WEP to specify data encryption Authentication Method This field specifies whether the wireless clients have to provide the WEP key to login to the wireless client Keep this setting at Auto or Open System unless you want to force a key verification before communication between the wireless client and the ZyXEL Device occurs Select Shared Key to force the clients to p...

Page 86: ...d passwords in order to stay connected Enter a time interval between 10 and 9999 seconds The default time interval is 1800 seconds 30 minutes Note If wireless station authentication is done using a RADIUS server the reauthentication timer on the RADIUS server has priority Idle Timeout The ZyXEL Device automatically disconnects a wireless station from the wired network after a period of inactivity ...

Page 87: ...s if you want the ZyXEL Device to support WPA and WPA2 simultaneously ReAuthentication Timer in seconds Specify how often wireless stations have to resend usernames and passwords in order to stay connected Enter a time interval between 10 and 9999 seconds The default time interval is 1800 seconds 30 minutes Note If wireless station authentication is done using a RADIUS server the reauthentication ...

Page 88: ...uthentication server The default port number is 1812 You need not change this value unless your network administrator instructs you to do so with additional information Shared Secret Enter a password up to 31 alphanumeric characters as the key to be shared between the external authentication server and the ZyXEL Device The key must be the same on the external authentication server and your ZyXEL D...

Page 89: ... long Note If you change the OTIST setup key in the ZyXEL Device you must change it on the wireless devices too Yes Select this if you want the ZyXEL Device to automatically generate a pre shared key for the wireless network Before you do this click Network Wireless LAN General and set the Security Mode to No Security Clear this if you want the ZyXEL Device to use a pre shared key that you enter B...

Page 90: ... can use the key in this screen to set up WPA PSK encryption manually for non OTIST devices in the wireless network Review the settings and click OK The ZyXEL Device begins transferring OTIST settings The following is an example screen that appears in the wireless devices Figure 45 OTIST In Progress on the Wireless Device This screen closes when the transfer is complete 5 5 1 Notes on OTIST 1 If y...

Page 91: ...art in the ZyXEL Device s Network Wireless LAN OTIST screen or hold in the Reset button on the ZyXEL Device for one or two seconds to transfer the settings again 4 If you change the SSID or the keys on the ZyXEL Devices after using OTIST you need to run OTIST again or enter them manually in the wireless device s 5 If you configure OTIST to generate a WPA PSK key this key changes each time you run ...

Page 92: ...isted will be allowed to access the ZyXEL Device Select Allow to permit access to the ZyXEL Device MAC addresses not listed will be denied access to the ZyXEL Device Set This is the index number of the MAC address MAC Address Enter the MAC addresses of the wireless station that are allowed or denied access to the ZyXEL Device in these address fields Enter the MAC addresses in a valid MAC address f...

Page 93: ...ntation Threshold It is the maximum data fragment size that can be sent Enter a value between 256 and 2432 802 11 Mode Select 802 11b to allow only IEEE 802 11b compliant WLAN devices to associate with the ZyXEL Device Select 802 11g to allow only IEEE 802 11g compliant WLAN devices to associate with the ZyXEL Device Select 802 11b g to allow either IEEE 802 11b or IEEE 802 11g compliant WLAN devi...

Page 94: ...Chapter 5 Wireless LAN P 2302HWUDL P1 Series User s Guide 94 ...

Page 95: ... function known as dynamic service selection This enables the service provider to easily create and offer new IP services for individuals Operationally PPPoE saves significant effort for both you and the ISP or carrier as it requires no specific configuration of the broadband modem at the customer site By implementing PPPoE directly on the ZyXEL Device rather than individual computers the computer...

Page 96: ...y assigned default MAC Address Otherwise click Spoof this computer s MAC address IP Address and enter the IP address of your computer Once it is successfully configured the address will be copied to the rom file ZyNOS configuration file It will not change unless you change the setting or upload a different ROM file It is recommended that you clone the MAC address prior to hooking up the WAN Port 6...

Page 97: ...screen to set up your Internet connection This screen depends on the type of Internet connection you have Use this screen to set up an Ethernet connection no Roadrunner service with the ISP To access this screen click Network WAN Internet Connection Figure 49 Network WAN Internet Connection Ethernet Some ISPs such as Telstra send UDP heartbeat packets to verify that the customer is still online In...

Page 98: ...IP address or if you want another DHCP server to assign an IP address to the ZyXEL Device Use Fixed IP Address Select this if your ISP assigned you a static IP address IP Address Enter the IP address provided by your ISP IP Subnet Mask Enter the subnet mask provided by your ISP Gateway IP Address Enter the gateway provided by your ISP If your ISP did not provide one leave it blank WAN MAC Address ...

Page 99: ...r name provided by your ISP Password Enter the password provided by your ISP Retype to Confirm Retype your password to make sure you entered it correctly Login Server IP Address Enter the IP address of the login server provided by your ISP WAN MAC Address Spoof WAN MAC Address Select this if you do not want to use the default MAC address for the ZyXEL Device Clone the computer s MAC address IP Add...

Page 100: ...ter the user name provided by your ISP Password Enter the password provided by your ISP Retype to Confirm Retype your password to make sure you entered it correctly Nailed Up Connection Select this if you do not want the ZyXEL Device to time out when the connection is idle for too long Idle Timeout This field is enabled if you do not select Nailed Up Connection Enter the number of seconds that the...

Page 101: ...unt as the measurement of cost where 1 is for a directly connected network The metric must be 1 15 if you use a value higher than 15 the routers assume the link is down Private Usually you should keep the default value This field is related to RIP See Chapter 7 on page 105 for more information This field determines whether or not the ZyXEL Device includes the route to this remote node in its RIP b...

Page 102: ...rk Enter the IP address in the field to the right Select None if you do not want to use this DNS server If you select None for all of the DNS servers you must use IP addresses to configure the ZyXEL Device and to access the Internet RIP Multicast Setup RIP Direction Use this field to control how much routing information the ZyXEL Device sends and receives on the subnet None The ZyXEL Device does n...

Page 103: ...traffic In addition other computers on the WAN have to support the same version of IGMP Windows Networking NetBIOS over TCP IP Allow between LAN and WAN Select this check box if you want the ZyXEL Device to send NetBIOS Network Basic Input Output System packets between the LAN and WAN You should also make sure that NetBIOS packets are not blocked in Security Firewall Services NetBIOS packets are T...

Page 104: ...vailable anymore For example use one of your ISP s DNS server addresses If you enter 0 0 0 0 the test fails each time Fail Tolerance Enter the number of consecutive times the ZyXEL Device may attempt and fail to find the reliable nearby computer at Check WAN IP Address before it starts using the backup gateway 2 5 are typical choices Period sec Enter the number of seconds between attempts to find ...

Page 105: ...ount and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 and you must enable the Network Address Translation NAT feature of the ZyXEL Device The Internet Assigned Number Authority IANA reserved this block of addresses specifically for private use please do not us...

Page 106: ...allations If your ISP gives you explicit DNS server address es read the embedded web configurator help regarding what fields need to be configured 7 1 4 DNS Server Address DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa The DNS server is extremely important because without it you must know the IP address of a machine before you can access it The D...

Page 107: ...formats when receiving RIP 1 is universally supported but RIP 2 carries more information RIP 1 is probably adequate for most networks unless you have an unusual network topology Both RIP 2B and RIP 2M sends the routing data in RIP 2 format the difference being that RIP 2B uses subnet broadcasting while RIP 2M uses multicasting 7 1 6 Multicast Traditionally IP packets are transmitted in one of eith...

Page 108: ...very time you want to access the Internet via the ZyXEL Device With the Any IP feature and NAT enabled the ZyXEL Device allows a computer to access the Internet without changing the network settings such as IP address and subnet mask of the computer when the IP addresses of the computer and the ZyXEL Device are not in the same subnet Whether a computer is set to use a dynamic or static fixed IP ad...

Page 109: ...ch is not the ZyXEL Device by looking at the MAC address in its ARP table 2 When the computer cannot locate the default gateway an ARP request is broadcast on the LAN 3 The ZyXEL Device receives the ARP request and replies to the computer with its own MAC address 4 The computer updates the MAC address for the default gateway to the ARP table Once the ARP table is updated the computer is able to ac...

Page 110: ...urator as soon as you change this field and click Apply You can access the web configurator again by typing the new IP address in the browser IP Subnet Mask Enter the subnet mask of the LAN Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to set every field in this screen to its last saved value Table 45 Network LAN DHCP Setup LABEL DESCRIPTION DHCP Set...

Page 111: ... is 10 10 10 10 the ZyXEL Device can allocate up to 10 10 10 254 or 245 IP addresses DNS Server First DNS Server Second DNS Server Third DNS Server Specify the IP addresses of a maximum of three DNS servers that the network can use The ZyXEL Device provides these IP addresses to DHCP clients You can specify these IP addresses two ways From ISP provide the DNS servers provided by the ISP on the WAN...

Page 112: ... assign to the computer Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to set every field in this screen to its last saved value Table 47 Network LAN Client List LABEL DESCRIPTION This field is a sequential value It is not associated with a specific entry IP Address This field displays the IP address the ZyXEL Device assigned to the computer Host Name...

Page 113: ...evice sends and receives on the subnet None The ZyXEL Device does not send or receive routing information on the subnet Both The ZyXEL Device sends and receives routing information on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the subnet RIP Version Select which version of RIP the ZyXEL Device uses...

Page 114: ... and receives routing information on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the subnet RIP Version Select which version of RIP the ZyXEL Device uses when it sends or receives information on the subnet RIP 1 The ZyXEL Device uses RIPv1 to exchange routing information RIP 2B The ZyXEL Device broa...

Page 115: ...e to unicasting sending packets to one computer and broadcasting sending packets to every computer None The ZyXEL Device does not support multicasting IGMP v1 The ZyXEL Device supports IGMP version 1 IGMP v2 The ZyXEL Device supports IGMP version 2 Multicasting can improve overall network performance However it requires extra processing and generates more network traffic In addition other computer...

Page 116: ...Chapter 7 LAN P 2302HWUDL P1 Series User s Guide 116 ...

Page 117: ...t number identifies a service for example web service is on port 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP and web service it might be better to specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service request that does not have a server...

Page 118: ...ves this problem by allowing computers on the LAN to dynamically take turns using the service The ZyXEL Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol a trigger port When the ZyXEL Device s WAN port receives a response with a specific port number and protocol incoming port the ZyXEL Device forwards the tra...

Page 119: ...on data that is going coming from inside the ZyXEL Device and going to the outside 2 If an application needs a continuous data stream that port range will be tied up so that another computer on the LAN can t trigger it 8 1 3 SIP ALG Some NAT routers may include a SIP Application Layer Gateway ALG A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in t...

Page 120: ...ions If you do not limit the number of NAT sessions a single client can establish this can result in all of the available NAT sessions being used In this case no additional NAT sessions can be established and users may not be able to access the Internet Each NAT session establishes a corresponding firewall session Use this field to limit the number of NAT firewall sessions each client computer can...

Page 121: ...The ZyXEL Device checks each rule in order and it only follows the first one that applies Active Select this to enable this rule Clear this to disable this rule Name This field displays the name of the rule It does not have to be unique Start Port This field displays the beginning of the range of port numbers forwarded by this rule End Port This field displays the end of the range of port numbers ...

Page 122: ...ave this field blank It does not have to be a unique name Start Port End Port Enter the port number or range of port numbers you want to forward to the specified server To forward one port number enter the port number in the Start Port and End Port fields To forward a range of ports enter the port number at the beginning of the range in the Start Port field enter the port number at the end of the ...

Page 123: ... Port field enter the port number at the end of the range in the End Port field If you want to delete this rule enter zero in the Start Port and End Port fields Trigger Start Port End Port Enter the outgoing port number or range of port numbers that makes the ZyXEL Device record the source IP address and assign it to the selected incoming port number s To select one port number enter the port numb...

Page 124: ...e sure H 323 audio visual programs such as NetMeeting works correctly with port forwarding and port triggering rules Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to discard your most recent changes Table 54 Network NAT ALG LABEL DESCRIPTION ...

Page 125: ...125 PART III VoIP SIP 127 Phone 141 Phone Book 155 PSTN Line 159 VoIP Trunking 161 ...

Page 126: ...126 ...

Page 127: ...roduction to SIP The Session Initiation Protocol SIP is an application layer control signaling protocol that handles the setting up altering and tearing down of voice and multimedia sessions over the Internet SIP signaling is separate from the media for which it handles sessions The media that is exchanged during the session can use a different path from that of the signaling SIP handles telephone...

Page 128: ...nge voice media talk 6 After talking A hangs up and sends a BYE request 7 B replies with an OK response confirming receipt of the BYE request and the call is terminated 9 1 5 SIP Client Server SIP is a client server protocol A SIP client is an application program or device that sends SIP requests A SIP server responds to the SIP requests When you use SIP to make a VoIP call it originates at a clie...

Page 129: ...SIP redirect server accepts SIP requests translates the destination address to an IP address and sends the translated IP address back to the device that sent the request Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server Redirect servers do not initiate SIP requests In the following example you want to use clie...

Page 130: ...ter between the ZyXEL Device and the SIP register server the ZyXEL Device probably has a private IP address The ZyXEL Device lists its IP address in the SIP message that it sends to the SIP register server NAT does not translate this IP address in the SIP message The SIP register server gets the ZyXEL Device s IP address from inside the SIP message and maps it to your SIP identity If the ZyXEL Dev...

Page 131: ...he STUN server B 2 The STUN server B finds the public IP address and port number that the NAT router used on the ZyXEL Device s SIP packets and sends them to the ZyXEL Device 3 The ZyXEL Device uses the public IP address and port number in the SIP packets that it sends to the SIP server C Figure 71 STUN 9 1 7 4 Outbound Proxy Your VoIP service provider may host a SIP outbound proxy server to handl...

Page 132: ...age waiting status SIP packets as defined in RFC 3842 9 2 Custom Tones IVR IVR Interactive Voice Response is a feature that allows you to use your telephone to interact with the ZyXEL Device The ZyXEL Device allows you to record custom tones for the Caller Ringing Tone and On Hold Tone functions The same recordings apply to both the caller ringing and on hold tones 9 2 0 1 Recording Custom Tones U...

Page 133: ...oS Network traffic can be classified by setting the ToS Type Of Service values at the data source for example at the ZyXEL Device so a server can decide the best method of delivery that is the least cost fastest route and so on 9 2 1 2 DiffServ DiffServ is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the...

Page 134: ...VLAN allows a physical network to be partitioned into multiple logical networks Only stations within the same group can communicate with each other Your ZyXEL Device can add IEEE 802 1Q VLAN ID tags to voice frames that it sends to the network This allows the ZyXEL Device to communicate with a SIP server that is a member of the same VLAN group Some ISPs use the VLAN tag to identify voice traffic a...

Page 135: ...rovider gave you one Otherwise keep the default value REGISTER Server Address Enter the IP address or domain name of the SIP register server if your VoIP service provider gave you one Otherwise enter the same address you entered in the SIP Server Address field You can use up to 95 printable ASCII characters REGISTER Server Port Enter the SIP register server s listening port number if your VoIP ser...

Page 136: ...Chapter 9 SIP P 2302HWUDL P1 Series User s Guide 136 Figure 74 VoIP SIP SIP Settings Advanced ...

Page 137: ...ation time when it receives a request to start a SIP session If the request has a shorter time the ZyXEL Device rejects it RTP Port Range Start Port End Port Enter the listening port number s for RTP traffic if your VoIP service provider gave you this information Otherwise keep the default values To enter one port number enter the port number in the Start Port and End Port fields To enter a range ...

Page 138: ...ver Address Enter the public IP address or domain name of the NAT router Server Port Enter the port number that your SIP sessions use with the public IP address of the NAT router Outbound Proxy Active Select this if your VoIP service provider has a SIP outbound server to handle voice calls This allows the ZyXEL Device to work with any type of NAT router and eliminates the need for STUN or a SIP AL...

Page 139: ...all Forward Call Forward Table Select which call forwarding table you want the ZyXEL Device to use for incoming calls You set up these tables in VoIP Phone Book Incoming Call Policy Caller Ringing Enable Select the check box if you want to specify what tone people hear when they call you The ZyXEL Device provides a default tone but you can add additional tones using IVR See Section 9 2 on page 132...

Page 140: ...e transmissions The ZyXEL Device creates Type of Service priority tags with this priority to RTP traffic that it transmits Voice VLAN ID Select this if the ZyXEL Device has to be a member of a VLAN to communicate with the SIP server Ask your network administrator if you are not sure Enter the VLAN ID provided by your network administrator in the field on the right Your LAN and gateway must be conf...

Page 141: ...e reduce the bandwidth that a call uses by not transmitting silent packets when you are not speaking When using VAD the ZyXEL Device generates comfort noise when the other party is not speaking The comfort noise lets you know that the line is still connected as total silence could easily be mistaken for a lost connection 10 1 2 Echo Cancellation G 168 is an ITU T standard for eliminating the echo ...

Page 142: ...sub command timeout 2 seconds expires or issue an invalid sub command the current operation will be aborted 10 1 3 2 1 European Call Hold Call hold allows you to put a call A on hold by pressing the flash key If you have another call press the flash key and then 2 to switch back and forth between caller A and B by putting either one on hold Press the flash key and then 0 to disconnect the call pre...

Page 143: ...e the following steps to make three way conference calls 1 When you are on the phone talking to someone place the flash key to put the caller on hold and get a dial tone 2 Dial a phone number directly to make another call 3 When the second call is answered press the flash key and press 3 to create a three way conversation 4 Hang up the phone to drop the connection 5 If you want to separate the act...

Page 144: ...ller on hold 2 When you hear the dial tone dial 98 followed by the number to which you want to transfer the call to operate the Intercom 3 After you hear the ring signal or the second party answers it hang up the phone 10 1 3 3 4 USA Three Way Conference Use the following steps to make three way conference calls 1 When you are on the phone talking to someone place the flash key to put the caller o...

Page 145: ...e tries to use the SIP account you registered most recently first Incoming Call apply to SIP1 Select this if you want to receive phone calls for the SIP1 account on this phone port If you select more than one source for incoming calls there is no way to distinguish between them when you receive phone calls SIP2 Select this if you want to receive phone calls for the SIP2 account on this phone port ...

Page 146: ... echo caused by the sound of your voice reverberating in the telephone receiver while you talk Dialing Interval Select Dialing Interval Select Enter the number of seconds the ZyXEL Device should wait after you stop dialing numbers before it makes the phone call The value depends on how quickly you dial phone numbers If you select Active Immediate Dial in VoIP Phone Common you can press the pound k...

Page 147: ...tion from different manufacturers can work together Any phone that supports GAP can make and receive calls through the ZyXEL Device 10 3 1 DECT Phone Registration In order to use your DECT phone with the ZyXEL Device the DECT phone must register with the ZyXEL Device s DECT base station Follow these steps to register your DECT phone with the ZyXEL Device 1 Press down the DECT base station button A...

Page 148: ... of the ZyXEL Device during the registration process See Appendix A on page 287 for the range of your ZyXEL Device 3 Enter the Personal Identification Number PIN in the DECT phone When a ZyXEL Device discovers a DECT phone in registration mode it sends a request for a PIN Your DECT phone receives the request and prompts you to enter the PIN Use your DECT phone s keypad to enter the PIN you configu...

Page 149: ...he DECT base station button refer to Figure 79 on page 148 for 12 seconds or more to reset the DECT base station 10 3 2 Using your DECT Phone You can use your DECT phone to make calls to other DECT phones registered with the ZyXEL Device A These calls are referred to as internal calls You can also use your DECT phone to make VoIP calls B For the PSTN models you can also make calls via the PSTN lin...

Page 150: ...ure as with the analog phone connected to the ZyXEL Device You must also Specify the SIP accounts for incoming and outgoing VoIP calls Specify whether the DECT phones should receive calls on the PSTN line P 2302HWUDL P1 model only When you assign a specific SIP account to be used with the DECT phone for outgoing or incoming calls all of the DECT phones registered with the ZyXEL Device use this SIP...

Page 151: ...to receive phone calls for the SIP1 account on your DECT phones SIP2 Select this if you want to receive phone calls for the SIP2 account on your DECT phones PSTN Line Select this if you want to receive phone calls from the PSTN line that do not use the Internet on your DECT phones P 2302HWUDL P1 model only Base Station Update Register PIN Code Select this to update the PIN code of the DECT phone T...

Page 152: ... and to apply them to the ZyXEL Device Cancel Click this to set every field in this screen to its last saved value Table 65 VoIP Phone DECT Phone LABEL DESCRIPTION Table 66 VoIP Phone Common LABEL DESCRIPTION Active Immediate Dial Select this if you want to use the pound key to tell the ZyXEL Device to make the phone call immediately instead of waiting the number of seconds you selected in the Dia...

Page 153: ...ary phone services call hold call waiting call transfer and three way conference calls that your VoIP service provider supports Europe Type use supplementary phone services in European mode USA Type use supplementary phone services American mode You might have to subscribe to these services to use them Contact your VoIP service provider Apply Click this to save your changes and to apply them to th...

Page 154: ...Chapter 10 Phone P 2302HWUDL P1 Series User s Guide 154 ...

Page 155: ...ing rules and speed dial settings 11 1 Phone Book Screens 11 1 1 Incoming Call Policy Screen Use this screen to maintain rules for handling incoming calls You can block redirect or accept them To access this screen click VoIP Phone Book Incoming Call Policy Figure 85 VoIP Phone Book Incoming Call Policy ...

Page 156: ...ice should wait for you to answer an incoming call before it considers the call is unanswered Advanced Setup The ZyXEL Device checks these rules before it checks the rules in the Forward to Number section This field is a sequential value and it is not associated with a specific rule The sequence is important however The ZyXEL Device checks each rule in order and it only follows the first one that ...

Page 157: ...pe column and enter the callee s IP address or domain name The ZyXEL Device sends SIP INVITE requests to the peer VoIP device when you use the speed dial entry You do not need to configure a SIP account in order to make a peer to peer VoIP call You can also create speed dial entries for frequently used SIP phone numbers VoIP Phone Book Speed Dial Each field is described in the following table Tabl...

Page 158: ...s the way they appear in the screen Number This field displays the SIP number the ZyXEL Device calls when you dial the speed dial number Name This field displays the name of the party you call when you dial the speed dial number Destination This field is blank if the speed dial entry uses one of your SIP accounts Otherwise this field shows the IP address or domain name of the SIP server or other p...

Page 159: ...make regular calls without dialing a prefix number You can also specify phone numbers that should always use the regular phone service without having to dial a prefix number Do this for emergency numbers like those for contacting police fire or emergency medical services When the ZyXEL Device does not have power only the phone connected to the PHONE 1 port can be used for making calls Ensure you k...

Page 160: ...XEL Device that you want to make a regular phone call It is not recommended to use the key however because it is also used in Immediate Dial See VoIP Phone Common Relay to PSTN Line Enter phone numbers for regular calls not VoIP calls that you want to dial without the prefix number For example you should enter emergency numbers The number 1 9 is not a speed dial number It is just a sequential valu...

Page 161: ...e calls to PSTN subscribers at reduced cost Connect to the ZyXEL Device via VoIP and the ZyXEL Device forwards the call to a PSTN phone Creating a link over the IP network requires two VoIP devices VoIP trunking scenarios vary depending on how the VoIP devices work together and how they receive or forward PSTN calls The following sections describe the details of VoIP trunking 13 2 VoIP Trunking an...

Page 162: ... peer device B via the IP address of B Figure 87 Peer Devices Connecting A peer to peer call doesn t require any authentication however authentication is required when you request the remote peer device to forward a call The remote peer device has a list of accounts each consisting of a username and password which are allowed to use the remote peer device to forward calls These accounts make up an...

Page 163: ...you want to configure and the rule you want to set up 13 4 VoIP Trunking Scenarios There are several different VoIP trunking scenarios 13 4 1 VoIP Phone To PSTN Phone A VoIP phone A makes a call to the ZyXEL Device B via VoIP B forwards the call to a PSTN phone C A can be an analog phone connected to the ZyXEL Device or any other phone capable of making calls over the IP network Figure 88 VoIP Pho...

Page 164: ...nd C forwards the call to a PSTN phone D Figure 90 PSTN Phone To PSTN Phone via VoIP 13 5 Trunking General Screen Use this screen to enable VoIP trunking click VoIP Trunking General VoIP Trunking requires the following additional configuration in the VoIP SIP SIP Settings Advanced Setup screen Voice Compression field needs to be set to G 729 and DTMF Mode field needs to be set to SIP INFO Figure 9...

Page 165: ...nge the default Enter a value from 1 to 255 seconds When the auto attendant times out the phone directly connected to the ZyXEL Device rings Dialing Interval sec Enter the number of seconds the ZyXEL Device should wait after you stop dialing numbers before it makes the phone call The value depends on how quickly you dial phone numbers The default value is 3 seconds and entering 0 does not change t...

Page 166: ...ticate with the remote peer device This is an index number of your outgoing authentication accounts Name Enter a descriptive name for the remote peer device of this account For example if the peer device is located in London you might enter London as the account name This name is used when you configure call rules in the VoIP Trunking Call Rules screen Username Enter the username needed to authent...

Page 167: ... this value unless the remote peer device does not follow the standard Incoming Authentication You can set up multiple accounts which are allowed to use your ZyXEL Device for VoIP trunking When peer devices want to forward calls through your ZyXEL Device this is the list your ZyXEL Device checks to see if the user has the right to complete the call This is the index number of the incoming authenti...

Page 168: ... the call to a peer VoIP device For example if you want to use trunking to call phone numbers which start with the number 555 then enter 555 in this field Enter up to 32 numeric characters If the number you dial does not match any of the patterns you configured then you can still use your ZyXEL Device to forward calls to VoIP phones Simply dial the SIP number of the VoIP phone you want to call Acc...

Page 169: ...am The head office has a public IP address a b c d and the branch office has a public IP address w x y z Figure 94 VoIP to PSTN Example The proposed solution is to establish a peer to peer call between the two ZyXEL Devices and have the branch office ZyXEL Device forward calls to the sales team members via PSTN 13 8 2 Configuration Details Outgoing The ZyXEL Device at headquarters from which the c...

Page 170: ...ice ZyXEL Device The name of this rule is CityB referring to the branch office ZyXEL Device In this example the username is headquarters and the password is password This can be configured in the VoIP Trunking Peer Call screen Figure 96 VoIP to PSTN Example Outgoing Authentication 13 8 3 Configuration Details Incoming The branch office ZyXEL Device needs to have an incoming authentication account ...

Page 171: ...s example shows how to configure a PSTN to PSTN call with a VoIP link It also shows how call rules can be used to automate VoIP trunking Table 76 VoIP Trunking Call Progression HEADQUARTERS BRANCH OFFICE SALES1 A person at A dials 01 from the phone connected to the ZyXEL Device The ZyXEL Device at A inspects the number and connects to the remote peer device at B The remote peer device inspects the...

Page 172: ...n is to configure a call rule which will allow the sales manager to call into the headquarters via PSTN establish a VoIP link between the two ZyXEL Devices and have the remote peer device forward calls to the sales employees via PSTN 13 9 2 Configuration Details Outgoing The ZyXEL Device at headquarters from which the VoIP link originates needs to have the following configuration settings 1 Auto a...

Page 173: ...is example the username is headquarters and the password is password This can be configured in the VoIP Trunking Peer Call screen Figure 100 PSTN to PSTN Example Outgoing Authentication 3 A call rule needs to be created This rule tells the ZyXEL Device which remote peer device it should connect to in order to complete the call This rule is composed of a pattern and an account name This pattern is ...

Page 174: ...ffice ZyXEL Device needs to have an incoming authentication account configured This consists of a username and password This account must match the username and password of the outgoing authentication account of the headquarters ZyXEL Device This can be configured in the VoIP Trunking Peer Call screen Figure 102 PSTN to PSTN Example Incoming Authentication ...

Page 175: ...e PSTN number of Sales1 555 555 1234 The ZyXEL Device prompts the manager to enter the PIN in order to allow VoIP trunking The manager dials the PIN 12345 The ZyXEL Device confirms the password and allows for VoIP trunking The ZyXEL Device inspects the phone number against call rules Since the number starts with the pattern 5555 it uses the account CityB associated with this pattern to connect the...

Page 176: ...Chapter 13 VoIP Trunking P 2302HWUDL P1 Series User s Guide 176 ...

Page 177: ...177 PART IV Security Firewall 179 Content Filter 187 ...

Page 178: ...178 ...

Page 179: ...itself 14 1 1 Stateful Inspection Firewall Stateful inspection firewalls restrict access by screening data packets against defined access rules They make access control decisions based on IP address and protocol They also inspect the session data to assure the integrity of the connection and to adapt to dynamic protocols These firewalls generally provide the best speed and transparency however the...

Page 180: ... Don t enable any local service such as telnet or FTP that you don t use Any enabled service could present a potential security risk A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network 5 For local services that are enabled protect against misuse Protect by configuring the services to communicate only with specific peers and p...

Page 181: ...N ZyXEL Device firewall rules WAN to WAN ZyXEL Device firewall rules are Internet to the ZyXEL Device WAN interface firewall rules The default is to block all such traffic When you decide what WAN to LAN packets to log you are in fact deciding what WAN to LAN and WAN to WAN ZyXEL Device packets to log Forwarded WAN to LAN packets are not considered alerts 14 2 Triangle Route When the firewall is o...

Page 182: ...on is to use IP alias IP alias allows you to partition your network into logical sections over the same Ethernet interface Your ZyXEL Device supports up to three logical LAN interfaces with the ZyXEL Device being the gateway for each logical network It s like having multiple LAN networks that actually use the same physical cables and ports By putting your LAN and Gateway A in different subnets all...

Page 183: ...Device controls access and protects against Denial of Service DoS attacks when the firewall is activated Bypass Triangle Route Select this if you want to let some traffic from the WAN go directly to a computer in the LAN without passing through the ZyXEL Device See the appendices for more information about triangle route topology Max NAT Firewall Session Per User Select the maximum number of NAT r...

Page 184: ...ant to create log entries for firewall events No Log do not create any log entries Log Blocked LAN to WAN only create log entries when packets are blocked Log Forwarded WAN to LAN only create log entries when packets are forwarded Log All create log entries for every packet Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to set every field in this scre...

Page 185: ...r the range of port numbers that defines the service For example suppose you want to define the Gnutella service Select TCP type and enter a port range of 6345 6349 Add Click this to add the selected service in Available Services to the Blocked Services list Delete Select a service in the Blocked Services and click this to remove the service from the list Clear All Click this to remove all the ser...

Page 186: ...Chapter 14 Firewall P 2302HWUDL P1 Series User s Guide 186 ...

Page 187: ...ock certain web features or specific URL keywords The ZyXEL Device can block web features such as ActiveX controls Java applets cookies and disable web proxies The ZyXEL Device also allows you to define time periods and days during which the ZyXEL Device performs content filtering 15 2 Content Filtering Screens 15 2 1 Content Filter Screen Use this screen to set up a trusted IP address which web f...

Page 188: ...where they remain in case you visit the site again Java This is used to build downloadable Web components or Internet and intranet business applications of all kinds Cookies This is used by Web servers to track usage and to provide service based on ID Web Proxy This is a server that acts as an intermediary between a user and the Internet to provide security administrative control and caching servi...

Page 189: ...ve all of the keywords in the Keyword List Denied Access Message Enter the message that is displayed when the ZyXEL Device s content filter feature blocks access to a web site Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to set every field in this screen to its last saved value Table 80 Security Content Filter Filter LABEL DESCRIPTION Table 81 Secur...

Page 190: ...Chapter 15 Content Filter P 2302HWUDL P1 Series User s Guide 190 ...

Page 191: ...191 PART V Management Static Route 193 Bandwidth MGMT 197 Remote MGMT 209 UPnP 217 Sharing a USB Printer 229 File Sharing 243 ...

Page 192: ...192 ...

Page 193: ...2 in the following figure through remote node Router 1 However the ZyXEL Device is unable to route a packet to network N3 because it doesn t know that there is a route through the same remote node Router 1 via gateway Router 2 The static routes are for you to tell the ZyXEL Device about the networks beyond the remote nodes Figure 111 Example of Static Routing Topology 16 2 Static Route Screens 16 ...

Page 194: ...r The ZyXEL Device checks each rule in order and it only follows the first one that applies Name This field displays the name that describes the static route Active This field shows whether this static route is active Yes or not No Destination This field displays the destination IP address es that this static route affects Gateway This field displays the IP address of the gateway to which the ZyXE...

Page 195: ...resses that this static route affects If this static route affects only one IP address enter 255 255 255 255 Gateway IP Address Enter the IP address of the gateway to which the ZyXEL Device should send packets for the specified Destination The gateway is a router or a switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Metric U...

Page 196: ...Chapter 16 Static Route P 2302HWUDL P1 Series User s Guide 196 ...

Page 197: ...ays and dropped packets at the next routing device For example you can set the WAN interface speed to 1024 kbps or less if the broadband device connected to the WAN port has an upstream speed of 1024 kbps 17 1 1 Bandwidth Classes and Filters Use bandwidth classes and sub classes to allocate specific amounts of bandwidth capacity bandwidth budgets Configure a bandwidth filter to define a bandwidth ...

Page 198: ...ets You could configure one bandwidth class for subnet A and another for subnet B Figure 114 Subnet based Bandwidth Management Example 17 1 5 Application and Subnet based Bandwidth Management You could also create bandwidth classes based on a combination of a subnet and an application The following example table shows bandwidth allocations for application specific traffic from separate LAN subnets...

Page 199: ...idth the ZyXEL Device gives extra bandwidth to that class When multiple classes require more bandwidth the ZyXEL Device gives the highest priority classes the available bandwidth first as much as they require if there is enough available bandwidth and then to lower priority classes if there is still bandwidth available The ZyXEL Device distributes the available bandwidth equally among classes with...

Page 200: ... sales and marketing departments 1536 kbps extra to each for a total of 3584 kbps for each because they both have the highest priority level Research requires more bandwidth but only gets its budgeted 2048 kbps because all of the unbudgeted and unused bandwidth goes to the higher priority sales and marketing classes 17 1 7 4 Fairness based Allotment of Unused Unbudgeted Bandwidth The following tab...

Page 201: ... class because the Sales class has bandwidth borrowing disabled 17 1 8 2 Maximize Bandwidth Usage With Bandwidth Borrowing If you configure both maximize bandwidth usage on the interface and bandwidth borrowing on individual sub classes the ZyXEL Device functions as follows 1 The ZyXEL Device sends traffic according to each bandwidth class s bandwidth budget 2 The ZyXEL Device assigns a parent cla...

Page 202: ... Suppose you try to browse the web too In this case VoIP NetMeeting and FTP all have higher priority so they get to use the bandwidth first You can only browse the web when VoIP NetMeeting and FTP do not use all 1000 Kbps of available bandwidth 17 2 Bandwidth Management Screens 17 2 1 Bandwidth Management Summary Screen Use this screen to enable bandwidth management on an interface and to set the ...

Page 203: ...Internet connection has an upstream transmission speed of 10 Mbps You can set this number higher than the interface s actual transmission speed This will stop lower priority traffic from being sent if higher priority traffic uses all of the actual bandwidth You can also set this number lower than the interface s actual transmission speed If you do not enable Max Bandwidth Usage this will cause the...

Page 204: ...speed of this interface WLAN Active Select this to enable bandwidth management on the WLAN Bandwidth management applies to all traffic flowing out of the router through the WLAN regardless of the traffic s source Speed Enter the amount of bandwidth for this interface that you want to allocate using bandwidth management The recommendation is to set this speed to match the interface s actual transmi...

Page 205: ...e Select the interface for which you wish to set up classes Bandwidth management controls outgoing traffic on an interface not incoming In order to limit the download bandwidth of the LAN users set the bandwidth management class on the LAN In order to limit the upload bandwidth set the bandwidth management class on the corresponding WAN interface Root Class In this section you can look at each cla...

Page 206: ...les of services for which you might create bandwidth classes Each field is described in the following table Table 92 Management Bandwidth MGMT Class Setup Edit LABEL DESCRIPTION This section lets you set the budget and priority for this class Class Name Finish the auto generated name or enter a descriptive name up to 20 alphanumeric characters long Spaces are allowed Bandwidth Budget Enter the max...

Page 207: ... The Subnet Mask fields are only available when you enter the destination or source IP address Application Select a pre defined application If you select a predefined application do not set up the other filter criteria FTP File Transfer Program enables fast transfer of files including large files that may not be possible by e mail Select this to configure the bandwidth filter for FTP traffic SIP S...

Page 208: ...ed to bandwidth classes If you do not select Maximize bandwidth usage in the Bandwidth Management Summary Screen the ZyXEL Device uses the bandwidth in this default class to only send traffic that does not match any of the bandwidth classes If you allocate all the root class s bandwidth to bandwidth classes the Default Class still displays a budget of 2 kbps the minimum amount of bandwidth that ca...

Page 209: ...remote management session of higher priority starts The priorities for the different types of remote management sessions are as follows 1 Telnet 2 HTTP 18 1 1 Remote Management Limitations Remote management over LAN or WAN will not work when 1 You have disabled that service in one of the remote management screens 2 The IP address in the Secured Client IP field does not match the client IP address ...

Page 210: ...ement Remote MGMT WWW Each field is described in the following table 18 2 2 Telnet Screen Use this screen to control Telnet access to your ZyXEL Device To access this screen click Management Remote MGMT Telnet Table 95 Management Remote MGMT WWW LABEL DESCRIPTION Server Port Enter the port number this service can use to access the ZyXEL Device The computer must use the same port number Server Acce...

Page 211: ...Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Address Select All to allow any computer to access the ZyXEL Device using this service Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Devic...

Page 212: ...es of component agents and a manager An agent is a management software module that resides in a managed device the ZyXEL Device An agent translates the local management information from the managed device into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applications that control and monitor managed dev...

Page 213: ...ZyXEL Device supports MIB II that is defined in RFC 1213 and RFC 1215 The focus of the MIBs is to let administrators collect statistical data and monitor status and performance 18 3 2 SNMP Traps The ZyXEL Device will send traps to the SNMP manager when any one of the following events occurs 18 3 3 Configuring SNMP To change your ZyXEL Device s SNMP settings click Advanced Remote MGMT SNMP The scre...

Page 214: ...h is the password sent with each trap to the SNMP manager The default is public and allows all requests Trap Destination Type the IP address of the station to send your SNMP traps to SNMP Service Port You may change the server port number for a service if needed however you must use the same port number in order to use that service for remote management Service Access Select the interface s throug...

Page 215: ...ield is read only This field displays the port number this service uses to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Address Select All to allow any computer to access the ZyXEL Device using this service Select Selected to only allow the computer w...

Page 216: ... Select this to prevent outsiders from discovering your ZyXEL Device by sending requests to unsupported port numbers If an outside user attempts to probe an unsupported port on your ZyXEL Device an ICMP response packet is automatically returned This allows the outside user to know the ZyXEL Device exists Your ZyXEL Device supports anti probing which prevents the ICMP response packet from being sen...

Page 217: ...19 1 2 NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through NAT UPnP network devices can automatically configure network addressing announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions NAT traversal allows the following Dynamic port mapping Learning public IP addresses Assigning l...

Page 218: ...ections for examples of installing and using UPnP 19 2 UPnP Examples 19 2 1 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP 19 2 1 1 Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on the Windows Setup tab and select Communication in...

Page 219: ...9 2 1 2 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start and Control Panel 2 Double click Network Connections 3 In the Network Connections window click Advanced in the main menu and select Optional Networking Components Figure 128 Network Connections 4 The Windows Optional Networking Components Wizard window displays Select Networking Service in ...

Page 220: ...re 129 Windows Optional Networking Components Wizard 5 In the Networking Services window select the Universal Plug and Play check box Figure 130 Networking Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next ...

Page 221: ... the computer is connected to a LAN port of the ZyXEL Device Turn on your computer and the ZyXEL Device 19 2 2 1 Auto discover Your UPnP enabled Network Device 1 Click Start and Control Panel Double click Network Connections An icon displays under Internet Gateway 2 Right click the icon and select Properties Figure 131 Network Connections 3 In the Internet Connection Properties window click Settin...

Page 222: ...Chapter 19 UPnP P 2302HWUDL P1 Series User s Guide 222 Figure 132 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings ...

Page 223: ...nced Settings Figure 134 Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled device is disconnected from your computer all port mappings will be deleted automatically 6 Select Show icon in notification area when connected option and click OK An icon displays in the system tray ...

Page 224: ...2 Web Configurator Easy Access With UPnP you can access the web based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first This comes helpful if you do not know the IP address of the ZyXEL Device Follow the steps below to access the web configurator 1 Click Start and then Control Panel 2 Double click Network Connections 3 Select My Network Places under Othe...

Page 225: ...r s Guide 225 Figure 137 Network Connections 4 An icon with the description for each UPnP enabled device displays under Local Network 5 Right click on the icon for your ZyXEL Device and select Invoke The web configurator login screen displays ...

Page 226: ...gure 138 Network Connections My Network Places 6 Right click on the icon for your ZyXEL Device and select Properties A properties window displays with basic information about the ZyXEL Device Figure 139 Network Connections My Network Places Properties Example ...

Page 227: ...er Allow users to make configuration changes through UPnP Select this to allow UPnP enabled applications to automatically configure the ZyXEL Device so that they can communicate through the ZyXEL Device For example using NAT traversal UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device this eliminates the need to manually configure...

Page 228: ...Chapter 19 UPnP P 2302HWUDL P1 Series User s Guide 228 ...

Page 229: ...ers connected to your network Figure 141 Sharing a USB Printer The computers on your network must have the printer software already installed before they can create a TCP IP port for printing via the network Follow your printer manufacturers instructions on how to install the printer software on your computer See Section 20 5 on page 235 for an example of adding a printer 20 2 Requirements To conf...

Page 230: ...m The TCP IP port must be configured with the IP address of the ZyXEL Device and must use the LPR Line Printer Remote protocol to communicate with the printer Consult your operating systems documentation for instructions on how to do this or follow the instructions below if you have a Windows 2000 XP operating system 1 Click Start Settings then right click on Printers and select Open Figure 142 Op...

Page 231: ...1 Series User s Guide 231 Figure 143 Open Printer Properties 4 Select the Ports tab and click Add Port Figure 144 Printer Properties Window 5 A Printer Ports window appears Select Standard TCP IP Port and click New Port Figure 145 Add a Port Window ...

Page 232: ...printer is connected in the Printer Name or IP Address field In our example we use the default IP address of the ZyXEL Device 192 168 1 1 The Port Name field updates automatically to reflect the IP address of the port Click Next The computer from which you are configuring the TCP IP printer port must be on the same LAN in order to use the printer sharing function Figure 147 Enter IP Address of the...

Page 233: ...der Protocol 11 Type the LPR queue name of your printer model in the Queue Name field and click OK Refer to your printer documentation for the LPR queue name Some printer models accept any name you want to use in this case you can enter a short descriptive name for the Queue Name Figure 149 Custom Port Settings 12 Continue through the wizard apply your settings and close the wizard window ...

Page 234: ...ver link under Management to display the Print Server screen Figure 151 Configuring Print Server The following table describes the labels in this screen Table 103 Configuring Print Server LABEL DESCRIPTION Print Device Name Type a Print Device Name of up to 31 printable characters for recognition of the associated printer on the print server network This name is displayed on a computer on the prin...

Page 235: ...a TCP IP connection with a printer is online and ready to print Printing A computer on the print server network is executed a print job PaperOut The printer loading tray has no paper to perform the printing job Offline The computers in the print server network cannot use the print server Make sure a USB v1 1 compliant printer is connected to the ZyXEL Device s USB port and powered on Apply Click A...

Page 236: ...s User s Guide 236 Figure 153 Add Printer Wizard Welcome 3 Select Local printer and click Next Figure 154 Add Printer Wizard Local or Network Printer 4 Select an LPT Line Printing Terminal port a parallel port as the computer interface for the USB printer ...

Page 237: ...f Printers you can insert the printer driver installation CD disk or download the driver file to your computer click Have Disk and install the new printer driver 8 Click Next to continue Figure 156 Add Printer Wizard Printer Driver 9 If the following screen displays select Keep existing driver radio button and click Next if you already have a printer driver installed on your computer and you do no...

Page 238: ... the printer and then click Next to continue Figure 158 Add Printer Wizard Name Your Printer 11 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same network just select Do not share this printer and click Next to proceed to the following screen ...

Page 239: ...nd then click the Next button if you want to print a test page A pop up screen displays to ask if the test page printed correctly Otherwise select No and then click Next to continue Figure 160 Add Printer Wizard Print Test Page 13 The following screen shows your current printer settings Select Finish to complete adding a new printer ...

Page 240: ...he Print Center icon located in the Macintosh Dock a place holding a series of icons shortcuts at the bottom of the desktop Proceed to step 6 to continue If the Print Center icon is not in the Macintosh Dock proceed to the next step 2 On your desktop double click the Macintosh HD icon to open the Macintosh HD window Figure 162 Macintosh HD 3 Double click the Applications folder Figure 163 Macintos...

Page 241: ... 166 Printer List Folder 7 Set up your printer in the Printer List configuration screen Select IP Printing from the drop down list box 8 In the Printer s Address field type the IP address of your ZyXEL Device 9 Deselect the Use default queue on server check box 10 Type LP1 a parallel port in the Queue Name field 11 Select your Printer Model from the drop down list box If the printer s model is not...

Page 242: ... and close the Printer List configuration screen Figure 168 Printer Model 13 The Name LP1 on 192 168 1 1 displays in the Printer List field The default printer Name displays in bold type Figure 169 Print Server 14 Your Macintosh print server driver setup is complete You can now use the ZyXEL Device s print server to print from a Macintosh computer ...

Page 243: ...d drive with a USB connector The following figure is an overview of the ZyXEL Device s file server feature File Allocation Table FAT and FAT32 file systems are the only file systems compatible with the file sharing feature Figure 170 File Sharing Overview Do the following to set up file sharing via your ZyXEL Device 1 Connect a USB memory stick or a USB hard drive to one of the ZyXEL Device s USB ...

Page 244: ... the ZyXEL Device 21 2 1 Using the Workgroup Name to Share Files In order to use this method to share files you need to add the ZyXEL Device to the workgroup on the network to which your computer belongs In a typical home network this workgroup name is Workgroup The ZyXEL Device will not be accessible via the workgroup name if your local area network has restrictions set up that do not allow devic...

Page 245: ...en you browse to the ZyXEL Device you are prompted for a user name and password before you can access files on the USB storage device Figure 172 File Sharing Login Once logged in you do not have to re login until you restart the computer even if the administrator changes the username and password 21 4 File Sharing General Screen Use this screen to set up file sharing via the ZyXEL Device To access...

Page 246: ... name to which your computer belongs to browsing via the network neighborhood will not work System Code Page Select the character set of the files contained on your storage device For example if your files were created on an operating system which used the Russian alphabet select cp866 Russian If the file or folder names on your USB storage device appear as unrecognizable or jumbled characters you...

Page 247: ... user name and password and hit OK See Figure 174 on page 248 Once you login to the file share via your ZyXEL Device you do not have to relogin until you restart your computer Default Share Directory List These fields identify the default shares on the ZyXEL Device This is a read only index number of the default share on the ZyXEL Device When more than one USB disk or a USB hard drive with multipl...

Page 248: ...s Windows Explorer and displays the contents of the USB storage device connected to your ZyXEL Device 21 5 3 Using the Workgroup Name to Access Files Before using this method to access files you need to make sure that you have correctly configured the workgroup name in the File Sharing General screen See Section 21 2 1 on page 244 for more information The ZyXEL Device will not be accessible via th...

Page 249: ...evice is a member of your workgroup use Windows Explorer to browse to the file share by locating the workgroup in your file system It is located under My Network Places In our example the workgroup name is the default Workgroup Figure 176 Browse to a File Share via Workgroup Name ...

Page 250: ...Chapter 21 File Sharing P 2302HWUDL P1 Series User s Guide 250 ...

Page 251: ...251 PART VI Maintanence and Troubleshooting System 253 Logs 261 Tools 273 Troubleshooting 279 ...

Page 252: ...252 ...

Page 253: ...work Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the System Name In Windows XP click Start My Computer View system information and then click the Computer Name tab Note the entry in the Full computer name field and enter it as the ZyXEL Device System Name 22 1 2 Domain Name The Domain Name entry is what is propagated to the DHCP clie...

Page 254: ... 38 alphanumeric characters Spaces are not allowed but dashes and periods are accepted Administrator Inactivity Timer Enter the number of minutes a management session can be left idle before the session times out After it times out you have to log in again A value of 0 means a management session never times out no matter how long it has been left idle This is not recommended Long idle timeouts may...

Page 255: ...mic IP address with one or many dynamic DNS services so that anyone can contact you in NetMeeting CU SeeMe etc You can also access your FTP server or Web site on your own computer using a domain name for instance myhost dhs org where myhost is a name of your choice that will never change instead of using an IP address that changes each time you reconnect Your friends or relatives will always be ab...

Page 256: ...provider Host Name Enter the host name You can specify up to two host names separated by a comma User Name Enter your user name Password Enter the password assigned to you Enable Wildcard Option Select this to enable the DynDNS Wildcard feature Enable offline option This field is available when CustomDNS is selected in the DDNS Type field Select this if your Dynamic DNS service provider redirects ...

Page 257: ...ynamic DNS server auto detect IP address Select this if you want the DDNS server to update the IP address of the host name s automatically Select this option when there are one or more NAT routers between the ZyXEL Device and the DDNS server Note The DDNS server may not be able to detect the proper IP address if there is an HTTP proxy server between the ZyXEL Device and the DDNS server Use specifi...

Page 258: ...9 Maintenance System Time Setting Each field is described in the following table Table 108 Maintenance System Time Setting LABEL DESCRIPTION Current Time and Date This section displays the current date and time Time and Date Setup Manual Select this if you want to specify the current date and time in the fields below New Time Enter the new time in this field and click Apply New Date Enter the new ...

Page 259: ... if you are unsure of this information Time Zone Setup Time Zone Select the time zone at your location Daylight Savings Select this if your location uses daylight savings time Daylight savings is a period from late spring to early fall when many places set their clocks ahead of normal local time by one hour to give more daytime light in the evening Start Date Enter which hour on which day of which...

Page 260: ...Chapter 22 System P 2302HWUDL P1 Series User s Guide 260 ...

Page 261: ...g Facility 8 Severity Mon dd hr mm ss hostname src srcIP srcPort dst dstIP dstPort msg msg note note devID mac address cat category This message is sent by the system RAS displays as the system name if you haven t configured one when the router generates a syslog The facility is defined in the Log Settings screen The severity is the log s syslog class The definition of messages and notes are defin...

Page 262: ...egories depends on what log categories are selected in the Log Settings page Email Log Now Click this to send the log screen to the e mail address specified in the Log Settings page Refresh Click Refresh to renew the log screen Clear Log Click Clear Log to clear all the log entries regardless of what is shown on the log screen This field is a sequential value and it is not associated with a specif...

Page 263: ...orded To access this screen click Maintenance Logs Log Settings Figure 181 Maintenance Logs Log Settings Each field is described in the following table Table 111 Maintenance Logs Log Settings LABEL DESCRIPTION E mail Log Settings Mail Server Enter the server name or the IP address of the mail server the ZyXEL Device should use to e mail logs and alerts Leave this field blank if you do not want to ...

Page 264: ... Select which day of the week to send the logs Time for Sending Log This field is only available when you select Daily or Weekly in the Log Schedule field Enter the time of day in 24 hour format for example 23 00 equals 11 00 pm to send the logs Clear log after sending mail Select this to clear all logs and alert messages after logs are sent by e mail Syslog Logging Syslog logging sends a log to a...

Page 265: ...ed an IP address to a client Successful WEB login Someone has logged on to the device s web configurator interface WEB login failed Someone has failed to log on to the device s web configurator interface Successful TELNET login Someone has logged on to the router via telnet TELNET login failed Someone has failed to log on to the router via telnet Successful FTP login Someone has logged on to the d...

Page 266: ...t the router blocked access to a web site that the user requested Exceed maximum sessions per host d The device blocked a session because the host s connections exceeded the maximum sessions per host Table 115 TCP Reset Logs LOG MESSAGE DESCRIPTION Under SYN flood attack sent TCP RST The router sent a TCP reset packet when a host was under a SYN flood attack the TCP incomplete count is per destina...

Page 267: ...n type d code d ICMP access matched the default policy and was blocked or forwarded according to the user s setting Firewall rule NOT match ICMP Packet Direction rule d type d code d ICMP access matched or didn t match a firewall rule denoted by its number and was blocked or forwarded according to the rule Triangle route packet forwarded ICMP The firewall allowed a triangle route session to pass t...

Page 268: ... The web site contains ActiveX s Contains Java applet The web site contains a Java applet s Contains cookie The web site contains a cookie s Proxy mode detected The router detected proxy mode in the packet s Trusted Web site The web site is in a trusted domain Cannot get the IP address of content filtering external database via DNS query The ZyXEL Device cannot get the IP address of the external c...

Page 269: ...pe d code d The firewall classified an ICMP packet with no source routing entry as an IP spoofing attack vulnerability ICMP type d code d The firewall detected an ICMP vulnerability attack traceroute ICMP type d code d The firewall detected an ICMP traceroute attack ports scan UDP The firewall detected a UDP port scan attack Firewall sent TCP packet in response to DoS attack TCP The firewall sent ...

Page 270: ...remote management settings Table 123 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fragmentation was dropped because it was set to Don t Fragment DF 5 Source route failed 4 Source Quench 0 A gateway may discard internet datagrams if it does not have t...

Page 271: ...ss by SIP SIP Phone Number The listed SIP account s registration was deleted from the SIP register server SIP UnRegistration Fail by SIP SIP Phone Number An attempt to delete the listed SIP account s registration from the SIP register server failed Table 125 RTP Logs LOG MESSAGE DESCRIPTION Error RTP init fail The initialization of an RTP session failed Error Call fail RTP connect fail A VoIP phon...

Page 272: ...Chapter 23 Logs P 2302HWUDL P1 Series User s Guide 272 ...

Page 273: ...me with a bin extension e g ZyXEL Device bin The upload process uses HTTP Hypertext Transfer Protocol and may take up to two minutes After a successful upload the system will reboot 24 2 Tools Screens 24 2 1 Firmware Screen Use this screen to upload new firmware to the ZyXEL Device To access this screen click Maintenance Tools Firmware Only use firmware for your ZyXEL Device s specific model Refer...

Page 274: ...following icon on your desktop Figure 184 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the Status screen You might have to open a new browser to log in Table 127 Maintenance Tools Firmware LABEL DESCRIPTION File Path Enter the location of the bin file you want to upload or click Browse to find it You must decompress compressed zip files bef...

Page 275: ...o access this screen click Maintenance Tools Configuration Figure 186 Maintenance Tools Configuration Each field is described in the following table Table 128 Maintenance Tools Configuration LABEL DESCRIPTION Backup Configuration Backup Click this to save the ZyXEL Device s current configuration to a file on your computer Once your device is configured and functioning properly it is highly recomme...

Page 276: ...wing icon on your desktop Figure 188 Network Temporarily Disconnected File Path Enter the location of the file you want to upload or click Browse to find it Browse Click this to find the file you want to upload Upload Click this to restore the selected configuration file See Section 24 2 4 on page 276 for more information about this Note Do not turn off the device while configuration file upload i...

Page 277: ...browser to log in again If the upload was not successful a Configuration Upload Error screen appears Figure 189 Configuration Upload Error Click Return to go back to the Configuration Screen 24 2 5 Restart Screen Use this screen to reboot the ZyXEL Device without turning the power off To access this screen click Maintenance Tools Restart Figure 190 Maintenance Tools Restart This does not affect th...

Page 278: ...Chapter 24 Tools P 2302HWUDL P1 Series User s Guide 278 ...

Page 279: ... the ZyXEL Device 2 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source Make sure the power source is turned on 3 Turn the ZyXEL Device off and on 4 Disconnect and re connect the power adaptor or cord to the ZyXEL Device 5 If the problem continues contact the vendor V One of the LEDs does not behave as expected 1 Make sure you understa...

Page 280: ...gin screen in the web configurator 1 Make sure you are using the correct IP address The default IP address is 192 168 1 1 If you changed the IP address use the new IP address If you changed the IP address and have forgotten it see the troubleshooting suggestions for I forgot the IP address for the ZyXEL Device 2 Check the hardware connections and make sure the LEDs are behaving as expected See the...

Page 281: ... to its factory defaults See Section 2 3 on page 41 25 3 Internet Access V I cannot access the Internet 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 4 on page 36 2 Make sure you entered your ISP account information correctly in the wizard These fields are case sensitive so make sure Caps Lock is not on 3 If you are trying ...

Page 282: ...it is enabled you might consider raising or lowering the priority for some applications 25 4 Phone Calls and VoIP V I cannot make telephone calls using the telephone that is connected to the ZyXEL Device 1 Check the telephone connections and telephone wire 2 Make sure you have the VoIP SIP Settings screen properly configured See Section 9 3 1 on page 134 The PHONE 1 or PHONE 2 LED should be on whe...

Page 283: ...r SIP account 1 Similarly every time you place a call through phone port 2 you are using your SIP account 2 To apply these configuration changes you need to configure the Analog Phone screen See Section 10 2 on page 144 Figure 193 Outgoing Calls Individual Configuration 25 5 2 Incoming Calls The following example shows the default behavior of your ZyXEL Device for incoming calls when two SIP accou...

Page 284: ...IP account 2 for incoming calls In this case every time you receive a call from your SIP account 1 the phone connected to phone port 1 rings Similarly every time you receive a call from your SIP account 2 the phone connected to phone port 2 rings To apply these configuration changes you need to configure the Analog Phone screen See Section 10 2 on page 144 Figure 195 Incoming Calls Individual Conf...

Page 285: ...285 PART VII Appendices and Index Product Specifications 287 IP Addresses and Subnetting 299 SIP Passthrough 321 Internal SPTGEN 323 Services 339 Legal Information 343 Customer Support 347 Index 351 ...

Page 286: ...286 ...

Page 287: ...Mbps Half Full Auto negotiation Auto crossover Ethernet port Ethernet Ports Four RJ 45 10 100Mbps Half Full Auto negotiation Auto crossover Ethernet ports Phone Ports Two FXS Foreign Exchange Station POTS ports Line Port P 2302HWUDL P1 only One FXO Foreign Exchange Office lifeline port USB Ports Two USB v2 0 ports for file sharing and print server setup File Systems Supported for File Sharing FAT ...

Page 288: ... Allow or deny access to your wired or wireless network based on the MAC addresses of the computers communicating with your network Any IP The Any IP feature allows a computer to access the Internet and the ZyXEL Device without changing the network settings such as IP address and subnet mask of the computer when the IP addresses of the computer and the ZyXEL Device are not in the same subnet Confi...

Page 289: ...711 PCM G 729 ADPCM Loop Start Signaling Support Modem and Fax Tone Detection and Pass Through DTMF Detection Point to Point Calling Direct IP to IP Calling Speed Dial Phonebook Lifeline Support P 2302HWUDL P1 only Support NAT Traversal RFC 3489 IETF Simple Traversal of UDP Through NAT STUN Caller ID Dialing Type Tone Pulse Auto detection Tip ring polarity reversal VoIP Trunking DECT Base Station ...

Page 290: ...d NAT SUA Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT SUA IPSec passthrough SIP ALG passthrough Static Routes 8 IP Table 131 Feature Specifications continued Table 132 ZyXEL Device Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AA 161A Input Power AC 120Volts 60Hz 26W max Output Power AC 16Volts 1 0A Power Consumption 15 Watt Max Safet...

Page 291: ... Standards ITS GS BS EN 60950 1 AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adapter Model AA 161AE Input Power AC 240Volts 50Hz 140mA Output Power AC 16Volts 1 0A Power Consumption 15 Watt Max Safety Standards DOFT AS NZS 60950 AS NZS 3112 1 2 Table 132 ZyXEL Device Power Adaptor Specifications continued ...

Page 292: ...Appendix A Product Specifications P 2302HWUDL P1 Series User s Guide 292 ...

Page 293: ...vice JavaScripts enabled by default Java permissions enabled by default Internet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary 25 6 1 Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an except...

Page 294: ...2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 197 Internet Options 3 Click Apply to save this setting 25 6 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Internet Options a...

Page 295: ... User s Guide 295 Figure 198 Internet Options 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed sites Figure 199 Pop up Blocker Settings ...

Page 296: ...or do not display properly in Internet Explorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 200 Internet Options 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure that Enable is selected the default 6...

Page 297: ...ettings Java Scripting 25 6 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java permissions make sure that a safety level is selected 5 Click OK to close the window Figure 202 Security Settings Java ...

Page 298: ...ns P 2302HWUDL P1 Series User s Guide 298 25 6 3 1 JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 make sure that Use Java 2 for applet under Java Sun is selected 3 Click OK to close the window Figure 203 Java Sun ...

Page 299: ...reet share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on the network the packets are delivered Structure An IP address is made up of...

Page 300: ...nding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits Subnet masks can be...

Page 301: ...llowed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a followed by the number of bits in the mask after the address For example 192 1 1 0 25 is equivalent to saying 192 1 1 0 with subnet mask 255 255 255 128 The following table shows some possible subnet ...

Page 302: ...ure shows the company network before subnetting Figure 205 Subnetting Example Before Subnetting You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 The following figure shows the ...

Page 303: ...192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits g...

Page 304: ...139 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 140 Subnet 4 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 1...

Page 305: ...ED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31 128 1 Table 143 16 bit Network Number Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 32766 2 255 255 192 0 18 ...

Page 306: ...t you entered You don t need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Internet Assigned Numb...

Page 307: ...omponents you need to install and use TCP IP on your computer Windows 3 1 requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network Windows 95 98 Me C...

Page 308: ...and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 In the Network window click Add 2 Select Protocol and then click Add 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need Client for Microsoft Networks 1 Click Add 2 Select Client and then click Add 3 Sel...

Page 309: ...amic select Obtain an IP address automatically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields Figure 208 Windows 95 98 Me TCP IP Properties IP Address 3 Click the DNS Configuration tab If you do not know your DNS information select Disable DNS If you know your DNS information select Enable DNS and type the informati...

Page 310: ... OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 In the Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet mask and default gateway ...

Page 311: ...1 Series User s Guide 311 Figure 210 Windows XP Start Menu 2 In the Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 211 Windows XP Control Panel 3 Right click Local Area Connection and then click Properties ...

Page 312: ...ral tab in Win XP and then click Properties Figure 213 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have a static IP address click Use the following IP Address and fill in the IP address Subnet mask and Default gateway fields Click Adv...

Page 313: ...lick Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a default metric the numbe...

Page 314: ...ndow the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know your DNS server IP address es click Use the following DNS server addresses and type them in the Preferred DNS server and Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them ...

Page 315: ...etwork Connections window Network and Dial up Connections in Windows 2000 NT 11 Restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 In the Command Prompt window type ipconfig and then press ENTER You can also open Network Connections right click a network connection click Status and then click the Support tab Macintosh OS X 1 Click ...

Page 316: ... select Using DHCP from the Configure list Figure 218 Macintosh OS X Network 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your gateway in the Router address box 5 Click Apply Now and close the window 6 Restart your computer if prompted Verifyi...

Page 317: ...n and release version Make sure you are logged in as the root administrator Using the K Desktop Environment KDE Follow the steps below to configure your computer IP address using the KDE 1 Click the Red Hat button located on the bottom left corner select System Setting and click Network Figure 219 Red Hat 9 0 KDE Network Configuration Devices 2 Double click on the profile of the network card you w...

Page 318: ...t IP Addresses and fill in the Address Subnet mask and Default Gateway Address fields 3 Click OK to save the changes and close the Ethernet Device General screen 4 If you know your DNS server IP address es click the DNS tab in the Network Configuration screen Enter the DNS server information in the fields provided Figure 221 Red Hat 9 0 KDE Network Configuration DNS 5 Click the Devices tab 6 Click...

Page 319: ...following figure shows an example Figure 223 Red Hat 9 0 Dynamic IP Address Setting in ifconfig eth0 If you have a static IP address enter static in the BOOTPROTO field Type IPADDR followed by the IP address in dotted decimal notation and type NETMASK followed by the subnet mask The following example shows an example where the static IP address is 192 168 1 10 and the subnet mask is 255 255 255 0 ...

Page 320: ...ng TCP IP Properties nameserver 172 23 5 1 nameserver 172 23 5 2 root localhost init d network restart Shutting down interface eth0 OK Shutting down loopback interface OK Setting network parameters OK Bringing up loopback interface OK Bringing up interface eth0 OK root localhost ifconfig eth0 Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet addr 172 23 19 129 Bcast 172 23 19 255 Mask 255 255 255 ...

Page 321: ...ing sessions The SIP UA sends registration packets to the SIP server periodically and keeps the session alive in the ZyXEL Device If the SIP client does not have this mechanism and makes no call during the ZyXEL Device SIP timeout default 60 minutes the ZyXEL Device SIP ALG drops any incoming calls after the timeout period You can use the ip alg siptimeout command to change the timeout value Audio...

Page 322: ...Appendix E SIP Passthrough P 2302HWUDL P1 Series User s Guide 322 ...

Page 323: ...evice You can use FTP to get the Internal SPTGEN file Then edit the file in a text editor and use FTP to upload it again to the same device or another one See the following sections for details The Configuration Text File Format All Internal SPTGEN text files conform to the following format field identification number field name parameter values allowed input where input is your input conforming t...

Page 324: ...ys if you enter a value other than 0 or 1 in the Input column of Field Identification Number 1000000 refer to Figure 228 on page 323 Figure 229 Invalid Parameter Entered Command Line Example The ZyXEL Device will display the following if you enter parameter s that are valid Figure 230 Valid Parameter Entered Command Line Example Internal SPTGEN FTP Download Example 1 Launch your FTP application 2 ...

Page 325: ...m your computer to the ZyXEL Device using the put command computer to the ZyXEL Device 4 Exit this FTP application Figure 232 Internal SPTGEN FTP Upload Example c ftp 192 168 1 1 220 PPP FTP version 1 0 ready at Sat Jan 1 03 22 12 2000 User 192 168 1 1 none 331 Enter PASS command Password 230 Logged in ftp bin 200 Type I OK ftp get rom t ftp bye c edit rom t edit the rom t text file by a text edit...

Page 326: ...000004 Route IP 0 No 1 Yes 1 10000006 Bridge 0 No 1 Yes 0 Table 146 Menu 3 Menu 3 1 General Ethernet Setup FIN FN PVA INPUT 30100001 Input Protocol filters Set 1 2 30100002 Input Protocol filters Set 2 256 30100003 Input Protocol filters Set 3 256 30100004 Input Protocol filters Set 4 256 30100005 Input device filters Set 1 256 30100006 Input device filters Set 2 256 30100007 Input device filters ...

Page 327: ...tion 0 None 1 Both 2 In Only 3 Out Only 0 30200011 Version 0 Rip 1 1 Rip 2B 2 Rip 2M 0 30200012 Multicast 0 IGMP v2 1 IGMP v1 2 None 2 30200013 IP Policies Set 1 1 12 256 30200014 IP Policies Set 2 1 12 256 30200015 IP Policies Set 3 1 12 256 30200016 IP Policies Set 4 1 12 256 Menu 3 2 1 IP Alias Setup FIN FN PVA INPUT 30201001 IP Alias 1 0 No 1 Yes 0 30201002 IP Address 0 0 0 0 30201003 IP Subne...

Page 328: ...ction 0 None 1 Both 2 In Only 3 Out Only 0 30201018 Version 0 Rip 1 1 Rip 2B 2 Rip 2M 0 30201019 IP Alias 2 Incoming protocol filters Set 1 256 30201020 IP Alias 2 Incoming protocol filters Set 2 256 30201021 IP Alias 2 Incoming protocol filters Set 3 256 30201022 IP Alias 2 Incoming protocol filters Set 4 256 30201023 IP Alias 2 Outgoing protocol filters Set 1 256 30201024 IP Alias 2 Outgoing pro...

Page 329: ...able 0 30500013 Wlan 4X Mode 0 Disable 1 Enable 0 MENU 3 5 1 WLAN MAC ADDRESS FILTER FIN FN PVA INPUT 30501001 Mac Filter Active 0 No 1 Yes 0 30501002 Filter Action 0 Allow 1 Deny 0 30501003 Address 1 00 00 00 00 00 00 30501004 Address 2 00 00 00 00 00 00 30501005 Address 3 00 00 00 00 00 00 Continued 30501034 Address 32 00 00 00 00 00 00 Table 146 Menu 3 Table 147 Menu 4 Internet Access Setup Men...

Page 330: ...0 40000016 ISP incoming protocol filter set 1 6 40000017 ISP incoming protocol filter set 2 256 40000018 ISP incoming protocol filter set 3 256 40000019 ISP incoming protocol filter set 4 256 40000020 ISP outgoing protocol filter set 1 256 40000021 ISP outgoing protocol filter set 2 256 40000022 ISP outgoing protocol filter set 3 256 40000023 ISP outgoing protocol filter set 4 256 40000024 ISP PPP...

Page 331: ...tatic Route set 1 Private 0 No 1 Yes 0 Menu 12 1 2 IP Static Route Setup FIN FN PVA INPUT 120108001 IP Static Route set 8 Name Str 120108002 IP Static Route set 8 Active 0 No 1 Yes 0 120108003 IP Static Route set 8 Destination IP address 0 0 0 0 120108004 IP Static Route set 8 Destination IP subnetmask 0 120108005 IP Static Route set 8 Gateway 0 0 0 0 120108006 IP Static Route set 8 Metric 0 12010...

Page 332: ...ocal IP address 0 0 0 0 150000022 SUA Server 6 Active 0 No 1 Yes 0 0 150000023 SUA Server 6 Protocol 0 All 6 TCP 17 U DP 0 150000024 SUA Server 6 Port Start 0 150000025 SUA Server 6 Port End 0 150000026 SUA Server 6 Local IP address 0 0 0 0 150000027 SUA Server 7 Active 0 No 1 Yes 0 150000028 SUA Server 7 Protocol 0 All 6 TCP 17 U DP 0 0 0 0 150000029 SUA Server 7 Port Start 0 150000030 SUA Server...

Page 333: ...0000054 SUA Server 12 Port Start 0 150000055 SUA Server 12 Port End 0 150000056 SUA Server 12 Local IP address 0 0 0 0 Table 149 Menu 15 SUA Server Setup continued Table 150 Menu 21 1 Filter Set 1 Menu 21 Filter set 1 FIN FN PVA INPUT 210100001 Filter Set 1 Name Str Menu 21 1 1 1 set 1 rule 1 FIN FN PVA INPUT 210101001 IP Filter Set 1 Rule 1 Type 2 TCP IP 2 210101002 IP Filter Set 1 Rule 1 Active ...

Page 334: ... Set 1 Rule 2 Dest Subnet Mask 0 210102006 IP Filter Set 1 Rule 2 Dest Port 138 210102007 IP Filter Set 1 Rule 2 Dest Port Comp 0 none 1 equal 2 not equal 3 less 4 greater 1 210102008 IP Filter Set 1 Rule 2 Src IP address 0 0 0 0 210102009 IP Filter Set 1 Rule 2 Src Subnet Mask 0 210102010 IP Filter Set 1 Rule 2 Src Port 0 210102011 IP Filter Set 1 Rule 2 Src Port Comp 0 none 1 equal 2 not equal 3...

Page 335: ...ilter Set 2 Rule 1 Src Port Comp 0 none 1 equal 2 not equal 3 less 4 g reater 0 210201013 IP Filter Set 2 Rule 1 Act Match 1 check next 2 forward 3 drop 3 210201014 IP Filter Set 2 Rule 1 Act Not Match 1 check next 2 forward 3 drop 1 Menu 21 1 2 2 Filter set 2 rule 2 FIN FN PVA INPUT 210202001 IP Filter Set 2 Rule 2 Type 0 none 2 TCP IP 2 210202002 IP Filter Set 2 Rule 2 Active 0 No 1 Yes 1 210202...

Page 336: ...230200001 Authentication Server Configured 0 No 1 Yes 1 230200002 Authentication Server Active 0 No 1 Yes 1 230200003 Authentication Server IP Address 192 168 1 32 230200004 Authentication Server Port 1822 230200005 Authentication Server Shared Secret 111111111111 111 111111111111 1111 230200006 Accounting Server Configured 0 No 1 Yes 1 230200007 Accounting Server Active 0 No 1 Yes 1 230200008 Acc...

Page 337: ...kets 0 TKIP 1 WEP 0 230400010 WPA Broadcast Multicast Key Update Timer 0 Table 152 Menu 23 System Menus continued Table 153 Menu 24 11 Remote Management Control Menu 24 11 Remote Management Control FIN FN PVA INPUT 241100001 TELNET Server Port 23 241100002 TELNET Server Access 0 all 1 none 2 Lan 3 Wan 0 241100003 TELNET Server Secured IP address 0 0 0 0 241100004 FTP Server Port 21 241100005 FTP S...

Page 338: ...sociated with the ZyXEL Device s command interpreter commands Table 154 Command Examples FIN FN PVA INPUT ci command for annex a wan adsl opencmd FIN FN PVA INPUT 990000001 ADSL OPMD 0 glite 1 t1 413 2 gdmt 3 multim ode 3 ci command for annex B wan adsl opencmd FIN FN PVA INPUT 990000001 ADSL OPMD 0 etsi 1 normal 2 gdmt 3 multimo de 3 ...

Page 339: ...in which this service is used Table 155 Examples of Services NAME PROTOCOL PORT S DESCRIPTION AH IPSEC_TUNNEL User Defined 51 The IPSEC AH Authentication Header tunneling protocol uses this service AIM TCP 5190 AOL s Internet Messenger service AUTH TCP 113 Authentication protocol used by some servers BGP TCP 179 Border Gateway Protocol BOOTP_CLIENT UDP 68 DHCP Client BOOTP_SERVER UDP 67 DHCP Serve...

Page 340: ...messenger service uses this protocol NetBIOS TCP UDP TCP UDP TCP UDP TCP UDP 137 138 139 445 The Network Basic Input Output System is used for communication between computers in a LAN NEW ICQ TCP 5190 An Internet chat program NEWS TCP 144 A protocol for news groups NFS UDP 2049 Network File System NFS is a client server distributed file service that provides transparent file sharing for network en...

Page 341: ...ve messages from one e mail server to another SMTPS TCP 465 This is a more secure version of SMTP that runs over SSL SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP UDP 162 Traps for use with the SNMP RFC 1215 SQL NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems including mainframes midrange systems UNIX systems and...

Page 342: ...et file transfer protocol similar to FTP but uses the UDP User Datagram Protocol rather than TCP Transmission Control Protocol VDOLIVE TCP UDP 7000 user defined A videoconferencing solution The UDP port number is specified in the application Table 155 Examples of Services continued NAME PROTOCOL PORT S DESCRIPTION ...

Page 343: ...t notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Certifications Federal Communications Commission FCC Interference Statement The device complies with Part 15 of FCC rules Operation is subject to the f...

Page 344: ...are limited to channels 1 through 11 To comply with FCC RF exposure compliance requirements a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons 注意依據低功率電波輻射性電機管理辦法第十二條經型式認證合格之低功率射頻電機非經許可公司商號或使用者均不得擅自變更頻率加大功率或變更原設計之特性及功能第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信經發現有干擾現象時應立即停用並改善至無干擾時方得繼續使用前項合法通信指依電信規定作業之無線電信低功率射頻電機須忍受合法通信或工業科學及醫療用電波輻射性...

Page 345: ...rking conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the se...

Page 346: ...Appendix H Legal Information P 2302HWUDL P1 Series User s Guide 346 ...

Page 347: ...3 578 2439 Web Site www zyxel com www europe zyxel com FTP Site ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL Communications Corp 6 Innovation Road II Science Park Hsinchu 300 Taiwan Costa Rica Support E mail soporte zyxel co cr Sales E mail sales zyxel co cr Telephone 506 2017878 Fax 506 2015098 Web Site www zyxel co cr FTP Site ftp zyxel co cr Regular Mail ZyXEL Costa Rica Plaza Roble Es...

Page 348: ...Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web Site www zyxel fr Regular Mail ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France Germany Support E mail support zyxel de Sales E mail sales zyxel de Telephone 49 2405 6909 0 Fax 49 2405 6909 99 Web Site www zyxel de Regular Mail ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germ...

Page 349: ...06 2001 U S A Norway Support E mail support zyxel no Sales E mail sales zyxel no Telephone 47 22 80 61 80 Fax 47 22 80 61 81 Web Site www zyxel no Regular Mail ZyXEL Communications A S Nils Hansens vei 13 0667 Oslo Norway Poland E mail info pl zyxel com Telephone 48 22 333 8250 Fax 48 22 333 8251 Web Site www pl zyxel com Regular Mail ZyXEL Communications ul Okrzei 1A 03 715 Warszawa Poland Russia...

Page 350: ... E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78 Fax 380 44 494 49 32 Web Site www ua zyxel com Regular Mail ZyXEL Ukraine 13 Pimonenko Str Kiev 04050 Ukraine United Kingdom Support E mail support zyxel co uk Sales E mail sales zyxel co uk Telephone 44 1344 303044 08707 555779 UK only Fax 44 1344 303034 Web Site www zyxel co uk FTP Site ftp zyxel co uk Regula...

Page 351: ...bandwidth management 197 and LAN 203 and WAN 203 and WLAN 204 application based 198 bandwidth classes 197 borrowing 201 budgeting 197 classes 205 fairness based 200 general 62 monitor 207 over allotment 202 overview 197 priority 64 priority based 199 reserving 199 services 63 subnet based 198 unused unbudgeted 200 web configurator 203 wizard setup 60 base station DECT 147 blinking LEDs 37 blocking...

Page 352: ...96 253 255 IP address pool 111 reserving IP addresses 111 server 110 setup 110 DHCP Dynamic Host Configuration Protocol 106 DHCP clients 96 112 253 289 DHCP server 106 DHCP setup 106 Differentiated Services see DiffServ 133 DiffServ 133 289 marking rule 134 DiffServ Differentiated Services 133 DiffServ Code Points DSCPs 133 Digital Enhanced Cordless Telecommunications See DECT 34 dimensions 287 di...

Page 353: ...restrictions 209 FXO Foreign Exchange Office 287 FXS Foreign Exchange Station 287 G G 168 141 G 168 Echo Cancellation 289 G 711 131 G 711 waveform codec 289 G 729 132 G 729 AbS hybrid waveform codec 289 GAP 34 GAP Generic Access Profile 147 gateway IP address 53 gateway and static route 194 Generic Access Profile see GAP 147 H heartbeat packets and WAN 97 hide SSID 83 HTTP 273 HTTP Hypertext Trans...

Page 354: ...nd multicasting 107 and NAT 105 108 and NetBIOS 115 and remote management 209 and RIP 107 and routing 109 and static DHCP 111 and USB printer 229 clients 112 firewall 180 IP address 105 IP alias 113 overview 105 subnet mask 105 subnets 108 web configurator 110 LAN IP address default 39 LEDs 36 log messages 265 log settings 262 263 logging out 41 login 40 logs 261 logs event 261 logs traffic 261 M ...

Page 355: ... 40 287 changing 40 PCM Pulse Code Modulation 131 peer call authentication VoIP trunking 162 Peer IP 167 Peer Port 167 peer to peer calls 33 157 Personal Identification Number see PIN 148 PHB Per Hop Behavior 134 phone and VoIP 141 phone book 155 speed dial 157 phone ports 287 PIN Personal Identification Number 148 PIN and DECT phone 148 ping responses 215 Point to Point Protocol over Ethernet see...

Page 356: ... Protocol 107 Roadrunner 98 router features 35 routing 107 109 193 Routing Information Protocol see RIP 107 RTP Real Time Transport 130 S safety warnings 6 scheduler and bandwidth management 198 security alert settings 261 data screening 179 DECT phone 148 firewall 179 guidelines 180 remote management 215 service mode and analog telephone 142 Service Set IDentity see SSID 79 Session Initiation Pro...

Page 357: ...strictions 209 three way conference 143 144 time resetting 258 ToS 133 289 and VoIP 134 ToS Type of Service 133 Touch Tone 132 trademarks 343 traffic logs 261 traffic redirect 103 triangle route solutions 182 trigger ports 118 trigger ports example 118 trigger ports process 118 trigger ports setup 122 trunking VoIP 161 Type Of Service see ToS 133 types of encapsulation 98 types of models 33 U Unif...

Page 358: ...tings 164 web configurator 164 W WAN 95 advanced setup 102 and backup gateway 104 and cost of transmission 101 and DNS 255 and encapsulation 98 and firewall 103 and heartbeat packets 97 and IGMP 103 and ISP 95 97 and MAC address 96 and metric 101 and multicasting 103 and NetBIOS 103 and PPPoE 95 99 and remote management 209 and traffic redirect 103 firewall 180 idle timeout 100 IP address 52 95 na...

Page 359: ...s 93 overview 79 recommendation 81 security 80 selecting security 83 SSID 80 terms explained 82 web configurator 82 WLAN security and encryption 81 and IEEE 802 1x 80 and SSID 80 MAC address filter 80 91 OTIST 82 88 RADIUS 80 86 recommendation 81 types of 81 user authentication 80 workgroup and file sharing 244 248 WPA 87 WPA2 WPA compatible 81 87 WPA PSK configuration 85 ...

Reviews:

No comments

Related manuals for Network Device P-2302

Brand: Icom Pages: 2

Brand: Icom Pages: 326

Sentrius RG1 Series

Brand: Laird Pages: 27

Brand: QTS Pages: 62

Brand: 3onedata Pages: 3

iO-GridM GFGW-RM02N

Brand: DAUDIN Pages: 28

Brand: XiNCOM Pages: 56

MultiVOIP MVPFX2-8

Brand: Multitech Pages: 8

P-660HN-Fx series

Brand: ZyXEL Communications Pages: 12

Brand: David Clark Pages: 11

P-661HW-D Series

Brand: ZyXEL Communications Pages: 146

Brand: Vonamic Pages: 32

Brand: Lauda Pages: 24

Brand: Rosonix Technology Pages: 16

Touchstone DG2460

Brand: Arris Pages: 38

Brand: RTA Pages: 58

Brand: Raisecom Pages: 16

Brand: Viola Systems Pages: 37

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands