manualshive.com logo in svg

ZyXEL Communications P-2812HNU-51c, User Manual

Share
Download
ZyXEL Communications P-2812HNU-51c User Manual Download Page 150

Chapter 7 Wireless LAN

P-2812HNU-51c User’s Guide

150

characters

2

; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC 

address for each device in the wireless network, see the device’s User’s Guide or 
other documentation.

You can use the MAC address filter to tell the P-2812HNU-51c which devices are 
allowed or not allowed to use the wireless network. If a device is allowed to use 
the wireless network, it still has to have the correct information (SSID, channel, 
and security). If a device is not allowed to use the wireless network, it does not 
matter if it has the correct information.

This type of security does not protect the information that is sent in the wireless 
network. Furthermore, there are ways for unauthorized wireless devices to get the 
MAC address of an authorized device. Then, they can use that MAC address to use 
the wireless network.

7.10.3.3  User Authentication

Authentication is the process of verifying whether a wireless device is allowed to 
use the wireless network. You can make every user log in to the wireless network 
before they can use it. However, every device in the wireless network has to 
support IEEE 802.1x to do this.

For wireless networks, you can store the user names and passwords for each user 
in a RADIUS server. This is a server used in businesses more than in homes. If you 
do not have a RADIUS server, you cannot set up user names and passwords for 
your users.

Unauthorized wireless devices can still see the information that is sent in the 
wireless network, even if they cannot use the wireless network. Furthermore, 
there are ways for unauthorized wireless users to get a valid user name and 
password. Then, they can use that user name and password to use the wireless 
network.

7.10.3.4  Encryption

Wireless networks can use encryption to protect the information that is sent in the 
wireless network. Encryption is like a secret code. If you do not know the secret 
code, you cannot understand the message.

1.

Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. 
These kinds of wireless devices might not have MAC addresses.

2.

Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.

Summary of Contents for P-2812HNU-51c

Page 1: ... IAD with 802 11n Wireless Copyright 2010 ZyXEL Communications Corporation Firmware Version 1 0 Edition 1 02 2010 Default Login Details IP Address https 192 168 1 1 User Name Admin account admin User account user Password Admin account 1234 User account user ...

Page 2: ......

Page 3: ...to help you get up and running right away It contains information on setting up your network and configuring for Internet access Support Disc Refer to the included CD for support documents Documentation Feedback Send your comments questions or suggestions to techwriters zyxel com tw Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hs...

Page 4: ...uestions about ZyXEL products Forum This contains discussions on ZyXEL products Learn from others who use ZyXEL products and share your experiences as well Customer Support Should problems arise that cannot be solved by the methods listed above you should contact your vendor If you cannot contact your vendor then contact a ZyXEL office for the region in which you bought the device See http www zyx...

Page 5: ...font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket within a screen name denotes a mouse click For example Maintenance Log Log Setting means you first...

Page 6: ...de 6 Icons Used in Figures Figures in this User s Guide may use the following generic icons The P 2812HNU 51c icon is not an exact representation of your device P 2812HNU 51c Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ...

Page 7: ...in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution If the power adaptor or cord is damaged remove it from the device and the power source Do NOT attempt to repair the power adaptor or cord Contact your local ...

Page 8: ...Safety Warnings P 2812HNU 51c User s Guide 8 ...

Page 9: ...9 LAN Setup 119 Wireless LAN 127 Network Address Translation NAT 159 Voice 171 File Sharing 205 Firewall 211 Certificate 217 Static Route 229 Policy Forwarding 233 RIP 237 Quality of Service QoS 239 Dynamic DNS Setup 253 Remote Management 255 Universal Plug and Play UPnP 263 Parental Control 275 Interface Group 279 System Settings 285 Logs 289 Tools 293 Diagnostic 301 Troubleshooting 307 Product S...

Page 10: ...Contents Overview P 2812HNU 51c User s Guide 10 ...

Page 11: ... the P 2812HNU 51c 22 1 4 1 Internet Access 22 1 4 2 VoIP Features 24 1 4 3 P 2812HNU 51c s USB Support 24 1 5 LEDs Lights 25 1 6 The RESET Button 27 1 6 1 Using the Reset Button 27 1 7 The WPS Button 28 1 7 1 Turn the Wireless LAN Off or On 28 1 7 2 Activate WPS 28 Chapter 2 Tutorials 29 2 1 Overview 29 2 2 How to Set up a Wireless Network 29 2 2 1 Example Parameters 29 2 2 2 Configuring the AP 3...

Page 12: ...igurator Main Screen 68 3 2 1 Navigation Panel 69 3 2 2 Main Window 71 3 2 3 Status Bar 72 Part II Technical Reference 73 Chapter 4 Status Screens 75 4 1 Overview 75 4 2 Status Screen 76 4 2 1 WAN Service Statistics 80 4 2 2 Route Info 81 4 3 VoIP Status 83 4 3 1 WLAN Station List 85 4 3 2 LAN Statistics 86 4 3 3 Client List 87 Chapter 5 WAN Setup 89 5 1 Overview 89 5 1 1 What You Can Do in this C...

Page 13: ...ilter 138 7 4 6 Adding a New MAC Filtering Rule 139 7 5 The More AP Screen 140 7 5 1 More AP Edit 141 7 6 The WPS Screen 141 7 7 The WPS Station Screen 143 7 8 The WDS Screen 144 7 9 The Advanced Setup Screen 146 7 10 Technical Reference 147 7 10 1 Wireless Network Overview 148 7 10 2 Additional Wireless Terms 149 7 10 3 Wireless Security Overview 149 7 10 4 WiFi Protected Setup 151 Chapter 8 Netw...

Page 14: ...reen 187 9 8 Incoming Calls Screen 188 9 9 Technical Reference 188 9 9 1 VoIP 189 9 9 2 SIP 189 9 9 3 Quality of Service QoS 197 9 9 4 Phone Services Overview 199 Chapter 10 File Sharing 205 10 1 Overview 205 10 1 1 What You Can Do in this chapter 205 10 1 2 What You Need to Know About File Sharing 206 10 1 3 Before You Begin 207 10 2 The Server Settings Screen 208 10 2 1 Example of Accessing Your...

Page 15: ...r 229 13 2 The Static Route Screen 230 13 2 1 Static Route Edit 231 Chapter 14 Policy Forwarding 233 14 1 Overview 233 14 1 1 What You Can Do in this Chapter 233 14 2 The Static Route Screen 233 14 2 1 Policy Forwarding Setup 234 Chapter 15 RIP 237 15 1 Overview 237 15 1 1 What You Can Do in this Chapter 237 15 2 The RIP Screen 237 Chapter 16 Quality of Service QoS 239 16 1 Overview 239 16 1 1 Wha...

Page 16: ...62 Chapter 19 Universal Plug and Play UPnP 263 19 1 Overview 263 19 1 1 What You Can Do in this Chapter 263 19 2 What You Need to Know 263 19 3 The UPnP Screen 264 19 4 Installing UPnP in Windows Example 265 19 5 Using UPnP in Windows XP Example 268 Chapter 20 Parental Control 275 20 1 Overview 275 20 1 1 What You Can Do in this Chapter 275 20 2 The Time Restriction Screen 275 20 2 1 Adding a Sche...

Page 17: ...293 24 2 The Firmware Screen 294 24 3 The Configuration Screen 296 24 4 The Restart Screen 298 Chapter 25 Diagnostic 301 25 1 Overview 301 25 1 1 What You Can Do in this Chapter 301 25 2 What You Need to Know 301 25 3 The General Diagnostic Screen 302 25 4 The 802 1ag Screen 303 25 5 The OAM Ping Test Screen 305 Chapter 26 Troubleshooting 307 26 1 Power Hardware Connections and LEDs 307 26 2 P 281...

Page 18: ...ting 321 Appendix B Setting Up Your Computer s IP Address 337 Appendix C Pop up Windows JavaScripts and Java Permissions 367 Appendix D IP Addresses and Subnetting 377 Appendix E Wireless LANs 389 Appendix F Common Services 405 Appendix G Open Software Announcements 409 Appendix H Legal Information 423 Index 427 ...

Page 19: ...19 PART I User s Guide ...

Page 20: ...20 ...

Page 21: ...raffic and or to particular computers Please refer to the following description of the product name format H denotes an integrated 4 port hub switch N denotes IEEE 802 11n wireless functionality There is an embedded mini PCI module for IEEE 802 11b g n wireless LAN connectivity U denotes a USB port used to share files via a USB memory stick or a USB hard drive The P 2812HNU 51c can also function a...

Page 22: ...e or even crashes If you forget your password you will have to reset the P 2812HNU 51c to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the P 2812HNU 51c You could simply restore your last configuration 1 4 Applications for the P 2812HNU 51c Here are some example uses for which the P 2812HNU 51c is well suited 1 4 1 Internet ...

Page 23: ...ng on the P 2812HNU 51c for secure Internet access When the IP filter is on all incoming traffic from the Internet to your network is blocked by default unless it is initiated from your network This means that probes from the outside to your network are not allowed but you can safely browse the Internet and download files ADSL VDSL LAN PPPoE IPoE Bridging WAN ADSL IPoA PPPoA WAN Ethernet LAN PPPoE...

Page 24: ...P 2812HNU 51c s VoIP Application Calls via a VoIP service provider A The P 2812HNU 51c sends your call to a VoIP service provider s SIP server which forwards your calls to either VoIP or PSTN phones 1 4 3 P 2812HNU 51c s USB Support Use the built in USB 2 0 ports to share files via a USB memory stick or a USB hard drive A You can connect one USB hard drive to the P 2812HNU 51c at a time Figure 3 U...

Page 25: ...Chapter 1 Introducing the P 2812HNU 51c P 2812HNU 51c User s Guide 25 1 5 LEDs Lights The following graphic displays the labels of the LEDs Figure 4 LEDs on the Device ...

Page 26: ... is a voice message in the corresponding SIP account Off The phone port does not have a SIP account registered USB Green On The P 2812HNU 51c recognizes a USB connection Blinking The P 2812HNU 51c is sending receiving data to from the USB device connected to it Off The P 2812HNU 51c does not detect a USB connection WAN Green On The P 2812HNU 51c has an Ethernet connection with a device on the WAN ...

Page 27: ...etwork is activated and is operating in IEEE 802 11b g mode Blinking The P 2812HNU 51c is communicating with other wireless clients Orange Blinking The P 2812HNU 51c is setting up a WPS connection Off The wireless network is not activated DSL Green On The ADSL line is up Blinking The P 2812HNU 51c is initializing the ADSL line Orange On The VDSL line is up Blinking The P 2812HNU 51c is initializin...

Page 28: ...WPS button for one second and release it The WLAN WPS LED should change from on to off or vice versa 1 7 2 Activate WPS 1 Make sure the POWER LED is on not blinking 2 Press the WPS button for more than five seconds and release it Press the WPS button on another WPS enabled device within range of the P 2812HNU 51c The WLAN WPS LED should flash while the P 2812HNU 51c sets up a WPS connection with t...

Page 29: ...technical reference in this User s Guide 2 2 How to Set up a Wireless Network This tutorial gives you examples of how to set up an access point and wireless client for wireless communication using the following parameters The wireless clients can access the Internet through an AP wirelessly 2 2 1 Example Parameters An access point AP or wireless router is referred to as AP and a computer with a wi...

Page 30: ...LAN screen in the AP s web configurator Figure 5 AP Wireless LAN 2 Make sure the Active Wireless LAN check box is selected 3 Enter SSID_Example3 as the SSID and select Auto to have the P 2812HNU 51c automatically determine a channel which is not used by another AP 4 Set security mode to WPA PSK and enter ThisismyWPA PSKpre sharedkey in the Pre Shared Key field Click Apply ...

Page 31: ... select 802 11b g n Mixed in the 802 11 Mode field Click Apply Figure 6 AP Wireless LAN Advanced Setup 6 Open the Status screen Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status Figure 7 AP Status ...

Page 32: ...eless LAN The following sections show you how to join a wireless network using the ZyXEL utility as in the following diagram The wireless client is labeled C and the access point is labeled AP There are three ways to connect the client to an access point Configure nothing and leave the wireless client to automatically scan for and connect to any available network that has no wireless security conf...

Page 33: ...aredkey After you install the ZyXEL utility and then insert the wireless client follow the steps below to connect to a network using the Site Survey screen 1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown next Figure 9 ZyXEL Utility Site Survey 2 The wireless client automatically searches for available wireless networks Click Scan if you want to search again If no en...

Page 34: ...ed key and leave the encryption type at the default setting Use the Next button to move on to the next screen You can use the Back button at any time to return to the previous screen or the Exit button to return to the Site Survey screen Figure 10 ZyXEL Utility Security Settings 4 The Confirm Save window appears Check your settings and click Save to continue Figure 11 ZyXEL Utility Confirm Save ...

Page 35: ...f you are able to access the web site your wireless connection is successfully configured If you cannot access the web site try changing the encryption type in the Security Settings screen check the Troubleshooting section of this User s Guide or contact your network administrator 2 2 3 2 Creating and Using a Profile A profile lets you automatically connect to the same wireless network every time ...

Page 36: ...ient automatically searches for available wireless networks which are displayed in the Scan Info box Click on Scan if you want to search again You can also configure your profile for a wireless network that is not in the list Figure 14 ZyXEL Utility Add New Profile 3 Give the profile a descriptive name of up to 32 printable ASCII characters Select Infrastructure and either manually enter or select...

Page 37: ...SK Figure 15 ZyXEL Utility Profile Security 5 This screen varies depending on the encryption method you selected in the previous screen Enter the pre shared key and leave the encryption type at the default setting Figure 16 ZyXEL Utility Profile Encryption 6 In the next screen leave both boxes checked Figure 17 Profile Wireless Protocol Settings ...

Page 38: ... the ZyXEL utility returns to the Link Info screen while it connects to the AP using your settings When the wireless link is established the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection 10 Open your Internet browser enter http www zyxel com or the URL of any other web site in the address bar and press ENTER If you are able to ...

Page 39: ... as e mail or FTP come from LAN 2 or LAN 3 and are forwarded out through PVC 2 0 34 The maximum upstream transmission speed of your ADSL port is 1 Mbps You want to give the real time traffic fixed bandwidth 400 Kbps and higher priority over the general data transmission which shares the bandwidth 600 Kbps Note To apply different QoS priorities to different applications over a PVC use the Advanced ...

Page 40: ...oup using the Network LAN screen See Figure 2 3 3 on page 53 2 3 1 Configuring PVCs Follows the steps below to set up two PVCs on the P 2812HNU 51c Note Make sure you set the DSL WAN switch on the back of the P 2812HNU 51c to the DSL side 1 Click Network WAN Layer 2 Interface 2 Select ATM from the Interface drop down list and click Add Table 3 Multiple PVC Settings PVC LAYER 2 INTERFACE WAN SERVIC...

Page 41: ... by 424 Click Apply Save to save the changes and go back to the Layer 2 Interface screen 4 Click Add to configure another PVC 5 Enter the VPI and VCI values 0 and 34 in this example for PVC 2 Select Non Realtime VBR in the Service Category field Set the Peak Cell Rate as 1415 divide the bandwidth 600000 bps by 424 and set both the Sustainable Cell Rate and Maximum Burst Size as 1414 which is less ...

Page 42: ...Chapter 2 Tutorials P 2812HNU 51c User s Guide 42 6 Click Apply Save to save the changes and go back to the Layer 2 Interface screen ...

Page 43: ...3 2 3 1 1 Internet Connection Settings for PVC 1 1 Click Network WAN Internet Connection to configure WAN connection settings for PVC 1 Click Add 2 Select PVC 1 atm1 0_0_33 as the layer 2 interface Click Next 3 Select PPP over Ethernet and click Next ...

Page 44: ...or example and service name isp net for example for the PPP connection Click Next 5 Remove the existing interfaces in the Selected Default Gateway Interfaces list Select and move a WAN interface ppp0 in this example to the Selected Default Gateway Interfaces list to use that interface as the default gateway Click Next ...

Page 45: ...n the Selected DNS Server Interfaces list Select and move a WAN interface ppp0 in this example to the Selected DNS Server Interfaces list to use that interface as the system DNS server Click Next 7 The summary screen displays Click Apply Save to save your changes and go back to the Internet Connection screen ...

Page 46: ...6 2 3 1 2 Internet Connection Settings for PVC 2 1 Click Add in the WAN Internet Connection screen to configure WAN connection settings for PVC 2 2 Select PVC 2 atm2 0_0_34 as the layer 2 interface Click Next 3 Select IP over Ethernet and click Next ...

Page 47: ...Chapter 2 Tutorials P 2812HNU 51c User s Guide 47 4 Select Obtain an IP address automatically and click Next 5 Select Enable NAT and click Next ...

Page 48: ... this example to the Selected Default Gateway Interfaces list to use that interface as the default gateway Click Next 7 Select the first option Remove the existing interfaces in the Selected DNS Server Interfaces list Select and move a WAN interface atm2 in this example to the Selected DNS Server Interfaces list to use that interface as the system DNS server Click Next ...

Page 49: ...e to save your changes and go back to the Internet Connection screen 9 The Internet Connection screen should look like the following 2 3 2 Setting Interface Groups This part shows examples of creating multiple networks groups with the WAN services that you have configured in the previous section ...

Page 50: ... P 2812HNU 51c after you apply the changes Note You can also use policy forwarding to map traffic from a LAN port to a specific PVC but you need to enter the source IP address port number and or MAC address of each packet that comes from the LAN port See Chapter 14 on page 233 for more information 1 Click Advanced Setup Interface Group to open the following screen Click Add to create a new interfa...

Page 51: ...the LAN interface Select pppoe_0_0_33 ppp0 from the WAN Interface list Select LAN1 from the Available LAN Interfaces list and click to add it to the Grouped LAN Interfaces Click Apply to finish the settings and go back to the Interface Group screen 3 GR1 has been added successfully to the interface group list Click Add to create another interface group GR2 ...

Page 52: ...atm2 PVC 2 as the WAN interface with LAN2 and LAN3 as the LAN interfaces Select ipoe_0_0_34 atm2 from the WAN Interface list Select LAN2 and LAN3 from the Available LAN Interfaces list and click to add them to the Grouped LAN Interfaces Click Apply to finish the settings and go back to the Interface Group screen ...

Page 53: ... 53 5 GR2 has been added successfully to the interface group list The screen should look like the following 2 3 3 Configuring Interface Group IP Follow the steps below to configure the P 2812HNU 51c s LAN IP address and DHCP settings for each group ...

Page 54: ...LAN Select GR1 from the GroupName drop down list The IP Address 192 168 2 1 and IP Subnet Mask 255 255 255 0 are obtained automatically Select Active DHCP and DHCP Server to have the ZyXEL Device act as the DHCP server for the network Click Apply to save your changes ...

Page 55: ... if the connection groups are successfully configured you can do the following connect your computer to LAN1 of the P 2812HNU 51c After a few seconds the IP address of your computer should be renewed to 192 168 2 x automatically If you can access Internet by using this DSL connection GR1 is successfully configured To test GR2 connect your computer to LAN2 or LAN3 of the P 2812HNU 51c After a few s...

Page 56: ...affic from management traffic The DSL connection for remote management has the highest priority 2 4 1 Configuring Multiple WAN Connections Follow the steps below to configure two VDSL connections 1 Make sure you set the DSL WAN switch on the back of the P 2812HNU 51c to the DSL side 2 By default there is a PTM layer 2 interface in VLAN MUX mode configured already on the P 2812HNU 51c Table 5 Multi...

Page 57: ...Chapter 2 Tutorials P 2812HNU 51c User s Guide 57 DSL Connection for Internet Access 1 Go to the WAN Internet Connection screen Click Add 2 Select ptm0 0_0_1 as the layer 2 interface Click Next ...

Page 58: ...rnet enter a descriptive service name Internet in this example and set the priority level to 2 and VLAN ID to 200 Click Next 4 Enter the user name user isp net for example password qwert12345 for example and service name isp net for example for the PPP connection Click Next ...

Page 59: ... this example to the Selected Default Gateway Interfaces list to use that interface as the default gateway Click Next 6 Select the first option Remove the existing interfaces in the Selected DNS Server Interfaces list Select and move a WAN interface ppp0 200 in this example to the Selected DNS Server Interfaces list to use that interface as the system DNS server Click Next ...

Page 60: ...y screen displays The VLAN ID is appended to the service name you specified automatically Click Apply Save to save your changes and go back to the Internet Connection screen DSL Connection for Remote Management 1 Go to the WAN Internet Connection screen Click Add ...

Page 61: ...HNU 51c User s Guide 61 2 Select ptm0 0_0_1 as the layer 2 interface Click Next 3 Select IP over Ethernet enter a descriptive service name RemoteMgmt in this example and set the priority level to 7 and VLAN ID to 300 Click Next ...

Page 62: ...Chapter 2 Tutorials P 2812HNU 51c User s Guide 62 4 Select Obtain an IP address automatically and click Next 5 Make sure Enable NAT is not selected and click Next ...

Page 63: ...he Available Routed WAN Interfaces list to not have the clients use this interface as the default gateway Click Next 7 Select the first option Keep the WAN interface ptm0 300 in this example in the Available WAN Interfaces list to not have the clients use this interface as the system DNS server Click Next ...

Page 64: ... 8 The summary screen displays Click Apply Save to save your changes and go back to the Internet Connection screen The VLAN ID is appended to the service name you specified automatically 9 The Internet Connection screen should look like the following ...

Page 65: ...is example Your DSL interface status should also be Up and display the transmission rates 2 Click the WAN Service Statistics link under More Status in the Status screen 3 The WAN Service Ststistics screen displays Check if any packets are transmitted or received through the two WAN connections you just configured 2 4 2 Configuring Remote Management Follow the steps below to not allow access to the...

Page 66: ... Apply 2 4 3 Testing the Connection After you finish all the settings in this tutorial you would not be able to access the web configurator from the LAN anymore Check if you can use the WAN IP address for the RemoteMgmt WAN connection to access the P 2812HNU 51c You should also be able to access the Internet using the computer which is connected to the P 2812HNU 51c s LAN port ...

Page 67: ...n order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default See Appendix C on page 367 if you need to make sure these functions are allowed in Internet Explorer 3 1 1 Accessing the Web Configurator 1 Make sure your P 2812...

Page 68: ...he default user name user and user password user You cannot configure the VoIP and TR 069 settings with the user account The password displays in non readable characters If you have changed the password enter your password and click OK Click Cancel to revert to the default password in the password field Figure 20 Password Screen 3 2 Web Configurator Main Screen Figure 21 Main Screen A B C D ...

Page 69: ...IP DHCP and IP alias settings Wireless LAN General Use this screen to configure the wireless LAN settings WLAN authentication security settings and MAC filtering rules More AP Use this screen to configure multiple BSSs on the P 2812HNU 51c WPS Use this screen to enable WPS Wi Fi Protected Setup and view the WPS status WPS Station Use this screen to use WPS to set up your wireless network WDS Use t...

Page 70: ...n Use this screen to enable file sharing via the P 2812HNU 51c Security Firewall Incoming This screen shows a summary of the IP filtering rules and allows you to add or remove an incoming IP filtering rule that allows incoming traffic from the WAN Certificate Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests Trusted CA Use ...

Page 71: ...ilter Use this screen to prevent users of your netowrk from viewing inappropriate web content Interface Group Use this screen to map a port to a PVC or bridge group Maintenance System General Use this screen to configure your device s name domain name management inactivity timeout and password Time Setting Use this screen to change your P 2812HNU 51c s time and date Logs View Log Use this screen t...

Page 72: ...Chapter 3 Introducing the Web Configurator P 2812HNU 51c User s Guide 72 3 2 3 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been updated ...

Page 73: ...73 PART II Technical Reference ...

Page 74: ...74 ...

Page 75: ...R 4 Status Screens 4 1 Overview Use the Status screens to look at the current status of the device system resources and interfaces LAN WAN and WLAN The Status screen also provides detailed information from DHCP and statistics from traffic ...

Page 76: ...val Enter how often you want the P 2812HNU 51c to update this screen Apply Click this to update this screen immediately Device Information User Name This field displays the P 2812HNU 51c system name It is used for identification Click this to go to the screen where you can change it Model Number This is the model name of your device MAC Address This is the MAC Media Access Control or Ethernet addr...

Page 77: ...the P 2812HNU 51c is providing to the LAN Choices are Server The P 2812HNU 51c is a DHCP server in the LAN It assigns IP addresses to other computers in the LAN Relay The P 2812HNU 51c acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients None The P 2812HNU 51c is not providing any DHCP services to the LAN Click this to go to the screen wh...

Page 78: ...ore If you want some applications to have more throughput you should turn off other applications for example using QoS see Chapter 16 on page 239 Memory Usage This field displays what percentage of the P 2812HNU 51c s memory is currently used Usually this percentage should not increase much If memory usage does get close to 100 the P 2812HNU 51c is probably becoming unstable and you should restart...

Page 79: ...nt s registration in the SIP server This does not cancel your SIP account but it deletes the mapping between your SIP identity and your IP address or domain name If the SIP account is not registered with the SIP server the Account Status field displays Not Registered Click Register to have the P 2812HNU 51c attempt to register the SIP account with the SIP server The button is grayed out if the SIP...

Page 80: ...rt The pppx name where x starts from 0 and is the index number of PPP connection on the P 2812HNU 51c indicates a PPP connection via any one of the WAN interface eth4 indicates the Ethernet WAN interface the physical Ethernet WAN port The number after the dot represents the VLAN ID number assigned to traffic sent through this connection The number after the underscore _ represents the index number...

Page 81: ... Transmitted Bytes This indicates the number of bytes transmitted on this interface Pkts This indicates the number of transmitted packets on this interface Errs This indicates the number of frames with errors transmitted on this interface Drops This indicates the number of outgoing packets dropped on this interface Refresh Interval Enter the time interval for refreshing statistics in this field Se...

Page 82: ...mission by choosing a path with the lowest cost The smaller the number the lower the cost Service This indicates the name of the service used to forward the route Interface This indicates the name of the interface through which the route is forwarded br0 indicates the LAN interface ptm0 indicates the VDSL WAN interface using IPoE or in bridge mode atmx where x starts from 0 and is the index number...

Page 83: ...he last time the P 2812HNU 51c tried to register the SIP account with the SIP server the attempt failed The P 2812HNU 51c automatically tries to register the SIP account when you turn on the P 2812HNU 51c or when you activate it Inactive The SIP account is not active You can activate it in VoIP SIP SIP Account Last Registration This field displays the last time you successfully registered the SIP ...

Page 84: ...ss DISC The callee s line is busy the callee hung up or your phone was left off the hook Codec This field displays what voice codec is being used for a current VoIP call through a phone port Peer Number This field displays the SIP number of the party that is currently engaged in a VoIP call through a phone port Phone Mapping Status Phone This field displays each phone port in the P 2812HNU 51c Out...

Page 85: ...tatus WLAN Station List LABEL DESCRIPTION MAC This field shows the MAC Media Access Control address of an associated wireless station SSID This field shows the SSID to which the wireless station is connected Interface This field shows the wireless interface to which the wireless station is connected Refresh Interval Enter the time interval for refreshing statistics in this field Set Interval Click...

Page 86: ...Errs This indicates the number of frames with errors received on this interface Drops This indicates the number of received packets dropped on this interface Transmitted Bytes This indicates the number of bytes transmitted on this interface Pkts This indicates the number of transmitted packets on this interface Errs This indicates the number of frames with errors transmitted on this interface Drop...

Page 87: ...ient List to open the following screen The read only DHCP table shows current DHCP client information including IP Address Host Name and MAC Address of all network clients using the P 2812HNU 51c s DHCP server Figure 28 Status Client List The following table describes the labels in this screen Table 13 Status Client List LABEL DESCRIPTION Host Name This indicates the computer host name MAC Address...

Page 88: ...Chapter 4 Status Screens P 2812HNU 51c User s Guide 88 ...

Page 89: ... as a LAN Local Area Network and other networks so that a computer in one location can communicate with computers in other locations Figure 29 LAN and WAN See Section 5 6 on page 110 for advanced technical information on WAN 5 1 1 What You Can Do in this Chapter The Layer 2 Interface screen lets you view remove or add a layer 2 WAN interface Section 5 4 on page 91 The Internet Connection screen le...

Page 90: ...way IPoE WAN IP address NAT DNS server and default gateway Bridging N A PPPoA PPP user name and password WAN IP address DNS server and default gateway IPoA WAN IP address NAT DNS server and default gateway PTM Default Mode VLAN MUX Mode MSC Mode PPPoE PPP user name and password WAN IP address DNS server and default gateway IPoE WAN IP address NAT DNS server and default gateway Bridging N A Etherne...

Page 91: ...d ATM Asynchronous Transfer Mode ATM is is a LAN and WAN networking technology that provides high speed data transfer ATM uses fixed size packets of information called cells With ATM a high QoS Quality of Service can be guaranteed ATM uses a connection oriented model and establishes a virtual circuit VC between two endpoints before the actual data exchange begins PTM Packet Transfer Mode PTM is pa...

Page 92: ...hapter 5 WAN Setup P 2812HNU 51c User s Guide 92 Note The ATM PTM and Ethernet layer 2 interfaces cannot work at the same time Figure 30 Layer 2 Interface PTM or Ethernet Figure 31 Layer 2 Interface ATM ...

Page 93: ...hen you set the DSL WAN switch on the back of the P 2812HNU 51c to the DSL side this displays PTM ATM WAN The WAN port will be disabled automatically When you set the DSL WAN switch to the WAN side this displays ETH WAN The DSL port will be disabled automatically This allows the P 2812HNU 51c to work as an Ethernet gateway instead of a DSL router To access the Internet connect the WAN port to a br...

Page 94: ...You can have multiple ATM layer 2 interfaces using different VPI and or VCI values The screen varies depending on the interface type you select Figure 32 Layer 2 Interface Configuration DSL ATM Figure 33 Layer 2 Interface Configuration DSL PTM Ethernet WAN ...

Page 95: ...le ATM virtual circuit VC To transport multiple protocols the P 2812HNU 51c needs separate VCs There is a binding between a VC and the type of the network protocol carried on the VC This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit PDU payload LLC ENCAPSULATION More than one protocol can be carried over the same VC This is available only ...

Page 96: ...u select Non Realtime VBR or Realtime VBR Select Connection Mode Select Default Mode to allow only one WAN service over a single virtual circuit Select MSC Mode to allow multiple WAN services over a single virtual circuit Each WAN connection has its own MAC address Select VLAN MUX Mode to allow multiplexing of multiple protocols over a single virtual circuit You need to assign a VLAN ID and priori...

Page 97: ... and or VCI values or ptm0 indicates the DSL port The pppx name where x starts from 0 and is the index number of PPP connection on the P 2812HNU 51c indicates a PPP connection via any one of the WAN interface eth4 indicates the Ethernet WAN interface the physical Ethernet WAN port The number after the dot represents the VLAN ID number assigned to traffic sent through this connection The number aft...

Page 98: ...signed VlanMuxId This indicates the VLAN ID number assigned to traffic sent through this connection This displays N A when there is no VLAN ID number assigned ConnId This shows the index number of each connection This displays N A when the interface used by the connection is in Default Mode IGMP This shows whether IGMP Internet Group Multicast Protocol is activated or not for this connection IGMP ...

Page 99: ... Table 18 WAN Configuration WAN Interface LABEL DESCRIPTION Select a layer 2 interface for this service Select ptm0 to use the DSL port as the WAN port and use the VDSL technology for data transmission Select atmx where x starts from 0 and is the index number of ATM layer 2 interfaces using different VPI and or VCI values to use the DSL port as the WAN port and use the ADSL technology for data tra...

Page 100: ...se leave this field blank to disable the rate limit This field is not available for an ATM connection Tag VLAN ID for egress packets Select this option to add the VLAN tag specified below to the outgoing traffic through this connection This field is available when the layer 2 interface is in VLANMUX mode Enter 802 1P Priority IEEE 802 1p defines up to 8 separate traffic types by inserting a tag in...

Page 101: ...guration PPPoE The following table describes the labels in this screen Table 20 WAN Configuration PPPoE or PPPoA LABEL DESCRIPTION PPP User Name Enter the user name exactly as your ISP assigned If assigned a name in the form user domain where domain identifies a service name then enter both components exactly as given PPP Password Enter the password associated with the user name above PPPoE Servic...

Page 102: ...each time you connect to the Internet Select this if you do not have a dynamic IP address IPv4 Address Enter the static IP address provided by your ISP Enable PPP Debug Mode Select this option to display PPP debugging messages on the console Bridge PPPoE Frames Between WAN and Local Ports Select this option to forward PPPoE packets from the WAN port to the LAN ports and from the LAN ports to the W...

Page 103: ...ch time you connect to the Internet Select this if you have a dynamic IP address Enable DHCP Option 60 Select this to identify the vendor and functionality of the P 2812HNU 51c in DHCP requests that the P 2812HNU 51c sends to a DHCP server when getting a WAN IP address Vendor Class Identifier Enter the Vendor Class Identifier Option 60 such as the type of the hardware or firmware Enable DHCP Optio...

Page 104: ... add vendor specific information to DHCP requests that the P 2812HNU 51c sends to a DHCP server when getting a WAN IP address Manufacturer OUI Specify the vendor s OUI Organization Unique Identifier It is usually the first three bytes of the MAC address Product Class Enter the product class of the P 2812HNU 51c Model Name Enter the model name of the P 2812HNU 51c Serial Number Enter the serial num...

Page 105: ...using the ATM interface Figure 40 WAN Configuration IPoA The following table describes the labels in this screen Table 22 WAN Configuration IPoA LABEL DESCRIPTION WAN IP Address Enter the static IP address provided by your ISP WAN Subnet Mask Enter the subnet mask provided by your ISP Back Click this button to return to the previous screen Next Click this button to continue ...

Page 106: ...irewall Activation IPoE LABEL DESCRIPTION Enable NAT Select this check box to activate NAT on this connection Enable Fullcone NAT Select this check box to activate full cone NAT on this connection This field is available only when you select Enable NAT Enable Firewall Select this check box to activate Firewall on this connection Enable IGMP Multicast Proxy Select this check box to have the P 2812H...

Page 107: ...fault Gateway PPPoE PPPoA IPoE or IPoA LABEL DESCRIPTION Selected Default Gateway Interfaces Available Routed WAN Interfaces Select a WAN interface through which you want to forward the traffic Select a WAN interface in the Available Routed WAN Interfaces and use the left facing arrow to move it to the Selected Default Gateway Interfaces to use that interface as the default gateway To remove a WAN...

Page 108: ...r addresses from the ISP automatically Selected DNS Server Interfaces Available WAN Interfaces Select a WAN interface through which you want to obtain the DNS related information Select a WAN interface in the Available WAN Interfaces and use the left facing arrow to move it to the Selected DNS Server Interfaces to use that interface as the DNS server To remove a WAN interface from the Selected DNS...

Page 109: ... PPPoA IPoE or IPoA LABEL DESCRIPTION Table 26 WAN Configuration Configuration Summary LABEL DESCRIPTION Port VPI VCI This is the DSL port number VPI and VCI for an ATM connection This displays N A for an Ethernet WAN conenction or not available for a PTM connection Connection Type This is the encapsulation method used by this connection Service Name This is the name of the service Service Categor...

Page 110: ... Ethernet Point to Point Protocol over Ethernet PPPoE provides access control and billing functionality in a manner similar to dial up services using PPP PPPoE is an IETF standard RFC 2516 specifying how a personal computer PC interacts with a broadband modem DSL cable wireless etc connection For the service provider PPPoE offers an access and authentication method that works with existing access ...

Page 111: ...DSLAM digital access multiplexer Please refer to RFC 2364 for more information on PPPoA Refer to RFC 1661 for more information on PPP RFC 1483 RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 AAL5 The first method allows multiplexing of multiple protocols over a single ATM virtual circuit LLC based multiplexing and the second method assumes that each proto...

Page 112: ... PCR of 1962 cells sec This rate is not guaranteed because it is dependent on the line speed Sustained Cell Rate SCR is the mean cell rate of each bursty traffic source It specifies the maximum average rate at which cells can be sent over the virtual connection SCR may not be greater than the PCR Maximum Burst Size MBS is the maximum number of cells that can be sent at the PCR After MBS is reached...

Page 113: ... real time data transfers and the bandwidth requirement varies in proportion to the video image s changing dynamics The VBR nRT non real time Variable Bit Rate type is used with bursty connections that do not require closely controlled delay and delay variation It is commonly used for bursty traffic typical on LANs PCR and MBS define the burst levels SCR defines the minimum level An example of an ...

Page 114: ...outgoing packet s source address regardless of the destination IP address and port In symmetric NAT the mapping of an outgoing packet s source address to a source address in another network is different for each different destination IP address and port In the following example the P 2812HNU 51c maps the source address IP address 1 and port A to IP address 2 and port B on the external network for ...

Page 115: ...sources of another on the same LAN thus a user will not see the printers and hard disks of another user in the same building VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain In traditional switched environments all broadcast packets go to each and every individual port With VLAN all broadcasts are confined to a specific broadc...

Page 116: ...ast delivers IP packets to a group of hosts on the network not everybody and not just 1 Internet Group Multicast Protocol IGMP is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data IGMP version 2 RFC 2236 is an improvement over version 1 RFC 1112 but IGMP version 1 is still in wide use If you would like to read more detailed information abo...

Page 117: ...he DNS server addresses in the following ways 1 The ISP tells you the DNS server addresses usually in the form of an information sheet when you sign up If your ISP gives you DNS server addresses manually enter them in the DNS server fields 2 If your ISP dynamically assigns the DNS server IP addresses along with the P 2812HNU 51c s WAN IP address set the DNS server fields to get the DNS server addr...

Page 118: ...Chapter 5 WAN Setup P 2812HNU 51c User s Guide 118 ...

Page 119: ...floor of a building The LAN screens can help you configure a LAN DHCP server and manage IP addresses See Section 6 4 on page 123 for more information on LANs See Appendix E on page 389 for more information on IP addresses and subnetting 6 1 1 What You Can Do in this Chapter The LAN IP screen lets you set the LAN IP address and subnet mask of your ZyXEL device and configure other LAN TCP IP setting...

Page 120: ... a built in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability DHCP Relay You can also configure the P 2812HNU 51c to relay client DHCP requests to a DHCP server and the server s responses back to the clients RIP RIP Routing Information Protocol allows a router to exchange routing information with other routers Multicast and IGMP Traditi...

Page 121: ... IP address of a computer before you can access it The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask 6 3 The LAN IP Screen Click Network LAN to open the IP screen See Section 6 4 on page 123 for background information Use this screen to set the Local Area Network IP address and subnet mask of your P 2812HNU ...

Page 122: ...ifies the first of the contiguous addresses in the IP address pool Pool Size This field specifies the size or count of the IP address pool DHCP Relay Select this option to have the P 2812HNU 51c forward DHCP request to the DHCP server Relay Server If you select DHCP Relay enter the IP address of the DHCP server DNS Servers Assigned by DHCP Server If you do not configure DNS servers the P 2812HNU 5...

Page 123: ...vidual clients to obtain TCP IP configuration at start up from a server You can configure the P 2812HNU 51c as a DHCP server or disable it When configured as a server the P 2812HNU 51c provides the TCP IP configuration for the clients If you turn DHCP service off you must have another DHCP server on your LAN or else the computer must be manually configured Active IP Alias Select the check box to c...

Page 124: ...92 168 255 0 and you must enable the Network Address Translation NAT feature of the P 2812HNU 51c The Internet Assigned Number Authority IANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise Let s say you select 192 168 1 0 as the network number which covers 254 individual addresses from 192 168 1 1 to 192 168 1 254 zero...

Page 125: ...osts on the network not everybody and not just 1 IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data IGMP version 2 RFC 2236 is an improvement over version 1 RFC 1112 but IGMP version 1 is still in wide use If you would like to read more detailed information about interoperability between IGMP versio...

Page 126: ...rnet interface with the P 2812HNU 51c itself as the gateway for each LAN network When you use IP alias you can also configure firewall rules to control access between the LAN s logical networks subnets Note Make sure that the subnets of the logical networks do not overlap The following figure shows a LAN divided into subnets A and B Figure 50 Physical Network Partitioned Logical Networks Ethernet ...

Page 127: ...eless LAN screens Use these screens to set up your P 2812HNU 51c s wireless connection The General screen lets you turn the wireless connection on or off set up wireless security and make other basic configuration changes Section 7 4 on page 131 You can also configure the MAC filter to allow or block access to the P 2812HNU 51c based on the MAC addresses of the wireless stations The More AP screen...

Page 128: ...requency bands that are open to the public and do not require a license to use However wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption Wireless Network Construction Wireless networks consist of wireless clients access points and bridges A wireless client i...

Page 129: ...eloped to ensure that only authorized people can use a wireless data network or understand the data carried on it These security standards do two things First they authenticate This means that only people presenting the right credentials often a username and password or a key phrase can access the network Second they encrypt This means that the information sent over the air is encoded Only people ...

Page 130: ...ers such as electric motors or microwaves Problems with absorption occur when physical objects such as thick walls are between the two radios muffling the signal 7 3 Before You Begin Before you start using these screens ask yourself the following questions See Section 7 2 on page 128 if some of the terms used here do not make sense to you What wireless standards do the other wireless devices suppo...

Page 131: ...work Wireless LAN General The following table describes the labels in this screen Table 28 Network Wireless LAN General LABEL DESCRIPTION Active Wireless LAN Click the check box to activate wireless LAN Channel Selection Set the operating frequency channel depending on your particular region Select a channel or use Auto to have the P 2812HNU 51c automatically determine a channel to use If you are ...

Page 132: ...reen Network Name SSID The SSID Service Set IDentity identifies the service set with which a wireless device is associated Wireless devices associating to the access point AP must have the same SSID Enter a descriptive name up to 32 printable 7 bit ASCII characters for the wireless LAN Note If you are configuring the P 2812HNU 51c from a computer connected to the wireless LAN and you change the P ...

Page 133: ...ork is accessible to any wireless networking device that is within range Figure 52 Wireless LAN General No Security The following table describes the labels in this screen Apply Click this to save your changes back to the P 2812HNU 51c Reset Click this to reload the previous configuration for this screen Table 28 Network Wireless LAN General LABEL DESCRIPTION Table 29 Wireless LAN General No Secur...

Page 134: ...reless LAN to display the General screen Select WEP from the Security Mode list Figure 53 Wireless LAN General Static WEP Encryption The following table describes the wireless LAN security labels in this screen Table 30 Network Wireless LAN General Static WEP Encryption LABEL DESCRIPTION Security Mode Choose WEP from the drop down list box ...

Page 135: ... encryption Key 1 to Key 4 The WEP key is used to secure your data from eavesdropping by unauthorized wireless users Both the P 2812HNU 51c and the wireless stations must use the same WEP key for data transmission Only one key can be activated at any one time Select a default key to use for data encryption If you chose 64 bit in the WEP Encryption field then enter any 5 characters ASCII string or ...

Page 136: ...igurable when you select this option Security Mode Choose WPA PSK or WPA2 PSK from the drop down list box Active Compatible This field is only available for WPA2 PSK Select this if you want the P 2812HNU 51c to support WPA PSK and WPA2 PSK simultaneously Encryption Select the encryption type TKIP AES or TKIP AES for data encryption Select TKIP if your wireless clients can all use TKIP Select AES i...

Page 137: ...e 32 Wireless LAN General WPA 2 LABEL DESCRIPTION Security Mode Choose WPA or WPA2 from the drop down list box Active Compatible This field is only available for WPA2 Select this if you want the P 2812HNU 51c to support WPA and WPA2 simultaneously Encryption Select the encryption type TKIP AES or TKIP AES for data encryption Select TKIP if your wireless clients can all use TKIP Select AES if your ...

Page 138: ...you select WPA2 Specify how often wireless clients have to resend usernames and passwords in order to stay connected Enter a time interval between 10 and 2147483647 seconds Note If wireless client authentication is done using a RADIUS server the reauthentication timer on the RADIUS server has priority Group Key Update Timer The Group Key Update Timer is the rate at which the RADIUS server sends a ...

Page 139: ...Restrict Mode Define the filter action for the list of MAC addresses in the table below Select Disabled to turn off MAC address filtering Select Allow to permit access to the P 2812HNU 51c MAC addresses not listed will be denied access to the P 2812HNU 51c Select Deny to block access to the P 2812HNU 51c MAC addresses not listed will be allowed to access the P 2812HNU 51c This is the index number ...

Page 140: ...aracter pairs for example 12 34 56 78 9a bc Back Click this to return to the previous screen without saving changes Apply Click this to save your changes and go back to the previous screen Table 35 Network Wireless LAN More AP LABEL DESCRIPTION This is the index number of each SSID profile Active Select the check box to activate an SSID profile SSID An SSID profile is the set of parameters relatin...

Page 141: ... in this screen 7 6 The WPS Screen Use this screen to configure WiFi Protected Setup WPS on your P 2812HNU 51c WPS allows you to quickly set up a wireless network with strong security without having to configure security settings manually Set up each WPS connection between two devices Both devices must support WPS Apply Click Apply to save your changes back to the P 2812HNU 51c Reset Click Reset t...

Page 142: ...51c create a new PIN WPS Status This displays Configured when the P 2812HNU 51c has connected to a wireless network using WPS or Enable WPS is selected and wireless or wireless security settings have been changed The current wireless and wireless security settings also appear in the screen This displays Unconfigured if WPS is disabled and there is no wireless or wireless security changes on the P ...

Page 143: ...ess LAN WPS Station LABEL DESCRIPTION Push Button Click this button to add another WPS enabled wireless device within wireless range of the P 2812HNU 51c to your wireless network This button may either be a physical button on the outside of device or a menu button similar to the Push Button on this screen Note You must press the other wireless device s WPS button within two minutes of pressing thi...

Page 144: ...tween the devices is made Note You cannot use WDS when WPS is enabled or wireless security is set to WPA or WPA2 The wireless security settings apply to both WDS links and the connections between the ZyXEL Device and any wireless clients Note At the time of writing WDS is only compatible with other ZyXEL Devices of the same model Click Network Wireless LAN WDS The following screen displays WDS is ...

Page 145: ... device s MAC address manually in the table below Select Enabled Scan to turn on WDS search and display the available APs within range in the table below Remote Bridges MAC Address Enter the MAC address of the peer device that your P 2812HNU 51c wants to make a bridge connection with You can connect to up to 4 peer devices This field is available only when you select Enabled Scan in the Bridge Res...

Page 146: ...e maximum data fragment size that can be sent Enter a value between 256 and 2432 Number of Wireless Stations Allowed Specify the maximum number from 1 to 64 of the wireless stations that may connect to the P 2812HNU 51c Output Power Set the output power of the P 2812HNU 51c If there is a high density of APs in an area decrease the output power to reduce interference with other APs Select one of th...

Page 147: ...he wireless devices Select 802 11 b g n mixed mode to allow both IEEE802 11b IEEE802 11g and IEEE802 11n compliant WLAN devices to associate with the P 2812HNU 51c The transmission rate of your P 2812HNU 51c might be reduced 802 11 Protection Enabling this feature can help prevent collisions in mixed mode networks networks with both IEEE 802 11b and IEEE 802 11g traffic Select Auto to have the wir...

Page 148: ...ess network must follow these basic guidelines Every device in the same wireless network must use the same SSID The SSID is the name of the wireless network It stands for Service Set IDentity If two wireless networks overlap they should use a different channel Like radio stations or television channels each wireless network uses a specific channel or frequency to send and receive information Every...

Page 149: ...ten using twelve hexadecimal Table 40 Additional Wireless Terms TERM DESCRIPTION RTS CTS Threshold In a wireless network which covers a large area wireless devices are sometimes not aware of each other s presence This may cause them to send information to the AP at the same time and result in information colliding and not getting through By setting this value lower than the default value the wirel...

Page 150: ... network You can make every user log in to the wireless network before they can use it However every device in the wireless network has to support IEEE 802 1x to do this For wireless networks you can store the user names and passwords for each user in a RADIUS server This is a server used in businesses more than in homes If you do not have a RADIUS server you cannot set up user names and passwords...

Page 151: ...ill possible for unauthorized wireless devices to figure out the original information pretty quickly When you select WPA2 or WPA2 PSK in your P 2812HNU 51c you can also select an option WPA compatible to support WPA as well In this case if some of the devices support WPA and some support WPA2 you should set up WPA2 PSK or WPA2 depending on the type of wireless network login and select the WPA comp...

Page 152: ... the physical button Take the following steps to set up WPS using the button 1 Ensure that the two devices you want to set up are within wireless range of one another 2 Look for a WPS button on each device If the device does not have one log into its configuration utility and locate the button see the device s User s Guide for how to do this for the P 2812HNU 51c see Section 7 7 on page 143 3 Pres...

Page 153: ...the PIN method 1 Ensure WPS is enabled on both devices 2 Access the WPS section of the AP s configuration interface See the device s User s Guide for how to do this 3 Look for the client s WPS PIN it will be displayed either on the device or in the WPS section of the client s configuration interface see the device s User s Guide for how to find the WPS PIN for the P 2812HNU 51c see Section 7 6 on ...

Page 154: ...device acts as the enrollee the device that receives network and security settings The registrar creates a secure EAP Extensible Authentication Protocol tunnel and sends the network name SSID and the WPA PSK or WPA2 PSK pre shared key to the enrollee Whether WPA PSK or WPA2 PSK is used depends on the standards supported by the devices If the registrar is already part of a network it sends the exis...

Page 155: ...ollee All WPS certified APs can be a registrar and so can some WPS enabled wireless clients By default a WPS devices is unconfigured This means that it is not part of an existing network and can act as either enrollee or registrar if it supports both functions If the registrar is unconfigured the security settings it transmits to the enrollee are randomly generated Once a WPS enabled device has co...

Page 156: ... Network Step 1 In step 2 you add another wireless client to the network You know that Client 1 supports registrar mode but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network In this case AP1 must be the registrar since it is configured it already has security information for the network AP1 supplies the e...

Page 157: ...ing the WPS button on the registrar and the first enrollee for example then check that it successfully enrolled then set up the second device in the same way WPS works only with other WPS enabled devices However you can still add non WPS devices to a network you already set up using WPS WPS works by automatically issuing a randomly generated WPA PSK or WPA2 PSK pre shared key from the registrar de...

Page 158: ...e if this has happened WPS works between only two devices simultaneously so if another device has enrolled your device will be unable to enroll and will not have access to the network If this happens open the access point s configuration interface and look at the list of associated clients usually displayed by MAC address It does not matter if the access point is the WPS registrar the enrollee or ...

Page 159: ...ge 160 The Trigger Port screen lets you change the P 2812HNU 51c s trigger port settings Section 8 4 on page 163 The DMZ Host screen lets you configure a default server Section 8 5 on page 168 The ALG screen lets you enable SIP ALG on the P 2812HNU 51c Section 8 6 on page 168 8 2 What You Need to Know The following terms and concepts may help as you read through this chapter NAT In the simplest fo...

Page 160: ...orwarded and the local IP address of the desired server The port number identifies a service for example web service is on port 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP and web service it might be better to specify a range of port numbers You can allocate a server IP address that corresponds to a por...

Page 161: ...ard only one port enter the port number in the External Port Start field above and then enter it again in this field To forward a series of ports enter the last port number in a series that begins with the port number in the External Port Start field above Internal Port Start Enter the port number to which you want the P 2812HNU 51c to translate the incoming port To forward only one port enter the...

Page 162: ...field displays the inside IP address of the server Modify Click the Edit icon to go to the screen where you can edit the port forwarding rule Click the Remove icon to delete an existing port forwarding rule Note that subsequent rules move up by one when you take this action Apply Click Apply to save your changes back to the P 2812HNU 51c Cancel Click Cancel to return to the previous configuration ...

Page 163: ...arding rules External Start Port Enter the original destination port for the packets To forward only one port enter the port number again in the External End Port field To forward a series of ports enter the start port number here and the end port number in the External End Port field External End Port Enter the last port of the original destination port range To forward only one port enter the po...

Page 164: ...xample 1 Jane requests a file from the Real Audio server port 7070 2 Port 7070 is a trigger port and causes the P 2812HNU 51c to record Jane s computer IP address The P 2812HNU 51c associates Jane s computer IP address with the open port range of 6970 7170 3 The Real Audio server responds using a port number ranging between 6970 7170 4 The P 2812HNU 51c forwards the traffic to Jane s computer IP a...

Page 165: ...t the traffic to a server on the WAN Start This is the first port number that identifies a service End This is the last port number that identifies a service Protocol This is the transport layer protocol used for the service Open Port The open port is a port or a range of ports that a server on the WAN uses when it sends out a particular service The P 2812HNU 51c forwards the traffic with this por...

Page 166: ... layer protocol 1 means TCP 2 means UDP and 3 means TCP UDP Open Start Port This is the first open port number that identifies a service Open End Port This is the last open port number that identifies a service Open Proto This is the open transport layer protocol 1 means TCP 2 means UDP and 3 means TCP UDP Modify Click the Edit icon to go to the screen where you can edit the rule Click the Remove ...

Page 167: ... a server on the WAN Type a port number or the starting port number in a range of port numbers Trigger End Port Type a port number or the ending port number in a range of port numbers Trigger Protocol Select the transport layer protocol from TCP UDP or TCP UDP Open Start Port The open port is a port or a range of ports that a server on the WAN uses when it sends out a particular service The P 2812...

Page 168: ...to pass through NAT by examining and translating IP addresses embedded in the data stream The SIP ALG translates the P 2812HNU 51c s private IP address inside the SIP data stream to a public IP address You do not need to use STUN or an outbound proxy if you enable the SIP ALG Table 46 NAT DMZ Host LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets fr...

Page 169: ...information about port numbers Please also refer to the Supporting CD for more examples and details on port forwarding and NAT Table 47 NAT ALG LABEL DESCRIPTION Active SIP ALG Select this check box to allow SIP sessions to pass through the P 2812HNU 51c SIP is a signaling protocol used in VoIP Voice over IP the sending of voice signals over Internet Protocol Apply Click Apply to save your customi...

Page 170: ...server IP address of 192 168 1 35 to a third C in the example You assign the LAN IP addresses and the ISP assigns the WAN IP address The NAT network appears as a single host on the Internet Figure 77 Multiple Servers Behind NAT Example SNMP trap 162 PPTP Point to Point Tunneling Protocol 1723 Table 48 Services and Port Numbers SERVICES PORT NUMBER D 192 168 1 36 192 168 1 1 IP address assigned by ...

Page 171: ...he P 2812HNU 51c use and configure audio settings such as volume levels for the phones connected to the ZyXEL Device Use the SIP Service Provider screen Section 9 3 on page 178 to configure the SIP server information QoS for VoIP calls the numbers for certain phone functions and dialing plan Use the Region screen Section 9 4 on page 183 to change settings that depend on the country you are in Use ...

Page 172: ...sking the other device the number you dialed to take part in the call SIP Accounts A SIP account is a type of VoIP account It is an arrangement with a service provider that lets you make phone calls over the Internet When you set the P 2812HNU 51c to use your SIP account to make calls the P 2812HNU 51c is able to send all the information about the phone call to your service provider on the Interne...

Page 173: ...ngs Screen The P 2812HNU 51c uses a SIP account to make outgoing VoIP calls and check if an incoming call s destination number matches your SIP account s SIP number In order to make or receive a VoIP call you need to enable and configure a SIP account and map it to a phone port The SIP account contains information that allows your P 2812HNU 51c to connect to your VoIP service provider Use this scr...

Page 174: ...ou want to see in this screen If you change this field the screen automatically refreshes General Active SIP Account Select this if you want the P 2812HNU 51c to use this account Clear it if you do not want the P 2812HNU 51c to use this account SIP Account Number Enter your SIP number In the full SIP URI this is the part before the symbol You can use up to 127 printable ASCII characters ...

Page 175: ...de the SIP service domain name when the P 2812HNU 51c sends the SIP number SIP include the SIP service domain name TEL do not include the SIP service domain name Voice Features Primary Compression Type Secondary Compression Type Third Compression Type Select the type of voice coder decoder codec that you want the P 2812HNU 51c to use G 711 provides higher voice quality but requires more bandwidth ...

Page 176: ...g the second call if you do not answer it Active Unconditional Forward Select this if you want the P 2812HNU 51c to forward all incoming calls to the specified phone number Specify the phone number in the To Number field on the right Active Busy Forward Select this if you want the P 2812HNU 51c to forward incoming calls to the specified phone number if the phone port is busy Specify the phone numb...

Page 177: ...ed warm line number after you pick up the telephone and do not press any keys on the keypad for a period of time Hot Line Select this to have the P 2812HNU 51c dial the specified hot line number immediately when you pick up the telephone Hot Line Warm Line number Enter the number of the hot line or warm line that you want the P 2812HNU 51c to dial Warm Line Timer Enter a number of seconds that the...

Page 178: ...ce Provider Screen Click VoIP SIP SIP Service Provider to open the SIP Service Provider screen Use this screen to configure the SIP server information QoS for VoIP calls the numbers for certain phone functions and dialing plan Figure 79 VoIP SIP SIP Service Provider ...

Page 179: ...er Port Enter the SIP server s listening port number if your VoIP service provider gave you one Otherwise keep the default value REGISTER Server Address Enter the IP address or domain name of the SIP register server if your VoIP service provider gave you one Otherwise enter the same address you entered in the SIP Server Address field You can use up to 95 printable ASCII characters REGISTER Server ...

Page 180: ...s in the voice data stream This method works best when you are using a codec that does not use compression like G 711 Codecs that use compression like G 729 and G 726 can distort the tones SIPInfo send the DTMF tones in SIP messages Transport Type Transport Type Select the transport layer protocol TCP or UDP used for SIP FAX Option This field controls how the P 2812HNU 51c handles fax messages G 7...

Page 181: ...his to have the P 2812HNU 51c include a SIP Require Supported header field with the option tag 100rel in all INVITE requests When the P 2812HNU 51c receives a SIP response message indicating that the phone it called is ringing the P 2812HNU 51c sends a PRACK message to have both sides confirm the message is received If you select this option the peer device should also support the option tag 100re...

Page 182: ... this function off Dial Plan Dial Plan Enable Select this to activate the dial plan rules you specify in the text box provided See Section 9 3 1 on page 182 for how to set up a rule Dialing Interval Selection Dialing Interval Selection Enter the number of seconds the P 2812HNU 51c should wait after you stop dialing numbers before it makes the phone call The value depends on how quickly you dial ph...

Page 183: ...xxxxxx means the P 2812HNU 51c automatically removes the specified prefix 9 from the number you dialed before making the call This is always used for making outside calls from an office xx 123 456 xxxx means the P 2812HNU 51c automatically translates 123 to 456 in the number you dialed before making the call Calls with a number followed by the exclamation mark will be dropped Calls with a number f...

Page 184: ...VoIP Phone Region LABEL DESCRIPTION Region Settings Select the place in which the P 2812HNU 51c is located Call Service Mode Select the mode for supplementary phone services call hold call waiting call transfer and three way conference calls that your VoIP service provider supports Europe Type use supplementary phone services in European mode USA Type use supplementary phone services American mode...

Page 185: ...HNU 51c to call when you dial the speed dial number Description Enter a name to identify the party you call when you dial the speed dial number You can use up to 127 printable ASCII characters Add Click this to use the information in the Speed Dial section to update the Phone Book section Phone Book Use this section to look at all the speed dial entries and to erase them This field displays the sp...

Page 186: ...to the Speed Dial section where you can change it Click the Remove icon to erase this speed dial entry Clear Click this to erase all the speed dial entries Table 52 VoIP Phone Book Speed Dial LABEL DESCRIPTION Table 53 VoIP Call History Call History Summary LABEL DESCRIPTION Refresh Click this button to renew the call history list Clear All Click this button to remove all entries from the call his...

Page 187: ...d that day Total Duration This displays how long all calls lasted that day Table 53 VoIP Call History Call History Summary LABEL DESCRIPTION Table 54 VoIP Call History Outgoing Calls LABEL DESCRIPTION Refresh Click this button to renew the dialed call list Clear All Click this button to remove all entries from the dialed call list No This is a read only index number time This is the date and time ...

Page 188: ... section contains background material relevant to the VoIP screens Table 55 VoIP Call History Incoming Calls LABEL DESCRIPTION Refresh Click this button to renew the received call list Clear All Click this button to remove all entries from the received call list No This is a read only index number time This is the date and time when the call was made phone port This is the phone port on which you ...

Page 189: ...naling is separate from the media for which it handles sessions The media that is exchanged during the session can use a different path from that of the signaling SIP handles telephone calls and can interface with traditional circuit switched telephone networks SIP Identities A SIP account uses an identity sometimes referred to as a SIP address A complete SIP identity is called a SIP URI Uniform R...

Page 190: ...egistration within this lifespan If it does not do so the registration data will be deleted from the SIP registrar s database and the connection broken The P 2812HNU 51c attempts to register all enabled subscriber ports when it is switched on When you enable a subscriber port that was previously disabled the P 2812HNU 51c attempts to register the port immediately Authorization Requirements SIP reg...

Page 191: ...er In the following example you want to use client device A to call someone who is using client device C 1 The client device A in the figure sends a call invitation to the SIP proxy server B 2 The SIP proxy server forwards the call invitation to C Figure 86 SIP Proxy Server SIP Redirect Server A SIP redirect server accepts SIP requests translates the destination address to an IP address and sends ...

Page 192: ...rver B 2 The SIP redirect server sends the invitation back to A with C s IP address or domain name 3 Client device A then sends the call invitation to client device C Figure 87 SIP Redirect Server SIP Register Server A SIP register server maintains a database of SIP identity to IP address or domain name mapping The register server checks your user name and password when you register RTP When you m...

Page 193: ...wered 4 A then sends an ACK message to acknowledge that B has answered the call 5 Now A and B exchange voice media talk 6 After talking A hangs up and sends a BYE request 7 B replies with an OK response confirming receipt of the BYE request and the call is terminated SIP Call Progression Through Proxy Servers Usually the SIP UAC sets up a phone call by sending a request to the SIP proxy server The...

Page 194: ...lowing figure shows the SIP and session traffic flow between the user agents UA 1 and UA 2 and the proxy servers this example shows two proxy servers PROXY 1 and PROXY 2 Figure 88 SIP Call Through Proxy Servers The following table shows the SIP call progression Table 57 SIP Call Progression UA 1 PROXY 1 PROXY 2 UA 2 Invite Invite 100 Trying Invite 100 Trying 180 Ringing 180 Ringing 180 Ringing 200...

Page 195: ...OK response confirming receipt of the BYE request and the call is terminated Voice Coding A codec coder decoder codes analog voice signals into digital signals and decodes the digital signals back into analog voice signals The P 2812HNU 51c supports the following codecs G 711 is a Pulse Code Modulation PCM waveform codec PCM measures analog signal amplitudes at regular time intervals and converts ...

Page 196: ...Waiting Indication MWI enables your phone to give you a message waiting beeping dial tone when you have a voice message s Your VoIP service provider must have a messaging system that sends message waiting status SIP packets as defined in RFC 3842 Custom Tones IVR IVR Interactive Voice Response is a feature that allows you to use your telephone to interact with the P 2812HNU 51c The P 2812HNU 51c a...

Page 197: ...ss a number from 1201 1208 followed by the key to listen to the tone 3 You can continue to add listen to or delete tones or you can hang up the receiver when you are done Deleting Custom Tones Do the following to delete a custom tone 1 Pick up the phone and press on your phone s keypad and wait for the message that says you are in the configuration menu 2 Press a number from 1301 1308 followed by ...

Page 198: ...ions do not have to request a particular service or give advanced notice of where the traffic is going 3 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Service TOS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels The following figure illustrates the DS field DS...

Page 199: ...Flash Key Flashing means to press the hook for a short period of time a few hundred milliseconds before releasing it On newer telephones there should be a flash key button that generates the signal electronically If the flash key is not available you can tap press and immediately release the hook by hand to achieve the same effect However using the flash key is preferred since the timing is much m...

Page 200: ...you to place a call on hold while you answer another incoming call on the same telephone directory number If there is a second call to a telephone number you will hear a call waiting tone Take one of the following actions Reject the second call Press the flash key and then press 0 Table 59 European Flash Key Commands COMMAND SUB COMMAND DESCRIPTION Flash Put a current call on hold to place a secon...

Page 201: ...the second party answers it hang up the phone European Three Way Conference Use the following steps to make three way conference calls 1 When you are on the phone talking to someone press the flash key to put the caller on hold and get a dial tone 2 Dial a phone number directly to make another call 3 When the second call is answered press the flash key and press 3 to create a three way conversatio...

Page 202: ...to your telephone number you will hear a call waiting tone Press the flash key to put the first call on hold and answer the second call USA Call Transfer Do the following to transfer an incoming call that you have answered to another phone 1 Press the flash key to put the caller on hold 2 When you hear the dial tone dial 98 followed by the number to which you want to transfer the call to operate t...

Page 203: ...is on hold 9 9 4 4 Phone Functions Summary The following table shows the key combinations you can enter on your phone s keypad to use certain features Table 61 Phone Functions Summary ACTION FUNCTION DESCRIPTION 98 Call transfer Transfer a call to another phone See Section 9 9 4 2 on page 199 Europe type and Section 9 9 4 3 on page 201 USA type 66 Call return Place a call to the last person who ca...

Page 204: ...Chapter 9 Voice P 2812HNU 51c User s Guide 204 ...

Page 205: ...er feature Computers A and B can access files on a USB device C which is connected to the P 2812HNU 51c Figure 90 File Sharing Overview See Section 10 1 2 on page 206 for an explanation of file sharing terms See Section 10 2 1 on page 209 for file sharing examples 10 1 1 What You Can Do in this chapter Use the File Sharing screen Section 10 2 on page 208 to enable file sharing server on the P 2812...

Page 206: ...ows or Linux have different file systems The file sharing feature on your P 2812HNU 51c supports File Allocation Table FAT and FAT32 file systems Windows CIFS Common Internet File System CIFS is a standard protocol supported by most operating systems in order to share files across the network CIFS runs over TCP IP but uses the SMB Server Message Block protocol found in Microsoft Windows for file a...

Page 207: ... computer to another over a network such as the Internet 10 1 3 Before You Begin Make sure the P 2812HNU 51c is connected to your network and turned on 1 Connect the USB device to one of the P 2812HNU 51c s USB ports Make sure the P 2812HNU 51c is connected to your network 2 The P 2812HNU 51c detects the USB device and makes its contents available for browsing If you are connecting a USB hard driv...

Page 208: ...ys the P 2812HNU 51c system name Workgroup Name You can add the P 2812HNU 51c to an existing or a new workgroup on your network Enter the name of the workgroup which your P 2812HNU 51c automatically joins You can set the P 2812HNU 51c s workgroup name to be exactly the same as the workgroup name to which your computer belongs to Note The P 2812HNU 51c will not be able to join the workgroup if your...

Page 209: ...e files in the attached USB device using Windows Explorer browser 2 In Windows Explorer s Address bar type a double backslash followed by the IP address of the P 2812HNU 51c the default IP address of the P 2812HNU 51c is 192 168 1 1 and press ENTER A screen asking for password authentication appears Type the user name and password you use to access the system and click OK The default system user n...

Page 210: ...Chapter 10 File Sharing P 2812HNU 51c User s Guide 210 ...

Page 211: ...ternet using a common language called TCP IP TCP IP in turn is a set of application protocols that perform specific functions An extension number called the TCP port or UDP port identifies these protocols such as HTTP Web FTP File Transfer Protocol POP3 E mail etc For example Web traffic by default uses TCP port 80 When computers communicate on the Internet they are using the client server model w...

Page 212: ...tanding of how they work you might inadvertently introduce security risks to the firewall and to the protected network Make sure you test your rules after you configure them These custom rules work by comparing the Source IP address Destination IP address and IP protocol type of network traffic to rules set by the administrator Your customized rules take precedence and override the P 2812HNU 51c s...

Page 213: ...le is applied Protocol This displays the transport layer protocol that defines the service to which this rule applies Source Address Mask This displays the source IP addresses and subnet mask to which this rule applies Please note that a blank source address is equivalent to Any Source Port This is the source port number Dest Address Mask This displays the destination IP addresses and subnet mask ...

Page 214: ...spaces To add a firewall rule you need to configure at least one of the following fields except the Interface field Protocol Select the transport layer protocol TCP UDP TCP UDP or ICMP and enter the protocol service type number in the port field Select NONE to apply the rule to any protocol Source IP Address Enter the source IP address in dotted decimal notation Source Subnet Mask Enter the source...

Page 215: ...e rule to all interfaces on the P 2812HNU 51c or select the specific WAN interface s to which this rule applies Back Click Back to return to the previous screen Apply Click Apply to save your customized settings and exit this screen Table 65 Firewall Incoming Add continued LABEL DESCRIPTION ...

Page 216: ...Chapter 11 Firewall P 2812HNU 51c User s Guide 216 ...

Page 217: ...save the certificates of trusted CAs to the P 2812HNU 51c Section 12 4 on page 225 12 2 What You Need to Know The following terms and concepts may help as you read through this chapter Certification Authority A Certification Authority CA issues certificates and guarantees the identity of each certificate owner There are commercial certification authorities like CyberTrust or VeriSign and governmen...

Page 218: ...izational Unit or department O Organization or company and C Country It is recommended that each certificate have unique subject information Type This field displays what kind of certificate this is request represents a certification request and is not yet a valid certificate Send a certification request to a certification authority which then issues a certificate Use the Load Certificate screen t...

Page 219: ...BEL DESCRIPTION Certificate Name Type up to 31 ASCII characters not including spaces to identify this certificate Common Name Select a radio button to identify the certificate s owner by IP address domain name or e mail address Type the IP address in dotted decimal notation domain name or e mail address in the field provided The domain name or e mail address can be up to 31 ASCII characters The do...

Page 220: ...See Section 12 3 3 on page 222 for field information Figure 97 Certificate Request Details 12 3 2 Import Certificate Click Security Certificates Local Certificates and then Import Certificate to open the Import Local Certificate screen Follow the instructions in this screen to save an existing certificate to the P 2812HNU 51c Back Click Back to return to the previous screen Apply Click Apply to be...

Page 221: ...t it Figure 98 Import Local Certificate The following table describes the labels in this screen Table 68 Import Local Certificate LABEL DESCRIPTION Certificate Name Type up to 31 ASCII characters not including spaces to identify this certificate Certificate Copy and paste the certificate into the text box to store it on the P 2812HNU 51c ...

Page 222: ...e View icon to open the Certificate Details screen Use this screen to view in depth certificate information and change the certificate s name Private Key Copy and paste the private key into the text box to store it on the P 2812HNU 51c Back Click Back to return to the previous screen Apply Click Apply to save the certificate on the P 2812HNU 51c Table 68 Import Local Certificate LABEL DESCRIPTION ...

Page 223: ...Chapter 12 Certificate P 2812HNU 51c User s Guide 223 Figure 99 Certificate Details ...

Page 224: ...Enhanced Mail PEM format PEM uses 64 ASCII characters to convert the binary certificate into a printable form This displays null in a certification request You can copy and paste the certificate into an e mail to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution via floppy disk for example Pr...

Page 225: ...cation authorities that you have set the P 2812HNU 51c to accept as trusted The P 2812HNU 51c accepts any valid certificate signed by a certification authority on Table 70 Load Certificate LABEL DESCRIPTION Certificate Name This field is read only and displays the identifying name of this certificate Certificate Copy and paste the certificate into the text box to store it on the P 2812HNU 51c Back...

Page 226: ...ntifies the owner of the certificate such as Common Name CN OU Organizational Unit or department Organization O State ST and Country C It is recommended that each certificate have unique subject information Type This field displays general information about the certificate ca means that a Certification Authority signed the certificate Action Click View to open a screen with an in depth list of inf...

Page 227: ...ificate ca means that a Certification Authority signed the certificate Subject This field displays information that identifies the owner of the certificate such as Common Name CN Organizational Unit OU Organization O and Country C Certificate This read only text box displays the certificate in Privacy Enhanced Mail PEM format PEM uses 64 ASCII characters to convert the binary certificate into a pr...

Page 228: ...usted CA certificates Figure 103 Trusted CA Import Certificate The following table describes the fields in this screen Table 73 Trusted CA Import Certificate LABEL DESCRIPTION Certificate Name Enter the name that identifies this certificate Certificate Copy and paste the certificate into the text box to store it on the P 2812HNU 51c Back Click this button to return to the previous screen Apply Cli...

Page 229: ...he P 2812HNU 51c s LAN interface The P 2812HNU 51c routes most traffic from A to the Internet through the P 2812HNU 51c s default gateway R1 You create one static route to connect to services offered by your ISP behind router R2 You create another static route to communicate with a separate network behind a router R3 connected to the LAN Figure 104 Example of Static Routing Topology 13 1 1 What Yo...

Page 230: ...r specifies the IP network address of the final destination Routing is always based on network number Netmask This parameter specifies the IP network subnet mask of the final destination Gateway This is the IP address of the gateway The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Interface This is...

Page 231: ...net mask of 255 255 255 255 in the subnet mask field to force the network number to be identical to the host ID IP Subnet Mask Enter the IP subnet mask here Use Interface Select a WAN interface through which the traffic is sent You must have the WAN interface s already configured in the WAN screens Use Gateway IP Address Select this option and enter the IP address of the next hop gateway The gatew...

Page 232: ...Chapter 13 Static Route P 2812HNU 51c User s Guide 232 ...

Page 233: ... administrator Policy based routing is applied to outgoing packets prior to the normal routing You can use source based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing 14 1 1 What You Can Do in this Chapter The Policy Forwarding screens let you view and configure routing policies on the P 2812HNU 51c...

Page 234: ... number SourceMAC This is the source MAC address Interface This is the WAN interface through which the traffic is routed Remove Click the icon to remove a rule from the P 2812HNU 51c A window displays asking you to confirm that you want to delete the rule Add Click this to create a new rule Table 77 Policy Forwarding Add LABEL DESCRIPTION Policy Name Enter a descriptive name of up to 16 printable ...

Page 235: ...s Guide 235 Back Click Back to return to the previous screen without saving Apply Click Apply to save your changes back to the P 2812HNU 51c Cancel Click Cancel to begin configuring this screen afresh Table 77 Policy Forwarding Add LABEL DESCRIPTION ...

Page 236: ...Chapter 14 Policy Forwarding P 2812HNU 51c User s Guide 236 ...

Page 237: ...1058 and RFC 1389 allows a device to exchange routing information with other routers 15 1 1 What You Can Do in this Chapter The RIP screen lets you set up RIP settings on the P 2812HNU 51c Section 15 2 on page 237 15 2 The RIP Screen Click Advanced RIP to open the RIP screen Figure 109 Advanced RIP ...

Page 238: ...supported but RIP version 2 carries more information RIP version 1 is probably adequate for most networks unless you have an unusual network topology Operation Select Passive to have the P 2812HNU 51c update the routing table based on the RIP packets received from neighbors but not advertise its route information to other routers in this interface Select Active to have the P 2812HNU 51c advertise ...

Page 239: ...nd then queues the packet accordingly Packets assigned a high priority are processed more quickly than those with low priority if there is congestion allowing time sensitive applications to flow more smoothly Time sensitive applications include both those that require a low level of latency delay and a low level of jitter variations in delay such as Voice over IP VoIP or Internet gaming and those ...

Page 240: ... DS IEEE 802 1p tagging makes use of three bits in the packet header while DiffServ is a new protocol and defines a new DS field which replaces the eight bit ToS Type of Service field in the IP header Tagging and Marking In a QoS class you can configure whether to add or change the DSCP DiffServ Code Point value IEEE 802 1p priority level and VLAN ID number in a matched packet When the packet pass...

Page 241: ... speed For example set the WAN interface speed to 100000 kbps if your Internet connection has an upstream transmission speed of 100 Mbps You can set this number higher than the interface s actual transmission speed The P 2812HNU 51c uses up to 95 of the DSL port s actual upstream transmission speed even if you set this number higher than the DSL port s actual transmission speed You can also set th...

Page 242: ...me of the P 2812HNU 51c s interface through which traffic in this queue passes Priority This shows the priority of this queue Weight This shows the weight of this queue Buffer Management This shows the queue management algorithm used for this queue Queue management algorithms determine how the P 2812HNU 51c should handle packets when it receives too many network congestion Rate Limit This shows th...

Page 243: ...e interface to which this queue is applied Priority Select the priority level from 1 to 3 of this queue The smaller the number the higher the priority level Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested Weight Select the weight from 1 to 8 of this queue If two queues have the same priority level the P 28...

Page 244: ...s class should come and the source MAC address of traffic that matches this classifier Forward To This is the interface through which traffic that matches this classifier is forwarded out DSCP Mark This is the DSCP number added to traffic of this classifier 802 1P Mark This is the IEEE 802 1p priority level assigned to traffic of this classifier VLAN ID Tag This is the VLAN ID number assigned to t...

Page 245: ...pter 16 Quality of Service QoS P 2812HNU 51c User s Guide 245 16 5 1 QoS Class Edit Click the Add button or the Edit icon in the Class Setup screen to configure a classifier Figure 114 QoS Class Setup Add ...

Page 246: ... select Auto Mapping and there is a VLAN tag carried in the matched packets the P 2812HNU 51c will replace the IP ToS field with the 802 1p priority field If you select Unchange the P 2812HNU 51c keep the DSCP field in the packets 802 1p Mark Select a priority level with which the P 2812HNU 51c replaces the IEEE 802 1p priority field in the packets If you select Unchange the P 2812HNU 51c keep the...

Page 247: ...subnet mask TCP UDP Port Range If you select TCP or UDP in the IP Protocol field select the check box and enter the port number s of the source Exclude Select this option to exclude the packets that match the specified criteria from this classifier Destination MAC Address Select the check box and enter the destination MAC address of the packet MAC Mask Type the mask for the specified MAC address t...

Page 248: ...le only when you select IP in the Ether Type field Select this option and specify a DSCP DiffServ Code Point number between 0 and 63 in the field provided TCP ACK This field is available only when you select IP in the Ether Type field If you select this option the matched TCP packets must contain the ACK Acknowledge flag DHCP This field is available only when you select IP in the Ether Type field ...

Page 249: ...s screen Select No Refresh to stop refreshing statistics Interface Monitor No This is the index number of the entry Name This shows the name of the WAN interface on the P 2812HNU 51c Pass This shows how many packets forwarded to this interface are transmitted successfully Drop This shows how many packets forwarded to this interface are dropped Queue Monitor No This is the index number of the entry...

Page 250: ...v Differentiated Services is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the route based on the application types and traffic flow Packets are marked with DiffServ Code Points DSCPs indicating the level of Table 85 IEEE 802 1p Priority Level and Traffic Type PRIORITY LEVEL TRAFFIC TYPE Level 7 Typically...

Page 251: ...Type of Service TOS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels The following figure illustrates the DS field DSCP is backward compatible with the three precedence bits in the ToS octet so that non DiffServ compliant ToS enabled network device will not conflict with the DSCP mapping The DSCP value determines the ...

Page 252: ...Chapter 16 Quality of Service QoS P 2812HNU 51c User s Guide 252 ...

Page 253: ... First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic DNS service provider will give you a password or key 17 1 1 What You Can Do in this Chapter Use the Dynamic DNS screen Section 17 3 on page 254 to enable DDNS and configure the DDNS settings on...

Page 254: ...o your P 2812HNU 51c by your Dynamic DNS provider You can specify up to two host names in the field separated by a comma Interface Select the WAN interface to use for updating the IP address of the domain name User Name Type your user name Password Type the password assigned to you Email If you select TZO in the Service Provider field enter the user name you used to register for this service Key I...

Page 255: ...ce s to manage the P 2812HNU 51c Section 18 5 on page 260 The IP Address screens let you configure from which IP address es users can use a service to manage the P 2812HNU 51c Section 18 6 on page 261 18 2 The TR 069 Screen TR 069 defines how Customer Premise Equipment CPE for example your P 2812HNU 51c can be managed over the WAN by an Auto Configuration Server ACS TR 069 is based on sending Remo...

Page 256: ...to the auto configuration server ACS URL Enter the URL or IP address of the auto configuration server ACS User Name Enter the TR 069 user name for authentication with the auto configuration server ACS Password Enter the TR 069 password for authentication with the auto configuration server WAN Interface used by TR 069 client Select a WAN interface through which the TR 069 traffic passes If you sele...

Page 257: ...r name When the ACS makes a connection request to the P 2812HNU 51c this user name is used to authenticate the ACS Connection Request Password Enter the connection request password When the ACS makes a connection request to the P 2812HNU 51c this password is used to authenticate the ACS Connection Request URL This shows the connection request URL The ACS can use this URL to make a connection reque...

Page 258: ...ct variables managed objects that define each piece of information to be collected about a switch Examples of variables include number of packets received node port status and so on A Management Information Base MIB is a collection of managed objects SNMP allows a manager and agents to communicate for the purpose of accessing these objects SNMP itself is a simple request response protocol based on...

Page 259: ...d Community which is the password for the incoming Get and GetNext requests from the management station The default is public and allows all requests Set Community Enter the Set community which is the password for incoming Set requests from the management station The default is public and allows all requests System Name Enter the system name of the P 2812HNU 51c System Location Specify the geograp...

Page 260: ...ess Control Services LABEL DESCRIPTION Service Control Select Enable to turn on service control Otherwise select Disable This is the index number of the entry Services This is the service you may use to access the P 2812HNU 51c LAN Select the Enable check box for the corresponding services that you want to allow access to the P 2812HNU 51c from the LAN WAN Select the Enable check box for the corre...

Page 261: ...wing table describes the fields in this screen Table 92 IP Address LABEL DESCRIPTION Access Control Mode Select Enable to activate the secured client list Select Disable to disable the list without deleting it IP Address This is the IP address of the trusted computer from which you can manage the P 2812HNU 51c Remove Select this check box and click the Remove button to delete this entry from the P...

Page 262: ...ure 122 IP Address Add The following table describes the fields in this screen Table 93 IP Address Add LABEL DESCRIPTION IP Address Enter the IP address of the trusted computer from which you can manage the P 2812HNU 51c Apply Save Click this button to save your changes back to the P 2812HNU 51c Back Click this button to return to the previous screen without saving ...

Page 263: ...19 3 on page 264 19 2 What You Need to Know How do I know if I m using UPnP UPnP hardware is identified as an icon in the Network Connections folder Windows XP Each UPnP compatible device installed on your network will appear as a separate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device NAT Traversal UPnP NAT traversal automates the p...

Page 264: ...evice joins a network it announces its presence with a multicast message For security reasons the P 2812HNU 51c allows multicast messages on the LAN only All UPnP enabled devices may communicate freely with each other without additional configuration Disable UPnP if this is not your intention UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP Implement...

Page 265: ...ve Programs 2 Click on the Windows Setup tab and select Communication in the Components selection box Click Details Figure 124 Add Remove Programs Windows Setup Communication Table 94 Advanced UPnP LABEL DESCRIPTION Activate Universal Plug and Play UPnP Feature Select this check box to enable UPnP Be aware that anyone could use a UPnP application to open the web configurator s login screen without...

Page 266: ...ents selection box Figure 125 Add Remove Programs Windows Setup Communication Components 4 Click OK to go back to the Add Remove Programs Properties window and click Next 5 Restart the computer when prompted Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start and Control Panel 2 Double click Network Connections ...

Page 267: ...w click Advanced in the main menu and select Optional Networking Components Figure 126 Network Connections 4 The Windows Optional Networking Components Wizard window displays Select Networking Service in the Components selection box and click Details Figure 127 Windows Optional Networking Components Wizard ...

Page 268: ...lick Next 19 5 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the P 2812HNU 51c Make sure the computer is connected to a LAN port of the P 2812HNU 51c Turn on your computer and the P 2812HNU 51c Auto discover Your UPnP enabled Network Device 1 Click Start and Control Panel Do...

Page 269: ... User s Guide 269 2 Right click the icon and select Properties Figure 129 Network Connections 3 In the Internet Connection Properties window click Settings to see the port mappings there were automatically created Figure 130 Internet Connection Properties ...

Page 270: ...the port mappings or click Add to manually add port mappings Figure 131 Internet Connection Properties Advanced Settings Figure 132 Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled device is disconnected from your computer all port mappings will be deleted automatically ...

Page 271: ...lay your current Internet connection status Figure 134 Internet Connection Status Web Configurator Easy Access With UPnP you can access the web based configurator on the P 2812HNU 51c without finding out the IP address of the P 2812HNU 51c first This comes helpful if you do not know the IP address of the P 2812HNU 51c Follow the steps below to access the web configurator 1 Click Start and then Con...

Page 272: ...sal Plug and Play UPnP P 2812HNU 51c User s Guide 272 3 Select My Network Places under Other Places Figure 135 Network Connections 4 An icon with the description for each UPnP enabled device displays under Local Network ...

Page 273: ...nd select Invoke The web configurator login screen displays Figure 136 Network Connections My Network Places 6 Right click on the icon for your P 2812HNU 51c and select Properties A properties window displays with basic information about the P 2812HNU 51c Figure 137 Network Connections My Network Places Properties Example ...

Page 274: ...Chapter 19 Universal Plug and Play UPnP P 2812HNU 51c User s Guide 274 ...

Page 275: ...r The Time Restriction screen lets you give different time restrictions to each user of your network Section 20 2 on page 275 The URL Filter screen lets you restrict home network users from viewing inappropriate websites Section 20 3 on page 277 20 2 The Time Restriction Screen Use this screen to view the schedules and enable parental control on a specific user during certain periods Click Advance...

Page 276: ...s shows the index number of the schedule Active Select the check box to enable the schedule username This shows the name of the user MAC This shows the MAC address of the LAN user s computer to which this schedule applies Mon Sun x indicates the day s on which parental control is enabled Start This shows the time when the schedule starts Stop This shows the time when the schedule ends Modify Click...

Page 277: ...able 96 Time Restriction Configuration LABEL DESCRIPTION User Name Enter the name of the user MAC Address Enter the MAC address of the LAN user s computer to which this schedule applies Days of the week Select check boxes for the days that you want the P 2812HNU 51c to perform parental control Start Blocking Time End Blocking Time Enter the time period of each day in 24 hour format during which pa...

Page 278: ... ones listed below This is the index number of the rule Active Select the check box to enable the filtering rule Address This is the URL of the web site in this rule Port This is the port number the web server uses to forward HTTP traffic Modify Click the Edit icon to go to the screen where you can edit the rule Click the Remove icon to delete an existing rule Add Click Add to create a new rule Ap...

Page 279: ...up Screen You can manually add a LAN interface to a new group Alternatively you can have the P 2812HNU 51c automatically add the incoming traffic and the LAN interface on which traffic is received to the new group when its source MAC address or DHCP option information matches the predefined filtering criteria Use the LAN screen to configure the private IP addresses the DHCP server on the P 2812HNU...

Page 280: ...up to open the following screen Figure 143 Interface Group The following table describes the fields in this screen Table 99 Interface Grouping LABEL DESCRIPTION This shows the index number of the entry Group Name This shows the descriptive name of the group WAN Interface This shows the WAN interfaces in the group LAN Interfaces This shows the LAN interfaces in the group Criteria This shows the fil...

Page 281: ...face Group screen to open the following screen Use this screen to create a new interface group Note An interface can belong to a group only Figure 144 Interface Group Configuration Remove Click the Remove icon to delete the group Add Click this button to create a new group Table 99 Interface Grouping continued LABEL DESCRIPTION ...

Page 282: ...lable LAN Interfaces Select a LAN or wireless LAN interface in the Available LAN Interfaces and use the left facing arrow to move it to the Grouped LAN Interfaces to add the interface to this group To remove a LAN or wireless LAN interface from the Grouped LAN Interfaces use the righ facing arrow This shows the index number of the rule Filter Criteria This shows the filtering criteria The LAN inte...

Page 283: ...t identifies the device in the DUID field Hardware type Enter the 16 bit hardware type of the device from which the traffic comes For example Ethernet is 1 and Experimental Ethernet is 2 Time Enter the time in seconds since midnight UTC January 1 2000 the DUID is generated Link layer address Enter the MAC address of the device Enterprise number Enter the vendor s 32 bit enterprise number registere...

Page 284: ...Chapter 21 Interface Group P 2812HNU 51c User s Guide 284 ...

Page 285: ...timeout interval 22 1 1 What You Can Do in this Chapter The General screen lets you configure system settings Section 22 2 on page 285 The Time Setting screen lets you set the system time Section 22 3 on page 286 22 2 The General Screen Use the General screen to configure system settings such as the system password Click Maintenance System to open the General screen Figure 146 Maintenance System G...

Page 286: ...stem Genera LABEL DESCRIPTION UserName Type the user name you use to access the system Old Password Type the default password or the existing password you use to access the system in this field New Password Type your new system password up to 30 characters Note that as you type a password the screen displays a for each character you type After you change the password use the new password to access...

Page 287: ...er Select this option to have the P 2812HNU 51c get the time and date from the time server you specified below First NTP time server Second NTP time server Third NTP time server Fourth NTP time server Fifth NTP time server Select an NTP time server from the drop down list box Otherwise select Other and enter the IP address or URL up to 20 extended ASCII characters in length of your time server Sel...

Page 288: ...Chapter 22 System Settings P 2812HNU 51c User s Guide 288 ...

Page 289: ...ver 23 1 1 What You Can Do in this Chapter The View Log screen lets you see the logs for the categories that you selected in the Log Settings screen Section 23 2 on page 289 The Log Settings screen lets you configure to where the P 2812HNU 51c is to send logs and which logs and or immediate alerts the P 2812HNU 51c is to record Section 23 3 on page 290 23 2 The View Log Screen Click Maintenance Lo...

Page 290: ...e P 2812HNU 51c is to record and display Table 104 Maintenance Logs View Log LABEL DESCRIPTION Display Select a severity level of logs to view The P 2812HNU 51c displays the logs with the severity level equal to or higher than what you selected This field is a sequential value and is not associated with a specific entry Date Time This field displays the time the log was recorded Severity This fiel...

Page 291: ...he P 2812HNU 51c to display record and send to the log server The P 2812HNU 51c displays and records the logs with the severity level equal to or higher than what you selected Mode Select Local to record the logs and store them in the local memory of the P 2812HNU 51c only Select Remote to send logs to the specified log server Select Both to record the logs and store them in the local memory and a...

Page 292: ...Chapter 23 Logs P 2812HNU 51c User s Guide 292 ...

Page 293: ...y upload the factory default configuration file if you want to return the device to the original default settings The firmware determines the device s available features and functionality You can download new firmware releases from your nearest ZyXEL FTP site or www zyxel com to use to upgrade your device s performance Only use firmware for your device s specific model Refer to the label on the bo...

Page 294: ...re upload is in progress Figure 150 Maintenance Tools Firmware The following table describes the labels in this screen Table 106 Maintenance Tools Firmware LABEL DESCRIPTION Current Firmware Version This is the present Firmware version and the date created File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click Browse to find the bin file...

Page 295: ...c automatically restarts in this time causing a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 152 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the Status screen If the upload was not successful the following screen will appear Click Tools to go back to the Firmware screen Figure...

Page 296: ...on Backup Configuration Backup Configuration allows you to back up save the P 2812HNU 51c s current configuration to a file on your computer Once your P 2812HNU 51c is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes The backup configuration file will be useful in case you need to return to your previous setti...

Page 297: ...ork disconnect In some operating systems you may see the following icon on your desktop Figure 156 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address 192 168 1 1 See Appendix B on page 337 for details on how to set up your computer s IP address Table...

Page 298: ...on to clear all user entered configuration information and return the P 2812HNU 51c to its factory defaults The following warning screen appears Figure 158 Reset Warning Message You can also press the RESET button on the rear panel to reset the factory defaults of your P 2812HNU 51c Refer to Section 1 6 on page 27 for more information on the RESET button 24 4 The Restart Screen System restart allo...

Page 299: ...24 Tools P 2812HNU 51c User s Guide 299 Click Maintenance Tools Restart Click Restart to have the P 2812HNU 51c reboot This does not affect the P 2812HNU 51c s configuration Figure 159 Maintenance Tools Restart ...

Page 300: ...Chapter 24 Tools P 2812HNU 51c User s Guide 300 ...

Page 301: ...y faults in bridged LANs 25 1 1 What You Can Do in this Chapter The General screen lets you ping an IP address or trace the route packets take to a host Section 25 3 on page 302 The 802 1ag screen lets you perform CFM actions Section 25 4 on page 303 The OAM Ping Test screen lets you send an ATM OAM Operation Administration and Maintenance packet to verify the connectivity of a specific PVC Sectio...

Page 302: ...ing to the line connectivity status report 25 3 The General Diagnostic Screen Click Maintenance Diagnostic to open the screen shown next Ping and traceroute help check availability of remote hosts and also help troubleshoot network or Internet connections Figure 160 Maintenance Diagnostic General The following table describes the fields in this screen Table 108 Maintenance Diagnostic General LABEL...

Page 303: ...le describes the fields in this screen Table 109 Maintenance Diagnostic 802 1ag LABEL DESCRIPTION 802 1ag Connectivity Fault Management Maintenance Domain MD Name Type a name of up to 39 printable English keyboard characters for this MD The combined length of the MD Name and MA name must be less or equal to 44bytes Maintenance Domain MD Level Select a level 0 7 under which you want to create an MA...

Page 304: ...ds a unique ID number within an MD The MEP ID is to identify an MEP port used when you perform a CFM action Status Continuity Check Message CCM This shows how many Connectivity Check Messages CCMs are sent and if there is any invalid CCM or cross connect CCM Loopback Message LBM This shows how many Loop Back Messages LBMs are sent and if there is any inorder or outorder Loop Back Response LBR rece...

Page 305: ... Identifier identifies a channel within a virtual path A series of virtual paths make up a virtual circuit F4 cells operate at the virtual path VP level while F5 cells operate at the virtual channel VC level F4 cells use the same VPI as the user data cells on VP connections but use different predefined VCI values F5 cells use the same VPI and VCI as the user data cells on the VC connections and ar...

Page 306: ...d must also support ATM F4 and or F5 to use this test Note This screen is available only when you configure an ATM layer 2 interface Figure 163 Maintenance Diagnostic OAM Ping Test The following table describes the fields in this screen Table 110 Maintenance Diagnostic OAM Ping Test LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test F4 segment Press this to perform an OA...

Page 307: ...s LAN Troubleshooting 26 1 Power Hardware Connections and LEDs The P 2812HNU 51c does not turn on None of the LEDs turn on 1 Make sure the P 2812HNU 51c is turned on 2 Make sure you are using the power adaptor or cord included with the P 2812HNU 51c 3 Make sure the power adaptor or cord is connected to the P 2812HNU 51c and plugged in to an appropriate power source Make sure the power source is tu...

Page 308: ...tten it you might get the IP address of the P 2812HNU 51c by looking up the IP address of the default gateway for your computer To do this in most Windows computers click Start Run enter cmd and then enter ipconfig The IP address of the Default Gateway might be the IP address of the P 2812HNU 51c it depends on the network so enter this IP address in your Internet browser 3 If this does not work yo...

Page 309: ...act the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions If your computer is connected to the WAN port or is connected wirelessly use a computer that is connected to an ETHERNET port Try to access the P 2812HNU 51c using another service such as Telnet If you can access the P 2812HNU 51c check the remote management settings and firewall rules to find out w...

Page 310: ... a LAN port in the default group Otherwise you need to use the P 2812HNU 51c s LAN IP address for the new group to access the P 2812HNU 51c again 26 3 Internet Access I cannot access the Internet 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 5 on page 25 2 Make sure you entered your ISP account information correctly in the ...

Page 311: ...e back of the P 2812HNU 51c to the WAN side to have the P 2812HNU 51c use the Ethernet WAN port for Internet access 2 Make sure you connect the Ethernet WAN port to a DSL modem or router in your netwrok 3 Make sure you configured a proper Ethernet layer 2 interface and WAN services with the Internet account information provided by your ISP 4 If you set up a WAN connection using bridging service ma...

Page 312: ...ot of information try closing some programs that use the Internet especially peer to peer applications 2 Check the signal strength If the signal strength is low try moving your computer closer to the P 2812HNU 51c if possible and look around to see if there are any devices that might be interfering with the wireless network for example microwaves other wireless networks and so on 3 Turn the P 2812...

Page 313: ...onfigured 2 The PHONE light should come on Make sure that your telephone is connected to the PHONE port 3 You can also check the VoIP status in the Status screen 26 5 USB Device Connection The P 2812HNU 51c fails to detect my USB device 1 Disconnect the USB device 2 Reboot the P 2812HNU 51c 3 If you are connecting a USB hard drive that comes with an external power supply make sure it is connected ...

Page 314: ...e P 2812HNU 51c 5 Check that both the P 2812HNU 51c and your wireless station are using the same wireless and wireless security settings 6 Check if MAC Filter is configured to deny wireless access to certain MAC addresses to the P 2812HNU 51c See Chapter 7 Wireless LAN in the User s Guide for more information I cannot use WDS connection 1 You can use WDS only when WPS is disabled or wireless secur...

Page 315: ...A Built in Switch Four auto negotiating auto MDI MDI X 10 100 1000 Mbps RJ 45 Ethernet ports RESET Button Restores factory defaults Antennas One attached external dipole antenna 2dBi One internal antenna 2dBi WPS Button 1 second turn on or off WLAN 5 seconds enable WPS Wi Fi Protected Setup PHONE Ports 2 RJ 11 FXS POTS ports USB Ports Two USB v2 0 ports for file sharing Operation Temperature 0º C ...

Page 316: ...or web server for example on your network you can use this feature to let people access it from the Internet DHCP Dynamic Host Configuration Protocol Use this feature to have the P 2812HNU 51c assign IP addresses an IP default gateway and DNS servers to computers on your network Your device can also act as a surrogate DHCP server DHCP Relay where it relays IP address assignment from the actual rea...

Page 317: ...to manage PPPoE clients on individual computers Other PPPoE Features PPPoE idle time out PPPoE dial on demand Packet Filters Your device s packet filtering function allows added network security and management VDSL Standards VDSL line coding ITU T G 993 2 DMT modulation DSL handshake procedure protocol ITU T G 994 1 DSL physical layer management protocol ITU T G 997 1 VDSL band plan 997 and 998 Su...

Page 318: ...Ethernet RFC 2516 MAC encapsulated routing ENET encapsulation VC based and LLC based multiplexing Up to 8 PVCs Permanent Virtual Circuits I 610 F4 F5 OAM Other Protocol Support PPP Point to Point Protocol link layer protocol Transparent bridging for unsupported network layer protocols RIP I RIP II ICMP ATM QoS SNMP v1 and v2c with MIB II support RFC 1213 IP Multicasting IGMP v1 and v2 IGMP Proxy M...

Page 319: ...eloped by working group 11 of the IEEE LAN MAN Standards Committee IEEE 802 IEEE 802 11b Uses the 2 4 gigahertz GHz band IEEE 802 11g Uses the 2 4 gigahertz GHz band IEEE 802 11d Standard for Local and Metropolitan Area Networks Media Access Control MAC Bridges IEEE 802 11x Port Based Network Access Control IEEE 802 11e QoS IEEE 802 11 e Wireless LAN for Quality of Service ANSI T1 413 Issue 2 Asym...

Page 320: ...Chapter 27 Product Specifications P 2812HNU 51c User s Guide 320 ...

Page 321: ...vanced utilities are also discussed arp route and netstat Note All command examples here use the Microsoft Windows operating system version of the commands Before Getting Started Before using the commands described in this section ensure that you have the TCP IP networking component installed and properly configured for your network adapter Click Start Control Panel Network Connections and then op...

Page 322: ...ace To open the Windows command line interface 1 Click Start Run 2 In the Run dialog box enter cmd then click OK 3 The Command Prompt window opens Command Syntax and Parameters Command descriptions always indicate the default syntax you must use when entering them on the command line Some commands require additional parameters in order to execute properly Some may have optional parameters Paramete...

Page 323: ...and in some cases adjust them When you have network connectivity problems the first thing you should do is run this command to ensure that your device or computer does in fact have an IP address as well as display the source of that IP address such as a default gateway Syntax ipconfig Parameters ipconfig release renew There are other parameters but these are the only ones you need to use for now T...

Page 324: ...IP address for whatever reason Use the release parameter followed by renew Ethernet adapter Local Area Connection Media State Media disconnected Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Default Gateway C ipconfig release Windows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Address 0 0 0...

Page 325: ... ping test fairly representative of a typical network connection The default packet size on Windows is 32 bytes Time is the number of milliseconds the data requires to make the roundtrip journey from your computer to the destination host and back again The lower the number the faster the connection between the two points Note Some hosts are deliberately configured to not respond to ping requests A...

Page 326: ...e connection between the start and end points of the connection on the receiving end To determine where the slowdown is you may need to use traceroute C ping www example com Pinging www example com 192 0 32 10 with 32 bytes of data Request timed out Request timed out Request timed out Request timed out Ping statistics for 192 0 32 10 Packets Sent 4 Received 0 Lost 4 100 loss C C ping w 8000 www ex...

Page 327: ...r connection issues are happening locally somewhere in transit or at the destination end Each step in the chain of connections is called a hop The time it takes for a server at any given hop to pass the data packet is called latency and is measured in milliseconds When a tracert command is run it sends out a burst of three data packets per hop The results table therefore always displays three valu...

Page 328: ...you were having connection problems this would most likely be the source of it For whatever reason the server in Japan has a less than optimal connection with its counterpart in the United States C tracert www example com Tracing route to www example com 192 0 32 10 over a maximum of 30 hops 1 1 ms 1 ms 1 ms 172 23 x x 2 5 ms 4 ms 5 ms 172 23 x x 3 4 ms 4 ms 4 ms 172 23 x x 4 5 ms 4 ms 6 ms 219 87...

Page 329: ...ddress responds When you use ping to check the connection to a computer no response does not mean the computer is not alive on the network The destination computer may be configured not to respond to any ping requests However you can use the arp a command line utility to check the IP addresses and MAC addresses of your neighboring computers or devices Syntax arp a Parameters arp d inet_addr s inet...

Page 330: ... table may keep a wrong MAC address until the entry expires You can then manually update the ARP table To update the ARP table 1 Type arp d inet_addr or just use arp d to remove all entries in the ARP table For example type arp d 172 16 1 5 2 Type ping 172 16 1 5 and press Enter 3 Next use the arp a command again to check whether the MAC address matches what you expected If it does not another com...

Page 331: ...55 127 0 0 1 127 0 0 1 1 172 16 255 255 255 255 255 255 172 16 1 32 172 16 1 32 1 224 0 0 0 224 0 0 0 172 16 1 32 172 16 1 32 1 255 255 255 255 255 255 255 255 172 16 1 32 172 16 1 32 1 Default Gateway 172 16 1 254 Persistent Routes None Table 114 route print Command Output OUTPUT DESCRIPTION Active Routes This section lists all available routes that are automatically learned from the network Netw...

Page 332: ...sistent route to the destination 172 16 3 0 with the subnet mask of 255 255 255 0 and the next hop address of 172 16 1 252 type route p add 172 16 3 0 mask 255 255 255 0 172 16 1 252 Note that the metric will be set to 1 if you do not specify any Netmask The destination subnet mask of packets that this route entry is to route The subnet mask can be the apropriate subnet mask for a network 255 255 ...

Page 333: ...ow the typical output of this command C netstat Active Connections Proto Local Address Foreign Address State TCP COMPUTERA 1056 localhost 5091 ESTABLISHED TCP COMPUTERA 1091 localhost 27015 ESTABLISHED TCP COMPUTERA 1120 localhost 40000 ESTABLISHED TCP COMPUTERA 3243 localhost 3244 ESTABLISHED TCP COMPUTERA 3244 localhost 3243 ESTABLISHED TCP COMPUTERA 3246 localhost 3247 ESTABLISHED TCP COMPUTERA...

Page 334: ...A 40000 localhost 1120 ESTABLISHED TCP COMPUTERA netbios ssn 172 16 x x ZyXEL com 0 LISTENING TCP COMPUTERA 4177 172 16 x x 1155 ESTABLISHED TCP COMPUTERA 4178 172 16 x x 1155 ESTABLISHED TCP COMPUTERA 4180 172 16 x x 1155 ESTABLISHED TCP COMPUTERA 4182 172 16 x x 1025 ESTABLISHED TCP COMPUTERA 4317 NAS microsoft ds ESTABLISHED TCP COMPUTERA 4539 NAS microsoft ds TIME_WAIT TCP COMPUTERA netbios ss...

Page 335: ... Additionally you can use netstat e to display Ethernet statistics as the following example C netstat e Interface Statistics Received Sent Bytes 25250033 7060325 Unicast packets 38838 34744 Non unicast packets 38227 175 Discards 0 0 Errors 0 35 Unknown protocols 787 ...

Page 336: ...Appendix A Network Troubleshooting P 2812HNU 51c User s Guide 336 ...

Page 337: ...OS X and all versions of UNIX LINUX include the software components you need to use TCP IP on your computer If you manually assign IP information instead of using a dynamic IP make sure that your network s computers have IP addresses that place them in the same subnet In this appendix you can set up an IP address for Windows XP NT 2000 on page 337 Windows Vista on page 341 Windows 7 on page 345 Ma...

Page 338: ...ng Up Your Computer s IP Address P 2812HNU 51c User s Guide 338 1 Click Start Control Panel Figure 165 Windows XP Start Menu 2 In the Control Panel click the Network Connections icon Figure 166 Windows XP Control Panel ...

Page 339: ...uide 339 3 Right click Local Area Connection and then select Properties Figure 167 Windows XP Control Panel Network Connections Properties 4 On the General tab select Internet Protocol TCP IP and then click Properties Figure 168 Windows XP Local Area Connection Properties ...

Page 340: ... Select Use the following IP Address and fill in the IP address Subnet mask and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided 7 Click OK to close the Internet Protocol TCP IP Properties window 8 Click OK to close the L...

Page 341: ...l Network Connections right click a network connection click Status and then click the Support tab to view your IP address and connection information Windows Vista This section shows screens from Windows Vista Professional 1 Click Start Control Panel Figure 170 Windows Vista Start Menu 2 In the Control Panel click the Network and Internet icon Figure 171 Windows Vista Control Panel ...

Page 342: ... Network And Internet 4 Click Manage network connections Figure 173 Windows Vista Network and Sharing Center 5 Right click Local Area Connection and then select Properties Figure 174 Windows Vista Network and Sharing Center Note During this procedure click Continue whenever Windows displays a screen saying that it needs your permission to continue ...

Page 343: ...ndix B Setting Up Your Computer s IP Address P 2812HNU 51c User s Guide 343 6 Select Internet Protocol Version 4 TCP IPv4 and then select Properties Figure 175 Windows Vista Local Area Connection Properties ...

Page 344: ...cally Select Use the following IP Address and fill in the IP address Subnet mask and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided Click Advanced 9 Click OK to close the Internet Protocol TCP IP Properties window 10 Cl...

Page 345: ...onnections right click a network connection click Status and then click the Support tab to view your IP address and connection information Windows 7 This section shows screens from Windows 7 Enterprise 1 Click Start Control Panel Figure 177 Windows 7 Start Menu 2 In the Control Panel click View network status and tasks under the Network and Internet category Figure 178 Windows 7 Control Panel ...

Page 346: ...ter settings Figure 179 Windows 7 Network And Sharing Center 4 Double click Local Area Connection and then select Properties Figure 180 Windows 7 Local Area Connection Status Note During this procedure click Continue whenever Windows displays a screen saying that it needs your permission to continue ...

Page 347: ...pendix B Setting Up Your Computer s IP Address P 2812HNU 51c User s Guide 347 5 Select Internet Protocol Version 4 TCP IPv4 and then select Properties Figure 181 Windows 7 Local Area Connection Properties ...

Page 348: ...ss Subnet mask and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided Click Advanced if you want to configure advanced settings for IP DNS and WINS 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click ...

Page 349: ...3 The IP settings are displayed as follows Figure 183 Windows 7 Internet Protocol Version 4 TCP IPv4 Properties Mac OS X 10 3 and 10 4 The screens in this section are from Mac OS X 10 4 but can also apply to 10 3 1 Click Apple System Preferences Figure 184 Mac OS X 10 4 Apple Menu ...

Page 350: ...50 2 In the System Preferences window click the Network icon Figure 185 Mac OS X 10 4 System Preferences 3 When the Network preferences pane opens select Built in Ethernet from the network connection type list and then click Configure Figure 186 Mac OS X 10 4 Network Preferences ...

Page 351: ...ngs select Using DHCP from the Configure IPv4 list in the TCP IP tab Figure 187 Mac OS X 10 4 Network Preferences TCP IP Tab 5 For statically assigned settings do the following From the Configure IPv4 list select Manually In the IP Address field type your IP address In the Subnet Mask field type your subnet mask ...

Page 352: ... of your device Figure 188 Mac OS X 10 4 Network Preferences Ethernet 6 Click Apply Now and close the window Verifying Settings Check your TCP IP properties by clicking Applications Utilities Network Utilities and then selecting the appropriate Network Interface from the Info tab Figure 189 Mac OS X 10 4 Network Utility ...

Page 353: ...Guide 353 Mac OS X 10 5 and 10 6 The screens in this section are from Mac OS X 10 5 but can also apply to 10 6 1 Click Apple System Preferences Figure 190 Mac OS X 10 5 Apple Menu 2 In System Preferences click the Network icon Figure 191 Mac OS X 10 5 Systems Preferences ...

Page 354: ...st of available connection types Figure 192 Mac OS X 10 5 Network Preferences Ethernet 4 From the Configure list select Using DHCP for dynamically assigned settings 5 For statically assigned settings do the following From the Configure list select Manually In the IP Address field enter your IP address In the Subnet Mask field enter your subnet mask ...

Page 355: ...ing Up Your Computer s IP Address P 2812HNU 51c User s Guide 355 In the Router field enter the IP address of your P 2812HNU 51c Figure 193 Mac OS X 10 5 Network Preferences Ethernet 6 Click Apply and close the window ...

Page 356: ...inux Ubuntu 8 GNOME This section shows you how to configure your computer s TCP IP settings in the GNU Object Model Environment GNOME using the Ubuntu 8 Linux distribution The procedure screens and file locations may vary depending on your specific distribution release version and individual configuration The following screens use the default Ubuntu 8 installation Note Make sure you are logged in ...

Page 357: ...re 195 Ubuntu 8 System Administration Menu 2 When the Network Settings window opens click Unlock to open the Authenticate window By default the Unlock button is greyed out until clicked You cannot make changes to your configuration unless you first enter your admin password Figure 196 Ubuntu 8 Network Settings Connections ...

Page 358: ...cate window enter your admin account name and password then click the Authenticate button Figure 197 Ubuntu 8 Administrator Account Authentication 4 In the Network Settings window select the connection that you want to configure then click Properties Figure 198 Ubuntu 8 Network Settings Connections ...

Page 359: ...perties In the Configuration list select Automatic Configuration DHCP if you have a dynamic IP address In the Configuration list select Static IP address if you have a static IP address Fill in the IP address Subnet mask and Gateway address fields 6 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen ...

Page 360: ...n the Network Settings window and then enter the DNS server information in the fields provided Figure 200 Ubuntu 8 Network Settings DNS 8 Click the Close button to apply the changes Verifying Settings Check your TCP IP properties by clicking System Administration Network Tools and then selecting the appropriate Network device from the Devices ...

Page 361: ... to configure your computer s TCP IP settings in the K Desktop Environment KDE using the openSUSE 10 3 Linux distribution The procedure screens and file locations may vary depending on your specific distribution release version and individual configuration The following screens use the default openSUSE 10 3 installation Note Make sure you are logged in as the root administrator Follow the steps be...

Page 362: ...2812HNU 51c User s Guide 362 1 Click K Menu Computer Administrator Settings YaST Figure 202 openSUSE 10 3 K Menu Computer Menu 2 When the Run as Root KDE su dialog opens enter the admin password and click OK Figure 203 openSUSE 10 3 K Menu Computer Menu ...

Page 363: ...window opens select Network Devices and then click the Network Card icon Figure 204 openSUSE 10 3 YaST Control Center 4 When the Network Settings window opens click the Overview tab select the appropriate connection Name from the list and then click the Configure button Figure 205 openSUSE 10 3 Network Settings ...

Page 364: ...lick the Address tab Figure 206 openSUSE 10 3 Network Card Setup 6 Select Dynamic Address DHCP if you have a dynamic IP address Select Statically assigned IP Address if you have a static IP address Fill in the IP address Subnet mask and Hostname fields 7 Click Next to save the changes and close the Network Card Setup window ...

Page 365: ...gs and then enter the DNS server information in the fields provided Figure 207 openSUSE 10 3 Network Settings 9 Click Finish to save your settings and close the window Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP IP properties From the Options sub menu select Show Connection Information Figure 208 openSUSE 10 3 KNetwork Manager ...

Page 366: ...puter s IP Address P 2812HNU 51c User s Guide 366 When the Connection Status KNetwork Manager window opens click the Statistics tab to see if your connection is working properly Figure 209 openSUSE Connection Status KNetwork Manager ...

Page 367: ...net Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address Disable Pop up Blockers 1 In Internet Explorer select Tools Pop up Blocker and then select Turn Off Pop up Bloc...

Page 368: ... in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 211 Internet Options Privacy 3 Click Apply to save this setting Enable Pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Internet Options and then the Privacy tab ...

Page 369: ...2812HNU 51c User s Guide 369 2 Select Settings to open the Pop up Blocker Settings screen Figure 212 Internet Options Privacy 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 ...

Page 370: ...k Add to move the IP address to the list of Allowed sites Figure 213 Pop up Blocker Settings 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts are allowed ...

Page 371: ...plorer click Tools Internet Options and then the Security tab Figure 214 Internet Options Security 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure that Enable is selected the default ...

Page 372: ...ick OK to close the window Figure 215 Security Settings Java Scripting Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java permissions make sure that a safety level is selected ...

Page 373: ...ions P 2812HNU 51c User s Guide 373 5 Click OK to close the window Figure 216 Security Settings Java JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sure that Use Java 2 for applet under Java Sun is selected ...

Page 374: ...ck OK to close the window Figure 217 Java Sun Mozilla Firefox Mozilla Firefox 2 0 screens are used here Screens for other versions may vary You can enable Java Javascripts and pop ups in one screen Click Tools then click Options in the screen that appears Figure 218 Mozilla Firefox Tools Options ...

Page 375: ...p up Windows JavaScripts and Java Permissions P 2812HNU 51c User s Guide 375 Click Content to show the screen below Select the check boxes as shown in the following screen Figure 219 Mozilla Firefox Content Security ...

Page 376: ...Appendix C Pop up Windows JavaScripts and Java Permissions P 2812HNU 51c User s Guide 376 ...

Page 377: ...ber and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on th...

Page 378: ...logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of...

Page 379: ... number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address with host IDs of all ones is the broadcast address for that network 192 168 1 255 with a 24 bit subnet mask for example As these two IP addresses cannot be used for individual hosts calculate the maxi...

Page 380: ...ng You can use subnetting to divide one network into multiple sub networks In the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons In this example the company network address is 192 168 1 0 The first three octets of the address 192 168 1 are the network number and the remaining octet is the ho...

Page 381: ...of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 The following figure shows the company network after subnetting There are now two sub networks A and B Figure 222 Subnetting Example After Subnett...

Page 382: ...bnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits giving 26 2 or 62 hosts for each subnet a host ID of all zeroes is the subnet itself all ones is the subnet s broadcast address Table 120 Subnet 1 IP SUBNET MASK NETWORK NUMBER LAST OCTET B...

Page 383: ...net Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 123 Subnet 4 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 192 IP Address Binary 11000000 10101000 00000001 11000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192...

Page 384: ...ETS NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31 128 1 Table 126 16 bit Network Number Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 32766 2 255 255 192 0 18 4 16382 3 255 255 224 0 19 8 819...

Page 385: ...t you entered You don t need to change the subnet mask computed by the P 2812HNU 51c unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Internet Assigned Num...

Page 386: ...uter A has a static or fixed IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client Neither can access the Internet This problem can be solved by assigning a different static IP address to computer A or setting computer A to obtain an IP address automatically Figure 223 Conflicting Computer IP Addresses Example Conflicting Router IP Addresses ...

Page 387: ... Router IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address In the following example the computer and the router s LAN port both use 192 168 1 1 as the IP address The computer cannot access the Internet This problem can be solved by assigning a different IP address to the computer or the router s LAN port Figure 225 Conflic...

Page 388: ...Appendix D IP Addresses and Subnetting P 2812HNU 51c User s Guide 388 ...

Page 389: ...s an independent Ad hoc WLAN that connects a set of computers with wireless adapters A B C Any time two or more wireless adapters are within range of each other they can set up an independent network which is commonly referred to as an ad hoc network or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an ad hoc wireless...

Page 390: ...rk but cannot communicate with each other Figure 227 Basic Service Set ESS An Extended Service Set ESS consists of a series of overlapping BSSs each containing an access point with each access point connected together by a wired network This wired connection between APs is called a Distribution System DS This type of wireless LAN topology is called an Infrastructure WLAN The Access Points not only...

Page 391: ...ld use a channel different from an adjacent AP access point to reduce interference Interference occurs when radio signals from different access points overlap causing interference and degrading performance Adjacent channels partially overlap however To avoid interference due to overlap your AP should be on a channel at least five channels away from a channel that an adjacent AP is using For exampl...

Page 392: ... that wants to transmit this frame must first send an RTS Request To Send message to the AP for permission to send it The AP then responds with a CTS Clear to Send message to all other stations within its range to notify them to defer their transmission It also reserves and confirms with the requesting station the time frame for the requested transmission Stations can send frames smaller than the ...

Page 393: ...onization field in a packet Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11 compliant wireless adapters support long preamble but not all support short preamble Use long preamble if you are unsure what preamble mode other wireless devices on the network support and to provide more reliable communications in busy wireless networks ...

Page 394: ... your P 2812HNU 51c Note You must enable the same wireless security settings on the P 2812HNU 51c and on all wireless clients that you want to associate with it IEEE 802 1x In June 2001 the IEEE 802 1x standard was designed to extend the features of IEEE 802 11 to support extended authentication as well as providing additional Table 127 IEEE 802 11g DATA RATE MBPS MODULATION 1 DBPSK Differential B...

Page 395: ...DIUS server The RADIUS server handles the following tasks Authentication Determines the identity of the users Authorization Determines the network services available to authenticated users once they are connected to the network Accounting Keeps track of the client s network activity RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the net...

Page 396: ...ith an EAP compatible RADIUS server an access point helps a wireless station and a RADIUS server perform authentication The type of authentication you use depends on the RADIUS server and an intermediary AP s that supports IEEE 802 1x For EAP TLS authentication type you must first have a wired connection to the network and obtain the certificate s from a certificate authority CA A certificate also...

Page 397: ...authentication is then done by sending username and password through the secure connection thus client identity is protected For client authentication EAP TTLS supports EAP methods and legacy authentication methods such as PAP CHAP MS CHAP and MS CHAP v2 PEAP Protected EAP Like EAP TTLS server side certificate authentication is used to establish a secure connection then use simple username and pas...

Page 398: ...e an external RADIUS server you should use WPA2 PSK WPA2 Pre Shared Key that only requires a single identical password entered into each access point wireless gateway and wireless client As long as the passwords match a wireless client will be granted access to a WLAN If the AP or the wireless clients do not support WPA2 just use WPA or WPA PSK depending on whether you have an external RADIUS serv...

Page 399: ...ing them The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC If they do not match it is assumed that the data has been tampered with and the packet is dropped By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism MIC with TKIP and AES it is more difficult to decrypt...

Page 400: ...t how to use WPA At the time of writing the most widely available supplicant is the WPA patch for Windows XP Funk Software s Odyssey client The Windows XP patch is a free download that adds WPA capability to Windows XP s built in Zero Configuration wireless client However you must run Windows XP to use it WPA 2 with RADIUS Application Example To set up WPA 2 you need the IP address of the RADIUS s...

Page 401: ...th RADIUS Application Example WPA 2 PSK Application Example A WPA 2 PSK application looks as follows 1 First enter identical passwords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters including spaces and symbols 2 The AP checks each wireless client s password and allows it to join the network only if the pas...

Page 402: ... each authentication method or key management protocol type MAC address filters are not dependent on how you configure these security features Table 130 Wireless Security Relational Matrix AUTHENTICATION METHOD KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802 1X Open None No Disable Enable without Dynamic WEP Key Open WEP No Enable with Dynamic WEP Key Yes Enable without Dynami...

Page 403: ...enna s coverage area Antenna Gain Antenna gain measured in dB decibel is the increase in coverage within the RF beam width Higher antenna gain improves the range of the signal for better communications For an indoor site each 1 dB increase in antenna gain results in a range increase of approximately 2 5 For an unobstructed outdoor site each 1dB increase in gain results in a range increase of appro...

Page 404: ...rees very directional to 120 degrees less directional Directional antennas are ideal for hallways and outdoor point to point applications Positioning Antennas In general antennas should be mounted as high as practically possible and free of obstructions In point to point application position both antennas at the same height and in a direct line of sight to each other to attain the best performance...

Page 405: ...her information about port numbers If the Protocol is TCP UDP or TCP UDP this is the IP port number If the Protocol is USER this is the IP protocol number Description This is a brief explanation of the applications that use this service or the situations in which this service is used Table 131 Commonly Used Services NAME PROTOCOL PORT S DESCRIPTION AH IPSEC_TUNNEL User Defined 51 The IPSEC AH Auth...

Page 406: ...Internet Group Management Protocol is used when sending packets to a specific group of hosts IKE UDP 500 The Internet Key Exchange algorithm is used for key distribution and management IRC TCP UDP 6667 This is another popular Internet chat program MSN Messenger TCP 1863 Microsoft Networks messenger service uses this protocol NEW ICQ TCP 5190 An Internet chat program NEWS TCP 144 A protocol for new...

Page 407: ...s the message exchange standard for the Internet SMTP enables you to move messages from one e mail server to another SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP UDP 162 Traps for use with the SNMP RFC 1215 SQL NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems including mainframes midrange systems UNIX systems and...

Page 408: ...Transfer Protocol is an Internet file transfer protocol similar to FTP but uses the UDP User Datagram Protocol rather than TCP Transmission Control Protocol VDOLIVE TCP 7000 Another videoconferencing solution Table 131 Commonly Used Services continued NAME PROTOCOL PORT S DESCRIPTION ...

Page 409: ...ansferable license to use the program with which this license is distributed the Software including any documentation files accompanying the Software Documentation for internal business use only for up to the number of users specified in sales order and invoice You have the right to make one backup copy of the Software and Documentation solely for archival back up or disaster recovery purposes You...

Page 410: ...e or any part thereof nor shall you attempt to create the source code from the object code for the Software Except as and only to the extent expressly permitted in this License by applicable licensing terms governing use of the Open Sourced Components or by applicable law you may not market co brand private label or otherwise permit third parties to link to the Software or any part thereof You may...

Page 411: ...ENT JURISDICTION THEN ALL EXPRESS AND IMPLIED WARRANTIES SHALL BE LIMITED IN DURATION TO A PERIOD OF THIRTY 30 DAYS FROM THE DATE OF PURCHASE OF THE SOFTWARE AND NO WARRANTIES SHALL APPLY AFTER THAT PERIOD 7 Limitation of Liability IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES INCLUDING WITHOUT LIMITATION INDIRECT SPECIAL PUNITIVE OR EXEMPLA...

Page 412: ...cluding backup copies have been destroyed All provisions relating to confidentiality proprietary rights and non disclosure shall survive the termination of this Software License Agreement 11 General This License Agreement shall be construed interpreted and governed by the laws of Republic of China without regard to conflicts of laws provisions thereof The exclusive forum for any disputes arising o...

Page 413: ...231 Ppp 2 4 1 Samba 3 0 34 Udhcp 0 9 6 and zebra 0 93a under below GPL license 3RD PARTY SOFTWARE VERSION WEB ADDRESS OF THE SOFTWARE LICENSE TERM MIPS Linux kernel 2 6 21 5 http www linux mips org Bridge Utils 1 2 http bridge sourceforge net bftpd 1 0 24 http www bftpd org busybox 1 00 http www busybox net Dnsmasq 2 48 http www thekelleys org uk dnsmasq ebtables 2 0 6 http ebtables sourceforge ne...

Page 414: ... it if you want it that you can change the software or use pieces of it in new free programs and that you know you can do these things To protect your rights we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights These restrictions translate to certain responsibilities for you if you distribute copies of the software or if you modify it For e...

Page 415: ...es 1 You may copy and distribute verbatim copies of the Program s source code as you receive it in any medium provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty keep intact all the notices that refer to this License and to the absence of any warranty and give any other recipients of the Program a copy of this License al...

Page 416: ...1 and 2 above provided that you also do one of the following a Accompany it with the complete corresponding machine readable source code which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange or b Accompany it with a written offer valid for at least three years to give any third party for a charge no more than your cost of physical...

Page 417: ... 7 If as a consequence of a court judgment or allegation of patent infringement or for any other reason not limited to patent issues conditions are imposed on you whether by court order agreement or otherwise that contradict the conditions of this License they do not excuse you from the conditions of this License If you cannot distribute so as to satisfy simultaneously your obligations under this ...

Page 418: ...ution conditions are different write to the author to ask for permission For software which is copyrighted by the Free Software Foundation write to the Free Software Foundation we sometimes make exceptions for this Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally NO WARRAN...

Page 419: ... persons to whom the Software is furnished to do so subject to the following conditions The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software THE SOFTWARE IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND EXPRESS ORIMPLIED INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NONINFRI...

Page 420: ...mission of the OpenSSL Project 6 Redistributions of any form whatsoever must retain the following acknowledgment This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http www openssl org THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT AS IS AND ANY EXPRESSED OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND F...

Page 421: ...aimer 2 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution 3 All advertising materials mentioning features or use of this software must display the following acknowledgement This product includes cryptographic software written by Eric Young eay crypt...

Page 422: ...51c User s Guide 422 The licence and distribution terms for any publically available version or derivative of this code cannot be changed i e this code cannot simply be copied and put under another distribution licence including the GNU Public Licence ...

Page 423: ...on or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Your use of the P 2812HNU 51c is subject to the terms and conditions of any related service providers Tr...

Page 424: ...is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and the receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help FCC Radiation Exposure St...

Page 425: ... the bands 5250 5350 MHz and 5650 5850 MHz and these radars could cause interference and or damage to LE LAN devices IC Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment End users must follow the specific operating instructions for satisfying RF exposure compliance 注意 依據 低功率電波輻射性電機管理辦法 第十二條 經型式認證合格之低功率射頻電機 非經許可 公司 商號或使用...

Page 426: ...r either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act...

Page 427: ...king LEDs 26 broadcast 116 BSS 389 BYE request 193 C CA 217 397 call history 186 incoming calls 188 outgoing calls 187 call hold 200 202 call service mode 199 201 call transfer 201 202 call waiting 200 202 Canonical Format Indicator See CFI CBR Continuous Bit Rate 95 CCMs 301 certificate details 222 factory default 218 Certificate Authority See CA certificates 217 authentication 217 CA creating 21...

Page 428: ...251 DiffServ 251 marking rule 252 DiffServ Differentiated Services 198 code points 198 marking rule 198 digital IDs 217 disclaimer 423 DNS 121 DNS server address assignment 116 Domain Name 169 domain name system see DNS Domain Name System See DNS DS field 198 252 DS dee differentiated services DSCP 198 251 DSL interface 91 dynamic DNS 253 Dynamic Host Configuration Protocol See DHCP dynamic WEP ke...

Page 429: ...r IV 399 install UPnP 265 Windows Me 265 Windows XP 266 Integrated Access Device 21 internal routing table 81 Internet access 22 Internet Assigned Numbers Authority See IANA 385 IP Address 168 IP address 124 IP Address Assignment 113 IP filter basics 211 creating or eiding rules 214 introduction 211 policies 212 IP multicasting 318 IP pool 122 IP pool setup 124 ipconfig 323 ipconfig release 324 ip...

Page 430: ...g 160 port number 160 169 services 169 Symmetric 114 NAT example 170 NAT traversal 263 netstat 333 Network Address Translation see NAT network troubleshooting 321 arp 329 ipconfig 323 netstat 333 ping 325 route 330 tracert 327 NNTP 169 non proxy calls 184 O OAM 305 318 OAM ping test 305 OK response 193 195 operation humidity 315 operation temperature 315 Operation Administration and Maintenance se...

Page 431: ...ee RIP RFC 1389 See RIP RFC 1483 111 318 RFC 1631 159 RFC 1889 192 RFC 2131 See DHCP RFC 2132 See DHCP RFC 2364 318 RFC 2516 317 318 RFC 2684 318 RIP 120 237 Routing Information Protocol see RIP route 330 route status 82 router features 22 routing information 81 Routing Information Protocol See RIP RPPCs 255 RTP 192 RTS Request To Send 392 threshold 391 392 S safety warnings 7 seamless rate adapta...

Page 432: ...n See TCI Tag Protocol Identifier See TPID TCI TCP IP 211 temperature 315 Temporal Key Integrity Protocol TKIP 398 three way conference 201 202 ToS 198 TPID 115 TR 064 257 TR 069 255 ACS setup 255 authentication 256 tracert 327 trademarks 423 traffic shaping 112 transparent bridging 318 Type of Service see ToS U unicast 116 Uniform Resource Identifier 189 Universal Plug and Play 263 application 26...

Page 433: ...tracert 327 wireless client WPA supplicants 400 wireless security 394 wireless station list 85 Wireless tutorial 29 WLAN interference 391 security parameters 402 WLAN button 28 WPA 398 key caching 400 pre authentication 400 user authentication 399 vs WPA PSK 399 wireless client supplicant 400 with RADIUS application example 400 WPA2 398 user authentication 399 vs WPA2 PSK 399 wireless client suppl...

Reviews:

No comments

Brands by name

Popular brands

Load more brands