ZyXEL Communications P-660H-61 User Manual Download

Page: 1 / 372

www.zyxel.com

ADSL Router Series

P-660HN-TxA, P-660HN-Tx, P-660N-TxA, P-660HN-T1H, P-
660HNU-Tx and P-660HU-Tx
ADSL2+ Gateway

Firmware Version 1.02

Edition 1, 11/2011

Default Login Details

IP Address

http://192.168.1.1

Username

admin

Password

1234

Summary of Contents for P-660H-61

Page 1: ...60HN TxA P 660HN Tx P 660N TxA P 660HN T1H P 660HNU Tx and P 660HU Tx ADSL2 Gateway Copyright 2011 ZyXEL Communications Corporation Firmware Version 1 02 Edition 1 11 2011 Default Login Details IP Add...

Page 2: ......

Page 3: ...ternet access Support Disc Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications Documentation Fee...

Page 4: ...cannot contact your vendor then contact a ZyXEL office for the region in which you bought the device See http www zyxel com web contact_us php for contact information Please have the following inform...

Page 5: ...ter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bra...

Page 6: ...Document Conventions ADSL Router Series User s Guide 6 Server Firewall Telephone Router Switch...

Page 7: ...ge for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord...

Page 8: ...Safety Warnings ADSL Router Series User s Guide 8...

Page 9: ...Setup 93 LAN Setup 109 Wireless LAN 123 Network Address Translation NAT 151 Firewall 163 Filters 181 Certificate 189 Static Route 193 Port Binding 199 802 1Q 1P 203 Quality of Service QoS 209 Dynamic...

Page 10: ...Contents Overview ADSL Router Series User s Guide 10...

Page 11: ...d Habits for Managing the ZyXEL Device 24 1 4 Applications for the ZyXEL Device 24 1 4 1 Internet Access 24 1 5 Wireless Access 25 1 5 1 Using the WPS WLAN Button 25 1 6 The RESET Button 26 1 6 1 Usin...

Page 12: ...ified Service 60 4 9 Configuring Static Route for Routing to Another Network 63 4 10 Port Binding Configuration 65 4 10 1 Configuring ATM QoS for Multiple WAN Connections 65 4 10 2 Configuring Port Bi...

Page 13: ...6 4 4 IP Address Assignment 106 6 4 5 Nailed Up Connection PPP 106 6 4 6 NAT 107 6 5 Traffic Shaping 107 6 5 1 ATM Traffic Classes 108 Chapter 7 LAN Setup 109 7 1 Overview 109 7 1 1 What You Can Do i...

Page 14: ...erence 137 8 8 1 Wireless Network Overview 137 8 8 2 Additional Wireless Terms 139 8 8 3 Wireless Security Overview 139 8 8 4 Signal Problems 141 8 8 5 BSS 142 8 8 6 MBSSID 142 8 8 7 Wireless Distribu...

Page 15: ...d Screen 174 10 6 2 Configuring Firewall Thresholds 175 10 7 Firewall Technical Reference 176 10 7 1 Firewall Rules Overview 176 10 7 2 Guidelines For Enhancing Security With Your Firewall 177 10 7 3...

Page 16: ...n Do in the 802 1Q 1P Screens 203 15 1 2 What You Need to Know About 802 1Q 1P 203 15 2 The 802 1Q 1P Group Setting Screen 204 15 2 1 Editing 802 1Q 1P Group Setting 206 15 3 The 802 1Q 1P Port Settin...

Page 17: ...7 The ICMP Screen 226 18 8 The SSH Screen 227 18 8 1 SSH Example 228 Chapter 19 Universal Plug and Play UPnP 230 19 1 Overview 230 19 1 1 What You Can Do in the UPnP Screen 230 19 1 2 What You Need to...

Page 18: ...3 23 2 The General Screen 263 23 3 The Time Setting Screen 264 Chapter 24 Logs 267 24 1 Overview 267 24 1 1 What You Need To Know About Logs 267 24 2 The View Log Screen 267 24 3 The Log Settings Scre...

Page 19: ...duct Specifications 285 28 1 Hardware Specifications 285 Appendix A Setting up Your Computer s IP Address 287 Appendix B IP Addresses and Subnetting 309 Appendix C Pop up Windows JavaScripts and Java...

Page 20: ...Table of Contents ADSL Router Series User s Guide 20...

Page 21: ...21 PART I User s Guide...

Page 22: ...22...

Page 23: ...Device can also function as a print server with a USB printer connected Models ending in 1 for example P 660HN T1 denote a device that works over the analog telephone system POTS Plain Old Telephone S...

Page 24: ...ou could simply restore your last configuration 1 4 Applications for the ZyXEL Device Here are some example uses for which the ZyXEL Device is well suited 1 4 1 Internet Access Your ZyXEL Device provi...

Page 25: ...an use this ZyXEL Device to create a wireless network you must set its country code first in the Web Configurator This is very important To set the wireless country code 1 Log into the ZyXEL Device s...

Page 26: ...yXEL Device sets up a WPS connection with the other wireless device 4 Once the connection is successfully made the WPS WLAN LED shines green 1 6 The RESET Button If you forget your password or cannot...

Page 27: ...Make sure the POWER LED is on not blinking 2 To set the device back to the factory default settings press the RESET button for ten seconds or until the POWER LED begins to blink and then release it Wh...

Page 28: ...Chapter 1 Introduction ADSL Router Series User s Guide 28...

Page 29: ...s enabled by default Java permissions enabled by default See Appendix C on page 317 if you need to make sure these functions are allowed in Internet Explorer 2 1 1 Accessing the Web Configurator 1 Mak...

Page 30: ...to proceed to the main menu if you do not want to change the password now Figure 4 Change Password Screen 6 Select Go to Wizard setup and click Apply to display the wizard main screen Otherwise selec...

Page 31: ...tion panel C main window D status bar 2 2 1 Title Bar The title bar provides some icons in the upper right corner The icons provide the following functions B C A D Table 1 Web Configurator Icons in th...

Page 32: ...configure the wireless LAN settings and WLAN authentication security settings More AP Use this screen to configure multiple BSSs on the ZyXEL Device WPS Use this screen to configure and view your WPS...

Page 33: ...the ZyXEL Device DNS Use this screen to configure through which interface s and from which IP address es users can send DNS queries to the ZyXEL Device ICMP Use this screen to set whether or not your...

Page 34: ...creen is displayed See Chapter 3 on page 35 for more information about the Status screen 2 2 4 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been upda...

Page 35: ...s Screens 3 1 Overview Use the Status screens to look at the current status of the device system resources and interfaces LAN and WAN The Status screen also provides detailed information from DHCP and...

Page 36: ...t how often you want the ZyXEL Device to update this screen Apply Click this to update this screen immediately Device Information User Name This field displays the ZyXEL Device system name It is used...

Page 37: ...local address assigned to the ZyXEL Device within the LAN IPv4 IPv6 MTU This is the MTU Maximum Transmission Unit for IPv4 and IPv6 packets passing through the WAN interface VPI VCI This is the Virtua...

Page 38: ...e ZyXEL Device s IPv6 firewall is activated Click this to go to the screen where you can change it System Status System Uptime This field displays how long the ZyXEL Device has been running since it l...

Page 39: ...displays Up when the ZyXEL Device is using the interface and NoLink when the ZyXEL Device is not using the interface For the WLAN interface it displays Active when WLAN is enabled or InActive when WLA...

Page 40: ...Chapter 3 Status Screens ADSL Router Series User s Guide 40...

Page 41: ...o Use File Sharing on the ZyXEL Device see page 72 How to Share a USB Printer via Your ZyXEL Device see page 74 4 2 Setting Up Your DSL Connection This tutorial shows you how to set up your Internet c...

Page 42: ...on General Mode Router Encapsulation PPPoE User Name 1234 DSL Ex com Password ABCDEF Service Name My DSL Multiplex LLC IPv6 IPv4 Dual Stack Enabled PPP Authentication Auto VPI 0 VCI 33 Others IP Addre...

Page 43: ...ide 43 Enter or select these values and click Apply This completes your DSL WAN connection setting 4 3 IPv6 Address Configuration If the ISP s network supports IPv6 the ISP may assign an IPv6 address...

Page 44: ...fix to generate their IPv6 addresses 4 3 1 6to4 Tunneling In 6to4 tunneling ZyXEL Devices A and B in the example network forward IPv4 packets between IPv6 networks 1 and 2 over the IPv4 Internet In th...

Page 45: ...e AP Thomas has to configure the wireless network settings on the ZyXEL Device Then he can set up a wireless network using WPS Section 4 4 2 on page 46 or manual configuration Section 4 4 3 on page 50...

Page 46: ...ook and the ZyXEL Device see Section 4 4 2 on page 46 He can also use the notebook s wireless client to search for the ZyXEL Device see Section 4 4 3 on page 50 4 4 2 Using WPS This section shows you...

Page 47: ...ess client driver and utility in your notebook 3 In the wireless client utility go to the WPS setting page Enable WPS and press the WPS button Start or WPS button 4 Push and hold the WPS button locate...

Page 48: ...t Example WPS Process PBC Method PIN Configuration When you use the PIN configuration method you need to use both the ZyXEL Device s web configurator and the wireless client s utility 1 Launch your wi...

Page 49: ...t buttons or the button next to the PIN field on both the wireless client utility screen and the ZyXEL Device s WPS Station screen within two minutes The ZyXEL Device authenticates the wireless client...

Page 50: ...d a wireless client by using PIN method Example WPS Process PIN Method 4 4 3 Connecting Wirelessly to your ZyXEL Device This section describes how to connect wirelessly to your ZyXEL Device The connec...

Page 51: ...onnect A The SSID SecureWirelessNetwork is given here as an example Tutorial Network Wireless LAN SecuritOpen the Status screen Verify your wireless and wireless security settings under Device Informa...

Page 52: ...eck you have selected the correct SSID and entered the correct security key If that does not work ensure your wireless network adapter is enabled by clicking on the wireless adapter icon and clicking...

Page 53: ...User s Guide 53 1 Click Network LAN Client List to open the following screen Look for the MAC address of Josephine s computer 2 Click Network Wireless LAN to open the AP screen Click the Edit button...

Page 54: ...will no longer be able to access the Internet through the ZyXEL Device 4 6 Multiple Public and Private IP Address Mappings If your ISP gives you more than one static IPv4 address for your Internet ac...

Page 55: ...Many No Overload Mapping Use this setting if your applications can use random public IP addresses and the applications are initiated from the Intranet computers A and B For example VoIP application Se...

Page 56: ...n the General screen Click Apply 3 Click the Address Mapping tab and then click the Edit icon on a new rule 4 Configure the rule using the following settings Type Many to Many No Overload Local IP add...

Page 57: ...mple gaming application To configure this setting 1 Click Network NAT 2 Select Active Network Address Translation NAT and Full Feature in the General screen Click Apply 3 Click the Address Mapping tab...

Page 58: ...rver Thomas manages a Doom server on a computer behind the ZyXEL Device In order for players on the Internet like A in the figure below to communicate with the Doom server Thomas can use port forwardi...

Page 59: ...creen with the following values 2 The screen should look as follows Click Apply 3 The port forwarding settings you configured appear in the table The ZyXEL Device forwards port 666 traffic to the comp...

Page 60: ...from the WAN 1 However if you are running a server or other service you may need to allow access from the WAN 2 The following tutorial will show how to allow traffic from WAN to LAN if it matches a s...

Page 61: ...e Setup 3 The Edit Rule screen will appear Click the Edit Customized Services link to access the following screen Configure the following settings In this tutorial a hypothetical port 123 is allowed C...

Page 62: ...lable Services field select the service you configured My_Service Click Apply to save your settings and Back to return to the previous screen Tutorial Advanced QoS Queue Setup 5 The firewall rule you...

Page 63: ...the following figure router R is connected to the ZyXEL Device s LAN R connects to two networks N1 192 168 1 x 24 and N2 192 168 10 x 24 If you want to send traffic from computer A in N1 network to co...

Page 64: ...on a new rule in the Static Route screen 4 Configure the Static Route Setup screen using the following settings 4a Type 192 168 10 0 and subnet mask 255 255 255 0 for the destination N2 4b Type 192 16...

Page 65: ...sitive data traffic 4 10 1 Configuring ATM QoS for Multiple WAN Connections This example shows an application for multiple WAN connections with different ATM QoS Settings More than one WAN connection...

Page 66: ...s 943 divide the bandwidth 400000 bps by 424 Click Apply to save the settings To configure variable bandwidth of 2mbps for MOD data connection select Realtime VBR in the ATM QoS Type field Set the Pea...

Page 67: ...ation shown below the WAN connections set up in the previous section are bound as follows Access the port binding screen by clicking Advanced Port Binding and select Activated to turn on the port bind...

Page 68: ...cating with other branch offices In the following figure you want to configure QoS so that e mail traffic gets the highest priority You can do the following Configure a queue to assign the highest pri...

Page 69: ...Click Advanced QoS and check Enabled Click Apply to save your settings Tutorial Advanced QoS 2 Go to Advanced QoS Queue Setup In the Queue Enable field select Enabled and in the Queue Priority field s...

Page 70: ...he previous screen see the Source Port Range field This also maps your computer s MAC address to queue 1 see the Source MAC field Source MAC Type the MAC address of your computer AA FF AA FF AA FF Typ...

Page 71: ...WAN IP address then you cannot use DDNS 4 12 1 Registering a DDNS Account on www dyndns org 1 Open a browser and type http www dyndns org 2 Apply for a user account This tutorial uses UserName1 and 1...

Page 72: ...address a b c d that is connected to the Internet 2 Type http zyxelrouter dyndns org and press Enter 3 The ZyXEL Device s login page should appear You can then log into the ZyXEL Device and manage it...

Page 73: ...the Edit icon next to a User Name 3 Select Active and enter a user name and password Click Apply to save your changes and click Back to go back to the previous screen 4 13 2 Access Your Shared Files F...

Page 74: ...nd click OK Figure 8 File Sharing via Windows Explorer Note Once you log in to the file share via your ZyXEL Device you do not have to log in again unless you restart your computer 4 14 How to Share a...

Page 75: ...s Guide 75 3 See Section 21 5 on page 247 and or Section 21 6 on page 251 for examples of how to set up a printer on your computer The computers on your network must have the printer software already...

Page 76: ...Chapter 4 Tutorials ADSL Router Series User s Guide 76...

Page 77: ...77 PART II Technical Reference...

Page 78: ...78...

Page 79: ...tor to go to the wizards 2 Click INTERNET WIRELESS SETUP to configure the system for Internet access and wireless connection Figure 9 Wizard Welcome 3 Your ZyXEL device attempts to detect your DSL con...

Page 80: ...Yes selected and click Next Figure 10 Auto Detection No DSL Connection 3b The following screen displays if a PPPoE or PPPoA connection is detected Enter your Internet account information username pass...

Page 81: ...User s Guide 81 3c The following screen appears if the ZyXEL device detects a connection but not the connection type Click Next and refer to Section 5 2 1 on page 82 on how to manually configure the Z...

Page 82: ...ers to share an Internet account Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP s DHCP server directly If...

Page 83: ...rd setup Figure 14 Internet Connection with PPPoE VPI Enter the VPI assigned to you This field may already be configured VCI Enter the VCI assigned to you This field may already be configured Back Cli...

Page 84: ...er the user name exactly as your ISP assigned If assigned a name in the form user domain where domain identifies a service name then enter both components exactly as given Password Enter the password...

Page 85: ...ENET ENCAP Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field Type your ISP assigned IP address in this field Back...

Page 86: ...ed IP address Subnet Mask Enter a subnet mask in dotted decimal notation Refer to the appendix to calculate a subnet mask if you are implementing subnetting Gateway IP address You must specify a gatew...

Page 87: ...n Test Failed 1 If the following screen displays check if your account is activated or click Restart the Internet Wireless Setup Wizard to verify your Internet access settings Figure 19 Connection Tes...

Page 88: ...to activate the wireless LAN Click Next to continue Figure 21 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen Table 12 Wireless LAN Setup Wizard 1 LABEL DESCRIPTION...

Page 89: ...the ZyXEL Device make sure all wireless stations use the same SSID in order to access the network Channel Selection The range of radio frequencies used by IEEE 802 11b g wireless devices is called a...

Page 90: ...anually assign a WEP key to setup WEP Encryption parameters Figure 24 Manually Assign a WEP key Table 14 Manually Assign a WPA PSK key LABEL DESCRIPTION Pre Shared Key Type from 8 to 63 case sensitive...

Page 91: ...plete and save the wizard setup Table 15 Manually Assign a WEP key LABEL DESCRIPTION Key The WEP keys are used to encrypt data Both the ZyXEL Device and the wireless stations must use the same WEP key...

Page 92: ...ccess and WLAN Wizard Setup Complete 7 Launch your web browser and navigate to www zyxel com Internet access is just the beginning Refer to the rest of this guide for more detailed information on the...

Page 93: ...settings on the ZyXEL Device for Internet access Use the More Connections screen Section 6 3 on page 100 to set up additional Internet access connections 6 1 2 What You Need to Know About WAN Encapsul...

Page 94: ...rk not everybody and not just one IGMP IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data There are...

Page 95: ...de 95 6 2 The Internet Access Setup Screen Use this screen to change your ZyXEL Device s WAN settings Click Network WAN Internet Access Setup The screen differs by the WAN type and encapsulation you s...

Page 96: ...PoE encapsulation only Enter the user name exactly as your ISP assigned If assigned a name in the form user domain where domain identifies a service name then enter both components exactly as given Pa...

Page 97: ...HCP IPv6 Select DHCP if you want to obtain an IPv6 address from a DHCPv6 server The IP address assigned by a DHCPv6 server has priority over the IP address automatically generated by the ZyXEL Device...

Page 98: ...X XXXX XXXX Connection PPPoA and PPPoE encapsulation only Keep Alive Select Keep Alive when you want your connection up all the time The ZyXEL Device will try to bring up the connection automatically...

Page 99: ...riable Bit Rate type for applications with bursty connections that require closely controlled delay and delay variation Select nrtVBR non real time Variable Bit Rate type for connections that do not r...

Page 100: ...ing the number of the corresponding connection Active This field indicates whether the connection is active or not Clear the check box to disable the connection Select the check box to enable it Name...

Page 101: ...en Table 19 Network WAN More Connections Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection Name Enter a unique descriptive nam...

Page 102: ...not fixed the ISP assigns you a different one each time you connect to the Internet If you use the encapsulation type except RFC 1483 select Obtain an IP Address Automatically when you have a dynamic...

Page 103: ...Device will try to bring up the connection automatically if it is disconnected Connect on Demand Select Connect on Demand when you don t want the connection up all the time and specify an idle time ou...

Page 104: ...ffic Select UBR Unspecified Bit Rate for applications that are non time sensitive such as e mail Select nrtVBR Variable Bit Rate non Real Time or rtVBR Variable Bit Rate Real Time for bursty traffic a...

Page 105: ...ly PPPoE saves significant effort for both you and the ISP or carrier as it requires no specific configuration of the broadband modem at the customer site By implementing PPPoE directly on the ZyXEL D...

Page 106: ...can be enabled or disabled if you have either a dynamic or static IP However the encapsulation method assigned influences your choices for IP address and ENET ENCAP gateway IP Assignment with PPPoA o...

Page 107: ...PCR is the maximum rate at which the sender can send cells This parameter may be lower but not higher than the maximum line speed 1 ATM cell is 53 bytes 424 bits so a maximum speed of 832Kbps gives a...

Page 108: ...T real time Variable Bit Rate type is used with bursty connections that require closely controlled delay and delay variation It also provides a fixed amount of bandwidth a PCR is specified but is only...

Page 109: ...ng settings from this screen Use the DHCP Setup screen Section 7 3 on page 112 to configure the ZyXEL Device s DHCP settings Use the Client List screen Section 7 4 on page 113 to assign IP addresses o...

Page 110: ...IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data There are three versions of IGMP IGMP version 2 a...

Page 111: ...lticast and Windows Networking settings Click the Advanced Setup button in the LAN IP screen The screen appears as shown Figure 35 Network LAN IP Advanced Setup Table 21 Network LAN IP LABEL DESCRIPTI...

Page 112: ...Both In Only and Out Only RIP Version This field is not configurable if you select None in the RIP Direction field Select the RIP Version from RIP 1 RIP 2B and RIP 2M Multicast IGMP Internet Group Mu...

Page 113: ...bled If set to Relay the ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients Enter the IP address of the actual remote DHCP se...

Page 114: ...computer on your LAN with the MAC address that you will also specify MAC Address Enter the MAC address of a computer on your LAN Add Click this to add a static DHCP entry This is the index number of...

Page 115: ...ble 25 Network LAN IP Alias LABEL DESCRIPTION IP Alias Select the check box to configure a LAN network for the ZyXEL Device IP Address Enter the IP address of your ZyXEL Device in dotted decimal notat...

Page 116: ...outer Series User s Guide 116 7 6 The IPv6 Screen Use this screen to configure the IPv6 settings for your ZyXEL Device s LAN interface See Appendix E on page 341 for background information about IPv6...

Page 117: ...this field The LAN identifier should be unique and 64 bits in hexadecimal form Every 16 bit block should be separated by a colon as in XXXX XXXX XXXX XXXX where X is a hexadecimal character Blocks of...

Page 118: ...work Note Make sure the hosts also support router preference to make this function work Reachable Time ms Enter the time in milliseconds that can elapse before a neighbor is detected Possible values f...

Page 119: ...clients If you turn DHCP service off you must have another DHCP server on your LAN or else the computer must be manually configured IP Pool Setup The ZyXEL Device is pre configured with a pool of IP a...

Page 120: ...the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 and you must enable the Network Address Translation NAT feature...

Page 121: ...ognizes both formats when receiving RIP 1 is universally supported but RIP 2 carries more information RIP 1 is probably adequate for most networks unless you have an unusual network topology Both RIP...

Page 122: ...igned to the multicast routers group At start up the ZyXEL Device queries all directly connected networks to gather group membership After that the ZyXEL Device periodically updates this information I...

Page 123: ...e the More AP screen see Section 8 3 on page 131 to set up multiple wireless networks on your ZyXEL Device Use the WPS screen see Section 8 4 on page 133 to enable or disable WPS generate a security P...

Page 124: ...rols access to the wireless network You can use the MAC address of each wireless client to allow or deny access to the wireless network Finding Out More See Section 8 8 on page 137 for advanced techni...

Page 125: ...wireless device is associated Wireless devices associating to the access point AP must have the same SSID Enter a descriptive name up to 32 printable 7 bit ASCII characters for the wireless LAN Note...

Page 126: ...le QoS Select Default to have the ZyXEL Device automatically give traffic a priority level according to the ToS value in the IP header of packets it sends Wifi MultiMedia Quality of Service WMM QoS gi...

Page 127: ...your wireless devices support nothing stronger than WEP use the highest encryption level available Figure 43 Network Wireless LAN AP Static WEP The following table describes the wireless LAN security...

Page 128: ...list box WPA Compatible This check box is available only when you select WPA2 PSK in the Security Mode field Select the check box to have both WPA PSK wireless clients be able to communicate with the...

Page 129: ...enu Choices are Long or Short See the Appendix D on page 331 for more information 802 11 Mode Select 802 11b Only to allow only IEEE 802 11b compliant WLAN devices to associate with the ZyXEL Device S...

Page 130: ...up to 300 Mbps 40MHz channel bonding or dual channel bonds two adjacent radio channels to increase throughput The wireless clients must also support 40 MHz It is often better to use the 20 MHz setting...

Page 131: ...ss to the ZyXEL Device Set This is the index number of the MAC address MAC Address Enter the MAC addresses of the wireless devices that are allowed or denied access to the ZyXEL Device in these addres...

Page 132: ...s associated Enter a descriptive name up to 32 printable 7 bit ASCII characters for the wireless LAN Note If you are configuring the ZyXEL Device from a computer connected to the wireless LAN and you...

Page 133: ...our changes Cancel Click this to restore your previously saved settings Table 34 Network Wireless LAN More AP Edit LABEL DESCRIPTION Table 35 Network Wireless LAN WPS LABEL DESCRIPTION WPS Setup WPS S...

Page 134: ...5 Network Wireless LAN WPS LABEL DESCRIPTION Table 36 Network Wireless LAN WPS Station LABEL DESCRIPTION Push Button Click this to add another WPS enabled wireless device within wireless range of the...

Page 135: ...s compatible with other ZyXEL APs only Not all models support WDS links Check your other AP s documentation Click Network Wireless LAN WDS The following screen displays Figure 51 Network Wireless LAN...

Page 136: ...Key PSK from 8 to 63 case sensitive ASCII characters including spaces and symbols Apply Click this to save your changes Cancel Click this to restore your previously saved settings Table 37 Network Wir...

Page 137: ...s and let them access the network A bridge is a radio that relays communications between access points and wireless clients extending a network s range Traditionally a wireless network operates in one...

Page 138: ...rent channel Like radio stations or television channels each wireless network uses a specific channel or frequency to send and receive information Every device in the same wireless network must use se...

Page 139: ...SK security standard is very secure if you use a long key which is difficult for an attacker s software to guess for example a twenty letter long string of apparently random numbers and letters but it...

Page 140: ...lter to tell the ZyXEL Device which devices are allowed or not allowed to use the wireless network If a device is allowed to use the wireless network it still has to have the correct information SSID...

Page 141: ...ble for unauthorized wireless devices to figure out the original information pretty quickly When you select WPA2 or WPA2 PSK in your ZyXEL Device you can also select an option WPA compatible to suppor...

Page 142: ...MBSSID Traditionally you need to use different APs to configure different Basic Service Sets BSSs As well as the cost of buying extra APs there is also the possibility of channel interference The ZyX...

Page 143: ...a secure wireless network WPS is an industry standard specification defined by the WiFi Alliance WPS allows you to quickly set up a wireless network with strong security without having to configure s...

Page 144: ...you must enter the PIN from one device usually the wireless client into the second device usually the Access Point or wireless router Then when WPS is activated on the first device it presents its PI...

Page 145: ...device acts as the enrollee the device that receives network and security settings The registrar creates a secure EAP Extensible Authentication Protocol tunnel and sends the network name SSID and the...

Page 146: ...s that it is not part of an existing network and can act as either enrollee or registrar if it supports both functions If the registrar is unconfigured the security settings it transmits to the enroll...

Page 147: ...work You know that Client 1 supports registrar mode but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network...

Page 148: ...two enrollees and one registrar you must set up the first enrollee by pressing the WPS button on the registrar and the first enrollee for example then check that it successfully enrolled then set up...

Page 149: ...ee if this has happened WPS works between only two devices simultaneously so if another device has enrolled your device will be unable to enroll and will not have access to the network If this happens...

Page 150: ...Chapter 8 Wireless LAN ADSL Router Series User s Guide 150...

Page 151: ...to enable and disable the SIP VoIP ALG in the ZyXEL Device 9 1 2 What You Need To Know About NAT Inside Outside Inside outside denotes where a host is located relative to the ZyXEL Device for example...

Page 152: ...Setup Screen Use this screen to activate NAT Click Network NAT to open the following screen Note You must create an IP filter rule in addition to setting up NAT to allow traffic from the WAN to be for...

Page 153: ...s screen Note If you do not assign a Default Server IP address the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup Configuring Server...

Page 154: ...1 33 D 192 168 1 36 C 192 168 1 35 B 192 168 1 34 WAN LAN 192 168 1 1 IP Address assigned by ISP Table 42 Network NAT Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition...

Page 155: ...ce translates Server IP Address This is the server s IP address Modify Click the edit icon to go to the screen where you can edit the port forwarding rule Click the delete icon to delete an existing p...

Page 156: ...nge your ZyXEL Device s address mapping settings click Network NAT Address Mapping to open the following screen Figure 65 Network NAT Address Mapping End Port Enter a port number in this field To forw...

Page 157: ...your ISP You can only do this for Many to One and Server mapping types Global End IP This is the ending Inside Global IP Address IGA This field is N A for One to one Many to One and Server mapping typ...

Page 158: ...Many to Many Overload Many to Many Overload mode maps multiple local IP addresses to shared global IP addresses Many to Many No Overload Many to Many No Overload mode maps each local IP address to uni...

Page 159: ...n the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of...

Page 160: ...efer to RFC 1631 The IP Network Address Translator NAT 9 6 3 How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is...

Page 161: ...yXEL Device maps multiple local IP addresses to one global IP address This is equivalent to SUA for instance PAT port address translation ZyXEL s Single User Account feature that previous ZyXEL router...

Page 162: ...mmarizes these types Table 48 NAT Mapping Types TYPE IP MAPPING One to One ILA1 IGA1 Many to One SUA PAT ILA1 IGA1 ILA2 IGA1 Many to Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 Many to Many...

Page 163: ...e firewall action User A can initiate an IM Instant Messaging session from the LAN to the WAN 1 Return traffic for this session is also allowed 2 However other traffic initiated from the WAN is blocke...

Page 164: ...evice is pre configured to automatically detect and thwart all known DoS attacks DDoS A Distributed DoS DDoS attack is one in which multiple compromised systems attack a single target thereby causing...

Page 165: ...onse packet from being sent This keeps outsiders from discovering your ZyXEL Device when unsupported ports are probed ICMP Internet Control Message Protocol ICMP is a message control and error reporti...

Page 166: ...rtual server and ACL on the WAN side Enabling IPv6 firewall will filter SYN Flooding and Ping of Death traffic Enabling ICMPv6 filter recommendations will filter RFC4890 SPEC traffic Table 49 Security...

Page 167: ...cks anyone from the Internet from accessing any services on your local network Low This setting allows traffic to the Internet and also allows someone from the Internet to access services on your loca...

Page 168: ...ter WAN to LAN Firewall rules are grouped based on the direction of travel of packets to which they apply For example LAN to Router means packets traveling from a computer subnet on the LAN to the ZyX...

Page 169: ...on Use the drop down list box to select a direction of travel of packets for which you want to configure firewall rules Create a new rule after rule number Select an index number and click Add to add...

Page 170: ...ly discards packets Drop discards packets and sends a TCP reset packet or an ICMP destination unreachable message to the sender Reject or allows the passage of packets Permit Modify Click the Edit ico...

Page 171: ...ermines if a log for packets that match the rule is created or not Source Destination Address Address Type Do you want your rule to apply to packets with a particular single IP a range of IP addresses...

Page 172: ...Configuring a Customized Service Note The firewall configuration screen shown in this section is specific to the following devices P 660HNU Tx P 660HU Tx devices Apply Click this to save your changes...

Page 173: ...CRIPTION Config Service Name Type a unique name for your custom port Service Type Choose the IP port TCP or UDP that defines your customized port from the drop down list box Port Configuration Type Cl...

Page 174: ...P three way handshake has not yet been completed Under normal circumstances the application that initiates a session sends a SYN synchronize packet to the receiving server The receiver sends back an A...

Page 175: ...ng choices for threshold values are 1 The maximum number of opened sessions 2 The minimum capacity of server backlog in your LAN network 3 The CPU power of servers in your LAN network 4 Network bandwi...

Page 176: ...allow only a specific computer to manage the ZyXEL Device Table 57 Security Firewall DoS Advanced LABEL DESCRIPTION TCP SYN Request Count This is the rate of new TCP half open sessions per second tha...

Page 177: ...tain types of traffic such as Lotus Notes database synchronization from specific hosts on the Internet to specific hosts on the LAN Allow everyone except your competitors to access a web server Restri...

Page 178: ...et users may be able to connect to computers with running FTP servers 4 Does this rule conflict with any existing rules Once these questions have been answered adding rules is simply a matter of enter...

Page 179: ...ction Another solution is to use IP alias IP alias allows you to partition your network into logical sections over the same Ethernet interface Your ZyXEL Device supports up to three logical LAN interf...

Page 180: ...Chapter 10 Firewall ADSL Router Series User s Guide 180 4 The ZyXEL Device then sends it to the computer on the LAN in Subnet 1 Figure 83 IP Alias 1 2 3 LAN A ISP 1 ISP 2 4 WAN Subnet 1 Subnet 2...

Page 181: ...certain types of applications Use the IP MAC Filter screen Section 11 4 on page 184 to create IP and MAC filter rules Use the IPv6 MAC Filter screen Section 11 5 on page 186 to create IPv6 and MAC fi...

Page 182: ...se this field to enable or disable the URL filter URL Index Select the index number of the filter Individual active Select Yes to make the filter active and No to make it inactive URL Enter the URL fo...

Page 183: ...ion Filter The following table describes the labels in this screen Table 59 Security Filter Application Filter LABEL DESCRIPTION Application Filter Editing Application Filter Use this field to enable...

Page 184: ...the labels in this screen Table 60 Security Filter IP MAC Filter LABEL DESCRIPTION Rule Type Rule Type selection Select White List to specify traffic to allow and Black List to specify traffic to disa...

Page 185: ...MAC Address This field is only available when you select MAC in the Rule Type field Enter the MAC address of the packets you wish to filter Protocol Select ICMP TCP or UDP for the upper layer protoco...

Page 186: ...els in this screen Table 61 Security Filter IPv6 MAC Filter LABEL DESCRIPTION Rule Type Rule Type selection Select White List to specify traffic to allow and Black List to specify traffic to block IPv...

Page 187: ...roblem 0 erroneous header field encountered 1 unrecognized Next Header type encountered 2 unrecognized IPv6 option encountered 128 Echo Request 129 Echo Response 130 Listener Query Multicast listener...

Page 188: ...x length Mac Address This is the MAC address of the packets being filtered Protocol This is the upper layer protocol that defines the service to which this rule applies By default it is ICMPv6 Apply C...

Page 189: ...st or VeriSign and government certification authorities The certification authority uses its private key to sign certificates Anyone can then use the certification authority s public key to verify the...

Page 190: ...es the owner of the certificate such as Common Name CN OU Organizational Unit or department Organization O State ST and Country C It is recommended that each certificate have unique subject informatio...

Page 191: ...tificate ca means that a Certification Authority signed the certificate Subject This field displays information that identifies the owner of the certificate such as Common Name CN Organizational Unit...

Page 192: ...certificate signed by any of the imported trusted CA certificates Figure 90 Trusted CA Import Certificate The following table describes the fields in this screen Table 64 Trusted CA Import Certificat...

Page 193: ...use static routes For example the next figure shows a computer A connected to the ZyXEL Device s LAN interface The ZyXEL Device routes most traffic from A to the Internet through the ZyXEL Device s de...

Page 194: ...s screen Table 65 Advanced Static Route LABEL DESCRIPTION This is the number of an individual static route Destination This parameter specifies the IP network address of the final destination Routing...

Page 195: ...twork address of the final destination Routing is always based on network number If you need to specify a route to a single host use a subnet mask of 255 255 255 255 in the subnet mask field to force...

Page 196: ...Routing is always based on network number Prefix Length An IPv6 prefix length specifies how many most significant bits starting from the left in the address compose the network address This field disp...

Page 197: ...uting is always based on network number If you need to specify a route to a single host use a prefix length of 128 in the prefix length field to force the network number to be identical to the host ID...

Page 198: ...Chapter 13 Static Route ADSL Router Series User s Guide 198...

Page 199: ...fferent ATM QoS settings can be specified for each WAN PVC to meet bandwidth requirements for the type of traffic to be transferred For example three port binding groups could be created on the device...

Page 200: ...ection 14 2 1 on page 201 to view configured port binding groups 14 2 The Port Binding Screen Use this screen to activate port binding and set up port binding groups Click Advanced Port Binding to dis...

Page 201: ...be bound to one group WLAN Select the WLAN AP connections to include in the port binding group Additional APs can be enabled on the More AP screen Section 8 3 on page 131 Group Summary Port Binding Su...

Page 202: ...Chapter 14 Port Binding ADSL Router Series User s Guide 202...

Page 203: ...age 204 to activate 802 1Q 1P specify the management VLAN group display the VLAN groups and configure the settings for each VLAN group Use the Port Setting screen Section 15 3 on page 207 to configure...

Page 204: ...e VLAN tag To forward a frame from an 802 1Q VLAN unaware device to an 802 1Q VLAN aware switch the ZyXEL Device first decides where to forward the frame and then inserts a VLAN tag reflecting the ing...

Page 205: ...2 1P 1Q feature Summary This field displays the index number of the VLAN group Active This field displays whether 802 1P 1Q is active for the VLAN group VID This field displays the ID number of the VL...

Page 206: ...the VLAN group The valid VID range is between 1 and 4094 Default Gateway Select the default gateway for the VLAN group Ports This field displays the types of ports available to join the VLAN group Con...

Page 207: ...lowing table describes the labels in this screen Table 73 Advanced 802 1Q 1P Port Setting LABEL DESCRIPTION Ports This field displays the types of ports available to join the VLAN group 802 1Q PVID As...

Page 208: ...Chapter 15 802 1Q 1P ADSL Router Series User s Guide 208...

Page 209: ...lowing time sensitive applications to flow more smoothly Time sensitive applications include both those that require a low level of latency delay and a low level of jitter variations in delay such as...

Page 210: ...802 1p is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class You can use 802 1p to give different priorities to different packet typ...

Page 211: ...anges Rule Action Summary Click this to display a summary of configured rules and actions Cancel Click this to restore your previously saved settings Table 75 Advanced Setup QoS QoS Summary List LABEL...

Page 212: ...t Priority to require traffic transmit in order of priority Queue Index Specify the queue index Queue Enable Specify to enable or disable the queue Queue Weight If you selected WRR specify the WRR wei...

Page 213: ...802 1p priority level and or IP precedence Click Advanced Setup QoS Class Setup to open the screen as shown next Figure 107 Advanced Setup QoS Class Setup The following table describes the labels in...

Page 214: ...drop down list box Vlan ID Range Enter the source VLAN ID in this field IPP DS Field Select IPP TOS to specify an IP precedence range and type of services Select DSCP to specify a DiffServ Code Point...

Page 215: ...gets through faster while traffic in lower queues is dropped when there is network congestion Add Click this to add the rule Delete Click this to remove the rule Cancel Click this to restore previous...

Page 216: ...QoS mapping on the ZyXEL Device On the ZyXEL Device traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested Table 79...

Page 217: ...of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic...

Page 218: ...se dynamic DNS Service Provider This is the name of your Dynamic DNS service provider Dynamic DNS Type Select the type of service that you are registered for from your Dynamic DNS service provider Hos...

Page 219: ...mote location via Internet WAN only LAN only LAN and WAN None Disable To disable remote management of a service select Disable in the corresponding Service Access field 18 1 1 What You Can Do in the R...

Page 220: ...227 to configure through which interface s and from which IP address es users can use SSH to manage the ZyXEL Device 18 1 2 What You Need to Know About Remote Management Remote Management Limitations...

Page 221: ...s Select the interface s through which a computer may access the ZyXEL Device using this service Note It is recommended if you are allowing WAN access even temporarily to change the default password i...

Page 222: ...is grayed out it is not editable Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Note It is recommended if you are allowing WAN access even...

Page 223: ...and monitor the ZyXEL Device through the network The ZyXEL Device Table 83 Advanced Remote MGMT FTP LABEL DESCRIPTION Server Port This displays the service port number for accessing the ZyXEL Device...

Page 224: ...nagement information from the managed device into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applicati...

Page 225: ...hich a computer may access the ZyXEL Device using this service Secured Client IP Address A secured client is a trusted computer that is allowed to access the SNMP agent on the ZyXEL Device Select All...

Page 226: ...llows the outside user to know the ZyXEL Device exists Your ZyXEL Device supports anti probing which prevents the ICMP response packet from being sent This keeps outsiders from discovering your ZyXEL...

Page 227: ...two hosts over an unsecured network Click Advanced Remote MGMT SSH tab to display the screen as shown Figure 117 Advanced Remote MGMT SSH Table 86 Advanced Remote Management ICMP LABEL DESCRIPTION ICM...

Page 228: ...s Select the interface s through which a computer may access the ZyXEL Device using this service Note It is recommended if you are allowing WAN access even temporarily to change the default password i...

Page 229: ...Management ADSL Router Series User s Guide 229 2 A window displays prompting you to store the host key in your computer Click Yes to continue 3 Enter your user name and password 4 The command line in...

Page 230: ...ch UPnP compatible device installed on your network will appear as a separate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device NAT Traver...

Page 231: ...e screen shown next See Section 19 1 on page 230 for more information Figure 118 Advanced UPnP General The following table describes the fields in this screen Table 88 Advanced UPnP General LABEL DESC...

Page 232: ...low the steps below to install the UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on the Windows Setup tab and select Communication in the Components selec...

Page 233: ...Components selection box Add Remove Programs Windows Setup Communication Components 4 Click OK to go back to the Add Remove Programs Properties window and click Next 5 Restart the computer when promp...

Page 234: ...ctions window click Advanced in the main menu and select Optional Networking Components Network Connections 4 The Windows Optional Networking Components Wizard window displays Select Networking Servic...

Page 235: ...ck Next 19 4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL Device...

Page 236: ...outer Series User s Guide 236 2 Right click the icon and select Properties Network Connections 3 In the Internet Connection Properties window click Settings to see the port mappings there were automat...

Page 237: ...t or delete the port mappings or click Add to manually add port mappings Internet Connection Properties Advanced Settings Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled d...

Page 238: ...isplay your current Internet connection status Internet Connection Status Web Configurator Easy Access With UPnP you can access the web based configurator on the ZyXEL Device without finding out the I...

Page 239: ...ersal Plug and Play UPnP ADSL Router Series User s Guide 239 3 Select My Network Places under Other Places Network Connections 4 An icon with the description for each UPnP enabled device displays unde...

Page 240: ...yXEL Device and select Invoke The web configurator login screen displays Network Connections My Network Places 6 Right click on the icon for your ZyXEL Device and select Properties A properties window...

Page 241: ...Figure 119 File Sharing Overview See Section 20 1 2 on page 241 for an explanation of file sharing terms See Section 4 5 on page 52 for file sharing examples 20 1 1 What You Can Do in this chapter The...

Page 242: ...w all applications not just Web browsers to open and share files across the Internet The ZyXEL Device uses Common Internet File System CIFS protocol for its file sharing functions CIFS compatible comp...

Page 243: ...k Advanced USB Application File Sharing Figure 120 Advanced USB Application File Sharing Each field is described in the following table Table 89 Advanced USB Application File Sharing LABEL DESCRIPTION...

Page 244: ...n this screen to its last saved value Table 89 Advanced USB Application File Sharing LABEL DESCRIPTION Table 90 USB Services File Sharing Edit LABEL DESCRIPTION Active Select the check box to enable t...

Page 245: ...ZyXEL Device using the Internet Printing Protocol Figure 122 Sharing a USB Printer 21 1 1 What You Can Do in this chapter The Print Server screen lets you enable the print server on the ZyXEL Device S...

Page 246: ...d know the status of the printer and print jobs Supported OSs The following OSs support ZyXEL Device s printer sharing feature Microsoft Windows 2000 Windows XP Windows 7 Windows Vista or Macintosh OS...

Page 247: ...g Windows This example shows how to connect a printer behind the ZyXEL Device to your computer using the Windows XP Professional operating system Some menu items may look different on your operating s...

Page 248: ...Series User s Guide 248 1 Click Start Control Panel Printers and Faxes to open the Printers and Faxes screen Click Add a Printer Figure 124 Printers Folder 2 The Add Printer Wizard screen displays Cli...

Page 249: ...erver ZyXEL Device Click Next Note If you change the ZyXEL Device s LAN IP address use the new IP address in the URL to access the print server Figure 127 Add Printer Wizard Specify a Printer 5 Select...

Page 250: ...Next to continue Figure 128 Add Printer Wizard Printer Model 9 Select Yes and then click the Next button if you want to use this printer as the default printer on your computer Otherwise select No an...

Page 251: ...et up a print server driver on your Macintosh computer 21 6 1 Mac OS 10 3 and 10 4 This example shows how to connect a printer behind the ZyXEL Device to your computer using Mac OS X v10 4 11 Some men...

Page 252: ...Chapter 21 Sharing a USB Printer ADSL Router Series User s Guide 252 12 Open the Applications folder Figure 132 Macintosh HD Folder 13 Open the Utilities folder Figure 133 Applications Folder...

Page 253: ...t key and click More Printers in the Printer Browser screen Select Advanced from the top drop down list Select Internet Printing Protocol using HTTP from the Device drop down list Enter a descriptive...

Page 254: ...er Browser 17 The new network printer displays in the Printer List The default printer Name displays in bold type Figure 137 Printer List 18 Your print server driver setup is complete You can now use...

Page 255: ...er icon on the Dock or double click your Mac hard disk icon Mac OS X in this example on your desktop to open the Mac HD window Figure 138 Mac OS X HD 2 Open the Applications folder Figure 139 Macintos...

Page 256: ...r If the Advanced button doesn t appear Ctrl click the toolbar select Customize Toolbar and then drag the Advanced button onto the toolbar Select Internet Printing Protocol HTTP from the Type drop dow...

Page 257: ...er from the Print Using drop down list and then select a printer model Click Add to save and close the Printer Browser configuration screen Figure 143 Add Printer 7 The new network printer displays in...

Page 258: ...Chapter 21 Sharing a USB Printer ADSL Router Series User s Guide 258...

Page 259: ...XEL Device ZD can be managed via a management server MS such as ZyXEL s Vantage Access Figure 145 LAN and WAN An administrator can use a management server to remotely set up the ZyXEL device modify se...

Page 260: ...he IP address or domain name of the management server If the ZyXEL Device is behind a NAT router that assigns it a private IP address you will have to configure a NAT port forwarding rule on the NAT r...

Page 261: ...nnecting to the ZyXEL Device Type a user name of up to 255 printable characters found on an English language keyboard Spaces and characters such as _ are allowed Password The password is used to authe...

Page 262: ...Chapter 22 CWMP ADSL Router Series User s Guide 262...

Page 263: ...e 23 2 The General Screen Use this screen to configure system admin password Click Maintenance System to open the General screen Figure 147 Maintenance System General The following table describes the...

Page 264: ...owing table describes the fields in this screen Retype to confirm Type the new password again for confirmation Apply Click this to save your changes Cancel Click this to restore your previously saved...

Page 265: ...lock field uses the 24 hour format Here are a couple of examples Daylight Saving Time starts in most parts of the United States on the second Sunday of March Each time zone in the United States starts...

Page 266: ...Chapter 23 System Settings ADSL Router Series User s Guide 266...

Page 267: ...the event occurs They include system errors attacks access control and attempted access to blocked web sites Some categories such as System Errors consist of both logs and alerts You may differentiate...

Page 268: ...Settings Screen Use the Log Settings screen to configure to where the ZyXEL Device is to send logs and which logs and or immediate alerts the ZyXEL Device is to record and display To change your ZyXE...

Page 269: ...Mode Select Local File to record the logs and store them in the local memory of the ZyXEL Device only Select Local File and Remote to record the logs and store them in the local memory and also send l...

Page 270: ...Chapter 24 Logs ADSL Router Series User s Guide 270...

Page 271: ...n download new firmware releases from your nearest ZyXEL FTP site or www zyxel com to use to upgrade your device s performance Only use firmware for your device s specific model Refer to the label on...

Page 272: ...me operating systems you may see the following icon on your desktop Figure 153 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the Status screen...

Page 273: ...rs in this screen as shown next Figure 155 Maintenance Tools Configuration Backup Configuration Backup Configuration allows you to back up save the ZyXEL Device s current configuration to a file on yo...

Page 274: ...twork disconnect In some operating systems you may see the following icon on your desktop Figure 157 Network Temporarily Disconnected If you uploaded the default configuration file you may need to cha...

Page 275: ...d return the ZyXEL Device to its factory defaults The following warning screen appears Figure 159 Reset Warning Message Figure 160 Reset In Process Message You can also press the RESET button on the r...

Page 276: ...Tools ADSL Router Series User s Guide 276 Click Maintenance Tools Restart Click Restart to have the ZyXEL Device reboot This does not affect the ZyXEL Device s configuration Figure 161 Maintenance Too...

Page 277: ...s Use the DSL Line screen Section 26 3 on page 278 to view the DSL line statistics and reset the ADSL line 26 2 The General Screen Use this screen to ping an IP address Click Maintenance Diagnostic to...

Page 278: ...stics and reset the ADSL line Click Maintenance Diagnostic DSL Line to open the screen shown next Figure 163 Maintenance Diagnostic DSL Line Ping Click this to ping the IP address that you entered Pin...

Page 279: ...is the number of ATM cells sent that were rejected inF4Pkts is the number of ATM Operations Administration and Management OAM F4 cells that have been received See ITU recommendation I 610 for more on...

Page 280: ...mine the quality of the connection whether a given sub carrier loop has sufficient margins to support certain ADSL transmission rates and possibly to determine whether particular specific types of int...

Page 281: ...e you are using the power adaptor or cord included with the ZyXEL Device 3 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source Make sure...

Page 282: ...er of this User s Guide 2 If this does not work you have to reset the device to its factory defaults See Section 1 6 on page 26 I cannot see or access the Login screen for the web configurator 1 Make...

Page 283: ...out of the ZyXEL Device in the other session or ask the person who is logged in to log out 3 Turn the ZyXEL Device off and on 4 If this does not work you have to reset the device to its factory defaul...

Page 284: ...Section 28 1 on page 285 2 Turn the ZyXEL Device off and on 3 If the problem continues contact your ISP The Internet connection is slow or intermittent 1 There might be a lot of traffic on the network...

Page 285: ...tion with a device on the Local Area Network LAN Blinking The ZyXEL Device is sending receiving data to from the LAN Off The ZyXEL Device does not have an Ethernet connection with the LAN WPS WLAN Gre...

Page 286: ...nnection with a device on the Local Area Network LAN Blinking The ZyXEL Device is transmitting data to or receiving data from the LAN Off The ZyXEL Device does not have an Ethernet connection with the...

Page 287: ...P application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configur...

Page 288: ...dow click Add 2 Select Protocol and then click Add 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need Client for Microso...

Page 289: ...IP Address and Subnet Mask fields Figure 165 Windows 95 98 Me TCP IP Properties IP Address 3 Click the DNS Configuration tab If you do not know your DNS information select Disable DNS If you know your...

Page 290: ...lose the Network window Insert the Windows CD if prompted 7 Turn on your ZyXEL Device and restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 In the Run window type win...

Page 291: ...de 291 2 In the Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 168 Windows XP Control Panel 3 Right click Local Area Connection and then click...

Page 292: ...ick Properties Figure 170 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain...

Page 293: ...n IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure...

Page 294: ...roperties 7 In the Internet Protocol TCP IP Properties window the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know y...

Page 295: ...e the Local Area Connection Properties window 10 Close the Network Connections window Network and Dial up Connections in Windows 2000 NT 11 Turn on your ZyXEL Device and restart your computer if promp...

Page 296: ...User s Guide 296 1 Click the Start icon Control Panel Figure 174 Windows Vista Start Menu 2 In the Control Panel double click Network and Internet Figure 175 Windows Vista Control Panel 3 Click Netwo...

Page 297: ...k connections Figure 177 Windows Vista Network and Sharing Center 5 Right click Local Area Connection and then click Properties Note During this procedure click Continue whenever Windows displays a sc...

Page 298: ...s Figure 179 Windows Vista Local Area Connection Properties 7 The Internet Protocol Version 4 TCP IPv4 Properties window opens the General tab If you have a dynamic IP address click Obtain an IP addre...

Page 299: ...gs tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add C...

Page 300: ...Properties 9 In the Internet Protocol Version 4 TCP IPv4 Properties window the General tab Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know y...

Page 301: ...t Protocol Version 4 TCP IPv4 Properties window 11 Click Close to close the Local Area Connection Properties window 12 Close the Network Connections window 13 Turn on your ZyXEL Device and restart you...

Page 302: ...g up Your Computer s IP Address ADSL Router Series User s Guide 302 Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel Figure 183 Macintosh...

Page 303: ...ddress box Type your subnet mask in the Subnet mask box Type the IP address of your ZyXEL Device in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save changes to...

Page 304: ...cintosh OS X Network 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box...

Page 305: ...ile location may vary depending on your Linux distribution and release version Note Make sure you are logged in as the root administrator Using the K Desktop Environment KDE Follow the steps below to...

Page 306: ...btain IP address settings with and select dhcp from the drop down list If you have a static IP address click Statically set IP Addresses and fill in the Address Subnet mask and Default Gateway Address...

Page 307: ...th0 is the name of the Ethernet card Open the configuration file with any plain text editor If you have a dynamic IP address enter dhcp in the BOOTPROTO field The following figure shows an example Fig...

Page 308: ...ngs Enter ifconfig in a terminal screen to check your TCP IP properties Figure 195 Red Hat 9 0 Checking TCP IP Properties nameserver 172 23 5 1 nameserver 172 23 5 2 root localhost init d network rest...

Page 309: ...mber and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house...

Page 310: ...as 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address i...

Page 311: ...ple As these two IP addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows Notation Since the mask is always a continuous number of ones b...

Page 312: ...ng a maximum of 28 2 or 254 possible hosts The following figure shows the company network before subnetting Figure 197 Subnetting Example Before Subnetting You can borrow one of the host ID bits to di...

Page 313: ...192 168 1 1 and the highest is 192 168 1 126 Similarly the host ID range for subnet B is 192 168 1 129 to 192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask...

Page 314: ...Host ID 192 168 1 126 Table 109 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111...

Page 315: ...T MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 25...

Page 316: ...Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the ZyXEL Device unless you are instructed t...

Page 317: ...y Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up bl...

Page 318: ...n of the screen This disables any web pop up blockers you may have enabled Figure 200 Internet Options Privacy 3 Click Apply to save this setting Enable Pop up Blockers with Exceptions Alternatively i...

Page 319: ...outer Series User s Guide 319 2 Select Settings to open the Pop up Blocker Settings screen Figure 201 Internet Options Privacy 3 Type the IP address of your device the web page that you do not want to...

Page 320: ...ck Add to move the IP address to the list of Allowed sites Figure 202 Pop up Blocker Settings 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of t...

Page 321: ...xplorer click Tools Internet Options and then the Security tab Figure 203 Internet Options Security 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that E...

Page 322: ...lick OK to close the window Figure 204 Security Settings Java Scripting Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button...

Page 323: ...s ADSL Router Series User s Guide 323 5 Click OK to close the window Figure 205 Security Settings Java JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make s...

Page 324: ...lick OK to close the window Figure 206 Java Sun Mozilla Firefox Mozilla Firefox 2 0 screens are used here Screens for other versions may vary You can enable Java Javascripts and pop ups in one screen...

Page 325: ...Windows JavaScripts and Java Permissions ADSL Router Series User s Guide 325 Click Content to show the screen below Select the check boxes as shown in the following screen Figure 208 Mozilla Firefox...

Page 326: ...Appendix C Pop up Windows JavaScripts and Java Permissions ADSL Router Series User s Guide 326...

Page 327: ...ich is commonly referred to as an ad hoc network or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an ad hoc wireless L...

Page 328: ...et ESS consists of a series of overlapping BSSs each containing an access point with each access point connected together by a wired network This wired connection between APs is called a Distribution...

Page 329: ...reduce interference Interference occurs when radio signals from different access points overlap causing interference and degrading performance Adjacent channels partially overlap however To avoid inte...

Page 330: ...erves and confirms with the requesting station the time frame for the requested transmission Stations can send frames smaller than the specified RTS CTS directly to the AP without the RTS Request To S...

Page 331: ...use short preamble when all wireless devices on the network support it otherwise the ZyXEL Device uses long preamble Note The wireless devices MUST use the same preamble mode in order to communicate I...

Page 332: ...ed user profile and accounting management on a network RADIUS server Support for EAP Extensible Authentication Protocol RFC 2486 that allows additional authentication methods to be deployed with no ch...

Page 333: ...e network security the access point and the RADIUS server use a shared secret key which is a password they both know The key is not sent over the network In addition to the shared key password informa...

Page 334: ...is makes user identity vulnerable to passive attacks A digital certificate is an electronic ID card that authenticates the sender s identity However to implement EAP TLS you need a Certificate Authori...

Page 335: ...quires a single identical password entered into each access point wireless gateway and wireless client As long as the passwords match a wireless client will be granted access to a WLAN If the AP or th...

Page 336: ...e common password approach makes WPA 2 PSK susceptible to brute force password guessing attacks but it s still an improvement over WEP as it employs a consistent single alphanumeric password to derive...

Page 337: ...e RADIUS server distributes the PMK to the AP The AP then sets up a key hierarchy and management system using the PMK to dynamically generate unique data encryption keys The keys are used to encrypt e...

Page 338: ...nna couples RF signals onto air A transmitter within a wireless device sends an RF signal to the antenna which propagates the signal through the air The antenna also operates in reverse by capturing R...

Page 339: ...e are two types of antennas used for wireless LAN applications Omni directional antennas send the RF signal out in all directions on a horizontal plane The coverage area is torus shaped like a donut w...

Page 340: ...Appendix D Wireless LANs ADSL Router Series User s Guide 340...

Page 341: ...2f 0000 0000 0015 can be written as 2001 0db8 1a2f 0000 0000 0015 2001 0db8 0000 0000 1a2f 0015 2001 db8 1a2f 0 0 15 or 2001 db8 0 0 1a2f 15 Prefix and Prefix Length Similar to an IPv4 subnet mask IPv...

Page 342: ...hosts in a multicast group Multicast scope allows you to determine the size of the multicast group A multicast address has a predefined prefix of ff00 8 The following table describes some of the prede...

Page 343: ...e first byte of the MAC address See the following example Stateless Autoconfiguration With stateless autoconfiguration in IPv6 addresses can be uniquely and automatically generated Unlike DHCPv6 Dynam...

Page 344: ...the IA Each IA holds one type of address IA_NA means an identity association for non temporary addresses and IA_TA is an identity association for temporary addresses An IA_NA option contains the T1 a...

Page 345: ...errors encountered in packet processing and perform other diagnostic functions such as ping Multicast Listener Discovery The Multicast Listener Discovery MLD protocol defined in RFC 2710 is derived f...

Page 346: ...IPv4 network Figure 215 Configured Tunnel Example 6to4 Tunnel A 6to4 tunnel is an automatic tunnelling mechanism that provides connection between IPv6 networks across an IPv4 network To transmit IPv6...

Page 347: ...nterface on your computer Example Enabling DHCPv6 on Windows XP Windows XP does not support DHCPv6 If your network uses DHCPv6 for IP address assignment you have to additionally install a DHCPv6 clien...

Page 348: ...s from a DHCPv6 server Example Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer To enable IPv6 in Windows 7 1 Select Co...

Page 349: ...our dynamic IPv6 address This example shows a global address 2001 b021 2d 1000 obtained from a DHCP server C ipconfig Windows IP Configuration Ethernet adapter Local Area Connection Connection specifi...

Page 350: ...Appendix E IPv6 ADSL Router Series User s Guide 350...

Page 351: ...type of IP protocol used by the service If this is TCP UDP then the service uses the same port number with TCP and UDP If this is USER DEFINED the Port s is the IP protocol number not the port number...

Page 352: ...col a program to enable fast transfer of files including large files that may not be possible by e mail H 323 TCP 1720 NetMeeting uses this protocol HTTP TCP 80 Hyper Text Transfer Protocol a client s...

Page 353: ...L GRE User Defined 47 PPTP Point to Point Tunneling Protocol enables secure transfer of data over public networks This is the data channel RCMD TCP 512 Remote Command Service REAL_AUDIO TCP 7070 A str...

Page 354: ...P 1558 Stream Works Protocol SYSLOG UDP 514 Syslog allows you to send system logs to a UNIX server TACACS UDP 49 Login Host Protocol used for Terminal Access Controller Access Control System TELNET TC...

Page 355: ...notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only an...

Page 356: ...itter must not be co located or operating in conjunction with any other antenna or transmitter IEEE 802 11b 802 11g or 802 11n 20MHz operation of this product in the U S A is firmware limited to chann...

Page 357: ...act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warrant...

Page 358: ...irective 1999 5 EC Spanish Por medio de la presente ZyXEL declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999 5 CE...

Page 359: ...Portuguese ZyXEL declara que este equipamento est conforme com os requisitos essenciais e outras disposi es da Directiva 1999 5 EC Slovenian ZyXEL izjavlja da je ta oprema v skladu z bistvenimi zahtev...

Page 360: ...Instituut voor postdiensten en telecommunicatie BIPT Zie http www bipt be voor meer gegevens Les liaisons sans fil pour une utilisation en ext rieur d une distance sup rieure 300 m tres doivent tre no...

Page 361: ...www sviluppoeconomico gov it per maggiori dettagli Latvia The outdoor usage of the 2 4 GHz band requires an authorization from the Electronic Communications Office Please check http www esd lv for mo...

Page 362: ...Appendix G Legal Information ADSL Router Series User s Guide 362...

Page 363: ...ng 156 rules 157 types 157 158 161 administrator password 30 263 alerts 267 alternative subnet mask notation 312 antenna directional 339 gain 339 omni directional 339 anti probing 165 AP access point...

Page 364: ...CTS Clear to Send 330 CTS threshold 129 139 customized services 171 172 173 CWMP 259 activation 260 configuration 260 D data fragment threshold 129 139 DDoS 164 default server NAT 153 154 Denials of S...

Page 365: ...154 example 153 rules 155 fragmentation threshold 129 139 330 FTP 23 222 H hidden node 329 I IANA 316 Internet Assigned Numbers Authority see IANA IBSS 327 ICMP 165 226 IEEE 802 11g 331 IGA 159 IGMP 9...

Page 366: ...ing address 156 rules 157 types 157 158 161 Maximum Burst Size see MBS Maximum Transmission Unit see MTU MBS 99 104 107 MBSSID 142 MTU 99 104 multicast 94 99 110 112 121 IGMPInternet Group Multicast P...

Page 367: ...ee PBC push button WPS 143 PVC 204 PVID 207 Q QoS 209 802 1p 214 215 activation 211 213 DSCP 214 example 209 IP precedence 214 215 priority queue 216 Quality of Service see QoS R RADIUS 332 message ty...

Page 368: ...us 32 35 39 ATM 279 DSL connections 280 firewalls 38 firmware version 36 LAN 37 WAN 37 wireless LAN 38 WPS 133 SUA 152 subnet 309 subnet mask 110 120 310 subnetting 312 Sustain Cell Rate see SCR SYN a...

Page 369: ...etup 95 status 37 traffic shaping 107 example 107 VCI 96 102 106 VPI 96 102 106 warranty 357 note 357 WDS 135 143 compatibility 135 example 143 web configurator 23 29 login 29 passwords 29 30 WEP 127...

Page 370: ...WPA 141 335 key caching 336 pre authentication 336 user authentication 336 vs WPA PSK 336 wireless client supplicant 336 with RADIUS application example 337 WPA2 335 user authentication 336 vs WPA2 PS...

Page 371: ...Index ADSL Router Series User s Guide 371...

Page 372: ...Index ADSL Router Series User s Guide 372...

Search results

Summary of Contents for P-660H-61

Reviews:

Related manuals for P-660H-61

Brands by name

Popular brands

ZyXEL Communications P-660H-61, User Manual

Search results

Summary of Contents for P-660H-61

Reviews:

Related manuals for P-660H-61

Brands by name

Popular brands