ZyXEL Communications P-660HN-TxA User Manual Download Page 319

Page: 319 / 324

Index

P-660HN-TxA User’s Guide

319

RADIUS

message types

messages

shared secret key

RADIUS server

reauthentication, WPA

109

registration

product

314

Summary of Contents for P-660HN-TxA

Page 1: ...www zyxel com P 660HN TxA 802 11n Wireless ADSL2 4 port Gateway Copyright 2010 ZyXEL Communications Corporation Firmware Version 3 40 Edition 2 8 2010 Default Login Details IP Address http 192 168 1 1...

Page 2: ......

Page 3: ...t up and running right away It contains information on setting up your network and configuring for Internet access Support Disc Refer to the included CD for support documents ZyXEL Web Site Please ref...

Page 4: ...iences as well Customer Support In the event of problems that cannot be solved by using this manual you should contact your vendor If you cannot contact your vendor then contact a ZyXEL office for the...

Page 5: ...t A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the E...

Page 6: ...uide 6 Icons Used in Figures Figures in this User s Guide may use the following generic icons The ZyXEL Device icon is not an exact representation of your device ZyXEL Device Computer Notebook compute...

Page 7: ...Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is...

Page 8: ...Safety Warnings P 660HN TxA User s Guide 8...

Page 9: ...t and Wireless Setup Wizard 59 WAN Setup 73 LAN Setup 89 Wireless LAN 103 Network Address Translation NAT 135 Firewall 151 Filters 155 Static Route 161 802 1Q 1P 165 Quality of Service QoS 171 Dynamic...

Page 10: ...Contents Overview P 660HN TxA User s Guide 10...

Page 11: ...d Habits for Managing the ZyXEL Device 22 1 4 Applications for the ZyXEL Device 22 1 4 1 Internet Access 22 1 5 Wireless Access 23 1 5 1 Using the WPS WLAN Button 23 1 6 LEDs Lights 25 1 7 The RESET B...

Page 12: ...e to One Mapping 54 4 6 Multiple WAN Connections Example 55 Part II Technical Reference 57 Chapter 5 Internet and Wireless Setup Wizard 59 5 1 Overview 59 5 2 Internet Access Wizard Setup 59 5 2 1 Man...

Page 13: ...lient List Screen 94 7 5 The IP Alias Screen 95 7 5 1 Configuring the LAN IP Alias Screen 96 7 6 LAN Technical Reference 97 7 6 1 LANs WANs and the ZyXEL Device 98 7 6 2 DHCP Setup 98 7 6 3 DNS Server...

Page 14: ...Can Do in the NAT Screens 135 9 1 2 What You Need To Know About NAT 135 9 2 The NAT General Setup Screen 137 9 3 The Port Forwarding Screen 138 9 3 1 Configuring the Port Forwarding Screen 139 9 3 2 T...

Page 15: ...at You Need to Know About 802 1Q 1P 165 13 2 The 802 1Q 1P Group Setting Screen 166 13 2 1 Editing 802 1Q 1P Group Setting 168 13 3 The 802 1Q 1P Port Setting Screen 169 Chapter 14 Quality of Service...

Page 16: ...91 17 1 Overview 191 17 1 1 What You Can Do in the UPnP Screen 191 17 1 2 What You Need to Know About UPnP 191 17 2 The UPnP Screen 193 17 3 Installing UPnP in Windows Example 194 17 4 Using UPnP in W...

Page 17: ...oubleshooting 233 23 1 Power Hardware Connections and LEDs 233 23 2 ZyXEL Device Access and Login 234 23 3 Internet Access 236 Chapter 24 Product Specifications 239 24 1 Hardware Specifications 239 24...

Page 18: ...Table of Contents P 660HN TxA User s Guide 18...

Page 19: ...19 PART I User s Guide...

Page 20: ...20...

Page 21: ...e analog telephone system POTS Plain Old Telephone Service Models ending in 3 denote a device that works over ISDN Integrated Services Digital Network or T ISDN UR 2 Only use firmware for your ZyXEL D...

Page 22: ...re it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the ZyXEL Device to its factory default...

Page 23: ...example you could make sure that the ZyXEL Device gives voice over Internet calls high priority and or limit bandwidth devoted to the boss s excessive file downloading 1 5 Wireless Access The ZyXEL De...

Page 24: ...he WPS WLAN button for five to ten seconds and release it 3 Press the WPS button on another WPS enabled device within range of the ZyXEL Device The WPS WLAN LED should flash while the ZyXEL Device set...

Page 25: ...e detected an error while self testing or there is a device malfunction Off The ZyXEL Device is not receiving power LAN 1 4 Green On The ZyXEL Device has an Ethernet connection with a device on the Lo...

Page 26: ...L line is up Blinking The ZyXEL Device is initializing the DSL line Off The DSL line is down INTERNET Green On The ZyXEL Device has an IP connection but no traffic Your device has a WAN IP address eit...

Page 27: ...e sure the POWER LED is on not blinking 2 To set the device back to the factory default settings press the RESET button for ten seconds or until the POWER LED begins to blink and then release it When...

Page 28: ...Chapter 1 Introduction P 660HN TxA User s Guide 28...

Page 29: ...els In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by...

Page 30: ...the default user password in the password field If you have changed the password enter your password and click Login Figure 4 Password Screen 5 The following screen displays if you have not yet chang...

Page 31: ...wise select Go to Advanced setup and click Apply to display the Status screen Figure 6 Replace Factory Default Certificate Screen Note For security reasons the ZyXEL Device automatically logs you out...

Page 32: ...Click this icon to log out of the web configurator Table 3 Navigation Panel Summary LINK TAB FUNCTION Status This screen shows the ZyXEL Device s general device and network status information Use this...

Page 33: ...in applications IP MAC Filter Use this screen to configure IP MAC filtering rules for incoming or outgoing traffic Advanced Static Route Use this screen to configure IP static routes to tell your devi...

Page 34: ...device will respond to pings and probes for services that you have not made available UPnP General Use this screen to turn UPnP on or off CWMP Use this screen to have a management server manage the Z...

Page 35: ...tatus of the device system resources and interfaces LAN and WAN The Status screen also provides detailed information from DHCP and statistics from bandwidth management and traffic 3 2 The Status Scree...

Page 36: ...go to the screen where you can change it IP Subnet Mask This is the current subnet mask in the WAN Default Gateway This is the IP address of the default gateway if applicable VPI VCI This is the Virtu...

Page 37: ...he ZyXEL Device You can change this in Maintenance System Time Setting System Mode This displays whether the ZyXEL Device is functioning as a router or a bridge CPU Usage This field displays what perc...

Page 38: ...you re using PPPoE encapsulation For the LAN interface this field displays Up when the ZyXEL Device is using the interface and Down when the ZyXEL Device is not using the interface For the WLAN inter...

Page 39: ...52 Multiple WAN Connections Example see page 55 4 2 Setting Up a Secure Wireless Network Thomas wants to set up a wireless network so that he can use his notebook to access the Internet In this wirele...

Page 40: ...up a wireless network 1 Click Network Wireless LAN to open the AP screen Configure the screen using the provided parameters see page 40 Click Apply 2 Click the Advanced Setup button and select 802 11...

Page 41: ...le a WPS USB adapter or PCMCIA card There are two WPS methods to set up the wireless client settings Push Button Configuration PBC simply press a button This is the easier of the two methods PIN Confi...

Page 42: ...evice has a WPS button located on its rear panel as well as a WPS button in its configuration utility Both buttons have exactly the same function you can use one or the other Note It doesn t matter wh...

Page 43: ...shows you an example of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client Example WPS Process PBC Method Wireless Client ZyXEL Device SECU...

Page 44: ...IN number 2 Enter the PIN number in the PIN field in the Network Wireless LAN WPS Station screen on the ZyXEL Device 3 Click the Start buttons or the button next to the PIN field on both the wireless...

Page 45: ...ing figure shows you how to set up a wireless network and its security on a ZyXEL Device and a wireless client by using PIN method Example WPS Process PIN Method Authentication by PIN SECURITY INFO WI...

Page 46: ...ce supports IEEE 802 11b and IEEE 802 11g wireless clients Make sure that your notebook or computer s wireless adapter supports one of these standards 4 2 4 Setting Up Wireless Network Scheduling Thom...

Page 47: ...ng the MAC Address Filter Thomas noticed that his daughter Josephine spends too much time surfing the web and downloading media files He decided to prevent Josephine from accessing the Internet so tha...

Page 48: ...TxA User s Guide 48 1 Click Network LAN Client List to open the following screen Look for the MAC address of Josephine s computer 2 Click Network Wireless LAN to open the AP screen Click the Edit but...

Page 49: ...ther Network In order to extend your Intranet and control traffic flowing directions you may connect a router to the ZyXEL Device s LAN The router may be used to separate two department networks This...

Page 50: ...the ZyXEL Device to specify R as the router in charge of forwarding traffic to N2 In this case the ZyXEL Device routes traffic from A to R and then R routes the traffic to B This tutorial uses the fol...

Page 51: ...the Static Route Setup screen using the following settings 4a Type 192 168 10 0 and subnet mask 255 255 255 0 for the destination N2 4b Type 192 168 1 253 R s N1 address in the Gateway IP Address fiel...

Page 52: ...public IP addresses You want to map them to two servers A and B This tutorial uses the following example settings To do this you can use either of the following settings Full Feature NAT with many to...

Page 53: ...uters A and B For example VoIP application See Section 4 5 2 on page 54 if it is not To configure this 1 Click Network NAT 2 Select Active Network Address Translation NAT and Full Feature in the Gener...

Page 54: ...s setting if your applications must use fixed public IP addresses and the applications can be initiated either from the Intranet computers A and B or the Internet computer C For example gaming applica...

Page 55: ...Start IP 192 168 1 2 Global Start IP 172 16 1 253 Rule 2 This maps the public IP address 172 16 1 254 to the private IP address 192 168 1 3 Type One to One Local Start IP 192 168 1 3 Global Start IP 1...

Page 56: ...figured over the ADSL line The connection with VPI VCI 0 33 is dedicated for Media On Demand MOD service The connection with VPI VCI 0 34 is dedicated for VoIP service The connection with VPI VCI 0 35...

Page 57: ...57 PART II Technical Reference...

Page 58: ...58...

Page 59: ...rmation given to you by your ISP Note See the advanced menu chapters for background information on these fields 5 2 Internet Access Wizard Setup 1 After you enter the password to access the web config...

Page 60: ...not detected Check your hardware connections and click Restart the INTERNET WIRELESS SETUP Wizard to return to the wizard welcome screen If you still cannot connect click Manually configure your Inter...

Page 61: ...or service name exactly as provided by your ISP Then click Next and see Section 5 3 on page 68 for wireless connection wizard setup Figure 13 Auto Detection PPPoE 3c The following screen appears if th...

Page 62: ...s LABEL DESCRIPTION Mode Select Routing default from the drop down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account Select Bridge when you...

Page 63: ...t box either VC based or LLC based Virtual Circuit ID VPI Virtual Path Identifier and VCI Virtual Channel Identifier define a virtual circuit Refer to the appendix for more information VPI Enter the V...

Page 64: ...the user name exactly as your ISP assigned If assigned a name in the form user domain where domain identifies a service name then enter both components exactly as given Password Enter the password ass...

Page 65: ...T ENCAP Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field Type your ISP assigned IP address in this field Back Clic...

Page 66: ...tic IP Address if your ISP gave you an IP address to use IP Address Enter your ISP assigned IP address Subnet Mask Enter a subnet mask in dotted decimal notation Refer to the appendix to calculate a s...

Page 67: ...Connection Test Failed 1 If the following screen displays check if your account is activated or click Restart the Internet Wireless Setup Wizard to verify your Internet access settings Figure 21 Conne...

Page 68: ...o configure wireless settings Otherwise select No and skip to Step 6 Figure 22 Connection Test Successful 2 Use this screen to activate the wireless LAN Click Next to continue Figure 23 Wireless LAN S...

Page 69: ...ake sure all wireless stations use the same SSID in order to access the network Channel Selection The range of radio frequencies used by IEEE 802 11b g wireless devices is called a channel Select a ch...

Page 70: ...Figure 25 Manually Assign a WPA PSK key The following table describes the labels in this screen Next Click this to continue to the next wizard screen Exit Click this to close the wizard screen without...

Page 71: ...ure 27 Wireless LAN Setup 3 Table 15 Manually Assign a WEP key LABEL DESCRIPTION Key The WEP keys are used to encrypt data Both the ZyXEL Device and the wireless stations must use the same WEP key for...

Page 72: ...chose not to configure wireless LAN settings Figure 28 Internet Access and WLAN Wizard Setup Complete 7 Launch your web browser and navigate to www zyxel com Internet access is just the beginning Refe...

Page 73: ...re 29 LAN and WAN 6 1 1 What You Can Do in the WAN Screens Use the Internet Access Setup screen Section 6 2 on page 75 to configure the WAN settings on the ZyXEL Device for Internet access Use the Mor...

Page 74: ...the Ethernet or ENET ENCAP encapsulation method Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipient or Broadcast 1 sender everybody on the networ...

Page 75: ...table describes the labels in this screen Table 16 Network WAN Internet Access Setup LABEL DESCRIPTION Line ADSL Mode Select the mode supported by your ISP Use Auto Sync Up if you are not sure which...

Page 76: ...lexing Select the method of multiplexing used by your ISP from the drop down list Choices are VC or LLC This field is not available if you set the WAN type to Ethernet Virtual Circuit ID VPI Virtual P...

Page 77: ...p the connection automatically if it is disconnected Connect on Demand Select Connect on Demand when you don t want the connection up all the time and specify an idle time out in the Max Idle Timeout...

Page 78: ...S Type Select CBR Continuous Bit Rate to specify fixed always on bandwidth for voice or data traffic Select UBR Unspecified Bit Rate for applications that are non time sensitive such as e mail Select...

Page 79: ...to save your changes Cancel Click this to restore your previously saved settings Table 17 Network WAN Internet Access Setup Advanced Setup continued LABEL DESCRIPTION Table 18 Network WAN More Connec...

Page 80: ...ction is read only in this screen Use the WAN Internet Access Setup screen to edit it Click the Edit icon to edit the Internet connection settings Click this icon on an empty configuration to add a ne...

Page 81: ...a specific virtual circuit for example VC1 will carry IP If you select VC specify separate VPI and VCI numbers for each protocol For LLC based multiplexing or PPP encapsulation one VC carries multipl...

Page 82: ...en you don t want the connection up all the time and specify an idle time out in the Max Idle Timeout field Max Idle Timeout Specify an idle time out in the Max Idle Timeout field when you select Conn...

Page 83: ...ng with other applications Peak Cell Rate Divide the DSL line rate bps by 424 the size of an ATM cell to find the Peak Cell Rate PCR This is the maximum rate at which the sender can send cells Type th...

Page 84: ...ervices a function known as dynamic service selection This enables the service provider to easily create and offer new IP services for individuals Operationally PPPoE saves significant effort for both...

Page 85: ...ntageous if it is not practical to have a separate VC for each carried protocol for example if charging heavily depends on the number of simultaneous VCs 6 4 3 VPI and VCI Be sure to use the correct V...

Page 86: ...connection is down A nailed up connection can be very expensive for obvious reasons Do not specify a nailed up connection unless your telephone company offers flat rate service or you need a constant...

Page 87: ...relationship between PCR SCR and MBS Figure 35 Example of Traffic Shaping 6 5 1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4 0 Specificatio...

Page 88: ...tion to the video image s changing dynamics The VBR nRT non real time Variable Bit Rate type is used with bursty connections that do not require closely controlled delay and delay variation It is comm...

Page 89: ...LAN Screens Use the LAN IP screen Section 7 2 on page 91 to set the LAN IP address and subnet mask of your ZyXEL device You can also edit your ZyXEL Device s RIP multicast and Windows Networking setti...

Page 90: ...Routing Information Protocol allows a router to exchange routing information with other routers Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipie...

Page 91: ...d subnet mask of your ZyXEL Device Click Network LAN to open the IP screen Follow these steps to configure your LAN settings 1 Enter an IP address into the IP Address field The IP address must be in d...

Page 92: ...ice automatically computes the subnet mask based on the IP Address you enter so do not change this field unless you are instructed to do so Apply Click this to save your changes Cancel Click this to r...

Page 93: ...NT and other systems that support the DHCP client If set to None the DHCP server will be disabled If set to Relay the ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and respons...

Page 94: ...Network LAN Client List The following table describes the labels in this screen DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS Domain Name System server IP address to the DHCP clien...

Page 95: ...ddress relative to the field listed above MAC Address The MAC Media Access Control or Ethernet address on a LAN Local Area Network is unique to your computer six pairs of hexadecimal notation A networ...

Page 96: ...s screen Ethernet Interface A 192 168 1 1 192 168 1 24 B 192 168 2 1 192 168 2 24 C 192 168 3 1 192 168 3 24 Table 25 Network LAN IP Alias LABEL DESCRIPTION IP Alias 1 Select the check box to configur...

Page 97: ...Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends it recognizes both formats when receiving RIP 1 is universally supported but RIP 2 carries...

Page 98: ...on for the clients If you turn DHCP service off you must have another DHCP server on your LAN or else the computer must be manually configured IP Pool Setup The ZyXEL Device is pre configured with a p...

Page 99: ...your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresse...

Page 100: ...your network administrator for the appropriate IP addresses Note Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information...

Page 101: ...ess to a particular host on the network If you would like to read more detailed information about interoperability between IGMP version 2 and version 1 please see sections 4 and 5 of RFC 2236 The clas...

Page 102: ...Chapter 7 LAN Setup P 660HN TxA User s Guide 102...

Page 103: ...e screens to set up your ZyXEL Device s wireless connection Use the AP screen see Section 8 2 on page 105 to turn the wireless connection on or off set up wireless security configure the MAC filter an...

Page 104: ...that there a number of wireless networking standards available with different methods of data encryption SSID Each network must have a name referred to as the SSID Service Set IDentifier The service...

Page 105: ...f so you can set up a well secured network very easily Even if some of your devices support WPS and some do not you can use WPS to set up your network and then add the non WPS devices manually althoug...

Page 106: ...to the wireless LAN and you change the ZyXEL Device s SSID or WEP settings you will lose your wireless connection when you press Apply to confirm You must then change the wireless settings of your co...

Page 107: ...xtremely insecure Its encryption can be broken by an attacker using widely available software It is strongly recommended that you use a more effective security mechanism Use the strongest security mec...

Page 108: ...use the same WEP key for data transmission If you want to manually set the WEP key enter any 5 or 13 characters ASCII string or 10 or 26 hexadecimal characters 0 9 A F for a 64 bit or 128 bit WEP key...

Page 109: ...the ZyXEL Device is using WPA2 PSK or WPA2 ReAuthentication Timer Specify how often wireless stations have to resend usernames and passwords in order to stay connected Enter a time interval between 10...

Page 110: ...er Enter the port number of the external authentication server You need not change this value unless your network administrator instructs you to do so with additional information Shared Secret Enter a...

Page 111: ...ither IEEE 802 11b or IEEE 802 11g compliant WLAN devices to associate with the ZyXEL Device The transmission rate of your ZyXEL Device might be reduced Select 802 11n to allow only IEEE 802 11n compl...

Page 112: ...ltering Filter Action Define the filter action for the list of MAC addresses in the MAC Address table Select Deny to block access to the ZyXEL Device MAC addresses not listed will be allowed to access...

Page 113: ...LAN More AP LABEL DESCRIPTION This is the index number of each SSID profile Active This field indicates whether this SSID is active SSID An SSID profile is the set of parameters relating to one of the...

Page 114: ...e 7 bit ASCII characters for the wireless LAN Note If you are configuring the ZyXEL Device from a computer connected to the wireless LAN and you change the ZyXEL Device s SSID or security settings you...

Page 115: ...etwork Wireless LAN WPS The following screen displays Figure 52 Network Wireless LAN WPS The following table describes the labels in this screen QoS Select this check box to activate Quality of Servic...

Page 116: ...us This displays Configured when the ZyXEL Device has connected to a wireless network using WPS or Enable WPS is selected and wireless or wireless security settings have been changed The current wirel...

Page 117: ...lients Note At the time of writing WDS is compatible with other ZyXEL APs only Not all models support WDS links Check your other AP s documentation Table 36 Network Wireless LAN WPS Station LABEL DESC...

Page 118: ...AN AP screen TKIP Select this to use TKIP Temporal Key Integrity Protocol encryption AES Select this to use AES Advanced Encryption Standard encryption This is the index number of the individual WDS l...

Page 119: ...ss LAN QoS LABEL DESCRIPTION Enable Wireless LAN Scheduling Select this box to activate wireless LAN scheduling on your ZyXEL Device Action Select On or Off to enable or disable the wireless LAN Day C...

Page 120: ...umerous wireless clients and let them access the network A bridge is a radio that relays communications between access points and wireless clients extending a network s range Traditionally a wireless...

Page 121: ...each wireless network uses a specific channel or frequency to send and receive information Every device in the same wireless network must use security compatible with the AP Security stops unauthoriz...

Page 122: ...h the code key can understand the information and only people who have been authenticated are given the code key Table 39 Additional Wireless Terms TERM DESCRIPTION RTS CTS Threshold In a wireless net...

Page 123: ...mple if your mother owns a 1970 Dodge Challenger and her favorite movie is Vanishing Point which you know was made in 1971 you could use 70dodchal71vanpoi as your security key The following sections i...

Page 124: ...twork has to support IEEE 802 1x to do this For wireless networks you can store the user names and passwords for each user in a RADIUS server This is a server used in businesses more than in homes If...

Page 125: ...ort WPA2 you should set up WPA2 PSK or WPA2 depending on the type of wireless network login and select the WPA compatible option in the ZyXEL Device Many types of encryption use a key to protect the i...

Page 126: ...SID Multiple Basic Service Set IDentifier function allows you to use one access point to provide several BSSs simultaneously You can then assign varying QoS priorities and or security modes to differe...

Page 127: ...WDS link with AP 2 the notebook computer can access the Internet through AP 2 Figure 58 WDS Link Example 8 8 8 WiFi Protected Setup WPS Your ZyXEL Device supports WiFi Protected Setup WPS which is an...

Page 128: ...sends the network name SSID and security key through an secure connection to the enrollee If you need to make sure that WPS worked check the list of associated wireless clients in the AP s configurat...

Page 129: ...d the WPS PIN for the ZyXEL Device see Section 8 4 on page 115 4 Enter the client s PIN in the AP s configuration interface 5 If the client device s configuration interface has an area for entering an...

Page 130: ...vice acts as the enrollee the device that receives network and security settings The registrar creates a secure EAP Extensible Authentication Protocol tunnel and sends the network name SSID and the WP...

Page 131: ...lee All WPS certified APs can be a registrar and so can some WPS enabled wireless clients By default a WPS devices is unconfigured This means that it is not part of an existing network and can act as...

Page 132: ...twork Step 1 In step 2 you add another wireless client to the network You know that Client 1 supports registrar mode but it is better to use AP1 for the WPS handshake with the new client since you mus...

Page 133: ...g the WPS button on the registrar and the first enrollee for example then check that it successfully enrolled then set up the second device in the same way WPS works only with other WPS enabled device...

Page 134: ...if this has happened WPS works between only two devices simultaneously so if another device has enrolled your device will be unable to enroll and will not have access to the network If this happens op...

Page 135: ...the server s on your local network Use the Address Mapping screen Section 9 4 on page 142 to change your ZyXEL Device s address mapping settings Use the ALG screen Section 9 5 on page 145 to enable an...

Page 136: ...P that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world SUA Single User Account Versus NAT SUA Single User Acc...

Page 137: ...ewall Session Per User When computers use peer to peer applications such as file sharing applications they need to establish NAT sessions If you do not limit the number of NAT sessions a single client...

Page 138: ...most often used port numbers and services are shown in Appendix E on page 307 Please refer to RFC 1700 for further information about port numbers Note Many residential broadband ISP accounts do not a...

Page 139: ...the example You assign the LAN IP addresses and the ISP assigns the WAN IP address The NAT network appears as a single host on the Internet Figure 65 Multiple Servers Behind NAT Example 9 3 1 Configur...

Page 140: ...ed service Add Click this button to add a rule to the table below This is the rule index number read only Active This field indicates whether the rule is active or not Clear the check box to disable t...

Page 141: ...forward a series of ports enter the start port number here and the end port number in the End Port field End Port Enter a port number in this field To forward only one port enter the port number again...

Page 142: ...ed rule your configured rule will be pushed up by that number of empty rules For example if you have already configured rules 1 to 6 in your current set and now you configure rule number 9 In the set...

Page 143: ...al IP Address IGA This field is N A for One to one Many to One and Server mapping types Type 1 1 One to one mode maps one local IP address to one global IP address Note that port numbers do not change...

Page 144: ...port address translation ZyXEL s Single User Account feature that previous ZyXEL routers supported only Many to Many Overload Many to Many Overload mode maps multiple local IP addresses to shared glo...

Page 145: ...ure 70 Network NAT ALG The following table describes the fields in this screen Global End IP This is the ending global IP address IGA This field is N A for One to One Many to One and Server mapping ty...

Page 146: ...inside host when the packet is on the WAN side The following table summarizes this information NAT never changes the IP address either local or global of an outside host 9 6 2 What NAT Does In the sim...

Page 147: ...address on the WAN For incoming packets the ILA is the destination address on the LAN and the IGA is the destination address on the WAN NAT maps private local IP addresses to globally unique ones requ...

Page 148: ...ess Many to One In Many to One mode the ZyXEL Device maps multiple local IP addresses to one global IP address This is equivalent to SUA for instance PAT port address translation ZyXEL s Single User A...

Page 149: ...NAT mapping types The following table summarizes these types Table 48 NAT Mapping Types TYPE IP MAPPING One to One ILA1 IGA1 Many to One SUA PAT ILA1 IGA1 ILA2 IGA1 Many to Many Overload ILA1 IGA1 IL...

Page 150: ...Chapter 9 Network Address Translation NAT P 660HN TxA User s Guide 150...

Page 151: ...se the Firewall screen Section 10 2 on page 153 to enable firewall and or SPI on the ZyXEL Device 10 1 2 What You Need to Know About Firewall SYN Attack A SYN attack floods a targeted system with a se...

Page 152: ...ss of the target system This makes it appear as if the host computer sent the packets to itself making the system unavailable while the target system tries to respond to itself Ping of Death Ping of D...

Page 153: ...describes the labels in this screen Enabling SPI blocks all traffic initiated from the WAN side including the DMZ virtual server and ACL on the WAN side Table 49 Advanced Firewall LABEL DESCRIPTION F...

Page 154: ...Chapter 10 Firewall P 660HN TxA User s Guide 154...

Page 155: ...o allow or deny traffic from certain types of applications Use the IP MAC Filter screen Section 11 4 on page 158 to create IP MAC filter rules 11 1 2 What You Need to Know About Filtering URL The URL...

Page 156: ...nagement Filter URL LABEL DESCRIPTION URL Filter Editing Active Use this field to enable or disable the URL filter URL Index Select the index number of the filter URL Enter the URL for the ZyXEL Devic...

Page 157: ...ilter The following table describes the labels in this screen Table 51 Access Management Filter Application LABEL DESCRIPTION Application Filter Editing Application Filter Use this field to enable or...

Page 158: ...r The following table describes the labels in this screen Table 52 Access Management Filter IP MAC LABEL DESCRIPTION IP MAC Filter Set Editing IP MAC Filter Set Index Select the index number of the fi...

Page 159: ...is only available when you select MAC in the Rule Type field Enter the MAC address of the packets you wish to filter Rule Unmatched Select the action for a packet not matching the rule Select Forward...

Page 160: ...Filters P 660HN TxA User s Guide 160 DELETE Click this to remove the filter rule CANCEL Click this to restore your previously saved settings Table 52 Access Management Filter IP MAC continued LABEL D...

Page 161: ...static routes For example the next figure shows a computer A connected to the ZyXEL Device s LAN interface The ZyXEL Device routes most traffic from A to the Internet through the ZyXEL Device s defau...

Page 162: ...tatic Route The following table describes the labels in this screen Table 53 Advanced Static Route LABEL DESCRIPTION This is the number of an individual static route Destination This parameter specifi...

Page 163: ...aved settings Table 53 Advanced Static Route LABEL DESCRIPTION Table 54 Advanced Static Route Edit LABEL DESCRIPTION Static Route Setup Destination IP Address This parameter specifies the IP network a...

Page 164: ...Chapter 12 Static Route P 660HN TxA User s Guide 164...

Page 165: ...iority level for traffic trasmitted through the ports Figure 80 802 1Q 1P 13 1 1 What You Can Do in the 802 1Q 1P Screens Use the Group Setting screen Section 13 2 on page 166 to activate 802 1Q 1P sp...

Page 166: ...es To forward a frame from an 802 1Q VLAN aware device to an 802 1Q VLAN unaware device the ZyXEL Device first decides where to forward the frame and then strips off the VLAN tag To forward a frame fr...

Page 167: ...Q feature Summary This field displays the index number of the VLAN group Active This field displays whether 802 1P 1Q is active for the VLAN group VID This field displays the ID number of the VLAN gro...

Page 168: ...he labels in this screen Table 56 Advanced 802 1Q 1P Group Setting Edit LABEL DESCRIPTION Active Select this check box to activate the group setting VLAN ID Assign a VLAN ID for the VLAN group The val...

Page 169: ...etting Tx Tag Select Tx Tagging if you want the port to tag all outgoing traffic trasmitted through this VLAN You select this if you want to create VLANs across different devices and not just the ZyXE...

Page 170: ...N Ports This field displays the types of ports available to join the VLAN group 802 1Q PVID Assign a VLAN ID for the port The valid VID range is between 1 and 4094 The ZyXEL Device assigns the PVID to...

Page 171: ...riority and then queues the packet accordingly Packets assigned with a high priority are processed more quickly than those with low priorities if there is congestion allowing time sensitive applicatio...

Page 172: ...raffic flows All packets in the same flow are given the same priority 802 1p is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class Y...

Page 173: ...oS Screen Use this screen to enable or disable QoS and have the ZyXEL Device assign priority levels to traffic according to the port range IEEE 802 1p priority level and or IP precedence Click Advance...

Page 174: ...ave it blank to apply the rule to all MAC addresses IP Enter a destination IP address in dotted decimal notation QoS is then applied to traffic containing this destination IP address A blank destinati...

Page 175: ...fServ Code Point DSCP range IP Precedence Remarking Enter a range from 0 to 7 to re assign IP precedence to matched traffic Zero is the lowest priority and seven is the highest Type of Service Remarki...

Page 176: ...t range for destination MAC address and IP address Source MAC and IP Mask Port Ranges This is the port range for source MAC address and IP address Protocol ID This is the protocol ID associated with t...

Page 177: ...d to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested Level 5 Typically used for video that consumes high bandwidth and is sensitiv...

Page 178: ...2 010110 010100 010010 010000 5 5 3 011110 011100 011010 011000 250 6 6 4 100110 100100 100010 100000 5 101110 101000 7 7 6 110000 111000 7 Table 61 Internal Layer2 and Layer3 QoS Mapping PRIORITY QU...

Page 179: ...all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic DNS...

Page 180: ...ynamic DNS Service Provider This is the name of your Dynamic DNS service provider Dynamic DNS Type Select the type of service that you are registered for from your Dynamic DNS service provider Host Na...

Page 181: ...the WAN Note When you configure remote management to allow management from the WAN you still need to configure a firewall rule to allow access You may manage your ZyXEL Device from a remote location v...

Page 182: ...ction 16 5 on page 186 to configure through which interface s and from which IP address es users can use SNMP to access the ZyXEL Device Use the DNS screen Section 16 6 on page 188 to configure throug...

Page 183: ...ice automatically logs you out if the management session remains idle for longer than this timeout period The management session does not time out when a statistics screen is polling 16 2 The WWW Scre...

Page 184: ...the server port number for a service if needed However you must use the same port number in order to use that service for remote management Server Access Select the interface s through which a comput...

Page 185: ...igure 91 Advanced Remote MGMT FTP Table 64 Advanced Remote Management Telnet LABEL DESCRIPTION Server Port You may change the server port number for a service if needed however you must use the same p...

Page 186: ...65 Advanced Remote MGMT FTP LABEL DESCRIPTION Server Port You may change the server port number for a service if needed However you must use the same port number in order to use that service for remot...

Page 187: ...ws a manager and agents to communicate for the purpose of accessing these objects 16 5 1 Configuring SNMP To change your ZyXEL Device s SNMP settings click Advanced Remote MGMT SNMP tab The screen app...

Page 188: ...Apply Click Apply to save your changes back to the ZyXEL Device Cancel Click Cancel to begin configuring this screen afresh Table 66 Advanced Remote MGMT SNMP continued LABEL DESCRIPTION Table 67 Adv...

Page 189: ...nfigure the firewall anti probing settings to match Figure 95 Advanced Remote Management ICMP The following table describes the labels in this screen Table 68 Advanced Remote Management ICMP LABEL DES...

Page 190: ...Chapter 16 Remote Management P 660HN TxA User s Guide 190...

Page 191: ...cations to automatically configure the ZyXEL Device 17 1 2 What You Need to Know About UPnP Identifying UPnP Devices UPnP hardware is identified as an icon in the Network Connections folder Windows XP...

Page 192: ...obtained and modified by users in some network environments When a UPnP device joins a network it announces its presence with a multicast message For security reasons the ZyXEL Device allows multicast...

Page 193: ...pplication to open the web configurator s login screen without entering the ZyXEL Device s IP address although you must still enter the password to access the web configurator Allow users to make conf...

Page 194: ...ll UPnP in Windows Me and Windows XP Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on...

Page 195: ...mponents selection box Add Remove Programs Windows Setup Communication Components 4 Click OK to go back to the Add Remove Programs Properties window and click Next 5 Restart the computer when prompted...

Page 196: ...ons window click Advanced in the main menu and select Optional Networking Components Network Connections 4 The Windows Optional Networking Components Wizard window displays Select Networking Service i...

Page 197: ...ext 17 4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL Device Mak...

Page 198: ...660HN TxA User s Guide 198 2 Right click the icon and select Properties Network Connections 3 In the Internet Connection Properties window click Settings to see the port mappings there were automatica...

Page 199: ...r delete the port mappings or click Add to manually add port mappings Internet Connection Properties Advanced Settings Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled devi...

Page 200: ...lay your current Internet connection status Internet Connection Status Web Configurator Easy Access With UPnP you can access the web based configurator on the ZyXEL Device without finding out the IP a...

Page 201: ...niversal Plug and Play UPnP P 660HN TxA User s Guide 201 3 Select My Network Places under Other Places Network Connections 4 An icon with the description for each UPnP enabled device displays under Lo...

Page 202: ...Device and select Invoke The web configurator login screen displays Network Connections My Network Places 6 Right click on the icon for your ZyXEL Device and select Properties A properties window dis...

Page 203: ...Device ZD can be managed via a management server MS such as ZyXEL s Vantage Access Figure 97 LAN and WAN An administrator can use a management server to remotely set up the ZyXEL device modify settin...

Page 204: ...EL Device to be managed by a management server Login ACS Configure this part of the screen to log into the management server URL Type the IP address or domain name of the management server If the ZyXE...

Page 205: ...r your NAT port forwarding rules if they were already configured UserName The user name is used to authenticate the management server when connecting to the ZyXEL Device Type a user name of up to 255...

Page 206: ...Chapter 18 CWMP P 660HN TxA User s Guide 206...

Page 207: ...tivity timeout interval 19 1 1 What You Can Do in the System Settings Screens Use the General screen Section 19 2 on page 207 to configure system settings Use the Time and Date screen Section 19 3 on...

Page 208: ...Date Table 71 Maintenance System General LABEL DESCRIPTION Password Admin Password Old Password Type the default password or the existing password you use to access the system in this field New Passwo...

Page 209: ...the last time configured manually When you set Time and Date Setup to Manual enter the new time in this field and then click Apply New Date yyyy mm dd This field displays the last updated date from th...

Page 210: ...y s time zone is one hour ahead of GMT or UTC GMT 1 End Date Configure the day and time when Daylight Saving Time ends if you selected Enable Daylight Saving The o clock field uses the 24 hour format...

Page 211: ...ed access to blocked web sites Some categories such as System Errors consist of both logs and alerts You may differentiate them by their color in the View Log screen Alerts display in red and logs dis...

Page 212: ...may result in many e mails being sent Figure 101 Maintenance System Logs The following table describes the fields in this screen Table 73 Maintenance Logs Log Settings LABEL DESCRIPTION System Log Lo...

Page 213: ...ful FTP login Someone has logged on to the router via ftp FTP login failed Someone has failed to log on to the router via ftp NAT Session Table is Full The maximum number of NAT session table entries...

Page 214: ...Table 76 Access Control Logs LOG MESSAGE DESCRIPTION Firewall default policy TCP UDP IGMP ESP GRE OSPF Packet Direction Attempted TCP UDP IGMP ESP GRE OSPF access matched the default policy and was bl...

Page 215: ...timeout values ICMP idle timeout s 60UDP idle timeout s 60TCP connection three way handshaking timeout s 30TCP FIN wait timeout s 60TCP idle established timeout s 3600 Exceed MAX incomplete sent TCP...

Page 216: ...ble 80 CDR Logs LOG MESSAGE DESCRIPTION board d line d channel d call d s C01 Outgoing Call dev x ch x s The router received the setup requirements for a call call is the reference count number of the...

Page 217: ...de d The firewall detected an ICMP attack land TCP UDP IGMP ESP GRE OSPF The firewall detected a TCP UDP IGMP ESP GRE OSPF land attack land ICMP type d code d The firewall detected an ICMP land attack...

Page 218: ...ired The router logged out a user whose session expired User logout because of user deassociation The router logged out a user who ended the session User logout because of no authentication response f...

Page 219: ...ource route failed 4 Source Quench 0 A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagrams for output to the next network on the route to the dest...

Page 220: ...haven t configured one when the router generates a syslog The facility is defined in the web MAIN MENU LOGS Log Settings page The severity is the log s syslog class The definition of messages and note...

Page 221: ...ownload new firmware releases from your nearest ZyXEL FTP site or www zyxel com to use to upgrade your device s performance Only use firmware for your device s specific model Refer to the label on the...

Page 222: ...ce again Figure 103 Firmware Upload In Progress Table 90 Maintenance Tools Firmware LABEL DESCRIPTION Current Firmware Version This is the present Firmware version and the date created File Path Type...

Page 223: ...some operating systems you may see the following icon on your desktop Figure 104 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the Status scre...

Page 224: ...on Backup Configuration Backup Configuration allows you to back up save the ZyXEL Device s current configuration to a file on your computer Once your ZyXEL Device is configured and functioning properl...

Page 225: ...k disconnect In some operating systems you may see the following icon on your desktop Figure 108 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change...

Page 226: ...Defaults Click the Reset button to clear all user entered configuration information and return the ZyXEL Device to its factory defaults The following warning screen appears Figure 110 Reset Warning Me...

Page 227: ...to reboot the ZyXEL Device remotely without turning the power off You may need to do this if the ZyXEL Device hangs for example Click Maintenance Tools Restart Click Restart to have the ZyXEL Device r...

Page 228: ...Chapter 21 Tools P 660HN TxA User s Guide 228...

Page 229: ...ou Can Do in the Diagnostic Screens Use the General screen Section 22 2 on page 229 to ping an IP address Use the DSL Line screen Section 22 3 on page 230 to view the DSL line statistics and reset the...

Page 230: ...ine statistics and reset the ADSL line Click Maintenance Diagnostic DSL Line to open the screen shown next Figure 114 Maintenance Diagnostic DSL Line Table 92 Maintenance Diagnostic General LABEL DESC...

Page 231: ...he number of ATM cells sent that were rejected inF4Pkts is the number of ATM Operations Administration and Management OAM F4 cells that have been received See ITU recommendation I 610 for more on OAM...

Page 232: ...e the quality of the connection whether a given sub carrier loop has sufficient margins to support certain ADSL transmission rates and possibly to determine whether particular specific types of interf...

Page 233: ...does not turn on None of the LEDs turn on 1 Make sure the ZyXEL Device is turned on 2 Make sure you are using the power adaptor or cord included with the ZyXEL Device 3 Make sure the power adaptor or...

Page 234: ...of the default gateway for your computer To do this in most Windows computers click Start Run enter cmd and then enter ipconfig The IP address of the Default Gateway might be the IP address of the ZyX...

Page 235: ...uch as Telnet If you can access the ZyXEL Device check the remote management settings and firewall rules to find out why the ZyXEL Device does not respond to HTTP If your computer is connected to the...

Page 236: ...is not on 3 If you are trying to access the Internet wirelessly make sure the wireless settings in the wireless client are the same as the settings in the AP 4 If you are trying to access the Internet...

Page 237: ...the signal strength is low try moving your computer closer to the ZyXEL Device if possible and look around to see if there are any devices that might be interfering with the wireless network for exam...

Page 238: ...Chapter 23 Troubleshooting P 660HN TxA User s Guide 238...

Page 239: ...VDC 1A Built in Switch Four auto negotiating auto MDI MDI X 10 100 Mbps RJ 45 Ethernet ports ADSL Port 1 RJ 11 FXS POTS port RESET Button Restores factory defaults Antenna 1 internal antenna 2dBi WPS...

Page 240: ...have a server mail or web server for example on your network you can use this feature to let people access it from the Internet DHCP Dynamic Host Configuration Protocol Use this feature to have the Z...

Page 241: ...e can access the ZyXEL Device PPPoE Support RFC2516 PPPoE Point to Point Protocol over Ethernet emulates a dial up connection It allows your ISP to use their existing network configuration with newer...

Page 242: ...992 5 Reach Extended ADSL RE ADSL SRA Seamless Rate Adaptation Auto negotiating rate adaptation ADSL physical connection ATM AAL5 ATM Adaptation Layer type 5 Support multi protocol over AAL5 RFC2684...

Page 243: ...96 Wireless Features Internal Antenna The ZyXEL Device is equipped with one internal antenna to provide a clear radio signal between the wireless stations and the access points Wireless LAN MAC Addre...

Page 244: ...yption 64 128 WLAN bridge to LAN 32 MAC Address filter WPA WPA PSK WPA2 WPA2 PSK WPS IEEE 802 1x EAP MD5 TLS and TTLS WMM WDS Multi BSSID 4 BSSIDs Wireless Scheduling Table 97 Standards Supported STAN...

Page 245: ...etric Digital Subscriber Line ADSL standard G dmt G 992 1 G 992 1 Asymmetrical Digital Subscriber Line ADSL Transceivers ITU G 992 1 G DMT ITU standard for ADSL using discrete multitone modulation ITU...

Page 246: ...CAN PLUG STANDARDS AC Power Adapter Model 12V 1A SOCB PA Input Power AC 120Volts 60Hz Output Power DC 12Volts 1 0A Power Consumption 7 7 Watt max Safety Standards ANSI UL 60950 1 CSA 60950 1 EUROPEAN...

Page 247: ...P IP on your computer Windows 3 1 requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later op...

Page 248: ...Installing Components The Network window Configuration tab displays a list of installed components You need a network adapter the TCP IP protocol and Client for Microsoft Networks If you need the adap...

Page 249: ...Client for Microsoft Networks from the list of network clients and then click OK 5 Restart your computer so the changes you made take effect Configuring 1 In the Network window Configuration tab selec...

Page 250: ...you do not know your gateway s IP address remove previously installed gateways If you have a gateway IP address type it in the New gateway field and click Add 5 Click OK to save and close the TCP IP P...

Page 251: ...following example figures use the default Windows XP GUI theme 1 Click start Start in Windows 2000 NT Settings Control Panel Figure 118 Windows XP Start Menu 2 In the Control Panel double click Networ...

Page 252: ...hen click Properties Figure 120 Windows XP Control Panel Network Connections Properties 4 Select Internet Protocol TCP IP under the General tab in Win XP and then click Properties Figure 121 Windows X...

Page 253: ...e or more of the following if you want to configure additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Sub...

Page 254: ...rties 7 In the Internet Protocol TCP IP Properties window the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know your...

Page 255: ...e Local Area Connection Properties window 10 Close the Network Connections window Network and Dial up Connections in Windows 2000 NT 11 Turn on your ZyXEL Device and restart your computer if prompted...

Page 256: ...r s Guide 256 1 Click the Start icon Control Panel Figure 125 Windows Vista Start Menu 2 In the Control Panel double click Network and Internet Figure 126 Windows Vista Control Panel 3 Click Network a...

Page 257: ...onnections Figure 128 Windows Vista Network and Sharing Center 5 Right click Local Area Connection and then click Properties Note During this procedure click Continue whenever Windows displays a scree...

Page 258: ...igure 130 Windows Vista Local Area Connection Properties 7 The Internet Protocol Version 4 TCP IPv4 Properties window opens the General tab If you have a dynamic IP address click Obtain an IP address...

Page 259: ...ab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Confi...

Page 260: ...operties 9 In the Internet Protocol Version 4 TCP IPv4 Properties window the General tab Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know your...

Page 261: ...rotocol Version 4 TCP IPv4 Properties window 11 Click Close to close the Local Area Connection Properties window 12 Close the Network Connections window 13 Turn on your ZyXEL Device and restart your c...

Page 262: ...ting up Your Computer s IP Address P 660HN TxA User s Guide 262 Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel Figure 134 Macintosh OS 8...

Page 263: ...igned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your ZyXEL Device...

Page 264: ...tem Preferences window Figure 136 Macintosh OS X Apple Menu 2 Click Network in the icon bar Select Automatic from the Location list Select Built in Ethernet from the Show list Click the TCP IP tab 3 F...

Page 265: ...ettings Check your TCP IP properties in the Network window Linux This section shows you how to configure your computer s TCP IP settings in Red Hat Linux 9 0 Procedure screens and file location may va...

Page 266: ...in IP address settings with and select dhcp from the drop down list If you have a static IP address click Statically set IP Addresses and fill in the Address Subnet mask and Default Gateway Address fi...

Page 267: ...en Using Configuration Files Follow the steps below to edit the network configuration files and set your computer IP address 1 Assuming that you have only one network card on the computer locate the i...

Page 268: ...in the etc directory The following figure shows an example where two DNS server IP addresses are specified Figure 144 Red Hat 9 0 DNS Settings in resolv conf 3 After you edit and save the configurati...

Page 269: ...root localhost ifconfig eth0 Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet addr 172 23 19 129 Bcast 172 23 19 255 Mask 255 255 255 0 UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 717...

Page 270: ...Appendix A Setting up Your Computer s IP Address P 660HN TxA User s Guide 270...

Page 271: ...r and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house nu...

Page 272: ...ost ID using a logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the n...

Page 273: ...mber bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address wit...

Page 274: ...You can use subnetting to divide one network into multiple sub networks In the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the co...

Page 275: ...the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allow...

Page 276: ...ets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host...

Page 277: ...t Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 106 Subnet 4 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192...

Page 278: ...S NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31...

Page 279: ...ou entered You don t need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address...

Page 280: ...Appendix B IP Addresses and Subnetting P 660HN TxA User s Guide 280...

Page 281: ...t Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Servic...

Page 282: ...n the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 151 Internet Options Privacy 3 Click Apply to save this setting Enable Pop up Blockers with...

Page 283: ...60HN TxA User s Guide 283 2 Select Settings to open the Pop up Blocker Settings screen Figure 152 Internet Options Privacy 3 Type the IP address of your device the web page that you do not want to hav...

Page 284: ...Add to move the IP address to the list of Allowed sites Figure 153 Pop up Blocker Settings 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of the...

Page 285: ...orer click Tools Internet Options and then the Security tab Figure 154 Internet Options Security 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enab...

Page 286: ...k OK to close the window Figure 155 Security Settings Java Scripting Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3...

Page 287: ...ions P 660HN TxA User s Guide 287 5 Click OK to close the window Figure 156 Security Settings Java JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sure...

Page 288: ...OK to close the window Figure 157 Java Sun Mozilla Firefox Mozilla Firefox 2 0 screens are used here Screens for other versions may vary You can enable Java Javascripts and pop ups in one screen Clic...

Page 289: ...p up Windows JavaScripts and Java Permissions P 660HN TxA User s Guide 289 Click Content to show the screen below Select the check boxes as shown in the following screen Figure 159 Mozilla Firefox Con...

Page 290: ...Appendix C Pop up Windows JavaScripts and Java Permissions P 660HN TxA User s Guide 290...

Page 291: ...ent network which is commonly referred to as an ad hoc network or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an ad...

Page 292: ...nded Service Set ESS consists of a series of overlapping BSSs each containing an access point with each access point connected together by a wired network This wired connection between APs is called a...

Page 293: ...use a channel different from an adjacent AP access point to reduce interference Interference occurs when radio signals from different access points overlap causing interference and degrading performa...

Page 294: ...hat wants to transmit this frame must first send an RTS Request To Send message to the AP for permission to send it The AP then responds with a CTS Clear to Send message to all other stations within i...

Page 295: ...ization field in a packet Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11 compliant wireless adapters support long preamble but not...

Page 296: ...e shows the relative effectiveness of these wireless security methods available on your ZyXEL Device Note You must enable the same wireless security settings on the ZyXEL Device and on all wireless cl...

Page 297: ...e wireless clients RADIUS RADIUS is based on a client server model that supports authentication authorization and accounting The access point is the client and the server is the RADIUS server The RADI...

Page 298: ...LEAP Your wireless LAN device may not support all authentication types EAP Extensible Authentication Protocol is an authentication protocol that runs on top of the IEEE 802 1x transport mechanism in...

Page 299: ...ve attacks A digital certificate is an electronic ID card that authenticates the sender s identity However to implement EAP TLS you need a Certificate Authority CA to handle certificates which imposes...

Page 300: ...nd WPA2 Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard WPA2 IEEE 802 11i is a wireless security standard that defines stronger encryption authentication and key management than WP...

Page 301: ...r distributes a Pairwise Master Key PMK key to the AP that then sets up a key hierarchy and management system using the PMK to dynamically generate unique data encryption keys to encrypt every data pa...

Page 302: ...y connecting to an AP to perform IEEE 802 1x authentication with another AP before connecting to it Wireless Client WPA Supplicants A wireless client supplicant is the software that runs on an operati...

Page 303: ...RADIUS Application Example WPA 2 PSK Application Example A WPA 2 PSK application looks as follows 1 First enter identical passwords into the AP and all wireless clients The Pre Shared Key PSK must co...

Page 304: ...ach authentication method or key management protocol type MAC address filters are not dependent on how you configure these security features Table 113 Wireless Security Relational Matrix AUTHENTICATIO...

Page 305: ...na s coverage area Antenna Gain Antenna gain measured in dB decibel is the increase in coverage within the RF beam width Higher antenna gain improves the range of the signal for better communications...

Page 306: ...es very directional to 120 degrees less directional Directional antennas are ideal for hallways and outdoor point to point applications Positioning Antennas In general antennas should be mounted as hi...

Page 307: ...e of IP protocol used by the service If this is TCP UDP then the service uses the same port number with TCP and UDP If this is USER DEFINED the Port s is the IP protocol number not the port number Por...

Page 308: ...net related command that can be used to find out if a user is logged on FTP TCP TCP 20 21 File Transfer Protocol a program to enable fast transfer of files including large files that may not be possib...

Page 309: ...e Protocol version 3 lets a client computer get e mail from a POP3 server through a temporary connection TCP IP or other POP3S TCP 995 This is a more secure version of POP3 that runs over SSL PPTP TCP...

Page 310: ...ding mainframes midrange systems UNIX systems and network servers SSDP UDP 1900 The Simple Service Discovery Protocol supports Universal Plug and Play UPnP SSH TCP UDP 22 Secure Shell Remote Login Pro...

Page 311: ...sing out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the ri...

Page 312: ...s cause harmful interference to radio television reception which can be determined by turning the device off and on the user is encouraged to try to correct the interference by one or more of the foll...

Page 313: ...for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or material...

Page 314: ...rned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of ZyXEL and the customer will be billed for parts and labor All repaired or...

Page 315: ...s 143 144 148 administrator password 30 208 alerts 211 alternative subnet mask notation 274 antenna directional 306 gain 305 omni directional 306 AP access point 293 application filter 157 application...

Page 316: ...ic 229 DiffServ Code Point see DSCP disclaimer 311 DNS 90 94 98 188 Domain Name System see DNS DoS 151 DSCP 174 DSL connections status 232 dynamic DNS 179 activation 180 wildcard 179 activation 180 Dy...

Page 317: ...ress 74 76 81 85 90 99 default server 138 140 ping 229 private 100 IP alias 95 configuration 96 NAT applications 148 IP precedence 175 177 configuration 174 IP MAC filter 158 configuration 159 structu...

Page 318: ...s 141 remote management 183 SIP ALG 145 activation 145 SUA 136 137 Network Address Translation see NAT Network Address Translation see NAT P P2P 137 Pairwise Master Key PMK 301 303 passwords 30 admini...

Page 319: ...rameter Index see SPI Service Set IDentifier see SSID setup DHCP 93 firewalls 153 IP alias 96 IP precedenceQoS IP precedence 174 IP MAC filter 159 logs 211 port forwarding 139 static route 163 WAN 75...

Page 320: ...traversal 191 URL 155 URL filter 156 URL 155 V VBR 87 VBR nRT 78 83 88 VBR RT 78 83 88 VCI 76 81 85 Virtual Channel Identifier see VCI Virtual Local Area Network see VLAN Virtual Path Identifier see...

Page 321: ...thentication 109 WPA PSK 108 125 pre shared key 108 WPS 115 127 130 activation 115 adding stations 117 example 132 limitations 133 PIN 116 117 128 push button 23 117 128 status 116 wireless security 2...

Page 322: ...Index P 660HN TxA User s Guide 322...

Page 323: ...Index P 660HN TxA User s Guide 323...

Page 324: ...Index P 660HN TxA User s Guide 324...

Search results

Summary of Contents for P-660HN-TxA

Reviews:

Brands by name

Popular brands

ZyXEL Communications P-660HN-TxA, User Manual

Search results

Summary of Contents for P-660HN-TxA

Reviews:

Brands by name

Popular brands