ZyXEL Communications P-660RU-Tx Series Support Notes Download Page 16

 

 

P-660RU-Tx Series Support Note s

 

 

 
 

18. How does the IPPR work?

 

 

 

A policy defines the matching criteria and the action to take when  a packet 
meets the criteria. The action is taken only when all the criteria are met. The 
criteria include the source address and port, IP protocol (ICMP, UDP, TCP , etc), 
destination address and port, TOS and precedence (fields in the IP header) and 
length. The inclusion of length criterion is to differentiate between interactive 
and bulk traffic. Interactive applications, e.g., Telnet, tend to have short packets, 
while bulk traffic, e.g., file transfer, tends to have large packets. 

 

The actions that can be taken include routing the packet to a different gateway 
(and hence the outgoing interface) and the TOS and precedence fields in the IP 
header. IPPR follows the existing packet filtering facility of ZyNOS in style and in 
implementation. The policies are divided into sets, where related policies are 
grouped together. A use defines the policies before applying them to an interface 
or a remote node, in the same fashi on as the filters. There are 12 policy sets with 
6 policies in each set. 

 

 
19. What is CWMP? 

 

P-660RU Tx v3 supports TR-069 Amendment 1 (CPE WAN Management 
Protocol Release 2.0) and TR-069 Amendment 2 (CPE WAN Management 
Protocol v1.1, Release 3.0). 

 

 

TR-069 is a protocol that defines how your ZyXEL Device (

ZD

) can be managed 

via a management server (

MS

) such as ZyXEL

s Vantage Access. 

 

 

An administrator can use a management server to remotely set up the ZyXEL 
device, modify settings, perform firmware upgrades a s well as monitor and 
diagnose the ZyXEL device. All you have to do is enable the device to be 
managed by a management server and specify the management server IP 
address or domain name and username and password. 

 

 
 

20. How to configure CWMP on P-660RU-Tx? 

You can set CWMP on the Web configuration page: 

Access Management -> 

CWMP -> CWMP Setup:

 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 

16 

All contents copyright © 2010  ZyXEL Communications Corporation. 

Summary of Contents for P-660RU-Tx Series

Page 1: ...P 660RU Tx Series ADSL2 Ethernet USB Router Support Notes Version 1 01 Jan 2010 1 All contents copyright 2010 ZyXEL Communications Corporation...

Page 2: ...y network users can the SUA NAT support 8 12 How can I protect against IP spoofing attacks 8 Product FAQ 9 1 How can I manage P 660RU Tx 9 2 What is the default password for Web Configurator 9 3 How d...

Page 3: ...rm better than the LLC based multiplexing 20 5 How do I know the details of my ADSL line statistics 21 6 What are the signaling pins of the ADSL connector 21 Application Notes 22 1 Internet Access Usi...

Page 4: ...r the FTP uploading is finished the router will upload the firmware to its flash at this moment 1 Update on web configuration page Advanced Setup Maintenance Firmware You can check your current firmwa...

Page 5: ...ow to use the Reset button a Turn your P 660RU Tx on Make sure the POWER led is on not blinking b Press the RESET button for ten seconds and then release it If the POWER LED begins to blink the defaul...

Page 6: ...u select Multiple For example With multiple global IP addresses multiple severs using the same port e g FTP servers using port 21 20 are allowed on the LAN for outside access The P 660RU Tx supports N...

Page 7: ...One Many to Many Overload Many to Many No Overload and Server The details of the mapping between ILA and IGA are described as below Here we define the local IP addresses as the Internal Local Addresse...

Page 8: ...the number of the users but the number of the NAT sessions The P 660RU Tx supports 1024 sessions 12 How can I protect against IP spoofing attacks The P 660RU Tx s filter sets provide a means to protec...

Page 9: ...aping Traffic Shaping allocates the bandwidth to WAN dynamically and aims at boosting the efficiency of the bandwidth If there are several VCs in the P 660RU Tx but only one VC activated at one time t...

Page 10: ...ic shaping please set SCR 0 MBS 0 and PCR as the maximum value according to the line rate for example 2 3 Mbps line rate will result PCR as 5424 cell sec 7 What do the ATM QoS Types CBR UBR VBR rtVBR...

Page 11: ...d password on your computer to connect to the ISP you are probably using PPPoE If you are simply connected to the Internet when you turn on your computer you probably are not You can also check your I...

Page 12: ...to enable or disable NAT function Default Route Choose yes to set the current PVC as a default gateway to internet from your device Note that there must be only one default gateway If you have configu...

Page 13: ...is updated the DNS name for your web server i e www zyxel com tw is still usable 13 When do I need DDNS service When you want your internal server to be accessed by using DNS name rather than using t...

Page 14: ...packets over SUA For outgoing IPSec tunnels no extra setting is required For forwarding the inbound IPSec ESP tunnel A Default server set is required You could configure it in Web Configurator Advance...

Page 15: ...to the Internet using one policy and route the FTP packets to the remote LAN using another policy See the figure below P 660RU T x v3 Use IPPR to distribute traffic among multiple paths Benefits Sourc...

Page 16: ...es are divided into sets where related policies are grouped together A use defines the policies before applying them to an interface or a remote node in the same fashion as the filters There are 12 po...

Page 17: ...t for verification from ACS to ZyXEL Device It can be considered as CPE s URL When ACS initialize a session it will connect with CPE basing on this part Port The default port for access to the ZyXEL D...

Page 18: ...er and the ZyXEL Device must be the same The second group is used to authenticate the management server when making a connection 2 The interval is the duration in seconds for which the ZyXEL Device MU...

Page 19: ...ices select ALL You cannot select a combination of services Interface Select the port through which you can access the device Select Both for access via either port If you configure 0 0 0 0 0 0 0 0 Se...

Page 20: ...uently such networks will need significant upgrading before they can offer high bandwidth services 2 What is the micro filter or splitter used for Generally the voice band uses the lower frequency ran...

Page 21: ...adsl linedata near You can also see the detailed information in Web Configurator Status Status Device Info You may also need some ADSL traffic status Status Statistics Traffic Statistics Interface AD...

Page 22: ...onnection To connect your computer to the P 660RU Tx s LAN port the computer must have an Ethernet adapter card installed For connecting a single computer to the P 660RU Tx we use an Ethernet cable 2...

Page 23: ...gure your P 660RU Tx as bridge mode We will use Web Configurator to guide you through the related menu 1 Configure P 660RU Tx as bridge mode and configure Internet setup parameters in Web Configurator...

Page 24: ...HCP We use 192 168 1 1 as the LAN IP for P 660RU Tx in this case Step 1 Disable DHCP Server and save it Step 2 Assign an IP to the LAN Interface of P 660RU Tx e g 192 168 1 1 2 Internet Access Using P...

Page 25: ...r this setup in Windows we check the option Obtain an IP address automatically in its TCP IP setup Please see the example shown below Set up your P 660RU Tx under routing mode The following procedure...

Page 26: ...3 Make use of Bridge Interface in Routing mode Using Bridge Interface in routing mode allows you to connect to internet with both Routing and Bridging A route channel for your device and a bridge chan...

Page 27: ...PoE 4 Setup the P 660RU Tx as a DHCP Relay What is DHCP Relay DHCP stands for Dynamic Host Configuration Protocol In addition to the DHCP server feature the P 660RU Tx supports the DHCP relay function...

Page 28: ...a DHCP Relay by the following command in CLI Ip dhcp enif0 mode relay Ip dhcp enif0 relay server Server IP Address You can also set it in web configuration page Interface Setup LAN DHCP Click to choo...

Page 29: ...n such case a SUA server must be configured to forward the incoming packets to the true destination behind SUA After the required server are configured in Web Configurator Advanced Setup Advanced Setu...

Page 30: ...None 23 client IP and active Telnet service from WAN SMTP None 25 client IP HTTP Server None 80 client IP POP3 None 110 client IP HTTPs None 443 client IP T 120 None 1503 client IP H 232 None 1720 cl...

Page 31: ...transmit and receive data therefore only one local Cu SeeMe is allowed within the same LAN Configurations For example if the workstation operating Cu SeeMe has an IP of 192 168 1 33 then the default...

Page 32: ...u can make internal servers e g Web ftp or mail server accessible for outside users even though SUA makes your LAN appear as a single machine to the outside world A service is identified by the port n...

Page 33: ...ers can access the local server using the P 660RU Tx s WAN IP address which can be obtained from Web Configurator Status Device Info For example Configuring an internal Web server for outside access s...

Page 34: ...IP packets and forwarded over any IP network including the Internet itself In order to run the Windows 9x PPTP client you must be able to establish an IP connection with a tunnel server such as the Wi...

Page 35: ...tream in the PPP protocol the VPN requires a second dial up adapter This second dial up adapter for VPN is added during the installation phase of the Upgrade in addition to the first dial up adapter t...

Page 36: ...IP NetBEUI Set the Internet gateway to P 660RU Tx 2 PPTP client setup Win9x Add one VPN connection from Dial Up Networking by entering the correct username password and the IP address of the P 660RU T...

Page 37: ...the Win9x client after the dial up connection has been established Before making a VPN connection from the Win9x client to the NT server you need to know the exact Internet IP address that the ISP as...

Page 38: ...ou can start the network protocol application such as IP IPX and NetBEUI 6 Using Full Feature NAT When P 660RU Tx is in Routing mode you can select NAT Option as Multiple IPs equal to Full Feature in...

Page 39: ...AT Address Mapping Sets You must specify which NAT Address Mapping Set 1 8 to use in the remote node when you select Multiple IPs You can edit 8 rules for each Address Mapping Set The NAT Server Set i...

Page 40: ...Address Mapping Rules for Set 1 You can edit or delete a rule by clicking the two buttons below the rule table Click to select the rule number you want to set in the pull down menu and then the rule t...

Page 41: ...ding global IP address IGA This field is N A for One to One Many to One and Server types 200 1 1 64 Note For all Local and Public End IP address must begin after the IP Start address i e you can not h...

Page 42: ...eb Configurator Advanced Setup NAT Virtual Server Step 2 Select the service name from the pull down menu and fill in the server Address on Local IP Address and then save it Step 3 You could click in t...

Page 43: ...s for clients and servers Support Non NAT Friendly Applications 1 Internet Access Only In our Internet Access example we only need one rule where all our ILAs map to one IGA assigned by the ISP You ca...

Page 44: ...figure use the convenient pre configured SUA Only set and also go to Web Configurator Advanced Setup Advanced Setup NAT Virtual Server to specify the Internet Server behind the NAT as below 44 All co...

Page 45: ...4 Server type to map a web server and mail server with ILA3 192 168 1 20 to IGA3 Type Server allows us to specify multiple servers of different types to other machines behind NAT on the LAN Step 1 In...

Page 46: ...mail server from Web Configurator 4 Support Non NAT Friendly Applications Some servers providing Internet applications such as some mIRC servers do not allow users to login using the same IP address I...

Page 47: ...60RU Tx must inform the DDNS server the change of this IP so that the server can update its IP to DNS entry Once the IP to DNS table in the DDNS server is updated the DNS name for your web server i e...

Page 48: ...based on the SNMPv1 so it will be able to communicate with SNMPv1 NMSs Further users can also add ZyXEL s private MIB in the NMS to monitor and control additional system variables The ZyXEL s private...

Page 49: ...er 6 whyReboot defined in ZYXEL MIB When the system is going to restart warmstart the trap will be sent with the reason of restart before rebooting 1 For intentional reboot In some cases download new...

Page 50: ...rd for the incoming Get and Get Next requests from the management station Set Community Select to set the password for incoming Set requests from the management station 9 Using system log Our ADSL Rou...

Page 51: ...n be configured in Web Configurator Advanced Setup Interface Setup LAN DHCP The second and third networks can be configured in telnet CLI There are three internal virtual LAN interfaces for the P 660R...

Page 52: ...2 go through the P 660RU Tx by command in CLI lan index index number Usage index number 1 main LAN 2 IP Alias 1 3 IP Alias 2 lan filter incoming outgoing tcpip generic set Usage set the corresponding...

Page 53: ...ks can be configured in CLI with the commands mentioned above 11 Using IP Multicast What is IP Multicast Traditionally IP packets are transmitted in two ways unicast or broadcast Multicast is a third...

Page 54: ...forwarded At start up the P 660RU Tx queries all directly connected networks to gather group membership After that the P 660RU Tx updates the information by periodic queries The P 660RU Tx implementa...

Page 55: ...ow to configure packet filter on P 660RU Tx The P 660RU Tx allows you to configure up to three types IP MAC filter Application filter URL filter You can set in the web configuration page Access Manage...

Page 56: ...P 660RU Tx Series Support Notes Filter by IP MAC 56 All contents copyright 2010 ZyXEL Communications Corporation...

Page 57: ...er by IP you will need to set source and destination IP as well as port number of those packets you want to filter address according to your need if choose MAC as filter condition you may need to set...

Page 58: ...isted below You can set 16 rules here in all By factory default ZyXEL has preconfigured many filter sets for your reference you can check them in web configuration page as mentioned above This could s...

Page 59: ...also very helpful for diagnostics if you have compatibility problems with your ISP or if you want to know the details of a packet for configuring a filter rule The format of the display is as followin...

Page 60: ...Step 1 Initiate a hyper terminal connection from your PC suppose you connected to the LAN port of P 660RU Tx Step 2 Click the properties to configure parameters to telnet to the P 660RU Tx 60 All con...

Page 61: ...P 660RU Tx Series Support Notes 61 All contents copyright 2010 ZyXEL Communications Corporation...

Page 62: ...P 660RU Tx Series Support Notes Step 3 So that after you invoke the relevant commands you could save the logs you ve captured 62 All contents copyright 2010 ZyXEL Communications Corporation...

Page 63: ...ce 1 Shows the following commands and all major sub commands 2 exit Exit Subcommand To get the latest CI Command list The latest CI Command list is available in release note of every ZyXEL firmware re...

Reviews: