background image

                                         

P-661HNU Series Support Notes

 

                                                                                     

                                                                                               

61 

All contents copyright © 2010 ZyXEL Communications Corporation. 

 

 

9. Using IP Multicast   

 

What is IP Multicast ?   

Traditionally, IP packets are transmitted in two ways - unicast or broadcast. 
Multicast is a third way to deliver IP packets to a group of hosts. Host groups 
are identified by class D IP addresses, i.e., those with "1110" as their 
higher-order bits. In dotted decimal notation, host group addresses range from 
224.0.0.0 to 239.255.255.255. Among them, 224.0.0.1 is assigned to the 
permanent IP hosts group, and 224.0.0.2 is assigned to the multicast routers 
group.   

IGMP (Internet Group Management Protocol) is the protocol used to support 
multicast groups. The latest version is version 2 (see RFC2236). IP hosts use 
IGMP to report their multicast group membership to any immediate-neighbor 
multicast routers so the multicast routers can decide if a multicast packet 
needs to be forwarded. At start up, the P-661HNU-Fx queries all directly 
connected networks to gather group membership.   

After that, the P-661HNU-Fx updates the information by periodic queries. The 
P-661HNU-Fx implementation of IGMP is also compatible with version 1. The 
multicast setting can be turned on or off on Ethernet and remote nodes.   

P-661HNU-Fx supports IGMP v1 ,v2 and IGMP v3 without source filtering. 

 

IP Multicast Setup   

Enable IGMP in P-661HNU-Fx's remote node in Web Configurator, Advanced 
Setup, 

Network Setting-> Broadband 

 

 

 

 

 

Summary of Contents for P-661HNU-F1

Page 1: ...P 661HNU Series Support Notes 1 All contents copyright 2010 ZyXEL Communications Corporation P 661HNU Fx 802 11n Wireless ADSL2 4 port Security Gateway Support Notes Version3 10 Oct 2010...

Page 2: ...my Internet connection 8 5 How do I know the P 661HNU Fx s WAN IP address assigned by the ISP 9 6 What is the micro filter or splitter used for 9 7 The P 661HNU Fx supports Bridge and Router mode what...

Page 3: ...12 What is IP Spoofing attack 20 13 What are the default firewall rules in P 661HNU Fx 20 Configuration 20 1 How do I configure the firewall 20 2 How do I prevent others from configuring my firewall 2...

Page 4: ...data across the P 661HNU Fx Access Point s radio link 28 2 What is WEP 28 3 What is WPA PSK 29 4 What is the difference between 40 bit and 64 bit WEP 29 5 What is a WEP key 29 6 Will 128 bit WEP commu...

Page 5: ...s Corporation 5 Configure 802 1x and WPA 74 6 The WPS WLAN Button 78 Support Tool 79 1 Upgrading Firmware via web GUI 79 2 Backing up the Configuration 79 3 Upload Configuration via web GUI 81 4 Using...

Page 6: ...t software You CAN NOT upload the firmware and configuration file via Telnet because the Telnet connection will be dropped during uploading the firmware Please do not power off the router right after...

Page 7: ...packet to the local server by looking up to a SUA server table Therefore to make a local server accessible to the outside users the port number and the inside IP address of the server must be configur...

Page 8: ...g in the Web Configurator Please record your new password whenever you change it The system will lock you out if you have forgotten your password 3 What s the difference between Common User Account an...

Page 9: ...ltered In this case we use bridge mode which works as an ADSL modem to connect to the ISP The ISP will generally give one Internet account and limit only one computer to access the Internet For most I...

Page 10: ...side world If you do not define any servers the NAT offers the additional benefit of firewall protection In such case all incoming connections to your network will be filtered out by the CPE thus prev...

Page 11: ...ame e g www zyxel com tw for your server e g Web server from a DDNS server The outside users can always access the web server using the www zyxel com tw regardless of the WAN IP of the P 661HNU Fx Whe...

Page 12: ...661HNU Fx The P 661HNU Fx must manage traffic fairly and provide bandwidth allocation for different sorts of applications such as voice video and data All applications have their own natural bit rate...

Page 13: ...at the time the connection is set up so that the data can be sent in a steady stream CBR service is often used when transmitting fixed rate uncompressed video Unspecified bit rate UBR An ATM bandwidt...

Page 14: ...also grows steadily it will not catch up with telephone lines for many years Additionally many of the older cable networks are not capable of offering a return channel consequently such networks will...

Page 15: ...erefore the VC based multiplexing is more efficient 7 How do I know the details of my ADSL line statistics You can use the following CI commands to check the ADSL line statistics CI dsl_cpe_pipe sh g9...

Page 16: ...s require different Qulity of Service The high priority is Voice VoIP data The Medium priority is Video IPTV data The low priority is internet access such as ftp etc Triple Play is a port based policy...

Page 17: ...hich translates the private local addresses to one or multiple public addresses This adds a level of security since the clients on the private LAN are invisible to the Internet 3 What are the basic ty...

Page 18: ...owed in Conversely an incoming packet masquerading as a response to a nonexistent outbound request can be blocked 3 The P 661HNU Fx s firewall uses session filtering i e smart rules that enhance the f...

Page 19: ...systems will crash hang or reboot 9 What is SYN Flood attack SYN attack floods a targeted system with a series of SYN packets Each packet causes the targeted system to issue a SYN ACK response While t...

Page 20: ...r firewall into thinking that the communications are coming from within the trusted network To engage in IP Spoofing a hacker must modify the packet headers so that it appears that the packets origina...

Page 21: ...fice to MAC Address Filter table if you wish to allow only them to access your network Then others can t configure your device any more 3 Why can t I configure my P 661HNU Fx using Web Configurator Te...

Page 22: ...ut your host is not in the MAC address list Security MAC Filter 4 Why can t I upload the firmware and configuration file using FTP over WAN 1 You have disabled FTP service in Web Configurator Advanced...

Page 23: ...mobility supports productivity and service opportunities not possible with wired networks Installation Speed and Simplicity Installing a wireless LAN system can be fast and easy and can eliminate the...

Page 24: ...ss LAN cards that have been installed in computers or laptops allowing those computers to connect to the campus network and the Internet without wires 6 Is it possible to use wireless products from a...

Page 25: ...hone for that matter But BlueTooth devices are usually low power so the effects that a Bluetooth device may have on an 802 11 network if any aren t far reaching 10 Can radio signals pass through wall...

Page 26: ...hardware Yes it will not harm the hardware but the module will not be detected and work after inserting to the slot You need to reboot the router to initialize the module 14 What wireless security mod...

Page 27: ...overage 4 What is Direct Sequence Spread Spectrum Technology DSSS DSSS spreads its signal continuously over a wide frequency band DSSS maps the information bearing bit pattern at the sending station i...

Page 28: ...8 What is Server Set ID SSID SSID is a configurable identification that allows clients to communicate to the appropriate base station With proper configuration only clients that are configured with t...

Page 29: ...ss to the WLAN 4 What is the difference between 40 bit and 64 bit WEP 40 bit WEP and 64 bit WEP are the same encryption level and can interoperate The lower level of WEP encryption uses a 40 bit 10 He...

Page 30: ...a valid user to associate to the network to see the SSID 9 What are Insertion Attacks The insertion attacks are based on placing unauthorized devices on the wireless network without going through a s...

Page 31: ...uter to access the Internet Set up your workstation 1 Ethernet connection To connect your computer to the P 661HNU Fx s LAN port the computer must have an Ethernet adapter card installed For connectin...

Page 32: ...to configure your P 661HNU Fx as bridge mode We will use Web Configurator to guide you through the related menu 1 Retrieve Prestige Web Please enter the LAN IP address of the Prestige router in the UR...

Page 33: ...L Communications Corporation 2 Login first The default password is the default SMT password 1234 1 Configure P 661HNU Fx as bridge mode and configure Internet setup parameters in Web Configurator Adva...

Page 34: ...Communications Corporation Configure Internet Setup Key Settings Option Description Encapsulation Mode Select the correct Encapsulation type that your ISP supports For example LLC SNAP BRIDGING VPI V...

Page 35: ...account for Internet access they have to install an Internet sharing device like a router In this case we use the P 661HNU Fx which works as a general Router plus an ADSL Modem Set up your workstatio...

Page 36: ...routing mode The following procedure shows you how to configure your P 661HNU Fx as Routing mode for routing traffic We will use Web Configurator to guide you through the related menu 1 Configure P 66...

Page 37: ...icly if the ISP provides the IP for the P 661HNU Fx dynamically Otherwise set to Static IP Adress and enter the IP in the IP Address field 2 Configure a LAN IP for the P 661HNU Fx and the DHCP setting...

Page 38: ...connection as your WAN or a backup when the wired WAN connection fails Card Description This field displays the manufacturer and model name of your 3G card if you inserted one in the ZyXEL Device Oth...

Page 39: ...onnections with different APNs may provide different services such as Internet access or MMS Multi Media Messaging Service and charge method You can enter up to 31 ASCII printable characters Spaces ar...

Page 40: ...ch as Cu SeeMe and ICQ will need to connect to the local user behind the P 661HNU Fx In such case a SUA server must be configured to forward the incoming packets to the true destination behind SUA Aft...

Page 41: ...t client IP ICQ 2000b None for Chat None for Chat ICQ Phone 2000b None 6701 client IP Cornell 1 1 Cu SeeMe None 7648 client IP White Pine 3 1 2 Cu SeeMe2 7648 client IP 24032 client IP Default client...

Page 42: ...behind SUA 2 Because White Pine Cu SeeMe uses dedicate ports port 7648 port 24032 to transmit and receive data therefore only one local Cu SeeMe is allowed within the same LAN 3 In SUA mode only one l...

Page 43: ...rs for specific services SUA supports a default server A service request that does not have a server explicitly designated for is forwarded to the default server If the default server is not defined t...

Page 44: ...urator will display message Configuration updated successfully at the bottom You can see the port forwarding rule on the same page the default port for Web Server is 80 3 If you want to change the por...

Page 45: ...twork including the Internet itself In order to run the Windows 9x PPTP client you must be able to establish an IP connection with a tunnel server such as the Windows NT Server 4 0 Remote Access Serve...

Page 46: ...ring the installation phase of the Upgrade in addition to the first dial up adapter that provides PPP support for the analog or ISDN modem The PPTP is supported in Windows NT and Windows 98 already Fo...

Page 47: ...nt for PPTP logged on user Enable RAS port Select the network protocols from RAS such as IPX TCP IP NetBEUI Set the Internet gateway to P 661HNU Fx 2 PPTP client setup Win9x Add one VPN connection fro...

Page 48: ...he default gateway of the Win9x client after the dial up connection has been established Before making a VPN connection from the Win9x client to the NT server you need to know the exact Internet IP ad...

Page 49: ...61HNU Fx you apply a DNS name e g www zyxel com tw for your server e g Web server from a DDNS server The outside users can always access the web server using the www zyxel com tw regardless of the WAN...

Page 50: ...Option Description Service Provider Enter the DDNS server in this field Currently we support WWW DYNDNS ORG Active Toggle to Yes Host Name Enter the hostname you subscribe from the above DDNS server...

Page 51: ...mmunications Corporation 1 Plug in Flash disk in USB port 2 Go to Network Setting Home Networking File sharing 3 Click on Share Configuration to enable SMB function 4 Click on Apply When File Sharing...

Page 52: ...2 All contents copyright 2010 ZyXEL Communications Corporation 5 Click on Edit 6 Select Access Level Public to allow access to anyone who can login to the flash disk 7 Click on Add New User to create...

Page 53: ...ontents copyright 2010 ZyXEL Communications Corporation 8 Enter User Name and New Password 9 Click on Apply 10 Repeat the steps 5 and 6 to change the access control level 11 Select Access Level as Sec...

Page 54: ...upport Notes 54 All contents copyright 2010 ZyXEL Communications Corporation The following steps will show you how the PC A B or C Access the USB Hard Drive fromg the PC 13 Go to Windows Run and conne...

Page 55: ...yXEL Communications Corporation 14 After connected to P 661HNU Fx the USB hard drive will be displayed on the screen 15 Click on the USB hard drive and a pop up window will be displayed asking the log...

Page 56: ...P 661HNU Series Support Notes 56 All contents copyright 2010 ZyXEL Communications Corporation After successful log in the content of the USB hard drive will be displayed...

Page 57: ...QoS to open the screen as shown next Use this screen to enable or disable QoS The Queue Setup Screen Queue Setup decides the priority on WAN interfaces Use this screen to configure QoS queue assignmen...

Page 58: ...e Class Setup Screen Use this screen to add edit or delete classifiers A classifier groups traffic into data flows according to specific criteria such as the source address destination address source...

Page 59: ...HNU Series Support Notes 59 All contents copyright 2010 ZyXEL Communications Corporation The Class Configuration Screen Click the Add new Classifier button to configure a classifier The QoS Monitor Sc...

Page 60: ...work Setting QoS Monitor The screen appears as shown 8 Using syslog You can configure it in Web Configurator Advanced Setup Maintenance Log Setting Key Settings Syslog Logging Select Enable to active...

Page 61: ...p Management Protocol is the protocol used to support multicast groups The latest version is version 2 see RFC2236 IP hosts use IGMP to report their multicast group membership to any immediate neighbo...

Page 62: ...er client units just as using a cross over Ethernet cable connecting 2 host together via a NIC card for direct connection when configured in Ad hoc mode without an access point being present Ad hoc op...

Page 63: ...from the operation mode pull down menu fill you an SSID and select a channel you want to use than press OK to apply Step 4 Since there is no DHCP server to give the host IP you must first designate a...

Page 64: ...Fill in your network IP address and subnet mask and click OK to finish Configuration for Wireless Station B To configure Ad hoc mode on your ZyAIR B 100 B 200 B 300 wireless NIC card please follow the...

Page 65: ...from the operation mode pull down menu fill you an SSID and select a channel you want to use than press OK to apply Step 4 Since there is no DHCP server to give the host IP you must first designate a...

Page 66: ...on from eavesdropping because wireless transmissions are easier to intercept than transmissions over wired networks and wireless is a shared medium everything that is transmitted or received over a wi...

Page 67: ...Security Mode in Web Configurator Step 2 Set up WEP Key in the Web Configurator You need to set the one of the following parameters o 64 bit WEP key secret key with 5 characters o 64 bit WEP key secr...

Page 68: ...rporation The utility will pop up on your windows screen Note If the utility icon doesn t exist in your task bar click Start Programs to start the utility Step 2 Select the Configuration tab Select Se...

Page 69: ...ion Note You should select Key 1 as default Transmit Key since the P 660HN Fx is supposed to use Key 1 by default Key settings The WEP Encryption type of station has to equal to the access point Check...

Page 70: ...ap of RF coverage of the facility Preparation Below are the steps to complete a simple site survey with simple tools 1 First you will need to obtain a facility diagram such as blueprints This is for y...

Page 71: ...de information such as connection speed current used channel associated rate link quality signal strength and etc information as shown in utility below Step 4 It s always a good idea to start with put...

Page 72: ...ss point installation spot if wireless service is required from corner of the room Step 6 Repeat step 1 5 and now you should be able to mark an RF coverage area as illustrated in above picutre Step 7...

Page 73: ...asy and secure establishment of a wireless home office network The goal of the WPS protocol is to simplify the process for configuring the security of the wireless network and thus calling the name Wi...

Page 74: ...r authentication and improved data encryption WAP applies IEEE 802 1x Extensible Authentication Protocol EAP to authenticate wireless clients using an external RADIUS database You can not use the P 66...

Page 75: ...our reference Configuration for Access point The IEEE 802 1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management Authentication c...

Page 76: ...Configuration for your PC Step 1 Double click on your wireless utility icon in your windows task bar the utility will pop up on your windows screen Step 2 Select the configuration tab type in the SSID...

Page 77: ...otes 77 All contents copyright 2010 ZyXEL Communications Corporation Step 3 Click Set Security to configure the security parameters Step 4 Click OK for finish and begin to Site survey Connect to the A...

Page 78: ...n to turn the wireless LAN off or on You can also use it to activate WPS in order to quickly set up a wireless network with strong security 1 Turn the Wireless LAN Off or On 1 Make sure the POWER LED...

Page 79: ...2010 ZyXEL Communications Corporation Support Tool 1 Upgrading Firmware via web GUI Go to Maintenance Firmware Upgrade Click Browse Select the Firmware to upload and click Open Click Upload 2 Backing...

Page 80: ...P 661HNU Series Support Notes 80 All contents copyright 2010 ZyXEL Communications Corporation Click Backup Click Save Select the directory to save and click Save...

Page 81: ...Support Notes 81 All contents copyright 2010 ZyXEL Communications Corporation 3 Upload Configuration via web GUI Go to Maintenance Backup Restore Click Browse Select the configuration file to upload...

Page 82: ...ftware or just use windows command program See the example shown below Using FTP client software Note The remote file name for the firmware is ras and the configuration file is rom Step 1 Use FTP clie...

Page 83: ...the local bin file to the remote fw fold To upload the configuration file we transfer the local rom to the remote fw fold Step 3 The Prestige reboots automatically after the uploading is finished Plea...

Page 84: ...Step2 Enter the Administrator username password as the FTP login password the default is admin 1234 Step3 Find the fw fold and access the fold Step4 Enter binary Step5 To upload the firmware file we...

Page 85: ...Series Support Notes 85 All contents copyright 2010 ZyXEL Communications Corporation Step6 The Prestige reboots automatically after the uploading is finished Please do not power off the router at thi...

Reviews: