Benutzeranleitung / Produktwartung P-660HN-F1 des Produzenten ZyXEL Communications
Zur Seite of 420
www .zyxel.com www .zyxel.com P-660HN-F1 802.1 1n Wireless ADSL2+ 4-port Gateway Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.
.
About This User's Guide P-660HN-F1 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y o u should have at least a basic knowledge of TCP/IP networking concepts and topology .
Document Conventions P-660HN-F1 User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions P-660HN-F1 User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyX EL Device icon is not an exact representation of your device.
Safety Warnings P-660HN-F1 User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
Safety Warnings P-660HN-F1 User’s Guide 7.
Safety Warnings P-660HN-F1 User’s Guide 8.
Contents Overview P-660HN-F1 User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 31 Introducing the ZyXEL Device ..............
Contents Overview P-660HN-F1 User’s Guide 10 Appendices and Index ........................................................ ..........................
Table of Contents P-660HN-F1 User’s Guide 11 Table of Contents About This User's Guide ................................ ..................................................... ................... .. 3 Document Conventions.........................
Table of Contents P-660HN-F1 User’s Guide 12 Chapter 3 St atus Screens ................................................................................ ................................. ....... 45 3.1 Overview ... ... .... ... ... ... ............. .
Table of Contents P-660HN-F1 User’s Guide 13 5.5.5 Nailed-Up Connection (PPP) .............. ................................................ ............. .......... 84 5.5.6 NA T ........ ... ... ............. ... .... ... ............. ... ... ..
Table of Contents P-660HN-F1 User’s Guide 14 7.4 The WPS Screen ................... .... ... ... ... ... .... ... ... ... .... ............. ... ... ... ... .... ... ... ... .... ... ........... ....1 17 7.5 The WPS S t ation Screen ........... ... .
Table of Contents P-660HN-F1 User’s Guide 15 9.1.3 Firewall Rule Setup Example .............. ... ... .... ... ... ... .... ............ .... ... ... ... .... ... ... ... ... .... . 1 52 9.2 The Firewall General Screen ........ ............. .......
Table of Contents P-660HN-F1 User’s Guide 16 12.1.1 What Y ou Can Do in th e Certificates Screens ............. ............. ................ ............. . 187 12.1.2 What Y ou Need to Know About Certificates ... ............. ................ ..
Table of Contents P-660HN-F1 User’s Guide 17 15.1.1 What Y ou Can Do in the Q oS Screens ............. ................ ............. ................ ........ 227 15.1.2 What Y ou Need to K now About QoS ... ................ ................ ......
Table of Contents P-660HN-F1 User’s Guide 18 18.3 Installing UPnP in Window s Example ......... ................ ............. ................ ............. ........... 259 18.4 Using UPnP in Windows XP Example . ................. ................ .
Table of Contents P-660HN-F1 User’s Guide 19 Part VII: T roubleshooting and S pecifications ........................... ........ 305 Chapter 23 Product Sp ecifications .............................................................................. ..
Table of Contents P-660HN-F1 User’s Guide 20.
List of Figures P-660HN-F1 User’s Guide 21 List of Figures Figure 1 ZyXEL Device’s Router Features ......... ................ ............. ................ ............. ................ .... ...... 35 Figure 2 LEDs on the T op of the Device ....
List of Figure s P-660HN-F1 User’s Guide 22 Figure 39 T raffic Redirect LAN Setup .............. ............. ................ ................ ................ ............... .... ....... 87 Figure 40 Network > LAN > IP ......... ..........
List of Figures P-660HN-F1 User’s Guide 23 Figure 82 Firewall Example: Edit Rule: Destination Address ............ ................ ................. ................ . 154 Figure 83 Firewall Example: Edit Rule: Select Customized Servic es ..... ...
List of Figure s P-660HN-F1 User’s Guide 24 Figure 125 802.1Q/1P ................. ................. ................ ............. ................ ................ ........... ........ ........ 217 Figure 126 802.1Q/1P Example ............ .......
List of Figures P-660HN-F1 User’s Guide 25 Figure 168 Maintenance > System > Time Setting ....... ................ ................ ................ ................ ........ 2 73 Figure 169 Maintenance > Logs > View Log ................
List of Figure s P-660HN-F1 User’s Guide 26 Figure 21 1 Red Hat 9.0: KDE: Netw ork Conf iguration: Devices ..... ................ ................ ............. ........ 338 Figure 212 Red Hat 9.0: KDE: Ethernet Device: Gene ral ... .... ... ... ...
List of Tables P-660HN-F1 User’s Guide 27 List of Tables T able 1 LED Descriptions ........ ................ ................ ............. ................. ................ ............... ....... .......... 35 T able 2 Web Configurator Icons in the T itle Bar .
List of Tables P-660HN-F1 User’s Guide 28 T able 39 Network > Wireless LAN > WDS ........... ................ ................. ................ ............. ............... .. 120 T able 40 Network > Wireless LAN > QoS ............. ..
List of Tables P-660HN-F1 User’s Guide 29 T able 82 Advanced > 802.1Q/1P > Port Setting ............. ................ ................ ................ ................ .... .2 2 4 T able 83 Advanced > QoS > General ................... .
List of Tables P-660HN-F1 User’s Guide 30 T able 125 Maintenance > Diagnostic > DSL Line ........... ................ ................ .................... ................ . 303 T able 126 Hardware S pecifications ......... ................ .
31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (39) S tatus Screens (45).
32.
P-660HN-F1 User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Overview The P-660HN-F1 series are AD SL2+ routers.
Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 34 • Command Line Interface. Line commands are mostly used for troubleshooting by service engineers. • FTP for firmware upgrades and configuration backup/restore. • SNMP . The device can be monitored by an SN MP manager .
Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 35 Figure 1 ZyXEL Device’s Router Featur es Y ou can also configure firewall and content filte ring on the ZyXEL Device for secure Internet access. When the firewall is on, all incoming traffic from the Internet to your network is blocked unless it is initiated from your network.
Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 36 Refer to the Quick S tart Guide for in formation on hard ware connections. 1.6 The RESET Button If you forget your password or cannot access th e web configurator , you will need to us e the RESET button at the back of the device to reload the factory-default configuration file.
Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 37 1.7.1 T urn the Wireless LAN Off or On 1 Make sure the POWER LED is on (not blinking). 2 Press the WPS WLAN ON/OFF button for less than five seconds and release it. The WLAN/WPS LED should change from on to of f or vice versa.
Chapter 1 Introducing the ZyXEL Device P-660HN-F1 User’s Guide 38.
P-660HN-F1 User’s Guide 39 C HAPTER 2 Introducing the Web Configurator 2.1 Overview The web configur ator is an HTML-based managem e nt interface that allows easy device setup and management via Interne t browser . Use In ternet Explorer 6.0 and later or Netscape Navigator 7.
Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 40 Figure 3 Password Screen 5 The following screen displays if you have no t yet changed your password.
Chapter 2 Introducing the Web Configurator P-660HN-F1 User’s Guide 41 Figure 5 Replace Factory Default Certificate Screen 2.2 W eb Configurator Main Screen Figure 6 Main Screen As illustrated above, the main scr een is di vided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.
Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 42 The icons provide th e following functions. 2.2.2 Navigation Panel Use the men u items on th e na vigation panel to op en screens to configure ZyXEL Device features. The following tables describe each menu item.
Chapter 2 Introducing the Web Configurator P-660HN-F1 User’s Guide 43 Firewall General Use this screen to activate/deac tivate the firewall and the default action to take on network traffic going in specific directions. Rules This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule.
Chapter 2 Introducing the Web Configur ator P-660HN-F1 User’s Guide 44 2.2.3 Main Window The main window displays informa tion and configuration fields. It is discussed in the rest of this document. Right after you log in, the St a t u s screen is displayed.
P-660HN-F1 User’s Guide 45 C HAPTER 3 Status Screens 3.1 Overview Use the St a t u s screens to look at the current status of the device, system res ources, and interfaces (LAN a nd W AN). The St a t u s screen al so provide s de tailed inform ation from Any IP and DHCP and statistics from bandwidth management, and traf fic.
Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 46 Device Information Host Name This field displays the ZyXEL Device system name. It is used for identification. Y ou can change th is in the Maintenance > System > General screen’s System Name field.
Chapter 3 Status Screens P-660HN-F1 User’s Guide 47 Firewall This displays whether or not the ZyXEL Device’s firewall is activated. Click this to go to the screen w here you can change it. Content Filte r This displays whether or not the ZyXEL Device ’s content filtering is activated.
Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 48 3.3 Client List See Section 6.4 on page 9 5 for information on this screen. 3.4 WLAN S t atus Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. Click S tatus > WLAN S tatus to access this screen.
Chapter 3 Status Screens P-660HN-F1 User’s Guide 49 Figure 9 Packet S t atistics The following table describes th e fields in this screen. T able 6 Packet S t atistics LABEL DESCRIPTION System Monitor System up T ime This is the elapsed time the system has been up.
Chapter 3 Sta tus Screens P-660HN-F1 User’s Guide 50 3.6 Any IP T able Click S tatus > AnyIP T able to access this screen. Use this screen to view the IP address and MAC address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device.
51 P ART II Wi z a r d Internet and W ireless Setup W izard (53).
52.
P-660HN-F1 User’s Guide 53 C HAPTER 4 Internet and Wireless Setup Wizard 4.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP . " See the advanced menu chapters for ba ckground information on these fields.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 54 Figure 12 Wizard Welcome 3 Y our ZyXEL device attempts to detect your DSL co nnection and your connection type. 3a The following scree n app e ars if a conn ec tio n is not detected.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 55 Figure 14 Auto-Detection: PPPoE 3c The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 4.2 .1 on page 55 on how to manually configure the ZyXEL Device for Internet access.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 56 Figure 16 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 57 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Next to continue.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 58 The following table describes the fields in this screen. Figure 19 Internet Connection with ENET ENCAP The following table describes the fields in this screen.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 59 Figure 20 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 60 Figure 21 Connection T est Failed- 1 • If the following screen displays, check if your account is activated or click Restart the Internet/Wir eless Setup Wizard to verify your In ternet access settings.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 61 Figure 23 Connection T est Successful 2 Use this screen to activate the wireless LAN. Click Next to continue. Figure 24 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 62 Figure 25 Wireless LAN The following table describes the labels in this screen. " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 63 4.3.1 Manually Assign a WP A-PSK key Choose Manually assign a WP A-PSK key in the W ireless LAN setup screen to set up a Pr e- Shar ed Key . Figure 26 Manually Assign a WP A-PSK key The following table describes the labels in this screen.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 64 The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 28 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct.
Chapter 4 Internet and Wireless Setup Wizard P-660HN-F1 User’s Guide 65 Figure 29 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to www .zyxel.com. Inte rnet access is just the beginning. Refer to the rest of this guide for more detailed inform ation on the complete range of ZyXEL Device features.
Chapter 4 Inter n et an d Wireless Set up Wi zar d P-660HN-F1 User’s Guide 66.
67 P ART III Network WA N S e t u p ( 6 9 ) LAN Setup (89) W ireless LAN (105) Network Address T ranslation (NA T) (135).
68.
P-660HN-F1 User’s Guide 69 C HAPTER 5 WAN Setup 5.1 Overview This chapter describes how to configure W AN settings from the WA N screens. Use these screens to configure your ZyXEL Device for Internet access. A W AN (W ide Area Network) connection is an outside connection t o another network or the Internet.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 70 W AN IP Address The W AN IP address is an IP address for th e ZyXEL Device, which makes it accessible from an outside network. It is use d by the ZyXEL Device to communicate with oth er devices in other networks.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 71 Figure 31 Network > W AN >Internet Access Setup (PPPoE) The following table describes the labels in this screen. T able 17 Network > WAN > Int ernet Access Setup LABEL DESCRIPTION Line Modulation Select the modulation supported by your ISP .
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 72 Mode Select Routing (default) f rom the drop-down li st box if your ISP gives you one IP address only and you want multiple com puters to sha re an Intern et account.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 73 5.2.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the Inter net Access Setup screen. The screen a ppears as shown.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 74 The following table describes the labels in this screen. T able 18 Network > WAN > Internet Access Setup: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup This secti on is not avail able when you configure the ZyXEL Device to be in bridge mode.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 75 5.3 The More Connections Screen The ZyXEL Device allows you to configure more than one Internet access connection. T o configure additional Internet access connections click Network > W AN > More Connections .
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 76 The following table describes the labels in this screen. 5.3.1 More Connections Edit Use this screen to configure a conn ection. Click the edit icon in the Mor e Connections screen to display the following screen.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 77 Figure 34 Network > W AN > More Conn ections: Edit The following table describes the labels in this screen. T able 20 Network > W AN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 78 User Name (PPPoA and P PPoE encapsulati on only) Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 79 5.3.2 Configuring More Connections Advanced Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 80 5.4 The W AN Backup Setup Screen Use this screen to configure your ZyXEL Device’ s W AN backup. Click Network > W AN > W AN Backup Setup . A TM QoS T ype Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwi dth for voice or dat a traffic.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 81 Figure 36 Network > W AN > W AN Backu p The following table describes the labels in this screen. T able 22 Network > WAN > W AN Backup LABEL DESCRIPTION W AN Backup Setup Backup T ype Select the method that the ZyXEL Device uses to check the DSL connection.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 82 5.5 W AN T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 5.5.1 Encap sulation Be sure to use the encapsulat ion method required by your IS P .
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 83 One of the benefits of PPPoE is the ability to let you access on e of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 84 5.5.4 IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Si ngle User Account feature can be enabled or disabled if you have either a dynamic or static IP .
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 85 The metric sets the priority for the ZyXE L Devi ce’ s routes to the Internet. If any two of the default routes have the same metric, the ZyXEL Device uses the following pre-defined priorities: • Normal route: designated by the ISP (see Section 5.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 86 5.7.1 A TM T raffic Classes These are the basic A TM traffic classes define d by the A TM Forum T raf fic Management 4.0 Specification. Const ant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 87 Figure 38 T raf fic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is co nnected to the LAN.
Chapter 5 WAN Setup P-660HN-F1 User’s Guide 88.
P-660HN-F1 User’s Guide 89 C HAPTER 6 LAN Setup 6.1 Overview A Local Area Network (LAN) is a shared commun ication system to which many network ing devices are connected. It is usually located in on e immediate area such as a building or floor of a building.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 90 Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. Y o u can also use subnet masks to divide one network in to multiple sub-networks.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 91 2 Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automati cally compute a subnet mask based upon the IP addres s you entered.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 92 Figure 41 Network > LA N > IP: Advanc ed Setup The following table describes the labels in this screen. T able 24 Network > LAN > IP: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Out Only .
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 93 6.3 The DHCP Setup Screen Use this screen to configure th e DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 94 Figure 42 Network > LAN > DHCP Setup The following table describes the labels in this screen. T able 25 Network > LAN > DHCP Setup LABEL DE.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 95 6.4 The Client List Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 96 The following table describes the labels in this screen. 6.5 The IP Alias Screen IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 97 Figure 44 Physical Network & Partitioned Logical Networks 6.5.1 Configuring th e LAN IP Alias Screen Use this screen to change your Zy XEL Device’ s IP alias settings. Click Ne twork > LAN > IP Alias to open the following screen.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 98 6.6 LAN T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 6.6.1 LANs, W ANs and the ZyXEL Device The actual physi ca l co nn ec tio n dete rm ine s wh ether the ZyXEL Device ports are LAN or W A N ports.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 99 6.6.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individu al clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 100 Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 101 6.6.5 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange rou ting i nformation with other routers.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 102 6.6.7 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allo w the computer to access the Internet (through the ZyXEL Device).
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 103 The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the ZyXEL Device.
Chapter 6 LAN Setup P-660HN-F1 User’s Guide 104.
P-660HN-F1 User’s Guide 105 C HAPTER 7 Wireless LAN 7.1 Overview This chapter describes how to perfo rm tasks related to setting up and optimizing your wireless network, including the following. • T urning the wireless connection on or off. • Configuring a name, wireless channel a nd security for the network.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 106 7.1.2 What Y ou Need to Know About Wireless Wireless Basics “W ireless” is essentially radio communication. In the same way that walkie-talkie ra dios send and receive information over the airwaves, wire less networking devices exchange information with one another .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 107 7.2 The AP Screen Use this screen to configure the wirel ess settings of your ZyXEL Device. Click Network > Wir eless LAN to open the AP screen. Figure 48 Network > Wireless LAN > AP The following table describes the labels in this screen.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 108 7.2.1 No Security In the Network > Wir eless LAN > AP screen, sele ct No Security from the Security Mode list to allow wireless devices to communicat e with the ZyXEL Device without any data encryption or authentication.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 109 " If you do not enable any wi reless security on your Zy XEL Device, your network is accessible to any wireless network ing device that is within range. Figure 49 Network > Wireless LAN > AP: No Security The following table describes the labels in this screen.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 0 Figure 50 Network > Wireless LAN > AP: WEP Auto The following table describes the wireless LAN security labels in this screen. 7.2.3 WP A(2)-PSK Use this screen to configure and enab le WP A(2)-PSK authentication.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 111 Figure 51 Network > Wireless LAN > AP: WP A(2)-PSK The following table describes the wireless LAN security labels in this screen. 7.2.4 WP A(2) Auth en tication Use this screen to configure and enable WP A or WP A2 authentication.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 2 Figure 52 Network > Wireless LAN > AP: WP A(2) The following table describes the wireless LAN security labels in this screen. T able 32 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION Security Mode Choose WP A , WP A2 or WP AMixed from the drop-down list box.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 3 7.2.5 Wireless LAN Advanced Setup Use this screen to configure adva nced wireless settings. Click the Advanced Setup button in the AP screen. The screen appears as shown. See Section 7.9.2 on page 123 for detailed definitions of th e terms listed in this screen.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 4 The following table describes the labels in this screen. 7.2.6 MAC Filter Use this screen to change your ZyXEL Device’ s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 5 The following table describes the labels in this screen. 7.3 The More AP Screen This screen allows you to enable and configur e multiple Basic Service Set s (BSSs) on the ZyXEL Device. Click Network > Wi reless LAN > More AP .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 6 7.3.1 More AP Edit Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Mor e AP screen. The following screen displays. Figure 56 Network > Wireless LAN > More AP: Edit The following table describes the fields in this screen.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 7 7.4 The WPS Screen Use this screen to configure W iFi Prot ected Setup (WPS) on your ZyXEL Device. WPS allows you to quickly set up a wireless ne twork with strong security , without having to configure security settings manually .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 8 7.5 The WPS S t ation Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wi reless LAN > WPS S tation .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 11 9 7.6 The WDS Screen An AP using the Wireless Distribution System (WDS) can function as a wireless network bridge allowing you to wirelessly c onnect two wired network segments. Th e WDS screen allows you to configure the ZyXEL Device to co nnect to two or more APs wirelessly when WDS is enabled.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 120 The following table describes the labels in this screen. 7.7 The QoS Screen Y ou can turn on W i-Fi MultiMedia (WMM) QoS to i mprove the performance of voice and video applications in the wirele ss network.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 121 7.8 The Scheduling Screen Use the wireless LAN scheduling to configure th e days you want to enable or disable the wireless LAN. Click Network > Wireless LAN > Scheduling . The following screen displays.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 122 • An access point is a radio with a wired conn ection to a network, which can connect with numerous wireless clients and let them access the network. • A bridge is a radio that relays communicatio ns between access points and wireless clients, extending a network’ s range.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 123 Radio Channels In the radio spectrum, there are certain frequen cy bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 124 7.9.3 Wireless Security Overview By their nature, radio communications are simple to intercept. For wireless data networks, this means that anyone within range of a wireless ne twork without security can not only read the data passing over the airwaves, but also join the network.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 125 Y ou can use the MAC address filter to tell the ZyXEL Device which devices are al lowed or not allowed to use the wireless network. If a devi ce is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security).
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 126 " It is recommended that wireless networks use WP A-PSK , WP A , or stronger encryption. The other types of encryption are better than none at all, but it is still possible for unauthoriz ed wireless devices to fi gure out the original information pretty quickly .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 127 Figure 63 Basic Service set 7.9.6 MBSSID T raditionally , you need to use di fferent APs to configure dif fer ent Basic Service Sets (BSSs). As well as the cost of buying extra APs, ther e is also the possibility of channel interference.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 128 The following figure illustrates how WDS link works between APs. Notebook computer A is a wireless client connecting to access point AP 1 . AP 1 has no wired Internet con nection, but can establish a WDS link with access point AP 2 , which does.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 129 7.9.8.2 PIN Configuration Each WPS-enabled device has its own PIN (Personal Identificatio n Number). This may either be static (it cannot be chang ed) or dynamic (i n some devices you can generate a n ew PIN by clicking on a button in th e configuration interface).
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 130 Figure 65 Example WPS Process: PIN Method 7.9.8.3 How WPS Works When two WPS-enabled devices connect, each de vice must assume a spe cific role.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 131 Figure 66 How WPS works The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary .
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 132 Figure 67 WPS: Example Network S tep 1 In step 2 , you add ano ther wireless client to the network.
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 133 Figure 69 WPS: Example Network S tep 3 7.9.8.5 Limit ations of WPS WPS has some limitati ons of which you should be aware. • WPS works in Infrastructure networks on ly (where an AP and a wireless client communicate).
Chapter 7 Wireless LAN P-660HN-F1 User’s Guide 134 Y ou can easily check to see if this has happ ened. WPS works between only two devices simultaneously , so if another device has enrolle d you r device will be un able to enroll, and will not have access to the network.
P-660HN-F1 User’s Guide 135 C HAPTER 8 Network Address Translation (NAT) 8.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 136 NA T In the simplest form, NA T c hanges the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side .
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 137 The following table describes the labels in this screen. 8.3 The Port Forwarding Screen " This screen is available only when you select SUA only in the NA T > General screen.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 138 " Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Y our ISP may periodically check for serv ers and may suspend your a ccount if it discovers any active services at your location.
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 139 Figure 72 Network > NA T > Port Forward ing The following table describes the fields in this screen. 8.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 140 Figure 73 Network > NA T > Port Forward ing: Edit The following table describes the fields in this screen. 8.4 The Address Mapping Screen " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen.
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 141 rules. For example, if you have already configur ed rules 1 to 6 in your current set and now you configure rule number 9. In the set summary scr een, the new rule will be rule 7, not 9.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 142 8.4.1 The Address Mapping Rule Edit Screen Use this screen to edit an address mapping rule. Click the rule’ s edit icon in the Addr ess Mapping screen to display the screen shown next.
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 143 8.5 The SIP ALG Screen Some NA T routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NA T by e xamining and translating IP addresses embedded in the data stream.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 144 Note that inside/outside refers to the locat ion of a host, while global/local refers to the IP address of a host used in a pack et.
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 145 Figure 77 How NA T Works 8.6.4 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP alias) behind the ZyXEL Devi ce can communicate with three distinct W AN networks.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 146 Figure 78 NA T Application With IP Alias 8.6.5 NA T Mapping T ypes NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address.
Chapter 8 Network Address Tran slation (NAT) P-660HN-F1 User’s Guide 147 Port numbers do NOT change for One-to-One and Many-to-Many No Overload NA T mapping types.
Chapter 8 Net wo rk Addr ess Translation (NAT ) P-660HN-F1 User’s Guide 148.
149 P ART IV Security Firewalls (151) Content Filtering (171) Packet Filter (177) Certificates (187).
150.
P-660HN-F1 User’s Guide 151 C HAPTER 9 Firewalls 9.1 Overview This chapter shows you how to enable and configure the ZyXEL Device firewall. Use these screens to enable and configure the firewall th at protects your ZyX EL Device and network from attacks by hackers on the Internet and control access to it.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 152 9.1.2 What Y ou Need to Know About Firewall DoS Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disable a d evice or network so users no longer have access to network resources.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 153 Figure 80 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 154 Figure 82 Firewall Example: Edit Ru le: Des tination Addres s 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 155 Figure 83 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 156 Figure 84 Firewall Example: Rules: MyService 9.2 The Firewall General Screen Use this screen to configur e the firewall settings.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 157 The following table describes the labels in this screen. 9.3 The Firewall Rule Screen " The ordering of your rules is very important as rules are applied in turn. Refer to Section 9.5 on page 166 for more information.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 158 Click Security > Firewall > Rules to bring up the following scre en. This screen displays a list of the configured firewall rules. Note the order in which the rules are listed. Figure 86 Security > Firewall > Rules The following table describes the labels in this screen.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 159 9.3.1 Configuring Firewa ll Rules Refer to Section 9.1.2 on pa ge 152 for more information. Use this screen to configur e firewall rules.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 160 Figure 87 Security > Fire wa ll > Rules: Edit The following table describes the labels in this screen. T able 54 Security > Firewall > Rules: Edit LABEL DESCRIPTION Edit Rule Activ e Select this option to enable this firewall rule.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 161 Action for Matched Packet Use the drop-down li st box to select whether to discard ( Dro p ), deny and send an ICMP destination-unreachable message to the sender of ( Reject ) or allow th e passage of ( Permit ) packet s that match this rule.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 162 9.3.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 163 Figure 89 Security > Firewall > Rules: Edit: Edit Custom ized Services: Config The following table describes the labels in this screen.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 164 Figure 90 Three-W ay Hand shake For UDP , half-open means that the fire wall has detected no return traffic. An unusually high number (or arrival rate) of half-ope n sessions could indicate a DOS attack.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 165 Figure 91 Security > Fire wall > Thresho ld The following table describes the labels in this screen.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 166 9.5 Firewall T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 9.5.1 Firewall Rules Overview Y our customized rules take precedence and ove rride the ZyXEL Device’ s default settings.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 167 " Y ou can also configure t he remote management sett ing s to allow only a specific computer to manage the ZyXEL Device. • LAN to W AN These rules specify which computers on the LAN ca n access which computers or services on the W AN.
Chapter 9 Firewalls P-660HN-F1 User’s Guide 168 9.5.2 Guidelines For Enhancing Security With Y our Firewall 1 Change the default password via web configurator . 2 Think about access control before you connect to the network in any way . 3 Limit who can access your router .
Chapter 9 Firewalls P-660HN-F1 User’s Guide 169 Figure 92 Ideal Firewall Setup 9.5.4.1 The “T riangle Route” Problem A traffic route is a path for sending or receiv ing data packets between two Ethernet devices. Y ou may have more than one co nnection to the Internet (through on e or more ISPs).
Chapter 9 Firewalls P-660HN-F1 User’s Guide 170 It’ s like having multiple LAN networks that actu ally use t he same physical cables and ports. By putting your LAN and Gateway A in dif ferent subnets, all returning network traffic must pass through the ZyXEL Device to yo ur LAN.
P-660HN-F1 User’s Guide 171 C HAPTER 10 Content Filtering 10.1 Overview Internet content filtering allows you to bl ock web sites based on keywords in the URL. See Section 10.1.4 on page 1 71 for an example of setting up content filtering. 10.1.1 What Y ou Can Do in the Content Filter Screens • Use the Keyword screen ( Section 10.
Chapter 10 Content Filtering P-660HN-F1 User’s Guide 172 Figure 95 Security > Cont ent Filter > Keyword: Exam ple Bob’ s son arrives home from school at four , while his parents arrive later , at about 7pm. So keyword blocking is en ab led for these times on weekdays and not on the weekend when the parents are at home.
Chapter 10 Co n te nt F ilt ering P-660HN-F1 User’s Guide 173 2 In the S tart IP Address and End IP Addr ess fi elds, type 192.168.1. 3. 3 Click Apply . Figure 97 Security > Cont ent Filter > T rusted: Exa mple That finishes setting up keyword blocking on the home computer .
Chapter 10 Content Filtering P-660HN-F1 User’s Guide 174 10.3 The Schedule Screen Use this screen to set the days and times for the ZyXEL Device to pe rform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown.
Chapter 10 Co n te nt F ilt ering P-660HN-F1 User’s Guide 175 10.4 The T rusted Screen Use this screen to exclude a range of users on the LAN from content f iltering on your ZyXEL Device. Click Security > Content Filter > Tr u s t e d . The screen appears as shown.
Chapter 10 Content Filtering P-660HN-F1 User’s Guide 176.
P-660HN-F1 User’s Guide 177 C HAPTER 11 Packet Filter 1 1 .1 Overview Y our ZyXEL Device uses filters to decide whethe r to allow passage of traffic. This chapter discusses how to create and apply filters. 1 1.1.1 What Y ou Can Do in the Packet Filter Screen Use the Packet Filter screens ( Section 1 1.
Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 178 Figure 101 Security > Packet Filter The following table describes the labels in this screen. 1 1.2.1 Editing Protocol Filters Use this screen to display a protoco l filter set on your ZyXEL Device.
Chapter 11 Packet Filter P-660HN-F1 User’s Guide 179 Figure 102 Security > Packet Filter > Edit (Protocol Filter) The following table describes the labels in this screen. 1 1.2.2 Configuring Protocol Filter Rules Use this screen to configure pr otocol filter rules.
Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 180 Figure 103 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule The following table describes the labels in this screen.
Chapter 11 Packet Filter P-660HN-F1 User’s Guide 181 1 1.2.3 Editing Generic Filters Use this screen to display a generic filter set on your ZyXEL Device. The purpose of generic rules is to allow you to filter non -IP packets. For IP packets, it is generally easier to use the IP rules directly .
Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 182 The following table describes the labels in this screen. 1 1.2.4 Configuring Generic Packet Rules Use this screen to configure generic filter rules. In the Edit (Generic Filter) screen, click the Edit button from the Modify field to display the following screen.
Chapter 11 Packet Filter P-660HN-F1 User’s Guide 183 1 1 .3 Packet Filter T echnical Reference This section provides some technical background information abou t the topics covered in this chapter . 1 1.3.1 Filter T ypes and NA T There are two classes of filter rules, generic filter rules and protocol filter rules.
Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 184 1 1.3.2 Firewall V ersus Filters Below are some comparisons be tween the ZyXEL Device’ s filtering and firewall functions. Packet Filtering • The router filters packets as they pass through the router ’ s interface according to the filter rules you designed.
Chapter 11 Packet Filter P-660HN-F1 User’s Guide 185.
Chapter 11 Pa ck et F ilt er P-660HN-F1 User’s Guide 186.
P-660HN-F1 User’s Guide 187 C HAPTER 12 Certificates 12.1 Overview This chapter describes how your ZyXEL De vice can use certificates as a means of authenticating wireless clients. It gives backgr ound information about public-k ey certificates and explains how to use them .
Chapter 12 Certificates P-660HN-F1 User’s Guide 188 12.1.2 What Y ou Need to Know About Certificates Certification Authority A Certification Authority (CA) issues certif icates and guarantees the identity of each certificate owner .
Chapter 12 Certificates P-660HN-F1 User’s Guide 189 The following table describes the labels in this screen. T able 66 My Certificates LABEL DESCRIPTION PKI S torage S p ace in Use T his bar displays the percentage of the Zy XEL Device’s PKI storage sp ace that is currently in use.
Chapter 12 Certificates P-660HN-F1 User’s Guide 190 12.2.1 My Certificate Import Follow the instructions in this screen to save an existing ce rtificate to the ZyXEL Device. Click Security > Ce rtificates > My Certificates and the n Import to open the My Certificate Import screen.
Chapter 12 Certificates P-660HN-F1 User’s Guide 191 The following table describes the labels in this screen. 12.2.2 My Certificate Create Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authority or gene rate a certification request.
Chapter 12 Certificates P-660HN-F1 User’s Guide 192 Common Name Select a radio button to identify th e certificate’s owner by IP address, domain name or e-mail address. T ype the IP address (in dotted decimal notation), domain name or e-mail address in the field provide d.
Chapter 12 Certificates P-660HN-F1 User’s Guide 193 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request.
Chapter 12 Certificates P-660HN-F1 User’s Guide 194 Figure 1 1 1 My Certificate Details The following table describes the labels in this screen. T able 69 My Certificate Details LABEL DESCRIPTION Certificate Name This field displays the identifying name of this ce rtificate.
Chapter 12 Certificates P-660HN-F1 User’s Guide 195 Certification Path Click the Refresh button to have this read-only te xt bo x display the hierarchy of certification authorities that validate th e ce rtificate (and th e certificate itself).
Chapter 12 Certificates P-660HN-F1 User’s Guide 196 12.3 The T rusted CAs Screen This screen displays a summary list of certificat es of the certification authorities that you have set the ZyXEL Device to accept as trusted.
Chapter 12 Certificates P-660HN-F1 User’s Guide 197 The following table describes the labels in this screen. 12.3.1 T rusted CA Import Follow the instructions in this screen to save a tr usted certification aut hority’ s certificate to the ZyXEL Device.
Chapter 12 Certificates P-660HN-F1 User’s Guide 198 Figure 1 13 Trusted CA Import The following table describes the labels in this screen. 12.3.2 T rusted CA Det ails Use this screen to view in-dep .
Chapter 12 Certificates P-660HN-F1 User’s Guide 199 Figure 1 14 Trusted CA Det ails The following table describes the labels in this screen. T able 72 T rusted CA Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate.
Chapter 12 Certificates P-660HN-F1 User’s Guide 200 Certificate Path Click th e Refresh button to have this read-only text box disp lay the end entity’s certificat e and a list of cert ification authority certificat es that shows the hierarchy of certification author ities that validate the end entity’ s certificate.
Chapter 12 Certificates P-660HN-F1 User’s Guide 201 12.4 The T rusted Remote Host s Screens This screen displays a list of the certificates of peers that you trust but which are not signed by one of the certification authorities on the Tr u s t e d C A s screen.
Chapter 12 Certificates P-660HN-F1 User’s Guide 202 Figure 1 15 Trusted Remote Host s The following table describes the labels in this screen. T able 73 T rusted Remote Host s LABEL DESCRIPTION PKI S torage S p ace in Use T his bar displays the percentage of the Zy XEL Device’s PKI storage sp ace that is currently in use.
Chapter 12 Certificates P-660HN-F1 User’s Guide 203 12.4.1 T rusted Remote Host s Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen.
Chapter 12 Certificates P-660HN-F1 User’s Guide 204 Figure 1 17 Trusted Remote Host Details The following table describes the labels in this screen. T able 75 T rusted Remote Host De t ails LABEL DESCRIPTION Certificate Name This field displays the identifyin g name of this certificate.
Chapter 12 Certificates P-660HN-F1 User’s Guide 205 V ersion This fiel d displays the X.509 versio n number . Serial Number This field displays the certificat e’s identification n umber given by the device that created the certificate.
Chapter 12 Certificates P-660HN-F1 User’s Guide 206 12.5 The Directory Servers Screens This screen display s a summary list of dire ctory servers (that co ntain lists of va lid and revoked certificates) that have been save d into the ZyXEL Device.
Chapter 12 Certificates P-660HN-F1 User’s Guide 207 12.5.1 Directory Se rver Add and Edit Use this screen to configure in formation about a directory server that the ZyXEL Device can access. Click Security > C ertificates > Directory Servers to open the Directory Servers screen.
Chapter 12 Certificates P-660HN-F1 User’s Guide 208 12.6 Certificates T echnical Reference This section provides technical background in formation about the topics covered in this chapter . 12.6.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users.
Chapter 12 Certificates P-660HN-F1 User’s Guide 209 • Key distribution is simple and very secure si nce you can freely distribute p ublic keys and you never need to transm it priv ate keys. Self-signed Certificates Y ou can have the ZyXEL Device act as a certific ation authority and sign its own certificates.
Chapter 12 Certificates P-660HN-F1 User’s Guide 210 Figure 120 Remote Host Certificates 3 Double-click the certificate’ s icon to open the Certificate window . Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields.
21 1 P ART V Advanced S tat ic Route (213) 802.1Q/1P (217) Quality of Service (QoS) (227) Dynamic DNS Setup (241) Remote Management (245) Universal Plug-and-P lay (UPnP) (257).
212.
P-660HN-F1 User’s Guide 213 C HAPTER 13 Static Route 13.1 Overview The ZyXEL Device usually uses the default ga teway to route outbound traf fic from compu ters on the LAN to the Internet. T o have the ZyX EL Device send data to devices not reachable through the default gatewa y , use static routes.
Chapter 13 Stat ic Route P-660HN-F1 User’s Guide 214 13.2 The S t atic Route Screen Use this screen to view the static route rules. Click Advanced > S tatic Route to open the St a t i c R o u t e screen. Figure 123 Advanced > S t atic Route The following table describes the labels in this screen.
Chapter 13 Static Route P-660HN-F1 User’s Guide 215 13.2.1 S t atic Route Edit Use this screen to configure the required informa tion for a sta tic route. Select a static route index number and click Edit . The screen shown next appears. Figure 124 Advanced > S tatic Route: Edit The following table describes the labels in this screen.
Chapter 13 Stat ic Route P-660HN-F1 User’s Guide 216.
P-660HN-F1 User’s Guide 217 C HAPTER 14 802.1Q/1P 14.1 Overview This chapter describes how to co nfigure the 802.1Q/1P settings. A V irtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. A VLAN group can be treated as an individual device.
Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 218 PVC A virtual circuit is a logical point-to-point ci rcuit between customer s ites. Permanent means that the circuit is preprogrammed by the carrier as a path through the network. It does not need to be set up or torn down for each session.
Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 219 1 Click Advanced > 802.1Q/1P > Group Setting , and then click the Edit button to display the following screen. 2 In the Name field type V oIP to identify the group. 3 In the VLAN ID field type in 2 to identify the VLAN group.
Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 220 Figure 128 Advanced > 802 .1Q/1P > Port Setting: Example Ports 3 and 4 are connected to desktop computers an d are used for Internet traffic. Y ou want to create low priority for this type of traffic, so you want to group these ports and PVC2 into one VLAN (VLAN3).
Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 221 Figure 129 Advanced > 802.1Q/1P > Group Setting: Exa mple This completes th e 802.1Q/1P setup. 14.2 The 802.1Q/1P Group Setting Screen Use this screen to activate 802.1Q/1 P and display the VLAN groups.
Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 222 Figure 130 Advanced > 802 .1Q/1P > Gro up Setting The following table describes the labels in this screen. T able 80 Advanced > 802.1Q/1P > Group Setting LABEL DESCRIPTION 802.1P/1Q Active Select this check box to activate the 802.
Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 223 14.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure th e settings for each VL AN group. In the 802.1Q/1P screen, click the Edit button from the Modify filed to display the following screen.
Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 224 14.3 The 802.1Q/1P Port Setting Screen Use this screen to c onfigure the PVID and assi gn traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to display the following screen.
Chapter 14 802.1 Q/1P P-660HN-F1 User’s Guide 225 802.1P Priority Assign a priority for the tr affic transmitted through the port. Select Same if you do not want to modify the priority . Y ou may choose a priority level from 0-7 , with 0 being the lowest level and 7 being the highest level .
Chapter 14 802.1Q/1P P-660HN-F1 User’s Guide 226.
P-660HN-F1 User’s Guide 227 C HAPTER 15 Quality of Service (QoS) 15.1 Overview Use the QoS screens to set up yo ur ZyXEL Device to use QoS for traffic management. Quality of Service (QoS) refers to both a networ k’ s ability to deliver data with minimum delay , and the networking methods used to control bandwidth.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 228 CoS technologies include IEEE 80 2.1p layer 2 tagging and Differ entiated Services (Dif fServ or DS).
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 229 Figure 134 QoS Class Examp le: V oIP -1 Figure 135 QoS Class Examp le: V oIP -2.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 230 Figure 136 QoS Class Example: Boss -1 Figure 137 QoS Class Example: Boss -2.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 231 15.2 The QoS General Screen Use this screen to enable or disable QoS an d have the ZyXEL Device automatically assign priority to traffic according to the IEEE 802.1p priority level, IP precedence and/or pack et length.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 232 15.3 The Class Setup Screen Use this screen to add, edit or delete classifier s. A classifier groups traf fic into data flows according to specific criteria such as the sour ce address, destination address, source port number , destination port number or inco ming interfa ce.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 233 Figure 140 Advanced > QoS > Class Setup: Edit.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 234 See Appendix E on page 3 73 for a list of commonly-used services. The following table describes the labels in this screen. T able 85 Advanced > QoS > Class Setup: Edit LABEL DESCRIPTION Class Configuration Activ e Select the check box to enable this classifie r .
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 235 Port Select the ch eck box and enter the port number of the so urce. 0 means any source port number . See Appendix E on page 373 for some common services and port numbers. MAC Select the check box a nd enter the source MAC a ddress of the packet.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 236 15.4 The QoS Monitor Screen Use this screen to view the ZyXEL Device’ s QoS packe t statistics. Click Advanced > QoS > Monitor . The screen a ppears as shown. Figure 141 Advanced > QoS > Monitor The following table describes the labels in this screen.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 237 15.5 QoS T echnical Reference This section provides some technical background information abou t the topics covered in this chapter .
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 238 15.5.3 DiffServ QoS is used to prioritize source-to-destination traf fic flows. All packets in the flow are given the same priority . Y ou can use CoS (class of serv ice) to give different priorities to different packet types.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 239 3 3 1 0 0 111 0 001 100 001010 001000 250~1 1 00 44 2 0 1 0 1 1 0 010100 010010 010000 5 5 3 0 1111 0 01 1 100 01 1010 01 1000 <250.
Chapter 15 Quality of Service (QoS) P-660HN-F1 User’s Guide 240.
P-660HN-F1 User’s Guide 241 C HAPTER 16 Dynamic DNS Setup 16.1 Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in Ne tMeeting, CU-SeeMe, etc.
Chapter 16 Dy namic DNS Se tup P-660HN-F1 User’s Guide 242 Figure 142 Advanced > Dynamic DNS The following table describes th e fields in this screen. T able 89 Advanced > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS.
Chapter 16 Dynamic DNS Setup P-660HN-F1 User’s Guide 243 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server . This feature has the DDNS serve r automati cally detect and use the IP address of the NA T router that has a public IP address.
Chapter 16 Dy namic DNS Se tup P-660HN-F1 User’s Guide 244.
P-660HN-F1 User’s Guide 245 C HAPTER 17 Remote Management 17.1 Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. The following figure shows remote management of the ZyXEL Device coming in from the WA N .
Chapter 17 Remote Management P-660HN-F1 User’s Guide 246 1 Te l n e t 2 HTTP 17.1.1 What Y ou Can Do in th e Remote Management Screens • Use the WWW screen ( Section 17.2 on page 247 ) to configure throug h which interface(s) and from which IP address( es) users can use HTTP to manage the ZyXEL Device.
Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 247 17.2 The WWW Screen Use this screen to specify how to connect to the ZyXEL Device from a web browser , suc h as Internet Explorer . 17.2.1 WWW and HTTPS HTTPS (HyperT ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.
Chapter 17 Remote Management P-660HN-F1 User’s Guide 248 17.2.2 Configuring the WWW Screen Click Advanced > Remote MGMT to display the WWW screen. Figure 145 Advanced > Re mote Manage ment > WW W The following table describes the labels in this screen.
Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 249 17.3 The T elnet Screen Y ou can use T elnet to access the ZyXEL De vice’ s command line inte rface. Specify which interfaces allow T elnet access a nd fro m which IP address the access can come.
Chapter 17 Remote Management P-660HN-F1 User’s Guide 250 17.4 The FTP Screen Y ou can use FTP (File T ransfer Protocol) to upload and download the ZyXEL Device’ s firmware and configuration files. Please see the User ’ s Guide chapter on firmware and configuration file maintenance for details.
Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 251 " SNMP is only available if TCP/IP is configured. Figure 148 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent : ag ents and a man age r . An agent is a management software module that resi des in a managed device (the ZyXEL Device).
Chapter 17 Remote Management P-660HN-F1 User’s Guide 252 17.5.1 Supported MIBs The ZyXEL Device supports MIB II, which is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect st atistical data a nd monitor status and performance.
Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 253 Figure 149 Advanced > Re mote Manage ment > SNMP The following table describes the labels in this screen. T able 94 Advanced > Remote Mana gement > SN MP LABEL DESCRIPTION SNMP Port Y ou may change the server port number for a service, if needed.
Chapter 17 Remote Management P-660HN-F1 User’s Guide 254 17.6 The DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa.
Chapter 17 Remote Manag ement P-660HN-F1 User’s Guide 255 " If you want your device to respond to pings and requests for unauthorized services, you may also need to configure the firewall anti probing settings to match. Figure 151 Advanced > Re mote Manage ment > ICM P The following table describes the labels in this screen.
Chapter 17 Remote Management P-660HN-F1 User’s Guide 256.
P-660HN-F1 User’s Guide 257 C HAPTER 18 Universal Plug-and-Play (UPnP) 18.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 258 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 259 18.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 260 Figure 154 Add/Remove Programs: Wind ows Setup: Communication: Co mponents 4 Click OK to go back to the Add/Remove Programs Pr operties window and click Next . 5 Restart the computer when prompted.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 261 Figure 156 Windows Optiona l Networking Components Wiza rd 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 157 Networking Services 6 Click OK to go back to the W indows Optional Networking Compon ent Wizard window and click Next .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 262 18.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 263 Figure 159 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 264 Figure 160 Internet Connection Properties: Adva nced Settings Figure 161 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconn e cted from your computer , all port mappings will be deleted automatically .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 265 Figure 162 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet conn ection status.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 266 Figure 164 Network Connections 4 An icon with the description for e ach UPnP-enabled device display s under Local Network . 5 Right-click on the icon for y our ZyXEL Device an d select Invoke .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 267 Figure 165 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HN-F1 User’s Guide 268.
269 P ART VI Maintenance System Settings (271) Logs (277) T ools (289) Diagnostic (301).
270.
P-660HN-F1 User’s Guide 271 C HAPTER 19 System Settings 19.1 Overview This chapter shows you how to configure sy stem related settings, such as system time, password, name, th e domain name and the inactivity timeout interval. 19.1.1 What Y ou Can Do in the System Se ttings Screens • Use the Gene ral screen ( Section 19.
Chapter 19 System Settings P-660HN-F1 User’s Guide 272 • In W indows XP , click start , My Computer , View system information and then click the Computer Name tab. No te the entry i n the Full computer name field and enter it as the ZyXEL Device System Name .
Chapter 19 System Settings P-660HN-F1 User’s Guide 273 19.3 The T ime Setting Screen Use this screen to configure the ZyXEL Devi ce’ s time based on your local time zone. T o change your ZyXEL Device’ s time and date, click Mainte nance > System > Ti me Setting .
Chapter 19 System Settings P-660HN-F1 User’s Guide 274 The following table describes th e fields in this screen. T able 99 Maintenance > System > T ime Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the time of your ZyXEL Devi ce.
Chapter 19 System Settings P-660HN-F1 User’s Guide 275 St a r t D a t e Configure the day and time when Daylight Sa ving Time start s if you selected Enable Daylight Saving .
Chapter 19 System Settings P-660HN-F1 User’s Guide 276.
P-660HN-F1 User’s Guide 277 C HAPTER 20 Logs 20.1 Overview This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs.
Chapter 20 L ogs P-660HN-F1 User’s Guide 278 Figure 169 Maintenance > Logs > Vi e w Log The following table describes th e fields in this screen. 20.3 The Log Settings Screen Use the Log Settings screen to configure the mail server , the syslog server , when to send logs and what logs to send.
Chapter 20 Logs P-660HN-F1 User’s Guide 279 Figure 170 Maintenance > Logs > Log Settings The following table describes th e fields in this screen.
Chapter 20 L ogs P-660HN-F1 User’s Guide 280 20.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. “SMTP action request failed. ret= ??". The “??"are described in the following table.
Chapter 20 Logs P-660HN-F1 User’s Guide 281 20.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title.
Chapter 20 L ogs P-660HN-F1 User’s Guide 282 TELNET login failed Someone has fai led to log on to the router via telnet. Successful FTP login Someone has logg ed on to the router via ftp. FTP login failed Someone has failed to log on to the router via ftp.
Chapter 20 Logs P-660HN-F1 User’s Guide 283 T able 105 Access Control Logs LOG MESSAGE DESCRIPTION Firewall default policy: [ TCP | UDP | IGMP | ESP | GRE | OSPF ] <Packet Direction> Attempted TCP/UDP/IGMP/ESP/GRE/ OSPF access matched the d efault policy and was b locked or forwarded according to the de fault policy’s setting.
Chapter 20 L ogs P-660HN-F1 User’s Guide 284 For type and code details, see T ab le 1 16 on page 287 . T able 107 Packet Filter Logs LOG MESSAGE DESCRIPTION [ TCP | UDP | ICMP | IGMP | Generic ] pac.
Chapter 20 Logs P-660HN-F1 User’s Guide 285 For type and code details, see T ab le 1 16 on page 287 . ppp:IPCP Starting The PPP connection’s Internet Protocol Control Protoco l stage is starting. ppp:IPCP Opening The PPP connection’s Internet Protocol Con trol Protocol stage is opening.
Chapter 20 L ogs P-660HN-F1 User’s Guide 286 NetBIOS TCP The firewall detected a TCP NetBIOS att ack. ip spoofing - no routing entry [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall classified a packet with no source routing entry as an IP spoofing attack.
Chapter 20 Logs P-660HN-F1 User’s Guide 287 T able 1 16 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol u.
Chapter 20 L ogs P-660HN-F1 User’s Guide 288 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to RFC 2408 for detail ed information on each type.
P-660HN-F1 User’s Guide 289 C HAPTER 21 Tools 21.1 Overview This chapter explains how to upload new firm ware, manage configuration files and restart your ZyXEL Device. Use the instructions in this chapter to change the device’ s configuration file or upgrade its firmware.
Chapter 21 To ols P-660HN-F1 User’s Guide 290 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filena me extension. Find this firmware at www .zyxel.com.W ith many FTP and TFTP clients, the filenames are similar to those seen next.
Chapter 21 Tools P-660HN-F1 User’s Guide 291 21.1.4 T ool Examples Using FTP or TFTP to Restore Configuration This example shows you how to restore a previously saved configuration.
Chapter 21 To ols P-660HN-F1 User’s Guide 292 2 Enter “open”, followed by a space an d the IP address of yo ur device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary .
Chapter 21 Tools P-660HN-F1 User’s Guide 293 4 Use the TFTP client (see the exam ple below) to transfer file s between the device and the computer . The file name for the firmware is “ras”. Note that the telnet connection must be active an d the device in CI mode before and during the TFTP transfer .
Chapter 21 To ols P-660HN-F1 User’s Guide 294 Configuration Backup Using GUI- based FTP Client s The following table describes some of the commands that you may see in GUI-based FTP clients.
Chapter 21 Tools P-660HN-F1 User’s Guide 295 Configuration Backup Using GUI- based TFTP Client s The following table describes some of the fiel ds that you may see in GUI-based TFTP clients. Refer to Section 21.1.2 on p age 28 9 to read about configurations that disallow TFTP and FTP over W AN.
Chapter 21 To ols P-660HN-F1 User’s Guide 296 The following table describes the labels in this screen. After you see the Firmware Upload in Pr ogre ss screen, wait two minutes before logging into the ZyXEL Device again.
Chapter 21 Tools P-660HN-F1 User’s Guide 297 Figure 178 Error Message 21.3 The Configuration Screen See Section 21.1.4 on page 2 91 for transferring configuration files using FTP/TFTP commands.
Chapter 21 To ols P-660HN-F1 User’s Guide 298 Restore Configuration Restore Configuration allows yo u to upload a n e w or previously saved configuration file from your computer to your ZyXEL Device. 1 Do not turn off the ZyXEL Device while configuration file upload is in progress.
Chapter 21 Tools P-660HN-F1 User’s Guide 299 Figure 182 Configuration Upload Err or Reset to Factory Default s Click the Reset button to clear all user-entered conf iguration information and return the ZyXEL Device to its factory defaults . The following warning screen appears.
Chapter 21 To ols P-660HN-F1 User’s Guide 300 Figure 185 Maintenance > T ools >Restart.
P-660HN-F1 User’s Guide 301 C HAPTER 22 Diagnostic 22.1 Overview These read-only screens display information to help you identify problems with the ZyXEL Device. 22.1.1 What Y ou Can Do in the Diagnostic Screens • Use the General Diagnostic screen ( Section 22.
Chapter 22 Diagnostic P-660HN-F1 User’s Guide 302 The following table describes th e fields in this screen. 22.3 The DSL Line Diagnostic Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next.
Chapter 22 Diagnostic P-660HN-F1 User’s Guide 303 The following table describes th e fields in this screen. T able 125 Maintenanc e > Diagno stic > DSL L ine LABEL DESCRIPTION AT M S t a t u s Click this to view your DSL connection ’s Asynchronous T ransfer Mod e (A TM ) statistics.
Chapter 22 Diagnostic P-660HN-F1 User’s Guide 304 Reset ADSL Line Click this to reinitialize the ADSL line. The large text box above then disp lays th e progress and results of this operation, for example: "Start to reset ADSL Loading ADSL modem F/W.
305 P ART VII T roubleshooting and S pecifications Product Specification s (307) T roubleshooting (3 15).
306.
P-660HN-F1 User’s Guide 307 C HAPTER 23 Product Specifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. 23.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 308 S tatic Routes 16 Device Management Use the web configurator to easi ly configure the rich range of features on the ZyXEL Device. Wireless Functionality (wireless devices only) Allow the IEEE 802.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 309 Any IP The Any IP feat ure al lows a co mputer to access t he Inter net and t he ZyXEL Device without changing the network settings (such a s IP address and subnet mask) of the computer , when th e IP addresses of the computer an d the ZyXEL Device are not in the same subnet.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 310 23.3 Wireless Features Other Protocol Support PPP (Point-to-Point Protocol) link layer protocol IP routing T ransparent bridging for uns.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 31 1 The following list, which is not exhaustive, i llustrates the standards su pported in the ZyXEL Device. WMM QoS WMM (Wi-Fi MultiMedia) QoS (Q ual ity of Service) allo ws you to prioritize wireless traffic according to the deli very requirements of individual services.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 312 23.4 Power Adaptor Sp ecifications IEEE 802.1 1 Also known by the brand Wi-Fi, deno tes a set of Wireless LAN/WLAN standards developed by working group 1 1 of the IEEE LAN/MAN S tandards Committee (IEEE 802) .
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 313 Input Power AC 230V olts/50Hz Output Power DC 12V olts/1.0 A Power Co nsumption 8.3 W att max Safety S tandards CE, GS or TUV , EN60950-.
Chapter 23 Product Specifications P-660HN-F1 User’s Guide 314.
P-660HN-F1 User’s Guide 315 C HAPTER 24 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access 24.
Chapter 24 Tro u blesh oo tin g P-660HN-F1 User’s Guide 316 24.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.
Chapter 24 Trou bleshooting P-660HN-F1 User’s Guide 317 5 Reset the device to its factory defaults, an d try to access the ZyXEL Device with the default IP address. See Section 1.6 on page 36 . 6 If the problem continues, contact the network administrator or vendor , or try o ne of the advanced suggestio ns.
Chapter 24 Tro u blesh oo tin g P-660HN-F1 User’s Guide 318 24.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1 .5 on page 35 .
319 P ART VIII Appendices and Index " The appendices provide general informatio n. Some details may not apply to your ZyXEL Device. Setting up Y our Computer ’ s IP Address (321) Pop-up W indow.
320.
P-660HN-F1 User’s Guide 321 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 322 Figure 188 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Mic rosoft Networks.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 323 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 324 Figure 190 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r ga teway’ s IP addr ess, remove previously installed gateways.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 325 Figure 191 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indows 2000/NT). Figure 192 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 326 Figure 193 Windows XP: Control Panel: Network Connections: Pro per ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 327 Figure 195 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 328 Figure 196 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 329 Figure 197 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Pr operties window . 9 Click Close ( OK in W indow s 2000/NT) to close the Local Area Connection Properties window .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 330 Figure 198 Windows V ista: S tart Menu 2 In the Control Panel , double-click Network and Internet . Figure 199 Windows V ista: Contro l Panel 3 Click Network and Sharing Center .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 331 5 Right-click Local Area Connection and then click Pr operties . " During this procedure, click Continue whenever Windows displays a screen saying that it needs y our permission to continue.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 332 7 The Internet Protocol V ers ion 4 (TCP/IPv4) Properties window opens (th e General tab ). • If you have a dynamic IP address click Obtain an IP address automatically .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 333 Figure 205 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Protocol V ersion 4 (TCP/IPv4) Properties window , (the General tab ): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 334 Figure 206 Windows V ista: Internet Protocol V ersion 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Pr otocol V ersion 4 (TCP/IPv4) Pr operties window . 11 Click Close to close the Local Ar ea Connection Pr operties window .
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 335 Figure 207 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 208 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 336 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router address box.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 337 Figure 210 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 338 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 339 • If you have a dyna mic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 340 Figure 215 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth 0 • If you have a static IP address, enter static in t he BOOTPROTO= field. T ype IPADDR = followed by the IP address (in do tted decimal notation) and type NETMASK = followed by the subnet mask.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 341 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 219 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.
Appendix A Setting up Your Computer’s IP Address P-660HN-F1 User’s Guide 342.
P-660HN-F1 User’s Guide 343 A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default).
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 344 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen. This disables any web po p-up blockers you ma y have enabled . Figure 221 Internet Options: Privacy 3 Click Apply to save this setting.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 345 Figure 222 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 346 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configura tor do not display properly in Internet Explorer , check that JavaScript are allowed.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 347 Figure 225 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level.
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 348 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected.
Appendix B Pop-up Windows, JavaScript and Java Permissio ns P-660HN-F1 User’s Guide 349 Figure 228 Mozilla Firefox: T ools > Options Click Content .
Appendix B Pop- up Wind ow s, Ja vaScript and Java Permissions P-660HN-F1 User’s Guide 350.
P-660HN-F1 User’s Guide 351 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (including computers, servers, routers, printe rs, etc.
Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 352 Figure 230 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask.
Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 353 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks.
Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 354 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the foll owing example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons.
Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 355 Figure 232 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).
Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 356 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet.
Appendix C IP Addresses and Subnetting P-660HN-F1 User’s Guide 357 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number .
Appendix C IP Addresses a nd Subnetting P-660HN-F1 User’s Guide 358 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
P-660HN-F1 User’s Guide 359 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
Appendix D Wireless LANs P-660HN-F1 User’s Guide 360 Figure 234 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 361 Figure 235 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 362 Figure 236 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 363 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 364 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity .
Appendix D Wireless LANs P-660HN-F1 User’s Guide 365 Determines the network services available to authenticated users once they are connected to the network.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 366 For EAP-TLS authentication type, you must firs t have a wired connectio n to the network and obtain the certificate(s) from a certificate authorit y (CA).
Appendix D Wireless LANs P-660HN-F1 User’s Guide 367 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 368 Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 369 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyssey client.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 370 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID.
Appendix D Wireless LANs P-660HN-F1 User’s Guide 371 Antenna Overview An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF signals fro m the air .
Appendix D Wireless LANs P-660HN-F1 User’s Guide 372 Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point ap plication, position both antennas at the same height and in a direct line of si ght to each othe r to attain the best performance.
P-660HN-F1 User’s Guide 373 A PPENDIX E Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
Appendix E Serv ices P-660HN-F1 User’s Guide 374 H.323 TCP 1720 NetMeeting uses this proto c ol. HTTP TCP 80 Hyper T ext T ransfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce.
Appendix E Services P-660HN-F1 User’s Guide 375 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unneling Protocol ) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service. REAL_AUDIO TCP 7070 A streami ng audio service that enables real time sound over the we b.
Appendix E Serv ices P-660HN-F1 User’s Guide 376 TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (T ransmission Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution.
P-660HN-F1 User’s Guide 377 A PPENDIX F Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple ZyXEL Devices.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 378 Internal SPTGEN File Modification - Importa nt Points to Remember Each paramete r you enter must be pr ece ded by one “=”sign and one space.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 379 Figure 242 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your ZyXEL Device.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 380 The following are the Internal SP TGEN menus. PV A Parameter V alues Allowed INPUT An example of what you may enter * Applies to the ZyXEL Device.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 381 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server = 0.0.0.0 30200006 = Remote DHCP Server = 0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 382 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filters Set 3 = 256 30201013 = IP Alias #1 Outgoing protocol filters Set 4 = 256 30201014 = IP Alias 2 <0(No) | 1(Yes)> = 0 30201015 = IP Address = 0.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 383 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Key3 = 30500011 = WEP Key4 = 30500012 = Wlan Active <0(Disable) | 1(Enable)> = 0 */ MENU 3.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 384 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name <Str> = any 40000009 = My Login <Str> = test@pqa 40000010 = My P.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 385 T able 151 Menu 12 / Menu 12.1.1 IP Static Route Setup FIN FN PVA INPUT 120101001 = IP Static Route set #1, N ame <Str> = 120101002 = IP Static Route set #1, A ctive <0(No) |1(Yes)> = 0 120101003 = IP Static Route set #1, Destination IP address = 0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 386 120104005 = IP Static Route set #4, G ateway = 0.0.0.0 120104006 = IP Static Route set #4, M etric = 0 120104007 = IP Static Route set #4, P rivate <0(No) |1(Yes)> = 0 / Menu 12.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 387 120108004 = IP Static Route set #8, Destination IP subnetmask = 0 120108005 = IP Static Route set #8, G ateway = 0.0.0.0 120108006 = IP Static Route set #8, M etric = 0 120108007 = IP Static Route set #8, P rivate <0(No) |1(Yes)> = 0 */ Menu 12.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 388 120112003 = IP Static Route set #12, Destination IP address = 0.0.0.0 120112004 = IP Static Route set #12, Destination IP subnetmask = 0 120112005 = IP Static Route set #12, Gateway = 0.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 389 120116001 = IP Static Route set #16, Name <Str> = 120116002 = IP Static Route set #16, Active <0(No) |1(Yes)> = 0 120116003 = IP Static Route set #16, Destination IP address = 0.0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 390 150000023 = SUA Server #6 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000024 = SUA Server #6 Port Start = 0 150000025 = SUA Server #6 Port End = 0 150000026 = SUA Server #6 Local IP address = 0.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 391 T able 153 Menu 21.1 Filter Se t #1 / Menu 21 Filter set #1 FIN FN PVA INPUT 210100001 = Filter Set 1, Name <Str> = / Menu 21.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 392 210102009 = IP Filter Set 1,Rule 2 Src Subnet Mask = 0 210102010 = IP Filter Set 1,Rule 2 Src Port = 0 210102011 = IP Filter Set 1,Rule 2 Src P.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 393 210104005 = IP Filter Set 1,Rule 4 Dest Subnet Mask = 0 210104006 = IP Filter Set 1,Rule 4 Dest Port = 137 210104007 = IP Filter Set 1,Rule 4 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210104008 = IP Filter Set 1,Rule 4 Src IP address = 0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 394 / Menu 21.1.1.6 set #1, rule #6 FIN FN PVA INPUT 210106001 = IP Filter Set 1,Rule 6 Type <2(TCP/IP)> = 2 210106002 = IP Filter Set 1,Rule 6 Active <0(No)|1(Yes)> = 1 210106003 = IP Filter Set 1,Rule 6 Protocol = 17 210106004 = IP Filter Set 1,Rule 6 Dest IP address = 0.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 395 210201007 = IP Filter Set 2, Rule 1 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210201008 = IP Filter Set 2, Rule 1 Src IP address = 0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 396 210202014 = IP Filter Set 2, Rule 2 Act Not Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 397 210204007 = IP Filter Set 2, Rule 4 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210204008 = IP Filter Set 2, Rule 4 Src IP address = 0.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 398 210205014 = IP Filter Set 2, Rule 5 Act Not Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.
Appendix F I nternal SPTG EN P-660HN-F1 User’s Guide 399 Command Examples The following are example Internal SP TGEN screens associated with the ZyXEL Device’ s command interpreter commands. FIN FN PVA INPUT 230000000 = System Password = 1234 T able 155 Menu 23 System Menus (contin ued ) T able 156 Menu 24.
Appendix F Internal SPTGEN P-660HN-F1 User’s Guide 400.
P-660HN-F1 User’s Guide 401 A PPENDIX G Legal Information Copyright Copyright © 2010 by ZyXEL Communications Corporat ion. The contents of this publication may not be reprod uced in any part or as .
Appendix G Legal In formation P-660HN-F1 User’s Guide 402 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna.
Appendix G Legal Information P-660HN-F1 User’s Guide 403 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Vie wing Ce rtifi cations 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page.
Appendix G Legal In formation P-660HN-F1 User’s Guide 404.
Appendix H Customer Support P-660HN-F1 User’s Guide 405 A PPENDIX H Customer Support In the event of problems that cannot be solved by using this manual, you should contact yo ur vendor . If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the dev ice.
Appendix H Customer Support P-660HN-F1 User’s Guide 406 • Sales E-mail: sales@zyxel.cn • T elephone: +86-021-61 199055 • Fax: +86-021-52 069033 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .
Appendix H Customer Support P-660HN-F1 User’s Guide 407 • Re g u l a r M a i l: ZyXEL France, 1 rue des V ergers, Bat. 1 / C, 69760 Limonest, France Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909 -69 • Fax: +49-2405-6909-99 • W eb: www .
Appendix H Customer Support P-660HN-F1 User’s Guide 408 • Re g u l a r M a i l : ZyXEL Kaza khstan, 43 Dostyk A ve., Office 414, Dostyk Business Centre, 050010 Almaty , Republic of Kazakh stan Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.
Appendix H Customer Support P-660HN-F1 User’s Guide 409 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd.
Appendix H Customer Support P-660HN-F1 User’s Guide 410 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 5 5 22 • Fax: +90-212-220-2 526 • W eb: http:www .
Index P-660HN-F1 User’s Guide 41 1 Index Numerics 802.1 1 mo de 108 802.1Q/1P 217 activation 221 example 218 group settings 223 management VLAN 222 port settings 224 priority 217 , 225 PVC 218 PVID 224 tagg ing fram es 217 , 218 , 224 A activation 802.
Index P-660HN-F1 User’s Guide 412 C CA 188 , 192 , 366 algorithm 200 CRL 201 enrollment protocols 192 property 199 trusted 196 , 198 CBR 74 , 80 , 86 Certificate Authority See CA.
Index P-660HN-F1 User’s Guide 413 Denials of Service, see DoS DHCP 90 , 94 , 99 , 271 diagnostic 301 Differentiated Services, see DiffServ DiffServ 238 DiffServ Code Point, see DSCP directory server.
Index P-660HN-F1 User’s Guide 414 upgrading 291 version 46 forwarding ports 136 , 13 7 activation 140 configuration 138 example 138 rules 139 fragment ation thresh ol d 11 4 , 123 , 362 FTP 34 , 250.
Index P-660HN-F1 User’s Guide 415 e-mail 279 error messages 280 example 281 firewalls 161 generic filters 183 protocol filters 181 schedules 280 settings 278 M MAC address 96 , 11 5 filter 106 , 108.
Index P-660HN-F1 User’s Guide 416 port forwarding 136 , 137 activation 140 configuration 138 example 138 rules 139 PPPoA 72 , 77 , 83 PPPoE 72 , 77 , 82 passthrough 74 preamble 11 4 , 123 preamble m.
Index P-660HN-F1 User’s Guide 417 content filtering 174 firewalls 161 logs 280 wireless LAN 121 SCR 74 , 80 , 85 security network 168 wireless LAN 108 , 124 Service Set IDentifier , see SSID Session.
Index P-660HN-F1 User’s Guide 418 CRL 197 , 199 , 201 exporting 201 importing 197 MD5 fingerprint 201 PEM 201 SHA1 fingerprint 201 U UBR 74 , 80 , 86 unicast 70 Universal Plug an d Pl ay , see UPnP .
Index P-660HN-F1 User’s Guide 419 MBSSID 127 preamble 11 4 , 123 QoS 120 activation 120 RADIUS server 125 RTS/CTS threshold 11 4 , 123 scheduling 121 security 124 SSID 106 , 108 , 11 6 , 124 activat.
Index P-660HN-F1 User’s Guide 420.
Ein wichtiger Punkt beim Kauf des Geräts ZyXEL Communications P-660HN-F1 (oder sogar vor seinem Kauf) ist das durchlesen seiner Bedienungsanleitung. Dies sollten wir wegen ein paar einfacher Gründe machen:
Wenn Sie ZyXEL Communications P-660HN-F1 noch nicht gekauft haben, ist jetzt ein guter Moment, um sich mit den grundliegenden Daten des Produkts bekannt zu machen. Schauen Sie zuerst die ersten Seiten der Anleitung durch, die Sie oben finden. Dort finden Sie die wichtigsten technischen Daten für ZyXEL Communications P-660HN-F1 - auf diese Weise prüfen Sie, ob das Gerät Ihren Wünschen entspricht. Wenn Sie tiefer in die Benutzeranleitung von ZyXEL Communications P-660HN-F1 reinschauen, lernen Sie alle zugänglichen Produktfunktionen kennen, sowie erhalten Informationen über die Nutzung. Die Informationen, die Sie über ZyXEL Communications P-660HN-F1 erhalten, werden Ihnen bestimmt bei der Kaufentscheidung helfen.
Wenn Sie aber schon ZyXEL Communications P-660HN-F1 besitzen, und noch keine Gelegenheit dazu hatten, die Bedienungsanleitung zu lesen, sollten Sie es aufgrund der oben beschriebenen Gründe machen. Sie erfahren dann, ob Sie die zugänglichen Funktionen richtig genutzt haben, aber auch, ob Sie keine Fehler begangen haben, die den Nutzungszeitraum von ZyXEL Communications P-660HN-F1 verkürzen könnten.
Jedoch ist die eine der wichtigsten Rollen, die eine Bedienungsanleitung für den Nutzer spielt, die Hilfe bei der Lösung von Problemen mit ZyXEL Communications P-660HN-F1. Sie finden dort fast immer Troubleshooting, also die am häufigsten auftauchenden Störungen und Mängel bei ZyXEL Communications P-660HN-F1 gemeinsam mit Hinweisen bezüglich der Arten ihrer Lösung. Sogar wenn es Ihnen nicht gelingen sollte das Problem alleine zu bewältigen, die Anleitung zeigt Ihnen die weitere Vorgehensweise – den Kontakt zur Kundenberatung oder dem naheliegenden Service.
