ZyXEL P-661HW Manuel d'utilisateur

P-661H/HW Series802.11g Wireless ADSL2+ 4-port Security GatewayUser’s GuideVersion 3.40Edition 15/2006

P-661H/HW Series User’s Guide10 Customer Support

P-661H/HW Series User’s Guide100 Chapter 5 LAN SetupFigure 47 Any IP ExampleThe Any IP feature does not apply to a computer using either a dynamic I

P-661H/HW Series User’s GuideChapter 5 LAN Setup 1015.3 Configuring LAN IPClick LAN to open the IP screen. See Section 5.1 on page 95 for background

P-661H/HW Series User’s Guide102 Chapter 5 LAN SetupFigure 49 Advanced LAN SetupThe following table describes the labels in this screen. Table 31

P-661H/HW Series User’s GuideChapter 5 LAN Setup 1035.4 DHCP SetupUse this screen to configure the DNS server information that the ZyXEL Device sends

P-661H/HW Series User’s Guide104 Chapter 5 LAN SetupThe following table describes the labels in this screen.5.5 LAN Client ListThis table allows you

P-661H/HW Series User’s GuideChapter 5 LAN Setup 105Figure 51 LAN Client ListThe following table describes the labels in this screen.Table 33 LAN

P-661H/HW Series User’s Guide106 Chapter 5 LAN Setup5.6 LAN IP AliasIP alias allows you to partition a physical network into different logical networ

P-661H/HW Series User’s GuideChapter 5 LAN Setup 107The following table describes the labels in this screen.Table 34 LAN IP AliasLABEL DESCRIPTIONIP

P-661H/HW Series User’s Guide108 Chapter 5 LAN Setup

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 109CHAPTER 6Wireless LANThis chapter discusses how to configure the wireless network settings in y

P-661H/HW Series User’s GuideTable of Contents 11Table of ContentsCopyright ...

P-661H/HW Series User’s Guide110 Chapter 6 Wireless LAN• Every device in the same wireless network must use security compatible with the ZyXEL Device.

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 111For wireless networks, user names and passwords can be stored in a RADIUS server. This is a ser

P-661H/HW Series User’s Guide112 Chapter 6 Wireless LANWhen you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select an option (WPA compa

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 113Figure 54 Wireless LAN: General The following table describes the general wireless LAN labels

P-661H/HW Series User’s Guide114 Chapter 6 Wireless LAN6.4.1 No SecuritySelect No Security to allow wireless clients to communicate with the access p

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 115Figure 56 Wireless: Static WEP EncryptionThe following table describes the wireless LAN secur

P-661H/HW Series User’s Guide116 Chapter 6 Wireless LANFigure 57 Wireless: WPA-PSK/WPA2-PSKThe following table describes the wireless LAN security l

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 1176.4.4 WPA/WPA2In order to configure and enable WPA/WPA2; click the Wireless LAN link under Net

P-661H/HW Series User’s Guide118 Chapter 6 Wireless LANThe following table describes the wireless LAN security labels in this screen.Table 40 Wirele

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 1196.4.5 Wireless LAN Advanced SetupTo configure advanced wireless settings, click the Advanced S

P-661H/HW Series User’s Guide12 Table of Contents2.4.3 Status: Any IP Table ...

P-661H/HW Series User’s Guide120 Chapter 6 Wireless LAN6.5 OTIST In a wireless network, the wireless clients must have the same SSID and security set

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 121Note: The AP and wireless client(s) MUST use the same Setup key.6.5.1.1 APYou can enable OTIST

P-661H/HW Series User’s Guide122 Chapter 6 Wireless LANThe following table describes the labels in this screen.6.5.1.2 Wireless ClientOn your wireles

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 1236.5.2 Starting OTISTNote: You must click Start in the AP OTIST web configurator screen and in

P-661H/HW Series User’s Guide124 Chapter 6 Wireless LANFigure 66 Start OTIST?2 If an OTIST-enabled wireless client loses its wireless connection for

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 125Figure 67 MAC Address FilterThe following table describes the labels in this menu.Table 43

P-661H/HW Series User’s Guide126 Chapter 6 Wireless LAN6.7 WMM QoSWMM (Wi-Fi MultiMedia) QoS (Quality of Service) allows you to prioritize wireless t

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 1276.7.3 ServicesThe commonly used services and port numbers are shown in the following table. Pl

P-661H/HW Series User’s Guide128 Chapter 6 Wireless LAN6.8 QoS ScreenThe QoS screen by default allows you to automatically give a service a priority

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 1296.8.1 ToS (Type of Service) and WMM QoSToS defines the DS (Differentiated Service) field in th

P-661H/HW Series User’s GuideTable of Contents 134.3 Traffic Shaping ...

P-661H/HW Series User’s Guide130 Chapter 6 Wireless LAN6.8.2 Application Priority ConfigurationTo edit a WMM QoS application entry, click the edit ic

P-661H/HW Series User’s GuideChapter 6 Wireless LAN 131Service The following is a description of the applications you can prioritize with WMM QoS. Sel

P-661H/HW Series User’s Guide132 Chapter 6 Wireless LAN

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 133CHAPTER 7Network Address Translation(NAT) ScreensThis chapter disc

P-661H/HW Series User’s Guide134 Chapter 7 Network Address Translation (NAT) Screens7.1.2 What NAT DoesIn the simplest form, NAT changes the source I

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 1357.1.4 NAT ApplicationThe following figure illustrates a possible

P-661H/HW Series User’s Guide136 Chapter 7 Network Address Translation (NAT) ScreensPort numbers do NOT change for One-to-One and Many-to-Many No Over

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 137Figure 72 NAT GeneralThe following table describes the labels in

P-661H/HW Series User’s Guide138 Chapter 7 Network Address Translation (NAT) Screens7.4.1 Default Server IP AddressIn addition to the servers for spe

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 139Figure 73 Multiple Servers Behind NAT Example7.5 Configuring Po

P-661H/HW Series User’s Guide14 Table of Contents6.2.5 One-Touch Intelligent Security Technology (OTIST) ... 1126.3 Wirele

P-661H/HW Series User’s Guide140 Chapter 7 Network Address Translation (NAT) ScreensThe following table describes the fields in this screen. 7.5.1 Po

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 141The following table describes the fields in this screen. 7.6 Addr

P-661H/HW Series User’s Guide142 Chapter 7 Network Address Translation (NAT) ScreensFigure 76 Address Mapping RulesThe following table describes the

P-661H/HW Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 1437.6.1 Address Mapping Rule Edit To edit an address mapping rule,

P-661H/HW Series User’s Guide144 Chapter 7 Network Address Translation (NAT) ScreensBack Click Back to return to the previous screen.Apply Click Apply

P-661H/HW Series User’s GuideChapter 8 Firewalls 145CHAPTER 8FirewallsThis chapter gives some background information on firewalls and introduces the Z

P-661H/HW Series User’s Guide146 Chapter 8 Firewalls8.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as proxie

P-661H/HW Series User’s GuideChapter 8 Firewalls 147• The LAN (Local Area Network) port attaches to a network of computers, which needs security from

P-661H/HW Series User’s Guide148 Chapter 8 Firewalls8.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in a TCP

P-661H/HW Series User’s GuideChapter 8 Firewalls 149Under normal circumstances, the application that initiates a session sends a SYN (synchronize) pac

P-661H/HW Series User’s GuideTable of Contents 15Chapter 8Firewalls...

P-661H/HW Series User’s Guide150 Chapter 8 FirewallsFigure 81 Smurf Attack8.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that works

P-661H/HW Series User’s GuideChapter 8 Firewalls 1518.4.2.3 TracerouteTraceroute is a utility used to determine the path a packet takes between two e

P-661H/HW Series User’s Guide152 Chapter 8 FirewallsThe previous figure shows the ZyXEL Device’s default firewall rules in action as well as demonstra

P-661H/HW Series User’s GuideChapter 8 Firewalls 153• Allow certain types of traffic from the Internet to specific hosts on the LAN.• Allow access to

P-661H/HW Series User’s Guide154 Chapter 8 FirewallsA similar situation exists for ICMP, except that the ZyXEL Device is even more restrictive. Specif

P-661H/HW Series User’s GuideChapter 8 Firewalls 155• Encourage your company or organization to develop a comprehensive security plan. Good network ad

P-661H/HW Series User’s Guide156 Chapter 8 Firewalls8.7.1.1 When To Use Filtering• To block/allow LAN packets by their MAC addresses.• To block/allow

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 157CHAPTER 9Firewall ConfigurationThis chapter shows you how to enable and configure the

P-661H/HW Series User’s Guide158 Chapter 9 Firewall ConfigurationNote: If you configure firewall rules without a good understanding of how they work,

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 1594 Does a rule that allows Internet users access to resources on the LAN create a secu

P-661H/HW Series User’s Guide16 Table of Contents9.4.2 Alerts ...

P-661H/HW Series User’s Guide160 Chapter 9 Firewall Configuration9.4.1 LAN to WAN RulesThe default rule for LAN to WAN traffic is that all users on t

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 161As a result, the ZyXEL Device resets the connection, as the connection has not been a

P-661H/HW Series User’s Guide162 Chapter 9 Firewall Configuration9.6 General Firewall Policy Click Security > Firewall to display the following

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 1639.7 Firewall Rules Summary Note: The ordering of your rules is very important as rul

P-661H/HW Series User’s Guide164 Chapter 9 Firewall ConfigurationThe following table describes the labels in this screen. 9.7.1 Configuring Firewall

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 165In the Rules screen, select an index number and click Add or click a rule’s Edit icon

P-661H/HW Series User’s Guide166 Chapter 9 Firewall ConfigurationThe following table describes the labels in this screen.Table 62 Firewall: Edit Rul

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 1679.7.2 Customized Services Configure customized services and port numbers not predefi

P-661H/HW Series User’s Guide168 Chapter 9 Firewall Configuration9.7.3 Configuring A Customized Service Click a rule number in the Firewall Customize

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 169Figure 91 Firewall Example: Rules3 In the Rules screen, select the index number aft

P-661H/HW Series User’s GuideTable of Contents 1712.1.3.1 Encryption ...

P-661H/HW Series User’s Guide170 Chapter 9 Firewall ConfigurationFigure 93 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> a

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 171Figure 94 Firewall Example: Edit Rule: Select Customized ServicesOn completing the

P-661H/HW Series User’s Guide172 Chapter 9 Firewall ConfigurationFigure 95 Firewall Example: Rules: MyService 9.9 Predefined ServicesThe Available

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 173H.323(TCP:1720) Net Meeting uses this protocol.HTTP(TCP:80) Hyper Text Transfer Prot

P-661H/HW Series User’s Guide174 Chapter 9 Firewall Configuration9.10 Anti-Probing If an outside user attempts to probe an unsupported port on your Z

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 175The following table describes the labels in this screen.9.11 DoS Thresholds For DoS

P-661H/HW Series User’s Guide176 Chapter 9 Firewall ConfigurationIf your network is slower than average for any of these factors (especially if you ha

P-661H/HW Series User’s GuideChapter 9 Firewall Configuration 1779.11.3 Configuring Firewall Thresholds The ZyXEL Device also sends alerts whenever T

P-661H/HW Series User’s Guide178 Chapter 9 Firewall ConfigurationMaximum Incomplete LowThis is the number of existing half-open sessions that causes t

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 179CHAPTER 10Trend Micro Security ServicesThis chapter contains information abou

P-661H/HW Series User’s Guide18 Table of Contents13.19 VPN and Remote Management ...2

P-661H/HW Series User’s Guide180 Chapter 10 Trend Micro Security ServicesFigure 99 Download ActiveX to View TMSS Web Page2 In the TMSS web page, cli

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 181Figure 102 TMSS 3 Steps5 Fill in the registration form and submit it.Figure

P-661H/HW Series User’s Guide182 Chapter 10 Trend Micro Security ServicesFigure 104 Example TMSS Activated Service Summary ScreenYou need a Parental

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 183Figure 106 General TMSS SettingsThe following table describes the labels in

P-661H/HW Series User’s Guide184 Chapter 10 Trend Micro Security Services10.2.2 TMSS Exception ListUse this screen to exempt computers from TMSS moni

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 18510.3 TMSS Virus ProtectionUse this screen to look at the status of computers

P-661H/HW Series User’s Guide186 Chapter 10 Trend Micro Security Services10.4 Parental ControlsUse this screen to schedule and block web pages based

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 187Figure 110 Parental ControlsThe following table describes the labels in thi

P-661H/HW Series User’s Guide188 Chapter 10 Trend Micro Security Services10.4.1 Parental Controls StatisticsThis screen displays a record of attempte

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 189Figure 111 Parental Controls StatisticsThe following table describes the la

P-661H/HW Series User’s GuideTable of Contents 1917.3 Telnet ...

P-661H/HW Series User’s Guide190 Chapter 10 Trend Micro Security ServicesFigure 112 Internet Options Security3 Scroll down to ActiveX controls and p

P-661H/HW Series User’s GuideChapter 10 Trend Micro Security Services 191Figure 113 Security Setting ActiveX Controls

P-661H/HW Series User’s Guide192 Chapter 10 Trend Micro Security Services

P-661H/HW Series User’s GuideChapter 11 Content Filtering 193CHAPTER 11Content FilteringThis chapter covers how to configure content filtering.11.1 C

P-661H/HW Series User’s Guide194 Chapter 11 Content FilteringThe following table describes the labels in this screen. 11.3 Configuring the Schedule T

P-661H/HW Series User’s GuideChapter 11 Content Filtering 195The following table describes the labels in this screen. 11.4 Configuring Trusted Compu

P-661H/HW Series User’s Guide196 Chapter 11 Content Filtering

P-661H/HW Series User’s GuideChapter 12 Introduction to IPSec 197CHAPTER 12Introduction to IPSecThis chapter introduces the basics of IPSec VPNs.12.1

P-661H/HW Series User’s Guide198 Chapter 12 Introduction to IPSecFigure 117 Encryption and Decryption12.1.3.2 Data ConfidentialityThe IPSec sender

P-661H/HW Series User’s GuideChapter 12 Introduction to IPSec 19912.2 IPSec ArchitectureThe overall IPSec architecture is shown as follows.Figure 118

P-661H/HW Series User’s Guide20 Table of ContentsChapter 22Diagnostic...

P-661H/HW Series User’s Guide200 Chapter 12 Introduction to IPSecFigure 119 Transport and Tunnel Mode IPSec Encapsulation12.3.1 Transport ModeTrans

P-661H/HW Series User’s GuideChapter 12 Introduction to IPSec 201NAT is incompatible with the AH protocol in both Transport and Tunnel mode. An IPSec

P-661H/HW Series User’s Guide202 Chapter 12 Introduction to IPSec

P-661H/HW Series User’s GuideChapter 13 VPN Screens 203CHAPTER 13VPN ScreensThis chapter introduces the VPN screens. See the Logs chapter for informat

P-661H/HW Series User’s Guide204 Chapter 13 VPN Screens13.3 My IP AddressMy IP Address is the WAN IP address of the ZyXEL Device. The ZyXEL Device ha

P-661H/HW Series User’s GuideChapter 13 VPN Screens 20513.4 Secure Gateway AddressSecure Gateway Address is the WAN IP address or domain name of the

P-661H/HW Series User’s Guide206 Chapter 13 VPN ScreensFigure 121 VPN SetupThe following table describes the fields in this screen.Table 78 VPN Se

P-661H/HW Series User’s GuideChapter 13 VPN Screens 20713.6 Keep AliveWhen you initiate an IPSec tunnel with keep alive enabled, the ZyXEL Device aut

P-661H/HW Series User’s Guide208 Chapter 13 VPN ScreensFigure 122 NAT Router Between IPSec RoutersNormally you cannot set up an IKE SA with a NAT ro

P-661H/HW Series User’s GuideChapter 13 VPN Screens 209The following figure depicts an example where three VPN tunnels are created from ZyXEL Device A

P-661H/HW Series User’s GuideTable of Contents 21Command Interpreter...

P-661H/HW Series User’s Guide210 Chapter 13 VPN ScreensThe type of ID can be a domain name, an IP address or an e-mail address. The content is the IP

P-661H/HW Series User’s GuideChapter 13 VPN Screens 211The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL Device B’

P-661H/HW Series User’s Guide212 Chapter 13 VPN ScreensFigure 124 Edit VPN Policies The following table describes the fields in this screen.Table 84

P-661H/HW Series User’s GuideChapter 13 VPN Screens 213NAT Traversal This function is available if the VPN protocol is ESP.Select this check box if yo

P-661H/HW Series User’s Guide214 Chapter 13 VPN ScreensRemote Remote IP addresses must be static and correspond to the remote IPSec router's conf

P-661H/HW Series User’s GuideChapter 13 VPN Screens 215Peer ID Type Select IP to identify the remote IPSec router by its IP address.Select DNS to iden

P-661H/HW Series User’s Guide216 Chapter 13 VPN Screens13.12 IKE PhasesThere are two phases to every IKE (Internet Key Exchange) negotiation – phase

P-661H/HW Series User’s GuideChapter 13 VPN Screens 217• Choose an authentication algorithm.• Choose a Diffie-Hellman public-key cryptography key grou

P-661H/HW Series User’s Guide218 Chapter 13 VPN Screens13.12.2 Diffie-Hellman (DH) Key GroupsDiffie-Hellman (DH) is a public-key cryptography protoco

P-661H/HW Series User’s GuideChapter 13 VPN Screens 219Figure 126 Advanced VPN PoliciesThe following table describes the fields in this screen.Table

P-661H/HW Series User’s Guide22 Table of ContentsAppendix LPop-up Windows, JavaScripts and Java Permissions ... 369I

P-661H/HW Series User’s Guide220 Chapter 13 VPN ScreensNegotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting

P-661H/HW Series User’s GuideChapter 13 VPN Screens 22113.14 Manual Key SetupManual key management is useful if you have problems with IKE key manage

P-661H/HW Series User’s Guide222 Chapter 13 VPN ScreensFigure 127 VPN: Manual KeyThe following table describes the fields in this screen.Table 86

P-661H/HW Series User’s GuideChapter 13 VPN Screens 223DNS Server (for IPSec VPN)If there is a private DNS server that services the VPN, type its IP a

P-661H/HW Series User’s Guide224 Chapter 13 VPN Screens13.16 Viewing SA MonitorClick Security, VPN and Monitor to open the SA Monitor screen as shown

P-661H/HW Series User’s GuideChapter 13 VPN Screens 225When there is outbound traffic but no inbound traffic, the SA times out automatically after two

P-661H/HW Series User’s Guide226 Chapter 13 VPN ScreensFigure 129 VPN: Global SettingThe following table describes the fields in this screen.13.18

P-661H/HW Series User’s GuideChapter 13 VPN Screens 227Figure 130 Telecommuters Sharing One VPN Rule Example13.18.2 Telecommuters Using Unique VPN

P-661H/HW Series User’s Guide228 Chapter 13 VPN ScreensFigure 131 Telecommuters Using Unique VPN Rules ExampleTable 90 Telecommuters Using Unique

P-661H/HW Series User’s GuideChapter 13 VPN Screens 22913.19 VPN and Remote ManagementIf a VPN tunnel uses Telnet, FTP, WWW, then you should configur

P-661H/HW Series User’s GuideList of Figures 23List of FiguresFigure 1 Protected Internet Access Applications ...

P-661H/HW Series User’s Guide230 Chapter 13 VPN Screens

P-661H/HW Series User’s GuideChapter 14 Static Route 231CHAPTER 14Static RouteThis chapter shows you how to configure static routes for your ZyXEL Dev

P-661H/HW Series User’s Guide232 Chapter 14 Static RouteFigure 133 Static RouteThe following table describes the labels in this screen. 14.2.1 Stat

P-661H/HW Series User’s GuideChapter 14 Static Route 233Figure 134 Static Route EditThe following table describes the labels in this screen. Table 9

P-661H/HW Series User’s Guide234 Chapter 14 Static Route

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 235CHAPTER 15Bandwidth ManagementThis chapter contains information about configuring band

P-661H/HW Series User’s Guide236 Chapter 15 Bandwidth ManagementFigure 135 Subnet-based Bandwidth Management Example15.4 Application and Subnet-bas

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 23715.5.2 Fairness-based SchedulerThe ZyXEL Device divides bandwidth equally among bandw

P-661H/HW Series User’s Guide238 Chapter 15 Bandwidth Management15.6.2 Maximize Bandwidth Usage ExampleHere is an example of a ZyXEL Device that has

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 239• Research requires more bandwidth but only gets its budgeted 2048 kbps because all of

P-661H/HW Series User’s Guide24 List of FiguresFigure 39 Advanced Internet Connection ...

P-661H/HW Series User’s Guide240 Chapter 15 Bandwidth Management15.6.4 Bandwidth Management PrioritiesThe following table describes the priorities th

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 24115.8 Bandwidth Management Rule Setup You must use the Bandwidth Management Summary

P-661H/HW Series User’s Guide242 Chapter 15 Bandwidth ManagementFigure 137 Bandwidth Management: Rule SetupThe following table describes the labels

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 24315.8.1 Rule ConfigurationClick the Edit icon or select User define in the Service fie

P-661H/HW Series User’s Guide244 Chapter 15 Bandwidth ManagementUse All Managed BandwidthSelect this option to allow a rule to borrow unused bandwidth

P-661H/HW Series User’s GuideChapter 15 Bandwidth Management 24515.9 Bandwidth Monitor To view the ZyXEL Device’s bandwidth usage and allotments, cli

P-661H/HW Series User’s Guide246 Chapter 15 Bandwidth Management

P-661H/HW Series User’s GuideChapter 16 Dynamic DNS Setup 247CHAPTER 16Dynamic DNS SetupThis chapter discusses how to configure your ZyXEL Device to u

P-661H/HW Series User’s Guide248 Chapter 16 Dynamic DNS SetupFigure 140 Dynamic DNSThe following table describes the fields in this screen. Table 10

P-661H/HW Series User’s GuideChapter 16 Dynamic DNS Setup 249Dynamic DNS server auto detect IP AddressSelect this option only when there are one or mo

P-661H/HW Series User’s GuideList of Figures 25Figure 82 Stateful Inspection ...

P-661H/HW Series User’s Guide250 Chapter 16 Dynamic DNS Setup

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 251CHAPTER 17Remote ManagementConfigurationThis chapter provides information o

P-661H/HW Series User’s Guide252 Chapter 17 Remote Management Configuration• The IP address in the Secured Client IP field does not match the client I

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 253The following table describes the labels in this screen.17.3 TelnetYou can

P-661H/HW Series User’s Guide254 Chapter 17 Remote Management ConfigurationFigure 143 Remote Management: TelnetThe following table describes the lab

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 255Figure 144 Remote Management: FTPThe following table describes the labels

P-661H/HW Series User’s Guide256 Chapter 17 Remote Management ConfigurationFigure 145 SNMP Management ModelAn SNMP managed network consists of two m

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 25717.6.2 SNMP Traps The ZyXEL Device will send traps to the SNMP manager whe

P-661H/HW Series User’s Guide258 Chapter 17 Remote Management ConfigurationFigure 146 Remote Management: SNMPThe following table describes the label

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 25917.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to

P-661H/HW Series User’s Guide26 List of FiguresFigure 125 Two Phases to Set Up the IPSec SA ...

P-661H/HW Series User’s Guide260 Chapter 17 Remote Management ConfigurationIf an outside user attempts to probe an unsupported port on your ZyXEL Devi

P-661H/HW Series User’s GuideChapter 17 Remote Management Configuration 26117.9 TR-069 (P-661H Only)TR-069 is a protocol that defines how your ZyXEL

P-661H/HW Series User’s Guide262 Chapter 17 Remote Management ConfigurationperiodicEnable [0:Disable/1:Enable]Whether or not the device must periodica

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 263CHAPTER 18Universal Plug-and-Play (UPnP)This chapter introduces the UPnP fea

P-661H/HW Series User’s Guide264 Chapter 18 Universal Plug-and-Play (UPnP)18.1.3 Cautions with UPnPThe automated nature of NAT traversal applications

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 265The following table describes the fields in this screen.18.3 Installing UPn

P-661H/HW Series User’s Guide266 Chapter 18 Universal Plug-and-Play (UPnP)Figure 151 Add/Remove Programs: Windows Setup: Communication 3 In the Comm

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 267Installing UPnP in Windows XPFollow the steps below to install the UPnP in W

P-661H/HW Series User’s Guide268 Chapter 18 Universal Plug-and-Play (UPnP)5 In the Networking Services window, select the Universal Plug and Play chec

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 269Figure 156 Network Connections3 In the Internet Connection Properties wind

P-661H/HW Series User’s GuideList of Figures 27Figure 168 Log Settings ...

P-661H/HW Series User’s Guide270 Chapter 18 Universal Plug-and-Play (UPnP)Figure 157 Internet Connection Properties 4 You may edit or delete the por

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 271Figure 158 Internet Connection Properties: Advanced SettingsFigure 159 I

P-661H/HW Series User’s Guide272 Chapter 18 Universal Plug-and-Play (UPnP)Figure 160 System Tray Icon7 Double-click on the icon to display your curr

P-661H/HW Series User’s GuideChapter 18 Universal Plug-and-Play (UPnP) 273Figure 162 Network Connections4 An icon with the description for each UPnP

P-661H/HW Series User’s Guide274 Chapter 18 Universal Plug-and-Play (UPnP)Figure 163 Network Connections: My Network Places6 Right-click on the icon

P-661H/HW Series User’s GuideChapter 19 System 275CHAPTER 19SystemUse this screen to configure the ZyXEL Device’s time and date settings.19.1 General

P-661H/HW Series User’s Guide276 Chapter 19 SystemFigure 165 System General SetupThe following table describes the labels in this screen. Table 114

P-661H/HW Series User’s GuideChapter 19 System 27719.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System > T

P-661H/HW Series User’s Guide278 Chapter 19 SystemThe following table describes the fields in this screen. Table 115 System Time SettingLABEL DESCRI

P-661H/HW Series User’s GuideChapter 19 System 279Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylig

P-661H/HW Series User’s Guide28 List of FiguresFigure 211 WPA(2)-PSK Authentication ...

P-661H/HW Series User’s Guide280 Chapter 19 System

P-661H/HW Series User’s GuideChapter 20 Logs 281CHAPTER 20LogsThis chapter contains information about configuring general log settings and viewing the

P-661H/HW Series User’s Guide282 Chapter 20 LogsThe following table describes the fields in this screen. 20.3 Configuring Log Settings Use the Log S

P-661H/HW Series User’s GuideChapter 20 Logs 283Figure 168 Log SettingsThe following table describes the fields in this screen.Table 117 Log Setti

P-661H/HW Series User’s Guide284 Chapter 20 LogsEnable SMTP AuthenticationSMTP (Simple Mail Transfer Protocol) is the message-exchange standard for th

P-661H/HW Series User’s GuideChapter 21 Tools 285CHAPTER 21ToolsThis chapter covers uploading new firmware, managing configuration and restarting your

P-661H/HW Series User’s Guide286 Chapter 21 ToolsNote: Do NOT turn off the ZyXEL Device while firmware upload is in progress!After you see the Firmwar

P-661H/HW Series User’s GuideChapter 21 Tools 287Figure 172 Error Message21.2 Configuration Use this screen to back up or restore the configuration

P-661H/HW Series User’s Guide288 Chapter 21 ToolsNote: Do not turn off the device while configuration file upload is in progress.When the ZyXEL Device

P-661H/HW Series User’s GuideChapter 21 Tools 289Figure 175 Network Temporarily DisconnectedIf the ZyXEL Device’s IP address is different in the con

P-661H/HW Series User’s GuideList of Tables 29List of TablesTable 1 ADSL Standards ...

P-661H/HW Series User’s Guide290 Chapter 21 Tools

P-661H/HW Series User’s GuideChapter 22 Diagnostic 291CHAPTER 22DiagnosticThese read-only screens display information to help you identify problems wi

P-661H/HW Series User’s Guide292 Chapter 22 Diagnostic22.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen s

P-661H/HW Series User’s GuideChapter 23 Troubleshooting 293CHAPTER 23TroubleshootingThis chapter covers potential problems and the corresponding remed

P-661H/HW Series User’s Guide294 Chapter 23 Troubleshooting23.3 Problems with the WANTable 124 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONThe

P-661H/HW Series User’s GuideChapter 23 Troubleshooting 29523.4 Problems Accessing the ZyXEL DeviceTable 125 Troubleshooting Accessing the ZyXEL De

P-661H/HW Series User’s Guide296 Chapter 23 Troubleshooting

P-661H/HW Series User’s GuideAppendix A 297Appendix AProduct SpecificationsSee also the Introduction chapter for a general overview of the key feature

P-661H/HW Series User’s Guide298 Appendix ATable 127 FirmwareADSL Standards Multi-Mode standard (ANSI T1.413,Issue 2; G.dmt(G.992.1); G.lite(G992.2)

P-661H/HW Series User’s GuideAppendix A 299Firewall Stateful Packet Inspection.Prevent Denial of Service attacks such as Ping of Death, SYN Flood, LAN

P-661H/HW Series User’s GuideCopyright 3CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be repr

P-661H/HW Series User’s Guide30 List of TablesTable 39 Wireless: WPA-PSK/WPA2-PSK ...

P-661H/HW Series User’s Guide300 Appendix A

P-661H/HW Series User’s GuideAppendix B 301Appendix BAbout ADSLIntroduction to DSLDSL (Digital Subscriber Line) technology enhances the data capacity

P-661H/HW Series User’s Guide302 Appendix Bcable modems, transmission speeds drop significantly as more users go on-line because the line is shared. 3

P-661H/HW Series User’s GuideAppendix C 303APPENDIX CWall-mounting InstructionsDo the following to hang your ZyXEL Device on a wall.Note: See the prod

P-661H/HW Series User’s Guide304 Appendix C

P-661H/HW Series User’s Guide305 Appendix DSetting up Your Computer’s IP AddressAll computers must have a 10M or 100M Ethernet adapter card and TCP/

P-661H/HW Series User’s Guide 306Figure 181 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe Network window Configuration tab displa

P-661H/HW Series User’s Guide307 3 Select Microsoft from the list of manufacturers.4 Select Client for Microsoft Networks from the list of network c

P-661H/HW Series User’s Guide 308Figure 183 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the Gateway tab.• If you do not know your

P-661H/HW Series User’s Guide309 Figure 184 Windows XP: Start Menu2 In the Control Panel, double-click Network Connections (Network and Dial-up Co

P-661H/HW Series User’s GuideList of Tables 31Table 82 Matching ID Type and Content Configuration Example ... 210

P-661H/HW Series User’s Guide 310Figure 186 Windows XP: Control Panel: Network Connections: Properties4 Select Internet Protocol (TCP/IP) (under the

P-661H/HW Series User’s Guide311 • Click Advanced.Figure 188 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not know your gateway&a

P-661H/HW Series User’s Guide 312Figure 189 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol TCP/IP Properties window (the General t

P-661H/HW Series User’s Guide313 Figure 190 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK to close the Internet Protocol (TCP/IP) Pr

P-661H/HW Series User’s Guide 314Figure 191 Macintosh OS X: Apple Menu2 Click Network in the icon bar. • Select Automatic from the Location list.•

P-661H/HW Series User’s Guide315 6 Restart your computer (if prompted).Verifying SettingsCheck your TCP/IP properties in the Network window.Linux Th

P-661H/HW Series User’s Guide 316Figure 194 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address, click Automatically obtai

P-661H/HW Series User’s Guide317 Figure 196 Red Hat 9.0: KDE: Network Configuration: Activate 7 After the network card restart process is complete

P-661H/HW Series User’s Guide 318Figure 198 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 2 If you know your DNS server IP address(es),

P-661H/HW Series User’s GuideAppendix E 319Appendix EIP SubnettingIP Addressing Routers “route” based on the network number. The router that delivers

P-661H/HW Series User’s Guide32 List of TablesTable 125 Troubleshooting Accessing the ZyXEL Device ...

P-661H/HW Series User’s Guide320 Appendix ESince the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address

P-661H/HW Series User’s GuideAppendix E 321Since the mask is always a continuous number of ones beginning from the left, followed by a continuous numb

P-661H/HW Series User’s Guide322 Appendix ENote: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form

P-661H/HW Series User’s GuideAppendix E 323Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” addres

P-661H/HW Series User’s Guide324 Appendix EExample Eight SubnetsSimilarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110). The fo

P-661H/HW Series User’s GuideAppendix E 325Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also de

P-661H/HW Series User’s Guide326 Appendix E

P-661H/HW Series User’s GuideAppendix F 327Appendix FCommand InterpreterThe following describes how to use the command interpreter. You can use telnet

P-661H/HW Series User’s Guide328 Appendix F

P-661H/HW Series User’s GuideAppendix G 329Appendix GFirewall CommandsThe following describes the firewall commands. Table 142 Firewall CommandsFUNC

P-661H/HW Series User’s GuidePreface 33PrefaceCongratulations on your purchase of the ZyXEL Device series ADSL 2+ gateway. The ZyXEL Device has a 4-po

P-661H/HW Series User’s Guide330 Appendix Gconfig edit firewall e-mail return-addr <e-mail address>This command sets the source e-mail address o

P-661H/HW Series User’s GuideAppendix G 331config edit firewall attack minute-low <0-255>This command sets the threshold of half-open sessions w

P-661H/HW Series User’s Guide332 Appendix GConfig edit firewall set <set #> log <yes | no>This command sets whether or not the ZyXEL Devic

P-661H/HW Series User’s GuideAppendix G 333config edit firewall set <set #> rule <rule #> destaddr-subnet <ip address> <subnet ma

P-661H/HW Series User’s Guide334 Appendix G

P-661H/HW Series User’s GuideAppendix H 335Appendix HNetBIOS Filter CommandsThe following describes the NetBIOS packet filter commands.IntroductionNet

P-661H/HW Series User’s Guide336 Appendix HThe filter types and their default settings are as follows.NetBIOS Filter ConfigurationSyntax:sys filter ne

P-661H/HW Series User’s GuideAppendix I 337Appendix IPPPoEPPPoE in ActionAn ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 251

P-661H/HW Series User’s Guide338 Appendix IFigure 202 Single-Computer per Router Hardware ConfigurationHow PPPoE WorksThe PPPoE driver makes the Eth

P-661H/HW Series User’s GuideAppendix J 339Appendix JLog DescriptionsThis appendix provides descriptions of example log messages. Table 144 System M

P-661H/HW Series User’s Guide34 PrefaceUser Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for impr

P-661H/HW Series User’s Guide340 Appendix J Successful HTTPS login Someone has logged on to the router's web configurator interface using HTTPS p

P-661H/HW Series User’s GuideAppendix J 341 Table 147 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTThe router sent a TC

P-661H/HW Series User’s Guide342 Appendix J Table 149 ICMP LogsLOG MESSAGE DESCRIPTIONFirewall default policy: ICMP <Packet Direction>, <

P-661H/HW Series User’s GuideAppendix J 343 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.ppp:IPCP Closing The PPP conn

P-661H/HW Series User’s Guide344 Appendix J Connecting to content filter server failThe connection to the external content filtering server failed.Lic

P-661H/HW Series User’s GuideAppendix J 345 Table 155 IPSec LogsLOG MESSAGE DESCRIPTIONDiscard REPLAY packet The router received and discarded a pa

P-661H/HW Series User’s Guide346 Appendix JCannot resolve Secure Gateway Addr for rule <%d>The router couldn’t resolve the IP address from the d

P-661H/HW Series User’s GuideAppendix J 347XAUTH fail! Username: <Username>The router was not able to use extended authentication to authenticat

P-661H/HW Series User’s Guide348 Appendix J Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the router and the peer.Rul

P-661H/HW Series User’s GuideAppendix J 349 Rcvd data <size> too large! Max size allowed: <max size>The router received directory data tha

P-661H/HW Series User’s GuideChapter 1 Getting To Know Your ZyXEL Device 35CHAPTER 1Getting To Know Your ZyXELDeviceThis chapter describes the key fea

P-661H/HW Series User’s Guide350 Appendix J 26 Database method failed.27 Path was not verified.28 Maximum path length reached.Table 159 802.1X LogsL

P-661H/HW Series User’s GuideAppendix J 351 Table 160 ACL Setting NotesPACKET DIRECTION DIRECTION DESCRIPTION(L to W) LAN to WAN ACL set for packets

P-661H/HW Series User’s Guide352 Appendix J The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for

P-661H/HW Series User’s GuideAppendix J 353Log CommandsGo to the command interpreter interface. Configuring What You Want the ZyXEL Device to Log1 Use

P-661H/HW Series User’s Guide354 Appendix J• Use the sys logs clear command to erase all of the ZyXEL Device’s logs.Log Command ExampleThis example sh

P-661H/HW Series User’s GuideAppendix K 355APPENDIX KWireless LANs (wireless devices only)Wireless LAN TopologiesThis section discusses ad-hoc and inf

P-661H/HW Series User’s Guide356 Appendix KFigure 207 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of overlapping BSSs, ea

P-661H/HW Series User’s GuideAppendix K 357Figure 208 Infrastructure WLANChannelA channel is the radio frequency(ies) used by IEEE 802.11a/b/g wirel

P-661H/HW Series User’s Guide358 Appendix KFigure 209 RTS/CTSWhen station A sends data to the AP, it might not know that the station B is already u

P-661H/HW Series User’s GuideAppendix K 359A large Fragmentation Threshold is recommended for networks not prone to interference while you should set

P-661H/HW Series User’s Guide36 Chapter 1 Getting To Know Your ZyXEL Device1.2 FeaturesHigh Speed Internet AccessYour ZyXEL Device ADSL/ADSL2/ADSL2+

P-661H/HW Series User’s Guide360 Appendix KWireless Security OverviewWireless security is vital to your network to protect wireless communication betw

P-661H/HW Series User’s GuideAppendix K 361RADIUSRADIUS is based on a client-server model that supports authentication, authorization and accounting.

P-661H/HW Series User’s Guide362 Appendix KIn order to ensure network security, the access point and the RADIUS server use a shared secret key, which

P-661H/HW Series User’s GuideAppendix K 363PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure

P-661H/HW Series User’s Guide364 Appendix KWPA and WPA2Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard. WPA2 (IEEE 802.11i) is a

P-661H/HW Series User’s GuideAppendix K 365By generating unique data encryption keys for every data packet and by creating an integrity checking mecha

P-661H/HW Series User’s Guide366 Appendix K3 The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy

P-661H/HW Series User’s GuideAppendix K 367Figure 211 WPA(2)-PSK AuthenticationSecurity Parameters SummaryRefer to this table to see what other secu

P-661H/HW Series User’s Guide368 Appendix K

P-661H/HW Series User’s Guide369APPENDIX LPop-up Windows, JavaScripts and JavaPermissionsIn order to use the web configurator you need to allow:• Web

P-661H/HW Series User’s GuideChapter 1 Getting To Know Your ZyXEL Device 37Media Bandwidth ManagementZyXEL’s Media Bandwidth Management allows you to

P-661H/HW Series User’s Guide370Figure 213 Internet Options3 Click Apply to save this setting.Enable pop-up Blockers with ExceptionsAlternatively, i

P-661H/HW Series User’s Guide371Figure 214 Internet Options3 Type the IP address of your device (the web page that you do not want to have blocked)

P-661H/HW Series User’s Guide372Figure 215 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting.

P-661H/HW Series User’s Guide373Figure 216 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting

P-661H/HW Series User’s Guide374Figure 217 Security Settings - Java ScriptingJava Permissions1 From Internet Explorer, click Too ls, Internet Option

P-661H/HW Series User’s Guide375Figure 218 Security Settings - Java JAVA (Sun)1 From Internet Explorer, click Too ls, Internet Options and then the

P-661H/HW Series User’s Guide376Figure 219 Java (Sun)

P-661H/HW Series User’s GuideIndex 377IndexNumerics110V AC 6230V AC 6AAbnormal Working Conditions 7AC 6Accessories 6Acts of God 7Address Assignment 97

P-661H/HW Series User’s Guide378 IndexCorrecting Interference 4Corrosive Liquids 6Covers 6CTS (Clear to Send) 358Custom PortsCreating/Editing 168Custo

P-661H/HW Series User’s GuideIndex 379Alerts 160Anti-Probing 174Creating/Editing Rules 164Custom Ports 167Enabling 162Firewall Vs Filters 155Guideline

P-661H/HW Series User’s Guide38 Chapter 1 Getting To Know Your ZyXEL DeviceIP AliasIP Alias allows you to partition a physical network into logical ne

P-661H/HW Series User’s Guide380 IndexKKeep Alive 207Key Fields For Configuring Rules 159LLabor 7LAN Setup 77, 95LAN TCP/IP 97LAN to WAN Rules 160LAND

P-661H/HW Series User’s GuideIndex 381Permission 3PFS 218Photocopying 3Ping of Death 148Pipes 6Point to Point Protocol over ATM Adaptation Layer 5 (AA

P-661H/HW Series User’s Guide382 IndexSafety Warnings 6Saving the State 151Scheduler 236Secure Gateway Address 205Security Association 197Security In

P-661H/HW Series User’s GuideIndex 383User Authentication 365User Name 248VValue 7VBR (Variable Bit Rate) 85, 90Vendor 6Ventilation Slots 6Viewing Cer

P-661H/HW Series User’s GuideChapter 1 Getting To Know Your ZyXEL Device 39Both WPA and WPA2 improve data encryption by using Temporal Key Integrity P

P-661H/HW Series User’s Guide4 CertificationsCertificationsFederal Communications Commission (FCC) Interference StatementThis device complies with Par

P-661H/HW Series User’s Guide40 Chapter 1 Getting To Know Your ZyXEL DeviceFigure 1 Protected Internet Access Applications1.3.2 LAN to LAN Applicat

P-661H/HW Series User’s GuideChapter 1 Getting To Know Your ZyXEL Device 41The following table describes the LEDs.1.5 Hardware ConnectionRefer to the

P-661H/HW Series User’s Guide42 Chapter 1 Getting To Know Your ZyXEL Device1.6.1 Connecting a POTS SplitterWhen you use the Full Rate (G.dmt) ADSL st

P-661H/HW Series User’s GuideChapter 1 Getting To Know Your ZyXEL Device 43Figure 5 Connecting a Microfilter

P-661H/HW Series User’s Guide44 Chapter 1 Getting To Know Your ZyXEL Device

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 45CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to access

P-661H/HW Series User’s Guide46 Chapter 2 Introducing the Web Configuratorstatus only. Click Login to proceed to a screen asking you to change your pa

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 47Figure 8 Select a ModeNote: The management session automatically times out

P-661H/HW Series User’s Guide48 Chapter 2 Introducing the Web ConfiguratorFigure 9 Web Configurator: Main Screen Note: Click the icon (located in

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 49LAN IP Use this screen to configure LAN TCP/IP settings, enable Any IP and o

P-661H/HW Series User’s GuideCertifications 5

P-661H/HW Series User’s Guide50 Chapter 2 Introducing the Web ConfiguratorVPN Setup Use this screen to configure each VPN tunnel.Monitor Use this scre

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 512.4.2 Status Screen The following summarizes how to navigate the web confi

P-661H/HW Series User’s Guide52 Chapter 2 Introducing the Web ConfiguratorDefault Gateway This is the IP address of the default gateway, if applicable

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 532.4.3 Status: Any IP TableClick the Any IP Table hyperlink in the Status sc

P-661H/HW Series User’s Guide54 Chapter 2 Introducing the Web Configurator2.4.4 Status: WLAN Status (Wireless devices only)Click WLAN Status in the S

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 55Figure 13 Status: VPN StatusThe following table describes the labels in th

P-661H/HW Series User’s Guide56 Chapter 2 Introducing the Web Configurator2.4.7 Status: Packet StatisticsClick the Packet Statistics hyperlink in the

P-661H/HW Series User’s GuideChapter 2 Introducing the Web Configurator 572.4.8 Changing Login Password It is highly recommended that you periodicall

P-661H/HW Series User’s Guide58 Chapter 2 Introducing the Web ConfiguratorFigure 16 System GeneralThe following table describes the fields in this s

P-661H/HW Series User’s GuideChapter 3 Wizards 59CHAPTER 3WizardsUse these screens to configure Internet access or to configure basic bandwidth manage

P-661H/HW Series User’s Guide6 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do NOT

P-661H/HW Series User’s Guide60 Chapter 3 Wizards3.1 Internet Setup WizardUse these screens to configure Internet access and wireless network setting

P-661H/HW Series User’s GuideChapter 3 Wizards 613.1.2 Manual ConfigurationThe ZyXEL Device detected the DSL connection but not the Internet settings

P-661H/HW Series User’s Guide62 Chapter 3 WizardsThe following table describes the fields in this screen.3.1.2.3 Screen 3These screens let you enter

P-661H/HW Series User’s GuideChapter 3 Wizards 63The following table describes the fields in this screen.This screen appears if your Internet connecti

P-661H/HW Series User’s Guide64 Chapter 3 WizardsThe following table describes the fields in this screen.This screen appears if your Internet connecti

P-661H/HW Series User’s GuideChapter 3 Wizards 65Figure 25 Internet Setup Wizard: ISP Parameters (PPPoA)The following table describes the fields in

P-661H/HW Series User’s Guide66 Chapter 3 WizardsFigure 26 Internet Setup Wizard: No DSL ConnectionClick Restart the Internet/Wireless Setup Wizard

P-661H/HW Series User’s GuideChapter 3 Wizards 67Figure 28 Wireless LAN Setup Wizard 1The following table describes the labels in this screen.3 Conf

P-661H/HW Series User’s Guide68 Chapter 3 WizardsFigure 29 Wireless LAN Setup Wizard 2The following table describes the labels in this screen.Table

P-661H/HW Series User’s GuideChapter 3 Wizards 69Note: The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption ke

P-661H/HW Series User’s GuideZyXEL Limited Warranty 7ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is fr

P-661H/HW Series User’s Guide70 Chapter 3 WizardsFigure 31 Manually assign a WEP keyThe following table describes the labels in this screen.5 Click

P-661H/HW Series User’s GuideChapter 3 Wizards 71Figure 32 Wireless LAN Setup: ApplyFigure 33 Internet Setup Wizard: Summary Screen6 Use the read

P-661H/HW Series User’s Guide72 Chapter 3 WizardsLaunch your web browser and navigate to www.zyxel.com. Internet access is just the beginning. Refer t

P-661H/HW Series User’s GuideChapter 3 Wizards 73To access this wizard, open the web configurator (see Section 2.2 on page 45) and click BANDWIDTH MAN

P-661H/HW Series User’s Guide74 Chapter 3 WizardsThe following fields describe the label in this screen.3.3.2 Screen 2Use the second wizard screen to

P-661H/HW Series User’s GuideChapter 3 Wizards 75The following table describes the labels in this screen.3.3.3 Screen 3Follow the on-screen instructi

P-661H/HW Series User’s Guide76 Chapter 3 Wizards

P-661H/HW Series User’s GuideChapter 4 WAN Setup 77CHAPTER 4WAN SetupThis chapter describes how to configure WAN settings.4.1 WAN Overview A WAN (Wid

P-661H/HW Series User’s Guide78 Chapter 4 WAN SetupBy implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computer

P-661H/HW Series User’s GuideChapter 4 WAN Setup 794.1.4 IP Address AssignmentA static IP is a fixed IP that your ISP gives you. A dynamic IP is not

P-661H/HW Series User’s Guide8 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Product

P-661H/HW Series User’s Guide80 Chapter 4 WAN Setup4.2 Metric The metric represents the "cost of transmission". A router determines the bes

P-661H/HW Series User’s GuideChapter 4 WAN Setup 81Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is r

P-661H/HW Series User’s Guide82 Chapter 4 WAN SetupThe VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not requ

P-661H/HW Series User’s GuideChapter 4 WAN Setup 83Figure 38 Internet Connection (PPPoE)The following table describes the labels in this screen. Tab

P-661H/HW Series User’s Guide84 Chapter 4 WAN Setup4.5.1 Configuring Advanced Internet Connection To edit your ZyXEL Device's advanced WAN setti

P-661H/HW Series User’s GuideChapter 4 WAN Setup 85Figure 39 Advanced Internet ConnectionThe following table describes the labels in this screen. T

P-661H/HW Series User’s Guide86 Chapter 4 WAN Setup4.6 Configuring More ConnectionsThis section describes the protocol-independent parameters for a r

P-661H/HW Series User’s GuideChapter 4 WAN Setup 87Figure 40 More ConnectionsThe following table describes the labels in this screen.4.6.1 More Con

P-661H/HW Series User’s Guide88 Chapter 4 WAN SetupFigure 41 More Connections EditThe following table describes the labels in this screen. Table 27

P-661H/HW Series User’s GuideChapter 4 WAN Setup 89User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your ISP assigned. I

P-661H/HW Series User’s GuideCustomer Support [email protected] +48-22-5286603 www.pl.zyxel.com ZyXEL Communicationsul.Emilli Plater 5300-113 W

P-661H/HW Series User’s Guide90 Chapter 4 WAN Setup4.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN se

P-661H/HW Series User’s GuideChapter 4 WAN Setup 914.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device c

P-661H/HW Series User’s Guide92 Chapter 4 WAN SetupFigure 44 Traffic Redirect LAN Setup4.8 Configuring WAN Backup To change your ZyXEL Device’s WAN

P-661H/HW Series User’s GuideChapter 4 WAN Setup 93Figure 45 WAN Backup SetupThe following table describes the labels in this screen. Table 29 WA

P-661H/HW Series User’s Guide94 Chapter 4 WAN SetupTraffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device canno

P-661H/HW Series User’s GuideChapter 5 LAN Setup 95CHAPTER 5LAN SetupThis chapter describes how to configure LAN settings.5.1 LAN Overview A Local Ar

P-661H/HW Series User’s Guide96 Chapter 5 LAN Setup5.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individua

P-661H/HW Series User’s GuideChapter 5 LAN Setup 975.1.4 DNS Server Address AssignmentUse DNS (Domain Name System) to map a domain name to its corres

P-661H/HW Series User’s Guide98 Chapter 5 LAN Setup5.2.1.1 Private IP AddressesEvery machine on the Internet must have a unique address. If your netw

P-661H/HW Series User’s GuideChapter 5 LAN Setup 995.2.3 MulticastTraditionally, IP packets are transmitted in one of either two ways - Unicast (1 se