Zyxel P-334U, P-335U user manual

P-334U/P-335U

802.11a/g Wireless Router

User’s Guide

Version 3.60

Edition 2

11/2006

P-334U/P-335U User’s Guide

Copyright

Copyright © 2006 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Copyright 3

P-334U/P-335U User’s Guide

Federal Communications Commission (FCC) Interference Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause
undesired operations.

This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.

If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:

Certifications

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and the receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.

• Consult the dealer or an experienced radio/TV technician for help.

FCC Radiation Exposure Statement

• This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.

• For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor
environment.

• IEEE 802.11b or 802.11g operation of this product in the U.S.A. is firmware-limited to
channels 1 through 11.

• To comply with FCC RF exposure compliance requirements, a separation distance of at
least 20 cm must be maintained between the antenna of this device and all persons.

注意 !

依據 低功率電波輻射性電機管理辦法

第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用

4 Certifications

P-334U/P-335U User’s Guide

者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。

第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現
有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。
前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍
受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。

在 5250MHz~5350MHz 頻帶內操作之無線資訊傳輸設備，限於室內使用。

Notices

Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.

This device has been designed for the WLAN 2.4 GHz and 5 GHz networks throughout the EC
region and Switzerland, with restrictions in France.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Viewing Certifications

1 Go to http://www.zyxel.com.

2 Select your product on the ZyXEL home page to go to that product's page.

3 Select the certification you wish to view from this page.

Certifications 5

P-334U/P-335U User’s Guide

For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT store things on the device.

• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.

• Connect ONLY suitable accessories to the device.

• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.

• Make sure to connect the cables to the correct ports.

• Place connecting cables carefully so that no one will step on them or stumble over them.

• Always disconnect all cables from this device before servicing or disassembling.

• Use ONLY an appropriate power adaptor or cord for your device.

• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).

• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.

• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.

• If the power adaptor or cord is damaged, remove it from the power outlet.

• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.

• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).

• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.

Safety Warnings

This product is recyclable. Dispose of it properly.

6 Safety Warnings

P-334U/P-335U User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product has been modified, misused, tampered with, damaged by an act
of God, or subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind to the purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

Registration

Register your product online to receive e-mail notices of firmware upgrades and information
at

www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

ZyXEL Limited Warranty 7

P-334U/P-335U User’s Guide

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

Customer Support

METHOD

LOCATION

CORPORATE
HEADQUARTERS
(WORLDWIDE)

CZECH REPUBLIC

DENMARK

FINLAND

FRANCE

GERMANY

HUNGARY

KAZAKHSTAN

NORTH AMERICA

NORWAY

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.zyxel.com

[e-mail] [phone] ftp.zyxel.com

[e-mail] [phone] www.zyxel.cz ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.dk ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fi ZyXEL Communications Oy

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fr ZyXEL France

[phone]

[e-mail] [phone] www.zyxel.de ZyXEL Deutschland GmbH.

[e-mail] [phone]

[e-mail] [phone] www.zyxel.hu ZyXEL Hungary

[e-mail] [phone]

http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan

[e-mail] [phone]

[e-mail] 1-800-255-4101

[phone]

[e-mail] [phone] ftp.us.zyxel.com

[e-mail] [phone] www.zyxel.no ZyXEL Communications A/S

[e-mail] [phone]

A

WEB SITE

www.europe.zyxel.com

ftp.europe.zyxel.com

www.us.zyxel.com ZyXEL Communications Inc.

REGULAR MAIL

ZyXEL Communications Corp.
6 Innovation Road II

Science Park
Hsinchu 300
Ta iw a n

Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika

Columbusvej
2860 Soeborg
Denmark

Malminkaari 10
00700 Helsinki
Finland

1 rue des Vergers
Bat. 1 / C
69760 Limonest
France

Adenauerstr. 20/A2 D-52146
Wuerselen
Germany

48, Zoldlomb Str.
H-1025, Budapest
Hungary

43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan

1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.

Nils Hansens vei 13
0667 Oslo
Norway

8 Customer Support

P-334U/P-335U User’s Guide

METHOD

LOCATION

POLAND

RUSSIA

SPAIN

SWEDEN

UKRAINE

UNITED KINGDOM

A. “+” is the (prefix) number you enter to make an international telephone call.

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.pl.zyxel.com ZyXEL Communications

[phone]

http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia

[e-mail] [phone]

[e-mail] [phone] www.zyxel.es ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.se ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.ua.zyxel.com ZyXEL Ukraine

[e-mail] [phone]

[e-mail] [phone]

08707 555779 (UK only)

[e-mail] [phone] ftp.zyxel.co.uk

A

WEB SITE

REGULAR MAIL

ul. Okrzei 1A
03-715 Warszawa
Poland

Ostrovityanova 37a Str.
Moscow, 117279
Russia

Arte, 21 5ª planta
28033 Madrid
Spain

Sjöporten 4, 41764 Göteborg
Sweden

13, Pimonenko Str.
Kiev, 04050
Ukraine

www.zyxel.co.uk ZyXEL Communications UK

Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)

Customer Support 9

P-334U/P-335U User’s Guide

10 Customer Support

P-334U/P-335U User’s Guide

Table of Contents

Copyright ..................................................................................................................3

Certifications ............................................................................................................4

Safety Warnings ....................................................................................................... 6

ZyXEL Limited Warranty.......................................................................................... 7

Customer Support.................................................................................................... 8

Table of Contents ................................................................................................... 11

Preface ....................................................................................................................29

Chapter 1

Getting to Know Your ZyXEL Device....................................................................31

1.1 ZyXEL Device Overview ....................................................................................31

1.2 Applications for the ZyXEL Device .....................................................................31

1.2.1 Secure Broadband Internet Access via Cable or DSL Modem .................31

1.2.2 Wireless LAN Application .........................................................................32

1.2.3 Print Server and Router Combined Application (P-335U Only) ................33

1.2.4 VPN Application (P-335U Only) ................................................................33

1.3 Ways to Manage the ZyXEL Device ...................................................................33

1.4 Good Habits for Managing Your ZyXEL Device .................................................34

1.4.1 Front Panel LEDs .....................................................................................34

Chapter 2

Introducing the Web Configurator........................................................................ 37

2.1 Web Configurator Overview ...............................................................................37

2.2 Accessing the Web Configurator ........................................................................37

2.3 Resetting the ZyXEL Device ..............................................................................38

2.3.1 Procedure to Use the Reset Button ..........................................................38

2.4 Navigating the Web Configurator ....................................................................38

2.4.1 Navigation Panel .......................................................................................41

2.4.2 Summary: Bandwidth Management Monitor ...........................................43

2.4.3 Summary: DHCP Table ...........................................................................44

2.4.4 Summary: Packet Statistics ....................................................................45

2.4.5 VPN Monitor .............................................................................................46

2.4.6 Summary: Wireless Station Status .........................................................46

Table of Contents 11

P-334U/P-335U User’s Guide

Chapter 3

Connection Wizard................................................................................................. 49

3.1 Wizard Setup ......................................................................................................49

3.2 Connection Wizard: STEP 1: System Information .............................................50

3.2.1 System Name ...........................................................................................50

3.2.2 Domain Name ...........................................................................................51

3.3 Connection Wizard: STEP 2: Wireless LAN .......................................................51

3.3.1 Basic(WEP) Security .................................................................................53

3.3.2 Extend(WPA-PSK or WPA2-PSK) Security ...............................................54

3.3.3 OTIST ........................................................................................................55

3.4 Connection Wizard: STEP 3: Internet Configuration ..........................................56

3.4.1 Ethernet Connection .................................................................................56

3.4.2 PPPoE Connection ...................................................................................57

3.4.3 PPTP Connection .....................................................................................58

3.4.4 Your IP Address .........................................................................................60

3.4.5 WAN IP Address Assignment ...................................................................60

3.4.6 IP Address and Subnet Mask ...................................................................61

3.4.7 DNS Server Address Assignment .............................................................61

3.4.8 WAN IP and DNS Server Address Assignment .........................................62

3.4.9 WAN MAC Address ...................................................................................63

3.5 Connection Wizard: STEP 4: Bandwidth management ......................................64

3.6 Connection Wizard Complete ............................................................................65

Chapter 4

Wireless LAN .......................................................................................................... 67

4.1 Wireless Network Overview ...............................................................................67

4.2 Wireless Security Overview ...............................................................................68

4.2.1 SSID .........................................................................................................68

4.2.2 MAC Address Filter ...................................................................................68

4.2.3 User Authentication ..................................................................................68

4.2.4 Encryption .................................................................................................69

4.2.5 One-Touch Intelligent Security Technology (OTIST) .................................70

4.3 General Wireless LAN Screen ......................................................................70

4.3.1 No Security ...............................................................................................71

4.3.2 WEP Encryption ........................................................................................72

4.3.3 WPA-PSK/WPA2-PSK ..............................................................................74

4.3.4 WPA/WPA2 ...............................................................................................75

4.4 OTIST .................................................................................................................77

4.4.1 Enabling OTIST ........................................................................................78

4.4.1.1 AP ...................................................................................................78

4.4.1.2 Wireless Client ................................................................................79

4.4.2 Starting OTIST ..........................................................................................80

4.4.3 Notes on OTIST ........................................................................................80

12 Table of Contents

P-334U/P-335U User’s Guide

4.5 MAC Filter ..........................................................................................................81

4.6 Wireless LAN Advanced Screen ........................................................................83

Chapter 5

Wireless Tutorial.....................................................................................................85

5.1 Example Parameters ..........................................................................................85

5.2 Configuring the AP .............................................................................................85

5.3 Configuring the Wireless Client ..........................................................................87

5.3.1 Connecting to a Wireless LAN ..................................................................88

5.3.2 Creating and Using a Profile .....................................................................90

Chapter 6

WAN......................................................................................................................... 95

6.1 WAN Overview ...................................................................................................95

6.2 WAN MAC Address ............................................................................................95

6.3 Internet Connection ............................................................................................95

6.3.1 Ethernet Encapsulation .............................................................................95

6.3.2 PPPoE Encapsulation ...............................................................................97

6.3.3 PPTP Encapsulation ...............................................................................100

6.4 Advanced WAN Screen ....................................................................................103

Chapter 7

LAN........................................................................................................................105

7.1 LAN Overview ..................................................................................................105

7.1.1 IP Pool Setup ..........................................................................................105

7.1.2 System DNS Servers ..............................................................................105

7.2 LAN TCP/IP ......................................................................................................105

7.2.1 Factory LAN Defaults ..............................................................................105

7.2.2 IP Address and Subnet Mask .................................................................106

7.2.3 Multicast ..................................................................................................106

7.3 LAN IP Screen .................................................................................................106

7.4 LAN IP Alias ....................................................................................................107

7.5 Advanced LAN Screen .....................................................................................108

Chapter 8

DHCP Server..........................................................................................................111

8.1 DHCP ............................................................................................................... 111

8.2 DHCP Server General Screen ......................................................................... 111

8.3 DHCP Server Advanced Screen ................................................................... 112

8.4 Client List Screen .............................................................................................113

Table of Contents 13

P-334U/P-335U User’s Guide

Chapter 9

Network Address Translation (NAT)................................................................... 115

9.1 NAT Overview ...............................................................................................115

9.2 Using NAT ........................................................................................................ 115

9.2.1 Port Forwarding: Services and Port Numbers ........................................115

9.2.2 Configuring Servers Behind Port Forwarding (Example) ........................ 116

9.3 General NAT Screen ........................................................................................ 116

9.4 NAT Application Screen .................................................................................117

9.4.1 Game List Example ................................................................................119

9.5 Trigger Port Forwarding ..................................................................................120

9.5.1 Trigger Port Forwarding Example ..........................................................121

9.5.2 Two Points To Remember About Trigger Ports .......................................121

9.6 NAT Advanced Screen .....................................................................................121

Chapter 10

Dynamic DNS........................................................................................................ 125

10.1 Dynamic DNS Introduction ............................................................................125

10.1.1 DynDNS Wildcard ................................................................................125

10.2 Dynamic DNS Screen ..................................................................................125

Chapter 11

Firewall..................................................................................................................127

11.1 Introduction to Firewall .................................................................................127

11.1.1 What is a Firewall? ................................................................................127

11.1.2 Stateful Inspection Firewall. ..................................................................127

11.1.3 About the ZyXEL Device Firewall .........................................................127

11.1.4 Guidelines For Enhancing Security With Your Firewall .........................128

11.2 General Firewall Screen ..............................................................................128

11.3 Services Screen ............................................................................................129

Chapter 12

Content Filtering ................................................................................................. 133

12.1 Introduction to Content Filtering .....................................................................133

12.2 Restrict Web Features ...................................................................................133

12.3 Days and Times .............................................................................................133

12.4 Filter Screen ...................................................................................................133

12.5 Schedule ........................................................................................................135

12.6 Customizing Keyword Blocking URL Checking ..............................................136

12.6.1 Domain Name or IP Address URL Checking ........................................136

12.6.2 Full Path URL Checking .......................................................................136

12.6.3 File Name URL Checking .....................................................................137

14 Table of Contents

P-334U/P-335U User’s Guide

Chapter 13

IPSec VPN ............................................................................................................. 139

13.1 IPSec VPN Overview ...................................................................................139

13.1.1 IKE SA (IKE Phase 1) Overview ...........................................................140

13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140

13.1.2 IKE SA Setup ........................................................................................140

13.1.2.1 IKE SA Proposal .........................................................................141

13.1.2.2 Diffie-Hellman (DH) Key Exchange .............................................141

13.1.2.3 Authentication .............................................................................141

13.1.2.4 Negotiation Mode ........................................................................143

13.1.2.5 VPN, NAT, and NAT Traversal .....................................................143

13.1.3 IPSec SA (IKE Phase 2) Overview .....................................................144

13.1.3.1 Local Network and Remote Network ...........................................144

13.1.3.2 IPSec Protocol ............................................................................144

13.1.3.3 Encapsulation ..............................................................................145

13.1.3.4 IPSec SA Proposal and Perfect Forward Secrecy ......................145

13.1.4 Additional IPSec VPN Topics ................................................................146

13.1.4.1 SA Life Time ................................................................................146

13.1.4.2 Encryption and Authentication Algorithms ..................................146

13.2 Remote DNS Server ......................................................................................147

13.3 VPN Summary ...............................................................................................147

13.4 VPN Rule Setup (IKE) ...................................................................................148

13.5 Advanced VPN Rule Setup (IKE) ................................................................153

13.6 IPSec SA Using Manual Keys ....................................................................159

13.6.1 IPSec SA Proposal Using Manual Keys ...............................................160

13.6.2 Authentication and the Security Parameter Index (SPI) .......................160

13.7 VPN Rule Setup (Manual) ..............................................................................160

13.8 VPN SA Monitor ...........................................................................................164

13.9 VPN Global Setting .......................................................................................165

13.10 Telecommuter VPN/IPSec Examples ...........................................................165

13.10.1 Telecommuters Sharing One VPN Rule Example ..............................166

13.10.2 Telecommuters Using Unique VPN Rules Example ...........................166

13.11 VPN and Remote Management ...................................................................168

Chapter 14

Static Route Screens ...........................................................................................169

14.1 Static Route Overview ....................................................................................169

14.2 IP Static Route Screen ...................................................................................170

14.2.1 Static Route Setup Screen ...................................................................171

Chapter 15

Bandwidth Management......................................................................................173

15.1 Bandwidth Management Overview ...............................................................173

Table of Contents 15

P-334U/P-335U User’s Guide

15.2 Application-based Bandwidth Management ...................................................173

15.3 Subnet-based Bandwidth Management .........................................................174

15.4 Application and Subnet-based Bandwidth Management ...............................174

15.5 Bandwidth Management Priorities ................................................................175

15.6 Predefined Bandwidth Management Services ...............................................175

15.6.1 Services and Port Numbers ..................................................................176

15.7 Default Bandwidth Management Classes and Priorities ................................178

15.8 Bandwidth Management General Configuration ...........................................179

15.9 Bandwidth Management Advanced Configuration ........................................180

15.9.1 Rule Configuration with the Pre-defined Service ................................182

15.9.2 Rule Configuration with the User-defined Service ..............................183

15.10 Bandwidth Management Monitor ..............................................................184

Chapter 16

Remote Management Screens ............................................................................ 185

16.1 Remote Management Overview .....................................................................185

16.1.1 Remote Management Limitations .........................................................185

16.1.2 Remote Management and NAT ............................................................186

16.1.3 System Timeout ...................................................................................186

16.2 WWW Screen ..............................................................................................186

16.3 Telnet ..............................................................................................................187

16.4 Telnet Screen .................................................................................................187

16.5 FTP Screen ....................................................................................................188

16.6 DNS Screen ................................................................................................189

Chapter 17

UPnP...................................................................................................................... 191

17.1 Universal Plug and Play Overview ................................................................191

17.1.1 How Do I Know If I'm Using UPnP? ......................................................191

17.1.2 NAT Traversal .......................................................................................191

17.1.3 Cautions with UPnP ..............................................................................191

17.2 UPnP and ZyXEL ...........................................................................................192

17.3 UPnP Screen .................................................................................................192

17.4 Installing UPnP in Windows Example ............................................................193

17.4.1 Installing UPnP in Windows Me ............................................................193

17.4.2 Installing UPnP in Windows XP ............................................................194

17.5 Using UPnP in Windows XP Example ...........................................................195

17.5.1 Auto-discover Your UPnP-enabled Network Device .............................195

17.5.2 Web Configurator Easy Access ............................................................196

17.5.3 Web Configurator Easy Access ............................................................197

16 Table of Contents

P-334U/P-335U User’s Guide

Chapter 18

Print Server...........................................................................................................199

18.1 Print Server Overview ...................................................................................199

18.2 ZyXEL Device Print Server ............................................................................199

18.3 Print Server Screen ........................................................................................200

Chapter 19

Print Server Driver Setup ....................................................................................201

19.1 Installation Requirements ...............................................................................201

19.2 Windows 95/98 SE/Me/2000/XP/NT 4.0 ........................................................201

19.2.1 Print Server Driver Setup Wizard ..........................................................202

19.2.2 Adding a New Printer ............................................................................207

19.3 Macintosh OS X .............................................................................................211

Chapter 20

System .................................................................................................................. 215

20.1 System Overview ...........................................................................................215

20.2 System General Screen ...............................................................................215

20.3 Time Setting Screen .......................................................................................216

Chapter 21

Logs....................................................................................................................... 219

21.1 View Log .......................................................................................................219

21.2 Log Settings ...................................................................................................220

Chapter 22

Tools ...................................................................................................................... 223

22.1 Firmware Upload Screen ...............................................................................223

22.2 Configuration Screen .....................................................................................224

22.2.1 Backup Configuration ...........................................................................225

22.2.2 Restore Configuration ...........................................................................225

22.2.3 Back to Factory Defaults .......................................................................226

22.3 Restart Screen ...............................................................................................227

Chapter 23

Configuration Mode .............................................................................................229

Chapter 24

Troubleshooting ................................................................................................... 231

24.1 Problems Starting Up the ZyXEL Device .......................................................231

24.2 Problems with the LAN ...................................................................................231

24.3 Problems with the WAN .................................................................................232

24.4 Problems Accessing the ZyXEL Device .........................................................233

Table of Contents 17

P-334U/P-335U User’s Guide

24.5 Problems with Restricted Web Pages and Keyword Blocking .......................233

24.5.1 Pop-up Windows, JavaScripts and Java Permissions ..........................235

24.5.2 ActiveX Controls in Internet Explorer ....................................................242

Appendix A

Product Specifications ........................................................................................ 245

Appendix B

Print Server Specifications .................................................................................249

Appendix C

Setting up Your Computer’s IP Address............................................................ 255

Appendix D

IP Subnetting ........................................................................................................ 271

24.5.1.1 Internet Explorer Pop-up Blockers ..............................................235

24.5.1.2 JavaScripts ..................................................................................238

24.5.1.3 Java Permissions ........................................................................240

Appendix E

Wireless LANs ...................................................................................................... 279

Appendix F

Log Descriptions.................................................................................................. 293

Appendix G

Services ................................................................................................................ 309

Appendix H

Internal SPTGEN .................................................................................................. 313

Appendix I

Triangle Route ...................................................................................................... 329

18 Table of Contents

P-334U/P-335U User’s Guide

List of Figures

Figure 1 Secure Internet Access via Cable or DSL Modem ................................................ 32

Figure 2 WLAN Application Example .................................................................................. 32

Figure 3 Print Server Application ........................................................................................ 33

Figure 4 VPN Application .................................................................................................... 33

Figure 5 Front Panel (P-334U) ............................................................................................ 34

Figure 6 Front Panel (P-335U) ............................................................................................ 34

Figure 7 Change Password Screen .................................................................................... 38

Figure 8 Web Configurator Status Screen .......................................................................... 39

Figure 9 Summary: BW MGMT Monitor .............................................................................. 44

Figure 10 Summary: DHCP Table ....................................................................................... 44

Figure 11 Summary: Packet Statistics ................................................................................. 45

Figure 12 Summary: Packet Statistics ................................................................................ 45

Figure 13 Summary: VPN Monitor ..................................................................................... 46

Figure 14 Summary: Wireless Association List ................................................................... 47

Figure 15 Select Wizard or Advanced Mode ....................................................................... 49

Figure 16 Select a Language .............................................................................................. 50

Figure 17 Welcome to the Connection Wizard .................................................................... 50

Figure 18 Wizard Step 1: System Information ..................................................................... 51

Figure 19 Wizard Step 2: Wireless LAN .............................................................................. 52

Figure 20 Wizard Step 2: Basic(WEP) Security .................................................................. 53

Figure 21 Wizard Step 2: Extend(WPA-PSK or WPA2-PSK) Security ................................ 54

Figure 22 Wizard Step 2: OTIST ......................................................................................... 55

Figure 23 Wizard Step 3: ISP Parameters. ......................................................................... 56

Figure 24 Wizard Step 3: Ethernet Connection ................................................................... 57

Figure 25 Wizard Step 3: PPPoE Connection ..................................................................... 58

Figure 26 Wizard Step 3: PPTP Connection ....................................................................... 59

Figure 27 Wizard Step 3: Your IP Address .......................................................................... 60

Figure 28 Wizard Step 3: WAN IP and DNS Server Addresses .......................................... 62

Figure 29 Wizard Step 3: WAN MAC Address .................................................................... 63

Figure 30 Wizard Step 4: Bandwidth Management ............................................................ 64

Figure 31 Connection Wizard Save ................................................................................... 65

Figure 32 Connection Wizard Complete ............................................................................. 65

Figure 33 Example of a Wireless Network .......................................................................... 67

Figure 34 Wireless General ............................................................................................... 71

Figure 35 Wireless: No Security .......................................................................................... 72

Figure 36 Wireless: Static WEP Encryption ........................................................................ 73

19

P-334U/P-335U User’s Guide

Figure 37 Wireless: WPA-PSK/WPA2-PSK ......................................................................... 74

Figure 38 Wireless: WPA/WPA2 ......................................................................................... 76

Figure 39 OTIST ................................................................................................................. 78

Figure 40 Example Wireless Client OTIST Screen ............................................................. 79

Figure 41 Security Key ........................................................................................................ 80

Figure 42 OTIST in Progress (AP) ...................................................................................... 80

Figure 43 OTIST in Progress (Client) .................................................................................. 80

Figure 44 No AP with OTIST Found ................................................................................... 80

Figure 45 Start OTIST? ....................................................................................................... 81

Figure 46 MAC Address Filter ............................................................................................. 82

Figure 47 Advanced ............................................................................................................ 83

Figure 48 AP: Wireless LAN > General .............................................................................. 86

Figure 49 AP: Status ...........................................................................................................87

Figure 50 AP: Status: WLAN Station Status ........................................................................ 87

Figure 51 ZyXEL Utility: Security Settings ......................................................................... 89

Figure 52 ZyXEL Utility: Confirm Save ................................................................................ 89

Figure 53 ZyXEL Utility: Link Info ....................................................................................... 90

Figure 54 ZyXEL Utility: Profile ........................................................................................... 90

Figure 55 ZyXEL Utility: Add New Profile ............................................................................ 91

Figure 56 ZyXEL Utility: Profile Security ............................................................................. 91

Figure 57 ZyXEL Utility: Profile Encryption ......................................................................... 91

Figure 58 Profile: Wireless Protocol Settings. ..................................................................... 92

Figure 59 Profile: Confirm Save .......................................................................................... 92

Figure 60 Profile: Activate ................................................................................................... 92

Figure 61 Ethernet Encapsulation ....................................................................................... 96

Figure 62 PPPoE Encapsulation ......................................................................................... 98

Figure 63 PPTP Encapsulation ........................................................................................... 101

Figure 64 Advanced ............................................................................................................ 104

Figure 65 LAN IP ................................................................................................................. 106

Figure 66 LAN IP Alias ........................................................................................................ 107

Figure 67 Advanced LAN .................................................................................................... 108

Figure 68 DHCP Server General ........................................................................................ 111

Figure 69 DHCP Server Advanced ..................................................................................... 112

Figure 70 Client List ............................................................................................................ 114

Figure 71 Multiple Servers Behind NAT Example ............................................................... 116

Figure 72 NAT General ....................................................................................................... 116

Figure 73 NAT Application .................................................................................................. 118

Figure 74 Game List Example ............................................................................................. 120

Figure 75 Trigger Port Forwarding Process: Example ........................................................ 121

Figure 76 NAT Advanced .................................................................................................... 122

Figure 77 Dynamic DNS ..................................................................................................... 126

Figure 78 General ............................................................................................................... 128

Figure 79 Services .............................................................................................................. 130

20

P-334U/P-335U User’s Guide

Figure 80 Content Filter: Filter ............................................................................................ 134

Figure 81 Content Filter: Schedule ..................................................................................... 135

Figure 82 VPN: Example ..................................................................................................... 139

Figure 83 VPN: IKE SA and IPSec SA ............................................................................... 140

Figure 84 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal ......................... 141

Figure 85 IKE SA: Main Negotiation Mode, Steps 3 - 4: DH Key Exchange ....................... 141

Figure 86 IKE SA: Main Negotiation Mode, Steps 5 - 6: Authentication ............................. 142

Figure 87 VPN/NAT Example .............................................................................................. 143

Figure 88 VPN: Transport and Tunnel Mode Encapsulation ............................................... 145

Figure 89 VPN Host using Intranet DNS Server Example .................................................. 147

Figure 90 Security > VPN > Summary ............................................................................... 147

Figure 91 IPSec Fields Summary ..................................................................................... 148

Figure 92 Security > VPN > Rule Setup: IKE (Basic) ........................................................ 149

Figure 93 Security > VPN > Rule Setup: IKE (Advanced) ................................................. 154

Figure 94 Security > VPN > Rule Setup: Manual ............................................................... 161

Figure 95 Security > VPN > SA Monitor ............................................................................ 164

Figure 96 Security > VPN > Global Setting ....................................................................... 165

Figure 97 Telecommuters Sharing One VPN Rule Example ............................................... 166

Figure 98 Telecommuters Using Unique VPN Rules Example ........................................... 167

Figure 99 VPN for Remote Management Example ............................................................. 168

Figure 100 Example of Static Routing Topology ................................................................. 169

Figure 101 IP Static Route .................................................................................................. 170

Figure 102 Static Route Setup ............................................................................................ 171

Figure 103 Subnet-based Bandwidth Management Example ............................................. 174

Figure 104 Bandwidth Management: General .................................................................... 179

Figure 105 Bandwidth Management: Advanced ................................................................. 180

Figure 106 Bandwidth Management Rule Configuration: Pre-defined Service ................... 182

Figure 107 Bandwidth Management Rule Configuration: User-defined Service ................. 183

Figure 108 Bandwidth Management: Monitor ..................................................................... 184

Figure 109 WWW Remote Management ............................................................................ 186

Figure 110 Telnet Remote Management ............................................................................. 187

Figure 111 FTP Remote Management ................................................................................ 188

Figure 112 DNS Remote Management ............................................................................... 189

Figure 113 Configuring UPnP ............................................................................................. 192

Figure 114 Configuring Print Server .................................................................................... 200

Figure 115 CD Autorun Screen ........................................................................................... 201

Figure 116 CD Autorun Screen: Printer Server Driver Setup ............................................. 202

Figure 117 Network Print Server Setup Wizard: Welcome .................................................. 203

Figure 118 Network Print Server Setup Wizard: Select A Print Server ............................... 203

Figure 119 Network Print Server Setup Wizard: Change Settings ...................................... 204

Figure 120 Network Print Server Setup Wizard: Select A Printer ....................................... 205

Figure 121 Network Print Server Setup Wizard: Summary ................................................. 206

Figure 122 Network Print Server Setup Wizard: Installation Complete ............................... 206

21

P-334U/P-335U User’s Guide

Figure 123 Add Printer Help ................................................................................................ 207

Figure 124 Add Printer Wizard: Welcome ........................................................................... 207

Figure 125 Add Printer Wizard: Local or Network Printer ................................................... 208

Figure 126 Add Printer Wizard: Select the Printer Port ...................................................... 208

Figure 127 Add Printer Wizard: Printer Driver .................................................................... 209

Figure 128 Add Printer Wizard: Use Existing Driver ........................................................... 209

Figure 129 Add Printer Wizard: Name Your Printer ........................................................... 210

Figure 130 Add Printer Wizard: Printer Sharing ................................................................. 210

Figure 131 Add Printer Wizard: Print Test Page ................................................................ 211

Figure 132 Add Printer Wizard Complete ........................................................................... 211

Figure 133 Macintosh HD ................................................................................................... 212

Figure 134 Macintosh HD folder ......................................................................................... 212

Figure 135 Applications Folder ........................................................................................... 212

Figure 136 Utilities Folder ................................................................................................... 212

Figure 137 Printer List Folder .............................................................................................. 213

Figure 138 Printer Configuration ......................................................................................... 213

Figure 139 Printer Model ..................................................................................................... 214

Figure 140 Print Server ....................................................................................................... 214

Figure 141 System General ............................................................................................... 215

Figure 142 Time Setting ...................................................................................................... 217

Figure 143 View Log ........................................................................................................... 219

Figure 144 Log Settings ...................................................................................................... 221

Figure 145 Maintenance Firmware Upload ......................................................................... 223

Figure 146 Upload Warning ................................................................................................ 224

Figure 147 Network Temporarily Disconnected .................................................................. 224

Figure 148 Upload Error Message ...................................................................................... 224

Figure 149 Configuration ..................................................................................................... 225

Figure 150 Configuration Restore Successful ..................................................................... 226

Figure 151 Temporarily Disconnected ................................................................................. 226

Figure 152 Configuration Restore Error .............................................................................. 226

Figure 153 System Restart ................................................................................................. 227

Figure 154 Config Mode ...................................................................................................... 229

Figure 155 Pop-up Blocker ................................................................................................. 235

Figure 156 Internet Options ............................................................................................... 236

Figure 157 Internet Options ................................................................................................ 237

Figure 158 Pop-up Blocker Settings ................................................................................... 238

Figure 159 Internet Options ................................................................................................ 239

Figure 160 Security Settings - Java Scripting ..................................................................... 240

Figure 161 Security Settings - Java .................................................................................... 241

Figure 162 Java (Sun) ......................................................................................................... 242

Figure 163 Internet Options Security .................................................................................. 243

Figure 164 Security Setting ActiveX Controls ..................................................................... 244

Figure 165 WIndows 95/98/Me: Network: Configuration ..................................................... 256

22

P-334U/P-335U User’s Guide

Figure 166 Windows 95/98/Me: TCP/IP Properties: IP Address ......................................... 257

Figure 167 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ............................ 258

Figure 168 Windows XP: Start Menu .................................................................................. 259

Figure 169 Windows XP: Control Panel .............................................................................. 259

Figure 170 Windows XP: Control Panel: Network Connections: Properties ....................... 260

Figure 171 Windows XP: Local Area Connection Properties .............................................. 260

Figure 172 Windows XP: Internet Protocol (TCP/IP) Properties ......................................... 261

Figure 173 Windows XP: Advanced TCP/IP Properties ...................................................... 262

Figure 174 Windows XP: Internet Protocol (TCP/IP) Properties ......................................... 263

Figure 175 Macintosh OS 8/9: Apple Menu ........................................................................ 264

Figure 176 Macintosh OS 8/9: TCP/IP ................................................................................ 264

Figure 177 Macintosh OS X: Apple Menu ........................................................................... 265

Figure 178 Macintosh OS X: Network ................................................................................. 266

Figure 179 Red Hat 9.0: KDE: Network Configuration: Devices ........................................ 267

Figure 180 Red Hat 9.0: KDE: Ethernet Device: General ................................................. 267

Figure 181 Red Hat 9.0: KDE: Network Configuration: DNS ............................................. 268

Figure 182 Red Hat 9.0: KDE: Network Configuration: Activate ................................. 268

Figure 183 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 .............................. 269

Figure 184 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 .................................. 269

Figure 185 Red Hat 9.0: DNS Settings in resolv.conf ...................................................... 269

Figure 186 Red Hat 9.0: Restart Ethernet Card ................................................................ 270

Figure 187 Red Hat 9.0: Checking TCP/IP Properties ...................................................... 270

Figure 188 Peer-to-Peer Communication in an Ad-hoc Network ........................................ 279

Figure 189 Basic Service Set .............................................................................................. 280

Figure 190 Infrastructure WLAN ......................................................................................... 281

Figure 191 RTS/CTS .......................................................................................................... 282

Figure 192 WPA(2) with RADIUS Application Example ...................................................... 290

Figure 193 WPA(2)-PSK Authentication ............................................................................. 290

Figure 194 Displaying Log Categories Example ................................................................. 307

Figure 195 Displaying Log Parameters Example ................................................................ 307

Figure 196 Configuration Text File Format: Column Descriptions ....................................... 313

Figure 197 Invalid Parameter Entered: Command Line Example ....................................... 314

Figure 198 Valid Parameter Entered: Command Line Example ......................................... 314

Figure 199 Internal SPTGEN FTP Download Example ..................................................... 315

Figure 200 Internal SPTGEN FTP Upload Example ........................................................... 315

Figure 201 Ideal Setup ........................................................................................................ 329

Figure 202 “Triangle Route” Problem .................................................................................. 330

Figure 203 IP Alias .............................................................................................................. 330

23

P-334U/P-335U User’s Guide

24

P-334U/P-335U User’s Guide

List of Tables

Table 1 Front Panel LEDs .................................................................................................. 35

Table 2 Status Screen Icon Key ......................................................................................... 39

Table 3 Web Configurator Status Screen ........................................................................... 40

Table 4 Screens Summary ................................................................................................. 42

Table 5 Summary: DHCP Table ......................................................................................... 44

Table 6 Summary: VPN Monitor ......................................................................................... 46

Table 7 Summary: Wireless Association List ..................................................................... 47

Table 8 Wizard Step 1: System Information ....................................................................... 51

Table 9 Wizard Step 2: Wireless LAN ................................................................................ 52

Table 10 Wizard Step 2: Basic(WEP) Security ................................................................... 53

Table 11 Wizard Step 2: Extend(WPA-PSK or WPA2-PSK) Security ................................. 54

Table 12 Wizard Step 2: OTIST .......................................................................................... 55

Table 13 Wizard Step 3: ISP Parameters ........................................................................... 56

Table 14 Wizard Step 3: PPPoE Connection ..................................................................... 58

Table 15 Wizard Step 3: PPTP Connection ........................................................................ 59

Table 16 Wizard Step 3: Your IP Address .......................................................................... 60

Table 17 Private IP Address Ranges ................................................................................. 60

Table 18 Wizard Step 3: WAN IP and DNS Server Addresses .......................................... 62

Table 19 Example of Network Properties for LAN Servers with Fixed IP Addresses ......... 63

Table 20 Wizard Step 3: WAN MAC Address ..................................................................... 64

Table 21 Wizard Step 4: Bandwidth Management ............................................................. 64

Table 22 Types of Encryption for Each Type of Authentication .......................................... 69

Table 23 Wireless General ................................................................................................. 71

Table 24 Wireless No Security ........................................................................................... 72

Table 25 Wireless: Static WEP Encryption ......................................................................... 73

Table 26 Wireless: WPA-PSK/WPA2-PSK ......................................................................... 75

Table 27 Wireless: WPA/WPA2 .......................................................................................... 76

Table 28 OTIST .................................................................................................................. 79

Table 29 MAC Address Filter ............................................................................................. 82

Table 30 Advanced .............................................................................................................83

Table 31 Ethernet Encapsulation ....................................................................................... 96

Table 32 PPPoE Encapsulation ......................................................................................... 99

Table 33 PPTP Encapsulation ............................................................................................ 102

Table 34 Advanced .............................................................................................................104

Table 35 LAN IP ................................................................................................................. 107

Table 36 LAN IP Alias ........................................................................................................ 108

25

P-334U/P-335U User’s Guide

Table 37 Advanced LAN ..................................................................................................... 108

Table 38 DHCP Server General ......................................................................................... 111

Table 39 DHCP Server Advanced ...................................................................................... 113

Table 40 Client List ............................................................................................................. 114

Table 41 NAT General ........................................................................................................ 117

Table 42 NAT Application ................................................................................................... 118

Table 43 NAT Advanced ..................................................................................................... 122

Table 44 Dynamic DNS ...................................................................................................... 126

Table 45 Firewall General .................................................................................................. 129

Table 46 Firewall Services ................................................................................................. 130

Table 47 Content Filter: Filter ............................................................................................. 134

Table 48 Content Filter: Schedule ...................................................................................... 136

Table 49 VPN Example: Matching ID Type and Content .................................................... 142

Table 50 VPN Example: Mismatching ID Type and Content .............................................. 142

Table 51 Security > VPN > Summary ................................................................................. 148

Table 52 Security > VPN > Rule Setup: IKE (Basic) .......................................................... 149

Table 53 Security > VPN > Rule Setup: IKE (Advanced) ................................................... 155

Table 54 Security > VPN > Rule Setup: Manual ................................................................ 161

Table 55 SECURITY > VPN > SA Monitor ......................................................................... 165

Table 56 Security > VPN > Global Setting ......................................................................... 165

Table 57 Telecommuters Sharing One VPN Rule Example ............................................... 166

Table 58 Telecommuters Using Unique VPN Rules Example ............................................ 167

Table 59 IP Static Route ..................................................................................................... 170

Table 60 Static Route Setup ............................................................................................... 171

Table 61 Application and Subnet-based Bandwidth Management Example ...................... 174

Table 62 Bandwidth Management Priorities ....................................................................... 175

Table 63 Media Bandwidth Management Setup: Services ................................................. 175

Table 64 Commonly Used Services ................................................................................... 176

Table 65 Bandwidth Management Priority with Default Classes ........................................ 178

Table 66 Bandwidth Management: General ....................................................................... 179

Table 67 Bandwidth Management: Advanced .................................................................... 181

Table 68 Bandwidth Management Rule Configuration: Pre-defined Service ..................... 182

Table 69 Bandwidth Management Rule Configuration: User-defined Service ................... 183

Table 70 WWW Remote Management ............................................................................... 186

Table 71 Telnet Remote Management ............................................................................... 187

Table 72 FTP Remote Management .................................................................................. 188

Table 73 DNS Remote Management ................................................................................. 189

Table 74 Configuring UPnP ................................................................................................ 193

Table 75 Configuring Print Server ...................................................................................... 200

Table 76 System General ................................................................................................... 216

Table 77 Time Setting ........................................................................................................ 217

Table 78 View Logs ............................................................................................................220

Table 79 Log Settings .........................................................................................................221

26

P-334U/P-335U User’s Guide

Table 80 Maintenance Firmware Upload ............................................................................ 223

Table 81 Maintenance Restore Configuration .................................................................... 225

Table 82 Config Mode: Advanced Screens ........................................................................ 229

Table 83 Troubleshooting Starting Up Your ZyXEL Device ................................................ 231

Table 84 Troubleshooting the LAN ..................................................................................... 231

Table 85 Troubleshooting the WAN .................................................................................... 232

Table 86 Troubleshooting Accessing the ZyXEL Device .................................................... 233

Table 87 Troubleshooting Restricted Web Pages and Keyword Blocking .......................... 233

Table 88 Troubleshooting the Password ............................................................................ 234

Table 89 Troubleshooting Telnet ........................................................................................ 234

Table 90 Troubleshooting the Print Server ......................................................................... 235

Table 91 Hardware Specifications ...................................................................................... 245

Table 92 Firmware Specifications ....................................................................................... 245

Table 93 Print Server Interface ........................................................................................... 249

Table 94 Print Server Requirements and Specifications .................................................... 249

Table 95 Compatible USB Printers ..................................................................................... 250

Table 96 Classes of IP Addresses ..................................................................................... 271

Table 97 Allowed IP Address Range By Class ................................................................... 272

Table 98 “Natural” Masks .................................................................................................. 272

Table 99 Alternative Subnet Mask Notation ....................................................................... 273

Table 100 Two Subnets Example ....................................................................................... 273

Table 101 Subnet 1 ............................................................................................................274

Table 102 Subnet 2 ............................................................................................................274

Table 103 Subnet 1 ............................................................................................................275

Table 104 Subnet 2 ............................................................................................................275

Table 105 Subnet 3 ............................................................................................................275

Table 106 Subnet 4 ............................................................................................................276

Table 107 Eight Subnets .................................................................................................... 276

Table 108 Class C Subnet Planning ................................................................................... 276

Table 109 Class B Subnet Planning ................................................................................... 277

Table 110 IEEE 802.11g ..................................................................................................... 283

Table 111 Wireless Security Levels .................................................................................... 284

Table 112 Comparison of EAP Authentication Types ......................................................... 287

Table 113 Wireless Security Relational Matrix ................................................................... 291

Table 114 System Maintenance Logs ................................................................................ 293

Table 115 System Error Logs ............................................................................................. 294

Table 116 Access Control Logs .......................................................................................... 294

Table 117 TCP Reset Logs ................................................................................................ 295

Table 118 Packet Filter Logs .............................................................................................. 295

Table 119 ICMP Logs ......................................................................................................... 296

Table 120 CDR Logs .......................................................................................................... 296

Table 121 PPP Logs ........................................................................................................... 296

Table 122 UPnP Logs ........................................................................................................ 297

27

P-334U/P-335U User’s Guide

Table 123 Content Filtering Logs ....................................................................................... 297

Table 124 Attack Logs ........................................................................................................ 298

Table 125 IPSec Logs ........................................................................................................ 299

Table 126 IKE Logs ............................................................................................................299

Table 127 PKI Logs ............................................................................................................302

Table 128 Certificate Path Verification Failure Reason Codes ........................................... 303

Table 129 802.1X Logs ...................................................................................................... 304

Table 130 ACL Setting Notes ............................................................................................. 305

Table 131 ICMP Notes ....................................................................................................... 305

Table 132 Syslog Logs ....................................................................................................... 306

Table 133 RFC-2408 ISAKMP Payload Types ................................................................... 306

Table 134 Examples of Services ........................................................................................ 309

Table 135 Abbreviations Used in the Example Internal SPTGEN Screens Table .............. 316

Table 136 Menu 1 General Setup ...................................................................................... 316

Table 137 Menu 3 ............................................................................................................... 316

Table 138 Menu 4 Internet Access Setup .......................................................................... 320

Table 139 Menu 12 .............................................................................................................321

Table 140 Menu 15 SUA Server Setup .............................................................................. 322

Table 141 Menu 21.1 Filter Set #1 ..................................................................................... 323

Table 142 Menu 21.1 Filer Set #2, ..................................................................................... 325

Table 143 Menu 23 System Menus .................................................................................... 326

Table 144 Menu 24.11 Remote Management Control ........................................................ 327

Table 145 Command Examples ......................................................................................... 328

28

P-334U/P-335U User’s Guide

Preface

Congratulations on your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This
manual is designed to guide you through the configuration of your P-334U or P-335U for its
various applications.

About This User's Guide

This User’s Guide is designed to guide you through the configuration of your ZyXEL Device
using the web configurator.

Note: Use the web configurator or command interpreter interface to configure your

ZyXEL Device. Not all features can be configured through all interfaces.

Related Documentation

• Supporting Disk

Refer to the included CD for support documents.

• Quick Start Guide

The Quick Start Guide is designed to help you get up and running right away. They
contain connection information and instructions on getting started.

• Web Configurator Online Help

Embedded web help for descriptions of individual screens and supplementary
information.

• ZyXEL Glossary and Web Site

Please refer to www.zyxel.com for an online glossary of networking terms and additional
support documentation.

User Guide Feedback

Help us help you! E-mail all User Guide-related comments, questions or suggestions for
improvement to [e-mail] or send regular mail to The Technical Writing
Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park,
Hsinchu, 300, Taiwan. Thank you!

Syntax Conventions

• “Enter” means for you to type one or more characters. “Select” or “Choose” means for
you to use one predefined choice.

• Mouse action sequences are denoted using a right angle bracket ( > ). For example, “In
Windows, click Start > Settings > Control Panel” means first click the Start button,
then point your mouse pointer to Settings and then click Control Panel.

• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Preface 29

P-334U/P-335U User’s Guide

• The P-334U or P-335U series may be referred to as the “ZyXEL Device” in this User’s
Guide.

Graphics Icons Key

ZyXEL Device Computer Notebook computer

Server DSLAM Firewall

Modem Switch Router

Wireless Signal

30 Preface

Getting to Know Your ZyXEL

This chapter introduces the main features and applications of the ZyXEL Device.

1.1 ZyXEL Device Overview

The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between
the Internet and LAN’s.

You can configure firewall and/or content filtering for secure Internet access. You can also use
media bandwidth management to efficiently manage traffic on your network. On the P-335U,
you can also set up a VPN tunnel that gives you a secure connection to another computer or
network without the need (and expense) for leased lines between sites.

P-334U/P-335U User’s Guide

CHAPTER 1

Device

The P-334U or P-335U supports the IEEE 802.11a, b and g standards, so that either IEEE

802.11b/g or IEEE 802.11a compatible clients can wirelessly accesss the P-334U or P-335U
or the wired network behind it.

The P-335U provides a USB port to connect to a USB v1.1 compliant printer and can act as a
print server. The computers connected to the P-335U can share a priner without a dedicated or
standalone print server.

Note: Only use firmware for your ZyXEL Device’s specific model.

See Appendix A on page 245 for a complete list of features.

1.2 Applications for the ZyXEL Device

Here are some examples of what you can do with your ZyXEL Device.

See the Quick Start Guide for instructions on hardware connections.

1.2.1 Secure Broadband Internet Access via Cable or DSL Modem

For Internet access, connect the WAN Ethernet port to your existing Internet access gateway
(company network, or your cable or DSL modem for example). Connect computers or servers
to the LAN ports for shared Internet access.

Chapter 1 Getting to Know Your ZyXEL Device 31

P-334U/P-335U User’s Guide

The ZyXEL Device guarantees not only high speed Internet access, but secure internal
network protection and traffic management as well.

Figure 1 Secure Internet Access via Cable or DSL Modem

You can also configure firewall and content filtering on the ZyXEL Device for secure Internet
access. When the firewall is on, all incoming traffic from the Internet to your network is
blocked unless it is initiated from your network. This means that probes from the outside to
your network are not allowed, but you can safely browse the Internet and download files for
example.

Use content filtering to block access to web sites containing keywords that you specify. You
can define time periods and days during which content filtering is enabled and include or
exclude particular computers on your network from content filtering. For example, you could
block access to certain web sites for the kids.

Use bandwidth management to efficiently manage traffic on your network by giving priority
to certain types of traffic and/or to particular computers. For example, you could make sure
that voice over Internet calls get enough bandwidth in your network, and/or limit bandwidth
devoted to the boss’s excessive file downloading.

1.2.2 Wireless LAN Application

Add a wireless LAN to your existing network without expensive network cables. Wireless
clients can move freely anywhere in the coverage area and use resources on the wired network.

Figure 2 WLAN Application Example

32 Chapter 1 Getting to Know Your ZyXEL Device

P-334U/P-335U User’s Guide

1.2.3 Print Server and Router Combined Application (P-335U Only)

The P-335U’s built-in print server allows your network’s computers to share a printer. Simply
connect a USB printer to the USB port on the ZyXEL Device. The following figure shows
how you can setup your printer to operate on a LAN using the P-335U as a router and print
server.

Figure 3 Print Server Application

1.2.4 VPN Application (P-335U Only)

The P-335U VPN is an ideal cost-effective way to connect branch offices, business partners
and telecommuters over the Internet without the need (and expense) for leased lines between
sites.

Figure 4 VPN Application

1.3 Ways to Manage the ZyXEL Device

Use any of the following methods to manage the ZyXEL Device.

• Web Configurator. This is recommended for everyday management of the ZyXEL Device
using a (supported) web browser.

• FTP for firmware upgrades and configuration backup/restore (Chapter 16 on page 185)

• SPTGEN. SPTGEN is a text configuration file that allows you to configure the device by
uploading an SPTGEN file. This is especially convenient if you need to configure many
devices of the same type.

Chapter 1 Getting to Know Your ZyXEL Device 33

P-334U/P-335U User’s Guide

1.4 Good Habits for Managing Your ZyXEL Device

Here are some things you should do regularly.

• Change the password. Use a password that’s not easy to guess and that consists of
different types of characters, such as numbers and letters.

• Write down the password and put it in a safe place.

• Back up the configuration (and make sure you know how to restore it). Restoring an
earlier working configuration may be useful if the device becomes unstable or even
crashes. If you forget your password, you will have to reset the ZyXEL Device to its
factory default settings. If you backed up an earlier configuration file, you would not have
to totally re-configure the ZyXEL Device. You could simply restore your last
configuration.

1.4.1 Front Panel LEDs

Figure 5 Front Panel (P-334U)

Figure 6 Front Panel (P-335U)

34 Chapter 1 Getting to Know Your ZyXEL Device

P-334U/P-335U User’s Guide

The following table describes the LEDs.

Table 1 Front Panel LEDs

LED COLOR STATUS DESCRIPTION

PWR Green On The ZyXEL Device is receiving power and functioning

properly.

Blinking The ZyXEL Device is performing testing.

Red On Power to the ZyXEL Device is too low.

None Off The ZyXEL Device is not receiving power.

LAN 1-4 Green On The ZyXEL Device has a successful 10Mb Ethernet

connection.

Blinking The ZyXEL Device is sending/receiving data.

Amber On The ZyXEL Device has a successful 100Mb Ethernet

connection.

Blinking The ZyXEL Device is sending/receiving data.

None Off The LAN is not connected.

WAN Green On The ZyXEL Device has a successful 10Mb WAN

Blinking The ZyXEL Device is sending/receiving data.

Amber On The ZyXEL Device has a successful 100Mb Ethernet

Blinking The ZyXEL Device is sending/receiving data.

None Off The WAN connection is not ready, or has failed.

A/G Green On The ZyXEL Device is in IEEE 802.11b or g wireless LAN

Blinking The ZyXEL Device is sending/receiving data through the

Amber On The ZyXEL Device is in IEEE 802.11a wireless LAN

Blinking The ZyXEL Device is sending/receiving data through the

None Off The wireless LAN is not ready or has failed.

OTIST Green Blinking OTIST is in progress

On OTIST is activated and the wireless security settings are

None Off OTIST is not activated or WLAN settings are manually

USB

(P-335U only)

Green On The print server has a successful connection.

Off The print server connection is not ready, or has failed.

Blinking The print server is sending/receiving data.

connection.

connection.

mode, but is not sending/receiving data through the
wireless LAN.

IEEE 802.11b or g wireless LAN.

mode, but is not sending/receiving data through the
wireless LAN.

IEEE 802.11a wireless LAN.

given to a wireless client. The LED remains on unless
the WLAN settings are changed.

configured after OTIST is successful.

Chapter 1 Getting to Know Your ZyXEL Device 35

P-334U/P-335U User’s Guide

36 Chapter 1 Getting to Know Your ZyXEL Device

Introducing the Web

This chapter describes how to access the ZyXEL Device web configurator and provides an
overview of its screens.

2.1 Web Configurator Overview

The web configurator is an HTML-based management interface that allows easy ZyXEL
Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or
Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768
pixels.

P-334U/P-335U User’s Guide

CHAPTER 2

Configurator

In order to use the web configurator you need to allow:

• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.

• JavaScripts (enabled by default).

• Java permissions (enabled by default).

Refer to the Troubleshooting chapter to see how to make sure these functions are allowed in
Internet Explorer.

2.2 Accessing the Web Configurator

1 Make sure your ZyXEL Device hardware is properly connected and prepare your

computer/computer network to connect to the ZyXEL Device (refer to the Quick Start
Guide).

2 Launch your web browser.

3 Type "192.168.1.1" as the URL.

4 Type "1234" (default) as the password and click Login. In some versions, the default

password appears automatically - if this is the case, click Login.

5 You should see a screen asking you to change your password (highly recommended) as

shown next. Type a new password (and retype it to confirm) and click Apply or click
Ignore.

Chapter 2 Introducing the Web Configurator 37

P-334U/P-335U User’s Guide

Figure 7 Change Password Screen

Note: The management session automatically times out when the time period set in

the Administrator Inactivity Timer field expires (default five minutes). Simply
log back into the ZyXEL Device if this happens to you.

2.3 Resetting the ZyXEL Device

If you forget your password or cannot access the web configurator, you will need to use the
RESET button at the back of the ZyXEL Device to reload the factory-default configuration
file. This means that you will lose all configurations that you had previously and the password
will be reset to “1234”.

2.3.1 Procedure to Use the Reset Button

1 Make sure the PWR LED is on (not blinking).

2 Press the RESET button for ten seconds or until the PWR LED begins to blink and then

release it. When the PWR LED begins to blink, the defaults have been restored and the
ZyXEL Device restarts.

2.4 Navigating the Web Configurator

We use the P-334U web screens in this guide as an example. Screens vary slightly for different
ZyXEL Device models.

The following summarizes how to navigate the web configurator from the Status screen.

38 Chapter 2 Introducing the Web Configurator

Figure 8 Web Configurator Status Screen

P-334U/P-335U User’s Guide

The following table describes the icons shown in the Status screen.

Table 2 Status Screen Icon Key

ICON DESCRIPTION

Select a language from the drop-down list box to have the web configurator display in that
language.

Click this icon to open a web help page relevant to the screen you are currently
configuring.

Click this icon to open the setup wizard. The ZyXEL Device has a connection wizard and
a bandwidth management wizard.

Click this icon to view copyright and a link for related product information.

Click this icon at any time to exit the web configurator.

Chapter 2 Introducing the Web Configurator 39

P-334U/P-335U User’s Guide

Table 2 Status Screen Icon Key

ICON DESCRIPTION

Select a number of seconds or None from the drop-down list box to refresh all screen
statistics automatically at the end of every time interval or to not refresh the screen
statistics.

Click this button to refresh the status screen statistics.

The following table describes the labels shown in the Status screen.

Table 3 Web Configurator Status Screen

LABEL DESCRIPTION

Device Information

System Name This is the System Name you enter in the Maintenance > System > General

screen. It is for identification purposes.

Firmware Version This is the ZyNOS firmware version and the date created. ZyNOS is ZyXEL's

WAN Information

- MAC Address This shows the WAN Ethernet adapter MAC Address of your device.

- IP Address This shows the WAN port’s IP address.

- IP Subnet Mask This shows the WAN port’s subnet mask.

- DHCP This shows the WAN port’s DHCP role - Client or None.

LAN Information

- MAC Address This shows the LAN Ethernet adapter MAC Address of your device.

- IP Address This shows the LAN port’s IP address.

- IP Subnet Mask This shows the LAN port’s subnet mask.

- DHCP This shows the LAN port’s DHCP role - Server, Relay or None.

WLAN Information

- MAC Address This shows the wireless adapter MAC Address of your device.

- Name(SSID) This shows a descriptive name used to identify the ZyXEL Device in the wireless

- Channel This shows the channel number which the ZyXEL Device uses over the wireless LAN.

- Security Mode This shows the level of wireless security the ZyXEL Device is using.

- 802.11 Mode This shows the wireless standard.

System Status

System Uptime This is the total time the ZyXEL Device has been on.

Current Date/Time This field displays your ZyXEL Device’s present date and time along with the

System Resource

proprietary Network Operating System design.

LAN.

difference from the Greenwich Mean Time (GMT) zone. The difference from GMT is
based on the time zone. It is also adjusted for Daylight Saving Time if you set the
ZyXEL Device to use it.

40 Chapter 2 Introducing the Web Configurator

P-334U/P-335U User’s Guide

Table 3 Web Configurator Status Screen

LABEL DESCRIPTION

- CPU Usage This number shows how many kilobytes of the heap memory the ZyXEL Device is
using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL
Network Operating System) and is thus available for running processes like NAT and
the firewall.

The bar displays what percent of the ZyXEL Device's heap memory is in use. The bar
turns from green to red when the maximum is being approached.

- Memory Usage This number shows the ZyXEL Device's total heap memory (in kilobytes).
The bar displays what percent of the ZyXEL Device's heap memory is in use. The bar

turns from green to red when the maximum is being approached.

System Setting

- Firewall This shows whether the firewall is active or not.

- Bandwidth Management This shows whether the bandwidth management is active or not.

- UPnP This shows whether UPnP is active or not.

- Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced)
or not (Basic).

Interface Status

Interface This displays the ZyXEL Device port types. The port types are: WAN, LAN and

WLAN.

Status For the LAN and WAN ports, this field displays Down (line is down) or Up (line is up

or connected).
For the WLAN, it displays Up when the WLAN is enabled or Down when the WLAN is

disabled.

Rate For the LAN ports, this displays the port speed and duplex setting or N/A when the

line is disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using

Ethernet encapsulation and Idle (line (ppp) idle), Dial (starting to trigger a call) and
Drop (dropping a call) if you're using PPPoE or PPTP encapsulation. This field
displays N/A when the line is disconnected.

For the WLAN, it displays the connection type (54M or 11 M) when the WLAN is
enabled and N/A when the WLAN is disabled.

Summary

BW MGNT Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and allotments.

DHCP Table Use this screen to view current DHCP client information.

Packet Statistics Use this screen to view port status and packet specific statistics.

VPN Monitor Use this screen to view the active VPN connections.

WLAN Station Status Use this screen to view the wireless stations that are currently associated to the

ZyXEL Device.

2.4.1 Navigation Panel

After you enter the password, use the sub-menus on the navigation panel to configure ZyXEL
Device features.

Chapter 2 Introducing the Web Configurator 41

P-334U/P-335U User’s Guide

The following table describes the sub-menus.

Table 4 Screens Summary

LINK TAB FUNCTION

Status This screen shows the ZyXEL Device’s general device, system and

interface status information. Use this screen to access the wizard, and
summary statistics tables.

Network

Wireless LAN General Use this screen to configure wireless LAN.

OTIST This screen allows you to assign wireless clients the ZyXEL Device’s

wireless security settings.

MAC Filter Use the MAC filter screen to configure the ZyXEL Device to block access to

devices or block the devices from accessing the ZyXEL Device.

Advanced This screen allows you to configure advanced wireless settings.

WAN Internet

Connection

Advanced Use this screen to configure DNS servers and other advanced properties.

LAN IP Use this screen to configure LAN IP address and subnet mask.

IP Alias Use this screen to partition your LAN interface into subnets.

Advanced Use this screen to enable other advanced properties.

DHCP Server General Use this screen to enable the ZyXEL Device’s DHCP server.

Advanced Use this screen to assign IP addresses to specific individual computers

Client List Use this screen to view current DHCP client information and to always

NAT General Use this screen to enable NAT.

Application Use this screen to configure servers behind the ZyXEL Device.

Advanced Use this screen to change your ZyXEL Device’s port triggering settings.

DDNS General Use this screen to set up dynamic DNS.

Security

Firewall General Use this screen to activate/deactivate the firewall.

Services This screen shows a summary of the firewall rules, and allows you to edit/

Content Filter Filter Use this screen to block certain web features and sites containing certain

Schedule Use this screen to set the days and times for the ZyXEL Device to perform

VPN
(P-335U only)

Management

Static Route IP Static Route Use this screen to configure IP static routes.

Summary Use this screen to view the rule summary

Rule Setup Use this screen to configure VPN connections.

SA Monitor Use this screen to display active VPN connections.

Global Setting Use this screen to allow NetBIOS traffic through VPN tunnels.

This screen allows you to configure ISP parameters, WAN IP address
assignment and the WAN MAC address.

based on their MAC addresses and to have DNS servers assigned by the
DHCP server.

assign an IP address to a MAC address (and host name).

add a firewall rule.

keywords in the URL.

content filtering.

42 Chapter 2 Introducing the Web Configurator

Table 4 Screens Summary

LINK TAB FUNCTION

P-334U/P-335U User’s Guide

Bandwidth
MGMT

Remote MGMT WWW Use this screen to configure through which interface(s) and from which IP

UPnP General Use this screen to enable UPnP on the ZyXEL Device.

Print Server
(P-335U only)

Maintenance

System General This screen contains administrative.

Logs View Log Use this screen to view the logs for the categories that you selected.

Tools Firmware Use this screen to upload firmware to your ZyXEL Device.

Config Mode General This screen allows you to display or hide the advanced screens or features.

General Use this screen to enable bandwidth management.

Advanced Use this screen to set the upstrem bandwidth and edit a bandwidth

management rule.

Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and

allotments.

address(es) users can use HTTP to manage the ZyXEL Device.

Te ln e t Use this screen to configure through which interface(s) and from which IP

address(es) users can use Telnet to manage the ZyXEL Device.

FTP Use this screen to configure through which interface(s) and from which IP

address(es) users can use FTP to access the ZyXEL Device.

DNS Use this screen to configure through which interface(s) and from which IP

address(es) users can send DNS queries to the ZyXEL Device.

Print Server Use this screen to view the printer model name and to monitor the printer

status.

Time Setting Use this screen to change your ZyXEL Device’s time and date.

Log Settings Use this screen to change your ZyXEL Device’s log settings.

Configuration Use this screen to backup and restore the configuration or reset the factory

defaults to your ZyXEL Device.

Restart This screen allows you to reboot the ZyXEL Device without turning the

power off.

2.4.2 Summary: Bandwidth Management Monitor

Select the BW MGMT Monitor (Details...) hyperlink in Status screen. View the bandwidth
usage of the WAN configured bandwidth rules. This is also shown as bandwidth usage over
the bandwidth budget for each rule. The gray section of the bar represents the percentage of
unused bandwidth and the blue color represents the percentage of bandwidth in use.

Chapter 2 Introducing the Web Configurator 43

P-334U/P-335U User’s Guide

Figure 9 Summary: BW MGMT Monitor

2.4.3 Summary: DHCP Table

DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual
clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL
Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device
provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have
another DHCP server on your LAN, or else the computer must be manually configured.

Click the DHCP Table (Details...) hyperlink in the Status screen. Read-only information here
relates to your DHCP status. The DHCP table shows current DHCP client information
(including IP Address, Host Name and MAC Address) of all network clients using the
ZyXEL Device’s DHCP server.

Figure 10 Summary: DHCP Table

The following table describes the labels in this screen.

Table 5 Summary: DHCP Table

LABEL DESCRIPTION

# This is the index number of the host computer.

IP Address This field displays the IP address relative to the # field listed above.

Host Name This field displays the computer host name.

44 Chapter 2 Introducing the Web Configurator

Table 5 Summary: DHCP Table (continued)

LABEL DESCRIPTION

MAC Address This field shows the MAC address of the computer with the name in the Host Name

field.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC

address is assigned at the factory and consists of six pairs of hexadecimal characters,
for example, 00:A0:C5:00:00:02.

Refresh Click Refresh to renew the screen.

2.4.4 Summary: Packet Statistics

Click the Packet Statistics (Details...) hyperlink in the Status screen. Read-only information
here includes port status and packet specific statistics. Also provided are "system up time" and
"poll interval(s)". The Poll Interval(s) field is configurable.

Figure 11 Summary: Packet Statistics

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Figure 12 Summary: Packet Statistics

LABEL DESCRIPTION

Port This is the WAN, LAN or WLAN port.

Status For the LAN ports, this displays the port speed and duplex setting or Down when

TxPkts This is the number of transmitted packets on this port.

RxPkts This is the number of received packets on this port.

Collisions This is the number of collisions on this port.

Tx B/s This displays the transmission speed in bytes per second on this port.

Chapter 2 Introducing the Web Configurator 45

the line is disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using

Ethernet encapsulation and Idle (line (ppp) idle), Dial (starting to trigger a call)
and Drop (dropping a call) if you're using PPPoE or PPTP encapsulation. This
field displays Down when the line is disconnected.

For the WLAN, it displays the connection type (54M or 11M) when the WLAN is
enabled and Down when the WLAN is disabled.

P-334U/P-335U User’s Guide

Figure 12 Summary: Packet Statistics

LABEL DESCRIPTION

Rx B/s This displays the reception speed in bytes per second on this port.

Up Time This is the total amount of time the line has been up.

System Up Time This is the total time the ZyXEL Device has been on.

Poll Interval(s) Enter the time interval for refreshing statistics in this field.

Set Interval Click this button to apply the new poll interval you entered in the Poll Interval(s)

Stop Click Stop to stop refreshing statistics, click Stop.

2.4.5 VPN Monitor

Click VPN Monitor (Details...) hyperlink in the Status screen. This screen displays read-only
information about the active VPN connections. A Security Association (SA) is the group of
security settings related to a specific VPN tunnel.

Figure 13 Summary: VPN Monitor

field.

The following table describes the labels in this screen.

Table 6 Summary: VPN Monitor

LABEL DESCRIPTION

# This is the security association index number.

Name This field displays the identification name for this VPN policy.

Encapsulation This field displays Tun nel or Transport mode.

IPSec Algorithm This field displays the security protocols used for an SA.

Both AH and ESP increase ZyXEL Device processing requirements and
communications latency (delay).

Refresh Click Refresh to redisplay the current screen.

2.4.6 Summary: Wireless Station Status

Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless
stations that are currently associated to the ZyXEL Device in the Association List screen.

46 Chapter 2 Introducing the Web Configurator

P-334U/P-335U User’s Guide

Figure 14 Summary: Wireless Association List

The following table describes the labels in this screen.

Table 7 Summary: Wireless Association List

LABEL DESCRIPTION

# This is the index number of an associated wireless station.

MAC Address This field displays the MAC address of an associated wireless station.

Association Time This field displays the time a wireless station first associated with the ZyXEL

Device.

Refresh Click Refresh to redisplay the current screen.

Chapter 2 Introducing the Web Configurator 47

P-334U/P-335U User’s Guide

48 Chapter 2 Introducing the Web Configurator

This chapter provides information on the Wizard setup screens in the web configurator.

3.1 Wizard Setup

The web configurator’s Wizard setup helps you configure your device to access the Internet.
Refer to your ISP (Internet Service Provider) checklist in the Quick Start Guide to know what
to enter in each field. Leave a field blank if you don’t have that information.

1 After you access the ZyXEL Device Web configurator, click the Go to Wizard setup

hyperlink.

You can click the Go to Advanced setup hyperlink to skip this wizard setup and
configure advanced features.

P-334U/P-335U User’s Guide

CHAPTER 3

Connection Wizard

Figure 15 Select Wizard or Advanced Mode

2 Choose your language from the drop-down list box.

3 Click the Next button to proceed to the next screen.

Chapter 3 Connection Wizard 49

P-334U/P-335U User’s Guide

Figure 16 Select a Language

4 Read the on-screen information and click Next.

Figure 17 Welcome to the Connection Wizard

3.2 Connection Wizard: STEP 1: System Information

System Information contains administrative and system-related information.

3.2.1 System Name

System Name is for identification purposes. However, because some ISPs check this name
you should enter your computer's "Computer Name".

• In Windows 95/98 click Start, Settings, Control Panel, Network. Click the
Identification tab, note the entry for the Computer Name field and enter it as the System
Name.

• In Windows 2000, click Start, Settings and Control Panel and then double-click
System. Click the Network Identification tab and then the Properties button. Note the
entry for the Computer name field and enter it as the System Name.

• In Windows XP, click Start, My Computer, View system information and then click
the Computer Name tab. Note the entry in the Full computer name field and enter it as
the ZyXEL Device System Name.

50 Chapter 3 Connection Wizard

3.2.2 Domain Name

The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave
this blank, the domain name obtained by DHCP from the ISP is used. While you must enter
the host name (System Name) on each individual computer, the domain name can be assigned
from the ZyXEL Device via DHCP.

Click Next to configure the ZyXEL Device for Internet access.

Figure 18 Wizard Step 1: System Information

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Table 8 Wizard Step 1: System Information

LABEL DESCRIPTION

System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network.

Enter a descriptive name. This name can be up to 30 alphanumeric characters long.
Spaces are not allowed, but dashes "-" and underscores "_" are accepted.

Domain Name Type the domain name (if you know it) here. If you leave this field blank, the ISP may

assign a domain name via DHCP. The domain name entered by you is given priority
over the ISP assigned domain name.

Back Click Back to display the previous screen.

Next Click Next to proceed to the next screen.

Exit Click Exit to close the wizard screen without saving.

3.3 Connection Wizard: STEP 2: Wireless LAN

Set up your wireless LAN using the following screen.

Chapter 3 Connection Wizard 51

P-334U/P-335U User’s Guide

Figure 19 Wizard Step 2: Wireless LAN

The following table describes the labels in this screen.

Table 9 Wizard Step 2: Wireless LAN

LABEL DESCRIPTION

Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless

LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the

same SSID in order to access the network.

Security Select a Security level from the drop-down list box.

Choose Auto to use OTIST to generate a pre-shared key and only if your wireless
clients support OTIST. If you choose this option, skip directly to section

Choose None to have no wireless LAN security configured. If you do not enable any
wireless security on your ZyXEL Device, your network is accessible to any wireless
networking device that is within range. If you choose this option, skip directly to section

3.3.3.

Choose Basic security if you want to configure WEP Encryption parameters. If you
choose this option, go directly to section

Choose Extend (WPA-PSK or WPA2-PSK) security to configure a Pre-Shared Key.
Choose this option only if your wireless clients support WPA-PSK or WPA2-PSK
respectively. If you choose this option, skip directly to section

Channel
Selection

Back Click Back to display the previous screen.

Next Click Next to proceed to the next screen.

Exit Click Exit to close the wizard screen without saving.

The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a
channel.

This field displays Auto which means the ZyXEL Device automatically scans for and
selects a channel which is not used by a nearby device.

3.3.1.

3.3.2.

3.3.3.

Note: The wireless stations and ZyXEL Device must use the same SSID, channel ID

and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is
enabled) or WPA2-PSK (if WPA2-PSK is enabled) for wireless communication.

52 Chapter 3 Connection Wizard

3.3.1 Basic(WEP) Security

Choose Basic(WEP) to setup WEP Encryption parameters.

Figure 20 Wizard Step 2: Basic(WEP) Security

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Table 10 Wizard Step 2: Basic(WEP) Security

LABEL DESCRIPTION

Passphrase Type a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL

Device automatically generates a WEP key.

WEP
Encryption

Chapter 3 Connection Wizard 53

Select 64-bit WEP, 128-bit WEP or 256-bit WEP to allow data encryption.

ASCII Select this option in order to enter ASCII characters as the WEP keys.

HEX Select this option to enter hexadecimal characters as the WEP keys.

The preceding “0x” is entered automatically.

P-334U/P-335U User’s Guide

Table 10 Wizard Step 2: Basic(WEP) Security

LABEL DESCRIPTION

Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless

stations must use the same WEP key for data transmission.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal

characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal

characters ("0-9", "A-F").
If you chose 256-bit WEP, then enter 29 ASCII characters or 58 hexadecimal

characters ("0-9", "A-F").
You must configure at least one key, only one key can be activated at any one time.

The default key is key 1.

Back Click Back to display the previous screen.

Next Click Next to proceed to the next screen.

Exit Click Exit to close the wizard screen without saving.

3.3.2 Extend(WPA-PSK or WPA2-PSK) Security

Choose Extend(WPA-PSK) or Extend(WPA2-PSK) security in the Wireless LAN setup
screen to set up a Pre-Shared Key.

Figure 21 Wizard Step 2: Extend(WPA-PSK or WPA2-PSK) Security

The following table describes the labels in this screen.

Tabl e 11 Wizard Step 2: Extend(WPA-PSK or WPA2-PSK) Security

LABEL DESCRIPTION

Pre-Shared
Key

Back Click Back to display the previous screen.

Next Click Next to proceed to the next screen.

Exit Click Exit to close the wizard screen without saving.

Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure
wireless connection by configuring WPA in the wireless LAN screens. You need to
configure an authentication server to do this.

54 Chapter 3 Connection Wizard

3.3.3 OTIST

The following screen allows you to enable ZyXEL Device One-Touch Intelligent Security
Technology (OTIST). One-Touch Intelligent Security Technology (OTIST) allows your
ZyXEL Device to assign wireless clients the ZyXEL Device’s SSID and static WEP or WPA­PSK encryption settings. The wireless client must also support OTIST and have OTIST
enabled. See

Figure 22 Wizard Step 2: OTIST

P-334U/P-335U User’s Guide

Section 4.4 on page 77 for more information.

The following table describes the labels in this screen.

Table 12 Wizard Step 2: OTIST

LABEL DESCRIPTION

Do you want to
enable OTIST?

Setup Key The default OTIST Setup Key is “01234567”. This key can be changed in the

Back Click Back to display the previous screen.

Next Click Next to proceed to the next screen.

Exit Click Exit to close the wizard screen without saving.

Select the Yes radio button and click Next to proceed with the setup wizard and
enable OTIST only when you click Finish in the final wizard screen.

Click No and then Next to proceed to the following screen.

web configurator. Be sure to use the same OTIST Setup Key on the ZyXEL
Device and wireless clients.

Refer to the chapter on wireless LAN for more information.

Chapter 3 Connection Wizard 55

P-334U/P-335U User’s Guide

3.4 Connection Wizard: STEP 3: Internet Configuration

The ZyXEL Device offers three Internet connection types. They are Ethernet, PPP over
Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using.

If the wizard does not detect a connection type, you must select one from the drop-down list
box. Check with your ISP to make sure you use the correct type.

This wizard screen varies according to the connection type that you select.

Figure 23 Wizard Step 3: ISP Parameters.

The following table describes the labels in this screen,

Table 13 Wizard Step 3: ISP Parameters

CONNECTION TYPE DESCRIPTION

Ethernet Select the Ethernet option when the WAN port is used as a regular Ethernet.

PPPoE Select the PPP over Ethernet option for a dial-up connection. If your ISP

gave you a an IP address and/or subnet mask, then select PPTP.

PPTP Select the PPTP option for a dial-up connection.

3.4.1 Ethernet Connection

Choose Ethernet when the WAN port is used as a regular Ethernet.

56 Chapter 3 Connection Wizard

Figure 24 Wizard Step 3: Ethernet Connection

3.4.2 PPPoE Connection

Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an
IETF (Internet Engineering Task Force) standard specifying how a host personal computer
interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access
to high-speed data networks.

P-334U/P-335U User’s Guide

For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for instance, RADIUS).

One of the benefits of PPPoE is the ability to let end users access one of multiple network
services, a function known as dynamic service selection. This enables the service provider to
easily create and offer new IP services for specific users.

Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it
requires no specific configuration of the broadband modem at the subscriber’s site.

By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LAN's computers will have
Internet access.

Refer to the appendix for more information on PPPoE.

Chapter 3 Connection Wizard 57

P-334U/P-335U User’s Guide

Figure 25 Wizard Step 3: PPPoE Connection

The following table describes the labels in this screen.

Table 14 Wizard Step 3: PPPoE Connection

LABEL DESCRIPTION

ISP Parameter for Internet Access

Connection Type Select the PPP over Ethernet option for a dial-up connection.

Service Name Type the name of your service provider.

User Name Type the user name given to you by your ISP.

Password Type the password associated with the user name above.

Back Click Back to return to the previous screen.

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

3.4.3 PPTP Connection

Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data
from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/
IP-based networks.

PPTP supports on-demand, multi-protocol, and virtual private networking over public
networks, such as the Internet.

Refer to the appendix for more information on PPTP.

Note: The ZyXEL Device supports one PPTP server connection at any given time.

58 Chapter 3 Connection Wizard

Figure 26 Wizard Step 3: PPTP Connection

P-334U/P-335U User’s Guide

The following table describes the fields in this screen

Table 15 Wizard Step 3: PPTP Connection

LABEL DESCRIPTION

ISP Parameters for Internet Access

Connection Type Select PPTP from the drop-down list box. To configure a PPTP client, you must

configure the User Name and Password fields for a PPP connection and the
PPTP parameters for a PPTP connection.

User Name Type the user name given to you by your ISP.

Password Type the password associated with the User Name above.

PPTP Configuration

Get automatically
from ISP

Use fixed IP
address

My IP Address Type the (static) IP address assigned to you by your ISP.

My IP Subnet
Mask

Server IP Address Type the IP address of the PPTP server.

Connection ID/
Name

Back Click Back to return to the previous screen.

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

Select this radio button if your ISP did not assign you a fixed IP address.

Select this radio button, provided by your ISP to give the ZyXEL Device a fixed,
unique IP address.

Type the subnet mask assigned to you by your ISP (if given).

Enter the connection ID or connection name in this field. It must follow the "c:id"
and "n:name" format. For example, C:12 or N:My ISP.

This field is optional and depends on the requirements of your ISP.

Chapter 3 Connection Wizard 59

P-334U/P-335U User’s Guide

3.4.4 Your IP Address

The following wizard screen allows you to assign a fixed IP address or give the ZyXEL
Device an automatically assigned IP address depending on your ISP.

Figure 27 Wizard Step 3: Your IP Address

The following table describes the labels in this screen

Table 16 Wizard Step 3: Your IP Address

LABEL DESCRIPTION

Get automatically from
your ISP

Use fixed IP address
provided by your ISP

Back Click Back to return to the previous screen.

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

Select this option If your ISP did not assign you a fixed IP address. This is
the default selection. If you choose this option, skip directly to section

Select this option if you were given IP address and/or DNS server settings
by the ISP. The fixed IP address should be in the same subnet as your
broadband modem or router.

3.4.5 WAN IP Address Assignment

Every computer on the Internet must have a unique IP address. If your networks are isolated
from the Internet, for instance, only between your two branch offices, you can assign any IP
addresses to the hosts without problems. However, the Internet Assigned Numbers Authority
(IANA) has reserved the following three blocks of IP addresses specifically for private
networks.

Table 17 Private IP Address Ranges

3.4.9.

10.0.0.0 - 10.255.255.255

172.16.0.0 - 172.31.255.255

192.168.0.0 - 192.168.255.255

60 Chapter 3 Connection Wizard

You can obtain your IP address from the IANA, from an ISP or have it assigned by a private
network. If you belong to a small organization and your Internet access is through an ISP, the
ISP can provide you with the Internet addresses for your local networks. On the other hand, if
you are part of a much larger organization, you should consult your network administrator for
the appropriate IP addresses.

Note: Regardless of your particular situation, do not create an arbitrary IP address;

always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, Address Allocation for Private Internets
and RFC 1466, Guidelines for Management of IP Address Space.

3.4.6 IP Address and Subnet Mask

Similar to the way houses on a street share a common street name, so too do computers on a
LAN share one common network number.

Where you obtain your network number depends on your particular situation. If the ISP or
your network administrator assigns you a block of registered IP addresses, follow their
instructions in selecting the IP addresses and the subnet mask.

P-334U/P-335U User’s Guide

If the ISP did not explicitly give you an IP network number, then most likely you have a single
user account and the ISP will assign you a dynamic IP address when the connection is
established. The Internet Assigned Number Authority (IANA) reserved this block of addresses
specifically for private use; please do not use any other number unless you are told otherwise.
Let's say you select 192.168.1.0 as the network number; which covers 254 individual
addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the
first three numbers specify the network number while the last number identifies an individual
computer on that network.

Once you have decided on the network number, pick an IP address that is easy to remember,
for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your
network is using that IP address.

The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device
will compute the subnet mask automatically based on the IP address that you entered. You
don't need to change the subnet mask computed by the ZyXEL Device unless you are
instructed to do otherwise.

3.4.7 DNS Server Address Assignment

Use DNS (Domain Name System) to map a domain name to its corresponding IP address and
vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is
extremely important because without it, you must know the IP address of a computer before
you can access it.

The ZyXEL Device can get the DNS server addresses in the following ways.

Chapter 3 Connection Wizard 61

P-334U/P-335U User’s Guide

1 The ISP tells you the DNS server addresses, usually in the form of an information sheet,

when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS
Server fields in the Wizard and/or WAN > Internet Connection screen.

2 If the ISP did not give you DNS server information, leave the DNS Server fields set to

0.0.0.0 in the Wizard screen and/or set to From ISP in the WA N > Internet Connection

screen for the ISP to dynamically assign the DNS server IP addresses.

3.4.8 WAN IP and DNS Server Address Assignment

The following wizard screen allows you to assign a fixed WAN IP address and DNS server
addresses.

Figure 28 Wizard Step 3: WAN IP and DNS Server Addresses

The following table describes the labels in this screen

Table 18 Wizard Step 3: WAN IP and DNS Server Addresses

LABEL DESCRIPTION

WAN IP Address Assignment

My WAN IP Address Enter your WAN IP address in this field. The WAN IP address should be in

the same subnet as your DSL/Cable modem or router.

My WAN IP Subnet Mask Enter the IP subnet mask in this field.

Gateway IP Address Enter the gateway IP address in this field.

System DNS Server Address Assignment (if applicable)
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice

versa. The DNS server is extremely important because without it, you must know the IP address of a
computer before you can access it. The ZyXEL Device uses a system DNS server (in the order you
specify here) to resolve domain names for DDNS and the time server.

62 Chapter 3 Connection Wizard

Table 18 Wizard Step 3: WAN IP and DNS Server Addresses

LABEL DESCRIPTION

P-334U/P-335U User’s Guide

First DNS Server
Second DNS Server
Third DNS Server

Back Click Back to return to the previous screen.

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

3.4.9 WAN MAC Address

Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address
is assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02.

Table 19 Example of Network Properties for LAN Servers with Fixed IP Addresses

Choose an IP address 192.168.1.2-192.168.1.32; 192.168.1.65-192.168.1.254.

Subnet mask 255.255.255.0

Gateway (or default route) 192.168.1.1(ZyXEL Device LAN IP)

This screen allows users to configure the WAN port's MAC address by either using the
ZyXEL Device’s MAC address, copying the MAC address from a computer on your LAN or
manually entering a MAC address. Once it is successfully configured, the address will be
copied to the "rom" file (ZyNOS configuration file). It will not change unless you change the
setting or upload a different "rom" file. It is advisable to clone the MAC address from a
computer on your LAN even if your ISP does not presently require MAC address
authentication.

Enter the DNS server's IP address in the fields provided.
If you do not configure a system DNS server, you must use IP addresses

when configuring DDNS and the time server.

Figure 29 Wizard Step 3: WAN MAC Address

Chapter 3 Connection Wizard 63

P-334U/P-335U User’s Guide

The following table describes the fields in this screen.

Table 20 Wizard Step 3: WAN MAC Address

LABEL DESCRIPTION

Factory Default Select Factory Default to use the factory assigned default MAC address.

Clone the
computer’s MAC
address

Set WAN MAC
Address

Back Click Back to return to the previous screen.

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

Select this option and enter the IP address of the computer on the LAN whose
MAC you are cloning. It is advisable to clone the MAC address from a computer
on your LAN even if your ISP does not presently require MAC address
authentication.

Select this option and enter the MAC address you want to use.

3.5 Connection Wizard: STEP 4: Bandwidth management

Bandwidth management allows you to control the amount of bandwidth going out through the
ZyXEL Device’s WAN, LAN or WLAN port and prioritize the distribution of the bandwidth
according to the traffic type. This helps keep one service from using all of the available
bandwidth and shutting out other users.

Figure 30 Wizard Step 4: Bandwidth Management

The following fields describe the label in this screen.

Table 21 Wizard Step 4: Bandwidth Management

LABEL DESCRIPTION

Enable BM for all traffic
automatically

Back Click Back to return to the previous screen.

Select the check box to have the ZyXEL Device apply bandwidth
management to traffic going out through the ZyXEL Device’s WAN, LAN or
WLAN port. Bandwidth is allocated according to the traffic type
automatically. Real-time packets, such as VoIP traffic always get higher
priority.

64 Chapter 3 Connection Wizard

Table 21 Wizard Step 4: Bandwidth Management

LABEL DESCRIPTION

Next Click Next to continue.

Exit Click Exit to close the wizard screen without saving.

3.6 Connection Wizard Complete

Click Apply to save your configuration.

Figure 31 Connection Wizard Save

P-334U/P-335U User’s Guide

Follow the on-screen instructions and click Finish to complete the wizard setup.

Figure 32 Connection Wizard Complete

Well done! You have successfully set up your ZyXEL Device to operate on your network and
access the Internet.

Chapter 3 Connection Wizard 65

P-334U/P-335U User’s Guide

66 Chapter 3 Connection Wizard

This chapter discusses how to configure the wireless network settings in your ZyXEL Device.
See the appendices for more detailed information about wireless networks.

4.1 Wireless Network Overview

The following figure provides an example of a wireless network.

Figure 33 Example of a Wireless Network

P-334U/P-335U User’s Guide

CHAPTER 4

Wireless LAN

The wireless network is the part in the blue circle. In this wireless network, devices A and B
are called wireless clients. The wireless clients use the access point (AP) to interact with other
devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP.

Every wireless network must follow these basic guidelines.

• Every wireless client in the same wireless network must use the same SSID.

The SSID is the name of the wireless network. It stands for Service Set IDentity.

• If two wireless networks overlap, they should use different channels.

Like radio stations or television channels, each wireless network uses a specific channel,
or frequency, to send and receive information.

Chapter 4 Wireless LAN 67

P-334U/P-335U User’s Guide

• Every wireless client in the same wireless network must use security compatible with the
AP.

Security stops unauthorized devices from using the wireless network. It can also protect
the information that is sent in the wireless network.

4.2 Wireless Security Overview

The following sections introduce different types of wireless security you can set up in the
wireless network.

4.2.1 SSID

Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can
hide the SSID instead, in which case the AP does not broadcast the SSID. In addition, you
should change the default SSID to something that is difficult to guess.

This type of security is fairly weak, however, because there are ways for unauthorized devices
to get the SSID. In addition, unauthorized devices can still see the information that is sent in
the wireless network.

4.2.2 MAC Address Filter

Every wireless client has a unique identification number, called a MAC address.1 A MAC
address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002
or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate
User’s Guide or other documentation.

You can use the MAC address filter to tell the AP which wireless clients are allowed or not
allowed to use the wireless network. If a wireless client is allowed to use the wireless network,
it still has to have the correct settings (SSID, channel, and security). If a wireless client is not
allowed to use the wireless network, it does not matter if it has the correct settings.

This type of security does not protect the information that is sent in the wireless network.
Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized
wireless client. Then, they can use that MAC address to use the wireless network.

4.2.3 User Authentication

You can make every user log in to the wireless network before they can use it. This is called
user authentication. However, every wireless client in the wireless network has to support
IEEE 802.1x to do this.

1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless
networks. These kinds of wireless devices might not have MAC addresses.

2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.

68 Chapter 4 Wireless LAN

For wireless networks, there are two typical places to store the user names and passwords for
each user.

• In the AP: this feature is called a local user database or a local database.

• In a RADIUS server: this is a server used in businesses more than in homes.

If your AP does not provide a local user database and if you do not have a RADIUS server,
you cannot set up user names and passwords for your users.

Unauthorized devices can still see the information that is sent in the wireless network, even if
they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless
users to get a valid user name and password. Then, they can use that user name and password
to use the wireless network.

Local user databases also have an additional limitation that is explained in the next section.

4.2.4 Encryption

Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.

P-334U/P-335U User’s Guide

The types of encryption you can choose depend on the type of user authentication. (See

Section 4.2.3 on page 68 for information about this.)

Table 22 Types of Encryption for Each Type of Authentication

No Authentication RADIUS Server

Weakest No Security

Static WEP

WPA-PSK

Strongest WPA2-PSK WPA2

WPA

For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If
users do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-
PSK, or WPA2-PSK.

Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you
do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless
network has two wireless clients. Device A only supports WEP, and device B supports WEP
and WPA. Therefore, you should set up Static WEP in the wireless network.

Chapter 4 Wireless LAN 69

P-334U/P-335U User’s Guide

Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger

encryption. IEEE 802.1x and WEP encryption are better than none at all, but it
is still possible for unauthorized devices to figure out the original information
pretty quickly.

It is not possible to use WPA-PSK, WPA or stronger encryption with a local
user database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.

When you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select an option
(WPA Compatible) to support WPA as well. In this case, if some wireless clients support
WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the
type of wireless network login) and select the WPA Compatible option in the ZyXEL Device.

Many types of encryption use a key to protect the information in the wireless network. The
longer the key, the stronger the encryption. Every wireless client in the wireless network must
have the same key.

4.2.5 One-Touch Intelligent Security Technology (OTIST)

With ZyXEL’s OTIST, you set up the SSID and WPA-PSK on the ZyXEL Device. Then, the
ZyXEL Device transfers them to the devices in the wireless networks. As a result, you do not
have to set up the SSID and encryption on every device in the wireless network.

The devices in the wireless network have to support OTIST, and they have to be in range of the
ZyXEL Device when you activate it. See

Section 4.4 on page 77 for more details.

4.3 General Wireless LAN Screen

Note: If you are configuring the ZyXEL Device from a computer connected to the

wireless LAN and you change the ZyXEL Device’s SSID, channel or security
settings, you will lose your wireless connection when you press Apply to
confirm. You must then change the wireless settings of your computer to match
the ZyXEL Device’s new settings.

Click Network > Wireless LAN to open the General screen.

70 Chapter 4 Wireless LAN

P-334U/P-335U User’s Guide

Figure 34 Wireless General

The following table describes the general wireless LAN labels in this screen.

Table 23 Wireless General

LABEL DESCRIPTION

Enable
Wireless LAN

Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless

Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station

Channel
Selection

Auto Channel
Selection

Operating
Channel

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

Click the check box to activate wireless LAN.

station is associated. Wireless stations associating to the access point (AP) must
have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII
characters) for the wireless LAN.

cannot obtain the SSID through scanning using a site survey tool.

Set the operating frequency/channel depending on your particular region.
Select a channel from the drop-down list box. The options vary depending on whether

you are using A or B/G frequency band and the country you are in. This field is not
available when you select Auto Channel Selection.

Refer to the Connection Wizard chapter for more information on channels.

Select the check box to have the ZyXEL Device automatically scan for and select a
channel which is not used by another device.

This displays the channel the ZyXEL Device is currently using.

See the rest of this chapter for information on the other labels in this screen.

4.3.1 No Security

Select No Security to allow wireless stations to communicate with the access points without
any data encryption.

Chapter 4 Wireless LAN 71

P-334U/P-335U User’s Guide

Note: If you do not enable any wireless security on your ZyXEL Device, your network

is accessible to any wireless networking device that is within range.

Figure 35 Wireless: No Security

The following table describes the labels in this screen.

Table 24 Wireless No Security

LABEL DESCRIPTION

Security Mode Choose No Security from the drop-down list box.

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

4.3.2 WEP Encryption

WEP encryption scrambles the data transmitted between the wireless stations and the access
points to keep network communications private. It encrypts unicast and multicast
communications in a network. Both the wireless stations and the access points must use the
same WEP key.

Your ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 256-bit WEP keys
but only one key can be enabled at any one time.

In order to configure and enable WEP encryption; click Network > Wireless LAN to display
the General screen. Select Static WEP from the Security Mode list.

72 Chapter 4 Wireless LAN

Figure 36 Wireless: Static WEP Encryption

P-334U/P-335U User’s Guide

The following table describes the wireless LAN security labels in this screen.

Table 25 Wireless: Static WEP Encryption

LABEL DESCRIPTION

Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click

Generate. The ZyXEL Device automatically generates four different WEP keys and
displays them in the Key fields below.

WEP
Encryption

Authentication
Method

ASCII Select this option in order to enter ASCII characters as WEP key.

Hex Select this option in order to enter hexadecimal characters as a WEP key.

Select 64-bit WEP, 128-bit WEP or 256-bit WEP to enable data encryption.

This field is activated when you select 64-bit WEP, 128-bit WEP or 256-bit WEP in
the WEP Encryption field.

Select Auto, Open System or Shared Key from the drop-down list box.

The preceding "0x", that identifies a hexadecimal key, is entered automatically.

Chapter 4 Wireless LAN 73

P-334U/P-335U User’s Guide

Table 25 Wireless: Static WEP Encryption

LABEL DESCRIPTION

Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless

stations must use the same WEP key for data transmission.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal

characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal

characters ("0-9", "A-F").
If you chose 256-bit WEP, then enter 29 ASCII characters or 58 hexadecimal

characters ("0-9", "A-F").
You must configure at least one key, only one key can be activated at any one time.

The default key is key 1.

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

4.3.3 WPA-PSK/WPA2-PSK

Click Network > Wireless LAN to display the General screen.

Figure 37 Wireless: WPA-PSK/WPA2-PSK

74 Chapter 4 Wireless LAN

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Table 26 Wireless: WPA-PSK/WPA2-PSK

LABEL DESCRIPTION

WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the

Security Mode field.

Select the check box to have both WPA2 and WPA wireless clients be able to
communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2­PSK or WPA2.

Pre-Shared Key The encryption mechanisms used for WPA/WPA2 and WPA-PSK/WPA2-PSK are

the same. The only difference between the two is that WPA-PSK/WPA2-PSK uses
a simple common password, instead of user-specific credentials.

Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including
spaces and symbols).

ReAuthentication
Timer (in seconds)

Specify how often wireless stations have to resend usernames and passwords in
order to stay connected. Enter a time interval between 10 and 9999 seconds. The
default time interval is 1800 seconds (30 minutes).

Note: If wireless station authentication is done using a RADIUS

server, the reauthentication timer on the RADIUS server has
priority.

Idle Timeout The ZyXEL Device automatically disconnects a wireless station from the wired

network after a period of inactivity. The wireless station needs to enter the
username and password again before access to the wired network is allowed. The
default time interval is 3600 seconds (or 1 hour).

Group Key Update
Timer

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/
WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key
management) sends a new group key out to all clients. The re-keying process is
the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and
all stations in a WLAN on a periodic basis. Setting of the Group Key Update
Timer is also supported in WPA-PSK/WPA2-PSK mode. The ZyXEL Device
default is 1800 seconds (30 minutes).

4.3.4 WPA/WPA2

Click Network > Wireless LAN to display the General screen.

Chapter 4 Wireless LAN 75

P-334U/P-335U User’s Guide

Figure 38 Wireless: WPA/WPA2

The following table describes the labels in this screen.

Table 27 Wireless: WPA/WPA2

LABEL DESCRIPTION

WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the

ReAuthentication
Timer (in seconds)

Security Mode field.
Select the check box to have both WPA2 and WPA wireless clients be able to

communicate with the ZyXEL Device even when the ZyXEL Device is using
WPA2-PSK or WPA2.

Specify how often wireless stations have to resend usernames and passwords in
order to stay connected. Enter a time interval between 10 and 9999 seconds. The
default time interval is 1800 seconds (30 minutes).

Note: If wireless station authentication is done using a RADIUS

server, the reauthentication timer on the RADIUS server has
priority.

Idle Timeout The ZyXEL Device automatically disconnects a wireless station from the wired

network after a period of inactivity. The wireless station needs to enter the
username and password again before access to the wired network is allowed.
The default time interval is 3600 seconds (or 1 hour).

76 Chapter 4 Wireless LAN

Table 27 Wireless: WPA/WPA2

LABEL DESCRIPTION

P-334U/P-335U User’s Guide

Group Key Update
Timer

Authentication Server

IP Address Enter the IP address of the external authentication server in dotted decimal

Port Number Enter the port number of the external authentication server. The default port

Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be shared

Accounting Server

Active Select Yes from the drop down list box to enable user accounting through an

IP Address Enter the IP address of the external accounting server in dotted decimal notation.

Port Number Enter the port number of the external accounting server. The default port number

Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be shared

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/
WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key
management) sends a new group key out to all clients. The re-keying process is
the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and
all stations in a WLAN on a periodic basis. Setting of the Group Key Update
Timer is also supported in WPA-PSK/WPA2-PSK mode. The ZyXEL Device
default is 1800 seconds (30 minutes).

notation.

number is 1812.
You need not change this value unless your network administrator instructs you

to do so with additional information.

between the external authentication server and the ZyXEL Device.
The key must be the same on the external authentication server and your ZyXEL

Device. The key is not sent over the network.

external authentication server.

is 1813.
You need not change this value unless your network administrator instructs you

to do so with additional information.

between the external accounting server and the ZyXEL Device.
The key must be the same on the external accounting server and your ZyXEL

Device. The key is not sent over the network.

4.4 OTIST

In a wireless network, the wireless clients must have the same SSID and security settings as
the access point (AP) or wireless router (we will refer to both as “AP” here) in order to
associate with it. Traditionally this meant that you had to configure the settings on the AP and
then manually configure the exact same settings on each wireless client.

OTIST (One-Touch Intelligent Security Technology) allows you to transfer your AP’s SSID
and WEP or WPA-PSK security settings to wireless clients that support OTIST and are within
transmission range. You can also choose to have OTIST generate a WPA-PSK key for you if
you didn’t configure one manually.

Note: OTIST replaces the pre-configured wireless settings on the wireless clients.

Chapter 4 Wireless LAN 77

P-334U/P-335U User’s Guide

4.4.1 Enabling OTIST

You must enable OTIST on both the AP and wireless client before you start transferring
settings.

Note: The AP and wireless client(s) MUST use the same Setup key.

4.4.1.1 AP

You can enable OTIST using the OTIST button or the web configurator.

4.4.1.1.1 OTIST button

If you use the OTIST button, the default (01234567) or previous saved (through the web
configurator) Setup key is used to encrypt the settings that you want to transfer.

Hold in the OTIST button for about two seconds.

4.4.1.1.2 Web Configurator

Click the Network > Wireless LAN > OTIST. The following screen displays.

Figure 39 OTIST

78 Chapter 4 Wireless LAN

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Table 28 OTIST

LABEL DESCRIPTION

Setup Key Type an OTIST Setup Key of exactly eight ASCII characters in length.

The default OTIST setup key is "01234567".

Note: If you change the OTIST setup key here, you must also

make the same change on the wireless client(s).

Yes! If you want OTIST to automatically generate a WPA-PSK, you must:

• Change your security to No Security in the Wireless LAN > General
screen.

• Select the Yes! checkbox in the OTIST screen and click Apply.

• The wireless screen displays an auto generated WPA-PSK and is now in
WPA-PSK security mode.

The WPA-PSK security settings are assigned to the wireless client when you
start OTIST.

Note: If you already have a WEP key or WPA-PSK configured in

the Wireless LAN > General screen, and you run OTIST
with Yes! selected, OTIST will use the existing WEP key
or WPA-PSK.

Star t Click Start to encrypt the wireless security data using the setup key and have

the ZyXEL Device set the wireless station to use the same wireless settings as
the ZyXEL Device. You must also activate and start OTIST on the wireless
station within three minutes.

4.4.1.2 Wireless Client

Start the ZyXEL utility and click the Adapter tab. Select the OTIST check box, enter the
same Setup Key as your AP’s and click Save.

Figure 40 Example Wireless Client OTIST Screen

Chapter 4 Wireless LAN 79

P-334U/P-335U User’s Guide

4.4.2 Starting OTIST

Note: You must press the OTIST button or click Start in the AP OTIST web

configurator screen and in the wireless client(s) Adapter screen all within three
minutes (at the time of writing). You can start OTIST in the wireless clients and
AP in any order but they must all be within range and have OTIST enabled.

1 In the AP, a web configurator screen pops up showing you the security settings to transfer.

You can use the key in this screen to set up WEP or WPA-PSK encryption manually for
non-OTIST devices in the wireless network. After reviewing the settings, click OK.

Figure 41 Security Key

2 This screen appears while OTIST settings are being transferred. It closes when the

transfer is complete.

Figure 42 OTIST in Progress (AP) Figure 43 OTIST in Progress (Client)

• In the wireless client, you see this screen if it can't find an OTIST-enabled AP (with the
same Setup key). Click OK to go back to the ZyXEL utility main screen.

Figure 44 No AP with OTIST Found

• If there is more than one OTIST-enabled AP within range, you see a screen asking you to
select one AP to get settings from.

4.4.3 Notes on OTIST

1 If you enabled OTIST in the wireless client, you see this screen each time you start the

utility. Click Ye s for it to search for an OTIST-enabled AP.

80 Chapter 4 Wireless LAN

P-334U/P-335U User’s Guide

Figure 45 Start OTIST?

2 If an OTIST-enabled wireless client loses its wireless connection for more than ten

seconds, it will search for an OTIST-enabled AP for up to one minute. (If you manually
have the wireless client search for an OTIST-enabled AP, there is no timeout; click
Cancel in the OTIST progress screen to stop the search.)

3 When the wireless client finds an OTIST-enabled AP, you must still click Start in the AP

OTIST web configurator screen or hold in the OTIST button (for about two seconds) for

the AP to transfer settings.

4 If you change the SSID or the keys on the AP after using OTIST, you need to run OTIST

again or enter them manually in the wireless client(s).

5 If you configure OTIST to generate a WPA-PSK key, this key changes each time you run

OTIST. Therefore, if a new wireless client joins your wireless network, you need to run
OTIST on the AP and ALL wireless clients again.

4.5 MAC Filter

The MAC filter screen allows you to configure the ZyXEL Device to give exclusive access to
up to 32 devices (Allow) or exclude up to 32 devices from accessing the ZyXEL Device
(Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC
address is assigned at the factory and consists of six pairs of hexadecimal characters, for
example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure
this screen.

To change your ZyXEL Device’s MAC filter settings, click Network > Wireless LAN >
MAC Filter. The screen appears as shown.

Chapter 4 Wireless LAN 81

P-334U/P-335U User’s Guide

Figure 46 MAC Address Filter

The following table describes the labels in this menu.

Table 29 MAC Address Filter

LABEL DESCRIPTION

Active Select Yes from the drop down list box to enable MAC address filtering.

Filter Action Define the filter action for the list of MAC addresses in the MAC Address table.

Select Deny to block access to the ZyXEL Device, MAC addresses not listed will be
allowed to access the ZyXEL Device

Select Allow to permit access to the ZyXEL Device, MAC addresses not listed will be
denied access to the ZyXEL Device.

Set This is the index number of the MAC address.

MAC Address Enter the MAC addresses of the wireless station that are allowed or denied access to

the ZyXEL Device in these address fields. Enter the MAC addresses in a valid MAC
address format, that is, six hexadecimal character pairs, for example,
12:34:56:78:9a:bc.

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

82 Chapter 4 Wireless LAN

4.6 Wireless LAN Advanced Screen

Click Network > Wireless LAN > Advanced. The screen appears as shown.

Figure 47 Advanced

The following table describes the labels in this screen.

P-334U/P-335U User’s Guide

Table 30 Advanced

LABEL DESCRIPTION

Wireless Advanced Setup

RTS/CTS
Threshold

Fragmentation
Threshold

802.11 Mode Select 802.11b to allow only IEEE 802.11b compliant WLAN devices to associate with

Allow non

802.11h
stations

Enter a value between 0 and 2432.

It is the maximum data fragment size that can be sent. Enter a value between 256
and 2432.

the ZyXEL Device.
Select 802.11g to allow only IEEE 802.11g compliant WLAN devices to associate with

the ZyXEL Device.
Select 802.11b/g to allow either IEEE802.11b or IEEE802.11g compliant WLAN

devices to associate with the ZyXEL Device. The transmission rate of your ZyXEL
Device might be reduced.

If you push the AG switch to the A side on the rear panel, this field is read-only and
displays 802.11a to allow only IEEE 802.11a compliant WLAN devices to associate
with the ZyXEL Device.

This field is available when you push the AG switch to the A side on the rear panel.
The IEEE 802.11h standard defines two mechanisms (DFS and TPC) for IEEE

802.11a WLAN devices to avoid interference with other devices, such as satellites
and military radar.

DFS (dynamic frequency selection) allows the AP to detect other devices in the same
channel. If found it, the AP changes to different channel, so that the AP can avoid
interference with radar systems or other wireless networks.

TPC (transmit power control) helps reduce the wireless device’s transmission power
to avoid interference with satellites.

Select the check box to also allow the WLAN devices which do not support IEEE

802.11h to associate with the ZyXEL Device. Otherwise, clear the check box to allow
only IEEE 802.11h compliant WLAN devices to associate with the ZyXEL Device.

Chapter 4 Wireless LAN 83

P-334U/P-335U User’s Guide

Table 30 Advanced

LABEL DESCRIPTION

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to reload the previous configuration for this screen.

84 Chapter 4 Wireless LAN

This chapter gives you examples of how to set up an access point and wireless client for
wireless communication using the following parameters. The wireless clients can access the
Internet through an AP wirelessly.

5.1 Example Parameters

SSID SSID_Example3

Channel Auto

Security WPA-PSK

(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)

802.11 mode IEEE 802.11b/g

P-334U/P-335U User’s Guide

CHAPTER 5

Wireless Tutorial

An access point (AP) or wireless router is referred to as “AP” and a computer with a wireless
network card or USB/PCI adapter is referred to as “wireless client” here.

We use the P-334U web screens and M-302 utility screens as an example. The screens may
vary slightly for different models.

5.2 Configuring the AP

Flow the steps below to configure the wireless settings on your AP.

1 Set the AG switch (on the rear panel) to the G side to have the wireless client that

supports IEEE 802.11b/g be able to associate with the AP.

2 Open the Wireless LAN > General screen in the AP’s web configurator.

Chapter 5 Wireless Tutorial 85

P-334U/P-335U User’s Guide

Figure 48 AP: Wireless LAN > General

3 Make sure the Enable Wireless LAN check box is selected.

4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection

to have the AP choose a channel which is not used by another AP and display the channel
number in the field below after you click Apply.

5 Set security mode to WPA-PSK and enter ThisismyWPA-PSKpre-sharedkey in the

Pre-Shared Key field. Click Apply.

6 Open the Status screen.Verify your wireless and wireless security settings under Device

Information and check if the WLAN connection is up under Interface Status.

86 Chapter 5 Wireless Tutorial

Figure 49 AP: Status

P-334U/P-335U User’s Guide

7 Click the WLAN Station Status hyperlink in the AP’s Status screen. You can see if any

wireless client has connected to the AP.

Figure 50 AP: Status: WLAN Station Status

5.3 Configuring the Wireless Client

This section describes how to connect the wireless client to a network.

Chapter 5 Wireless Tutorial 87

P-334U/P-335U User’s Guide

5.3.1 Connecting to a Wireless LAN

The following sections show you how to join a wireless network using the ZyXEL utility, as in
the following diagram. The wireless client is labeled C and the access point is labeled AP.

There are three ways to connect the client to an access point.

• Configure nothing and leave the wireless client to automatically scan for and connect to
any available network that has no wireless security configured.

• Manually connect to a network.

• Configure a profile to have the wireless client automatically connect to a specific network
or peer computer.

This example illustrates how to manually connect your wireless client to an access point (AP)
which is configured for WPA-PSK security and connected to the Internet. Before you connect
to the access point, you must know its Service Set IDentity (SSID) and WPA-PSK pre-shared
key. In this example, the SSID is “SSID_Example3” and the pre-shared key is
“ThisismyWPA-PSKpre-sharedkey”.

After you install the ZyXEL utility and then insert the wireless client, follow the steps below
to connect to a network using the Site Survey screen.

1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown next.

2 The wireless client automatically searches for available wireless networks. Click Scan if

you want to search again. If no entry displays in the Available Network List, that means
there is no wireless network available within range. Make sure the AP or peer computer is
turned on or move the wireless client closer to the AP or peer computer.

88 Chapter 5 Wireless Tutorial

P-334U/P-335U User’s Guide

3 When you try to connect to an AP with security configured, a window will pop up

prompting you to specify the security settings. Enter the pre-shared key and leave the
encryption type at the default setting.

Use the Next button to move on to the next screen. You can use the Back button at any
time to return to the previous screen, or the Exit button to return to the Site Survey
screen.

Figure 51 ZyXEL Utility: Security Settings

4 The Confirm Save window appears. Check your settings and click Save to continue.

Figure 52 ZyXEL Utility: Confirm Save

5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless

network using your settings. When the wireless link is established, the ZyXEL utility icon
in the system tray turns green and the Link Info screen displays details of the active
connection. Check the network information in the Link Info screen to verify that you
have successfully connected to the selected network. If the wireless client is not
connected to a network, the fields in this screen remain blank.

Chapter 5 Wireless Tutorial 89

P-334U/P-335U User’s Guide

Figure 53 ZyXEL Utility: Link Info

6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other web

site in the address bar. If you are able to access the web site, your wireless connection is
successfully configured.

If you cannot access the web site, try changing the encryption type in the Security
Settings screen, check the Troubleshooting section of this User's Guide or contact your
network administrator.

5.3.2 Creating and Using a Profile

A profile lets you automatically connect to the same wireless network every time you use the
wireless client. You can also configure different profiles for different networks, for example if
you connect a notebook computer to wireless networks at home and at work.

This example illustrates how to set up a profile and connect the wireless client to an access
point configured for WPA-PSK security. In this example, the SSID is “SSID_Example3”, the
profile name is “PN_Example3” and the pre-shared key is “ThisismyWPA-PSKpre­sharedkey”. You have chosen the profile name “PN_Example3”.

1 Open the ZyXEL utility and click the Profile tab to open the screen shown next. Click

Add to configure a new profile.

Figure 54 ZyXEL Utility: Profile

2 The Add New Profile screen appears. The wireless client automatically searches for

available wireless networks, which are displayed in the Scan Info box. Click on Scan if

90 Chapter 5 Wireless Tutorial

P-334U/P-335U User’s Guide

you want to search again. You can also configure your profile for a wireless network that
is not in the list.

Figure 55 ZyXEL Utility: Add New Profile

3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select

Infrastructure and either manually enter or select the AP's SSID in the Scan Info table
and click Select.

4 Choose the same encryption method as the AP to which you want to connect (In this

example, WPA-PSK).

Figure 56 ZyXEL Utility: Profile Security

5 This screen varies depending on the encryption method you selected in the previous

screen. Enter the pre-shared key and leave the encryption type at the default setting.

Figure 57 ZyXEL Utility: Profile Encryption

Chapter 5 Wireless Tutorial 91

P-334U/P-335U User’s Guide

6 In the next screen, leave both boxes checked.

Figure 58 Profile: Wireless Protocol Settings.

7 Verify the profile settings in the read-only screen. Click Save to save and go to the next

screen.

Figure 59 Profile: Confirm Save

8 Click Activate Now to use the new profile immediately. Otherwise, click the Activate

Later button.

If you clicked Activate Later, you can select the profile from the list in the Profile screen
and click Connect to activate it.

Note: Only one profile can be activated and used at any given time.

Figure 60 Profile: Activate

9 When you activate the new profile, the ZyXEL utility returns to the Link Info screen

while it connects to the AP using your settings. When the wireless link is established, the
ZyXEL utility icon in the system tray turns green and the Link Info screen displays
details of the active connection.

92 Chapter 5 Wireless Tutorial

P-334U/P-335U User’s Guide

10Open your Internet browser, enter http://www.zyxel.com or the URL of any other web

site in the address bar and press ENTER. If you are able to access the web site, your new
profile is successfully configured.

11If you cannot access the Internet go back to the Profile screen, select the profile you are

using and click Edit. Check the details you entered previously. Also, refer to the
Troubleshooting section of this User's Guide or contact your network administrator if
necessary.

Chapter 5 Wireless Tutorial 93

P-334U/P-335U User’s Guide

94 Chapter 5 Wireless Tutorial

This chapter describes how to configure WAN settings.

6.1 WAN Overview

See the chapter about the connection wizard for more information on the fields in the WAN
screens.

6.2 WAN MAC Address

The MAC address screen allows users to configure the WAN port's MAC address by either
using the factory default or cloning the MAC address from a computer on your LAN. Choose
Factory Default to select the factory assigned default MAC Address.

P-334U/P-335U User’s Guide

CHAPTER 6

WAN

Otherwise, click Spoof this computer's MAC address - IP Address and enter the IP address
of the computer on the LAN whose MAC you are cloning. Once it is successfully configured,
the address will be copied to the rom file (ZyNOS configuration file). It will not change unless
you change the setting or upload a different ROM file.
MAC address prior to hooking up the WAN Port.

6.3 Internet Connection

To change your ZyXEL Device’s Internet access settings, click Network > WAN . The screen
differs by the encapsulation.

6.3.1 Ethernet Encapsulation

The screen shown next is for Ethernet encapsulation.

It is recommended that you clone the

Chapter 6 WAN 95

P-334U/P-335U User’s Guide

Figure 61 Ethernet Encapsulation

The following table describes the labels in this screen.

Table 31 Ethernet Encapsulation

LABEL DESCRIPTION

Encapsulation You must choose the Ethernet option when the WAN port is used as a regular

Ethernet.

Service Type Choose from Standard, Tel stra (RoadRunner Telstra authentication method), RR-

User Name Type the user name given to you by your ISP.

Password Type the password associated with the user name above.

Retype to Confirm Type your password again to make sure that you have entered is correctly.

Login Server IP
Address

Login Server (Telia
Login only)

Relogin Every(min)
(Telia Login only)

WAN IP Address Assignment

Manager (Roadrunner Manager authentication method), RR-Toshiba
(Roadrunner Toshiba authentication method) or Telia Login.

The following fields do not appear with the Standard service type.

Type the authentication server IP address here if your ISP gave you one.
This field is not available for Telia Login.

Type the domain name of the Telia login server, for example login1.telia.com.

The Telia server logs the ZyXEL Device out if the ZyXEL Device does not log in
periodically. Type the number of minutes from 1 to 59 (30 default) for the ZyXEL
Device to wait between logins.

96 Chapter 6 WAN

Table 31 Ethernet Encapsulation

LABEL DESCRIPTION

P-334U/P-335U User’s Guide

Get automatically
from ISP

Use Fixed IP
Address

IP Address Enter your WAN IP address in this field if you selected Use Fixed IP Address.

IP Subnet Mask Enter the IP Subnet Mask in this field.

Gateway IP
Address

DNS Servers

First DNS Server
Second DNS

Server
Third DNS Server

WAN MAC Address The MAC address section allows users to configure the WAN port's MAC address

Factory default Select Factory default to use the factory assigned default MAC Address.

Clone the
computer’s MAC
address

Set WAN MAC
Address

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to begin configuring this screen afresh.

Select this option If your ISP did not assign you a fixed IP address. This is the
default selection.

Select this option If the ISP assigned a fixed IP address.

Enter a Gateway IP Address (if your ISP gave you one) in this field.

Select From ISP if your ISP dynamically assigns DNS server information (and the
ZyXEL Device's WAN IP address). The field to the right displays the (read-only)
DNS server IP address that the ISP assigns.

Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave
the IP address set to 0.0.0.0, User-Defined changes to None after you click
Apply. If you set a second choice to User-Defined, and enter the same IP
address, the second User-Defined changes to None after you click Apply.

Select None if you do not want to configure DNS servers. If you do not configure a
DNS server, you must know the IP address of a computer in order to access it.

by either using the ZyXEL Device’s MAC address, copying the MAC address from
a computer on your LAN or manually entering a MAC address.

Select Clone the computer's MAC address - IP Address and enter the IP
address of the computer on the LAN whose MAC you are cloning. Once it is
successfully configured, the address will be copied to the rom file (ZyNOS
configuration file). It will not change unless you change the setting or upload a
different ROM file.

Select this option and enter the MAC address you want to use.

6.3.2 PPPoE Encapsulation

The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an
IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is
for a dial-up connection using PPPoE.

For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example Radius).

One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.

Chapter 6 WAN 97

P-334U/P-335U User’s Guide

Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.

By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.

The screen shown next is for PPPoE encapsulation.

Figure 62 PPPoE Encapsulation

98 Chapter 6 WAN

P-334U/P-335U User’s Guide

The following table describes the labels in this screen.

Table 32 PPPoE Encapsulation

LABEL DESCRIPTION

ISP Parameters for Internet Access

Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The

ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is
an IETF Draft standard (RFC 2516) specifying how a personal computer (PC)
interacts with a broadband modem (i.e. xDSL, cable, wireless, etc.) connection.
Operationally, PPPoE saves significant effort for both the end user and ISP/carrier,
as it requires no specific configuration of the broadband modem at the customer
site. By implementing PPPoE directly on the router rather than individual
computers, the computers on the LAN do not need PPPoE software installed, since
the router does that part of the task. Further, with NAT, all of the LAN's computers
will have access.

Service Name Type the PPPoE service name provided to you. PPPoE uses a service name to

identify and reach the PPPoE server.

User Name Type the user name given to you by your ISP.

Password Type the password associated with the user name above.

Retype to Confirm Type your password again to make sure that you have entered is correctly.

Nailed-Up
Connection

Idle Timeout This value specifies the time in seconds that elapses before the router automatically

WAN IP Address Assignment

Get automatically
from ISP

Use Fixed IP
Address

My WAN IP
Address

Remote IP
Address

Remote IP
Subnet Mask

Metric This field sets this route's priority among the routes the ZyXEL Device uses.

Private This parameter determines if the ZyXEL Device will include the route to this remote

DNS Servers

Select Nailed-Up Connection if you do not want the connection to time out.

disconnects from the PPPoE server.

Select this option If your ISP did not assign you a fixed IP address. This is the
default selection.

Select this option If the ISP assigned a fixed IP address.

Enter your WAN IP address in this field if you selected Use Fixed IP Address.

Enter the remote IP address (if your ISP gave you one) in this field.

Enter the remote IP subnet mask in this field.

The metric represents the "cost of transmission". A router determines the best route
for transmission by choosing a path with the lowest "cost". RIP routing uses hop
count as the measurement of cost, with a minimum of "1" for directly connected
networks. The number must be between "1" and "15"; a number greater than "15"
means the link is down. The smaller the number, the lower the "cost".

node in its RIP broadcasts. If set to Yes, this route is kept private and not included in
RIP broadcast. If No, the route to this remote node will be propagated to other hosts
through RIP broadcasts.

Chapter 6 WAN 99

P-334U/P-335U User’s Guide

Table 32 PPPoE Encapsulation

LABEL DESCRIPTION

First DNS Server
Second DNS

Server
Third DNS Server

WAN MAC
Address

Factory default Select Factory default to use the factory assigned default MAC Address.

Clone the
computer’s MAC
address

Set WAN MAC
Address

Apply Click Apply to save your changes back to the ZyXEL Device.

Reset Click Reset to begin configuring this screen afresh.

Select From ISP if your ISP dynamically assigns DNS server information (and the
ZyXEL Device's WAN IP address). The field to the right displays the (read-only)
DNS server IP address that the ISP assigns.

Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave the
IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If
you set a second choice to User-Defined, and enter the same IP address, the
second User-Defined changes to None after you click Apply.

Select None if you do not want to configure DNS servers. If you do not configure a
DNS server, you must know the IP address of a computer in order to access it.

The MAC address section allows users to configure the WAN port's MAC address
by using the ZyXEL Device’s MAC address, copying the MAC address from a
computer on your LAN or manually entering a MAC address.

Select Clone the computer's MAC address - IP Address and enter the IP
address of the computer on the LAN whose MAC you are cloning. Once it is
successfully configured, the address will be copied to the rom file (ZyNOS
configuration file). It will not change unless you change the setting or upload a
different ROM file.

Select this option and enter the MAC address you want to use.

6.3.3 PPTP Encapsulation

Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of
data from a remote client to a private server, creating a Virtual Private Network (VPN) using
TCP/IP-based networks.

PPTP supports on-demand, multi-protocol and virtual private networking over public
networks, such as the Internet.

The screen shown next is for PPTP encapsulation.

100 Chapter 6 WAN