ZyXEL P-660R-Tx User Manual

P-660R-Tx v2 Series User’s Guide

P-660R-Tx v2 Series

ADSL2+ Access Router

DEFAULT LOGIN

IP Address http://192.168.1.1

Password 1234

User’s Guide

Version 3.40

8/2007

1

P-660R-Tx v2 Series User’s Guide

Copyright

Copyright © 2007 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Copyright 3

P-660R-Tx v2 Series User’s Guide

Federal Communications Commission (FCC) Interference Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two This
device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause
undesired operations.

This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation.

Certifications

If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and the receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.

• Consult the dealer or an experienced radio/TV technician for help.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Viewing Certifications

1 Go to www.zyxel.com.

2 Select your product from the drop-down list box on the ZyXEL home page to go to that

product's page.

3 Select the certification you wish to view from this page.

4 Certifications

P-660R-Tx v2 Series User’s Guide

Safety Warnings

For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT store things on the device.

• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.

• Connect ONLY suitable accessories to the device.

• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.

• Make sure to connect the cables to the correct ports.

• Place connecting cables carefully so that no one will step on them or stumble over them.

• Always disconnect all cables from this device before servicing or disassembling.

• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).

• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.

• If the power adaptor or cord is damaged, remove it from the device and the power source.

• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.

• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.

• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.

Safety Warnings 5

P-660R-Tx v2 Series User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

Registration

Register your product online to receive e-mail notices of firmware upgrades and information
at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

6 ZyXEL Limited Warranty

P-660R-Tx v2 Series User’s Guide

Customer Support

Please have the following information ready when you contact customer support.

Required Information

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

“+” is the (prefix) number you dial to make an international telephone call.

Corporate Headquarters (Worldwide)

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.com, www.europe.zyxel.com

• FTP: ftp.zyxel.com, ftp.europe.zyxel.com

• Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park,
Hsinchu 300, Taiwan

Costa Rica

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.co.cr

• FTP: ftp.zyxel.co.cr

• Regular Mail: ZyXEL Costa Rica, Plaza Roble Escazú, Etapa El Patio, Tercer Piso, San
José, Costa Rica

Czech Republic

• E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.cz

• Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 ­Modrany, Ceská Republika

Denmark

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

Customer Support 7

P-660R-Tx v2 Series User’s Guide

• Fax: [phone]

• Web: www.zyxel.dk

• Regular Mail: ZyXEL Communications A/S, Columbusvej, 2860 Soeborg, Denmark

Finland

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.fi

• Regular Mail: ZyXEL Communications Oy, Malminkaari 10, 00700 Helsinki, Finland

France

• E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.fr

• Regular Mail: ZyXEL France, 1 rue des Vergers, Bat. 1 / C, 69760 Limonest, France

Germany

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.de

• Regular Mail: ZyXEL Deutschland GmbH., Adenauerstr. 20/A2 D-52146, Wuerselen,
Germany

Hungary

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.hu

• Regular Mail: ZyXEL Hungary, 48, Zoldlomb Str., H-1025, Budapest, Hungary

India

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone] to [phone]

• Fax: [phone]

• Web: http://www.zyxel.in

• Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Floor, F2/9 Okhla Phase -1,
New Delhi 110020, India

8 Customer Support

P-660R-Tx v2 Series User’s Guide

Japan

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.co.jp

• Regular Mail: ZyXEL Japan, 3F, Office T&U, 1-10-10 Higashi-Gotanda, Shinagawa-ku,
Tokyo 141-0022, Japan

Kazakhstan

• Support: http://zyxel.kz/support

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.kz

• Regular Mail: ZyXEL Kazakhstan, 43 Dostyk Ave., Office 414, Dostyk Business Centre,
050010 Almaty, Republic of Kazakhstan

Malaysia

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: http://www.zyxel.com.my

• Regular Mail: ZyXEL Malaysia Sdn Bhd., 1-02 & 1-03, Jalan Kenari 17F, Bandar
Puchong Jaya, 47100 Puchong, Selangor Darul Ehsan, Malaysia

North America

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.us.zyxel.com

• FTP: ftp.us.zyxel.com

• Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806­2001, U.S.A.

Norway

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.no

• Regular Mail: ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, Norway

Customer Support 9

P-660R-Tx v2 Series User’s Guide

Poland

• E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.pl.zyxel.com

• Regular Mail: ZyXEL Communications, ul. Okrzei 1A, 03-715 Warszawa, Poland

Russia

• Support: http://zyxel.ru/support

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.ru

• Regular Mail: ZyXEL Russia, Ostrovityanova 37a Str., Moscow 117279, Russia

Singapore

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: http://www.zyxel.com.sg

• Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy
#03-28, Singapore 609930

Spain

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.es

• Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain

Sweden

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.zyxel.se

• Regular Mail: ZyXEL Communications A/S, Sjöporten 4, 41764 Göteborg, Sweden

Thailand

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

10 Customer Support

P-660R-Tx v2 Series User’s Guide

• Telephone: [phone]

• Fax: [phone]

• Web: http://www.zyxel.co.th

• Regular Mail: ZyXEL Thailand Co., Ltd., 1/1 Moo 2, Ratchaphruk Road, Bangrak-Noi,
Muang, Nonthaburi 11000, Thailand.

Ukraine

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone]

• Fax: [phone]

• Web: www.ua.zyxel.com

• Regular Mail: ZyXEL Ukraine, 13, Pimonenko Str., Kiev 04050, Ukraine

United Kingdom

• Support E-mail: [e-mail]

• Sales E-mail: [e-mail]

• Telephone: [phone] (UK only)

• Fax: [phone]

• Web: www.zyxel.co.uk

• FTP: ftp.zyxel.co.uk

• Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road,
Bracknell, Berkshire RG12 2XB, United Kingdom (UK)

Customer Support 11

P-660R-Tx v2 Series User’s Guide

12 Customer Support

Table of Contents

Copyright3

Certifications4

Safety Warnings5

ZyXEL Limited Warranty6

Customer Support7

Table of Contents13

List of Figures19

List of Tables23

Preface25

Chapter 1
Getting To Know Your ZyXEL Device27

P-660R-Tx v2 Series User’s Guide

Introducing the ZyXEL Device 27

Features of the ZyXEL Device 27

Applications for the ZyXEL Device 31

Internet Access 32

LAN to LAN Application 32

ZyXEL Device Hardware Installation and Connection 32

Front Panel LEDs 33

Chapter 2
Introducing the Web Configurator35

Web Configurator Overview 35

Accessing the ZyXEL Device Web Configurator 35

Resetting the ZyXEL Device 36

Using the Reset Button 37

Navigating the ZyXEL Device Web Configurator 37

Chapter 3
Wizard Setup 39

Introduction 39

Encapsulation 39

ENET ENCAP 39

PPP over Ethernet 39

PPPoA 39

RFC 1483 40

Table of Contents 13

P-660R-Tx v2 Series User’s Guide

Multiplexing 40

VC-based Multiplexing 40

LLC-based Multiplexing 40

VPI and VCI 40

Internet Access Wizard Setup: First Screen 40

IP Address and Subnet Mask 41

IP Address Assignment 42

IP Assignment with PPPoA or PPPoE Encapsulation 42

IP Assignment with RFC 1483 Encapsulation 42

IP Assignment with ENET ENCAP Encapsulation 42

Private IP Addresses 43

Nailed-Up Connection (PPP) 43

NAT 43

Internet Access Wizard Setup: Second Screen 43

DHCP Setup 47

IP Pool Setup 47

Internet Access Wizard Setup: Third Screen 47

Internet Access Wizard Setup: Connection Test 50

Test Your Internet Connection 50

Chapter 4
Password Setup51

Password Overview 51

Configuring Password 51

Chapter 5
LAN Setup53

LAN Overview 53

LANs, WANs and the ZyXEL Device 53

DNS Server Address 54

DNS Server Address Assignment 54

LAN TCP/IP 55

Factory LAN Defaults 55

IP Address and Subnet Mask 55

RIP Setup 55

Multicast 56

Any IP 56

How Any IP Works 57

Configuring LAN 58

Chapter 6
WAN Setup61

WAN Overview 61

14 Table of Contents

P-660R-Tx v2 Series User’s Guide

Metric 61

PPPoE Encapsulation 62

Traffic Shaping 62

Zero Configuration Internet Access 63

Configuring WAN Setup 63

Traffic Redirect 66

Configuring WAN Backup 67

Chapter 7
Network Address Translation (NAT) Screens71

NAT Overview 71

NAT Definitions 71

What NAT Does 72

How NAT Works 72

NAT Application 73

NAT Mapping Types 73

SUA (Single User Account) Versus NAT 74

SUA Server 75

Default Server IP Address 75

Port Forwarding: Services and Port Numbers 75

Configuring Servers Behind SUA (Example) 76

Selecting the NAT Mode 76

Configuring SUA Server 77

Configuring Address Mapping 79

Editing an Address Mapping Rule 80

Chapter 8
Dynamic DNS Setup83

Dynamic DNS 83

DYNDNS Wildcard 83

Configuring Dynamic DNS 83

Chapter 9
Time and Date85

Configuring Time and Date 85

Chapter 10
Remote Management Configuration87

Remote Management Overview 87

Remote Management Limitations 87

Remote Management and NAT 88

System Timeout 88

Tel ne t 8 8

Table of Contents 15

P-660R-Tx v2 Series User’s Guide

FTP 88

Web 88

Configuring Remote Management 88

Chapter 11
Universal Plug-and-Play (UPnP)91

How do I know if I'm using UPnP? 91

NAT Traversal 91

Cautions with UPnP 92

UPnP and ZyXEL 92

Configuring UPnP 92

Installing UPnP in Windows Example 93

Using UPnP in Windows XP Example 97

Chapter 12
Maintenance103

Maintenance Overview 103

System Status Screen 103

System Statistics 105

DHCP Table Screen 106

Any IP Table Screen 107

Diagnostic Screens 108

Diagnostic General Screen 108

Diagnostic DSL Line Screen 109

Firmware Screen 110

Backup Configuration 112

Restore Configuration 113

Back to Factory Defaults 114

Chapter 13
Troubleshooting117

Problems Starting Up the ZyXEL Device 117

Problems with the LAN LED 117

Problems with the Password 118

Problems with the DSL LED 118

Problems with the LAN Interface 118

Problems with the WAN Interface 119

Problems with Internet Access 119

Problems with Remote Management 119

Problems with the Web Configurator 120

Pop-up Windows, JavaScripts and Java Permissions 120

Internet Explorer Pop-up Blockers 120

JavaScripts 123

16 Table of Contents

Java Permissions 125

129

Product Specifications 129

133

Setting up Your Computer’s IP Address 133

Windows 95/98/Me 133

Installing Components 134

Configuring 135

Verifying Settings 136

Windows 2000/NT/XP 136

Verifying Settings 141

Macintosh OS 8/9 141

Verifying Settings 143

Macintosh OS X 143

Verifying Settings 144

Linux 144

Using the K Desktop Environment (KDE) 145

Using Configuration Files 146

Verifying Settings 148

149

IP Addresses and Subnetting 149

Introduction to IP Addresses 149

IP Address Classes and Hosts 149

Subnet Masks 151

Subnetting 151

Example: Two Subnets 152

Example: Four Subnets 153

Example Eight Subnets 154

Subnetting With Class A and Class B Networks. 155

157

Splitters and Microfilters 157

Connecting a POTS Splitter 157

Telephone Microfilters 157

ZyXEL Device With ISDN 158

161

Command Interpreter 161

Command Syntax 161

Command Usage 161

163

Log Descriptions 163

167

PPPoE 167

PPPoE in Action 167

Benefits of PPPoE 167

P-660R-Tx v2 Series User’s Guide

Table of Contents 17

P-660R-Tx v2 Series User’s Guide

Traditional Dial-up Scenario 167

How PPPoE Works 168

ZyXEL Device as a PPPoE Client 168

169
Virtual Circuit Topology169

Index171

18 Table of Contents

P-660R-Tx v2 Series User’s Guide

List of Figures

Figure 1ZyXEL Device Internet Access Application 32

Figure 2ZyXEL Device LAN-to-LAN Application 32

Figure 3Password Screen 36

Figure 4Change Password at Login 36

Figure 5 Web Configurator: Site Map Screen 37

Figure 6Internet Access Wizard Setup: First Screen 41

Figure 7Internet Connection with PPPoE 44

Figure 8 Internet Connection with RFC 1483 45

Figure 9Internet Connection with ENET ENCAP 45

Figure 10Internet Connection with PPPoA 46

Figure 11Internet Access Wizard Setup: Third Screen 48

Figure 12Internet Access Wizard Setup: LAN Configuration 49

Figure 13Internet Access Wizard Setup: Connection Tests 50

Figure 14Password 51

Figure 15LAN and WAN IP Addresses 53

Figure 16Any IP Example 57

Figure 17LAN Setup 58

Figure 18Example of Traffic Shaping 63

Figure 19WAN Setup (PPPoE) 64

Figure 20Traffic Redirect Example 67

Figure 21Traffic Redirect LAN Setup 67

Figure 22WAN Backup 68

Figure 23How NAT Works 73

Figure 24NAT Application With IP Alias 73

Figure 25Multiple Servers Behind NAT Example 76

Figure 26NAT Mode 77

Figure 27Edit SUA/NAT Server Set 78

Figure 28Address Mapping Rules 79

Figure 29Address Mapping Rule Edit 80

Figure 30Dynamic DNS 84

Figure 31Time and Date 85

Figure 32Telnet Configuration on a TCP/IP Network 88

Figure 33Remote Management 89

Figure 34Configuring UPnP 93

Figure 35Add/Remove Programs: Windows Setup: Communication 94

Figure 36Add/Remove Programs: Windows Setup: Communication: Components 94

Figure 37Network Connections 95

Figure 38Windows Optional Networking Components Wizard 96

Figure 39Networking Services 96

Figure 40Network Connections 97

List of Figures 19

P-660R-Tx v2 Series User’s Guide

Figure 41Internet Connection Properties 98

Figure 42Internet Connection Properties: Advanced Settings 99

Figure 43Internet Connection Properties: Advanced Settings: Add 99

Figure 44System Tray Icon 100

Figure 45Internet Connection Status 100

Figure 46Network Connections 101

Figure 47Network Connections: My Network Places 102

Figure 48Network Connections: My Network Places: Properties: Example 102

Figure 49System Status 104

Figure 50System Status: Show Statistics 105

Figure 51DHCP Table 107

Figure 52Any IP Table 107

Figure 53Diagnostic: General 108

Figure 54Diagnostic: DSL Line 109

Figure 55Firmware Upgrade 111

Figure 56Network Temporarily Disconnected 111

Figure 57Error Message 112

Figure 58Configuration 112

Figure 59Backup Configuration 113

Figure 60Restore Configuration 113

Figure 61Restore Configuration Successful 114

Figure 62Network Temporarily Disconnected 114

Figure 63Reset to Factory Default Settings 115

Figure 64Pop-up Blocker 121

Figure 65 Internet Options 121

Figure 66Internet Options 122

Figure 67Pop-up Blocker Settings 123

Figure 68Internet Options 124

Figure 69Security Settings - Java Scripting 125

Figure 70Security Settings - Java 126

Figure 71Java (Sun) 127

Figure 72WIndows 95/98/Me: Network: Configuration 134

Figure 73Windows 95/98/Me: TCP/IP Properties: IP Address 135

Figure 74Windows 95/98/Me: TCP/IP Properties: DNS Configuration 136

Figure 75Windows XP: Start Menu 137

Figure 76Windows XP: Control Panel 137

Figure 77Windows XP: Control Panel: Network Connections: Properties 138

Figure 78Windows XP: Local Area Connection Properties 138

Figure 79Windows XP: Internet Protocol (TCP/IP) Properties 139

Figure 80Windows XP: Advanced TCP/IP Properties 140

Figure 81Windows XP: Internet Protocol (TCP/IP) Properties 141

Figure 82Macintosh OS 8/9: Apple Menu 142

Figure 83Macintosh OS 8/9: TCP/IP 142

20 List of Figures

P-660R-Tx v2 Series User’s Guide

Figure 84Macintosh OS X: Apple Menu 143

Figure 85Macintosh OS X: Network 144

Figure 86Red Hat 9.0: KDE: Network Configuration: Devices 145

Figure 87Red Hat 9.0: KDE: Ethernet Device: General 145

Figure 88Red Hat 9.0: KDE: Network Configuration: DNS 146

Figure 89Red Hat 9.0: KDE: Network Configuration: Activate 146

Figure 90Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 147

Figure 91Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 147

Figure 92Red Hat 9.0: DNS Settings in resolv.conf 147

Figure 93Red Hat 9.0: Restart Ethernet Card 148

Figure 94Red Hat 9.0: Checking TCP/IP Properties 148

Figure 95Connecting a POTS Splitter 157

Figure 96Connecting a Microfilter 158

Figure 97ZyXEL Device with ISDN 159

Figure 98Single-Computer per Router Hardware Configuration 168

Figure 99ZyXEL Device as a PPPoE Client 168

Figure 100Virtual Circuit Topology 169

List of Figures 21

P-660R-Tx v2 Series User’s Guide

22 List of Figures

P-660R-Tx v2 Series User’s Guide

List of Tables

Table 1ADSL Standards 27

Table 2Front Panel LED Description 33

Table 3Web Configurator Screens Summary 37

Table 4Internet Access Wizard Setup: First Screen 41

Table 5 Internet Connection with PPPoE 44

Table 6Internet Connection with RFC 1483 45

Table 7Internet Connection with ENET ENCAP 46

Table 8Internet Connection with PPPoA 47

Table 9Internet Access Wizard Setup: LAN Configuration 49

Table 10Password 51

Table 11LAN Setup 58

Table 12WAN Setup 64

Table 13WAN Backup 68

Table 14NAT Definitions 71

Table 15NAT Mapping Types 74

Table 16Services and Port Numbers 75

Table 17NAT Mode 77

Table 18Edit SUA/NAT Server Set 78

Table 19Address Mapping Rules 79

Table 20Address Mapping Rule Edit 81

Table 21Dynamic DNS 84

Table 22Time and Date 86

Table 23Remote Management 89

Table 24Configuring UPnP 93

Table 25System Status 104

Table 26System Status: Show Statistics 106

Table 27DHCP Table 107

Table 28Any IP Table 107

Table 29Diagnostic: General 109

Table 30Diagnostic: DSL Line 110

Table 31Firmware Upgrade 111

Table 32Backup Configuration 113

Table 33Maintenance Restore Configuration 113

Table 34Troubleshooting the Start-Up of Your ZyXEL Device 117

Table 35Troubleshooting the LAN LED 117

Table 36Troubleshooting the Password 118

Table 37Troubleshooting the DSL LED 118

Table 38Troubleshooting the LAN Interface 118

Table 39Troubleshooting the WAN Interface 119

Table 40Troubleshooting Internet Access 119

List of Tables 23

P-660R-Tx v2 Series User’s Guide

Table 41Troubleshooting Remote Management 119

Table 42Troubleshooting the Web Configurator 120

Table 43Device 129

Table 44Firmware 130

Table 45Classes of IP Addresses 150

Table 46Allowed IP Address Range By Class 150

Table 47 “Natural” Masks 151

Table 48Alternative Subnet Mask Notation 151

Table 49Two Subnets Example 152

Table 50Subnet 1 152

Table 51Subnet 2 153

Table 52Subnet 1 153

Table 53Subnet 2 154

Table 54Subnet 3 154

Table 55Subnet 4 154

Table 56Eight Subnets 155

Table 57Class C Subnet Planning 155

Table 58Class B Subnet Planning 156

Table 59System Maintenance Logs 163

Table 60System Error Logs 164

Table 61Packet Filter Logs 164

Table 62CDR Logs 164

Table 63PPP Logs 165

Table 64ICMP Notes 165

24 List of Tables

P-660R-Tx v2 Series User’s Guide

Preface

Congratulations on your purchase of the P-660R-Tx v2 ADSL2+ Access Router.

Note: Register your product online to receive e-mail notices of firmware upgrades and

information at www.zyxel.com
North American products.

Your ZyXEL Device is easy to install and configure.

About This User's Guide

This manual is designed to guide you through the configuration of your ZyXEL Device for its
various applications. The web configurator parts of this guide contain background information
on features configurable by web configurator.

Use the web configurator or command interpreter interface to configure your ZyXEL Device.
Not all features can be configured through all interfaces.

for global products, or at www.us.zyxel.com for

Syntax Conventions

• The P-660R-Tx v2 may be referred to as the “ZyXEL Device”, the “device”, the “system”
or the “product” in this User’s Guide.

• Product labels, screen names, field labels and field choices are all in bold font.

• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.

• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.

• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.

• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.

Related Documentation

• Quick Start Guide

The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.

• Web Configurator Online Help

Embedded web help for descriptions of individual screens and supplementary
information.

• Command Reference Guide

Preface 25

P-660R-Tx v2 Series User’s Guide

The Command Reference Guide explains how to use the Command-Line Interface (CLI)
and CLI commands to configure the ZyXEL Device.

Note: It is recommended you use the web configurator to configure the ZyXEL

Device.

• Supporting Disk
Refer to the included CD for support documents.

• ZyXEL Web Site

• Please refer to www.zyxel.com
certifications.

User Guide Feedback

Help us help you. E-mail all User Guide-related comments, questions or suggestions for
improvement to [e-mail] or send regular mail to The Technical Writing
Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park,
Hsinchu, 300, Taiwan. Thank you.

for additional support documentation and product

Graphics Icons Key

ZyXEL Device Computer Notebook computer

Server DSLAM Telephone

Router Switch

26 Preface

Getting To Know Your ZyXEL

This chapter describes the key features and applications of your ZyXEL Device.

1.1 Introducing the ZyXEL Device

Your ZyXEL Device integrates a high-speed 10/100Mbps auto-negotiating LAN interface and
a high-speed ADSL port into a single package.

Models ending in "1", for example P-660R-T1, denote a device that works over the analog
telephone system, POTS (Plain Old Telephone Service). Models ending in "3" denote a device
that works over ISDN (Integrated Synchronous Digital System). Models ending in "7" denote
a device that works over T-ISDN (UR-2).

P-660R-Tx v2 Series User’s Guide

CHAPTER 1

Device

Note: Only use firmware for your ZyXEL Device’s specific model. Refer to the label on

the bottom of your ZyXEL Device.

The web browser-based Graphical User Interface (GUI) provides easy management.

1.1.1 Features of the ZyXEL Device

The following sections describe the features of the ZyXEL Device.

High Speed Internet Access

The ZyXEL Device is an ADSL router compatible with the ADSL/ADSL2/ADSL2+
standards. It allows super-fast, secure Internet access over the analog (POTS) or digital
(ISDN) telephone line (depending on your model). Maximum data rates attainable for each
standard are shown in the next table.

Table 1 ADSL Standards

DATA RATE STANDARD UPSTREAM DOWNSTREAM

ADSL

ADSL2

832 kbps 8Mbps

3.5Mbps 12Mbps

ADSL2+

Chapter 1 Getting To Know Your ZyXEL Device 27

3.5Mbps 24Mbps

P-660R-Tx v2 Series User’s Guide

Note: If your ZyXEL Device does not support Annex M, the maximum ADSL2/2+

upstream data rate is 1.2 Mbps. ZyXEL Devices which work over ISDN do not
support Annex M.

The standard your ISP supports determines the maximum upstream and

downstream speeds attainable. Actual speeds attained also depend on the
distance from your ISP, line quality, etc.

Zero Configuration Internet Access

Once you connect and turn on the ZyXEL Device, it automatically detects the Internet
connection settings (such as the VCI/VPI numbers and the encapsulation method) from the
ISP and makes the necessary configuration changes. In cases where additional account
information (such as an Internet account user name and password) is required or the ZyXEL
Device cannot connect to the ISP, you will be redirected to web screen(s) for information input
or troubleshooting.

Any IP

The Any IP feature allows a computer to access the Internet and the ZyXEL Device without
changing the network settings (such as IP address and subnet mask) of the computer, when the
IP addresses of the computer and the ZyXEL Device are not in the same subnet.

Traffic Redirect

Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot
connect to the Internet, thus acting as an auxiliary if your regular WAN connection fails.

Universal Plug and Play (UPnP)

Using the standard TCP/IP protocol, the ZyXEL Device and other UPnP enabled devices can
dynamically join a network, obtain an IP address and convey its capabilities to other devices
on the network.

PPPoE Support (RFC2516)

PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your
ISP to use their existing network configuration with newer broadband technologies such as
ADSL. The PPPoE driver on the ZyXEL Device is transparent to the computers on the LAN,
which see only Ethernet and are not aware of PPPoE thus saving you from having to manage
PPPoE clients on individual computers.

Network Address Translation (NAT)

Network Address Translation (NAT) allows the translation of an Internet protocol address
used within one network (for example a private IP address used in a local network) to a
different IP address known within another network (for example a public IP address used on
the Internet).

28 Chapter 1 Getting To Know Your ZyXEL Device

P-660R-Tx v2 Series User’s Guide

10/100M Auto-negotiating Ethernet/Fast Ethernet Interface(s)

This auto-negotiation feature allows the ZyXEL Device to detect the speed of incoming
transmissions and adjust appropriately without manual intervention. It allows data transfer of
either 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode depending on your
Ethernet network.

Auto-Crossover (MDI/MDI-X) 10/100 Mbps Ethernet Interface(s)

These interfaces automatically adjust to either a crossover or straight-through Ethernet cable.

Dynamic DNS Support

With Dynamic DNS support, you can have a static hostname alias for a dynamic IP address,
allowing the host to be more easily accessible from various locations on the Internet. You must
register for this service with a Dynamic DNS service provider.

Multiple PVC (Permanent Virtual Circuits) Support

Your ZyXEL Device supports up to 8 PVC’s.

ADSL Standards

• Full-Rate (ANSI T1.413, Issue 2; G.dmt (G.992.1) with line rate support of up to 8 Mbps
downstream and 832 Kbps upstream.

• G.lite (G.992.2) with line rate support of up to 1.5Mbps downstream and 512Kbps
upstream.

• Supports Multi-Mode standard (ANSI T1.413, Issue 2; G.dmt (G.992.1); G.lite
(G992.2)).

• TCP/IP (Transmission Control Protocol/Internet Protocol) network layer protocol.

• ATM Forum UNI 3.1/4.0 PVC.

• Supports up to 8 PVCs (UBR, CBR, VBR).

• Multiple Protocol over AAL5 (RFC 1483).

• PPP over AAL5 (RFC 2364).

• PPP over Ethernet over AAL5 (RFC 2516).

• RFC 1661.

• PPP over PAP (RFC 1334).

• PPP over CHAP (RFC 1994).

Protocol Support

• DHCP Support

Chapter 1 Getting To Know Your ZyXEL Device 29

P-660R-Tx v2 Series User’s Guide

DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers)
to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The
ZyXEL Device has built-in DHCP server capability enabled by default. It can assign IP
addresses, an IP default gateway and DNS servers to DHCP clients. The ZyXEL Device
can now also act as a surrogate DHCP server (DHCP Relay) where it relays IP address
assignment from the actual real DHCP server to the clients.

•IP Alias

IP Alias allows you to partition a physical network into logical networks over the same
Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its
single physical Ethernet interface with the ZyXEL Device itself as the gateway for each
LAN network.

• IP Policy Routing (IPPR)

Traditionally, routing is based on the destination address only and the router takes the
shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to
override the default routing behavior and alter the packet forwarding based on the policy
defined by the network administrator.

• PPP (Point-to-Point Protocol) link layer protocol.

• Transparent bridging for unsupported network layer protocols.

• RIP I/RIP II

• IGMP Proxy

• ICMP support

• ATM QoS support

• MIB II support (RFC 1213)

Networking Compatibility

Your ZyXEL Device is compatible with the major ADSL DSLAM (Digital Subscriber Line
Access Multiplexer) providers, making configuration as simple as possible for you.

Multiplexing

The ZyXEL Device supports VC-based and LLC-based multiplexing.

Encapsulation

The ZyXEL Device supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC
1483 encapsulation over ATM, MAC encapsulated routing (ENET encapsulation) as well as
PPP over Ethernet (RFC 2516).

Network Management

• Embedded web configurator

• CLI (Command Line Interpreter)

• Remote Management via Telnet or Web

•SNMP manageable

30 Chapter 1 Getting To Know Your ZyXEL Device

P-660R-Tx v2 Series User’s Guide

• DHCP Server/Client/Relay

• Built-in Diagnostic Tools

•Syslog

• Telnet Support (Password-protected telnet access to internal configuration manager)

• TFTP/FTP server, firmware upgrade and configuration backup/support supported

• Supports OAM F4/F5 loop-back, AIS and RDI OAM cells

Other PPPoE Features

• PPPoE idle time out

• PPPoE Dial on Demand

Diagnostics Capabilities

The ZyXEL Device can perform self-diagnostic tests. These tests check the integrity of the
following circuitry:

• FLASH memory

• ADSL circuitry

•RAM

• LAN port

Packet Filters

The ZyXEL Device's packet filtering functions allows added network security and
management.

Ease of Installation

Your ZyXEL Device is designed for quick, intuitive and easy installation.

Housing

Your ZyXEL Device's compact and ventilated housing minimizes space requirements making
it easy to position anywhere in your busy office.

1.2 Applications for the ZyXEL Device

Here are some example uses for which the ZyXEL Device is well suited.

Chapter 1 Getting To Know Your ZyXEL Device 31

P-660R-Tx v2 Series User’s Guide

1.2.1 Internet Access

The ZyXEL Device is the ideal high-speed Internet access solution. Your ZyXEL Device
supports the TCP/IP protocol, which the Internet uses exclusively. It is compatible with all
major ADSL DSLAM (Digital Subscriber Line Access Multiplexer) providers. A DSLAM is
a rack of ADSL line cards with data multiplexed into a backbone network interface/connection
(for example, T1, OC3, DS3, ATM or Frame Relay). Think of it as the equivalent of a modem
rack for ADSL. A typical Internet access application is shown below.

Figure 1 ZyXEL Device Internet Access Application

Internet Single User Account

For a SOHO (Small Office/Home Office) environment, your ZyXEL Device offers the Single
User Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to
access the Internet concurrently for the cost of a single IP address.

1.2.2 LAN to LAN Application

You can use the ZyXEL Device to connect two geographically dispersed networks over the
ADSL line. A typical LAN-to-LAN application for your ZyXEL Device is shown as follows.

Figure 2 ZyXEL Device LAN-to-LAN Application

1.3 ZyXEL Device Hardware Installation and Connection

Refer to the Quick Start Guide for information on hardware installation and connection.

32 Chapter 1 Getting To Know Your ZyXEL Device

1.4 Front Panel LEDs

The following table describes the LEDs on the front panel.

Table 2 Front Panel LED Description

LED COLOR STATUS DESCRIPTION

POWER Green On The ZyXEL Device is receiving power and functioning properly.

Red On The power to the ZyXEL Device is too low.

ETHERNET Green On The ZyXEL Device has a successful 10/100 Mbps Ethernet

DSL Green On The ZyXEL Device is linked successfully to a DSLAM.

INTERNET Green On The ZyXEL Device has a PPP (PPPoA or PPPoE) connection.

P-660R-Tx v2 Series User’s Guide

Blinking The ZyXEL Device is rebooting.

Off The ZyXEL Device is not ready or has malfunctioned.

connection.

Blinking The ZyXEL Device is receiving or sending data.

Off The LAN is not connected.

Blinking
(Slow)

Blinking
(Fast)

Off The DSL link is down.

Blinking The ZyXEL Device is sending or receiving PPPoA or PPPoE

Off The ZyXEL Device does not have a PPP (PPPoA or PPPoE)

The ZyXEL Device is initializing the DSL line.

The ZyXEL Device is sending or receiving traffic.

traffic.

connection.

Chapter 1 Getting To Know Your ZyXEL Device 33

P-660R-Tx v2 Series User’s Guide

34 Chapter 1 Getting To Know Your ZyXEL Device

Introducing the Web

This chapter describes how to access and navigate the web configurator.

2.1 Web Configurator Overview

The web configurator is an HTML-based management interface that allows easy ZyXEL
Device setup and management via an Internet browser. Use Internet Explorer 6.0 and later or
Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768
pixels.

P-660R-Tx v2 Series User’s Guide

CHAPTER 2

Configurator

In order to use the web configurator you need to allow:

• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.

• JavaScript (enabled by default).

• Java permissions (enabled by default).

2.1.1 Accessing the ZyXEL Device Web Configurator

1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start

Guide).

2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to

Appendix B on page 133).

3 Launch your web browser.

4 Type "192.168.1.1" as the URL.

5 An Enter Network Password window displays. Enter the password (“1234” is the

default). Click Login to proceed to a screen asking you to change your password. Click
Cancel to revert to the default password in the password field.

Chapter 2 Introducing the Web Configurator 35

P-660R-Tx v2 Series User’s Guide

Figure 3 Password Screen

6 It is highly recommended you change the default password! Enter a new password, retype

it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if
you do not want to change the password now.

Note: If you do not change the password, the following screen appears every time

you log in.

Figure 4 Change Password at Login

7 You should now see the SITE MAP screen.

Note: The ZyXEL Device automatically times out after five minutes of inactivity.

Simply log back into the ZyXEL Device if this happens to you.

2.2 Resetting the ZyXEL Device

If you forget your password or cannot access the web configurator, you will need to use the
RESET button at the back of the ZyXEL Device to reload the factory-default configuration
file. This means that you will lose all configurations that you had previously and the password
will be reset to “1234”.

36 Chapter 2 Introducing the Web Configurator

P-660R-Tx v2 Series User’s Guide

2.2.1 Using the Reset Button

1 Make sure the PWR/SYS LED is on (not blinking).

2 Press the RESET button for ten seconds or until the PWR/SYS LED begins to blink and

then release it. When the PWR/SYS LED begins to blink, the defaults have been restored
and the ZyXEL Device restarts.

2.3 Navigating the ZyXEL Device Web Configurator

The following summarizes how to navigate the web configurator from the SITE MAP screen.

• Click Wizard Setup to begin a series of screens to configure your ZyXEL Device for the
first time.

• Click a link under Advanced Setup to configure advanced ZyXEL Device features.

• Click a link under Maintenance to see ZyXEL Device performance statistics, upload
firmware and back up, restore or upload a configuration file.

• Click SITE MAP to go to the Site Map screen.

• Click Logout in the navigation panel when you have finished a ZyXEL Device
management session.

Figure 5 Web Configurator: Site Map Screen

Click the icon (located in the top right corner of most screens) to view embedded help.

Table 3 Web Configurator Screens Summary

LINK SUB-LINK FUNCTION

Wizard Setup Connection

Setup

Advanced Setup

Password Use this screen to change your password.

LAN Use this screen to configure LAN DHCP and TCP/IP settings.

Use these screens for initial configuration including general
setup, ISP parameters for Internet Access and WAN IP/DNS
Server/MAC address assignment.

Chapter 2 Introducing the Web Configurator 37

P-660R-Tx v2 Series User’s Guide

Table 3 Web Configurator Screens Summary (continued)

LINK SUB-LINK FUNCTION

WAN WAN Setup Use this screen to change the ZyXEL Device’s WAN remote

WAN Backup Use this screen to configure your traffic redirect properties and

NAT SUA Only Use this screen to configure servers behind the ZyXEL Device.

Full Feature Use this screen to configure network address translation

Security Use this screen to configure Internet security and apply the

Dynamic DNS Use this screen to set up dynamic DNS.

Time and Date Use this screen to change your ZyXEL Device’s time and date.

Remote
Management

UPnP Use this screen to enable UPnP on the ZyXEL Device.

Maintenance

System Status This screen contains administrative and system-related

DHCP Table This screen displays DHCP (Dynamic Host Configuration

Any IP Table This screen shows current read-only information of all network

Diagnostic General These screens display information to help you identify problems

DSL Line These screens display information to help you identify problems

Firmware Use this screen to upload firmware to your ZyXEL Device.

Configuration This screen is only available on the P-660R-T1C v2. Use these

LOGOUT Click this label to exit the web configurator.

node settings.

WAN backup settings.

mapping rules.

predefined filter rules.

Use this screen to configure through which interface(s) and from
which IP address(es) users can use Telnet/FTP/Web to manage
the ZyXEL Device.

information.

Protocol) related information and is READ-ONLY.

devices that use the Any IP feature to communicate with the
ZyXEL Device.

with the ZyXEL Device general connection.

with the DSL line.

screens to backup, restore or reset the configuration of your
ZyXEL Device.

38 Chapter 2 Introducing the Web Configurator

This chapter provides information on the Wizard Setup screens for Internet access in the web
configurator.

3.1 Introduction

Use the Wizard Setup screens to configure your system for Internet access with the
information provided by your ISP. Your ISP may have already configured some of the fields
in the wizard screens for you.

3.1.1 Encapsulation

P-660R-Tx v2 Series User’s Guide

CHAPTER 3

Wizard Setup

Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports
the following methods.

3.1.1.1 ENET ENCAP

The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the
IP network protocol. IP packets are routed between the Ethernet interface and the WAN
interface and then formatted so that they can be understood in a bridged environment. For
instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP
requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the
second wizard screen. You can get this information from your ISP.

3.1.1.2 PPP over Ethernet

PPPoE provides access control and billing functionality in a manner similar to dial-up services
using PPP. The ZyXEL Device bridges a PPP session over Ethernet (PPP over Ethernet, RFC

2516) from your computer to an ATM PVC (Permanent Virtual Circuit) which connects to
ADSL Access Concentrator where the PPP session terminates. One PVC can support any
number of PPP sessions from your LAN. For more information on PPPoE, see the appendices.

3.1.1.3 PPPoA

PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA
connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual
Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please
refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information
on PPP.

Chapter 3 Wizard Setup 39

P-660R-Tx v2 Series User’s Guide

3.1.1.4 RFC 1483

RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation
Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single
ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each
protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer
to the RFC for more detailed information.

3.1.2 Multiplexing

There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be
sure to use the multiplexing method required by your ISP.

3.1.2.1 VC-based Multiplexing

In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit;
for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments
where dynamic creation of large numbers of ATM VCs is fast and economical.

3.1.2.2 LLC-based Multiplexing

In this case one VC carries multiple protocols with protocol identifying information being
contained in each packet header. Despite the extra bandwidth and processing overhead, this
method may be advantageous if it is not practical to have a separate VC for each carried
protocol, for example, if charging heavily depends on the number of simultaneous VCs.

3.1.3 VPI and VCI

Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to
65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for
more information.

3.1.4 Internet Access Wizard Setup: First Screen

In the SITE MAP screen click Wizard Setup to display the first wizard screen.

40 Chapter 3 Wizard Setup

Figure 6 Internet Access Wizard Setup: First Screen

The following table describes the labels in this screen.

Table 4 Internet Access Wizard Setup: First Screen

P-660R-Tx v2 Series User’s Guide

LABEL DESCRIPTION

Mode From the Mode drop-down list box, select Routing (default) if your ISP allows

multiple computers to share an Internet account. Otherwise select Bridge.

Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list

box. Choices vary depending on what you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or

PPPoE.

Multiplex Select the multiplexing method used by your ISP from the Multiplex drop-down list

box either VC-based or LLC-based.

Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.

Refer to the appendix for more information.

VPI Enter the VPI assigned to you. This field may already be configured.

VCI Enter the VCI assigned to you. This field may already be configured.

Next Click this button to go to the next wizard screen. The next wizard screen you see

depends on what protocol you chose above. Click on the protocol link to see the next
wizard screen for that protocol.

3.2 IP Address and Subnet Mask

Similar to the way houses on a street share a common street name, so too do computers on a
LAN share one common network number.

Where you obtain your network number depends on your particular situation. If the ISP or
your network administrator assigns you a block of registered IP addresses, follow their
instructions in selecting the IP addresses and the subnet mask.

Chapter 3 Wizard Setup 41

P-660R-Tx v2 Series User’s Guide

If the ISP did not explicitly give you an IP network number, then most likely you have a single
user account and the ISP will assign you a dynamic IP address when the connection is
established. If this is the case, it is recommended that you select a network number from

192.168.0.0 to 192.168.255.0 and you must enable the Network Address Translation (NAT)
feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this
block of addresses specifically for private use; please do not use any other number unless you
are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other
words, the first three numbers specify the network number while the last number identifies an
individual computer on that network.

Once you have decided on the network number, pick an IP address that is easy to remember,
for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your
network is using that IP address.

The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device
will compute the subnet mask automatically based on the IP address that you entered. You
don't need to change the subnet mask computed by the ZyXEL Device unless you are
instructed to do otherwise.

3.2.1 IP Address Assignment

A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you
a different one each time. The Single User Account feature can be enabled or disabled if you
have either a dynamic or static IP. However the encapsulation method assigned influences
your choices for IP address and ENET ENCAP gateway.

3.2.1.1 IP Assignment with PPPoA or PPPoE Encapsulation

If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and
not the ENET ENCAP Gateway field.

3.2.1.2 IP Assignment with RFC 1483 Encapsulation

In this case the IP Address Assignment must be static with the same requirements for the IP
Address and ENET ENCAP Gateway fields as stated above.

3.2.1.3 IP Assignment with ENET ENCAP Encapsulation

In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP
Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a
dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP
Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server

assigns them to the ZyXEL Device.

42 Chapter 3 Wizard Setup

3.2.1.4 Private IP Addresses

Every machine on the Internet must have a unique address. If your networks are isolated from
the Internet, for example, only between your two branch offices, you can assign any IP
addresses to the hosts without problems. However, the Internet Assigned Numbers Authority
(IANA) has reserved the following three blocks of IP addresses specifically for private
networks:

• 10.0.0.0 — 10.255.255.255

• 172.16.0.0 — 172.31.255.255

• 192.168.0.0 — 192.168.255.255

You can obtain your IP address from the IANA, from an ISP or it can be assigned from a
private network. If you belong to a small organization and your Internet access is through an
ISP, the ISP can provide you with the Internet addresses for your local networks. On the other
hand, if you are part of a much larger organization, you should consult your network
administrator for the appropriate IP addresses.

Note: Regardless of your particular situation, do not create an arbitrary IP address;

always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, Address Allocation for Private Internets
and RFC 1466, Guidelines for Management of IP Address Space.

P-660R-Tx v2 Series User’s Guide

3.2.2 Nailed-Up Connection (PPP)

A nailed-up connection is a dial-up line where the connection is always up regardless of traffic
demand. The ZyXEL Device does two things when you specify a nailed-up connection. The
first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up
the connection when turned on and whenever the connection is down. A nailed-up connection
can be very expensive for obvious reasons.

Do not specify a nailed-up connection unless your telephone company offers flat-rate service
or you need a constant connection and the cost is of no concern

3.2.3 NAT

NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.

3.2.4 Internet Access Wizard Setup: Second Screen

The second wizard screen varies depending on what mode and encapsulation type you use. All
screens shown are with routing mode. Configure the fields and click Next to continue.

Chapter 3 Wizard Setup 43

P-660R-Tx v2 Series User’s Guide

Figure 7 Internet Connection with PPPoE

The following table describes the labels in this screen.

Table 5 Internet Connection with PPPoE

LABEL DESCRIPTION

Service Name Type the name of your PPPoE service here.

User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form

user@domain

exactly as given.

Password Enter the password associated with the user name above.

IP Address A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not

fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address;

otherwise select Static IP Address and type your ISP assigned IP address in the text
box below.

Connection Select Connect on Demand when you don't want the connection up all the time and

specify an idle time-out (in seconds) in the Max. Idle Timeout field. The default
setting selects Connection on Demand with 0 as the idle time-out, which means the
Internet session will not timeout.

Select Nailed-Up Connection when you want your connection up all the time. The

where domain identifies a service name, then enter both components

ZyXEL Device will try to bring up the connection automatically if it is disconnected.

Network
Address
Translation

Back Click Back to go back to the first wizard screen.

Next Click Next to continue to the next wizard screen.

Select None, SUA Only or Full Feature from the drop-sown list box. Refer to the NAT
chapter for more details.

44 Chapter 3 Wizard Setup

P-660R-Tx v2 Series User’s Guide

Figure 8 Internet Connection with RFC 1483

The following table describes the labels in this screen.

Table 6 Internet Connection with RFC 1483

LABEL DESCRIPTION

IP Address This field is available if you select Routing in the Mode field.

Type your ISP assigned IP address in this field.

Network Address
Translation

Back Click Back to go back to the first wizard screen.

Next Click Next to continue to the next wizard screen.

Select None, SUA Only or Full Feature from the drop-down list box. Refer to

Chapter 7 on page 71 for more details.

Figure 9 Internet Connection with ENET ENCAP

Chapter 3 Wizard Setup 45

P-660R-Tx v2 Series User’s Guide

The following table describes the labels in this screen.

Table 7 Internet Connection with ENET ENCAP

LABEL DESCRIPTION

IP Address A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not

fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address;

otherwise select Static IP Address and type your ISP assigned IP address in the IP
Address text box below.

Subnet Mask Enter a subnet mask in dotted decimal notation.

Refer to Appendix C on page 149 to calculate a subnet mask If you are implementing
subnetting.

ENET ENCAP
Gateway

Network
Address
Translation

Back Click Back to go back to the first wizard screen.

Next Click Next to continue to the next wizard screen.

You must specify a gateway IP address (supplied by your ISP) when you use ENET
ENCAP in the Encapsulation field in the previous screen.

Select None, SUA Only or Full Feature from the drop-sown list box. Refer to the NAT
chapter for more details.

Figure 10 Internet Connection with PPPoA

46 Chapter 3 Wizard Setup

P-660R-Tx v2 Series User’s Guide

The following table describes the labels in this screen.

Table 8 Internet Connection with PPPoA

LABEL DESCRIPTION

User Name Enter the login name that your ISP gives you.

Password Enter the password associated with the user name above.

IP Address This option is available if you select Routing in the Mode field.

A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.

Click Obtain an IP Address Automatically if you have a dynamic IP address;
otherwise click Static IP Address and type your ISP assigned IP address in the IP
Address text box below.

Connection Select Connect on Demand when you don't want the connection up all the time and

specify an idle time-out (in seconds) in the Max. Idle Timeout field. The default setting
selects Connection on Demand with 0 as the idle time-out, which means the Internet
session will not timeout.

Select Nailed-Up Connection when you want your connection up all the time. The

ZyXEL Device will try to bring up the connection automatically if it is disconnected.

Network
Address
Translation

Back Click Back to go back to the first wizard screen.

Next Click Next to continue to the next wizard screen.

This option is available if you select Routing in the Mode field.
Select None, SUA Only or Full Feature from the drop-sown list box. Refer to Chapter

7 on page 71 for more details.

3.2.5 DHCP Setup

DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual
clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL
Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device
provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must
have another DHCP server on your LAN, or else the computer must be manually configured.

3.2.5.1 IP Pool Setup

The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP clients (DHCP
Pool). See the product specifications in the appendices. Do not assign static IP addresses from
the DHCP pool to your LAN computers.

3.2.6 Internet Access Wizard Setup: Third Screen

Verify the settings in the screen shown next. To change the LAN information on the ZyXEL
Device, click Change LAN Configurations. Otherwise click Save Settings to save the
configuration and skip to the section 3.13.

Chapter 3 Wizard Setup 47

P-660R-Tx v2 Series User’s Guide

Figure 11 Internet Access Wizard Setup: Third Screen

If you want to change your ZyXEL Device LAN settings, click Change LAN Configuration
to display the screen as shown next.

48 Chapter 3 Wizard Setup

P-660R-Tx v2 Series User’s Guide

Figure 12 Internet Access Wizard Setup: LAN Configuration

The following table describes the labels in this screen.

Table 9 Internet Access Wizard Setup: LAN Configuration

LABEL DESCRIPTION

LAN IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation, for

example, 192.168.1.1 (factory default).

Note: If you changed the ZyXEL Device's LAN IP address, you

must use the new IP address if you want to access the
web configurator again.

LAN Subnet Mask Enter a subnet mask in dotted decimal notation.

DHCP

DHCP Server From the DHCP Server drop-down list box, select On to allow your ZyXEL

Device to assign IP addresses, an IP default gateway and DNS servers to
computer systems that support the DHCP client. Select Off to disable DHCP
server.

When DHCP server is used, set the following items:

Client IP Pool Starting
Address

Size of Client IP Pool This field specifies the size or count of the IP address pool.

Primary DNS Server Enter the IP addresses of the DNS servers. The DNS servers are passed to

Secondary DNS Server As above.

Back Click Back to go back to the previous screen.

Finish Click Finish to save the settings and proceed to the next wizard screen.

This field specifies the first of the contiguous addresses in the IP address
pool.

the DHCP clients along with the IP address and the subnet mask.

Chapter 3 Wizard Setup 49

P-660R-Tx v2 Series User’s Guide

3.2.7 Internet Access Wizard Setup: Connection Test

The ZyXEL Device automatically tests the connection to the computer(s) connected to the
LAN ports. To test the connection from the ZyXEL Device to the ISP, click Start Diagnose.
Otherwise click Return to Main Menu to go back to the Site Map screen.

Figure 13 Internet Access Wizard Setup: Connection Tests

3.2.7.1 Test Your Internet Connection

Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this User’s Guide for more detailed information on the complete
range of ZyXEL Device features. If you cannot access the Internet, open the web configurator
again to confirm that the Internet settings you configured in the Wizard Setup are correct.

50 Chapter 3 Wizard Setup

This chapter provides information on the Password screen.

4.1 Password Overview

It is highly recommended that you change the password for accessing the ZyXEL Device.

4.1.1 Configuring Password

To change your ZyXEL Device’s password (recommended), click Password in the Site Map
screen. The screen appears as shown.

P-660R-Tx v2 Series User’s Guide

CHAPTER 4

Password Setup

Figure 14 Password

The following table describes the fields in this screen.

Table 10 Password

LABEL DESCRIPTION

Old Password Type the default password or the existing password you use to access the system

New Password Type the new password in this field.

Retype to Confirm Type the new password again in this field.

Apply Click Apply to save your changes back to the ZyXEL Device.

Cancel Click Cancel to begin configuring this screen afresh.

in this field.

Chapter 4 Password Setup 51

P-660R-Tx v2 Series User’s Guide

52 Chapter 4 Password Setup

This chapter describes how to configure LAN settings.

5.1 LAN Overview

A Local Area Network (LAN) is a shared communication system to which many computers
are attached. A LAN is a computer network limited to the immediate area, usually the same
building or floor of a building. The LAN screens can help you configure a LAN DHCP server
and manage IP addresses.

5.1.1 LANs, WANs and the ZyXEL Device

P-660R-Tx v2 Series User’s Guide

CHAPTER 5

LAN Setup

The actual physical connection determines whether the ZyXEL Device ports are LAN or
WAN ports. There are two separate IP networks, one inside the LAN network and the other
outside the WAN network as shown next.

Figure 15 LAN and WAN IP Addresses

Chapter 5 LAN Setup 53

P-660R-Tx v2 Series User’s Guide

5.2 DNS Server Address

DNS (Domain Name System) is for mapping a domain name to its corresponding IP address
and vice versa. The DNS server is extremely important because without it, you must know the
IP address of a machine before you can access it. The DNS server addresses that you enter in
the DHCP setup are passed to the client machines along with the assigned IP address and
subnet mask.

There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP
to tell a customer the DNS server addresses, usually in the form of an information sheet, when
s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server
fields in the LAN Setup screen, otherwise, leave them blank.

Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP
Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers,
chances are the DNS servers are conveyed through IPCP negotiation. The ZyXEL Device
supports the IPCP DNS server extensions through the DNS proxy feature.

If the Primary and Secondary DNS Server fields in the LAN Setup screen are not specified,
for instance, left as 0.0.0.0, the ZyXEL Device tells the DHCP clients that it itself is the DNS
server. When a computer sends a DNS query to the ZyXEL Device, the ZyXEL Device
forwards the query to the real DNS server learned through IPCP and relays the response back
to the computer.

Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It
does not mean you can leave the DNS servers out of the DHCP setup under all circumstances.
If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the
LAN Setup screen. This way, the ZyXEL Device can pass the DNS servers to the computers
and the computers can query the DNS server directly without the ZyXEL Device’s
intervention.

5.3 DNS Server Address Assignment

Use DNS (Domain Name System) to map a domain name to its corresponding IP address and
vice versa. The DNS server is extremely important because without it, you must know the IP
address of a computer before you can access it.

There are two ways that an ISP disseminates the DNS server addresses.

• The ISP tells you the DNS server addresses, usually in the form of an information sheet,
when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS
Server fields in the LAN Setup screen.

• The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server
fields are left blank in the LAN Setup screen.

54 Chapter 5 LAN Setup

5.4 LAN TCP/IP

The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS
servers to systems that support DHCP client capability.

5.4.1 Factory LAN Defaults

The LAN parameters of the ZyXEL Device are preset in the factory with the following values:

• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)

• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.

These parameters should work for the majority of installations. If your ISP gives you explicit
DNS server address(es), read the embedded web configurator help regarding what fields need
to be configured.

5.4.2 IP Address and Subnet Mask

P-660R-Tx v2 Series User’s Guide

Refer to Section 3.2 on page 41 in Chapter 3 on page 39 for this information.

5.4.3 RIP Setup

RIP (Routing Information Protocol) allows a router to exchange routing information with
other routers. The RIP Direction field controls the sending and receiving of RIP packets.
When set to:

• Both - the ZyXEL Device will broadcast its routing table periodically and incorporate
the RIP information that it receives.

• In Only - the ZyXEL Device will not send any RIP packets but will accept all RIP
packets received.

• Out Only - the ZyXEL Device will send out RIP packets but will not accept any RIP
packets received.

• None - the ZyXEL Device will not send any RIP packets and will ignore any RIP
packets received.

The Version field controls the format and the broadcasting method of the RIP packets that the
ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally
supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks,
unless you have an unusual network topology.

Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that
RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.

Chapter 5 LAN Setup 55

P-660R-Tx v2 Series User’s Guide

5.4.4 Multicast

Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to
a group of hosts on the network - not everybody and not just 1.

IGMP (Internet Group Management Protocol) is a network-layer protocol used to establish
membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC

2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If
you would like to read more detailed information about interoperability between IGMP
version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is
used to identify host groups and can be in the range 224.0.0.0 to 239.255.255.255. The address

224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address

224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts
(including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP.
The address 224.0.0.2 is assigned to the multicast routers group.

The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-
v2). At start up, the ZyXEL Device queries all directly connected networks to gather group
membership. After that, the ZyXEL Device periodically updates this information. IP
multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in
the web configurator (LAN; WAN ). Select None to disable IP multicasting on these
interfaces.

5.5 Any IP

Traditionally, you must set the IP addresses and the subnet masks of a computer and the
ZyXEL Device to be in the same subnet to allow the computer to access the Internet (through
the ZyXEL Device). In cases where your computer is required to use a static IP address in
another network, you may need to manually configure the network settings of the computer
every time you want to access the Internet via the ZyXEL Device.

With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the
Internet without changing the network settings (such as IP address and subnet mask) of the
computer, when the IP addresses of the computer and the ZyXEL Device are not in the same
subnet. Whether a computer is set to use a dynamic or static (fixed) IP address, you can simply
connect the computer to the ZyXEL Device and access the Internet.

The following figure depicts a scenario where a computer is set to use a static private IP
address in the corporate environment. In a residential house where a ZyXEL Device is
installed, you can still use the computer to access the Internet without changing the network
settings, even when the IP addresses of the computer and the ZyXEL Device are not in the
same subnet.

56 Chapter 5 LAN Setup

P-660R-Tx v2 Series User’s Guide

Figure 16 Any IP Example

The Any IP feature does not apply to a computer using either a dynamic IP address or a static
IP address that is in the same subnet as the ZyXEL Device’s IP address.

Note: You must enable NAT/SUA to use the Any IP feature on the ZyXEL Device.

5.5.1 How Any IP Works

Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP
address) to a physical machine address, also known as a Media Access Control or MAC
address, on the local area network. IP routing table is defined on IP Ethernet devices (the
ZyXEL Device) to decide which hop to use,
destination.

The following lists out the steps taken, when a computer tries to access the Internet for the first
time through the ZyXEL Device.

1 When a computer (which is in a different subnet) first attempts to access the Internet, it

sends packets to its default gateway (which is not the ZyXEL Device) by looking at the
MAC address in its ARP table.

2 When the computer cannot locate the default gateway, an ARP request is broadcast on the

LAN.

3 The ZyXEL Device receives the ARP request and replies to the computer with its own

MAC address.

4 The computer updates the MAC address for the default gateway to the ARP table. Once

the ARP table is updated, the computer is able to access the Internet through the ZyXEL
Device.

to help forward data along to its specified

5 When the ZyXEL Device receives packets from the computer, it creates an entry in the IP

routing table so it can properly forward packets intended for the computer.

Chapter 5 LAN Setup 57

P-660R-Tx v2 Series User’s Guide

After all the routing information is updated, the computer can access the ZyXEL Device and
the Internet as if it is in the same subnet as the ZyXEL Device.

5.6 Configuring LAN

Click LAN and LAN Setup to open the following screen.

Figure 17 LAN Setup

The following table describes the labels in this screen.

Table 11 LAN Setup

LABEL DESCRIPTION

DHCP

DHCP If set to Server, your ZyXEL Device can assign IP addresses, an IP default

gateway and DNS servers to Windows 95, Windows NT and other systems that
support the DHCP client.

If set to None, the DHCP server will be disabled.
If set to Relay, the ZyXEL Device acts as a surrogate DHCP server and relays

DHCP requests and responses between the remote server and the clients. Enter
the IP address of the actual, remote DHCP server in the Remote DHCP Server
field in this case.

When DHCP is used, the following items need to be set:

58 Chapter 5 LAN Setup

Table 11 LAN Setup (continued)

LABEL DESCRIPTION

P-660R-Tx v2 Series User’s Guide

Client IP Pool
Starting Address

Size of Client IP
Pool

Primary DNS Server Enter the IP addresses of the DNS servers. The DNS servers are passed to the

Secondary DNS
Server

Remote DHCP
Server

TCP/IP

IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation, for

IP Subnet Mask Type the subnet mask assigned to you by your ISP (if given).

RIP Direction Select the RIP direction from None, Both, In Only and Out Only.

RIP Version Select the RIP version from RIP-1, RIP-2B and RIP-2M.

Multicast IGMP (Internet Group Management Protocol) is a network-layer protocol used to

Any IP Setup Select the Active checkbox to enable the Any IP feature. This allows a computer

Apply Click Apply to save your changes back to the ZyXEL Device.

Cancel Click Cancel to begin configuring this screen afresh.

This field specifies the first of the contiguous addresses in the IP address pool.

This field specifies the size or count of the IP address pool.

DHCP clients along with the IP address and the subnet mask.

As above.

If Relay is selected in the DHCP field above then enter the IP address of the
actual remote DHCP server here.

example, 192.168.1.1 (factory default).

establish membership in a multicast group. The ZyXEL Device supports both
IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.

to access the Internet without changing the network settings (such as IP address
and subnet mask) of the computer, even when the IP addresses of the computer
and the ZyXEL Device are not in the same subnet.

When you disable the Any IP feature, only computers with dynamic IP addresses
or static IP addresses in the same subnet as the ZyXEL Device’s LAN IP address
can connect to the ZyXEL Device or access the Internet through the ZyXEL
Device.

Chapter 5 LAN Setup 59

P-660R-Tx v2 Series User’s Guide

60 Chapter 5 LAN Setup

This chapter describes how to configure WAN settings.

6.1 WAN Overview

A WAN (Wide Area Network) is an outside connection to another network or the Internet.

See Chapter 3 on page 39 for more information on the fields in the WAN screens.

6.2 Metric

P-660R-Tx v2 Series User’s Guide

CHAPTER 6

WAN Setup

The metric represents the "cost of transmission". A router determines the best route for
transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the
measurement of cost, with a minimum of "1" for directly connected networks. The number
must be between "1" and "15"; a number greater than "15" means the link is down. The
smaller the number, the lower the "cost".

The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the
default routes have the same metric, the ZyXEL Device uses the following pre-defined
priorities:

• Normal route: designated by the ISP (see Section 6.5 on page 63)

• Traffic-redirect route (see Section 6.7 on page 66)

• WAN-backup route, also called dial-backup (see Section 6.8 on page 67)

For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric
of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary
default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the
traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route
if the traffic-redirect route also fails.

If you want the dial-backup route to take first priority over the traffic-redirect route or even the
normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to
"2" (or greater).

Note: IP Policy Routing overrides the default routing behavior and takes priority over

all of the routes mentioned above.

Chapter 6 WAN Setup 61

P-660R-Tx v2 Series User’s Guide

6.3 PPPoE Encapsulation

The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an
IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up
connection using PPPoE.

For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example Radius).

One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.

Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.

By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.

6.4 Traffic Shaping

Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average
rate and fluctuations of data transmission over an ATM network. This agreement helps
eliminate congestion, which is important for transmission of real time data such as audio and
video connections.

Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter
may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits),
so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not
guaranteed because it is dependent on the line speed.

Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the
maximum average rate at which cells can be sent over the virtual connection. SCR may not be
greater than the PCR.

Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At
this time, more cells (up to the MBS) can be sent at the PCR again.

If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value
that correlates to your upstream line rate.

The following figure illustrates the relationship between PCR, SCR and MBS.

62 Chapter 6 WAN Setup

Figure 18 Example of Traffic Shaping

6.5 Zero Configuration Internet Access

Once you turn on and connect the ZyXEL Device to a telephone jack, it automatically detects
the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method)
from the ISP and makes the necessary configuration changes. In cases where additional
account information (such as an Internet account user name and password) is required or the
ZyXEL Device cannot connect to the ISP, you will be redirected to web screen(s) for
information input or troubleshooting.

P-660R-Tx v2 Series User’s Guide

Zero configuration for Internet access is disable when

• the ZyXEL Device is in bridge mode

• you set the ZyXEL Device to use a static (fixed) WAN IP address.

6.6 Configuring WAN Setup

To change your ZyXEL Device’s WAN remote node settings, click WA N and WA N S e t u p .

The screen differs by the encapsulation.

Chapter 6 WAN Setup 63

P-660R-Tx v2 Series User’s Guide

Figure 19 WAN Setup (PPPoE)

The following table describes the labels in this screen.

Table 12 WAN Setup

LABEL DESCRIPTION

Name Enter the name of your Internet Service Provider, e.g., MyISP. This information is

for identification purposes only.

Mode Select Routing (default) from the drop-down list box if your ISP allows multiple

computers to share an Internet account. Otherwise select Bridge.

64 Chapter 6 WAN Setup

P-660R-Tx v2 Series User’s Guide

Table 12 WAN Setup (continued)

LABEL DESCRIPTION

Encapsulation Select the method of encapsulation used by your ISP from the drop-down list

box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET

ENCAP or PPPoE.

Multiplex Select the method of multiplexing used by your ISP from the drop-down list.

Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual

VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you.

VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local

ATM QoS Type Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for

Cell Rate Cell rate configuration often helps eliminate traffic congestion that slows

Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak

Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be

Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be

Choices are VC or LLC.

circuit. Refer to the appendix for more information.

management of ATM traffic). Enter the VCI assigned to you.

voice or data traffic. Select UBR (Unspecified Bit Rate) for applications that are
non-time sensitive, such as e-mail. Select VBR (Variable Bit Rate) for bursty
traffic and bandwidth sharing with other applications.

transmission of real time data such as audio and video connections.

Cell Rate (PCR). This is the maximum rate at which the sender can send cells.
Type the PCR here.

transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.

sent at the peak rate. Type the MBS, which is less than 65535.

Login Information (PPPoA and PPPoE encapsulation only)

Service Name (PPPoE only) Type the name of your PPPoE service here.

User Name Enter the user name exactly as your ISP assigned. If assigned a name in the

form user@domain where domain identifies a service name, then enter both
components exactly as given.

Password Enter the password associated with the user name above.

IP Address This option is available if you select Routing in the Mode field.

A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet.

Select Obtain an IP Address Automatically if you have a dynamic IP address;
otherwise select Static IP Address and type your ISP assigned IP address in
the IP Address field below.

Connection
(PPPoA and PPPoE

encapsulation only)

Nailed-Up
Connection

Connect on Demand Select Connect on Demand when you don't want the connection up all the time

Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.

and specify an idle time-out in the Max Idle Timeout field.

Chapter 6 WAN Setup 65

P-660R-Tx v2 Series User’s Guide

Table 12 WAN Setup (continued)

LABEL DESCRIPTION

Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect

PPPoE Passthrough
(PPPoE

encapsulation only)

Subnet Mask
(ENET ENCAP

encapsulation only)

ENET ENCAP
Gateway

(ENET ENCAP
encapsulation only)

Zero Configuration This feature is not applicable/available when you configure the ZyXEL Device to

Back Click Back to return to the previous screen.

Apply Click Apply to save the changes.

Cancel Click Cancel to begin configuring this screen afresh.

on Demand. The default setting is 0, which means the Internet session will not
timeout.

This field is available when you select PPPoE encapsulation.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE

pass through to allow up to ten hosts on the LAN to use PPPoE client software
on their computers to connect to the ISP via the ZyXEL Device. Each host can
have a separate account and a public WAN IP address.

PPPoE pass through is an alternative to NAT for application where NAT is not
appropriate.

Disable PPPoE pass through if you do not need to allow hosts on the LAN to use
PPPoE client software on their computers to connect to the ISP.

Enter a subnet mask in dotted decimal notation.
Refer to Appendix C on page 149 in the to calculate a subnet mask If you are

implementing subnetting.

You must specify a gateway IP address (supplied by your ISP) when you select
ENET ENCAP in the Encapsulation field

use a static WAN IP address or in bridge mode.
Select Yes to set the ZyXEL Device to automatically detect the Internet

connection settings (such as the VCI/VPI numbers and the encapsulation
method) from the ISP and make the necessary configuration changes.

Select No to disable this feature. You must manually configure the ZyXEL
Device for Internet access.

6.7 Traffic Redirect

Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot connect
to the Internet. An example is shown in the figure below.

66 Chapter 6 WAN Setup

P-660R-Tx v2 Series User’s Guide

Figure 20 Traffic Redirect Example

The following network topology allows you to avoid triangle route security issues when the
backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three
logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the
protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in
another subnet (Subnet 2). Configure filters that allow packets from the protected LAN
(Subnet 1) to the backup gateway (Subnet 2).

Figure 21 Traffic Redirect LAN Setup

6.8 Configuring WAN Backup

To change your ZyXEL Device’s WAN backup settings, click WA N , then WAN Backup.
The screen appears as shown.

Chapter 6 WAN Setup 67

P-660R-Tx v2 Series User’s Guide

Figure 22 WAN Backup

The following table describes the labels in this screen.

Table 13 WAN Backup

LABEL DESCRIPTION

Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.

Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is
up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses
configured in the Check WAN IP Address fields.

Check WAN IP
Address1-3

Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP
address of a reliable nearby computer (for example, your ISP's DNS server
address).

Note: If you activate either traffic redirect or dial backup, you must

configure at least one IP address here.

When using a WAN backup connection, the ZyXEL Device periodically pings the
addresses configured here and uses the other WAN backup connection (if
configured) if there is no response.

Fail Tolerance Type the number of times (2 recommended) that your ZyXEL Device may ping the

IP addresses configured in the Check WAN IP Address field without getting a
response before switching to a WAN backup connection (or a different WAN
backup connection).

Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN backup

connection), it periodically checks to whether or not it can use a higher priority
connection.

Type the number of seconds (30 recommended) for the ZyXEL Device to wait
between checks. Allow more time if your destination IP address handles lots of
traffic.

68 Chapter 6 WAN Setup

P-660R-Tx v2 Series User’s Guide

Table 13 WAN Backup (continued)

LABEL DESCRIPTION

Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a

ping response from one of the IP addresses in the Check WAN IP Address field
before timing out the request. The WAN connection is considered "down" after the
ZyXEL Device times out the number of times specified in the Fail Tolerance field.
Use a higher value in this field if your network is busy or congested.

Traffic Redirect

Active Select this check box to have the ZyXEL Device use traffic redirect if the normal

WAN connection goes down.

Note: If you activate traffic redirect, you must configure at least one

Check WAN IP Address.

Metric This field sets this route's priority among the routes the ZyXEL Device uses.

The metric represents the "cost of transmission". A router determines the best route
for transmission by choosing a path with the lowest "cost". RIP routing uses hop
count as the measurement of cost, with a minimum of "1" for directly connected
networks. The number must be between "1" and "15"; a number greater than "15"
means the link is down. The smaller the number, the lower the "cost".

Backup Gateway Type the IP address of your backup gateway in dotted decimal notation. The ZyXEL

Device automatically forwards traffic to this IP address if the ZyXEL Device's
Internet connection terminates.

Back Click Back to return to the previous screen.

Apply Click Apply to save the changes.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 6 WAN Setup 69

P-660R-Tx v2 Series User’s Guide

70 Chapter 6 WAN Setup

Network Address Translation

This chapter discusses how to configure NAT on the ZyXEL Device.

7.1 NAT Overview

NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.

P-660R-Tx v2 Series User’s Guide

CHAPTER 7

(NAT) Screens

7.1.1 NAT Definitions

Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the
computers of your subscribers are the inside hosts, while the web servers on the Internet are
the outside hosts.

Global/local denotes the IP address of a host in a packet as the packet traverses a router, for
example, the local address refers to the IP address of a host when the packet is in the local
network, while the global address refers to the IP address of the host when the same packet is
traveling in the WAN side.

Note that inside/outside refers to the location of a host, while global/local refers to the IP
address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an
inside host in a packet when the packet is still in the local network, while an inside global
address (IGA) is the IP address of the same inside host when the packet is on the WAN side.
The following table summarizes this information.

Table 14 NAT Definitions

ITEM DESCRIPTION

Inside This refers to the host on the LAN.

Outside This refers to the host on the WAN.

Local This refers to the packet address (source or destination) as the packet travels on the

LAN.

Global This refers to the packet address (source or destination) as the packet travels on the

WAN.

Note: NAT never changes the IP address (either local or global) of an outside host.

Chapter 7 Network Address Translation (NAT) Screens 71

P-660R-Tx v2 Series User’s Guide

7.1.2 What NAT Does

In the simplest form, NAT changes the source IP address in a packet received from a
subscriber (the inside local address) to another (the inside global address) before forwarding
the packet to the WAN side. When the response comes back, NAT translates the destination
address (the inside global address) back to the inside local address before forwarding it to the
original inside host. Note that the IP address (either local or global) of an outside host is never
changed.

The global IP addresses for the inside hosts can be either static or dynamically assigned by the
ISP. In addition, you can designate servers, for example, a web server and a telnet server, on
your local network and make them accessible to the outside world. If you do not define any
servers (for Many-to-One and Many-to-Many Overload mapping – see Table 15 on page 74),
NAT offers the additional benefit of firewall protection. With no servers defined, your ZyXEL
Device filters out all incoming inquiries, thus preventing intruders from probing your network.
For more information on IP address translation, refer to RFC 1631, The IP Network Address
Translator (NAT).

7.1.3 How NAT Works

Each packet has two addresses – a source address and a destination address. For outgoing
packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside
Global Address) is the source address on the WAN. For incoming packets, the ILA is the
destination address on the LAN, and the IGA is the destination address on the WAN. NAT
maps private (local) IP addresses to globally unique ones required for communication with
hosts on other networks. It replaces the original IP source address (and TCP or UDP source
port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet
and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses
and port numbers so incoming reply packets can have their original values restored. The
following figure illustrates this.

72 Chapter 7 Network Address Translation (NAT) Screens

Figure 23 How NAT Works

7.1.4 NAT Application

The following figure illustrates a possible NAT application, where three inside LANs (logical
LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN
networks. More examples follow at the end of this chapter.

P-660R-Tx v2 Series User’s Guide

Figure 24 NAT Application With IP Alias

7.1.5 NAT Mapping Types

NAT supports five types of IP/port mapping. They are:

Chapter 7 Network Address Translation (NAT) Screens 73

P-660R-Tx v2 Series User’s Guide

• One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one
global IP address.

• Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP
addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port
address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers
supported (the SUA Only option in today’s routers).

• Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps
the multiple local IP addresses to shared global IP addresses.

• Many-to-Many No Overload:
maps each local IP address to a unique global IP address.

• Server: This type allows you to specify inside servers of different services behind the
NAT to be accessible to the outside world.

Note: Port numbers do not change for One-to-One and Many-to-Many No

Overload NAT mapping types.

The following table summarizes these types.

Table 15 NAT Mapping Types

In Many-to-Many No Overload mode, the ZyXEL Device

TYPE IP MAPPING

One-to-One ILA1ÅÆ IGA1

Many-to-One (SUA/PAT) ILA1ÅÆ IGA1

ILA2ÅÆ IGA1
…

Many-to-Many Overload ILA1ÅÆ IGA1

ILA2ÅÆ IGA2
ILA3ÅÆ IGA1
ILA4ÅÆ IGA2
…

Many-to-Many No Overload ILA1ÅÆ IGA1

ILA2ÅÆ IGA2
ILA3ÅÆ IGA3
…

Server Server 1 IPÅÆ IGA1

Server 2 IPÅÆ IGA1
Server 3 IPÅÆ IGA1

7.2 SUA (Single User Account) Versus NAT

SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two
types of mapping, Many-to-One and Server. The ZyXEL Device also supports Full
Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of
clients or servers using mapping types as outlined in Table 15 on page 74.

74 Chapter 7 Network Address Translation (NAT) Screens

Note: 1. Choose SUA Only if you have just one public WAN IP address for your

ZyXEL Device.

2. Choose Full Feature if you have multiple public WAN IP addresses for your
ZyXEL Device.

7.3 SUA Server

A SUA server set is a list of inside (behind NAT on the LAN) servers, for example, web or
FTP, that you can make visible to the outside world even though SUA makes your whole
inside network appear as a single computer to the outside world.

You may enter a single port number or a range of port numbers to be forwarded, and the local
IP address of the desired server. The port number identifies a service; for example, web
service is on port 80 and FTP on port 21. In some cases, such as for unknown services or
where one server can support more than one service (for example both FTP and web service),
it might be better to specify a range of port numbers. You can allocate a server IP address that
corresponds to a port or a range of ports.

P-660R-Tx v2 Series User’s Guide

Many residential broadband ISP accounts do not allow you to run any server processes (such
as a Web or FTP server) from your location. Your ISP may periodically check for servers and
may suspend your account if it discovers any active services at your location. If you are
unsure, refer to your ISP.

7.3.1 Default Server IP Address

In addition to the servers for specified services, NAT supports a default server IP address. A
default server receives packets from ports that are not specified in this screen.

Note: If you do not assign an IP address in Server Set 1 (default server) the ZyXEL

Device discards all packets received for ports that are not specified here or in
the remote management setup.

7.3.2 Port Forwarding: Services and Port Numbers

The most often used port numbers are shown in the following table. Please refer to RFC 1700
for further information about port numbers.

Table 16 Services and Port Numbers

SERVICES PORT NUMBER

ECHO 7

FTP (File Transfer Protocol) 21

SMTP (Simple Mail Transfer Protocol) 25

DNS (Domain Name System) 53

Finger 79

Chapter 7 Network Address Translation (NAT) Screens 75

P-660R-Tx v2 Series User’s Guide

Table 16 Services and Port Numbers (continued)

SERVICES PORT NUMBER

HTTP (Hyper Text Transfer protocol or WWW, Web) 80

POP3 (Post Office Protocol) 110

NNTP (Network News Transport Protocol) 119

SNMP (Simple Network Management Protocol) 161

SNMP trap 162

PPTP (Point-to-Point Tunneling Protocol) 1723

7.3.3 Configuring Servers Behind SUA (Example)

Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the
example), port 80 to another (B in the example) and assign a default server IP address of

192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP
assigns the WAN IP address. The NAT network appears as a single host on the Internet.

IP address assigned by ISP.

Figure 25 Multiple Servers Behind NAT Example

7.4 Selecting the NAT Mode

Click NAT to open the following screen.

76 Chapter 7 Network Address Translation (NAT) Screens

P-660R-Tx v2 Series User’s Guide

Figure 26 NAT Mode

The following table describes the labels in this screen.

Table 17 NAT Mode

LABEL DESCRIPTION

None Select this radio button to disable NAT.

SUA Only Select this radio button if you have just one public WAN IP address for your ZyXEL

Device. The ZyXEL Device uses Address Mapping Set 1 in the NAT - Edit SUA/NAT
Server Set screen.

Edit Details Click this link to go to the NAT - Edit SUA/NAT Server Set screen.

Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL

Device.

Edit Details Click this link to go to the NAT - Address Mapping Rules screen.

Apply Click Apply to save your configuration.

7.5 Configuring SUA Server

Note: If you do not assign an IP address in Server Set 1 (default server), the ZyXEL

Device discards all packets received for ports that are not specified here or in
the remote management setup.

Click NAT, select SUA Only and click Edit Details to open the following screen.

Refer to Table 16 on page 75 for port numbers commonly used for particular services.

Chapter 7 Network Address Translation (NAT) Screens 77

P-660R-Tx v2 Series User’s Guide

Figure 27 Edit SUA/NAT Server Set

The following table describes the labels in this screen.

Table 18 Edit SUA/NAT Server Set

LABEL DESCRIPTION

Start Port No. Enter a port number in this field.

To forward only one port, enter the port number again in the End Port No. field.
To forward a series of ports, enter the start port number here and the end port

number in the End Port No. field.

End Port No. Enter a port number in this field.

To forward only one port, enter the port number again in the Start Port No. field
above and then enter it again in this field.

To forward a series of ports, enter the last port number in a series that begins with
the port number in the Start Port No. field above.

IP Address Enter your server IP address in this field.

Save Click Save to save your changes back to the ZyXEL Device.

Cancel Click Cancel to return to the previous configuration.

78 Chapter 7 Network Address Translation (NAT) Screens

7.6 Configuring Address Mapping

Ordering your rules is important because the ZyXEL Device applies the rules in the order that
you specify. When a rule matches the current packet, the ZyXEL Device takes the
corresponding action and the remaining rules are ignored. If there are any empty rules before
your new configured rule, your configured rule will be pushed up by that number of empty
rules. For example, if you have already configured rules 1 to 6 in your current set and now you
configure rule number 9. In the set summary screen, the new rule will be rule 7, not 9. Now if
you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 and 7 become new
rules 4, 5 and 6.

To change your ZyXEL Device’s address mapping settings, click NAT, Select Full Feature
and click Edit Details to open the following screen.

Figure 28 Address Mapping Rules

P-660R-Tx v2 Series User’s Guide

The following table describes the labels in this screen.

Table 19 Address Mapping Rules

LABEL DESCRIPTION

Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for

Server port mapping.

Local End IP This is the end Inside Local IP Address (ILA). If the rule is for all local IP addresses,

then this field displays 0.0.0.0 as the Local Start IP address and 255.255.255.255
as the Local End IP address. This field is N/A for One-to-one and Server mapping
types.

Global Start IP This is the starting Inside Global IP Address (IGA). Enter 0.0.0.0 here if you have a

dynamic IP address from your ISP. You can only do this for Many-to-One and
Server mapping types.

Global End IP This is the ending Inside Global IP Address (IGA). This field is N/A for One-to-one,

Many-to-One and Server mapping types.

Chapter 7 Network Address Translation (NAT) Screens 79

P-660R-Tx v2 Series User’s Guide

Table 19 Address Mapping Rules (continued)

LABEL DESCRIPTION

Type 1-1: One-to-one mode maps one local IP address to one global IP address. Note that

port numbers do not change for the One-to-one NAT mapping type.
M-1: Many-to-One mode maps multiple local IP addresses to one global IP address.

This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User
Account feature that previous ZyXEL routers supported only.

M-M Ov (Overload): Many-to-Many Overload mode maps multiple local IP addresses
to shared global IP addresses.

MM No (No Overload): Many-to-Many No Overload mode maps each local IP
address to unique global IP addresses.

Server: This type allows you to specify inside servers of different services behind the
NAT to be accessible to the outside world.

Back Click Back to return to the NAT Mode screen.

7.7 Editing an Address Mapping Rule

To edit an address mapping rule, click the rule’s link in the NAT Address Mapping Rules
screen to display the screen shown next.

Figure 29 Address Mapping Rule Edit

80 Chapter 7 Network Address Translation (NAT) Screens

P-660R-Tx v2 Series User’s Guide

The following table describes the labels in this screen.

Table 20 Address Mapping Rule Edit

LABEL DESCRIPTION

Type Choose the port mapping type from one of the following.

• One-to-One: One-to-One mode maps one local IP address to one global IP
address. Note that port numbers do not change for One-to-one NAT mapping
type.

• Many-to-One: Many-to-One mode maps multiple local IP addresses to one
global IP address. This is equivalent to SUA (i.e., PAT, port address translation),
ZyXEL's Single User Account feature that previous ZyXEL routers supported
only.

• Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP
addresses to shared global IP addresses.

• Many-to-Many No Overload: Many-to-Many No Overload mode maps each
local IP address to unique global IP addresses.

• Server: This type allows you to specify inside servers of different services behind
the NAT to be accessible to the outside world.

Local Start IP This is the starting local IP address (ILA). Local IP addresses are N/A for Server port

mapping.

Local End IP This is the end local IP address (ILA). If your rule is for all local IP addresses, then

enter 0.0.0.0 as the Local Start IP address and 255.255.255.255 as the Local End
IP address.

This field is N/A for One-to-One and Server mapping types.

Global Start IP This is the starting global IP address (IGA). Enter 0.0.0.0 here if you have a dynamic

IP address from your ISP.

Global End IP This is the ending global IP address (IGA). This field is N/A for One-to-One, Many-

to-One and Server mapping types.

Server Mapping
Set

Edit Details Click this link to go to the NAT - Edit SUA/NAT Server Set screen to edit a server set

Apply Click Apply to save your changes back to the ZyXEL Device.

Cancel Click Cancel to return to the previously saved settings.

Delete Click Delete to exit this screen without saving.

Only available when Type is set to Server.
Select a number from the drop-down menu to choose a server set from the NAT -

Address Mapping Rules screen.

that you have selected in the Server Mapping Set field.

Chapter 7 Network Address Translation (NAT) Screens 81

P-660R-Tx v2 Series User’s Guide

82 Chapter 7 Network Address Translation (NAT) Screens

This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS.

8.1 Dynamic DNS

Dynamic DNS allows you to update your current dynamic IP address with one or many
dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You
can also access your FTP server or Web site on your own computer using a domain name (for
instance myhost.dhs.org, where myhost is a name of your choice) that will never change
instead of using an IP address that changes each time you reconnect. Your friends or relatives
will always be able to call you even if they don't know your IP address.

P-660R-Tx v2 Series User’s Guide

CHAPTER 8

Dynamic DNS Setup

First of all, you need to have registered a dynamic DNS account with www.dyndns.org. This is
for people with a dynamic IP from their ISP or DHCP server that would still like to have a
domain name. The Dynamic DNS service provider will give you a password or key.

8.1.1 DYNDNS Wildcard

Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the
same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use,
for example, www.yourhost.dyndns.org and still reach your hostname.

Note: If you have a private WAN IP address, then you cannot use Dynamic DNS.

8.2 Configuring Dynamic DNS

To change your ZyXEL Device’s DDNS, click Dynamic DNS. The screen appears as shown.

Chapter 8 Dynamic DNS Setup 83

P-660R-Tx v2 Series User’s Guide

Figure 30 Dynamic DNS

The following table describes the labels in this screen.

Table 21 Dynamic DNS

LABEL DESCRIPTION

Active Select this check box to use dynamic DNS.

Service Provider This is the name of your Dynamic DNS service provider.

Host Names Type the domain name assigned to your ZyXEL Device by your Dynamic DNS

E-mail Address Type your e-mail address.

User Type your user name.

Password Type the password assigned to you.

Enable Wildcard Select the check box to enable DYNDNS Wildcard.

Apply Click Apply to save your changes back to the ZyXEL Device.

Cancel Click Cancel to begin configuring this screen afresh.

provider.

84 Chapter 8 Dynamic DNS Setup

This screen is not available on all models. Use this screen to configure the ZyXEL Device’s
time and date settings.

9.1 Configuring Time and Date

To change your ZyXEL Device’s time and date, click Time And Date. The screen appears as
shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone.

Figure 31 Time and Date

P-660R-Tx v2 Series User’s Guide

CHAPTER 9

Time and Date

Chapter 9 Time and Date 85

P-660R-Tx v2 Series User’s Guide

The following table describes the labels in this screen.

Table 22 Time and Date

LABEL DESCRIPTION

Time Server

Use Protocol when
Bootup

IP Address or URL Enter the IP address or URL of your time server. Check with your ISP/network

Time and Date Choose the time zone of your location. This will set the time difference between

Daylight Savings Select this option if you use daylight savings time. Daylight saving is a period from

Start Date Enter the month and day that your daylight-savings time starts on if you selected

End Date Enter the month and day that your daylight-savings time ends on if you selected

Synchronize
system clock with
Time Server now.

Date

Current Date This field displays the date of your ZyXEL Device.

New Date (yyyy­mm-dd)

Time

Current Time This field displays the time of your ZyXEL Device.

New Time This field displays the last updated time from the time server.

Apply Click Apply to save your changes back to the ZyXEL Device.

Cancel Click Cancel to begin configuring this screen afresh.

Select the time service protocol that your time server uses. Not all time servers
support all protocols, so you may have to check with your ISP/network
administrator or use trial and error to find a protocol that works.

The main difference between them is the format.

Daytime (RFC 867) format is day/month/year/time zone of the server.
Time (RFC 868) format displays a 4-byte integer giving the total number of

seconds since 1970/1/1 at 0:0:0.
NTP (RFC 1305) is similar to Time (RFC 868).
Select None to enter the time and date manually.

administrator if you are unsure of this information.

your time zone and Greenwich Mean Time (GMT).

late spring to early fall when many countries set their clocks ahead of normal local
time by one hour to give more daytime light in the evening.

Daylight Savings.

Daylight Savings.

Select this option to have your ZyXEL Device use the time server (that you
configured above) to set its internal system clock.

Please wait for up to 60 seconds while the ZyXEL Device locates the time server.
If the ZyXEL Device cannot find the time server, please check the time server
protocol and its IP address. If the IP address was entered correctly, try pinging it
for example to test the connection.

Each time you reload this page, the ZyXEL Device synchronizes the time with the
time server.

This field displays the last updated date from the time server.
When you select None in the Use Protocol when Bootup field, enter the new

date in this field and then click Apply.

Each time you reload this page, the ZyXEL Device synchronizes the time with the
time server.

When you select None in the Use Protocol when Bootup field, enter the new
time in this field and then click Apply.

86 Chapter 9 Time and Date

CHAPTER 10

Remote Management

This chapter provides information on configuring remote management.

10.1 Remote Management Overview

Remote management allows you to determine which services/protocols can access which
ZyXEL Device interface (if any) from which computers.

You may manage your ZyXEL Device from a remote location via:

P-660R-Tx v2 Series User’s Guide

Configuration

• Internet (WAN only)

• ALL (LAN and WAN)

• LAN only,

• Neither (Disable).

To disable remote management of a service, select Disable in the corresponding Server
Access field.

You may only have one remote management session running at a time. The ZyXEL Device
automatically disconnects a remote management session of lower priority when another
remote management session of higher priority starts. The priorities for the different types of
remote management sessions are as follows.

1 Telnet

2 HTTP

10.1.1 Remote Management Limitations

Remote management over LAN or WAN will not work when:

• You have disabled that service in one of the remote management screens.

• The IP address in the Secured Client IP field does not match the client IP address. If it
does not match, the ZyXEL Device will disconnect the session immediately.

• There is already another remote management session with an equal or higher priority
running. You may only have one remote management session running at one time.

Chapter 10 Remote Management Configuration 87

P-660R-Tx v2 Series User’s Guide

10.1.2 Remote Management and NAT

When NAT is enabled:

• Use the ZyXEL Device’s WAN IP address when configuring from the WAN.

• Use the ZyXEL Device’s LAN IP address when configuring from the LAN.

10.1.3 System Timeout

There is a default system management idle timeout of five minutes (three hundred seconds).
The ZyXEL Device automatically logs you out if the management session remains idle for
longer than this timeout period. The management session does not time out when a statistics
screen is polling.

10.2 Telnet

You can configure your ZyXEL Device for remote Telnet access as shown next.

Figure 32 Telnet Configuration on a TCP/IP Network

10.3 FTP

You can upload and download ZyXEL Device firmware and configuration files using FTP. To
use this feature, your computer must have an FTP client.

10.4 Web

You can use the ZyXEL Device’s embedded web configurator for configuration and file
management. See the online help for details.

10.5 Configuring Remote Management

Click Remote Management to open the following screen.

88 Chapter 10 Remote Management Configuration

Figure 33 Remote Management

The following table describes the labels in this screen.

Table 23 Remote Management

LABEL DESCRIPTION

P-660R-Tx v2 Series User’s Guide

Server Type Each of these labels denotes a service that you may use to remotely manage the

Access Status Select the access interface. Choices are All, LAN Only, WAN Only and Disable.

Port This field shows the port number for the remote management service. You may

Secured Client IPThe default 0.0.0.0 allows any client to use this service to remotely manage the

Apply Click Apply to save your settings back to the ZyXEL Device.

Cancel Click Cancel to begin configuring this screen afresh.

ZyXEL Device.

change the port number for a service in this field, but you must use the same port
number to use that service for remote management.

ZyXEL Device. Type an IP address to restrict access to a client with a matching IP
address.

Chapter 10 Remote Management Configuration 89

P-660R-Tx v2 Series User’s Guide

90 Chapter 10 Remote Management Configuration

P-660R-Tx v2 Series User’s Guide

CHAPTER 11

Universal Plug-and-Play (UPnP)

This chapter introduces the UPnP feature in the web configurator.

11.1 Introducing Universal Plug and Play

Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP
for simple peer-to-peer network connectivity between devices. A UPnP device can
dynamically join a network, obtain an IP address, convey its capabilities and learn about other
devices on the network. In turn, a device can leave a network smoothly and automatically
when it is no longer in use.

See Section 11.2.1 on page 92 for configuration instructions.

11.1.1 How do I know if I'm using UPnP?

UPnP hardware is identified as an icon in the Network Connections folder (Windows XP).
Each UPnP compatible device installed on your network will appear as a separate icon.
Selecting the icon of a UPnP device will allow you to access the information and properties of
that device.

11.1.2 NAT Traversal

UPnP NAT traversal automates the process of allowing an application to operate through
NAT. UPnP network devices can automatically configure network addressing, announce their
presence in the network to other UPnP devices and enable exchange of simple product and
service descriptions. NAT traversal allows the following:

• Dynamic port mapping

• Learning public IP addresses

• Assigning lease times to mappings

Windows Messenger is an example of an application that supports NAT traversal and UPnP.

See the NAT chapter for more information on NAT.

Chapter 11 Universal Plug-and-Play (UPnP) 91

P-660R-Tx v2 Series User’s Guide

11.1.3 Cautions with UPnP

The automated nature of NAT traversal applications in establishing their own services and
opening firewall ports may present network security issues. Network information and
configuration may also be obtained and modified by users in some network environments.

When a UPnP device joins a network, it announces its presence with a multicast message. For
security reasons, the ZyXEL Device allows multicast messages on the LAN only.

All UPnP-enabled devices may communicate freely with each other without additional
configuration. Disable UPnP if this is not your intention.

11.2 UPnP and ZyXEL

ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™
Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device
(IGD) 1.0.

See the following sections for examples of installing and using UPnP.

11.2.1 Configuring UPnP

From the Site Map in the main menu, click UPnP under Advanced Setup to display the
screen shown next.

92 Chapter 11 Universal Plug-and-Play (UPnP)

Figure 34 Configuring UPnP

The following table describes the labels in this screen.

Table 24 Configuring UPnP

LABEL DESCRIPTION

P-660R-Tx v2 Series User’s Guide

Enable the Universal Plug
and Play (UPnP) Service

Allow users to make
configuration changes
through UPnP

Apply Click Apply to save the setting to the ZyXEL Device.

Cancel Click Cancel to return to the previously saved settings.

Select this checkbox to activate UPnP. Be aware that anyone could use
a UPnP application to open the web configurator's login screen without
entering the ZyXEL Device's IP address (although you must still enter
the password to access the web configurator).

Select this check box to allow UPnP-enabled applications to
automatically configure the ZyXEL Device so that they can
communicate through the ZyXEL Device, for example by using NAT
traversal, UPnP applications automatically reserve a NAT forwarding
port in order to communicate with another UPnP enabled device; this
eliminates the need to manually configure port forwarding for the UPnP
enabled application.

11.3 Installing UPnP in Windows Example

This section shows how to install UPnP in Windows Me and Windows XP.

Installing UPnP in Windows Me

Follow the steps below to install the UPnP in Windows Me.

1 Click Start and Control Panel. Double-click Add/Remove Programs.

2 Click on the Windows Setup tab and select Communication in the Components

selection box. Click Details.

Chapter 11 Universal Plug-and-Play (UPnP) 93

P-660R-Tx v2 Series User’s Guide

Figure 35 Add/Remove Programs: Windows Setup: Communication

3 In the Communications window, select the Universal Plug and Play check box in the

Components selection box.

Figure 36 Add/Remove Programs: Windows Setup: Communication: Components

4 Click OK to go back to the Add/Remove Programs Properties window and click Next.

5 Restart the computer when prompted.

94 Chapter 11 Universal Plug-and-Play (UPnP)

P-660R-Tx v2 Series User’s Guide

Installing UPnP in Windows XP

Follow the steps below to install the UPnP in Windows XP.

1 Click Start and Control Panel.

2 Double-click Network Connections.

3 In the Network Connections window, click Advanced in the main menu and select

Optional Networking Components ….

Figure 37 Network Connections

4 The Windows Optional Networking Components Wizard window displays. Select

Networking Service in the Components selection box and click Details.

Chapter 11 Universal Plug-and-Play (UPnP) 95

P-660R-Tx v2 Series User’s Guide

Figure 38 Windows Optional Networking Components Wizard

5 In the Networking Services window, select the Universal Plug and Play check box.

Figure 39 Networking Services

96 Chapter 11 Universal Plug-and-Play (UPnP)

6 Click OK to go back to the Windows Optional Networking Component Wizard

window and click Next.

11.4 Using UPnP in Windows XP Example

This section shows you how to use the UPnP feature in Windows XP. You must already have
UPnP installed in Windows XP and UPnP activated on the ZyXEL Device.

Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your
computer and the ZyXEL Device.

Auto-discover Your UPnP-enabled Network Device

1 Click Start and Control Panel. Double-click Network Connections. An icon displays

under Internet Gateway.

2 Right-click the icon and select Properties.

Figure 40 Network Connections

P-660R-Tx v2 Series User’s Guide

3 In the Internet Connection Properties window, click Settings to see the port mappings

there were automatically created.

Chapter 11 Universal Plug-and-Play (UPnP) 97

P-660R-Tx v2 Series User’s Guide

Figure 41 Internet Connection Properties

4 You may edit or delete the port mappings or click Add to manually add port mappings.

98 Chapter 11 Universal Plug-and-Play (UPnP)

P-660R-Tx v2 Series User’s Guide

Figure 42 Internet Connection Properties: Advanced Settings

Figure 43 Internet Connection Properties: Advanced Settings: Add

5 When the UPnP-enabled device is disconnected from your computer, all port mappings

will be deleted automatically.

6 Select Show icon in notification area when connected option and click OK. An icon

displays in the system tray.

Chapter 11 Universal Plug-and-Play (UPnP) 99

P-660R-Tx v2 Series User’s Guide

Figure 44 System Tray Icon

7 Double-click on the icon to display your current Internet connection status.

Figure 45 Internet Connection Status

Web Configurator Easy Access

With UPnP, you can access the web-based configurator on the ZyXEL Device without finding
out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP
address of the ZyXEL Device.

Follow the steps below to access the web configurator.

1 Click Start and then Control Panel.

2 Double-click Network Connections.

3 Select My Network Places under Other Places.

100 Chapter 11 Universal Plug-and-Play (UPnP)

Figure 46 Network Connections

P-660R-Tx v2 Series User’s Guide

4 An icon with the description for each UPnP-enabled device displays under Local

Network.

5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator

login screen displays.

Chapter 11 Universal Plug-and-Play (UPnP) 101