Zyxel P-661H specifications

P-661H/HW Series

802.11g Wireless ADSL2+ 4-port Security Gateway

User’s Guide

Version 3.40

Edition 1

5/2006

P-661H/HW Series User’s Guide

Copyright

Copyright © 2006 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Copyright 3

P-661H/HW Series User’s Guide

Federal Communications Commission (FCC) Interference Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause
undesired operations.

This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.

If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:

Certifications

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and the receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.

• Consult the dealer or an experienced radio/TV technician for help.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Certifications

1 Go to www.zyxel.com.

2 Select your product from the drop-down list box on the ZyXEL home page to go to that

product's page.

3 Select the certification you wish to view from this page.

4 Certifications

P-661H/HW Series User’s Guide

Certifications 5

P-661H/HW Series User’s Guide

For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel can
service the device. Please contact your vendor for further information.

• Connect the power cord to the right supply voltage (110V AC in North America or 230V
AC in Europe).

• Place connecting cables carefully so that no one will step on them or stumble over them.
Do NOT allow anything to rest on the power cord and do NOT locate the product where
anyone can walk on the power cord.

• If you wall mount your device, make sure that no electrical, gas or water pipes will be
damaged.

• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of
electric shock from lightning.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.

• Make sure to connect the cables to the correct ports.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

• Do NOT store things on the device.

• Connect ONLY suitable accessories to the device.

Safety Warnings

6 Safety Warnings

P-661H/HW Series User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

ZyXEL Limited Warranty 7

P-661H/HW Series User’s Guide

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

Customer Support

METHOD

LOCATION

CORPORATE
HEADQUARTERS
(WORLDWIDE)

CZECH REPUBLIC

DENMARK

FINLAND

FRANCE

GERMANY

HUNGARY

KAZAKHSTAN

NORTH AMERICA

NORWAY

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.zyxel.com

[e-mail] [phone] ftp.zyxel.com

[e-mail] [phone] www.zyxel.cz ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.dk ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fi ZyXEL Communications Oy

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fr ZyXEL France

[phone]

[e-mail] [phone] www.zyxel.de ZyXEL Deutschland GmbH.

[e-mail] [phone]

[e-mail] [phone] www.zyxel.hu ZyXEL Hungary

[e-mail] [phone]

http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan

[e-mail] [phone]

[e-mail] 1-800-255-4101

[phone]

[e-mail] [phone] ftp.us.zyxel.com

[e-mail] [phone] www.zyxel.no ZyXEL Communications A/S

[e-mail] [phone]

A

WEB SITE

www.europe.zyxel.com

ftp.europe.zyxel.com

www.us.zyxel.com ZyXEL Communications Inc.

REGULAR MAIL

ZyXEL Communications Corp.
6 Innovation Road II

Science Park
Hsinchu 300
Ta iw a n

Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika

Columbusvej
2860 Soeborg
Denmark

Malminkaari 10
00700 Helsinki
Finland

1 rue des Vergers
Bat. 1 / C
69760 Limonest
France

Adenauerstr. 20/A2 D-52146
Wuerselen
Germany

48, Zoldlomb Str.
H-1025, Budapest
Hungary

43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan

1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.

Nils Hansens vei 13
0667 Oslo
Norway

8 Customer Support

P-661H/HW Series User’s Guide

METHOD

LOCATION

POLAND

RUSSIA

SPAIN

SWEDEN

UKRAINE

UNITED KINGDOM

A. “+” is the (prefix) number you enter to make an international telephone call.

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.pl.zyxel.com ZyXEL Communications

[phone]

http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia

[e-mail] [phone]

[e-mail] [phone] www.zyxel.es ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.se ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.ua.zyxel.com ZyXEL Ukraine

[e-mail] [phone]

[e-mail] [phone]

08707 555779 (UK only)

[e-mail] [phone] ftp.zyxel.co.uk

A

WEB SITE

REGULAR MAIL

ul.Emilli Plater 53
00-113 Warszawa
Poland

Ostrovityanova 37a Str.
Moscow, 117279
Russia

Arte, 21 5ª planta
28033 Madrid
Spain

Sjöporten 4, 41764 Göteborg
Sweden

13, Pimonenko Str.
Kiev, 04050
Ukraine

www.zyxel.co.uk ZyXEL Communications UK

Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)

Customer Support 9

P-661H/HW Series User’s Guide

10 Customer Support

P-661H/HW Series User’s Guide

Table of Contents

Copyright ..................................................................................................................3

Certifications ............................................................................................................4

Safety Warnings ....................................................................................................... 6

ZyXEL Limited Warranty.......................................................................................... 7

Customer Support.................................................................................................... 8

Table of Contents ................................................................................................... 11

List of Figures ........................................................................................................ 23

List of Tables .......................................................................................................... 29

Preface ....................................................................................................................33

Chapter 1

Getting To Know Your ZyXEL Device................................................................... 35

1.1 Introducing the ZyXEL Device ............................................................................35

1.2 Features .............................................................................................................36

1.2.1 Wireless Features (Wireless Devices Only) .............................................38

1.3 Applications for the ZyXEL Device .....................................................................39

1.3.1 Protected Internet Access .........................................................................39

1.3.2 LAN to LAN Application ............................................................................40

1.4 Front Panel LEDs ...............................................................................................40

1.5 Hardware Connection ........................................................................................41

1.6 Splitters and Microfilters .....................................................................................41

1.6.1 Connecting a POTS Splitter ......................................................................42

1.6.2 Telephone Microfilters ...............................................................................42

Chapter 2

Introducing the Web Configurator........................................................................ 45

2.1 Web Configurator Overview ...............................................................................45

2.2 Accessing the Web Configurator ........................................................................45

2.3 Resetting the ZyXEL Device ..............................................................................47

2.3.1 Using the Reset Button .............................................................................47

2.4 Navigating the Web Configurator .......................................................................47

2.4.1 Navigation Panel .......................................................................................47

2.4.2 Status Screen ..........................................................................................51

Table of Contents 11

P-661H/HW Series User’s Guide

2.4.3 Status: Any IP Table ..................................................................................53

2.4.4 Status: WLAN Status (Wireless devices only) ..........................................54

2.4.5 Status: VPN Status ...................................................................................54

2.4.6 Status: Bandwidth Status ..........................................................................55

2.4.7 Status: Packet Statistics ............................................................................56

2.4.8 Changing Login Password .......................................................................57

Chapter 3

Wizards ................................................................................................................... 59

3.1 Internet Setup Wizard ........................................................................................60

3.1.1 Automatic Detection ..................................................................................60

3.1.2 Manual Configuration ................................................................................61

3.1.2.1 Screen 1 ..........................................................................................61

3.1.2.2 Screen 2 ..........................................................................................61

3.1.2.3 Screen 3 ..........................................................................................62

3.1.3 No DSL Detection .....................................................................................65

3.2 Wireless Connection Wizard Setup (wireless devices only) ..............................66

3.2.1 Manually assign a WPA-PSK key .............................................................69

3.2.2 Manually assign a WEP key .....................................................................69

3.3 Bandwidth Management Wizard ........................................................................72

3.3.1 Screen 1 ...................................................................................................73

3.3.2 Screen 2 ...................................................................................................74

3.3.3 Screen 3 ...................................................................................................75

Chapter 4

WAN Setup.............................................................................................................. 77

4.1 WAN Overview ..................................................................................................77

4.1.1 Encapsulation ...........................................................................................77

4.1.1.1 ENET ENCAP .................................................................................77

4.1.1.2 PPP over Ethernet ..........................................................................77

4.1.1.3 PPPoA .............................................................................................78

4.1.1.4 RFC 1483 ........................................................................................78

4.1.2 Multiplexing ...............................................................................................78

4.1.2.1 VC-based Multiplexing ....................................................................78

4.1.2.2 LLC-based Multiplexing ...................................................................78

4.1.3 VPI and VCI ..............................................................................................78

4.1.4 IP Address Assignment ............................................................................79

4.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation .....................79

4.1.4.2 IP Assignment with RFC 1483 Encapsulation .................................79

4.1.4.3 IP Assignment with ENET ENCAP Encapsulation ..........................79

4.1.5 Nailed-Up Connection (PPP) ....................................................................79

4.1.6 NAT ...........................................................................................................79

4.2 Metric ................................................................................................................80

12 Table of Contents

P-661H/HW Series User’s Guide

4.3 Traffic Shaping ...................................................................................................80

4.3.1 ATM Traffic Classes ..................................................................................81

4.3.1.1 Constant Bit Rate (CBR) .................................................................81

4.3.1.2 Variable Bit Rate (VBR) ...................................................................81

4.3.1.3 Unspecified Bit Rate (UBR) .............................................................82

4.4 Zero Configuration Internet Access ....................................................................82

4.5 Internet Connection ...........................................................................................82

4.5.1 Configuring Advanced Internet Connection ..............................................84

4.6 Configuring More Connections ...........................................................................86

4.6.1 More Connections Edit ............................................................................87

4.6.2 Configuring More Connections Advanced Setup ......................................90

4.7 Traffic Redirect ...................................................................................................91

4.8 Configuring WAN Backup ..................................................................................92

Chapter 5

LAN Setup............................................................................................................... 95

5.1 LAN Overview ...................................................................................................95

5.1.1 LANs, WANs and the ZyXEL Device ........................................................95

5.1.2 DHCP Setup .............................................................................................96

5.1.2.1 IP Pool Setup ..................................................................................96

5.1.3 DNS Server Address ................................................................................96

5.1.4 DNS Server Address Assignment .............................................................97

5.2 LAN TCP/IP ........................................................................................................97

5.2.1 IP Address and Subnet Mask ...................................................................97

5.2.1.1 Private IP Addresses .......................................................................98

5.2.2 RIP Setup .................................................................................................98

5.2.3 Multicast ....................................................................................................99

5.2.4 Any IP .......................................................................................................99

5.2.4.1 How Any IP Works ........................................................................100

5.3 Configuring LAN IP ..........................................................................................101

5.3.1 Configuring Advanced LAN Setup ..........................................................101

5.4 DHCP Setup .....................................................................................................103

5.5 LAN Client List .................................................................................................104

5.6 LAN IP Alias .....................................................................................................106

Chapter 6

Wireless LAN ........................................................................................................ 109

6.1 Wireless Network Overview .............................................................................109

6.2 Wireless Security Overview .............................................................................110

6.2.1 SSID ....................................................................................................... 110

6.2.2 MAC Address Filter .................................................................................110

6.2.3 User Authentication ................................................................................110

6.2.4 Encryption ............................................................................................... 111

Table of Contents 13

P-661H/HW Series User’s Guide

6.2.5 One-Touch Intelligent Security Technology (OTIST) ............................... 112

6.3 Wireless Performance Overview ......................................................................112

6.3.1 Quality of Service (QoS) ......................................................................... 112

6.4 General Wireless LAN Screen ........................................................................112

6.4.1 No Security .............................................................................................114

6.4.2 WEP Encryption ...................................................................................... 114

6.4.3 WPA-PSK/WPA2-PSK ............................................................................ 115

6.4.4 WPA/WPA2 ............................................................................................. 117

6.4.5 Wireless LAN Advanced Setup ...............................................................119

6.5 OTIST ...............................................................................................................120

6.5.1 Enabling OTIST ......................................................................................120

6.5.1.1 AP .................................................................................................121

6.5.1.2 Wireless Client ..............................................................................122

6.5.2 Starting OTIST ........................................................................................123

6.5.3 Notes on OTIST ......................................................................................123

6.6 MAC Filter ...................................................................................................124

6.7 WMM QoS ........................................................................................................126

6.7.1 WMM QoS Example ...............................................................................126

6.7.2 WMM QoS Priorities ...............................................................................126

6.7.3 Services ..................................................................................................127

6.8 QoS Screen ......................................................................................................128

6.8.1 ToS (Type of Service) and WMM QoS ....................................................129

6.8.2 Application Priority Configuration ............................................................130

Chapter 7

Network Address Translation (NAT) Screens.................................................... 133

7.1 NAT Overview .................................................................................................133

7.1.1 NAT Definitions .......................................................................................133

7.1.2 What NAT Does ......................................................................................134

7.1.3 How NAT Works .....................................................................................134

7.1.4 NAT Application ......................................................................................135

7.1.5 NAT Mapping Types ...............................................................................135

7.2 SUA (Single User Account) Versus NAT ..........................................................136

7.3 NAT General Setup .........................................................................................136

7.4 Port Forwarding ................................................................................................137

7.4.1 Default Server IP Address ......................................................................138

7.4.2 Port Forwarding: Services and Port Numbers ........................................138

7.4.3 Configuring Servers Behind Port Forwarding (Example) ........................138

7.5 Configuring Port Forwarding ...........................................................................139

7.5.1 Port Forwarding Rule Edit ......................................................................140

7.6 Address Mapping ............................................................................................141

7.6.1 Address Mapping Rule Edit ...................................................................143

14 Table of Contents

P-661H/HW Series User’s Guide

Chapter 8

Firewalls................................................................................................................ 145

8.1 Firewall Overview ............................................................................................145

8.2 Types of Firewalls ............................................................................................145

8.2.1 Packet Filtering Firewalls ........................................................................145

8.2.2 Application-level Firewalls ......................................................................146

8.2.3 Stateful Inspection Firewalls ...................................................................146

8.3 Introduction to ZyXEL’s Firewall .......................................................................146

8.3.1 Denial of Service Attacks ........................................................................147

8.4 Denial of Service ..............................................................................................147

8.4.1 Basics .....................................................................................................147

8.4.2 Types of DoS Attacks .............................................................................148

8.4.2.1 ICMP Vulnerability ........................................................................150

8.4.2.2 Illegal Commands (NetBIOS and SMTP) ......................................150

8.4.2.3 Traceroute .....................................................................................151

8.5 Stateful Inspection ............................................................................................151

8.5.1 Stateful Inspection Process ....................................................................152

8.5.2 Stateful Inspection and the ZyXEL Device ..............................................152

8.5.3 TCP Security ...........................................................................................153

8.5.4 UDP/ICMP Security ................................................................................153

8.5.5 Upper Layer Protocols ............................................................................154

8.6 Guidelines for Enhancing Security with Your Firewall ......................................154

8.6.1 Security In General .................................................................................154

8.7 Packet Filtering Vs Firewall ..............................................................................155

8.7.1 Packet Filtering: ......................................................................................155

8.7.1.1 When To Use Filtering ...................................................................156

8.7.2 Firewall ...................................................................................................156

8.7.2.1 When To Use The Firewall ............................................................156

Chapter 9

Firewall Configuration ......................................................................................... 157

9.1 Access Methods ...............................................................................................157

9.2 Firewall Policies Overview ...............................................................................157

9.3 Rule Logic Overview ........................................................................................158

9.3.1 Rule Checklist .........................................................................................158

9.3.2 Security Ramifications ............................................................................158

9.3.3 Key Fields For Configuring Rules ...........................................................159

9.3.3.1 Action ............................................................................................159

9.3.3.2 Service ..........................................................................................159

9.3.3.3 Source Address .............................................................................159

9.3.3.4 Destination Address ......................................................................159

9.4 Connection Direction ........................................................................................159

9.4.1 LAN to WAN Rules .................................................................................160

Table of Contents 15

P-661H/HW Series User’s Guide

9.4.2 Alerts .......................................................................................................160

9.5 Triangle Route ..................................................................................................160

9.5.1 The “Triangle Route” Problem ................................................................160

9.5.2 Solving the “Triangle Route” Problem .....................................................161

9.6 General Firewall Policy .................................................................................162

9.7 Firewall Rules Summary .................................................................................163

9.7.1 Configuring Firewall Rules ....................................................................164

9.7.2 Customized Services .............................................................................167

9.7.3 Configuring A Customized Service ........................................................168

9.8 Example Firewall Rule .....................................................................................168

9.9 Predefined Services .........................................................................................172

9.10 Anti-Probing ...................................................................................................174

9.11 DoS Thresholds .............................................................................................175

9.11.1 Threshold Values ..................................................................................175

9.11.2 Half-Open Sessions ..............................................................................176

9.11.2.1 TCP Maximum Incomplete and Blocking Time ............................176

9.11.3 Configuring Firewall Thresholds ...........................................................177

Chapter 10

Trend Micro Security Services ............................................................................ 179

10.1 Trend Micro Security Services Overview .......................................................179

10.1.1 TMSS Web Page ..................................................................................179

10.2 Configuring TMSS on the ZyXEL Device .......................................................182

10.2.1 General TMSS Settings ........................................................................182

10.2.2 TMSS Exception List ............................................................................184

10.3 TMSS Virus Protection ...................................................................................185

10.4 Parental Controls ...........................................................................................186

10.4.1 Parental Controls Statistics ...................................................................188

10.5 ActiveX Controls in Internet Explorer .............................................................189

Chapter 11

Content Filtering .................................................................................................. 193

11.1 Content Filtering Overview ............................................................................193

11.2 Configuring Keyword Blocking ......................................................................193

11.3 Configuring the Schedule ..............................................................................194

11.4 Configuring Trusted Computers ....................................................................195

Chapter 12

Introduction to IPSec ........................................................................................... 197

12.1 VPN Overview ................................................................................................197

12.1.1 IPSec ....................................................................................................197

12.1.2 Security Association .............................................................................197

12.1.3 Other Terminology ................................................................................197

16 Table of Contents

P-661H/HW Series User’s Guide

12.1.3.1 Encryption ...................................................................................197

12.1.3.2 Data Confidentiality .....................................................................198

12.1.3.3 Data Integrity ...............................................................................198

12.1.3.4 Data Origin Authentication ..........................................................198

12.1.4 VPN Applications ..................................................................................198

12.2 IPSec Architecture .........................................................................................199

12.2.1 IPSec Algorithms ..................................................................................199

12.2.2 Key Management ..................................................................................199

12.3 Encapsulation .................................................................................................199

12.3.1 Transport Mode ....................................................................................200

12.3.2 Tunnel Mode ........................................................................................200

12.4 IPSec and NAT ...............................................................................................200

Chapter 13

VPN Screens......................................................................................................... 203

13.1 VPN/IPSec Overview .....................................................................................203

13.2 IPSec Algorithms ............................................................................................203

13.2.1 AH (Authentication Header) Protocol ....................................................203

13.2.2 ESP (Encapsulating Security Payload) Protocol ..................................203

13.3 My IP Address ................................................................................................204

13.4 Secure Gateway Address ..............................................................................205

13.4.1 Dynamic Secure Gateway Address ......................................................205

13.5 VPN Setup Screen .........................................................................................205

13.6 Keep Alive ......................................................................................................207

13.7 VPN, NAT, and NAT Traversal .......................................................................207

13.8 Remote DNS Server ......................................................................................208

13.9 ID Type and Content ......................................................................................209

13.9.1 ID Type and Content Examples ............................................................210

13.10 Pre-Shared Key ............................................................................................211

13.11 Editing VPN Policies ..................................................................................... 211

13.12 IKE Phases ..................................................................................................216

13.12.1 Negotiation Mode ................................................................................217

13.12.2 Diffie-Hellman (DH) Key Groups .........................................................218

13.12.3 Perfect Forward Secrecy (PFS) .........................................................218

13.13 Configuring Advanced IKE Settings .............................................................218

13.14 Manual Key Setup ........................................................................................221

13.14.1 Security Parameter Index (SPI) .........................................................221

13.15 Configuring Manual Key ...............................................................................221

13.16 Viewing SA Monitor ......................................................................................224

13.17 Configuring Global Setting ...........................................................................225

13.18 Telecommuter VPN/IPSec Examples ...........................................................226

13.18.1 Telecommuters Sharing One VPN Rule Example ..............................226

13.18.2 Telecommuters Using Unique VPN Rules Example ...........................227

Table of Contents 17

P-661H/HW Series User’s Guide

13.19 VPN and Remote Management ...................................................................229

Chapter 14

Static Route .......................................................................................................... 231

14.1 Static Route .................................................................................................231

14.2 Configuring Static Route ...............................................................................231

14.2.1 Static Route Edit .................................................................................232

Chapter 15

Bandwidth Management...................................................................................... 235

15.1 Bandwidth Management Overview ...............................................................235

15.2 Application-based Bandwidth Management ...................................................235

15.3 Subnet-based Bandwidth Management .........................................................235

15.4 Application and Subnet-based Bandwidth Management ...............................236

15.5 Scheduler .......................................................................................................236

15.5.1 Priority-based Scheduler ......................................................................236

15.5.2 Fairness-based Scheduler ....................................................................237

15.6 Maximize Bandwidth Usage ...........................................................................237

15.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic ........................237

15.6.2 Maximize Bandwidth Usage Example ..................................................238

15.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth 238

15.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth ...

15.6.3 Over Allotment of Bandwidth ................................................................239

15.6.4 Bandwidth Management Priorities ........................................................240

15.7 Configuring Summary ...................................................................................240

15.8 Bandwidth Management Rule Setup ............................................................241

15.8.1 Rule Configuration ................................................................................243

15.9 Bandwidth Monitor ........................................................................................245

239

Chapter 16

Dynamic DNS Setup............................................................................................. 247

16.1 Dynamic DNS Overview ................................................................................247

16.1.1 DYNDNS Wildcard ................................................................................247

16.2 Configuring Dynamic DNS ............................................................................247

Chapter 17

Remote Management Configuration .................................................................. 251

17.1 Remote Management Overview ....................................................................251

17.1.1 Remote Management Limitations .........................................................251

17.1.2 Remote Management and NAT ............................................................252

17.1.3 System Timeout ....................................................................................252

17.2 WWW .............................................................................................................252

18 Table of Contents

P-661H/HW Series User’s Guide

17.3 Telnet ..............................................................................................................253

17.4 Configuring Telnet ..........................................................................................253

17.5 Configuring FTP ............................................................................................254

17.6 SNMP .............................................................................................................255

17.6.1 Supported MIBs ....................................................................................256

17.6.2 SNMP Traps .........................................................................................257

17.6.3 Configuring SNMP ................................................................................257

17.7 Configuring DNS ...........................................................................................259

17.8 Configuring ICMP ...........................................................................................259

17.9 TR-069 (P-661H Only) ...................................................................................261

Chapter 18

Universal Plug-and-Play (UPnP) ......................................................................... 263

18.1 Introducing Universal Plug and Play .............................................................263

18.1.1 How do I know if I'm using UPnP? ........................................................263

18.1.2 NAT Traversal .......................................................................................263

18.1.3 Cautions with UPnP ..............................................................................264

18.2 UPnP and ZyXEL ...........................................................................................264

18.2.1 Configuring UPnP ................................................................................264

18.3 Installing UPnP in Windows Example ............................................................265

18.4 Using UPnP in Windows XP Example ...........................................................268

Chapter 19

System .................................................................................................................. 275

19.1 General Setup ................................................................................................275

19.1.1 General Setup and System Name ........................................................275

19.1.2 General Setup ......................................................................................275

19.2 Time Setting ..................................................................................................277

Chapter 20

Logs ...................................................................................................................... 281

20.1 Logs Overview ..............................................................................................281

20.1.1 Alerts and Logs .....................................................................................281

20.2 Viewing the Logs ............................................................................................281

20.3 Configuring Log Settings ...............................................................................282

Chapter 21

Tools ...................................................................................................................... 285

21.1 Firmware Upgrade ........................................................................................285

21.2 Configuration .................................................................................................287

21.3 Restart ............................................................................................................289

Table of Contents 19

P-661H/HW Series User’s Guide

Chapter 22

Diagnostic............................................................................................................. 291

22.1 General Diagnostic ........................................................................................291

22.2 DSL Line Diagnostic .....................................................................................292

Chapter 23

Troubleshooting ................................................................................................... 293

23.1 Problems Starting Up the ZyXEL Device .......................................................293

23.2 Problems with the LAN ...................................................................................293

23.3 Problems with the WAN .................................................................................294

23.4 Problems Accessing the ZyXEL Device .........................................................295

Appendix A

Product Specifications ........................................................................................ 297

Appendix B

About ADSL .......................................................................................................... 301

Introduction to DSL ................................................................................................ 301

ADSL Overview...................................................................................................... 301

Advantages of ADSL.............................................................................................. 301

Appendix C

Wall-mounting Instructions................................................................................. 303

Appendix D

Setting up Your Computer’s IP Address............................................................ 305

Windows 95/98/Me................................................................................................. 305

Windows 2000/NT/XP ............................................................................................ 308

Macintosh OS X ..................................................................................................... 313

Linux....................................................................................................................... 315

Appendix E

IP Subnetting ........................................................................................................ 319

IP Addressing......................................................................................................... 319

IP Classes .............................................................................................................. 319

Subnet Masks ........................................................................................................ 320

Subnetting .............................................................................................................. 320

Example: Two Subnets .......................................................................................... 321

Example: Four Subnets.......................................................................................... 323

Example Eight Subnets.......................................................................................... 324

Subnetting With Class A and Class B Networks. ................................................... 325

Appendix F

20 Table of Contents

P-661H/HW Series User’s Guide

Command Interpreter........................................................................................... 327

Command Syntax................................................................................................... 327

Command Usage ................................................................................................... 327

Appendix G

Firewall Commands ............................................................................................. 329

Appendix H

NetBIOS Filter Commands .................................................................................. 335

Introduction ............................................................................................................ 335

Display NetBIOS Filter Settings ............................................................................. 335

NetBIOS Filter Configuration.................................................................................. 336

Appendix I

PPPoE ................................................................................................................... 337

PPPoE in Action..................................................................................................... 337

Benefits of PPPoE.................................................................................................. 337

Traditional Dial-up Scenario................................................................................... 337

How PPPoE Works ................................................................................................ 338

ZyXEL Device as a PPPoE Client.......................................................................... 338

Appendix J

Log Descriptions.................................................................................................. 339

Log Commands...................................................................................................... 353

Log Command Example......................................................................................... 354

Appendix K

Wireless LANs (wireless devices only).............................................................. 355

Wireless LAN Topologies ....................................................................................... 355

Channel.................................................................................................................. 357

RTS/CTS................................................................................................................ 357

Fragmentation Threshold ....................................................................................... 358

Preamble Type....................................................................................................... 359

IEEE 802.11g Wireless LAN .................................................................................. 359

Wireless Security Overview ................................................................................... 360

IEEE 802.1x ........................................................................................................... 360

RADIUS.................................................................................................................. 361

Types of Authentication.......................................................................................... 362

Dynamic WEP Key Exchange................................................................................ 363

WPA and WPA2 ..................................................................................................... 364

Security Parameters Summary .............................................................................. 367

Table of Contents 21

P-661H/HW Series User’s Guide

Appendix L

Pop-up Windows, JavaScripts and Java Permissions ..................................... 369

Internet Explorer Pop-up Blockers ......................................................................... 369

Java Permissions ................................................................................................... 374

Index...................................................................................................................... 377

22 Table of Contents

P-661H/HW Series User’s Guide

List of Figures

Figure 1 Protected Internet Access Applications ................................................................ 40

Figure 2 LAN-to-LAN Application Example ......................................................................... 40

Figure 3 Front Panel ...........................................................................................................40

Figure 4 Connecting a POTS Splitter .................................................................................. 42

Figure 5 Connecting a Microfilter ........................................................................................ 43

Figure 6 Password Screen .................................................................................................. 46

Figure 7 Change Password at Login ................................................................................... 46

Figure 8 Select a Mode ....................................................................................................... 47

Figure 9 Web Configurator: Main Screen ........................................................................... 48

Figure 10 Status Screen ...................................................................................................... 51

Figure 11 Status: Any IP Table ............................................................................................ 53

Figure 12 Status: WLAN Status ........................................................................................... 54

Figure 13 Status: VPN Status .............................................................................................. 55

Figure 14 Status: Bandwidth Status .................................................................................... 55

Figure 15 Status: Packet Statistics ...................................................................................... 56

Figure 16 System General .................................................................................................. 58

Figure 17 Wizard Main Screen ............................................................................................ 59

Figure 18 Internet Setup Wizard: Connection Test ............................................................. 60

Figure 19 Internet Setup Wizard: Automatic Detection ....................................................... 60

Figure 20 Internet Setup Wizard: Manual Configuration ..................................................... 61

Figure 21 Internet Access Wizard Setup: ISP Parameters ................................................. 61

Figure 22 Internet Setup Wizard: ISP Parameters (Ethernet) ............................................. 62

Figure 23 Internet Setup Wizard: ISP Parameters (PPPoE) ............................................... 63

Figure 24 Internet Setup Wizard: ISP Parameters (RFC1483 + Routing Mode) ................. 64

Figure 25 Internet Setup Wizard: ISP Parameters (PPPoA) ............................................... 65

Figure 26 Internet Setup Wizard: No DSL Connection ....................................................... 66

Figure 27 Connection Test Successful ................................................................................ 66

Figure 28 Wireless LAN Setup Wizard 1 ............................................................................. 67

Figure 29 Wireless LAN Setup Wizard 2 ............................................................................. 68

Figure 30 Manually assign a WPA key ................................................................................ 69

Figure 31 Manually assign a WEP key ............................................................................... 70

Figure 32 Wireless LAN Setup: Apply ................................................................................. 71

Figure 33 Internet Setup Wizard: Summary Screen ........................................................... 71

Figure 34 Bandwidth Management Wizard: General Information ....................................... 73

Figure 35 Bandwidth Management Wizard: Configuration .................................................. 74

Figure 36 Bandwidth Management Wizard: Complete ........................................................ 75

Figure 37 Example of Traffic Shaping ................................................................................. 81

Figure 38 Internet Connection (PPPoE) .............................................................................. 83

List of Figures 23

P-661H/HW Series User’s Guide

Figure 39 Advanced Internet Connection ............................................................................ 85

Figure 40 More Connections ............................................................................................... 87

Figure 41 More Connections Edit ........................................................................................ 88

Figure 42 More Connections Advanced Setup ................................................................... 90

Figure 43 Traffic Redirect Example ..................................................................................... 91

Figure 44 Traffic Redirect LAN Setup ................................................................................. 92

Figure 45 WAN Backup Setup ............................................................................................ 93

Figure 46 LAN and WAN IP Addresses .............................................................................. 95

Figure 47 Any IP Example .................................................................................................. 100

Figure 48 LAN IP ................................................................................................................. 101

Figure 49 Advanced LAN Setup .......................................................................................... 102

Figure 50 DHCP Setup ....................................................................................................... 103

Figure 51 LAN Client List .................................................................................................... 105

Figure 52 Physical Network & Partitioned Logical Networks .............................................. 106

Figure 53 LAN IP Alias ........................................................................................................ 106

Figure 54 Wireless LAN: General ...................................................................................... 113

Figure 55 Wireless: No Security .......................................................................................... 114

Figure 56 Wireless: Static WEP Encryption ........................................................................ 115

Figure 57 Wireless: WPA-PSK/WPA2-PSK ......................................................................... 116

Figure 58 Wireless: WPA/WPA2 ......................................................................................... 117

Figure 59 Wireless LAN: Advanced .................................................................................... 119

Figure 60 Wireless LAN: OTIST .......................................................................................... 121

Figure 61 Example Wireless Client OTIST Screen ............................................................. 122

Figure 62 Security Key ........................................................................................................ 123

Figure 63 OTIST in Progress (AP) ...................................................................................... 123

Figure 64 OTIST in Progress (Client) .................................................................................. 123

Figure 65 No AP with OTIST Found ................................................................................... 123

Figure 66 Start OTIST? ....................................................................................................... 124

Figure 67 MAC Address Filter ............................................................................................. 125

Figure 68 Wireless LAN: QoS ............................................................................................. 129

Figure 69 Application Priority Configuration ........................................................................ 130

Figure 70 How NAT Works .................................................................................................. 134

Figure 71 NAT Application With IP Alias ............................................................................. 135

Figure 72 NAT General ....................................................................................................... 137

Figure 73 Multiple Servers Behind NAT Example ............................................................... 139

Figure 74 Port Forwarding .................................................................................................. 139

Figure 75 Port Forwarding Rule Setup ............................................................................... 140

Figure 76 Address Mapping Rules ...................................................................................... 142

Figure 77 Edit Address Mapping Rule ............................................................................... 143

Figure 78 ZyXEL Device Firewall Application ..................................................................... 147

Figure 79 Three-Way Handshake ....................................................................................... 148

Figure 80 SYN Flood ........................................................................................................... 149

Figure 81 Smurf Attack ....................................................................................................... 150

24 List of Figures

P-661H/HW Series User’s Guide

Figure 82 Stateful Inspection ............................................................................................... 151

Figure 83 Ideal Firewall Setup ............................................................................................ 160

Figure 84 “Triangle Route” Problem .................................................................................... 161

Figure 85 IP Alias ................................................................................................................ 161

Figure 86 Firewall: General ................................................................................................. 162

Figure 87 Firewall Rules .................................................................................................... 163

Figure 88 Firewall: Edit Rule ............................................................................................... 165

Figure 89 Firewall: Customized Services ............................................................................ 167

Figure 90 Firewall: Configure Customized Services ........................................................... 168

Figure 91 Firewall Example: Rules ..................................................................................... 169

Figure 92 Edit Custom Port Example .................................................................................. 169

Figure 93 Firewall Example: Edit Rule: Destination Address ............................................. 170

Figure 94 Firewall Example: Edit Rule: Select Customized Services ................................. 171

Figure 95 Firewall Example: Rules: MyService .................................................................. 172

Figure 96 Firewall: Anti Probing .......................................................................................... 174

Figure 97 Firewall: Threshold .............................................................................................. 177

Figure 98 TMSS First Time Access ..................................................................................... 179

Figure 99 Download ActiveX to View TMSS Web Page ..................................................... 180

Figure 100 TMSS Web Page (Dashboard) ......................................................................... 180

Figure 101 TMSS Service Summary ................................................................................... 180

Figure 102 TMSS 3 Steps ................................................................................................... 181

Figure 103 TMSS Registration Form .................................................................................. 181

Figure 104 Example TMSS Activated Service Summary Screen ....................................... 182

Figure 105 Example TMSS Activated Parental Controls Screen ........................................ 182

Figure 106 General TMSS Settings .................................................................................... 183

Figure 107 TMSS Exception List ......................................................................................... 184

Figure 108 Virus Protection ................................................................................................. 185

Figure 109 No Parental Controls License ........................................................................... 186

Figure 110 Parental Controls .............................................................................................. 187

Figure 111 Parental Controls Statistics ................................................................................ 189

Figure 112 Internet Options Security ................................................................................... 190

Figure 113 Security Setting ActiveX Controls ..................................................................... 191

Figure 114 Content Filter: Keyword ..................................................................................... 193

Figure 115 Content Filter: Schedule .................................................................................... 194

Figure 116 Content Filter: Trusted ....................................................................................... 195

Figure 117 Encryption and Decryption ................................................................................ 198

Figure 118 IPSec Architecture ............................................................................................ 199

Figure 119 Transport and Tunnel Mode IPSec Encapsulation ............................................ 200

Figure 120 IPSec Summary Fields ..................................................................................... 205

Figure 121 VPN Setup ........................................................................................................ 206

Figure 122 NAT Router Between IPSec Routers ................................................................ 208

Figure 123 VPN Host using Intranet DNS Server Example ................................................ 209

Figure 124 Edit VPN Policies ............................................................................................. 212

List of Figures 25

P-661H/HW Series User’s Guide

Figure 125 Two Phases to Set Up the IPSec SA ................................................................ 216

Figure 126 Advanced VPN Policies .................................................................................... 219

Figure 127 VPN: Manual Key .............................................................................................. 222

Figure 128 VPN: SA Monitor ............................................................................................... 225

Figure 129 VPN: Global Setting .......................................................................................... 226

Figure 130 Telecommuters Sharing One VPN Rule Example ............................................. 227

Figure 131 Telecommuters Using Unique VPN Rules Example ......................................... 228

Figure 132 Example of Static Routing Topology ................................................................. 231

Figure 133 Static Route ....................................................................................................... 232

Figure 134 Static Route Edit ............................................................................................... 233

Figure 135 Subnet-based Bandwidth Management Example ............................................. 236

Figure 136 Bandwidth Management: Summary .................................................................. 240

Figure 137 Bandwidth Management: Rule Setup ............................................................... 242

Figure 138 Bandwidth Management Rule Configuration .................................................... 243

Figure 139 Bandwidth Management: Monitor .................................................................... 245

Figure 140 Dynamic DNS ................................................................................................... 248

Figure 141 Remote Management: WWW ........................................................................... 252

Figure 142 Telnet Configuration on a TCP/IP Network ....................................................... 253

Figure 143 Remote Management: Telnet ............................................................................ 254

Figure 144 Remote Management: FTP ............................................................................... 255

Figure 145 SNMP Management Model ............................................................................... 256

Figure 146 Remote Management: SNMP ........................................................................... 258

Figure 147 Remote Management: DNS .............................................................................. 259

Figure 148 Remote Management: ICMP ............................................................................ 260

Figure 149 Enabling TR-069 .............................................................................................. 261

Figure 150 Configuring UPnP ............................................................................................. 264

Figure 151 Add/Remove Programs: Windows Setup: Communication ............................... 266

Figure 152 Add/Remove Programs: Windows Setup: Communication: Components ........ 266

Figure 153 Network Connections ........................................................................................ 267

Figure 154 Windows Optional Networking Components Wizard ........................................ 267

Figure 155 Networking Services ......................................................................................... 268

Figure 156 Network Connections ........................................................................................ 269

Figure 157 Internet Connection Properties ........................................................................ 270

Figure 158 Internet Connection Properties: Advanced Settings ......................................... 271

Figure 159 Internet Connection Properties: Advanced Settings: Add ................................. 271

Figure 160 System Tray Icon .............................................................................................. 272

Figure 161 Internet Connection Status ................................................................................ 272

Figure 162 Network Connections ........................................................................................ 273

Figure 163 Network Connections: My Network Places ....................................................... 274

Figure 164 Network Connections: My Network Places: Properties: Example ..................... 274

Figure 165 System General Setup ...................................................................................... 276

Figure 166 System Time Setting ......................................................................................... 277

Figure 167 View Log ........................................................................................................... 281

26 List of Figures

P-661H/HW Series User’s Guide

Figure 168 Log Settings ...................................................................................................... 283

Figure 169 Firmware Upgrade ............................................................................................ 285

Figure 170 Firmware Upload In Progress ........................................................................... 286

Figure 171 Network Temporarily Disconnected .................................................................. 286

Figure 172 Error Message .................................................................................................. 287

Figure 173 Configuration ..................................................................................................... 287

Figure 174 Configuration Upload Successful ...................................................................... 288

Figure 175 Network Temporarily Disconnected .................................................................. 289

Figure 176 Configuration Upload Error ............................................................................... 289

Figure 177 Restart Screen .................................................................................................. 289

Figure 178 Diagnostic: General .......................................................................................... 291

Figure 179 Diagnostic: DSL Line ........................................................................................ 292

Figure 180 Wall-mounting Example .................................................................................... 303

Figure 181 WIndows 95/98/Me: Network: Configuration ..................................................... 306

Figure 182 Windows 95/98/Me: TCP/IP Properties: IP Address ......................................... 307

Figure 183 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ............................ 308

Figure 184 Windows XP: Start Menu .................................................................................. 309

Figure 185 Windows XP: Control Panel .............................................................................. 309

Figure 186 Windows XP: Control Panel: Network Connections: Properties ....................... 310

Figure 187 Windows XP: Local Area Connection Properties .............................................. 310

Figure 188 Windows XP: Internet Protocol (TCP/IP) Properties ......................................... 311

Figure 189 Windows XP: Advanced TCP/IP Properties ...................................................... 312

Figure 190 Windows XP: Internet Protocol (TCP/IP) Properties ......................................... 313

Figure 191 Macintosh OS X: Apple Menu ........................................................................... 314

Figure 192 Macintosh OS X: Network ................................................................................. 314

Figure 193 Red Hat 9.0: KDE: Network Configuration: Devices ........................................ 315

Figure 194 Red Hat 9.0: KDE: Ethernet Device: General .................................................. 316

Figure 195 Red Hat 9.0: KDE: Network Configuration: DNS ............................................. 316

Figure 196 Red Hat 9.0: KDE: Network Configuration: Activate ........................................ 317

Figure 197 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 ............................... 317

Figure 198 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 .................................. 318

Figure 199 Red Hat 9.0: DNS Settings in resolv.conf ...................................................... 318

Figure 200 Red Hat 9.0: Restart Ethernet Card ................................................................. 318

Figure 201 Red Hat 9.0: Checking TCP/IP Properties ....................................................... 318

Figure 202 Single-Computer per Router Hardware Configuration ...................................... 338

Figure 203 ZyXEL Device as a PPPoE Client ..................................................................... 338

Figure 204 Displaying Log Categories Example ................................................................. 353

Figure 205 Displaying Log Parameters Example ................................................................ 353

Figure 206 Peer-to-Peer Communication in an Ad-hoc Network ........................................ 355

Figure 207 Basic Service Set .............................................................................................. 356

Figure 208 Infrastructure WLAN ......................................................................................... 357

Figure 209 RTS/CTS .......................................................................................................... 358

Figure 210 WPA(2) with RADIUS Application Example ...................................................... 366

List of Figures 27

P-661H/HW Series User’s Guide

Figure 211 WPA(2)-PSK Authentication .............................................................................. 367

Figure 212 Pop-up Blocker ................................................................................................. 369

Figure 213 Internet Options ................................................................................................ 370

Figure 214 Internet Options ................................................................................................ 371

Figure 215 Pop-up Blocker Settings ................................................................................... 372

Figure 216 Internet Options ................................................................................................ 373

Figure 217 Security Settings - Java Scripting ..................................................................... 374

Figure 218 Security Settings - Java .................................................................................... 375

Figure 219 Java (Sun) ......................................................................................................... 376

28 List of Figures

P-661H/HW Series User’s Guide

List of Tables

Table 1 ADSL Standards .................................................................................................... 35

Table 2 Front Panel LEDs .................................................................................................. 41

Table 3 Web Configurator Screens Summary .................................................................... 48

Table 4 Status Screen ........................................................................................................ 51

Table 5 Status: Any IP Table .............................................................................................. 53

Table 6 Status: WLAN Status ............................................................................................. 54

Table 7 Status: VPN Status ................................................................................................ 55

Table 8 Status: Packet Statistics ........................................................................................ 56

Table 9 System General: Password ................................................................................... 58

Table 10 Wizard Main Screen ............................................................................................ 59

Table 11 Internet Setup Wizard: ISP Parameters ............................................................... 62

Table 12 Internet Setup Wizard: ISP Parameters (Ethernet) ............................................. 63

Table 13 Internet Setup Wizard: ISP Parameters (PPPoE) ............................................... 64

Table 14 Internet Setup Wizard: ISP Parameters (RFC1483 + Routing Mode) ................. 64

Table 15 Internet Setup Wizard: ISP Parameters (PPPoA) ............................................... 65

Table 16 Wireless LAN Setup Wizard 1 ............................................................................. 67

Table 17 Wireless LAN Setup Wizard 2 ............................................................................. 68

Table 18 Manually assign a WPA key ................................................................................ 69

Table 19 Manually assign a WEP key ................................................................................ 70

Table 20 Internet Setup Wizard: Summary ........................................................................ 71

Table 21 Media Bandwidth Management Setup: Services ................................................. 72

Table 22 Bandwidth Management Wizard: General Information ........................................ 74

Table 23 Bandwidth Management Wizard: Configuration .................................................. 75

Table 24 Internet Connection ............................................................................................. 83

Table 25 Advanced Internet Connection ............................................................................ 85

Table 26 More Connections ............................................................................................... 87

Table 27 More Connections Edit ........................................................................................ 88

Table 28 More Connections Advanced Setup .................................................................... 90

Table 29 WAN Backup Setup ............................................................................................. 93

Table 30 LAN IP ................................................................................................................. 101

Table 31 Advanced LAN Setup .......................................................................................... 102

Table 32 DHCP Setup ........................................................................................................ 104

Table 33 LAN Client List ..................................................................................................... 105

Table 34 LAN IP Alias ........................................................................................................ 107

Table 35 Types of Encryption for Each Type of Authentication .......................................... 111

Table 36 Wireless LAN: General ........................................................................................ 113

Table 37 Wireless: No Security .......................................................................................... 114

Table 38 Wireless: Static WEP Encryption ......................................................................... 115

List of Tables 29

P-661H/HW Series User’s Guide

Table 39 Wireless: WPA-PSK/WPA2-PSK ......................................................................... 116

Table 40 Wireless: WPA/WPA2 .......................................................................................... 118

Table 41 Wireless LAN: Advanced ..................................................................................... 119

Table 42 OTIST .................................................................................................................. 122

Table 43 MAC Address Filter ............................................................................................. 125

Table 44 WMM QoS Priorities ............................................................................................ 126

Table 45 Commonly Used Services ................................................................................... 127

Table 46 Wireless LAN: QoS .............................................................................................. 129

Table 47 Application Priority Configuration ........................................................................ 130

Table 48 NAT Definitions .................................................................................................... 133

Table 49 NAT Mapping Types ............................................................................................ 136

Table 50 NAT General ........................................................................................................ 137

Table 51 Services and Port Numbers ................................................................................. 138

Table 52 Port Forwarding ................................................................................................... 140

Table 53 Port Forwarding Rule Setup ................................................................................ 141

Table 54 Address Mapping Rules ...................................................................................... 142

Table 55 Edit Address Mapping Rule ................................................................................. 143

Table 56 Common IP Ports ................................................................................................ 148

Table 57 ICMP Commands That Trigger Alerts .................................................................. 150

Table 58 Legal NetBIOS Commands ................................................................................. 150

Table 59 Legal SMTP Commands ..................................................................................... 150

Table 60 Firewall: General ................................................................................................. 162

Table 61 Firewall Rules ...................................................................................................... 164

Table 62 Firewall: Edit Rule ................................................................................................ 166

Table 63 Customized Services ........................................................................................... 167

Table 64 Firewall: Configure Customized Services ............................................................ 168

Table 65 Predefined Services ............................................................................................ 172

Table 66 Firewall: Anti Probing ........................................................................................... 175

Table 67 Firewall: Threshold .............................................................................................. 177

Table 68 General TMSS Settings ....................................................................................... 183

Table 69 TMSS Exception List ........................................................................................... 184

Table 70 Virus Protection ................................................................................................... 185

Table 71 Parental Controls ................................................................................................. 187

Table 72 Parental Controls Statistics .................................................................................. 189

Table 73 Content Filter: Keyword ....................................................................................... 194

Table 74 Content Filter: Schedule ...................................................................................... 195

Table 75 Content Filter: Trusted ......................................................................................... 195

Table 76 VPN and NAT ...................................................................................................... 201

Table 77 AH and ESP ........................................................................................................ 204

Table 78 VPN Setup ........................................................................................................... 206

Table 79 VPN and NAT ...................................................................................................... 208

Table 80 Local ID Type and Content Fields ....................................................................... 210

Table 81 Peer ID Type and Content Fields ........................................................................ 210

30 List of Tables