This manual is intended for people who want to configure the ZyXEL Device using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
"It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
P-791R v2 User’s Guide
3
Page 4
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-791R v2 may be referred to as the “ZyXEL Device”, the “device”, the “system” or
the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
4
P-791R v2 User’s Guide
Page 5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your device.
ZyXEL DeviceComputerNotebook computer
ServerDSLAMFirewall
TelephoneSwitchRouter
P-791R v2 User’s Guide
5
Page 6
Safety Warnings
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• ONLY qualified service personnel should service or disassemble this device.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
6
P-791R v2 User’s Guide
Page 7
This product is recyclable. Dispose of it properly.
Safety Warnings
P-791R v2 User’s Guide
7
Page 8
Safety Warnings
8
P-791R v2 User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction, Wizards and Tutorials ..................................................................................... 31
Getting To Know Your ZyXEL Device ........................................................................................ 33
Introducing the Web Configurator .............................................................................................. 37
Wizard Setup for Internet Access .............................................................................................. 47
Figure 5 Change Password at Login ...................................................................................................... 38
Figure 6 Select a Mode .......................................................................................................................... 39
Figure 7 Web Configurator: Main Screen .............................................................................................. 40
Figure 8 Status ....................................................................................................................................... 42
Figure 9 Status > Packet Statistics ......................................................................................................... 44
Figure 10 Select a Mode ........................................................................................................................ 47
Figure 21 WAN > Internet Connection > Service Type ........................................................................... 56
Figure 22 Example of Traffic Shaping .................................................................................................... 64
Figure 23 WAN > Internet Connection .................................................................................................... 66
Figure 24 WAN > Internet Connection > Advanced Setup ..................................................................... 68
Figure 25 WAN > More Connections ...................................................................................................... 70
Figure 26 WAN > More Connections > Edit ............................................................................................ 71
Figure 27 WAN > More Connections > Advanced Setup ....................................................................... 73
Figure 28 Traffic Redirect Example ........................................................................................................ 74
Figure 29 Traffic Redirect LAN Setup ..................................................................................................... 74
Figure 30 WAN > WAN Backup Setup ................................................................................................... 75
Figure 31 WAN > WAN Backup Setup > Advanced Setup ..................................................................... 78
Figure 32 WAN > WAN Backup Setup > Advanced Setup > Edit ........................................................... 80
Figure 33 LAN and WAN IP Addresses .................................................................................................. 83
Figure 34 LAN > IP ................................................................................................................................. 87
Figure 35 LAN > IP > Advanced Setup .................................................................................................. 88
Figure 36 LAN > DHCP Setup ................................................................................................................ 89
Figure 37 LAN > Client List ..................................................................................................................... 90
Table 2 Web Configurator Screens Summary ....................................................................................... 40
Table 3 Status ........................................................................................................................................ 42
Table 4 Status > Packet Statistics .......................................................................................................... 44
Table 5 Internet Access Wizard Setup: ISP Parameters ....................................................................... 48
Table 6 Internet Connection with PPPoE ............................................................................................... 49
Table 7 Internet Connection with RFC 1483 .......................................................................................... 50
Table 8 Internet Connection with ENET ENCAP ...................................................................................50
Table 9 Internet Connection with PPPoA ............................................................................................... 51
Table 10 WAN > Internet Connection .................................................................................................... 66
Table 11 WAN > Internet Connection > Advanced Setup ...................................................................... 68
Table 12 WAN > More Connections ...................................................................................................... 70
Table 13 WAN > More Connections > Edit ............................................................................................ 71
Table 14 WAN > More Connections > Advanced Setup ........................................................................ 73
Table 15 WAN > WAN Backup Setup .................................................................................................... 76
Table 16 WAN > WAN Backup Setup > Advanced Setup ..................................................................... 78
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit ........................................................... 80
Table 18 LAN > IP ................................................................................................................................. 87
Table 19 LAN > IP > Advanced Setup ................................................................................................... 88
Table 20 LAN > DHCP Setup ................................................................................................................ 89
Table 21 LAN > Client List ..................................................................................................................... 90
Table 22 LAN > IP Alias ......................................................................................................................... 92
This chapter introduces the main features and applications of your ZyXEL Device.
1.1 Overview
The ZyXEL Device is a G.SHDSL (G.992.1, Symmetrical high-speed Digital Subscriber
Line).bis Router providing high-speed LAN-to-LAN connection and Internet access through
G.SHDSL.bis connection over the telephone line. You can use your ZyXEL Device for either
IP routing or bridging depending on your ISP (Internet Service Provider) configuration.
See Appendix A on page 281 for a complete list of features you can configure on your ZyXEL
Device.
1.1.1 High-speed Internet Access
The ZyXEL Device is the ideal high-speed Internet access solution. In addition, unlike ADSL
or VDSL, G.SHDSL.bis supports the same high speed for transmission and receiving.
Figure 1 High-speed Internet Access with Your ZyXEL Device
For Internet access, connect the DSL port to the phone port. Then, connect your computer or
server to the ETHERNET port. (See the Quick Start Guide for detailed instructions about
hardware connections.) Next, set up the ZyXEL Device as a router or as a bridge, depending
on the desired configuration. As a router, the ZyXEL Device provides security and networking
functionality. As a bridge, the ZyXEL Device minimizes the configuration changes you have
to make in your existing network.
1.1.2 High-speed Point-to-point Connections
Use two ZyXEL Devices to create a cost-effective, high-speed connection for high-bandwidth
applications such as videoconferencing and distance learning. The ZyXEL Devices provide a
simple, fast point-to-point connection between two geographically-dispersed networks.
P-791R v2 User’s Guide
33
Page 34
Chapter 1 Getting To Know Your ZyXEL Device
In the following example, two ZyXEL Devices connect the headquarters and a branch office.
Figure 2 Point-to-point Connections with Your ZyXEL Device
"See Chapter 4 on page 55 for more information on setting up point-to-point
connections.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
• Web Configurator. This is recommended for everyday management of the ZyXEL Device
using a (supported) web browser. See Chapter 2 on page 37.
• Command Line Interface. Line commands are mostly used for troubleshooting by service
engineers. See Appendix G on page 325.
• SMT. System Management Terminal is a text-based configuration menu that you can use
to configure your device. See Chapter 17 on page 163.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/restore.
See Chapter 11 on page 119.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See Chapter
11 on page 119.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to manage the
ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of
different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
34
P-791R v2 User’s Guide
Page 35
• Back up the configuration (and make sure you know how to restore it). Restoring an
1.4 LEDs
The following figure shows the LEDs.
Figure 3 LEDs
Chapter 1 Getting To Know Your ZyXEL Device
earlier working configuration may be useful if the device becomes unstable or even
crashes. If you forget your password, you will have to reset the ZyXEL Device to its
factory default settings. If you backed up an earlier configuration file, you would not have
to totally re-configure the ZyXEL Device. You could simply restore your last
configuration.
The following table describes the LEDs.
Table 1 LEDs
LEDCOLORSTATUSDESCRIPTION
POWERGreenOnThe ZyXEL Device is receiving power and functioning
properly.
Blinking The ZyXEL Device is rebooting or performing diagnostics.
RedOnPower to the ZyXEL Device is too low.
OffThe system is not ready or has malfunctioned.
CON/AUXGreenOnThis port has a successful console connection.
OrangeOnThis port has a successful dial-up connection.
OffThis port is not connected.
ETHERNETGreenOnThis port has a successful Ethernet connection.
Blinking This port is sending/receiving data.
OffThis port is not connected.
DSLGreenOnThe DSL line is up.
Blinking The ZyXEL Device is initializing the DSL line.
OffThe DSL line is down.
P-791R v2 User’s Guide
35
Page 36
Chapter 1 Getting To Know Your ZyXEL Device
Table 1 LEDs (continued)
LEDCOLORSTATUSDESCRIPTION
INTERNETGreenOnThe Internet connection is up, and the ZyXEL Device has an
Blinking The ZyXEL Device is sending/receiving data.
RedOnThe ZyXEL Device tried to get an IP address, but an error
OffThe Internet connection is down.
IP address. (If the ZyXEL Device uses RFC 1483 in bridge
mode, this light does not turn on, but it does blink when the
ZyXEL Device is sending/receiving data.)
occurred.
36
P-791R v2 User’s Guide
Page 37
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
2.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy ZyXEL
Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or
Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768
pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See the chapter on troubleshooting if you need to make sure these functions are allowed in
Internet Explorer.
2.2 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to the
Quick Start Guide).
3 Launch your web browser.
4 Type "192.168.1.1" as the URL.
5 A window displays as shown. Enter the default admin password 1234 to configure the
wizards and the advanced features or enter the default user password user to view the
status only. Click Login to proceed to a screen asking you to change your password or
click Cancel to revert to the default password.
P-791R v2 User’s Guide
37
Page 38
Chapter 2 Introducing the Web Configurator
Figure 4 Login Screen
6 If you entered the user password, the Status screen appears. See Section 2.4 on page 42.
If you entered the admin password, the following screen appears.
Figure 5 Change Password at Login
It is highly recommended you change the default admin password. Enter a new password
between 1 and 30 characters, retype it to confirm and click Apply; alternatively click
Ignore to proceed to the main menu if you do not want to change the password now.
"If you do not change the password at least once, this screen appears every
time you log in with the admin password. You can also change the password in
System > General or in Menu 23: System Password.
38
P-791R v2 User’s Guide
Page 39
Chapter 2 Introducing the Web Configurator
7 Select Go to Wizard setup, and click Apply to display the wizard main screen. Select
Go to Advanced setup, and click Apply to display the Status screen. Select Click here
to always start with the Advanced setup if you want the ZyXEL Device to skip this screen from now on and always go to the Status screen. See Section 2.4 on page 42.
Figure 6 Select a Mode
"The management session automatically times out when the time period set in
the Administrator Inactivity Timer field expires (default five minutes). Simply
log back into the ZyXEL Device if this happens to you.
2.3 Navigating the Web Configurator
After you enter the admin password, use the sub-menus on the navigation panel to configure
ZyXEL Device features. The following table describes the sub-menus.
P-791R v2 User’s Guide
39
Page 40
Chapter 2 Introducing the Web Configurator
Figure 7 Web Configurator: Main Screen
Use
submenus
to configure
ZyXEL
Device
Click the Logout icon at any time
to exit the web configurator.
"Click the icon (located in the top right corner of most screens) to view
embedded help.
Table 2 Web Configurator Screens Summary
LINK/ICONSUB-LINKFUNCTION
Wizard INTERNET
SETUP
Logout Click this icon to exit the web configurator.
StatusUse this screen to look at the ZyXEL Device’s general device,
Network
WANInternet
Connection
More Connections Use this screen to configure and place calls to a remote
WAN Backup
Setup
Use these screens for initial configuration including general
setup, ISP parameters for Internet Access and WAN IP/DNS
Server/MAC address assignment.
system and interface status information. You can also access
the summary statistics tables.
Use this screen to configure ISP parameters, WAN IP address
assignment, DSL line or point-to-point connections.
gateway.
Use this screen to configure your traffic redirect properties and
WAN backup settings.
40
P-791R v2 User’s Guide
Page 41
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICONSUB-LINKFUNCTION
LANIPUse this screen to configure LAN TCP/IP settings and other
advanced properties.
DHCP SetupUse this screen to configure LAN DHCP settings.
Client List
IP Alias
NATGeneralUse this screen to enable NAT.
Port ForwardingUse this screen to configureservers behind the ZyXEL Device.
Security
FilterGeneralUse this screen to configure Internet security and apply the
Advanced
Static RouteStatic RouteUse this screen to configure IP static routes.
Dynamic DNSDynamic DNSUse this screen to set up dynamic DNS.
Remote MGMT
UPnPGeneralUse this screen to enable UPnP on the ZyXEL Device.
Maintenance
System GeneralThis screen contains administrative and system-related
LogsView LogUse this screen to view the logs for the categories that you
ToolsFirmwareUse this screen to upload firmware to your ZyXEL Device.
WWWUse this screen to configure through which interface(s) and
Te lnetUse this screen to configure through which interface(s) and
FTPUse this screen to configure through which interface(s) and
SNMPUse this screen to configure your ZyXEL Device’s settings for
DNSUse this screen to configure through which interface(s) and
ICMPUse this screen to change your anti-probing settings.
Time SettingUse this screen to change your ZyXEL Device’s time and date.
Log SettingsUse this screen to change your ZyXEL Device’s log settings.
ConfigurationUse this screen to backup and restore the configuration or
RestartThis screen allows you to reboot the ZyXEL Device without
Use this screen to view current DHCP client information and to
always assign an IP address to a MAC address (and host
name).
Use this screen to partition your LAN interface into subnets.
predefined filtering rules.
from which IP address(es) users can use HTTPS or HTTP to
manage the ZyXEL Device.
from which IP address(es) users can use Telnet to manage the
ZyXEL Device.
from which IP address(es) users can use FTP to access the
ZyXEL Device.
Simple Network Management Protocol management.
from which IP address(es) users can send DNS queries to the
ZyXEL Device.
information and also allows you to change your password.
selected.
reset the factory defaults to your ZyXEL Device.
turning the power off.
P-791R v2 User’s Guide
41
Page 42
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICONSUB-LINKFUNCTION
DiagnosticGeneralThese screens display information to help you identify
problems with the ZyXEL Device general connection.
DSL LineThese screens display information to help you identify
problems with the DSL line.
2.4 Status Screen
The following summarizes how to navigate the web configurator from the Status screen.
"Some fields or links are not available if you entered the user password in the
login password screen (seeFigure 4 on page 38).
Figure 8 Status
42
The following table describes the labels shown in the Status screen.
Table 3 Status
LABELDESCRIPTION
Refresh IntervalSelect a number of seconds or None from the drop-down list box to refresh all
screen statistics automatically at the end of every time interval or to not refresh
the screen statistics.
ApplyClick this button to refresh the status screen statistics.
Device Information
Host NameThis is the System Name you enter in the Maintenance > System > General
screen. It is for identification purposes.
Model NumberThis is the model name of the ZyXEL Device.
P-791R v2 User’s Guide
Page 43
Chapter 2 Introducing the Web Configurator
Table 3 Status (continued)
LABELDESCRIPTION
MAC AddressThis is the MAC (Media Access Control) or Ethernet address unique to your
ZyXEL Device.
ZyNOS Firmware
Ver si on
DSL Firmware
Ver si on
WAN Information
DSL ModeThis is the standard that your ZyXEL Device is using.
IP AddressThis is the WAN port IP address.
IP Subnet Mask
Default
Gateway
VPI/VCIThis is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
IP AddressThis is the LAN port IP address.
IP Subnet Mask This is the LAN port IP subnet mask.
DHCPThis is the WAN port DHCP role - Server, Relay or None.
System Status
System UptimeThis is the total time the ZyXEL Device has been on.
Current Date/TimeThis field displays your ZyXEL Device’s presentdate and time.
System ModeThis displays whether the ZyXEL Device is functioning as a router or a bridge.
CPU UsageThis number shows how many kilobytes of the heap memory the ZyXEL Device
Memory UsageThis number shows the ZyXEL Device's total heap memory (in kilobytes).
Interface Status
InterfaceThis displays the ZyXEL Device interfaces.
StatusThis field displays Down (line is down), Up (line is up or connected) if you're
RateFor the LAN port, this displays the port speed and duplex setting. Ethernet port
SummaryThis section is not available if you use the user password to log in.
Packet StatisticsUse this screen to view port status and packet specific statistics.
This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's
proprietary Network Operating System design.
This is the DSL firmware version code associated with the ZyXEL Device. This is
sometimes needed by technicians to help troubleshoot problems.
This is the WAN port IP subnet mask.
This is the IP address of the default gateway, if applicable.
the Wizard or WAN screen.
is using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL
Network Operating System) and is thus available for running processes like NAT.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation.
connections can be in half-duplex or full-duplex mode. Full-duplex refers to a
device's ability to send and receive simultaneously, while half-duplex indicates
that traffic can flow in only one direction at a time. The Ethernet port must use the
same speed or duplex mode setting as the peer Ethernet port in order to connect.
Simultaneous transmissions over the same port (Full-duplex) essentially double
the bandwidth.
For the DSL port, it displays the downstream and upstream transmission rate.
P-791R v2 User’s Guide
43
Page 44
Chapter 2 Introducing the Web Configurator
2.4.1 Status: Packet Statistics
Click the Packet Statistics hyperlink in the Status screen. Read-only information here
includes port status and packet specific statistics. Also provided are "system up time" and "poll
interval(s)". The Poll Interval(s) field is configurable.
Figure 9 Status > Packet Statistics
The following table describes the fields in this screen.
Table 4 Status > Packet Statistics
LABELDESCRIPTION
System Monitor
System up TimeThis is the elapsed time the system has been up.
Current Date/TimeThis field displays your ZyXEL Device’s presentdate and time.
CPU UsageThis field specifies the percentage of CPU utilization.
Memory UsageThis field specifies the percentage of memory utilization.
WAN Port Statistics
Link StatusThis is the status of your WAN link.
WAN IP AddressThis is the IP address assigned to your ZyXEL Device on the WAN.
Upstream SpeedThis is the upstream speed of your ZyXEL Device.
Downstream Speed This is the downstream speed of your ZyXEL Device.
Node-LinkThis field displays the remote node index number and link type. Link types are
PPPoA, ENET, RFC 1483 and PPPoE.
Status This field displays Down (line is down), Up (line is up or connected) if you're
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation. It displays N/A if the port
is not connected.
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
ErrorsThis field displays the number of error packets on this port.
44
P-791R v2 User’s Guide
Page 45
Chapter 2 Introducing the Web Configurator
Table 4 Status > Packet Statistics (continued)
LABELDESCRIPTION
Tx B/s This field displays the number of bytes transmitted in the last second.
Rx B/sThis field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this port has been up.
LAN Port Statistics
InterfaceThis field displays the type of port.
Status This field displays Down (line is down), Up (line is up or connected) if you're
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
CollisionsThis is the number of collisions on this port.
HelpClick this to open the embedded help.
Poll Interval(s)Type the time interval for the browser to refresh system statistics.
Set IntervalClick this button to apply the new poll interval you entered in the Poll Interval
StopClick this button to halt the refreshing of the system statistics.
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation.
field above.
2.5 Resetting the ZyXEL Device
If you forget your password or cannot access the web configurator, you will need to use the
RESET button at the back of the ZyXEL Device to reload the factory-default configuration
file. This means that you will lose all configurations that you had previously and the password
will be reset to “1234”.
2.5.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking).
2 Press the RESET button for ten seconds or until the POWER LED begins to blink and
then release it. When the POWER LED begins to blink, the defaults have been restored
and the ZyXEL Device restarts.
P-791R v2 User’s Guide
45
Page 46
Chapter 2 Introducing the Web Configurator
46
P-791R v2 User’s Guide
Page 47
CHAPTER 3
Wizard Setup for Internet Access
This chapter provides information on the Wizard Setup screens for Internet access in the web
configurator.
3.1 Introduction
Use the wizard setup screens to configure your system for Internet access with the information
given to you by your ISP.
"See the advanced menu chapters for background information on these fields.
3.2 Internet Access Wizard Setup
1 After you enter the admin password to access the web configurator, select Go to Wizard
setup and click Apply. Otherwise, click the wizard icon () in the top right corner of
the web configurator to display the wizard main screen.
Figure 10 Select a Mode
2 Click INTERNET SETUP to configure the system for Internet access.
P-791R v2 User’s Guide
47
Page 48
Chapter 3 Wizard Setup for Internet Access
Figure 11 Wizard: Welcome
3 Type the Internet access information given to you by your ISP exactly in the wizard
screen. If not given, leave the fields set to the default.
Figure 12 Internet Access Wizard Setup: ISP Parameters
48
The following table describes the fields in this screen.
Table 5 Internet Access Wizard Setup: ISP Parameters
LABELDESCRIPTION
ModeFrom the Mode drop-down list box, select Routing (default) if your ISP allows
multiple computers to share an Internet account. Otherwise select Bridge.
EncapsulationSelect the encapsulation type your ISP uses from the Encapsulation drop-down list
box. Choices vary depending on what you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
MultiplexingSelect the multiplexing method used by your ISP from the Multiplex drop-down list
box either VC-based or LLC-based.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
Refer to the appendix for more information.
P-791R v2 User’s Guide
Page 49
Chapter 3 Wizard Setup for Internet Access
Table 5 Internet Access Wizard Setup: ISP Parameters
LABELDESCRIPTION
VPIEnter the VPI assigned to you. This field may already be configured.
VCIEnter the VCI assigned to you. This field may already be configured.
BackClick Back to go back to the previous screen.
NextClick Next to continue to the next wizard screen. The next wizard screen you see
depends on what protocol you chose above.
ExitClick Exit to close the wizard screen without saving your changes.
4 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to
continue.
Figure 13 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 6 Internet Connection with PPPoE
LABELDESCRIPTION
User NameEnter the user name exactly as your ISP assigned. If assigned a name in the form
PasswordEnter the password associated with the user name above.
Service Name Type the name of your PPPoE service here.
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes to the ZyXEL Device.
ExitClick Exit to close the wizard screen without saving your changes.
P-791R v2 User’s Guide
user@domain where domain identifies a service name, then enter both components
exactly as given.
49
Page 50
Chapter 3 Wizard Setup for Internet Access
Figure 14 Internet Connection with RFC 1483
The following table describes the fields in this screen.
Table 7 Internet Connection with RFC 1483
LABELDESCRIPTION
IP AddressThis field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
BackClick Back to go back to the previous wizard screen.
NextClick Next to continue to the next wizard screen.
ExitClick Exit to close the wizard screen without saving your changes.
Figure 15 Internet Connection with ENET ENCAP
The following table describes the fields in this screen.
Table 8 Internet Connection with ENET ENCAP
LABELDESCRIPTION
Obtain an IP
Address
Automatically
Static IP
Address
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address.
Select Static IP Address if your ISP gives you a fixed IP address.
50
P-791R v2 User’s Guide
Page 51
Chapter 3 Wizard Setup for Internet Access
Table 8 Internet Connection with ENET ENCAP (continued)
LABELDESCRIPTION
IP AddressEnter your ISP assigned IP address.
Subnet MaskEnter a subnet mask in dotted decimal notation.
Refer to the appendices to calculate a subnet mask If you are implementing
subnetting.
Gateway IP
address
First DNS
Server
Second DNS
Server
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes to the ZyXEL Device.
ExitClick Exit to close the wizard screen without saving your changes.
You must specify a gateway IP address (supplied by your ISP) when you use ENET ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP
clients along with the IP address and the subnet mask.
As above.
Figure 16 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 9 Internet Connection with PPPoA
LABELDESCRIPTION
User NameEnter the login name that your ISP gives you.
PasswordEnter the password associated with the user name above.
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes to the ZyXEL Device.
ExitClick Exit to close the wizard screen without saving your changes.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not
correct, the screen displays as shown next. Click Back to Username and Password setup
to go back to the screen where you can modify them.
P-791R v2 User’s Guide
51
Page 52
Chapter 3 Wizard Setup for Internet Access
Figure 17 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the
Internet Setup Wizard to verify your Internet access settings.
Figure 18 Connection Test Failed-2.
52
When you are finished with the Internet Setup Wizard the following screen displays your
configuration details. Click Finish to exit the wizard.
Figure 19 Internet Setup Wizard Finished
P-791R v2 User’s Guide
Page 53
Chapter 3 Wizard Setup for Internet Access
P-791R v2 User’s Guide
53
Page 54
Chapter 3 Wizard Setup for Internet Access
54
P-791R v2 User’s Guide
Page 55
CHAPTER 4
Point-to-point Configuration
This chapter introduces point-to-point connections.
4.1 Overview
You can set up point-to-point connection between two ZyXEL Devices. These connections
offer a cost-effective, high-speed connection for high-bandwidth applications such as
videoconferencing and distance learning. An example is shown below.
Figure 20 Example: Point-to-point Connections
In a point-to-point connection, the DSL ports on the ZyXEL Devices are directly connected to
each other, not to an ISP or the Internet.
"A point-to-point connection can use RFC 1483 in bridge mode or ENET
ENCAP in router mode.
"In a point-to-point connection, the ZyXEL Devices should use the same VPI,
VCI, multiplexing, and encapsulation method.
P-791R v2 User’s Guide
55
Page 56
Chapter 4 Point-to-point Configuration
To establish a point-to-point connection, one of the ZyXEL Devices becomes the server
(instead of the ISP). The server controls some of the attributes of the DSL connection, such as
the transfer rate and the DSL operational mode. Otherwise, there is no difference between the
server and the client. Either one can initiate the point-to-point connection.
You can only establish point-to-point connections between ZyXEL Devices that support this
kind of server/client mode.
4.2 Point-to-point Connection Procedure
Follow these directions to set up a point-to-point connection.
1 Set up the Server.
2 Set up the Client.
3 Connect the ZyXEL Devices.
4.2.1 Set up the Server
1 Log in to the ZyXEL Device that will be the server. (See Chapter 2 on page 37.)
2 Click Network > WAN > Internet Connection.
3 Configure the VPI, VCI, Multiplexing, and Encapsulation fields for the point-to-point
connection. In the Encapsulation field, select either RFC 1483 or ENET ENCAP.
4 Scroll down to the Service Type section. The following screen appears.
Figure 21 WAN > Internet Connection > Service Type
5 In the Service Type field, select Server. The rest of the fields are enabled.
6 Configure the rest of the fields, if necessary. For example, you might want to set the
Trans fer Ma x Rate to the maximum value.
7 Click Apply.
4.2.2 Set up the Client
1 Log in to the ZyXEL Device that will be the client. (See Chapter 2 on page 37.)
2 Click Network > WAN > Internet Connection.
3 Set the VPI, VCI, Multiplexing, and Encapsulation to the same values you set in the
server.
4 Scroll down to the Service Type section. See Figure 21 on page 56 above.
56
P-791R v2 User’s Guide
Page 57
5 In the Service Mode field, select the same type of connection you selected for the server.
6 In the Service Type field, select Client. The rest of the fields will be negotiated with the
server.
7 Click Apply.
4.2.3 Connect the ZyXEL Devices
Connect the DSL ports on the ZyXEL Devices together, and wait while the ZyXEL Devices
automatically establish the connection. When the connection is established, the DSL and INTERNET lights are on. It takes up to half a minute to establish the connection. If the
ZyXEL Devices do not establish the connection, verify that the settings (except the Service Type) match.
Chapter 4 Point-to-point Configuration
P-791R v2 User’s Guide
57
Page 58
Chapter 4 Point-to-point Configuration
58
P-791R v2 User’s Guide
Page 59
PART II
Network Setup
WA N S e t u p (6 1 )
LAN Setup (83)
Network Address Translation (NAT) Screens (93)
59
Page 60
60
Page 61
CHAPTER 5
WAN Setup
This chapter describes how to configure WAN settings.
5.1 WAN Overview
A WAN (Wide Area Network) is an outside connection to another network or the Internet.
5.1.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports
the following methods.
5.1.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the
IP network protocol. IP packets are routed between the Ethernet interface and the WAN
interface and then formatted so that they can be understood in a bridged environment. For
instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP
requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the
second wizard screen. You can get this information from your ISP.
5.1.1.2 PPP over Ethernet
PPPoE (Point-to-Point Protocol over Ethernet) provides access control and billing
functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF standard
(RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem
(DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.
P-791R v2 User’s Guide
61
Page 62
Chapter 5 WAN Setup
5.1.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA
connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual
Circuit) to the Internet Service Provider’s (ISP) DSLAM (DSL Access Multiplexer). Please
refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information
on PPP.
5.1.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation
Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single
ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each
protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer
to the RFC for more detailed information.
5.1.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be
sure to use the multiplexing method required by your ISP.
5.1.2.1 VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit;
for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments
where dynamic creation of large numbers of ATM VCs is fast and economical.
5.1.2.2 LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being
contained in each packet header. Despite the extra bandwidth and processing overhead, this
method may be advantageous if it is not practical to have a separate VC for each carried
protocol, for example, if charging heavily depends on the number of simultaneous VCs.
5.1.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to
65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for
more information.
5.1.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you
a different one each time. The Single User Account feature can be enabled or disabled if you
have either a dynamic or static IP. However the encapsulation method assigned influences
your choices for IP address and ENET ENCAP gateway.
62
P-791R v2 User’s Guide
Page 63
5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and
not the ENET ENCAP Gateway field.
5.1.4.2 IP Assignment with RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP
Address and ENET ENCAP Gateway fields as stated above.
5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP
Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP
Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server
assigns them to the ZyXEL Device.
5.1.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic
demand. The ZyXEL Device does two things when you specify a nailed-up connection. The
first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up
the connection when turned on and whenever the connection is down. A nailed-up connection
can be very expensive for obvious reasons.
Chapter 5 WAN Setup
Do not specify a nailed-up connection unless your telephone company offers flat-rate service
or you need a constant connection and the cost is of no concern
5.1.6 NAT
NAT (Network Address Translation, RFC 1631) is the translation of the IP address of a host in
a packet, for example, the source address of an outgoing packet, used within one network to a
different IP address known within another network.
5.2 Metric
The metric represents the "cost of transmission". A router determines the best route for
transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the
measurement of cost, with a minimum of "1" for directly connected networks. The number
must be between "1" and "15"; a number greater than "15" means the link is down. The
smaller the number, the lower the "cost".
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the
default routes have the same metric, the ZyXEL Device uses the following pre-defined
priorities:
• Normal route: designated by the ISP (see Section 5.4 on page 65)
• Traffic-redirect route (see Section 5.6 on page 74)
• WAN-backup route, also called dial-backup (see Section 5.9 on page 75)
P-791R v2 User’s Guide
63
Page 64
Chapter 5 WAN Setup
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric
of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary
default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the
traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route
if the traffic-redirect route also fails.
If you want the dial-backup route to take first priority over the traffic-redirect route or even the
normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to
"2" (or greater).
IP Policy Routing overrides the default routing behavior and takes priority over all of the
routes mentioned above.
5.3 Traffic Shaping
Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average
rate and fluctuations of data transmission over an ATM network. This agreement helps
eliminate congestion, which is important for transmission of real time data such as audio and
video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter
may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits),
so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not
guaranteed because it is dependent on the line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the
maximum average rate at which cells can be sent over the virtual connection. SCR may not be
greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At
this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value
that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 22 Example of Traffic Shaping
64
P-791R v2 User’s Guide
Page 65
5.3.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0
Specification.
5.3.1.1 Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is
being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for
connections that continuously require a specific amount of bandwidth. A PCR is specified and
if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR
would be high-resolution video and voice.
5.3.1.2 Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections
that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or
non-real time (VBR-nRT) connections.
The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require
closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a
PCR is specified) but is only available when data is being sent. An example of an VBR-RT
connection would be video conferencing. Video conferencing requires real-time data transfers
and the bandwidth requirement varies in proportion to the video image's changing dynamics.
Chapter 5 WAN Setup
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do
not require closely controlled delay and delay variation. It is commonly used for "bursty"
traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum
level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
5.3.1.3 Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR
doesn't guarantee any bandwidth and only delivers traffic when the network has spare
bandwidth. An example application is background file transfer.
5.4 Internet Connection
To change your ZyXEL Device’s WAN remote node settings, click Network > WAN >
Internet Connection. The screen differs by the encapsulation.
See Section 5.1 on page 61 for more information.
P-791R v2 User’s Guide
65
Page 66
Chapter 5 WAN Setup
Figure 23 WAN > Internet Connection
The following table describes the labels in this screen.
Table 10 WAN > Internet Connection
LABELDESCRIPTION
General
NameEnter the name of your Internet Service Provider, for example “MyISP”. This
information is for descriptive purposes only.
ModeSelect Routing (default) from the drop-down list box if your ISP allows multiple
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down list
User Name(PPPoA and PPPoE only) Enter the user name exactly as your ISP assigned. If
Password(PPPoA and PPPoE only) Enter the password associated with the user name
computers to share an Internet account. Otherwise select Bridge.
box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
If you set up a point-to-point or a point-to-2points connection, select either ENET
ENCAP or RFC 1483.
assigned a name in the form user@domain where domain identifies a service
name, then enter both components exactly as given.
above.
66
P-791R v2 User’s Guide
Page 67
Chapter 5 WAN Setup
Table 10 WAN > Internet Connection (continued)
LABELDESCRIPTION
Service Name(PPPoE only) Type the name of your PPPoE service here.
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThese fields only appear if the Mode is Routing.
Obtain an IP
Address
Automatically
Static IP Address(PPPoE, PPPoA, and ENET ENCAP only) Select this if you do not have a
IP AddressEnter the static IP address provided by your ISP.
Subnet Mask(ENET ENCAP only) This field is enabled if you select Static IP Address. Enter
Gateway IP
Address
ConnectionThis section only appears if the Encapsulation is PPPoE and PPPoA.
Nailed-Up
Connection
Connect on
Demand
Max Idle TimeoutSpecify an idle time-out in the Max Idle Timeout field when you select Connect
Service Type
Service Mode
Service Type
Enable Rate
Adaption
Transfer Max Rate
(Kbps)
Transfer Min Rate
(Kbps)
Choices are VC or LLC.
circuit. Refer to the appendix for more information.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet. ‘
(PPPoE, PPPoA, and ENET ENCAP only) Select this if you have a dynamic IP
address.
dynamic IP address.
the subnet mask provided by your ISP.
(ENET ENCAP only) This field is enabled if you select Static IP Address. Enter
the gateway IP address provided by your ISP. You must enter a valid IP address
for Internet access. If you enter 0.0.0.0, the Internet connection does not work.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
This field indicates that the ZyXEL Device uses 2-wire mode for the DSL
connection.
In 2-wire mode, the maximum data rate is up to 5.69 Mbps. This field is not
configurable.
Indicate whether the ZyXEL Device is the server or the client in the DSL
connection. Select Server if this ZyXEL Device is the server in a point-to-point
application. (See Chapter 4 on page 55.) Otherwise, select Client.
This field is enabled if Service Type is Server. Indicate whether or not the
ZyXEL Device can adjust the speed of its connection to that of the other device.
This field is enabled if Service Type is Server. Set the maximum rate at which
the ZyXEL Device sends and receives information. The actual transfer rate will
be between this value and the minimum transfer rate you configure.
This field is enabled if Service Type is Server. Set the minimum rate at which
the ZyXEL Device sends and receives information. The actual transfer rate will
be between this value and the maximum transfer rate you configure.
P-791R v2 User’s Guide
67
Page 68
Chapter 5 WAN Setup
Table 10 WAN > Internet Connection (continued)
LABELDESCRIPTION
Standard ModeThis field is enabled if Service Type is Server. Select the operational mode the
ZyXEL Device uses in the DSL connection. Annex A refers to connections over
POTS and Annex B refers to connections over ISDN lines.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
Advanced SetupClick this button to display the Advanced WAN Setup screen and edit more
details of your WAN setup.
5.4.1 Configuring Advanced Internet Connection
Use this screen to edit your ZyXEL Device's advanced settings for Internet connections. Click
the Advanced Setup button in the Internet Connection screen. The screen appears as shown.
Figure 24 WAN > Internet Connection > Advanced Setup
68
The following table describes the labels in this screen.
Tabl e 11 WAN > Internet Connection > Advanced Setup
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
P-791R v2 User’s Guide
Page 69
Chapter 5 WAN Setup
Tabl e 11 WAN > Internet Connection > Advanced Setup (continued)
LABELDESCRIPTION
RIP VersionThis field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device
sends (it recognizes both formats when receiving). RIP-1 is universally supported
but RIP-2 carries more information. RIP-1 is probably adequate for most networks,
unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the
routing data in RIP-2 format; the difference being that RIP-2B uses subnet
broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on
non-router machines since they generally do not listen to the RIP multicast address
and so will not receive the RIP packets. However, if one router uses multicasting,
then all routers on your network must use multicasting, also.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a multicast group. The ZyXEL Device supports both IGMP
version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
ATM Q oS
ATM QoS TypeSelect CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst
Size
PPPoE
Passthrough
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
or data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time
sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or
VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with
other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the
PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be
sent at the peak rate. Type the MBS, which is less than 65535.
This field is only effective for PPPoE connections.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE
Passthrough to allow up to ten hosts on the LAN to use PPPoE client software on
their computers to connect to the ISP via the ZyXEL Device. Each host can have a
separate account and a public WAN IP address.
PPPoE pass through is an alternative to NAT for applications where NAT is not
appropriate.
Disable PPPoE passthrough if you do not need to allow hosts on the LAN to use
PPPoE client software on their computers to connect to the ISP.
5.5 Configuring More Connections
This section describes the protocol-independent parameters for a remote network. They are
required for placing calls to a remote gateway and the network behind it across a WAN
connection. When you use the WAN > Internet Connection screen to set up Internet access,
you are configuring the first WAN connection.
Click Network > WAN > More Connections to display the screen as shown next.
P-791R v2 User’s Guide
69
Page 70
Chapter 5 WAN Setup
Figure 25 WAN > More Connections
The following table describes the labels in this screen.
Table 12 WAN > More Connections
LABELDESCRIPTION
#This is the index number of a connection.
ActiveThis display whether this connection is activated. Clear the check box to disable
NameThis is the descriptive name for this connection.
VPI/VCIThis is the VPI and VCI values used for this connection.
EncapsulationThis is the method of encapsulation used for this connection.
ModifyThe first (ISP) connection is read-only in this screen. Use the WAN > Internet
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
the connection. Select the check box to enable it.
Connection screen to edit it.
Click the edit icon to go to the screen where you can edit the connection.
Click the delete icon to remove an existing connection. You cannot remove the
first connection.
5.5.1 More Connections Edit
Use this screen to configure a connection. Click the edit icon in the More Connections screen.
70
P-791R v2 User’s Guide
Page 71
Figure 26 WAN > More Connections > Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 13 WAN > More Connections > Edit
LABELDESCRIPTION
General
ActiveSelect the check box to activate or clear the check box to deactivate this
NameEnter a unique, descriptive name of up to 13 ASCII characters for this
ModeSelect Routing from the drop-down list box if your ISP allows multiple
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down list
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
Password(PPPoA and PPPoE encapsulation only) Enter the password associated with the
Service Name(PPPoE only) Type the name of your PPPoE service here.
connection.
connection.
computers to share an Internet account.
If you select Bridge, the ZyXEL Device will forward any packet that it does not
route to this remote node; otherwise, the packets are discarded.
box. Choices are PPPoA, RFC 1483, ENET ENCAP or PPPoE.
If you set up a point-to-point connection, select either ENET ENCAP or RFC
1483.
ISP assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as given.
user name above.
P-791R v2 User’s Guide
71
Page 72
Chapter 5 WAN Setup
Table 13 WAN > More Connections > Edit (continued)
LABELDESCRIPTION
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThese fields only appear if the Mode is Routing.
IP AddressEnter the static IP address provided by your ISP.
Subnet MaskEnter the subnet mask provided by your ISP.
Gateway IP
Address
ConnectionThis section only appears if the Encapsulation is PPPoE and PPPoA.
Nailed-Up
Connection
Connect on
Demand
Max Idle TimeoutSpecify an idle time-out in the Max Idle Timeout field when you select Connect
NATSUA Only is available only when you select Routing in the Mode field.
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
Advanced SetupClick this button to display the More ConnectionsAdvanced screen and edit
Choices are VC or LLC.
By prior agreement, a protocol is assigned a specific virtual circuit, for example,
VC1 will carry IP. If you select VC, specify separate VPI and VCI numbers for
each protocol.
For LLC-based multiplexing or PPP encapsulation, one VC carries multiple
protocols with protocol identifying information being contained in each packet
header. In this case, only one set of VPI and VCI numbers need be specified for
all protocols.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet. ‘
Enter the gateway IP address provided by your ISP.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
Select SUA Only if you have one public IP address and want to use NAT. Click
Edit to go to the Port Forwarding screen to edit a server mapping set.
Otherwise, select None to disable NAT.
more details of your WAN setup.
5.5.2 Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the More Connections Edit screen. The screen appears as shown.
72
P-791R v2 User’s Guide
Page 73
Chapter 5 WAN Setup
Figure 27 WAN > More Connections > Advanced Setup
The following table describes the labels in this screen.
Table 14 WAN > More Connections > Advanced Setup
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
RIP VersionThis field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device
sends (it recognizes both formats when receiving). RIP-1 is universally supported
but RIP-2 carries more information. RIP-1 is probably adequate for most networks,
unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the
routing data in RIP-2 format; the difference being that RIP-2B uses subnet
broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on
non-router machines since they generally do not listen to the RIP multicast address
and so will not receive the RIP packets. However, if one router uses multicasting,
then all routers on your network must use multicasting, also.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
ATM Q oS
ATM QoS TypeSelect CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst
Size
establish membership in a multicast group. The ZyXEL Device supports both IGMP
version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
or data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time
sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or
VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with
other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the
PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be
sent at the peak rate. Type the MBS, which is less than 65535.
P-791R v2 User’s Guide
73
Page 74
Chapter 5 WAN Setup
Table 14 WAN > More Connections > Advanced Setup (continued)
LABELDESCRIPTION
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
5.6 Traffic Redirect
Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot connect
to the Internet. An example is shown in the figure below.
Figure 28 Traffic Redirect Example
The following network topology allows you to avoid triangle route security issues when the
backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three
logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the
protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in
another subnet (Subnet 2). Configure filters that allow packets from the protected LAN
(Subnet 1) to the backup gateway (Subnet 2).
Figure 29 Traffic Redirect LAN Setup
74
P-791R v2 User’s Guide
Page 75
5.7 Dial Backup Interface
The Dial Backup port can be used in reserve, as a traditional dial-up connection should the
broadband connection to the WAN port fail. To set up the auxiliary port (Dial Backup) for use
in the event that the regular WAN connection is dropped, first make sure you have set up the
switch and port connection. See Section 5.8 on page 75 for more information.
5.8 CON/AUX Port for Dial Backup
Use the CON/AUX port to configure the ZyXEL Device for Dial Backup via a modem. Set the
CON/AUX switch of the ZyXEL Device to AUX (Auxiliary) side to use the CON/AUX port
as a backup port for Internet access via a modem. Connect the RJ-45 connector of the console
cable to the CON/AUX port of the ZyXEL Device and the other end to a serial port (COM1,
COM2 or other COM port) on your modem.
5.9 Configuring WAN Backup Setup
Chapter 5 WAN Setup
Use this screen to forward traffic to a backup gateway or to use the dial-backup port when the
ZyXEL Device cannot connect to the Internet. To open this screen, click WA N > WAN Backup Setup. The screen appears as shown.
Figure 30 WAN > WAN Backup Setup
P-791R v2 User’s Guide
75
Page 76
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 15 WAN > WAN Backup Setup
LABELDESCRIPTION
Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.
Check WAN IP
Address 1-3
Fail ToleranceType the number of times (2 recommended) that your ZyXEL Device pings the IP
Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN
Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a
Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device
Active Traffic
Redirect
Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM
is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses
configured in the Check WAN IP Address fields.
Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP
address of a reliable nearby computer (for example, your ISP's DNS server
address).
Note: If you activate either traffic redirect or dial backup, you must
configure at least one IP address here.
When using a WAN backup connection, the ZyXEL Device periodically pings the
addresses configured here and uses the other WAN backup connection (if
configured) if there is no response.
addresses configured in the Check WAN IP Address field without getting a
response before switching to a WAN backup connection (or a different WAN
backup connection).
backup connection), it periodically checks to whether or not it can use a higher
priority connection.
Type the number of seconds (30 recommended) for the ZyXEL Device to wait
between checks. Allow more time if your destination IP address handles lots of
traffic.
ping response from one of the IP addresses in the Check WAN IP Address field
before timing out the request. The WAN connection is considered "down" after the
ZyXEL Device times out the number of times specified in the Fail Tolerance field.
Use a higher value in this field if your network is busy or congested.
cannot connect to the Internet.
Select this check box to have the ZyXEL Device use traffic redirect if the normal
WAN connection goes down.
76
Note: If you activate traffic redirect, you must configure at least one
Check WAN IP Address.
MetricThis field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best
route for transmission by choosing a path with the lowest "cost". RIP routing uses
hop count as the measurement of cost, with a minimum of "1" for directly
connected networks. The number must be between "1" and "15"; a number greater
than "15" means the link is down. The smaller the number, the lower the "cost".
Backup GatewayType the IP address of your backup gateway in dotted decimal notation. The
ZyXEL Device automatically forwards traffic to this IP address if the ZyXEL
Device's Internet connection terminates.
Dial Backup
P-791R v2 User’s Guide
Page 77
Chapter 5 WAN Setup
Table 15 WAN > WAN Backup Setup (continued)
LABELDESCRIPTION
Active Dial
Backup
Select this to have the ZyXEL Device use a dial-backup connection if the normal
WAN connection goes down.
Note: If you activate dial backup, you must configure at least one
Check WAN IP Address.
MetricThis field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best
route for transmission by choosing a path with the lowest "cost". RIP routing uses
hop count as the measurement of cost, with a minimum of "1" for directly
connected networks. The number must be between "1" and "15"; a number greater
than "15" means the link is down. The smaller the number, the lower the "cost".
Port SpeedUse the drop-down list box to select the speed of the connection between the DSL
port and the external device.
User NameType the login name assigned by your ISP.
PasswordType the password assigned by your ISP.
Primary Phone
Number
Advanced SetupClick this to configure advanced settings for the dial-backup connection.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
Type the first (primary) phone number from the ISP for this remote node. If the
Primary Phone number is busy or does not answer, your ZyWALL dials the
Secondary Phone number, if available. (See Advanced Setup.) Some areas
require dialing the pound sign # before the phone number for local calls. Include a #
symbol at the beginning of the phone numbers as required.
5.9.1 Advanced Backup Setup
Use this screen to change your ZyXEL Device’s advanced dial backup settings. Click WA N >
WAN Backup Setup > Advanced Setup. The screen appears as shown.
P-791R v2 User’s Guide
77
Page 78
Chapter 5 WAN Setup
Figure 31 WAN > WAN Backup Setup > Advanced Setup
The following table describes the labels in this screen.
Table 16 WAN > WAN Backup Setup > Advanced Setup
LABELDESCRIPTION
Basic
Authentication
Type
Secondary
Phone Number
Dial Backup Port
Speed
AT Command
Initial String
Advanced
Modem Setup
TCP/IP Options
Use the drop-down list box to select an authentication protocol for outgoing calls.
Options are:
CHAP/PAP - Your ZyXEL Device accepts either CHAP or PAP when requested by
this remote node.
CHAP - Your ZyXEL Device accepts CHAP only.
PAP - Your ZyXEL Device accepts PAP only.
Type the backup phone number from the ISP. If the Primary Phone number is busy
or does not answer, your ZyWALL dials the Secondary Phone number, if available.
Some areas require dialing the pound sign # before the phone number for local
calls. Include a # symbol at the beginning of the phone numbers as required.
Select the speed of the connection between the Dial Backup port and the external
device. Available speeds are 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Enter the AT command string to initialize the WAN device. Consult the manual of
your WAN device connected to your Dial Backup port for specific AT commands.
Click Edit to change the advanced settings for the modem.
78
P-791R v2 User’s Guide
Page 79
Chapter 5 WAN Setup
Table 16 WAN > WAN Backup Setup > Advanced Setup (continued)
LABELDESCRIPTION
MetricThis field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best
route for transmission by choosing a path with the lowest "cost". RIP routing uses
hop count as the measurement of cost, with a minimum of "1" for directly
connected networks. The number must be between "1" and "15"; a number greater
than "15" means the link is down. The smaller the number, the lower the "cost".
Enable SUASelect this if you have one public IP address and want to use NAT, or clear it to
Enable RIPSelect this if you want to enable RIP in the dial-backup connection. RIP (Routing
RIP VersionThe RIP Version field controls the format and the broadcasting method of the RIP
RIP DirectionThe RIP Direction field controls the sending and receiving of RIP packets. Select
Enable MulticastSelect this if you want to enable IGMP in the dial-backup connection. IGMP
MulticastThe ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2.
PPP Options
EncapsulationSelect CISCO PPP from the drop-down list box if your dial backup WAN device
CompressionSelect this to turn on stac compression.
Connection
Nailed-Up
Connection
Connect on
Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect on
Budget
Allocated Budget
Period
disable NAT.
Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange
routing information with other routers. Clear this if you want the ZyXEL Deviceto not
send any RIP packets and to ignore any RIP packets received.
packets that the ZyXEL Device sends (it recognizes both formats when receiving).
RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is
probably adequate for most networks, unless you have an unusual network
topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the
difference being that RIP-2B uses subnet broadcasting while RIP-2M uses
multicasting. Multicasting can reduce the load on non-router machines since they
generally do not listen to the RIP multicast address and so will not receive the RIP
packets. However, if one router uses multicasting, then all routers on your network
must use multicasting, also.
the RIP direction from Both/In Only/Out Only. When set to Both or Out Only, the
ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives.
(Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a multicast group.
uses Cisco PPP encapsulation, otherwise select Standard PPP.
Select Nailed-Up Connection when you want your connection up all the time. The
ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
Demand. The default setting is 0, which means the Internet session will not
timeout.
Enter the maximum amount of time (in minutes) each call can last. Enter 0 if there
is no limit. With Period, you can set a limit on the total outgoing call time of the
ZyXEL Device within a certain period of time. When the total outgoing call time
exceeds the limit, the current call will be dropped and any future outgoing calls will
be blocked.
Enter how often (in hours) the Allocated Budget is reset. For example, if you can
call for thirty minutes every hour, set the Allocated Budget to 30, and set this field
to 1.
P-791R v2 User’s Guide
79
Page 80
Chapter 5 WAN Setup
Table 16 WAN > WAN Backup Setup > Advanced Setup (continued)
LABELDESCRIPTION
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
5.9.2 Advanced Modem Settings for Dial Backup
Use this screen to change your ZyXEL Device’s modem settings for dial backup. Click WA N
> WAN Backup Setup > Advanced Setup > Edit. The screen appears as shown.
Figure 32 WAN > WAN Backup Setup > Advanced Setup > Edit
80
The following table describes the labels in this screen.
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit
LABELDESCRIPTION
AT Command
Strings
Dial
Drop
Answer
Drop DTR When
Hang Up
AT Response
Strings
CLID
Called ID
Speed
Enter the AT Command string to make a call.
Enter the AT Command string to drop a call. “~” represents a one second wait, for
example “~~~+++~~ath” can be used if your modem has a slow response time.
Enter the AT Command string to answer a call.
Select this if you want the DTR (Data Terminal Ready) signal to be dropped after
the Drop string is sent out.
Enter the keyword that precedes the CLID (Calling Line Identification) in the AT
response string. This lets the ZyXEL Device capture the CLID in the AT response
string that comes from the WAN device. CLID is required for CLID authentication.
Enter the keyword preceding the dialed number.
Enter the keyword preceding the connection speed.
P-791R v2 User’s Guide
Page 81
Chapter 5 WAN Setup
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit (continued)
LABELDESCRIPTION
Call Control
Dial TimeoutEnter a number of seconds for the ZyXEL Device to keep trying to set up an
Retry CountEnter a number of times for the ZyXEL Device to retry a busy or no-answer phone
Retry Interval
Drop Timeout
Call Back Delay
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
outgoing call before timing out (stopping). The ZyXEL Device times out and stops if
it cannot set up an outgoing call within the timeout value.
number before blacklisting the number.
Enter a number of seconds for the ZyXEL Device to wait before trying another call
after a call has failed. This applies before a phone number is blacklisted.
Enter a number of seconds for the ZyXEL Device to wait before dropping the DTR
signal if it does not receive a positive disconnect confirmation.
Enter a number of seconds for the ZyXEL Device to wait between dropping a
callback request call and dialing the corresponding callback call.
P-791R v2 User’s Guide
81
Page 82
Chapter 5 WAN Setup
82
P-791R v2 User’s Guide
Page 83
CHAPTER 6
LAN Setup
This chapter describes how to configure LAN settings.
6.1 LAN Overview
A Local Area Network (LAN) is a shared communication system to which many computers
are attached. A LAN is a computer network limited to the immediate area, usually the same
building or floor of a building. The LAN screens can help you configure a LAN DHCP server
and manage IP addresses.
See Section 6.3 on page 87 to configure the LAN screens.
6.1.1 LANs, WANs and the ZyXEL Device
The actual physical connection determines whether the ZyXEL Device ports are LAN or
WAN ports. There are two separate IP networks, one inside the LAN network and the other
outside the WAN network as shown next.
Figure 33 LAN and WAN IP Addresses
P-791R v2 User’s Guide
83
Page 84
Chapter 6 LAN Setup
6.1.2 DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual
clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL
Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device
provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must
have another DHCP server on your LAN, or else the computer must be manually configured.
6.1.2.1 IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP clients (DHCP
Pool). See the product specifications in the appendices. Do not assign static IP addresses from
the DHCP pool to your LAN computers.
6.1.3 DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address
and vice versa. The DNS server is extremely important because without it, you must know the
IP address of a machine before you can access it. The DNS server addresses that you enter in
the DHCP setup are passed to the client machines along with the assigned IP address and
subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP
to tell a customer the DNS server addresses, usually in the form of an information sheet, when
s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server
fields in DHCP Setup, otherwise, leave them blank.
Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP
Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers,
chances are the DNS servers are conveyed through IPCP negotiation. The ZyXEL Device
supports the IPCP DNS server extensions through the DNS proxy feature.
If the Primary and Secondary DNS Server fields in the DHCP Setup screen are not
specified, for instance, left as 0.0.0.0, the ZyXEL Device tells the DHCP clients that it itself is
the DNS server. When a computer sends a DNS query to the ZyXEL Device, the ZyXEL
Device forwards the query to the real DNS server learned through IPCP and relays the
response back to the computer.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It
does not mean you can leave the DNS servers out of the DHCP setup under all circumstances.
If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the
DHCP Setup screen. This way, the ZyXEL Device can pass the DNS servers to the computers
and the computers can query the DNS server directly without the ZyXEL Device’s
intervention.
6.1.4 DNS Server Address Assignment
84
Use DNS (Domain Name System) to map a domain name to its corresponding IP address and
vice versa. The DNS server is extremely important because without it, you must know the IP
address of a computer before you can access it.
There are two ways that an ISP disseminates the DNS server addresses.
P-791R v2 User’s Guide
Page 85
• The ISP tells you the DNS server addresses, usually in the form of an information sheet,
when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS
Server fields in the DHCP Setup screen.
• The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server
fields are left as 0.0.0.0 in the DHCP Setup screen.
6.2 LAN TCP/IP
The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS
servers to systems that support DHCP client capability.
The LAN parameters of the ZyXEL Device are preset in the factory with the following values:
• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)
• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If your ISP gives you explicit
DNS server address(es), read the embedded web configurator help regarding what fields need
to be configured.
Chapter 6 LAN Setup
6.2.1 IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do computers on a
LAN share one common network number.
Where you obtain your network number depends on your particular situation. If the ISP or
your network administrator assigns you a block of registered IP addresses, follow their
instructions in selecting the IP addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single
user account and the ISP will assign you a dynamic IP address when the connection is
established. If this is the case, it is recommended that you select a network number from
192.168.0.0 to 192.168.255.0 and you must enable the Network Address Translation (NAT)
feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this
block of addresses specifically for private use; please do not use any other number unless you
are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other
words, the first three numbers specify the network number while the last number identifies an
individual computer on that network.
Once you have decided on the network number, pick an IP address that is easy to remember,
for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your
network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device
will compute the subnet mask automatically based on the IP address that you entered. You
don't need to change the subnet mask computed by the ZyXEL Device unless you are
instructed to do otherwise.
P-791R v2 User’s Guide
85
Page 86
Chapter 6 LAN Setup
6.2.1.1 Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from
the Internet, for example, only between your two branch offices, you can assign any IP
addresses to the hosts without problems. However, the Internet Assigned Numbers Authority
(IANA) has reserved the following three blocks of IP addresses specifically for private
networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
You can obtain your IP address from the IANA, from an ISP or it can be assigned from a
private network. If you belong to a small organization and your Internet access is through an
ISP, the ISP can provide you with the Internet addresses for your local networks. On the other
hand, if you are part of a much larger organization, you should consult your network
administrator for the appropriate IP addresses.
"Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, Address Allocation for Private Internets
and RFC 1466, Guidelines for Management of IP Address Space.
6.2.2 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with
other routers. The RIP Direction field controls the sending and receiving of RIP packets.
When set to:
• Both - the ZyXEL Device will broadcast its routing table periodically and incorporate the
RIP information that it receives.
• In Only - the ZyXEL Device will not send any RIP packets but will accept all RIP packets
received.
• Out Only - the ZyXEL Device will send out RIP packets but will not accept any RIP
packets received.
• None - the ZyXEL Device will not send any RIP packets and will ignore any RIP packets
received.
The Version field controls the format and the broadcasting method of the RIP packets that the
ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally
supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks,
unless you have an unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that
RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.
86
P-791R v2 User’s Guide
Page 87
6.2.3 Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to
a group of hosts on the network - not everybody and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC
2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If
you would like to read more detailed information about interoperability between IGMP
version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is
used to identify host groups and can be in the range 224.0.0.0 to 239.255.255.255. The address
224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts
(including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP.
The address 224.0.0.2 is assigned to the multicast routers group.
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the ZyXEL Device queries all directly connected networks to gather group
membership. After that, the ZyXEL Device periodically updates this information. IP
multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in
the web configurator (LAN; WAN). Select None to disable IP multicasting on these
interfaces.
Chapter 6 LAN Setup
6.3 Configuring LAN IP
Use this screen to set the LAN IP address of your ZyXEL Device. Click LAN > IP. See
Section 6.1 on page 83 for background information.
Figure 34 LAN > IP
The following table describes the fields in this screen.
Table 18 LAN > IP
LABELDESCRIPTION
IP AddressEnter the IP address of your ZyXEL Device in dotted decimal notation, for
IP Subnet Mask Type the subnet mask for your network. See Section 6.2.1 on page 85 for more
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to begin configuring this screen afresh.
Advanced SetupClick this button to display the Advanced LAN Setup screen and edit more
example, 192.168.1.1 (factory default).
information.
details of your LAN setup.
P-791R v2 User’s Guide
87
Page 88
Chapter 6 LAN Setup
6.3.1 Configuring Advanced LAN Setup
Use this screen to edit your ZyXEL Device's advanced LAN settings. Click the Advanced
Setup button in the LAN IP screen. The screen appears as shown.
Figure 35 LAN > IP > Advanced Setup
The following table describes the labels in this screen.
Table 19 LAN > IP > Advanced Setup
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
RIP VersionThis field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device
sends (it recognizes both formats when receiving). RIP-1 is universally supported
but RIP-2 carries more information. RIP-1 is probably adequate for most networks,
unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the
routing data in RIP-2 format; the difference being that RIP-2B uses subnet
broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on
non-router machines since they generally do not listen to the RIP multicast address
and so will not receive the RIP packets. However, if one router uses multicasting,
then all routers on your network must use multicasting, also.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
Windows
Networking
(NetBIOS over
TCP/IP)
Allow between
LAN and WAN
BackClick Back to return to the previous screen.
establish membership in a multicast group. The ZyXEL Device supports both IGMP
version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that
enable a computer to connect to and communicate with a LAN. For some dial-up
services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls.
However it may sometimes be necessary to allow NetBIOS packets to pass
through to the WAN in order to find a computer on the WAN.
Select this check box to forward NetBIOS packets from the LAN to the WAN and
from the WAN to the LAN.
Clear this check box to block all NetBIOS packets going from the LAN to the WAN
and from the WAN to the LAN.
88
P-791R v2 User’s Guide
Page 89
Table 19 LAN > IP > Advanced Setup (continued)
LABELDESCRIPTION
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
6.4 DHCP Setup
Use this screen to configure the DNS server information that the ZyXEL Device sends to the
DHCP client devices on the LAN.
Figure 36 LAN > DHCP Setup
Chapter 6 LAN Setup
The following table describes the labels in this screen.
Table 20 LAN > DHCP Setup
LABELDESCRIPTION
DHCP Setup
DHCPSelect what type of DHCP services the ZyXEL Device provides to the network.
Choices are:
None - the ZyXEL Device does not provide any DHCP services. There is
already a DHCP server on the network.
Relay - the ZyXEL Device routes DHCP requests to the DHCP server. There
may be a DHCP server on another network.
Server - the ZyXEL Device assigns IP addresses and provides subnet mask,
gateway, and DNS server information to the network. The ZyXEL Device is the
DHCP server for the network.
IP Pool Starting
Address
Pool SizeThis field is enabled if the ZyXEL Device is a Server. Enter the size of, or the
Remote DHCP
Server
DNS Server
DNS Servers
Assigned by DHCP
Server
This field is enabled if the ZyXEL Device is a Server. Enter the first of the
contiguous addresses in the IP address pool.
number of addresses in, the IP address pool.
This field is enabled if the ZyXEL Device is a Relay. Enter the IP address of the
DHCP server to which the ZyXEL Device should route requests.
The ZyXEL Device passes a DNS (Domain Name System) server IP address to
the DHCP clients.
P-791R v2 User’s Guide
89
Page 90
Chapter 6 LAN Setup
Table 20 LAN > DHCP Setup (continued)
LABELDESCRIPTION
Primary DNS Server
Secondary DNS
Server
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to begin configuring this screen afresh.
6.5 LAN Client List
This table allows you to assign IP addresses on the LAN to specific individual computers
based on their MAC Addresses.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address
is assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02.
This field is not available when you set DHCP to Relay.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the
DHCP clients along with the IP address and the subnet mask.
If the fields are left as 0.0.0.0, the ZyXEL Device acts as a DNS proxy and
forwards the DHCP client’s DNS query to the real DNS server learned through
IPCP and relays the response back to the computer.
Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network > LAN
> Client List. The screen appears as shown.
Figure 37 LAN > Client List
The following table describes the labels in this screen.
Table 21 LAN > Client List
LABELDESCRIPTION
IP AddressEnter the IP address that you want to assign to the computer on your LAN with
MAC AddressEnter the MAC address of a computer on your LAN.
AddClick Add to add a static DHCP entry.
#This is the index number of the static IP table entry (row).
StatusThis field displays whether the client is connected to the ZyXEL Device.
Host Name This field displays the computer host name.
IP AddressThis field displays the IP address relative to the # field listed above.
the MAC address specified below.
The IP address should be within the range of IP addresses you specified in the
DHCP Setup for the DHCP client.
90
P-791R v2 User’s Guide
Page 91
Table 21 LAN > Client List (continued)
LABELDESCRIPTION
MAC AddressThe MAC (Media Access Control) or Ethernet address on a LAN (Local Area
ReserveSelect the check box(es) in each entry to have the ZyXEL Device always assign
ModifyClick the modify icon to have the IP address field editable and change it.
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to begin configuring this screen afresh.
RefreshClick Refresh to reload the DHCP table.
6.6 LAN IP Alias
IP alias allows you to partition a physical network into different logical networks over the
same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its
single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN
network.
Chapter 6 LAN Setup
Network) is unique to your computer (six pairs of hexadecimal notation).
A network interface card such as an Ethernet adapter has a hardwired address
that is assigned at the factory. This address follows an industry standard that
ensures no other adapter has a similar address.
the selected entry(ies)’s IP address(es) to the corresponding MAC address(es)
(and host name(s)). You can select up to 32 entries in this table.
"Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A, B, and C.
Use this screen to configure subnets on the LAN. Click Network > LAN > IP Alias. The
screen appears as shown.
P-791R v2 User’s Guide
91
Page 92
Chapter 6 LAN Setup
Figure 39 LAN > IP Alias
The following table describes the labels in this screen.
Table 22 LAN > IP Alias
LABELDESCRIPTION
IP Alias 1, 2Select the check box to configure another LAN network for the ZyXEL Device.
IP AddressEnter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet MaskYour ZyXEL Device will automatically calculate the subnet mask based on the IP
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
RIP VersionThis field is enabled if RIP Direction is not None. The RIP Version field controls
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to begin configuring this screen afresh.
Alternatively, click the right mouse button to copy and/or paste the IP address.
address that you assign. Unless you are implementing subnetting, use the subnet
mask computed by the ZyXEL Device.
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
the format and the broadcasting method of the RIP packets that the ZyXEL Device
sends (it recognizes both formats when receiving). RIP-1 is universally supported
but RIP-2 carries more information. RIP-1 is probably adequate for most
networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses
subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the
load on non-router machines since they generally do not listen to the RIP
multicast address and so will not receive the RIP packets. However, if one router
uses multicasting, then all routers on your network must use multicasting, also.
92
P-791R v2 User’s Guide
Page 93
CHAPTER 7
Network Address Translation
(NAT) Screens
This chapter discusses how to configure NAT on the ZyXEL Device.
7.1 NAT Overview
NAT (Network Address Translation, RFC 1631) is the translation of the IP address of a host in
a packet, for example, the source address of an outgoing packet, used within one network to a
different IP address known within another network.
7.1.1 NAT Definitions
Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the
computers of your subscribers are the inside hosts, while the web servers on the Internet are
the outside hosts.
Global/local denotes the IP address of a host in a packet as the packet traverses a router, for
example, the local address refers to the IP address of a host when the packet is in the local
network, while the global address refers to the IP address of the host when the same packet is
traveling in the WAN side.
Note that inside/outside refers to the location of a host, while global/local refers to the IP
address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an
inside host in a packet when the packet is still in the local network, while an inside global
address (IGA) is the IP address of the same inside host when the packet is on the WAN side.
The following table summarizes this information.
Table 23 NAT Definitions
ITEMDESCRIPTION
InsideThis refers to the host on the LAN.
OutsideThis refers to the host on the WAN.
LocalThis refers to the packet address (source or destination) as the packet travels on the
GlobalThis refers to the packet address (source or destination) as the packet travels on the
LAN.
WAN.
NAT never changes the IP address (either local or global) of an outside host.
In the simplest form, NAT changes the source IP address in a packet received from a
subscriber (the inside local address) to another (the inside global address) before forwarding
the packet to the WAN side. When the response comes back, NAT translates the destination
address (the inside global address) back to the inside local address before forwarding it to the
original inside host. Note that the IP address (either local or global) of an outside host is never
changed.
The global IP addresses for the inside hosts can be either static or dynamically assigned by the
ISP. In addition, you can designate servers, for example, a web server and a telnet server, on
your local network and make them accessible to the outside world. If you do not define any
servers (for Many-to-One and Many-to-Many Overload mapping – see Table 24 on page 96),
NAT offers the additional benefit of firewall protection. With no servers defined, your ZyXEL
Device filters out all incoming inquiries, thus preventing intruders from probing your network.
For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).
7.1.3 How NAT Works
Each packet has two addresses – a source address and a destination address. For outgoing
packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside
Global Address) is the source address on the WAN. For incoming packets, the ILA is the
destination address on the LAN, and the IGA is the destination address on the WAN. NAT
maps private (local) IP addresses to globally unique ones required for communication with
hosts on other networks. It replaces the original IP source address (and TCP or UDP source
port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet
and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses
and port numbers so incoming reply packets can have their original values restored. The
following figure illustrates this.
Figure 40 How NAT Works
7.1.4 NAT Application
The following figure illustrates a possible NAT application, where three inside LANs (logical
LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN
networks. More examples follow at the end of this chapter.
NAT supports five types of IP/port mapping. They are:
• One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one
global IP address.
• Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP
addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port
address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers
supported (the SUA Only option in today’s routers).
• Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps
the multiple local IP addresses to shared global IP addresses.
• Many-to-Many No Overload:
maps each local IP address to a unique global IP address.
• Server: This type allows you to specify inside servers of different services behind the
NAT to be accessible to the outside world.
Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT
mapping types.
In Many-to-Many No Overload mode, the ZyXEL Device
SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two
types of mapping, Many-to-One and Server. The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of
clients or servers using mapping types as outlined in Table 24 on page 96.
• Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device.
• Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL
Device.
7.2.1 SIP ALG
Some applications, such as SIP, cannot operate through NAT (are NAT un-friendly) because
they embed IP addresses and port numbers in their packets’ data payload.
Some NAT routers may include a SIP Application Layer Gateway (ALG). An Application
Layer Gateway (ALG) manages a specific protocol (such as SIP, H.323 or FTP) at the
application layer.
A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses
embedded in the data stream.
When the ZyXEL Device registers with the SIP register server, the SIP ALG translates the
ZyXEL Device’s private IP address inside the SIP data stream to a public IP address. You do
not need to use STUN or an outbound proxy if your ZyXEL Device is behind a SIP ALG.
96
P-791R v2 User’s Guide
Page 97
7.3 NAT General Setup
You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the
WAN to be forwarded through the ZyXEL Device. Click Network > NAT to open the
following screen.
Figure 42 NAT > General
The following table describes the labels in this screen.
Table 25 NAT General
LABELDESCRIPTION
Active
Network
Address
Translation
(NAT)
SUA OnlySelect this radio button if you have just one public WAN IP address for your ZyXEL
Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL
Max NAT/
Firewall
Session Per
User
Enable SIP
ALG
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to reload the previous configuration for this screen.
Select this check box to enable NAT.
Device.
Device.
When computers use peer to peer applications, such as file sharing applications, they
need to establish NAT sessions. If you do not limit the number of NAT sessions a
single client can establish, this can result in all of the available NAT sessions being
used. In this case, no additional NAT sessions can be established, and users may not
be able to access the Internet.
If your network has a small number of clients using peer to peer applications, you can
raise this number to ensure that their performance is not degraded by the number of
NAT sessions they can establish. If your network has a large number of users using
peer to peer applications, you can lower this number to ensure no single client is using
all of the available NAT sessions.
Select this to make sure SIP (VoIP) works correctly with port-forwarding and porttriggering rules.
A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or
FTP, that you can make visible to the outside world even though NAT makes your whole
inside network appear as a single computer to the outside world.
You may enter a single port number or a range of port numbers to be forwarded, and the local
IP address of the desired server. The port number identifies a service; for example, web
service is on port 80 and FTP on port 21. In some cases, such as for unknown services or
where one server can support more than one service (for example both FTP and web service),
it might be better to specify a range of port numbers. You can allocate a server IP address that
corresponds to a port or a range of ports.
Many residential broadband ISP accounts do not allow you to run any server processes (such
as a Web or FTP server) from your location. Your ISP may periodically check for servers and
may suspend your account if it discovers any active services at your location. If you are
unsure, refer to your ISP.
7.4.1 Default Server IP Address
In addition to the servers for specified services, NAT supports a default server IP address. A
default server receives packets from ports that are not specified in this screen.
"If you do not assign a Default Server IP address, the ZyXEL Device discards
all packets received for ports that are not specified here or in the remote
management setup.
7.4.2 Port Forwarding: Services and Port Numbers
Use the Port Forwarding screen to forward incoming service requests to the server(s) on your
local network.
The most often used port numbers are shown in Appendix F on page 321. Please refer to RFC
1700 for further information about port numbers.
7.4.3 Configuring Servers Behind Port Forwarding (Example)
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the
example), port 80 to another (B in the example) and assign a default server IP address of
192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP
assigns the WAN IP address. The NAT network appears as a single host on the Internet.
The following table describes the fields in this screen.
Table 26 NAT > Port Forwarding
LABELDESCRIPTION
Default Server
Setup
Default ServerIn addition to the servers for specified services, NAT supports a default server. A
default server receives packets from ports that are not specified in this screen. If
you do not assign a Default Server IP address, the ZyXEL Device discards all
packets received for ports that are not specified here or in the remote
management setup.
Port Forwarding
Service NameSelect a service from the drop-down list box or select User define to go to the
Rule Setup screen and define your own service and its forwarding actions.
Server IP
Address
AddClick this button to add a rule to the table below.
#This is the rule index number (read-only).
ActiveClick this check box to enable the rule.
Service NameThis is a service’s name.
Start Port This is the first port number that identifies a service.
End Port This is the last port number that identifies a service.
Server IP
Address
ModifyClick the edit icon to go to the screen where you can edit the port forwarding rule.
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to return to the previous configuration.
Enter the IP address of the server for the specified service.
This is the server’s IP address.
Click the delete icon to delete an existing port forwarding rule. Note that
subsequent rules move up by one when you take this action.
7.5.1 Port Forwarding Rule Edit
Use this screen to edit a port forwarding rule. Click the rule’s edit icon in the Port
Forwarding screen to display the screen shown next.
Figure 45 NAT > Port Forwarding > Edit
100
P-791R v2 User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.