Zyxel P-791R V2 specifications

Page 1
P-791R v2
G.SHDSL.bis Router

User’s Guide

Version 3.40 5/2007 Edition 2
IP Address http://192.168.1.1
Administrator Password 1234
User Password user
www.zyxel.com
Page 2
Page 3

About This User's Guide

About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
Related Documentation
• Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary
information.
" It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk Refer to the included CD for support documents.
• ZyXEL Web Site Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
P-791R v2 User’s Guide
3
Page 4

Document Conventions

Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1 Warnings tell you about things that could harm you or your device.
" Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-791R v2 may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key. “Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Maintenance > Log > Log Setting means you first click Maintenance in the navigation panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on.
4
P-791R v2 User’s Guide
Page 5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
P-791R v2 User’s Guide
5
Page 6

Safety Warnings

Safety Warnings
1 For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• ONLY qualified service personnel should service or disassemble this device.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged.
6
P-791R v2 User’s Guide
Page 7
This product is recyclable. Dispose of it properly.
Safety Warnings
P-791R v2 User’s Guide
7
Page 8
Safety Warnings
8
P-791R v2 User’s Guide
Page 9

Contents Overview

Contents Overview
Introduction, Wizards and Tutorials ..................................................................................... 31
Getting To Know Your ZyXEL Device ........................................................................................ 33
Introducing the Web Configurator .............................................................................................. 37
Wizard Setup for Internet Access .............................................................................................. 47
Point-to-point Configuration ....................................................................................................... 55
Network Setup ........................................................................................................................59
WAN Setup ................................................................................................................................ 61
LAN Setup ................................................................................................................................. 83
Network Address Translation (NAT) Screens ............................................................................ 93
Security .................................................................................................................................105
Filter ......................................................................................................................................... 107
Advanced Setup ...................................................................................................................109
Static Route .............................................................................................................................. 111
Dynamic DNS Setup .................................................................................................................115
Remote Management Configuration .........................................................................................119
Universal Plug-and-Play (UPnP) ............................................................................................. 129
Maintenance .........................................................................................................................141
System ..................................................................................................................................... 143
Logs ......................................................................................................................................... 149
Tools ........................................................................................................................................ 153
Diagnostic ................................................................................................................................ 159
SMT and Troubleshooting ...................................................................................................161
Introducing the SMT ................................................................................................................ 163
General Setup ......................................................................................................................... 169
WAN Setup .............................................................................................................................. 173
LAN Setup ............................................................................................................................... 179
Internet Access Setup ............................................................................................................. 183
Remote Node Setup ................................................................................................................ 185
Static Route Setup ................................................................................................................... 195
NAT Setup ............................................................................................................................... 199
Filter Configuration .................................................................................................................. 213
SNMP Configuration ................................................................................................................ 227
P-791R v2 User’s Guide
9
Page 10
Contents Overview
System Password .................................................................................................................... 229
System Information & Diagnosis ............................................................................................. 231
Firmware and Configuration File Maintenance ........................................................................ 241
Menus 24.8 to 24.11 ................................................................................................................ 255
IP Routing Policy Setup ........................................................................................................... 261
Schedule Setup ....................................................................................................................... 269
Troubleshooting ....................................................................................................................... 273
Appendices and Index ......................................................................................................... 279
10
P-791R v2 User’s Guide
Page 11

Table of Contents

Table of Contents
About This User's Guide ..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................6
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures .........................................................................................................................21
List of Tables...........................................................................................................................27
Part I: Introduction, Wizards and Tutorials.......................................... 31
Chapter 1
Getting To Know Your ZyXEL Device....................................................................................33
1.1 Overview .............................................................................................................................. 33
1.1.1 High-speed Internet Access ....................................................................................... 33
1.1.2 High-speed Point-to-point Connections ..................................................................... 33
1.2 Ways to Manage the ZyXEL Device .................................................................................... 34
1.3 Good Habits for Managing the ZyXEL Device ..................................................................... 34
1.4 LEDs .................................................................................................................................... 35
Chapter 2
Introducing the Web Configurator ........................................................................................37
2.1 Web Configurator Overview ................................................................................................. 37
2.2 Accessing the Web Configurator ......................................................................................... 37
2.3 Navigating the Web Configurator ......................................................................................... 39
2.4 Status Screen ...................................................................................................................... 42
2.4.1 Status: Packet Statistics ............................................................................................. 44
2.5 Resetting the ZyXEL Device ................................................................................................ 45
2.5.1 Using the Reset Button .............................................................................................. 45
Chapter 3
Wizard Setup for Internet Access..........................................................................................47
3.1 Introduction .......................................................................................................................... 47
3.2 Internet Access Wizard Setup ............................................................................................. 47
P-791R v2 User’s Guide
11
Page 12
Table of Contents
Chapter 4
Point-to-point Configuration.................................................................................................. 55
4.1 Overview .............................................................................................................................. 55
4.2 Point-to-point Connection Procedure .................................................................................. 56
4.2.1 Set up the Server ....................................................................................................... 56
4.2.2 Set up the Client ......................................................................................................... 56
4.2.3 Connect the ZyXEL Devices ...................................................................................... 57
Part II: Network Setup............................................................................ 59
Chapter 5
WAN Setup............................................................................................................................... 61
5.1 WAN Overview ................................................................................................................... 61
5.1.1 Encapsulation ............................................................................................................. 61
5.1.2 Multiplexing ................................................................................................................ 62
5.1.3 VPI and VCI ............................................................................................................... 62
5.1.4 IP Address Assignment .............................................................................................. 62
5.1.5 Nailed-Up Connection (PPP) ..................................................................................... 63
5.1.6 NAT ............................................................................................................................ 63
5.2 Metric ................................................................................................................................... 63
5.3 Traffic Shaping ..................................................................................................................... 64
5.3.1 ATM Traffic Classes ................................................................................................... 65
5.4 Internet Connection ............................................................................................................. 65
5.4.1 Configuring Advanced Internet Connection ............................................................... 68
5.5 Configuring More Connections ............................................................................................ 69
5.5.1 More Connections Edit .............................................................................................. 70
5.5.2 Configuring More Connections Advanced Setup ....................................................... 72
5.6 Traffic Redirect .................................................................................................................... 74
5.7 Dial Backup Interface .......................................................................................................... 75
5.8 CON/AUX Port for Dial Backup ........................................................................................... 75
5.9 Configuring WAN Backup Setup ......................................................................................... 75
5.9.1 Advanced Backup Setup ........................................................................................... 77
5.9.2 Advanced Modem Settings for Dial Backup .............................................................. 80
Chapter 6
LAN Setup................................................................................................................................83
6.1 LAN Overview ..................................................................................................................... 83
6.1.1 LANs, WANs and the ZyXEL Device .......................................................................... 83
6.1.2 DHCP Setup ...............................................................................................................84
6.1.3 DNS Server Address .................................................................................................. 84
6.1.4 DNS Server Address Assignment .............................................................................. 84
12
P-791R v2 User’s Guide
Page 13
Table of Contents
6.2 LAN TCP/IP ......................................................................................................................... 85
6.2.1 IP Address and Subnet Mask ..................................................................................... 85
6.2.2 RIP Setup ................................................................................................................... 86
6.2.3 Multicast ..................................................................................................................... 87
6.3 Configuring LAN IP .............................................................................................................. 87
6.3.1 Configuring Advanced LAN Setup ............................................................................. 88
6.4 DHCP Setup ........................................................................................................................ 89
6.5 LAN Client List ..................................................................................................................... 90
6.6 LAN IP Alias ........................................................................................................................ 91
Chapter 7
Network Address Translation (NAT) Screens.......................................................................93
7.1 NAT Overview ..................................................................................................................... 93
7.1.1 NAT Definitions ..........................................................................................................93
7.1.2 What NAT Does ......................................................................................................... 94
7.1.3 How NAT Works ......................................................................................................... 94
7.1.4 NAT Application ..........................................................................................................94
7.1.5 NAT Mapping Types ................................................................................................... 95
7.2 SUA (Single User Account) Versus NAT ............................................................................. 96
7.2.1 SIP ALG ..................................................................................................................... 96
7.3 NAT General Setup .............................................................................................................. 97
7.4 Port Forwarding .................................................................................................................. 97
7.4.1 Default Server IP Address .......................................................................................... 98
7.4.2 Port Forwarding: Services and Port Numbers ............................................................ 98
7.4.3 Configuring Servers Behind Port Forwarding (Example) ........................................... 98
7.5 Configuring Port Forwarding ................................................................................................99
7.5.1 Port Forwarding Rule Edit ....................................................................................... 100
7.6 Address Mapping .............................................................................................................. 101
7.6.1 Address Mapping Rule Edit ..................................................................................... 102
Part III: Security.................................................................................... 105
Chapter 8
Filter .......................................................................................................................................107
8.1 Configuring Filter ............................................................................................................... 107
Part IV: Advanced Setup ..................................................................... 109
Chapter 9
Static Route ........................................................................................................................... 111
P-791R v2 User’s Guide
13
Page 14
Table of Contents
9.1 Static Route ........................................................................................................................ 111
9.2 Configuring Static Route ..................................................................................................... 111
9.2.1 Static Route Edit ......................................................................................................112
Chapter 10
Dynamic DNS Setup ............................................................................................................. 115
10.1 Dynamic DNS Overview ..................................................................................................115
10.1.1 DYNDNS Wildcard ..................................................................................................115
10.2 Configuring Dynamic DNS ................................................................................................115
Chapter 11
Remote Management Configuration ................................................................................... 119
11.1 Remote Management Overview ......................................................................................119
11.1.1 Remote Management Limitations ............................................................................119
11.1.2 Remote Management and NAT ...............................................................................119
11.1.3 System Timeout ...................................................................................................... 120
11.2 WWW ............................................................................................................................... 120
11.3 Telnet ............................................................................................................................... 120
11.4 Configuring Telnet ............................................................................................................ 121
11.5 Configuring FTP ............................................................................................................... 122
11.6 SNMP ............................................................................................................................... 122
11.6.1 Supported MIBs ...................................................................................................... 124
11.6.2 SNMP Traps ........................................................................................................... 124
11.6.3 Configuring SNMP .................................................................................................. 124
11.7 Configuring DNS .............................................................................................................. 125
11.8 Configuring ICMP ............................................................................................................. 126
Chapter 12
Universal Plug-and-Play (UPnP).......................................................................................... 129
12.1 Introducing Universal Plug and Play ............................................................................... 129
12.1.1 How do I know if I'm using UPnP? ......................................................................... 129
12.1.2 NAT Traversal ........................................................................................................ 129
12.1.3 Cautions with UPnP ............................................................................................... 129
12.2 UPnP and ZyXEL ............................................................................................................130
12.2.1 Configuring UPnP .................................................................................................. 130
12.3 Installing UPnP in Windows Example .............................................................................. 131
12.4 Using UPnP in Windows XP Example ............................................................................. 134
Part V: Maintenance............................................................................. 141
Chapter 13
System ...................................................................................................................................143
14
P-791R v2 User’s Guide
Page 15
Table of Contents
13.1 General Setup ................................................................................................................. 143
13.1.1 General Setup and System Name ......................................................................... 143
13.1.2 General Setup ....................................................................................................... 143
13.2 Time Setting .................................................................................................................... 145
Chapter 14
Logs .......................................................................................................................................149
14.1 Logs Overview ................................................................................................................ 149
14.1.1 Alerts and Logs ...................................................................................................... 149
14.2 Viewing the Logs ............................................................................................................. 149
14.3 Configuring Log Settings ................................................................................................ 150
Chapter 15
Tools.......................................................................................................................................153
15.1 Firmware Upgrade .......................................................................................................... 153
15.2 Configuration .................................................................................................................. 155
15.3 Restart ............................................................................................................................. 157
Chapter 16
Diagnostic..............................................................................................................................159
16.1 General Diagnostic .......................................................................................................... 159
16.2 DSL Line Diagnostic ...................................................................................................... 159
Part VI: SMT and Troubleshooting ..................................................... 161
Chapter 17
Introducing the SMT .............................................................................................................163
17.1 Accessing the SMT Via the Console Port ........................................................................ 163
17.2 Accessing the SMT Via Telnet ......................................................................................... 163
17.3 SMT Menu Items ............................................................................................................. 164
17.4 Navigating the SMT Interface .......................................................................................... 166
Chapter 18
General Setup........................................................................................................................169
18.1 Configuring General Setup .............................................................................................. 169
18.1.1 Configuring Dynamic DNS ..................................................................................... 170
Chapter 19
WAN Setup............................................................................................................................. 173
19.1 WAN Setup ...................................................................................................................... 173
19.2 Configuring Traffic Redirect ............................................................................................. 175
P-791R v2 User’s Guide
15
Page 16
Table of Contents
19.3 Dial Backup Interface ...................................................................................................... 175
19.4 Configuring Dial Backup in Menu 2 ................................................................................. 175
19.5 Advanced Dial Backup Setup .......................................................................................... 176
Chapter 20
LAN Setup..............................................................................................................................179
20.1 Accessing the LAN Menus .............................................................................................. 179
20.2 LAN Port Filter Setup ....................................................................................................... 179
20.3 TCP/IP and DHCP Setup Menu ...................................................................................... 180
20.4 LAN IP Alias .................................................................................................................... 181
Chapter 21
Internet Access Setup ..........................................................................................................183
21.1 Internet Access Setup .....................................................................................................183
Chapter 22
Remote Node Setup..............................................................................................................185
22.1 Introduction to Remote Node Setup ................................................................................ 185
22.2 Remote Node Setup ........................................................................................................ 185
22.3 Remote Node Profile .......................................................................................................185
22.4 Remote Node Network Layer Options ............................................................................. 189
22.5 Remote Node Filter ......................................................................................................... 191
22.6 Remote Node ATM Layer Options ................................................................................... 192
22.7 Advance Setup Options ................................................................................................... 193
Chapter 23
Static Route Setup................................................................................................................ 195
23.1 IP Static Route Setup ...................................................................................................... 195
23.2 Bridge Static Route Setup ............................................................................................... 196
Chapter 24
NAT Setup..............................................................................................................................199
24.1 Using NAT ........................................................................................................................ 199
24.1.1 SUA (Single User Account) Versus NAT ................................................................ 199
24.1.2 Applying NAT ......................................................................................................... 199
24.2 NAT Setup ....................................................................................................................... 201
24.2.1 Address Mapping Sets ........................................................................................... 201
24.3 Configuring a Server behind NAT .................................................................................... 204
24.4 General NAT Examples ................................................................................................... 206
24.4.1 Internet Access Only .............................................................................................. 206
24.4.2 Example 2: Internet Access with a Default Server ................................................. 207
24.4.3 Example 3: Multiple Public IP Addresses With Inside Servers .............................. 208
24.4.4 Example 4: NAT Unfriendly Application Programs ..................................................211
16
P-791R v2 User’s Guide
Page 17
Table of Contents
Chapter 25
Filter Configuration...............................................................................................................213
25.1 Introduction to Filters ....................................................................................................... 213
25.1.1 The Filter Structure of the ZyXEL Device ............................................................... 214
25.2 Configuring a Filter Set .................................................................................................... 215
25.2.1 Configuring a Filter Rule ........................................................................................ 217
25.2.2 Configuring a TCP/IP Filter Rule ............................................................................ 217
25.2.3 Configuring a Generic Filter Rule ........................................................................... 220
25.3 Example Filter .................................................................................................................. 222
25.4 Filter Types and NAT ....................................................................................................... 224
25.5 Applying a Filter ............................................................................................................... 224
25.5.1 Applying LAN Filters ............................................................................................... 224
25.5.2 Applying Remote Node Filters ............................................................................... 225
Chapter 26
SNMP Configuration.............................................................................................................227
26.1 SNMP Configuration ........................................................................................................227
Chapter 27
System Password .................................................................................................................229
Chapter 28
System Information & Diagnosis.........................................................................................231
28.1 Introduction to System Status .......................................................................................... 231
28.2 System Status .................................................................................................................. 231
28.3 System Information and Console Port Speed .................................................................. 233
28.3.1 System Information ................................................................................................ 233
28.3.2 Console Port Speed ............................................................................................... 234
28.4 Log and Trace .................................................................................................................. 235
28.4.1 Viewing Error Log ................................................................................................... 235
28.4.2 Syslog Logging ....................................................................................................... 236
28.5 Diagnostic ........................................................................................................................ 238
Chapter 29
Firmware and Configuration File Maintenance..................................................................241
29.1 Introduction ...................................................................................................................... 241
29.2 Filename Conventions ..................................................................................................... 241
29.3 Backup Configuration ......................................................................................................242
29.3.1 Backup Configuration ............................................................................................. 242
29.3.2 Using the FTP Command from the Command Line ............................................... 243
29.3.3 Example of FTP Commands from the Command Line .......................................... 243
29.3.4 GUI-based FTP Clients .......................................................................................... 244
29.3.5 File Maintenance Over WAN .................................................................................. 244
P-791R v2 User’s Guide
17
Page 18
Table of Contents
29.3.6 Backup Configuration Using TFTP ......................................................................... 244
29.3.7 TFTP Command Example ...................................................................................... 245
29.3.8 GUI-based TFTP Clients ........................................................................................ 245
29.3.9 Backup Via Console Port ....................................................................................... 245
29.4 Restore Configuration ...................................................................................................... 246
29.4.1 Restore Using FTP ................................................................................................. 247
29.4.2 Restore Using FTP Session Example .................................................................... 247
29.4.3 Restore Via Console Port ....................................................................................... 248
29.5 Uploading Firmware and Configuration Files .................................................................. 248
29.5.1 Firmware File Upload ............................................................................................. 249
29.5.2 Configuration File Upload ....................................................................................... 249
29.5.3 FTP File Upload Command from the DOS Prompt Example ................................. 250
29.5.4 FTP Session Example of Firmware File Upload .................................................... 251
29.5.5 TFTP File Upload ................................................................................................... 251
29.5.6 TFTP Upload Command Example ......................................................................... 252
29.5.7 Uploading Via Console Port ................................................................................... 252
29.5.8 Uploading Firmware File Via Console Port ............................................................ 252
29.5.9 Example Xmodem Firmware Upload Using HyperTerminal ................................... 252
29.5.10 Uploading Configuration File Via Console Port .................................................... 253
29.5.11 Example Xmodem Configuration Upload Using HyperTerminal ........................... 253
Chapter 30
Menus 24.8 to 24.11 .............................................................................................................. 255
30.1 Command Interpreter Mode ............................................................................................ 255
30.1.1 Command Syntax ................................................................................................... 255
30.1.2 Command Usage ................................................................................................... 256
30.2 Call Control Support ........................................................................................................ 256
30.2.1 Budget Management .............................................................................................. 256
30.3 Time and Date Setting .....................................................................................................257
30.4 Remote Management ...................................................................................................... 259
30.4.1 Remote Management Limitations .......................................................................... 260
Chapter 31
IP Routing Policy Setup .......................................................................................................261
31.1 Policy Route ................................................................................................................... 261
31.2 Benefits ............................................................................................................................ 261
31.3 Routing Policy .................................................................................................................. 261
31.4 IP Routing Policy Setup ...................................................................................................262
31.5 IP Routing Policy Setup ...................................................................................................262
31.6 IP Routing Policy ............................................................................................................. 264
31.7 IP Policy Routing Example .............................................................................................. 265
Chapter 32
Schedule Setup..................................................................................................................... 269
18
P-791R v2 User’s Guide
Page 19
Table of Contents
32.1 Schedule Set Overview ................................................................................................... 269
32.2 Schedule Setup ............................................................................................................... 269
32.3 Schedule Set Setup ......................................................................................................... 270
Chapter 33
Troubleshooting....................................................................................................................273
33.1 Power, Hardware Connections, and LEDs ...................................................................... 273
33.2 ZyXEL Device Access and Login .................................................................................... 274
33.3 Internet Access ................................................................................................................ 276
33.4 Reset the ZyXEL Device to Its Factory Defaults .............................................................. 277
Part VII: Appendices and Index .......................................................... 279
Appendix A Product Specifications.......................................................................................281
Appendix B Setting up Your Computer’s IP Address............................................................ 287
Appendix C Pop-up Windows, JavaScripts and Java Permissions ...................................... 303
Appendix D IP Addresses and Subnetting ...........................................................................309
Appendix E IP Address Assignment Conflicts ...................................................................... 317
Appendix F Common Services .............................................................................................321
Appendix G Command Interpreter .......................................................................................325
Appendix H Log Descriptions ...............................................................................................331
Appendix I NetBIOS Filter Commands .................................................................................343
Appendix J Legal Information ...............................................................................................345
Appendix K Customer Support .............................................................................................349
Index.......................................................................................................................................353
P-791R v2 User’s Guide
19
Page 20
Table of Contents
20
P-791R v2 User’s Guide
Page 21

List of Figures

List of Figures
Figure 1 High-speed Internet Access with Your ZyXEL Device .............................................................. 33
Figure 2 Point-to-point Connections with Your ZyXEL Device ................................................................ 34
Figure 3 LEDs ......................................................................................................................................... 35
Figure 4 Login Screen ............................................................................................................................ 38
Figure 5 Change Password at Login ...................................................................................................... 38
Figure 6 Select a Mode .......................................................................................................................... 39
Figure 7 Web Configurator: Main Screen .............................................................................................. 40
Figure 8 Status ....................................................................................................................................... 42
Figure 9 Status > Packet Statistics ......................................................................................................... 44
Figure 10 Select a Mode ........................................................................................................................ 47
Figure 11 Wizard: Welcome .................................................................................................................... 48
Figure 12 Internet Access Wizard Setup: ISP Parameters ..................................................................... 48
Figure 13 Internet Connection with PPPoE ............................................................................................ 49
Figure 14 Internet Connection with RFC 1483 ....................................................................................... 50
Figure 15 Internet Connection with ENET ENCAP ................................................................................. 50
Figure 16 Internet Connection with PPPoA ............................................................................................ 51
Figure 17 Connection Test Failed-1 ........................................................................................................ 52
Figure 18 Connection Test Failed-2. ....................................................................................................... 52
Figure 19 Internet Setup Wizard Finished .............................................................................................. 52
Figure 20 Example: Point-to-point Connections ..................................................................................... 55
Figure 21 WAN > Internet Connection > Service Type ........................................................................... 56
Figure 22 Example of Traffic Shaping .................................................................................................... 64
Figure 23 WAN > Internet Connection .................................................................................................... 66
Figure 24 WAN > Internet Connection > Advanced Setup ..................................................................... 68
Figure 25 WAN > More Connections ...................................................................................................... 70
Figure 26 WAN > More Connections > Edit ............................................................................................ 71
Figure 27 WAN > More Connections > Advanced Setup ....................................................................... 73
Figure 28 Traffic Redirect Example ........................................................................................................ 74
Figure 29 Traffic Redirect LAN Setup ..................................................................................................... 74
Figure 30 WAN > WAN Backup Setup ................................................................................................... 75
Figure 31 WAN > WAN Backup Setup > Advanced Setup ..................................................................... 78
Figure 32 WAN > WAN Backup Setup > Advanced Setup > Edit ........................................................... 80
Figure 33 LAN and WAN IP Addresses .................................................................................................. 83
Figure 34 LAN > IP ................................................................................................................................. 87
Figure 35 LAN > IP > Advanced Setup .................................................................................................. 88
Figure 36 LAN > DHCP Setup ................................................................................................................ 89
Figure 37 LAN > Client List ..................................................................................................................... 90
Figure 38 Physical Network & Partitioned Logical Networks .................................................................. 91
P-791R v2 User’s Guide
21
Page 22
List of Figures
Figure 39 LAN > IP Alias ........................................................................................................................ 92
Figure 40 How NAT Works ..................................................................................................................... 94
Figure 41 NAT Application With IP Alias ................................................................................................ 95
Figure 42 NAT > General ........................................................................................................................ 97
Figure 43 Multiple Servers Behind NAT Example ..................................................................................99
Figure 44 NAT > Port Forwarding ........................................................................................................... 99
Figure 45 NAT > Port Forwarding > Edit .............................................................................................. 100
Figure 46 NAT > Address Mapping ...................................................................................................... 102
Figure 47 NAT > Address Mapping > Edit ............................................................................................ 103
Figure 48 Security > Filter .................................................................................................................... 107
Figure 49 Example of Static Routing Topology ......................................................................................111
Figure 50 Static Route > Static Route ....................................................................................................112
Figure 51 Static Route > Static Route > Edit .........................................................................................113
Figure 52 Dynamic DNS > Dynamic DNS .............................................................................................116
Figure 53 Remote MGMT > WWW ....................................................................................................... 120
Figure 54 Telnet Configuration on a TCP/IP Network ........................................................................... 121
Figure 55 Remote MGMT > Telnet ....................................................................................................... 121
Figure 56 Remote MGMT > FTP .......................................................................................................... 122
Figure 57 SNMP Management Model .................................................................................................. 123
Figure 58 Remote MGMT > SNMP ...................................................................................................... 125
Figure 59 Remote MGMT > DNS ......................................................................................................... 126
Figure 60 Remote MGMT > ICMP ........................................................................................................ 127
Figure 61 UPnP > General ................................................................................................................... 130
Figure 62 Add/Remove Programs: Windows Setup: Communication .................................................. 131
Figure 63 Add/Remove Programs: Windows Setup: Communication: Components ............................ 132
Figure 64 Network Connections ........................................................................................................... 132
Figure 65 Windows Optional Networking Components Wizard ............................................................ 133
Figure 66 Networking Services ............................................................................................................. 133
Figure 67 Network Connections ........................................................................................................... 134
Figure 68 Internet Connection Properties ............................................................................................ 135
Figure 69 Internet Connection Properties: Advanced Settings ............................................................. 135
Figure 70 Internet Connection Properties: Advanced Settings: Add .................................................... 136
Figure 71 System Tray Icon .................................................................................................................. 136
Figure 72 Internet Connection Status ................................................................................................... 137
Figure 73 Network Connections ........................................................................................................... 138
Figure 74 Network Connections: My Network Places .......................................................................... 139
Figure 75 Network Connections: My Network Places: Properties: Example ........................................ 139
Figure 76 System > General ................................................................................................................. 144
Figure 77 System > Time Setting ......................................................................................................... 145
Figure 78 Logs > View Log ................................................................................................................... 150
Figure 79 Logs > Log Settings ............................................................................................................. 151
Figure 80 Tools > Firmware .................................................................................................................. 153
Figure 81 Firmware Upload In Progress ............................................................................................... 154
22
P-791R v2 User’s Guide
Page 23
List of Figures
Figure 82 Network Temporarily Disconnected ...................................................................................... 154
Figure 83 Error Message ...................................................................................................................... 155
Figure 84 Tools > Configuration ............................................................................................................ 155
Figure 85 Configuration Upload Successful ......................................................................................... 156
Figure 86 Network Temporarily Disconnected ...................................................................................... 156
Figure 87 Configuration Upload Error ................................................................................................... 157
Figure 88 Tools > Restart ..................................................................................................................... 157
Figure 89 Diagnostic > General ............................................................................................................ 159
Figure 90 Diagnostic > DSL Line .......................................................................................................... 160
Figure 91 Login Screen ........................................................................................................................ 163
Figure 92 SMT Main Menu ................................................................................................................... 164
Figure 93 Menu 1: General Setup ........................................................................................................ 169
Figure 94 Menu 1.1: Configure Dynamic DNS ..................................................................................... 170
Figure 95 Menu 2: WAN Setup ............................................................................................................. 173
Figure 96 Menu 2.1: Traffic Redirect Setup .......................................................................................... 175
Figure 97 Menu 2.2: Dial Backup Setup .............................................................................................. 176
Figure 98 Menu 2.2.1: Advanced Dial Backup Setup ........................................................................... 177
Figure 99 Menu 3: LAN Setup .............................................................................................................. 179
Figure 100 Menu 3.1: LAN Port Filter Setup ........................................................................................ 179
Figure 101 Menu 3.2: TCP/IP and DHCP Ethernet Setup .................................................................... 180
Figure 102 Menu 3.2.1: IP Alias Setup ................................................................................................. 182
Figure 103 Menu 4: Internet Access Setup .......................................................................................... 183
Figure 104 Menu 11: Remote Node Setup ........................................................................................... 185
Figure 105 Menu 11.1: Remote Node Profile (nodes 1-7) .................................................................... 186
Figure 106 Menu 11.1: Remote Node Profile (node 8) ......................................................................... 188
Figure 107 Menu 11.3: Remote Node Network Layer Options ............................................................. 189
Figure 108 Menu 11.5: Remote Node Filter ......................................................................................... 191
Figure 109 Menu 11.6: Remote Node ATM Layer Options ................................................................... 192
Figure 110 Menu 11.8: Advance Setup Options ................................................................................... 193
Figure 111 Menu 12.1: IP Static Route Setup ...................................................................................... 195
Figure 112 Menu 12.1.1: Edit IP Static Route ....................................................................................... 196
Figure 113 Menu 12.3: Bridge Static Route Setup ............................................................................... 197
Figure 114 Menu 12.3.1: Edit Bridge Static Route ................................................................................ 197
Figure 115 Menu 4: Applying NAT for Internet Access ......................................................................... 200
Figure 116 Menu 11.3: Applying NAT to the Remote Node .................................................................. 200
Figure 117 Menu 15: NAT Setup .......................................................................................................... 201
Figure 118 Menu 15.1: Address Mapping Sets .....................................................................................202
Figure 119 Menu 15.1.1: Address Mapping Rules ............................................................................... 202
Figure 120 Menu 15.1.1.1: Address Mapping Rule .............................................................................. 204
Figure 121 Menu 15.2: NAT Server Sets .............................................................................................. 205
Figure 122 Menu 15.2: NAT Server Setup ........................................................................................... 205
Figure 123 NAT Example 1 .................................................................................................................. 206
Figure 124 Menu 4: Internet Access & NAT Example .......................................................................... 207
P-791R v2 User’s Guide
23
Page 24
List of Figures
Figure 125 NAT Example 2 .................................................................................................................. 207
Figure 126 Menu 15.2: Specifying an Inside Server ............................................................................. 208
Figure 127 NAT Example 3 .................................................................................................................. 208
Figure 128 Example 3: Menu 11.3 ........................................................................................................ 209
Figure 129 Example 3: Menu 15.1.1.1 ................................................................................................. 209
Figure 130 Example 3: Final Menu 15.1.1 ............................................................................................ 210
Figure 131 Example 3: Menu 15.2 ....................................................................................................... 210
Figure 132 NAT Example 4 ...................................................................................................................211
Figure 133 Example 4: Menu 15.1.1.1: Address Mapping Rule ............................................................211
Figure 134 Example 4: Menu 15.1.1: Address Mapping Rules ............................................................ 212
Figure 135 Outgoing Packet Filtering Process ..................................................................................... 213
Figure 136 Filter Rule Process ............................................................................................................. 215
Figure 137 Menu 21: Filter Set Configuration ....................................................................................... 216
Figure 138 Menu 21.1: Filter Rules Summary ...................................................................................... 216
Figure 139 Menu 21.1.1: TCP/IP Filter Rule ........................................................................................ 218
Figure 140 Executing an IP Filter ......................................................................................................... 220
Figure 141 Menu 21.1.1: Generic Filter Rule ....................................................................................... 221
Figure 142 Telnet Filter Example .......................................................................................................... 222
Figure 143 Example Filter: Menu 21.1.1 .............................................................................................. 223
Figure 144 Example Filter Rules Summary: Menu 21.1. ...................................................................... 223
Figure 145 Protocol and Device Filter Sets .......................................................................................... 224
Figure 146 Filtering LAN Traffic ............................................................................................................ 225
Figure 147 Filtering Remote Node Traffic ............................................................................................. 225
Figure 148 Menu 22: SNMP Configuration ........................................................................................... 227
Figure 149 Menu 23: System Password ............................................................................................... 229
Figure 150 Menu 24: System Maintenance .......................................................................................... 231
Figure 151 Menu 24.1: System Maintenance - Status .......................................................................... 232
Figure 152 Menu 24.2: System Information and Console Port Speed ................................................. 233
Figure 153 Menu 24.2.1: System Maintenance - Information ............................................................... 234
Figure 154 Menu 24.2.2: System Maintenance: Change Console Port Speed .................................... 234
Figure 155 Menu 24.3: System Maintenance - Log and Trace ............................................................. 235
Figure 156 Examples of Error and Information Messages ................................................................... 235
Figure 157 Menu 24.3.2: System Maintenance - UNIX Syslog ............................................................ 236
Figure 158 Menu 24.4: System Maintenance - Diagnostic ................................................................... 238
Figure 159 Menu 24.5: Backup Configuration ...................................................................................... 243
Figure 160 FTP Session Example ........................................................................................................ 243
Figure 161 System Maintenance: Backup Configuration ..................................................................... 245
Figure 162 System Maintenance: Starting Xmodem Download Screen ............................................... 246
Figure 163 Backup Configuration Example .......................................................................................... 246
Figure 164 Successful Backup Confirmation Screen ........................................................................... 246
Figure 165 Menu 24.6: Restore Configuration ..................................................................................... 247
Figure 166 Restore Using FTP Session Example ................................................................................ 247
Figure 167 System Maintenance: Restore Configuration ..................................................................... 248
24
P-791R v2 User’s Guide
Page 25
List of Figures
Figure 168 System Maintenance: Starting Xmodem Download Screen ............................................... 248
Figure 169 Restore Configuration Example ......................................................................................... 248
Figure 170 Successful Restoration Confirmation Screen ..................................................................... 248
Figure 171 Menu 24.7.1: System Maintenance - Upload System Firmware ........................................ 249
Figure 172 Menu 24.7.2: System Maintenance - Upload System Configuration File ........................... 250
Figure 173 FTP Session Example of Firmware File Upload ................................................................. 251
Figure 174 Menu 24.7.1 As Seen Using the Console Port ................................................................... 252
Figure 175 Example Xmodem Upload .................................................................................................. 253
Figure 176 Menu 24.7.2 As Seen Using the Console Port .................................................................. 253
Figure 177 Example Xmodem Upload .................................................................................................. 254
Figure 178 Command Mode in Menu 24 .............................................................................................. 255
Figure 179 Valid Commands ................................................................................................................ 256
Figure 180 Menu 24.9: System Maintenance - Call Control ................................................................. 256
Figure 181 Menu 24.9.1 - Budget Management ................................................................................... 257
Figure 182 Menu 24: System Maintenance .......................................................................................... 258
Figure 183 Menu 24.10: System Maintenance - Time and Date Setting .............................................. 258
Figure 184 Menu 24.11 – Remote Management Control ..................................................................... 260
Figure 185 Menu 25: IP Routing Policy Setup ...................................................................................... 262
Figure 186 Menu 25.1: IP Routing Policy Setup ................................................................................... 263
Figure 187 Menu 25.1.1: IP Routing Policy .......................................................................................... 264
Figure 188 IP Routing Policy Example ................................................................................................. 266
Figure 189 IP Routing Policy Example 1 .............................................................................................. 266
Figure 190 IP Routing Policy Example 2 .............................................................................................. 267
Figure 191 Menu 26: Schedule Setup .................................................................................................. 269
Figure 192 Menu 26.1: Schedule Set Setup ......................................................................................... 270
Figure 193 Wall-mounting Example ...................................................................................................... 284
Figure 194 Masonry Plug and M4 Tap Screw .......................................................................................285
Figure 195 WIndows 95/98/Me: Network: Configuration ...................................................................... 288
Figure 196 Windows 95/98/Me: TCP/IP Properties: IP Address .......................................................... 289
Figure 197 Windows 95/98/Me: TCP/IP Properties: DNS Configuration .............................................. 290
Figure 198 Windows XP: Start Menu .................................................................................................... 291
Figure 199 Windows XP: Control Panel ............................................................................................... 291
Figure 200 Windows XP: Control Panel: Network Connections: Properties ......................................... 292
Figure 201 Windows XP: Local Area Connection Properties ............................................................... 292
Figure 202 Windows XP: Internet Protocol (TCP/IP) Properties .......................................................... 293
Figure 203 Windows XP: Advanced TCP/IP Properties ....................................................................... 294
Figure 204 Windows XP: Internet Protocol (TCP/IP) Properties .......................................................... 295
Figure 205 Macintosh OS 8/9: Apple Menu .......................................................................................... 296
Figure 206 Macintosh OS 8/9: TCP/IP ................................................................................................. 296
Figure 207 Macintosh OS X: Apple Menu ............................................................................................ 297
Figure 208 Macintosh OS X: Network .................................................................................................. 298
Figure 209 Red Hat 9.0: KDE: Network Configuration: Devices ......................................................... 299
Figure 210 Red Hat 9.0: KDE: Ethernet Device: General .................................................................. 299
P-791R v2 User’s Guide
25
Page 26
List of Figures
Figure 211 Red Hat 9.0: KDE: Network Configuration: DNS ............................................................... 300
Figure 212 Red Hat 9.0: KDE: Network Configuration: Activate ........................................................ 300
Figure 213 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 ............................................... 301
Figure 214 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 ................................................... 301
Figure 215 Red Hat 9.0: DNS Settings in resolv.conf ........................................................................ 301
Figure 216 Red Hat 9.0: Restart Ethernet Card ................................................................................. 301
Figure 217 Red Hat 9.0: Checking TCP/IP Properties ....................................................................... 302
Figure 218 Pop-up Blocker ................................................................................................................... 303
Figure 219 Internet Options: Privacy .................................................................................................... 304
Figure 220 Internet Options: Privacy .................................................................................................... 305
Figure 221 Pop-up Blocker Settings ..................................................................................................... 305
Figure 222 Internet Options: Security ................................................................................................... 306
Figure 223 Security Settings - Java Scripting ....................................................................................... 307
Figure 224 Security Settings - Java ...................................................................................................... 307
Figure 225 Java (Sun) .......................................................................................................................... 308
Figure 226 Network Number and Host ID ............................................................................................ 310
Figure 227 Subnetting Example: Before Subnetting ............................................................................ 312
Figure 228 Subnetting Example: After Subnetting ............................................................................... 313
Figure 229 IP Address Conflicts: Case A ............................................................................................. 317
Figure 230 IP Address Conflicts: Case B ............................................................................................. 318
Figure 231 IP Address Conflicts: Case C ............................................................................................. 318
Figure 232 IP Address Conflicts: Case D ............................................................................................. 319
Figure 233 Displaying Log Categories Example .................................................................................. 326
Figure 234 Displaying Log Parameters Example ................................................................................. 326
Figure 235 Routing Command Example .............................................................................................. 327
Figure 236 Backup Gateway ................................................................................................................ 329
Figure 237 Displaying Log Categories Example .................................................................................. 340
Figure 238 Displaying Log Parameters Example ................................................................................. 341
26
P-791R v2 User’s Guide
Page 27

List of Tables

List of Tables
Table 1 LEDs ......................................................................................................................................... 35
Table 2 Web Configurator Screens Summary ....................................................................................... 40
Table 3 Status ........................................................................................................................................ 42
Table 4 Status > Packet Statistics .......................................................................................................... 44
Table 5 Internet Access Wizard Setup: ISP Parameters ....................................................................... 48
Table 6 Internet Connection with PPPoE ............................................................................................... 49
Table 7 Internet Connection with RFC 1483 .......................................................................................... 50
Table 8 Internet Connection with ENET ENCAP ...................................................................................50
Table 9 Internet Connection with PPPoA ............................................................................................... 51
Table 10 WAN > Internet Connection .................................................................................................... 66
Table 11 WAN > Internet Connection > Advanced Setup ...................................................................... 68
Table 12 WAN > More Connections ...................................................................................................... 70
Table 13 WAN > More Connections > Edit ............................................................................................ 71
Table 14 WAN > More Connections > Advanced Setup ........................................................................ 73
Table 15 WAN > WAN Backup Setup .................................................................................................... 76
Table 16 WAN > WAN Backup Setup > Advanced Setup ..................................................................... 78
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit ........................................................... 80
Table 18 LAN > IP ................................................................................................................................. 87
Table 19 LAN > IP > Advanced Setup ................................................................................................... 88
Table 20 LAN > DHCP Setup ................................................................................................................ 89
Table 21 LAN > Client List ..................................................................................................................... 90
Table 22 LAN > IP Alias ......................................................................................................................... 92
Table 23 NAT Definitions ....................................................................................................................... 93
Table 24 NAT Mapping Types ................................................................................................................ 96
Table 25 NAT General ........................................................................................................................... 97
Table 26 NAT > Port Forwarding ......................................................................................................... 100
Table 27 NAT > Port Forwarding > Edit ............................................................................................... 101
Table 28 NAT > Address Mapping ....................................................................................................... 102
Table 29 NAT > Address Mapping > Edit ............................................................................................. 103
Table 30 Internet Security .................................................................................................................... 107
Table 31 Static Route > Static Route ....................................................................................................112
Table 32 Static Route > Static Route > Edit ..........................................................................................113
Table 33 Dynamic DNS > Dynamic DNS ..............................................................................................116
Table 34 Remote MGMT > WWW ....................................................................................................... 120
Table 35 Remote MGMT > Telnet ........................................................................................................ 121
Table 36 Remote MGMT > FTP ........................................................................................................... 122
Table 37 SNMPv1 Traps ...................................................................................................................... 124
Table 38 SNMPv2 Traps ...................................................................................................................... 124
P-791R v2 User’s Guide
27
Page 28
List of Tables
Table 39 Remote MGMT > SNMP ....................................................................................................... 125
Table 40 Remote MGMT > DNS .......................................................................................................... 126
Table 41 Remote MGMT > ICMP ........................................................................................................ 127
Table 42 UPnP > General .................................................................................................................... 130
Table 43 System > General ................................................................................................................. 144
Table 44 System > Time Setting .......................................................................................................... 145
Table 45 Logs > View Log ................................................................................................................... 150
Table 46 Logs > Log Settings .............................................................................................................. 151
Table 47 Tools > Firmware ................................................................................................................... 153
Table 48 Tools > Configuration ............................................................................................................ 155
Table 49 Diagnostic > General ............................................................................................................ 159
Table 50 Diagnostic > DSL Line .......................................................................................................... 160
Table 51 Main Menu Summary ............................................................................................................ 164
Table 52 SMT Menus Overview ........................................................................................................... 165
Table 53 Main Menu Commands ......................................................................................................... 166
Table 54 Menu 1: General Setup ......................................................................................................... 169
Table 55 Menu 1.1: Configure Dynamic DNS ......................................................................................171
Table 56 Menu 2: WAN Setup ............................................................................................................. 173
Table 57 Menu 2.1: Traffic Redirect Setup .......................................................................................... 175
Table 58 Menu 2.2: Dial Backup Setup ............................................................................................... 176
Table 59 Menu 2.2.1: Advanced Dial Backup Setup ........................................................................... 177
Table 60 Menu 3.2: TCP/IP and DHCP Ethernet Setup ...................................................................... 180
Table 61 Menu 3.2.1: IP Alias Setup ................................................................................................... 182
Table 62 Menu 4: Internet Access Setup ............................................................................................. 183
Table 63 Menu 11.1: Remote Node Profile (nodes 1-7) ...................................................................... 186
Table 64 Menu 11.1: Remote Node Profile (node 8) ........................................................................... 188
Table 65 Menu 11.3: Remote Node Network Layer Options ............................................................... 190
Table 66 Menu 11.5: Remote Node Filter ............................................................................................ 192
Table 67 Menu 11.6: Remote Node ATM Layer Options ..................................................................... 192
Table 68 Menu 11.8: Advance Setup Options .....................................................................................193
Table 69 Menu 12.1.1: Edit IP Static Route ......................................................................................... 196
Table 70 Menu 12.3.1: Edit Bridge Static Route .................................................................................. 197
Table 71 Applying NAT in Menus 4 & 11.3 ........................................................................................... 201
Table 72 Menu 15.1.1: Address Mapping Rules .................................................................................. 203
Table 73 Menu 15.1.1.1: Address Mapping Rule ................................................................................. 204
Table 74 Menu 15.2: NAT Server Setup .............................................................................................. 206
Table 75 Abbreviations Used in the Filter Rules Summary Menu ....................................................... 216
Table 76 Rule Abbreviations Used ...................................................................................................... 217
Table 77 Menu 21.1.1: TCP/IP Filter Rule ........................................................................................... 218
Table 78 Menu 21.1.1: Generic Filter Rule .......................................................................................... 221
Table 79 Menu 22: SNMP Configuration ............................................................................................. 227
Table 80 Menu 23: System Password ................................................................................................. 229
Table 81 Menu 24.1: System Maintenance - Status ............................................................................ 232
28
P-791R v2 User’s Guide
Page 29
List of Tables
Table 82 Menu 24.2.1: System Maintenance - Information ................................................................. 234
Table 83 Menu 24.3.2: System Maintenance - UNIX Syslog ............................................................... 236
Table 84 Menu 24.4: System Maintenance - Diagnostic ..................................................................... 239
Table 85 Filename Conventions .......................................................................................................... 242
Table 86 General Commands for GUI-based FTP Clients .................................................................. 244
Table 87 General Commands for GUI-based TFTP Clients ................................................................ 245
Table 88 Menu 24.9.1 - Budget Management ..................................................................................... 257
Table 89 Menu 24.10: System Maintenance - Time and Date Setting ................................................. 258
Table 90 Menu 24.11 – Remote Management Control ........................................................................ 260
Table 91 Menu 25.1: IP Routing Policy Setup ..................................................................................... 263
Table 92 Menu 25: IP Routing Policy Setup, Abbreviations ................................................................ 263
Table 93 Menu 25.1.1: IP Routing Policy ............................................................................................. 264
Table 94 Menu 26: Schedule Setup ..................................................................................................... 270
Table 95 Menu 26.1: Schedule Set Setup ........................................................................................... 271
Table 96 Hardware Specifications ....................................................................................................... 281
Table 97 Firmware ............................................................................................................................... 281
Table 98 Firmware Features ................................................................................................................ 282
Table 99 Standards Supported ............................................................................................................ 283
Table 100 IP Address Network Number and Host ID Example ........................................................... 310
Table 101 Subnet Masks ......................................................................................................................311
Table 102 Maximum Host Numbers .....................................................................................................311
Table 103 Alternative Subnet Mask Notation ........................................................................................311
Table 104 Subnet 1 .............................................................................................................................. 313
Table 105 Subnet 2 .............................................................................................................................. 314
Table 106 Subnet 3 .............................................................................................................................. 314
Table 107 Subnet 4 .............................................................................................................................. 314
Table 108 Eight Subnets ...................................................................................................................... 314
Table 109 24-bit Network Number Subnet Planning ............................................................................ 315
Table 110 16-bit Network Number Subnet Planning ............................................................................ 315
Table 111 Commonly Used Services ................................................................................................... 321
Table 112 System Maintenance Logs .................................................................................................. 331
Table 113 System Error Logs .............................................................................................................. 332
Table 114 Access Control Logs ........................................................................................................... 332
Table 115 TCP Reset Logs .................................................................................................................. 332
Table 116 Packet Filter Logs ............................................................................................................... 332
Table 117 ICMP Logs .......................................................................................................................... 333
Table 118 CDR Logs ............................................................................................................................ 333
Table 119 PPP Logs ............................................................................................................................ 333
Table 120 IKE Logs ............................................................................................................................. 333
Table 121 PKI Logs ............................................................................................................................. 336
Table 122 Certificate Path Verification Failure Reason Codes ............................................................ 337
Table 123 ACL Setting Notes .............................................................................................................. 338
Table 124 ICMP Notes ......................................................................................................................... 338
P-791R v2 User’s Guide
29
Page 30
List of Tables
Table 125 Syslog Logs ........................................................................................................................ 339
Table 126 RFC-2408 ISAKMP Payload Types .................................................................................... 339
Table 127 NetBIOS Filter Default Settings .......................................................................................... 344
30
P-791R v2 User’s Guide
Page 31
PART I
Introduction,
Wizards and
Tutorials
Getting To Know Your ZyXEL Device (33)
Introducing the Web Configurator (37)
Wizard Setup for Internet Access (47)
Point-to-point Configuration (55)
31
Page 32
32
Page 33
CHAPTER 1
Getting To Know Your ZyXEL
Device
This chapter introduces the main features and applications of your ZyXEL Device.

1.1 Overview

The ZyXEL Device is a G.SHDSL (G.992.1, Symmetrical high-speed Digital Subscriber Line).bis Router providing high-speed LAN-to-LAN connection and Internet access through G.SHDSL.bis connection over the telephone line. You can use your ZyXEL Device for either IP routing or bridging depending on your ISP (Internet Service Provider) configuration.
See Appendix A on page 281 for a complete list of features you can configure on your ZyXEL Device.
1.1.1 High-speed Internet Access
The ZyXEL Device is the ideal high-speed Internet access solution. In addition, unlike ADSL or VDSL, G.SHDSL.bis supports the same high speed for transmission and receiving.
Figure 1 High-speed Internet Access with Your ZyXEL Device
For Internet access, connect the DSL port to the phone port. Then, connect your computer or server to the ETHERNET port. (See the Quick Start Guide for detailed instructions about hardware connections.) Next, set up the ZyXEL Device as a router or as a bridge, depending on the desired configuration. As a router, the ZyXEL Device provides security and networking functionality. As a bridge, the ZyXEL Device minimizes the configuration changes you have to make in your existing network.
1.1.2 High-speed Point-to-point Connections
Use two ZyXEL Devices to create a cost-effective, high-speed connection for high-bandwidth applications such as videoconferencing and distance learning. The ZyXEL Devices provide a simple, fast point-to-point connection between two geographically-dispersed networks.
P-791R v2 User’s Guide
33
Page 34
Chapter 1 Getting To Know Your ZyXEL Device
In the following example, two ZyXEL Devices connect the headquarters and a branch office.
Figure 2 Point-to-point Connections with Your ZyXEL Device
" See Chapter 4 on page 55 for more information on setting up point-to-point
connections.

1.2 Ways to Manage the ZyXEL Device

Use any of the following methods to manage the ZyXEL Device.
• Web Configurator. This is recommended for everyday management of the ZyXEL Device using a (supported) web browser. See Chapter 2 on page 37.
• Command Line Interface. Line commands are mostly used for troubleshooting by service engineers. See Appendix G on page 325.
• SMT. System Management Terminal is a text-based configuration menu that you can use to configure your device. See Chapter 17 on page 163.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/restore. See Chapter 11 on page 119.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See Chapter
11 on page 119.

1.3 Good Habits for Managing the ZyXEL Device

Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
34
P-791R v2 User’s Guide
Page 35
• Back up the configuration (and make sure you know how to restore it). Restoring an

1.4 LEDs

The following figure shows the LEDs.
Figure 3 LEDs
Chapter 1 Getting To Know Your ZyXEL Device
earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the ZyXEL Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the ZyXEL Device. You could simply restore your last configuration.
The following table describes the LEDs.
Table 1 LEDs
LED COLOR STATUS DESCRIPTION
POWER Green On The ZyXEL Device is receiving power and functioning
properly.
Blinking The ZyXEL Device is rebooting or performing diagnostics.
Red On Power to the ZyXEL Device is too low.
Off The system is not ready or has malfunctioned.
CON/AUX Green On This port has a successful console connection.
Orange On This port has a successful dial-up connection.
Off This port is not connected.
ETHERNET Green On This port has a successful Ethernet connection.
Blinking This port is sending/receiving data.
Off This port is not connected.
DSL Green On The DSL line is up.
Blinking The ZyXEL Device is initializing the DSL line.
Off The DSL line is down.
P-791R v2 User’s Guide
35
Page 36
Chapter 1 Getting To Know Your ZyXEL Device
Table 1 LEDs (continued)
LED COLOR STATUS DESCRIPTION
INTERNET Green On The Internet connection is up, and the ZyXEL Device has an
Blinking The ZyXEL Device is sending/receiving data.
Red On The ZyXEL Device tried to get an IP address, but an error
Off The Internet connection is down.
IP address. (If the ZyXEL Device uses RFC 1483 in bridge mode, this light does not turn on, but it does blink when the ZyXEL Device is sending/receiving data.)
occurred.
36
P-791R v2 User’s Guide
Page 37
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.

2.1 Web Configurator Overview

The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See the chapter on troubleshooting if you need to make sure these functions are allowed in Internet Explorer.

2.2 Accessing the Web Configurator

1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to the
Quick Start Guide).
3 Launch your web browser. 4 Type "192.168.1.1" as the URL. 5 A window displays as shown. Enter the default admin password 1234 to configure the
wizards and the advanced features or enter the default user password user to view the status only. Click Login to proceed to a screen asking you to change your password or click Cancel to revert to the default password.
P-791R v2 User’s Guide
37
Page 38
Chapter 2 Introducing the Web Configurator
Figure 4 Login Screen
6 If you entered the user password, the Status screen appears. See Section 2.4 on page 42.
If you entered the admin password, the following screen appears.
Figure 5 Change Password at Login
It is highly recommended you change the default admin password. Enter a new password between 1 and 30 characters, retype it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if you do not want to change the password now.
" If you do not change the password at least once, this screen appears every
time you log in with the admin password. You can also change the password in
System > General or in Menu 23: System Password.
38
P-791R v2 User’s Guide
Page 39
Chapter 2 Introducing the Web Configurator
7 Select Go to Wizard setup, and click Apply to display the wizard main screen. Select
Go to Advanced setup, and click Apply to display the Status screen. Select Click here to always start with the Advanced setup if you want the ZyXEL Device to skip this screen from now on and always go to the Status screen. See Section 2.4 on page 42.
Figure 6 Select a Mode
" The management session automatically times out when the time period set in
the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the ZyXEL Device if this happens to you.

2.3 Navigating the Web Configurator

After you enter the admin password, use the sub-menus on the navigation panel to configure ZyXEL Device features. The following table describes the sub-menus.
P-791R v2 User’s Guide
39
Page 40
Chapter 2 Introducing the Web Configurator
Figure 7 Web Configurator: Main Screen
Use submenus to configure ZyXEL Device
Click the Logout icon at any time to exit the web configurator.
" Click the icon (located in the top right corner of most screens) to view
embedded help.
Table 2 Web Configurator Screens Summary
LINK/ICON SUB-LINK FUNCTION
Wizard INTERNET
SETUP
Logout Click this icon to exit the web configurator.
Status Use this screen to look at the ZyXEL Device’s general device,
Network
WAN Internet
Connection
More Connections Use this screen to configure and place calls to a remote
WAN Backup Setup
Use these screens for initial configuration including general setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment.
system and interface status information. You can also access the summary statistics tables.
Use this screen to configure ISP parameters, WAN IP address assignment, DSL line or point-to-point connections.
gateway.
Use this screen to configure your traffic redirect properties and WAN backup settings.
40
P-791R v2 User’s Guide
Page 41
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICON SUB-LINK FUNCTION
LAN IP Use this screen to configure LAN TCP/IP settings and other
advanced properties.
DHCP Setup Use this screen to configure LAN DHCP settings.
Client List
IP Alias
NAT General Use this screen to enable NAT.
Port Forwarding Use this screen to configure servers behind the ZyXEL Device.
Security
Filter General Use this screen to configure Internet security and apply the
Advanced
Static Route Static Route Use this screen to configure IP static routes.
Dynamic DNS Dynamic DNS Use this screen to set up dynamic DNS.
Remote MGMT
UPnP General Use this screen to enable UPnP on the ZyXEL Device.
Maintenance
System General This screen contains administrative and system-related
Logs View Log Use this screen to view the logs for the categories that you
Tools Firmware Use this screen to upload firmware to your ZyXEL Device.
WWW Use this screen to configure through which interface(s) and
Te lnet Use this screen to configure through which interface(s) and
FTP Use this screen to configure through which interface(s) and
SNMP Use this screen to configure your ZyXEL Device’s settings for
DNS Use this screen to configure through which interface(s) and
ICMP Use this screen to change your anti-probing settings.
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Log Settings Use this screen to change your ZyXEL Device’s log settings.
Configuration Use this screen to backup and restore the configuration or
Restart This screen allows you to reboot the ZyXEL Device without
Use this screen to view current DHCP client information and to always assign an IP address to a MAC address (and host name).
Use this screen to partition your LAN interface into subnets.
predefined filtering rules.
from which IP address(es) users can use HTTPS or HTTP to manage the ZyXEL Device.
from which IP address(es) users can use Telnet to manage the ZyXEL Device.
from which IP address(es) users can use FTP to access the ZyXEL Device.
Simple Network Management Protocol management.
from which IP address(es) users can send DNS queries to the ZyXEL Device.
information and also allows you to change your password.
selected.
reset the factory defaults to your ZyXEL Device.
turning the power off.
P-791R v2 User’s Guide
41
Page 42
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICON SUB-LINK FUNCTION
Diagnostic General These screens display information to help you identify
problems with the ZyXEL Device general connection.
DSL Line These screens display information to help you identify
problems with the DSL line.

2.4 Status Screen

The following summarizes how to navigate the web configurator from the Status screen.
" Some fields or links are not available if you entered the user password in the
login password screen (see Figure 4 on page 38).
Figure 8 Status
42
The following table describes the labels shown in the Status screen.
Table 3 Status
LABEL DESCRIPTION
Refresh Interval Select a number of seconds or None from the drop-down list box to refresh all
screen statistics automatically at the end of every time interval or to not refresh the screen statistics.
Apply Click this button to refresh the status screen statistics.
Device Information
Host Name This is the System Name you enter in the Maintenance > System > General
screen. It is for identification purposes.
Model Number This is the model name of the ZyXEL Device.
P-791R v2 User’s Guide
Page 43
Chapter 2 Introducing the Web Configurator
Table 3 Status (continued)
LABEL DESCRIPTION
MAC Address This is the MAC (Media Access Control) or Ethernet address unique to your
ZyXEL Device.
ZyNOS Firmware Ver si on
DSL Firmware Ver si on
WAN Information
DSL Mode This is the standard that your ZyXEL Device is using.
IP Address This is the WAN port IP address.
IP Subnet Mask
Default Gateway
VPI/VCI This is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
IP Address This is the LAN port IP address.
IP Subnet Mask This is the LAN port IP subnet mask.
DHCP This is the WAN port DHCP role - Server, Relay or None.
System Status
System Uptime This is the total time the ZyXEL Device has been on.
Current Date/Time This field displays your ZyXEL Device’s present date and time.
System Mode This displays whether the ZyXEL Device is functioning as a router or a bridge.
CPU Usage This number shows how many kilobytes of the heap memory the ZyXEL Device
Memory Usage This number shows the ZyXEL Device's total heap memory (in kilobytes).
Interface Status
Interface This displays the ZyXEL Device interfaces.
Status This field displays Down (line is down), Up (line is up or connected) if you're
Rate For the LAN port, this displays the port speed and duplex setting. Ethernet port
Summary This section is not available if you use the user password to log in.
Packet Statistics Use this screen to view port status and packet specific statistics.
This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's proprietary Network Operating System design.
This is the DSL firmware version code associated with the ZyXEL Device. This is sometimes needed by technicians to help troubleshoot problems.
This is the WAN port IP subnet mask.
This is the IP address of the default gateway, if applicable.
the Wizard or WAN screen.
is using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL Network Operating System) and is thus available for running processes like NAT.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The bar turns from green to red when the maximum is being approached.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The bar turns from green to red when the maximum is being approached.
using Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation.
connections can be in half-duplex or full-duplex mode. Full-duplex refers to a device's ability to send and receive simultaneously, while half-duplex indicates that traffic can flow in only one direction at a time. The Ethernet port must use the same speed or duplex mode setting as the peer Ethernet port in order to connect. Simultaneous transmissions over the same port (Full-duplex) essentially double the bandwidth.
For the DSL port, it displays the downstream and upstream transmission rate.
P-791R v2 User’s Guide
43
Page 44
Chapter 2 Introducing the Web Configurator
2.4.1 Status: Packet Statistics
Click the Packet Statistics hyperlink in the Status screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interval(s) field is configurable.
Figure 9 Status > Packet Statistics
The following table describes the fields in this screen.
Table 4 Status > Packet Statistics
LABEL DESCRIPTION
System Monitor
System up Time This is the elapsed time the system has been up.
Current Date/Time This field displays your ZyXEL Device’s present date and time.
CPU Usage This field specifies the percentage of CPU utilization.
Memory Usage This field specifies the percentage of memory utilization.
WAN Port Statistics
Link Status This is the status of your WAN link.
WAN IP Address This is the IP address assigned to your ZyXEL Device on the WAN.
Upstream Speed This is the upstream speed of your ZyXEL Device.
Downstream Speed This is the downstream speed of your ZyXEL Device.
Node-Link This field displays the remote node index number and link type. Link types are
PPPoA, ENET, RFC 1483 and PPPoE.
Status This field displays Down (line is down), Up (line is up or connected) if you're
using Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation. It displays N/A if the port is not connected.
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
Errors This field displays the number of error packets on this port.
44
P-791R v2 User’s Guide
Page 45
Chapter 2 Introducing the Web Configurator
Table 4 Status > Packet Statistics (continued)
LABEL DESCRIPTION
Tx B/s This field displays the number of bytes transmitted in the last second.
Rx B/s This field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this port has been up.
LAN Port Statistics
Interface This field displays the type of port.
Status This field displays Down (line is down), Up (line is up or connected) if you're
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
Collisions This is the number of collisions on this port.
Help Click this to open the embedded help.
Poll Interval(s) Type the time interval for the browser to refresh system statistics.
Set Interval Click this button to apply the new poll interval you entered in the Poll Interval
Stop Click this button to halt the refreshing of the system statistics.
using Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation.
field above.

2.5 Resetting the ZyXEL Device

If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the ZyXEL Device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
2.5.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking). 2 Press the RESET button for ten seconds or until the POWER LED begins to blink and
then release it. When the POWER LED begins to blink, the defaults have been restored and the ZyXEL Device restarts.
P-791R v2 User’s Guide
45
Page 46
Chapter 2 Introducing the Web Configurator
46
P-791R v2 User’s Guide
Page 47
CHAPTER 3

Wizard Setup for Internet Access

This chapter provides information on the Wizard Setup screens for Internet access in the web configurator.

3.1 Introduction

Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP.
" See the advanced menu chapters for background information on these fields.

3.2 Internet Access Wizard Setup

1 After you enter the admin password to access the web configurator, select Go to Wizard
setup and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the web configurator to display the wizard main screen.
Figure 10 Select a Mode
2 Click INTERNET SETUP to configure the system for Internet access.
P-791R v2 User’s Guide
47
Page 48
Chapter 3 Wizard Setup for Internet Access
Figure 11 Wizard: Welcome
3 Type the Internet access information given to you by your ISP exactly in the wizard
screen. If not given, leave the fields set to the default.
Figure 12 Internet Access Wizard Setup: ISP Parameters
48
The following table describes the fields in this screen.
Table 5 Internet Access Wizard Setup: ISP Parameters
LABEL DESCRIPTION
Mode From the Mode drop-down list box, select Routing (default) if your ISP allows
multiple computers to share an Internet account. Otherwise select Bridge.
Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list
box. Choices vary depending on what you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list
box either VC-based or LLC-based.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
Refer to the appendix for more information.
P-791R v2 User’s Guide
Page 49
Chapter 3 Wizard Setup for Internet Access
Table 5 Internet Access Wizard Setup: ISP Parameters
LABEL DESCRIPTION
VPI Enter the VPI assigned to you. This field may already be configured.
VCI Enter the VCI assigned to you. This field may already be configured.
Back Click Back to go back to the previous screen.
Next Click Next to continue to the next wizard screen. The next wizard screen you see
depends on what protocol you chose above.
Exit Click Exit to close the wizard screen without saving your changes.
4 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to continue.
Figure 13 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 6 Internet Connection with PPPoE
LABEL DESCRIPTION
User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form
Password Enter the password associated with the user name above.
Service Name Type the name of your PPPoE service here.
Back Click Back to go back to the previous wizard screen.
Apply Click Apply to save your changes to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
P-791R v2 User’s Guide
user@domain where domain identifies a service name, then enter both components exactly as given.
49
Page 50
Chapter 3 Wizard Setup for Internet Access
Figure 14 Internet Connection with RFC 1483
The following table describes the fields in this screen.
Table 7 Internet Connection with RFC 1483
LABEL DESCRIPTION
IP Address This field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
Back Click Back to go back to the previous wizard screen.
Next Click Next to continue to the next wizard screen.
Exit Click Exit to close the wizard screen without saving your changes.
Figure 15 Internet Connection with ENET ENCAP
The following table describes the fields in this screen.
Table 8 Internet Connection with ENET ENCAP
LABEL DESCRIPTION
Obtain an IP Address Automatically
Static IP Address
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address.
Select Static IP Address if your ISP gives you a fixed IP address.
50
P-791R v2 User’s Guide
Page 51
Chapter 3 Wizard Setup for Internet Access
Table 8 Internet Connection with ENET ENCAP (continued)
LABEL DESCRIPTION
IP Address Enter your ISP assigned IP address.
Subnet Mask Enter a subnet mask in dotted decimal notation.
Refer to the appendices to calculate a subnet mask If you are implementing subnetting.
Gateway IP address
First DNS Server
Second DNS Server
Back Click Back to go back to the previous wizard screen.
Apply Click Apply to save your changes to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
You must specify a gateway IP address (supplied by your ISP) when you use ENET ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask.
As above.
Figure 16 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 9 Internet Connection with PPPoA
LABEL DESCRIPTION
User Name Enter the login name that your ISP gives you.
Password Enter the password associated with the user name above.
Back Click Back to go back to the previous wizard screen.
Apply Click Apply to save your changes to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not correct, the screen displays as shown next. Click Back to Username and Password setup to go back to the screen where you can modify them.
P-791R v2 User’s Guide
51
Page 52
Chapter 3 Wizard Setup for Internet Access
Figure 17 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the Internet Setup Wizard to verify your Internet access settings.
Figure 18 Connection Test Failed-2.
52
When you are finished with the Internet Setup Wizard the following screen displays your configuration details. Click Finish to exit the wizard.
Figure 19 Internet Setup Wizard Finished
P-791R v2 User’s Guide
Page 53
Chapter 3 Wizard Setup for Internet Access
P-791R v2 User’s Guide
53
Page 54
Chapter 3 Wizard Setup for Internet Access
54
P-791R v2 User’s Guide
Page 55
CHAPTER 4

Point-to-point Configuration

This chapter introduces point-to-point connections.

4.1 Overview

You can set up point-to-point connection between two ZyXEL Devices. These connections offer a cost-effective, high-speed connection for high-bandwidth applications such as videoconferencing and distance learning. An example is shown below.
Figure 20 Example: Point-to-point Connections
In a point-to-point connection, the DSL ports on the ZyXEL Devices are directly connected to each other, not to an ISP or the Internet.
" A point-to-point connection can use RFC 1483 in bridge mode or ENET
ENCAP in router mode.
" In a point-to-point connection, the ZyXEL Devices should use the same VPI,
VCI, multiplexing, and encapsulation method.
P-791R v2 User’s Guide
55
Page 56
Chapter 4 Point-to-point Configuration
To establish a point-to-point connection, one of the ZyXEL Devices becomes the server (instead of the ISP). The server controls some of the attributes of the DSL connection, such as the transfer rate and the DSL operational mode. Otherwise, there is no difference between the server and the client. Either one can initiate the point-to-point connection.
You can only establish point-to-point connections between ZyXEL Devices that support this kind of server/client mode.

4.2 Point-to-point Connection Procedure

Follow these directions to set up a point-to-point connection.
1 Set up the Server. 2 Set up the Client. 3 Connect the ZyXEL Devices.
4.2.1 Set up the Server
1 Log in to the ZyXEL Device that will be the server. (See Chapter 2 on page 37.) 2 Click Network > WAN > Internet Connection. 3 Configure the VPI, VCI, Multiplexing, and Encapsulation fields for the point-to-point
connection. In the Encapsulation field, select either RFC 1483 or ENET ENCAP.
4 Scroll down to the Service Type section. The following screen appears.
Figure 21 WAN > Internet Connection > Service Type
5 In the Service Type field, select Server. The rest of the fields are enabled. 6 Configure the rest of the fields, if necessary. For example, you might want to set the
Trans fer Ma x Rate to the maximum value.
7 Click Apply.
4.2.2 Set up the Client
1 Log in to the ZyXEL Device that will be the client. (See Chapter 2 on page 37.) 2 Click Network > WAN > Internet Connection. 3 Set the VPI, VCI, Multiplexing, and Encapsulation to the same values you set in the
server.
4 Scroll down to the Service Type section. See Figure 21 on page 56 above.
56
P-791R v2 User’s Guide
Page 57
5 In the Service Mode field, select the same type of connection you selected for the server. 6 In the Service Type field, select Client. The rest of the fields will be negotiated with the
server.
7 Click Apply.
4.2.3 Connect the ZyXEL Devices
Connect the DSL ports on the ZyXEL Devices together, and wait while the ZyXEL Devices automatically establish the connection. When the connection is established, the DSL and INTERNET lights are on. It takes up to half a minute to establish the connection. If the ZyXEL Devices do not establish the connection, verify that the settings (except the Service Type) match.
Chapter 4 Point-to-point Configuration
P-791R v2 User’s Guide
57
Page 58
Chapter 4 Point-to-point Configuration
58
P-791R v2 User’s Guide
Page 59
PART II

Network Setup

WA N S e t u p (6 1 )
LAN Setup (83)
Network Address Translation (NAT) Screens (93)
59
Page 60
60
Page 61
CHAPTER 5

WAN Setup

This chapter describes how to configure WAN settings.

5.1 WAN Overview

A WAN (Wide Area Network) is an outside connection to another network or the Internet.
5.1.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods.
5.1.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol. IP packets are routed between the Ethernet interface and the WAN interface and then formatted so that they can be understood in a bridged environment. For instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the second wizard screen. You can get this information from your ISP.
5.1.1.2 PPP over Ethernet
PPPoE (Point-to-Point Protocol over Ethernet) provides access control and billing functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
P-791R v2 User’s Guide
61
Page 62
Chapter 5 WAN Setup
5.1.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (DSL Access Multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP.
5.1.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to the RFC for more detailed information.
5.1.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP.
5.1.2.1 VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical.
5.1.2.2 LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs.
5.1.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for more information.
5.1.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP. However the encapsulation method assigned influences your choices for IP address and ENET ENCAP gateway.
62
P-791R v2 User’s Guide
Page 63
5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the ENET ENCAP Gateway field.
5.1.4.2 IP Assignment with RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP Address and ENET ENCAP Gateway fields as stated above.
5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server
assigns them to the ZyXEL Device.
5.1.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic demand. The ZyXEL Device does two things when you specify a nailed-up connection. The first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons.
Chapter 5 WAN Setup
Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern
5.1.6 NAT
NAT (Network Address Translation, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

5.2 Metric

The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the default routes have the same metric, the ZyXEL Device uses the following pre-defined priorities:
• Normal route: designated by the ISP (see Section 5.4 on page 65)
• Traffic-redirect route (see Section 5.6 on page 74)
• WAN-backup route, also called dial-backup (see Section 5.9 on page 75)
P-791R v2 User’s Guide
63
Page 64
Chapter 5 WAN Setup
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect route also fails.
If you want the dial-backup route to take first priority over the traffic-redirect route or even the normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to "2" (or greater).
IP Policy Routing overrides the default routing behavior and takes priority over all of the routes mentioned above.

5.3 Traffic Shaping

Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits), so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the maximum average rate at which cells can be sent over the virtual connection. SCR may not be greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 22 Example of Traffic Shaping
64
P-791R v2 User’s Guide
Page 65
5.3.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification.
5.3.1.1 Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for connections that continuously require a specific amount of bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR would be high-resolution video and voice.
5.3.1.2 Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections.
The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is specified) but is only available when data is being sent. An example of an VBR-RT connection would be video conferencing. Video conferencing requires real-time data transfers and the bandwidth requirement varies in proportion to the video image's changing dynamics.
Chapter 5 WAN Setup
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
5.3.1.3 Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer.

5.4 Internet Connection

To change your ZyXEL Device’s WAN remote node settings, click Network > WAN > Internet Connection. The screen differs by the encapsulation.
See Section 5.1 on page 61 for more information.
P-791R v2 User’s Guide
65
Page 66
Chapter 5 WAN Setup
Figure 23 WAN > Internet Connection
The following table describes the labels in this screen.
Table 10 WAN > Internet Connection
LABEL DESCRIPTION
General
Name Enter the name of your Internet Service Provider, for example “MyISP”. This
information is for descriptive purposes only.
Mode Select Routing (default) from the drop-down list box if your ISP allows multiple
Encapsulation Select the method of encapsulation used by your ISP from the drop-down list
User Name (PPPoA and PPPoE only) Enter the user name exactly as your ISP assigned. If
Password (PPPoA and PPPoE only) Enter the password associated with the user name
computers to share an Internet account. Otherwise select Bridge.
box. Choices vary depending on the mode you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE. If you set up a point-to-point or a point-to-2points connection, select either ENET
ENCAP or RFC 1483.
assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
above.
66
P-791R v2 User’s Guide
Page 67
Chapter 5 WAN Setup
Table 10 WAN > Internet Connection (continued)
LABEL DESCRIPTION
Service Name (PPPoE only) Type the name of your PPPoE service here.
Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP Address These fields only appear if the Mode is Routing.
Obtain an IP Address Automatically
Static IP Address (PPPoE, PPPoA, and ENET ENCAP only) Select this if you do not have a
IP Address Enter the static IP address provided by your ISP.
Subnet Mask (ENET ENCAP only) This field is enabled if you select Static IP Address. Enter
Gateway IP Address
Connection This section only appears if the Encapsulation is PPPoE and PPPoA.
Nailed-Up Connection
Connect on Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect
Service Type
Service Mode
Service Type
Enable Rate Adaption
Transfer Max Rate (Kbps)
Transfer Min Rate (Kbps)
Choices are VC or LLC.
circuit. Refer to the appendix for more information.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. ‘
(PPPoE, PPPoA, and ENET ENCAP only) Select this if you have a dynamic IP address.
dynamic IP address.
the subnet mask provided by your ISP.
(ENET ENCAP only) This field is enabled if you select Static IP Address. Enter the gateway IP address provided by your ISP. You must enter a valid IP address for Internet access. If you enter 0.0.0.0, the Internet connection does not work.
Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not timeout.
This field indicates that the ZyXEL Device uses 2-wire mode for the DSL connection.
In 2-wire mode, the maximum data rate is up to 5.69 Mbps. This field is not configurable.
Indicate whether the ZyXEL Device is the server or the client in the DSL connection. Select Server if this ZyXEL Device is the server in a point-to-point application. (See Chapter 4 on page 55.) Otherwise, select Client.
This field is enabled if Service Type is Server. Indicate whether or not the ZyXEL Device can adjust the speed of its connection to that of the other device.
This field is enabled if Service Type is Server. Set the maximum rate at which the ZyXEL Device sends and receives information. The actual transfer rate will be between this value and the minimum transfer rate you configure.
This field is enabled if Service Type is Server. Set the minimum rate at which the ZyXEL Device sends and receives information. The actual transfer rate will be between this value and the maximum transfer rate you configure.
P-791R v2 User’s Guide
67
Page 68
Chapter 5 WAN Setup
Table 10 WAN > Internet Connection (continued)
LABEL DESCRIPTION
Standard Mode This field is enabled if Service Type is Server. Select the operational mode the
ZyXEL Device uses in the DSL connection. Annex A refers to connections over POTS and Annex B refers to connections over ISDN lines.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
Advanced Setup Click this button to display the Advanced WAN Setup screen and edit more
details of your WAN setup.
5.4.1 Configuring Advanced Internet Connection
Use this screen to edit your ZyXEL Device's advanced settings for Internet connections. Click the Advanced Setup button in the Internet Connection screen. The screen appears as shown.
Figure 24 WAN > Internet Connection > Advanced Setup
68
The following table describes the labels in this screen.
Tabl e 11 WAN > Internet Connection > Advanced Setup
LABEL DESCRIPTION
RIP & Multicast Setup
RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
P-791R v2 User’s Guide
Page 69
Chapter 5 WAN Setup
Tabl e 11 WAN > Internet Connection > Advanced Setup (continued)
LABEL DESCRIPTION
RIP Version This field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
Multicast IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
ATM Q oS
ATM QoS Type Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice
Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst Size
PPPoE Passthrough
Back Click Back to return to the previous screen.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
or data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
This field is only effective for PPPoE connections. In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE
Passthrough to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the ZyXEL Device. Each host can have a separate account and a public WAN IP address.
PPPoE pass through is an alternative to NAT for applications where NAT is not appropriate.
Disable PPPoE passthrough if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP.

5.5 Configuring More Connections

This section describes the protocol-independent parameters for a remote network. They are required for placing calls to a remote gateway and the network behind it across a WAN connection. When you use the WAN > Internet Connection screen to set up Internet access, you are configuring the first WAN connection.
Click Network > WAN > More Connections to display the screen as shown next.
P-791R v2 User’s Guide
69
Page 70
Chapter 5 WAN Setup
Figure 25 WAN > More Connections
The following table describes the labels in this screen.
Table 12 WAN > More Connections
LABEL DESCRIPTION
# This is the index number of a connection.
Active This display whether this connection is activated. Clear the check box to disable
Name This is the descriptive name for this connection.
VPI/VCI This is the VPI and VCI values used for this connection.
Encapsulation This is the method of encapsulation used for this connection.
Modify The first (ISP) connection is read-only in this screen. Use the WAN > Internet
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
the connection. Select the check box to enable it.
Connection screen to edit it. Click the edit icon to go to the screen where you can edit the connection. Click the delete icon to remove an existing connection. You cannot remove the
first connection.
5.5.1 More Connections Edit
Use this screen to configure a connection. Click the edit icon in the More Connections screen.
70
P-791R v2 User’s Guide
Page 71
Figure 26 WAN > More Connections > Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 13 WAN > More Connections > Edit
LABEL DESCRIPTION
General
Active Select the check box to activate or clear the check box to deactivate this
Name Enter a unique, descriptive name of up to 13 ASCII characters for this
Mode Select Routing from the drop-down list box if your ISP allows multiple
Encapsulation Select the method of encapsulation used by your ISP from the drop-down list
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
Password (PPPoA and PPPoE encapsulation only) Enter the password associated with the
Service Name (PPPoE only) Type the name of your PPPoE service here.
connection.
connection.
computers to share an Internet account. If you select Bridge, the ZyXEL Device will forward any packet that it does not
route to this remote node; otherwise, the packets are discarded.
box. Choices are PPPoA, RFC 1483, ENET ENCAP or PPPoE. If you set up a point-to-point connection, select either ENET ENCAP or RFC
1483.
ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
user name above.
P-791R v2 User’s Guide
71
Page 72
Chapter 5 WAN Setup
Table 13 WAN > More Connections > Edit (continued)
LABEL DESCRIPTION
Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP Address These fields only appear if the Mode is Routing.
IP Address Enter the static IP address provided by your ISP.
Subnet Mask Enter the subnet mask provided by your ISP.
Gateway IP Address
Connection This section only appears if the Encapsulation is PPPoE and PPPoA.
Nailed-Up Connection
Connect on Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect
NAT SUA Only is available only when you select Routing in the Mode field.
Back Click Back to return to the previous screen.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
Advanced Setup Click this button to display the More Connections Advanced screen and edit
Choices are VC or LLC. By prior agreement, a protocol is assigned a specific virtual circuit, for example,
VC1 will carry IP. If you select VC, specify separate VPI and VCI numbers for each protocol.
For LLC-based multiplexing or PPP encapsulation, one VC carries multiple protocols with protocol identifying information being contained in each packet header. In this case, only one set of VPI and VCI numbers need be specified for all protocols.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. ‘
Enter the gateway IP address provided by your ISP.
Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not timeout.
Select SUA Only if you have one public IP address and want to use NAT. Click Edit to go to the Port Forwarding screen to edit a server mapping set.
Otherwise, select None to disable NAT.
more details of your WAN setup.
5.5.2 Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown.
72
P-791R v2 User’s Guide
Page 73
Chapter 5 WAN Setup
Figure 27 WAN > More Connections > Advanced Setup
The following table describes the labels in this screen.
Table 14 WAN > More Connections > Advanced Setup
LABEL DESCRIPTION
RIP & Multicast Setup
RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
RIP Version This field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
Multicast IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
ATM Q oS
ATM QoS Type Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice
Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst Size
establish membership in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
or data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
P-791R v2 User’s Guide
73
Page 74
Chapter 5 WAN Setup
Table 14 WAN > More Connections > Advanced Setup (continued)
LABEL DESCRIPTION
Back Click Back to return to the previous screen.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.

5.6 Traffic Redirect

Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot connect to the Internet. An example is shown in the figure below.
Figure 28 Traffic Redirect Example
The following network topology allows you to avoid triangle route security issues when the backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in another subnet (Subnet 2). Configure filters that allow packets from the protected LAN (Subnet 1) to the backup gateway (Subnet 2).
Figure 29 Traffic Redirect LAN Setup
74
P-791R v2 User’s Guide
Page 75

5.7 Dial Backup Interface

The Dial Backup port can be used in reserve, as a traditional dial-up connection should the broadband connection to the WAN port fail. To set up the auxiliary port (Dial Backup) for use in the event that the regular WAN connection is dropped, first make sure you have set up the switch and port connection. See Section 5.8 on page 75 for more information.

5.8 CON/AUX Port for Dial Backup

Use the CON/AUX port to configure the ZyXEL Device for Dial Backup via a modem. Set the CON/AUX switch of the ZyXEL Device to AUX (Auxiliary) side to use the CON/AUX port as a backup port for Internet access via a modem. Connect the RJ-45 connector of the console cable to the CON/AUX port of the ZyXEL Device and the other end to a serial port (COM1, COM2 or other COM port) on your modem.

5.9 Configuring WAN Backup Setup

Chapter 5 WAN Setup
Use this screen to forward traffic to a backup gateway or to use the dial-backup port when the ZyXEL Device cannot connect to the Internet. To open this screen, click WA N > WAN Backup Setup. The screen appears as shown.
Figure 30 WAN > WAN Backup Setup
P-791R v2 User’s Guide
75
Page 76
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 15 WAN > WAN Backup Setup
LABEL DESCRIPTION
Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.
Check WAN IP Address 1-3
Fail Tolerance Type the number of times (2 recommended) that your ZyXEL Device pings the IP
Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN
Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a
Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device
Active Traffic Redirect
Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses configured in the Check WAN IP Address fields.
Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP address of a reliable nearby computer (for example, your ISP's DNS server address).
Note: If you activate either traffic redirect or dial backup, you must
configure at least one IP address here.
When using a WAN backup connection, the ZyXEL Device periodically pings the addresses configured here and uses the other WAN backup connection (if configured) if there is no response.
addresses configured in the Check WAN IP Address field without getting a response before switching to a WAN backup connection (or a different WAN backup connection).
backup connection), it periodically checks to whether or not it can use a higher priority connection.
Type the number of seconds (30 recommended) for the ZyXEL Device to wait between checks. Allow more time if your destination IP address handles lots of traffic.
ping response from one of the IP addresses in the Check WAN IP Address field before timing out the request. The WAN connection is considered "down" after the ZyXEL Device times out the number of times specified in the Fail Tolerance field. Use a higher value in this field if your network is busy or congested.
cannot connect to the Internet.
Select this check box to have the ZyXEL Device use traffic redirect if the normal WAN connection goes down.
76
Note: If you activate traffic redirect, you must configure at least one
Check WAN IP Address.
Metric This field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
Backup Gateway Type the IP address of your backup gateway in dotted decimal notation. The
ZyXEL Device automatically forwards traffic to this IP address if the ZyXEL Device's Internet connection terminates.
Dial Backup
P-791R v2 User’s Guide
Page 77
Chapter 5 WAN Setup
Table 15 WAN > WAN Backup Setup (continued)
LABEL DESCRIPTION
Active Dial Backup
Select this to have the ZyXEL Device use a dial-backup connection if the normal WAN connection goes down.
Note: If you activate dial backup, you must configure at least one
Check WAN IP Address.
Metric This field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
Port Speed Use the drop-down list box to select the speed of the connection between the DSL
port and the external device.
User Name Type the login name assigned by your ISP.
Password Type the password assigned by your ISP.
Primary Phone Number
Advanced Setup Click this to configure advanced settings for the dial-backup connection.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
Type the first (primary) phone number from the ISP for this remote node. If the Primary Phone number is busy or does not answer, your ZyWALL dials the Secondary Phone number, if available. (See Advanced Setup.) Some areas require dialing the pound sign # before the phone number for local calls. Include a # symbol at the beginning of the phone numbers as required.
5.9.1 Advanced Backup Setup
Use this screen to change your ZyXEL Device’s advanced dial backup settings. Click WA N > WAN Backup Setup > Advanced Setup. The screen appears as shown.
P-791R v2 User’s Guide
77
Page 78
Chapter 5 WAN Setup
Figure 31 WAN > WAN Backup Setup > Advanced Setup
The following table describes the labels in this screen.
Table 16 WAN > WAN Backup Setup > Advanced Setup
LABEL DESCRIPTION
Basic
Authentication Type
Secondary Phone Number
Dial Backup Port Speed
AT Command Initial String
Advanced Modem Setup
TCP/IP Options
Use the drop-down list box to select an authentication protocol for outgoing calls. Options are:
CHAP/PAP - Your ZyXEL Device accepts either CHAP or PAP when requested by this remote node.
CHAP - Your ZyXEL Device accepts CHAP only. PAP - Your ZyXEL Device accepts PAP only.
Type the backup phone number from the ISP. If the Primary Phone number is busy or does not answer, your ZyWALL dials the Secondary Phone number, if available. Some areas require dialing the pound sign # before the phone number for local calls. Include a # symbol at the beginning of the phone numbers as required.
Select the speed of the connection between the Dial Backup port and the external device. Available speeds are 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Enter the AT command string to initialize the WAN device. Consult the manual of your WAN device connected to your Dial Backup port for specific AT commands.
Click Edit to change the advanced settings for the modem.
78
P-791R v2 User’s Guide
Page 79
Chapter 5 WAN Setup
Table 16 WAN > WAN Backup Setup > Advanced Setup (continued)
LABEL DESCRIPTION
Metric This field sets this route's priority among the routes the ZyXEL Device uses.
The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
Enable SUA Select this if you have one public IP address and want to use NAT, or clear it to
Enable RIP Select this if you want to enable RIP in the dial-backup connection. RIP (Routing
RIP Version The RIP Version field controls the format and the broadcasting method of the RIP
RIP Direction The RIP Direction field controls the sending and receiving of RIP packets. Select
Enable Multicast Select this if you want to enable IGMP in the dial-backup connection. IGMP
Multicast The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2.
PPP Options
Encapsulation Select CISCO PPP from the drop-down list box if your dial backup WAN device
Compression Select this to turn on stac compression.
Connection
Nailed-Up Connection
Connect on Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect on
Budget
Allocated Budget
Period
disable NAT.
Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers. Clear this if you want the ZyXEL Deviceto not send any RIP packets and to ignore any RIP packets received.
packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
the RIP direction from Both/In Only/Out Only. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives.
(Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group.
uses Cisco PPP encapsulation, otherwise select Standard PPP.
Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time and specify an idle time-out in the Max Idle Timeout field.
Demand. The default setting is 0, which means the Internet session will not timeout.
Enter the maximum amount of time (in minutes) each call can last. Enter 0 if there is no limit. With Period, you can set a limit on the total outgoing call time of the ZyXEL Device within a certain period of time. When the total outgoing call time exceeds the limit, the current call will be dropped and any future outgoing calls will be blocked.
Enter how often (in hours) the Allocated Budget is reset. For example, if you can call for thirty minutes every hour, set the Allocated Budget to 30, and set this field to 1.
P-791R v2 User’s Guide
79
Page 80
Chapter 5 WAN Setup
Table 16 WAN > WAN Backup Setup > Advanced Setup (continued)
LABEL DESCRIPTION
Back Click Back to return to the previous screen.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
5.9.2 Advanced Modem Settings for Dial Backup
Use this screen to change your ZyXEL Device’s modem settings for dial backup. Click WA N > WAN Backup Setup > Advanced Setup > Edit. The screen appears as shown.
Figure 32 WAN > WAN Backup Setup > Advanced Setup > Edit
80
The following table describes the labels in this screen.
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit
LABEL DESCRIPTION
AT Command Strings
Dial
Drop
Answer
Drop DTR When Hang Up
AT Response Strings
CLID
Called ID
Speed
Enter the AT Command string to make a call.
Enter the AT Command string to drop a call. “~” represents a one second wait, for example “~~~+++~~ath” can be used if your modem has a slow response time.
Enter the AT Command string to answer a call.
Select this if you want the DTR (Data Terminal Ready) signal to be dropped after the Drop string is sent out.
Enter the keyword that precedes the CLID (Calling Line Identification) in the AT response string. This lets the ZyXEL Device capture the CLID in the AT response string that comes from the WAN device. CLID is required for CLID authentication.
Enter the keyword preceding the dialed number.
Enter the keyword preceding the connection speed.
P-791R v2 User’s Guide
Page 81
Chapter 5 WAN Setup
Table 17 WAN > WAN Backup Setup > Advanced Setup > Edit (continued)
LABEL DESCRIPTION
Call Control
Dial Timeout Enter a number of seconds for the ZyXEL Device to keep trying to set up an
Retry Count Enter a number of times for the ZyXEL Device to retry a busy or no-answer phone
Retry Interval
Drop Timeout
Call Back Delay
Back Click Back to return to the previous screen.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
outgoing call before timing out (stopping). The ZyXEL Device times out and stops if it cannot set up an outgoing call within the timeout value.
number before blacklisting the number.
Enter a number of seconds for the ZyXEL Device to wait before trying another call after a call has failed. This applies before a phone number is blacklisted.
Enter a number of seconds for the ZyXEL Device to wait before dropping the DTR signal if it does not receive a positive disconnect confirmation.
Enter a number of seconds for the ZyXEL Device to wait between dropping a callback request call and dialing the corresponding callback call.
P-791R v2 User’s Guide
81
Page 82
Chapter 5 WAN Setup
82
P-791R v2 User’s Guide
Page 83
CHAPTER 6

LAN Setup

This chapter describes how to configure LAN settings.

6.1 LAN Overview

A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
See Section 6.3 on page 87 to configure the LAN screens.
6.1.1 LANs, WANs and the ZyXEL Device
The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
Figure 33 LAN and WAN IP Addresses
P-791R v2 User’s Guide
83
Page 84
Chapter 6 LAN Setup
6.1.2 DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured.
6.1.2.1 IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP clients (DHCP Pool). See the product specifications in the appendices. Do not assign static IP addresses from the DHCP pool to your LAN computers.
6.1.3 DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup, otherwise, leave them blank.
Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The ZyXEL Device supports the IPCP DNS server extensions through the DNS proxy feature.
If the Primary and Secondary DNS Server fields in the DHCP Setup screen are not specified, for instance, left as 0.0.0.0, the ZyXEL Device tells the DHCP clients that it itself is the DNS server. When a computer sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup screen. This way, the ZyXEL Device can pass the DNS servers to the computers and the computers can query the DNS server directly without the ZyXEL Device’s intervention.
6.1.4 DNS Server Address Assignment
84
Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it.
There are two ways that an ISP disseminates the DNS server addresses.
P-791R v2 User’s Guide
Page 85
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen.
• The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server fields are left as 0.0.0.0 in the DHCP Setup screen.

6.2 LAN TCP/IP

The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
The LAN parameters of the ZyXEL Device are preset in the factory with the following values:
• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)
• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If your ISP gives you explicit DNS server address(es), read the embedded web configurator help regarding what fields need to be configured.
Chapter 6 LAN Setup
6.2.1 IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number.
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is recommended that you select a network number from
192.168.0.0 to 192.168.255.0 and you must enable the Network Address Translation (NAT) feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network.
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise.
P-791R v2 User’s Guide
85
Page 86
Chapter 6 LAN Setup
6.2.1.1 Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
" Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space.
6.2.2 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to:
Both - the ZyXEL Device will broadcast its routing table periodically and incorporate the RIP information that it receives.
In Only - the ZyXEL Device will not send any RIP packets but will accept all RIP packets received.
Out Only - the ZyXEL Device will send out RIP packets but will not accept any RIP packets received.
None - the ZyXEL Device will not send any RIP packets and will ignore any RIP packets received.
The Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that
RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.
86
P-791R v2 User’s Guide
Page 87
6.2.3 Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC
2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to 239.255.255.255. The address
224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group.
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP- v2). At start up, the ZyXEL Device queries all directly connected networks to gather group membership. After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces.
Chapter 6 LAN Setup

6.3 Configuring LAN IP

Use this screen to set the LAN IP address of your ZyXEL Device. Click LAN > IP. See
Section 6.1 on page 83 for background information.
Figure 34 LAN > IP
The following table describes the fields in this screen.
Table 18 LAN > IP
LABEL DESCRIPTION
IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation, for
IP Subnet Mask Type the subnet mask for your network. See Section 6.2.1 on page 85 for more
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to begin configuring this screen afresh.
Advanced Setup Click this button to display the Advanced LAN Setup screen and edit more
example, 192.168.1.1 (factory default).
information.
details of your LAN setup.
P-791R v2 User’s Guide
87
Page 88
Chapter 6 LAN Setup
6.3.1 Configuring Advanced LAN Setup
Use this screen to edit your ZyXEL Device's advanced LAN settings. Click the Advanced Setup button in the LAN IP screen. The screen appears as shown.
Figure 35 LAN > IP > Advanced Setup
The following table describes the labels in this screen.
Table 19 LAN > IP > Advanced Setup
LABEL DESCRIPTION
RIP & Multicast Setup
RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
RIP Version This field is enabled if RIP Direction is not None. The RIP Version field controls
the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
Multicast IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
Windows Networking (NetBIOS over TCP/IP)
Allow between LAN and WAN
Back Click Back to return to the previous screen.
establish membership in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that enable a computer to connect to and communicate with a LAN. For some dial-up services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls. However it may sometimes be necessary to allow NetBIOS packets to pass through to the WAN in order to find a computer on the WAN.
Select this check box to forward NetBIOS packets from the LAN to the WAN and from the WAN to the LAN.
Clear this check box to block all NetBIOS packets going from the LAN to the WAN and from the WAN to the LAN.
88
P-791R v2 User’s Guide
Page 89
Table 19 LAN > IP > Advanced Setup (continued)
LABEL DESCRIPTION
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.

6.4 DHCP Setup

Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN.
Figure 36 LAN > DHCP Setup
Chapter 6 LAN Setup
The following table describes the labels in this screen.
Table 20 LAN > DHCP Setup
LABEL DESCRIPTION
DHCP Setup
DHCP Select what type of DHCP services the ZyXEL Device provides to the network.
Choices are: None - the ZyXEL Device does not provide any DHCP services. There is
already a DHCP server on the network. Relay - the ZyXEL Device routes DHCP requests to the DHCP server. There
may be a DHCP server on another network. Server - the ZyXEL Device assigns IP addresses and provides subnet mask,
gateway, and DNS server information to the network. The ZyXEL Device is the DHCP server for the network.
IP Pool Starting Address
Pool Size This field is enabled if the ZyXEL Device is a Server. Enter the size of, or the
Remote DHCP Server
DNS Server
DNS Servers Assigned by DHCP Server
This field is enabled if the ZyXEL Device is a Server. Enter the first of the contiguous addresses in the IP address pool.
number of addresses in, the IP address pool.
This field is enabled if the ZyXEL Device is a Relay. Enter the IP address of the DHCP server to which the ZyXEL Device should route requests.
The ZyXEL Device passes a DNS (Domain Name System) server IP address to the DHCP clients.
P-791R v2 User’s Guide
89
Page 90
Chapter 6 LAN Setup
Table 20 LAN > DHCP Setup (continued)
LABEL DESCRIPTION
Primary DNS Server Secondary DNS
Server
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to begin configuring this screen afresh.

6.5 LAN Client List

This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
This field is not available when you set DHCP to Relay. Enter the IP addresses of the DNS servers. The DNS servers are passed to the
DHCP clients along with the IP address and the subnet mask. If the fields are left as 0.0.0.0, the ZyXEL Device acts as a DNS proxy and
forwards the DHCP client’s DNS query to the real DNS server learned through IPCP and relays the response back to the computer.
Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network > LAN > Client List. The screen appears as shown.
Figure 37 LAN > Client List
The following table describes the labels in this screen.
Table 21 LAN > Client List
LABEL DESCRIPTION
IP Address Enter the IP address that you want to assign to the computer on your LAN with
MAC Address Enter the MAC address of a computer on your LAN.
Add Click Add to add a static DHCP entry.
# This is the index number of the static IP table entry (row).
Status This field displays whether the client is connected to the ZyXEL Device.
Host Name This field displays the computer host name.
IP Address This field displays the IP address relative to the # field listed above.
the MAC address specified below. The IP address should be within the range of IP addresses you specified in the
DHCP Setup for the DHCP client.
90
P-791R v2 User’s Guide
Page 91
Table 21 LAN > Client List (continued)
LABEL DESCRIPTION
MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area
Reserve Select the check box(es) in each entry to have the ZyXEL Device always assign
Modify Click the modify icon to have the IP address field editable and change it.
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to begin configuring this screen afresh.
Refresh Click Refresh to reload the DHCP table.

6.6 LAN IP Alias

IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN network.
Chapter 6 LAN Setup
Network) is unique to your computer (six pairs of hexadecimal notation). A network interface card such as an Ethernet adapter has a hardwired address
that is assigned at the factory. This address follows an industry standard that ensures no other adapter has a similar address.
the selected entry(ies)’s IP address(es) to the corresponding MAC address(es) (and host name(s)). You can select up to 32 entries in this table.
" Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A, B, and C.
Figure 38 Physical Network & Partitioned Logical Networks
Use this screen to configure subnets on the LAN. Click Network > LAN > IP Alias. The screen appears as shown.
P-791R v2 User’s Guide
91
Page 92
Chapter 6 LAN Setup
Figure 39 LAN > IP Alias
The following table describes the labels in this screen.
Table 22 LAN > IP Alias
LABEL DESCRIPTION
IP Alias 1, 2 Select the check box to configure another LAN network for the ZyXEL Device.
IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet Mask Your ZyXEL Device will automatically calculate the subnet mask based on the IP
RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
RIP Version This field is enabled if RIP Direction is not None. The RIP Version field controls
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to begin configuring this screen afresh.
Alternatively, click the right mouse button to copy and/or paste the IP address.
address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the ZyXEL Device.
exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP- 2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
92
P-791R v2 User’s Guide
Page 93
CHAPTER 7
Network Address Translation
(NAT) Screens
This chapter discusses how to configure NAT on the ZyXEL Device.

7.1 NAT Overview

NAT (Network Address Translation, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
7.1.1 NAT Definitions
Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Global/local denotes the IP address of a host in a packet as the packet traverses a router, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side.
Note that inside/outside refers to the location of a host, while global/local refers to the IP address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host in a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side. The following table summarizes this information.
Table 23 NAT Definitions
ITEM DESCRIPTION
Inside This refers to the host on the LAN.
Outside This refers to the host on the WAN.
Local This refers to the packet address (source or destination) as the packet travels on the
Global This refers to the packet address (source or destination) as the packet travels on the
LAN.
WAN.
NAT never changes the IP address (either local or global) of an outside host.
P-791R v2 User’s Guide
93
Page 94
Chapter 7 Network Address Translation (NAT) Screens
7.1.2 What NAT Does
In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. Note that the IP address (either local or global) of an outside host is never changed.
The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. In addition, you can designate servers, for example, a web server and a telnet server, on your local network and make them accessible to the outside world. If you do not define any servers (for Many-to-One and Many-to-Many Overload mapping – see Table 24 on page 96), NAT offers the additional benefit of firewall protection. With no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).
7.1.3 How NAT Works
Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN. NAT maps private (local) IP addresses to globally unique ones required for communication with hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Figure 40 How NAT Works
7.1.4 NAT Application
The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN networks. More examples follow at the end of this chapter.
94
P-791R v2 User’s Guide
Page 95
Chapter 7 Network Address Translation (NAT) Screens
Figure 41 NAT Application With IP Alias
7.1.5 NAT Mapping Types
NAT supports five types of IP/port mapping. They are:
One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address.
Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).
Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps the multiple local IP addresses to shared global IP addresses.
Many-to-Many No Overload: maps each local IP address to a unique global IP address.
Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world.
Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT mapping types.
In Many-to-Many No Overload mode, the ZyXEL Device
P-791R v2 User’s Guide
95
Page 96
Chapter 7 Network Address Translation (NAT) Screens
The following table summarizes these types.
Table 24 NAT Mapping Types
TYPE IP MAPPING
One-to-One ILA1ÅÆ IGA1
Many-to-One (SUA/PAT) ILA1ÅÆ IGA1
ILA2ÅÆ IGA1 …
Many-to-Many Overload ILA1ÅÆ IGA1
ILA2ÅÆ IGA2 ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 …
Many-to-Many No Overload ILA1ÅÆ IGA1
ILA2ÅÆ IGA2 ILA3ÅÆ IGA3 …
Server Server 1 IPÅÆ IGA1
Server 2 IPÅÆ IGA1 Server 3 IPÅÆ IGA1

7.2 SUA (Single User Account) Versus NAT

SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server. The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in Table 24 on page 96.
• Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device.
• Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device.
7.2.1 SIP ALG
Some applications, such as SIP, cannot operate through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in their packets’ data payload.
Some NAT routers may include a SIP Application Layer Gateway (ALG). An Application Layer Gateway (ALG) manages a specific protocol (such as SIP, H.323 or FTP) at the application layer.
A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream.
When the ZyXEL Device registers with the SIP register server, the SIP ALG translates the ZyXEL Device’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if your ZyXEL Device is behind a SIP ALG.
96
P-791R v2 User’s Guide
Page 97

7.3 NAT General Setup

You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL Device. Click Network > NAT to open the following screen.
Figure 42 NAT > General
The following table describes the labels in this screen.
Table 25 NAT General
LABEL DESCRIPTION
Active Network Address Translation (NAT)
SUA Only Select this radio button if you have just one public WAN IP address for your ZyXEL
Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL
Max NAT/ Firewall Session Per User
Enable SIP ALG
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to reload the previous configuration for this screen.
Select this check box to enable NAT.
Device.
Device.
When computers use peer to peer applications, such as file sharing applications, they need to establish NAT sessions. If you do not limit the number of NAT sessions a single client can establish, this can result in all of the available NAT sessions being used. In this case, no additional NAT sessions can be established, and users may not be able to access the Internet.
If your network has a small number of clients using peer to peer applications, you can raise this number to ensure that their performance is not degraded by the number of NAT sessions they can establish. If your network has a large number of users using peer to peer applications, you can lower this number to ensure no single client is using all of the available NAT sessions.
Select this to make sure SIP (VoIP) works correctly with port-forwarding and port­triggering rules.
Chapter 7 Network Address Translation (NAT) Screens

7.4 Port Forwarding

A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
P-791R v2 User’s Guide
97
Page 98
Chapter 7 Network Address Translation (NAT) Screens
You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports.
Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP.
7.4.1 Default Server IP Address
In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in this screen.
" If you do not assign a Default Server IP address, the ZyXEL Device discards
all packets received for ports that are not specified here or in the remote management setup.
7.4.2 Port Forwarding: Services and Port Numbers
Use the Port Forwarding screen to forward incoming service requests to the server(s) on your local network.
The most often used port numbers are shown in Appendix F on page 321. Please refer to RFC 1700 for further information about port numbers.
7.4.3 Configuring Servers Behind Port Forwarding (Example)
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of
192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet.
98
P-791R v2 User’s Guide
Page 99
Chapter 7 Network Address Translation (NAT) Screens
Figure 43 Multiple Servers Behind NAT Example

7.5 Configuring Port Forwarding

" The Port Forwarding screen is available when you select SUA Only in the
NAT > General screen or when you edit a server mapping set with Full Feature NAT.
" If you do not assign a Default Server IP address, the ZyXEL Device discards
all packets received for ports that are not specified here or in the remote management setup.
Click Network > NAT > Port Forwarding to open the following screen.
See Appendix F on page 321 for port numbers commonly used for particular services.
Figure 44 NAT > Port Forwarding
P-791R v2 User’s Guide
99
Page 100
Chapter 7 Network Address Translation (NAT) Screens
The following table describes the fields in this screen.
Table 26 NAT > Port Forwarding
LABEL DESCRIPTION
Default Server Setup
Default Server In addition to the servers for specified services, NAT supports a default server. A
default server receives packets from ports that are not specified in this screen. If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
Port Forwarding
Service Name Select a service from the drop-down list box or select User define to go to the
Rule Setup screen and define your own service and its forwarding actions.
Server IP Address
Add Click this button to add a rule to the table below.
# This is the rule index number (read-only).
Active Click this check box to enable the rule.
Service Name This is a service’s name.
Start Port This is the first port number that identifies a service.
End Port This is the last port number that identifies a service.
Server IP Address
Modify Click the edit icon to go to the screen where you can edit the port forwarding rule.
Apply Click Apply to save your changes back to the ZyXEL Device.
Cancel Click Cancel to return to the previous configuration.
Enter the IP address of the server for the specified service.
This is the server’s IP address.
Click the delete icon to delete an existing port forwarding rule. Note that subsequent rules move up by one when you take this action.
7.5.1 Port Forwarding Rule Edit
Use this screen to edit a port forwarding rule. Click the rule’s edit icon in the Port Forwarding screen to display the screen shown next.
Figure 45 NAT > Port Forwarding > Edit
100
P-791R v2 User’s Guide
Loading...