Page 1
P-870H/HW Series
VDSL2 4 port gateway/802.11bg Wireless VDSL2 4 port
gateway
Default Login Details
IP Address http://192.168.1.1
User Name admin
Password 1234
Firmware Version 1.0
Edition 1, 9/2010
www.zyxel.com
www.zyxel.com
Copyright © 2010
ZyXEL Communications Corporation
Page 2
Page 3
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Zy XEL Device using
the Web Configurator.
Related Documentation
•Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It
contains information on setting up your network and configuring for Internet
access.
• Support Disc
Refer to the included CD for support documents.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Need More Help?
More help is available at www.zyx el.com.
P-870H/HW Series User’s Guide
3
Page 4
About This User's Guide
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then c o ntact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
P-870H/HW Series User’s Guide
Page 5
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other th ings you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-870H/HW Series may be referred to as the “ZyXEL Device”, the “device”,
the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
P-870H/HW Series User’s Guide
5
Page 6
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Z yXEL Device
icon is not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
P-870H/HW Series User’s Guide
Page 7
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when using
the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
Your product is marked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical
and electronic products should not be mixed with general waste. Used electrical and
electronic equipment should be treated separately.
P-870H/HW Series User’s Guide
7
Page 8
Safety Warnings
8
P-870H/HW Series User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction ............................................................................................................................19
Introducing the ZyXEL Device ...................................................................................................21
Tutorials ..................................................................................................................................... 27
Introducing the Web Configurator .............................................................................................. 37
Status Screens .......................................................................................................................... 43
Network ...................................................................................................................................53
WAN Setup ............................ ............................................. ... .... ... ... ... ... .... ................................ 55
LAN Setup .................................................................................................................................77
Wireless LAN ............................ ... .... ... ... ............................................. ... .... ... ... ... .... ................... 85
Network Address Translation (NAT) .........................................................................................117
Security .................................................................................................................................131
MAC Filter ................................................................................................................................ 133
Firewall .................................................................................................................................... 137
Certificate ................................................................................................................................ 143
Advanced ..............................................................................................................................155
Static Route ............................................................................................................................. 157
Policy Forwarding .................................................................................................................... 161
RIP ............................... .................... ................... ................... .................... ..............................165
Quality of Service (QoS) ............................................................................ ... ... ... ..................... 167
Dynamic DNS Setup ................................................................................................................ 181
Remote Management ..............................................................................................................183
Universal Plug-and-Play (UPnP) ............................................................................................. 189
Parental Control .......................................................................................................................203
Interface Group ........................................................................................................................207
Maintenance, Troubleshooting and Specifications ..........................................................213
System Settings ........... ............................................. .... ... ... ... .... ... ........................................... 215
Logs ........................................................................................................................................219
Tools ........................................................................................................................................ 223
Diagnostic .................................... ....................................................... ..................................... 231
Troubleshooting ..................................................... .................................................................. 235
Product Specifications ............................................................................................................. 241
Appendices and Index .........................................................................................................247
P-870H/HW Series User’s Guide
9
Page 10
Contents Overview
10
P-870H/HW Series User’s Guide
Page 11
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 19
Chapter 1
Introducing the ZyXEL Device...............................................................................................21
1.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 21
1.2 Ways to Manage the ZyXEL Device ................... .... ... ... ... .... ... ............................................. 21
1.3 Good Habits for Managing the ZyXEL Device .....................................................................22
1.4 Applications for the ZyXEL Device ...................................................................................... 22
1.4.1 Internet Access ................................................ ... ... .... ............................................. ...22
1.5 LEDs (Lights) ......................... .... ... ... ............................................. ... .... ... ... ... .... ... ................ 24
1.6 The RESET Button ............................. ... .... ... ... ............................................. .... ... ... ... ... ....... 25
1.6.1 Using the Reset Button ............. ... .... ... ... .................................................................... 26
1.7 The WPS WLAN Button ............................................................................................... .... ... 26
1.7.1 Turn the Wireless LAN Off or On ............................................................................... 26
1.7.2 Activate WPS ...... ... ... ... .... ... ... ... ............................................. .... ... ... ..........................26
Chapter 2
Tutorials...................................................................................................................................27
2.1 How to Set up a Wireless Network ...................................................................................... 27
2.1.1 Example Parameters ........................... ... ... .... ... ... ... .... ... ............................................. 27
2.1.2 Configuring the AP ....... .... ... ... ... ... .... .......................................................................... 27
2.1.3 Configuring the Wireless Client .................................................................................. 30
Chapter 3
Introducing the Web Configurator ........................................................................................37
3.1 Web Configurator Overview ................................................................................................. 37
3.1.1 Accessing the Web Configurator ................................................................................ 37
3.2 Web Configurator Main Screen ........................................................................................... 38
P-870H/HW Series User’s Guide
11
Page 12
Table of Contents
3.2.1 Navigation Panel .......... .... ... ... ... ................................................................................. 39
3.2.2 Main Window .......................... ... ............................................. .... ... ... ... .... ... ... .............41
3.2.3 Status Bar ............................................... ... .............................................. ... ................ 41
Chapter 4
Status Screens........................................................................................................................43
4.1 Status Screen ............................... ... ... ... .... ... ... ... .............................................. ... ... ... .......... 43
4.1.1 WAN Service Statistics ............................................................................................... 47
4.1.2 Route Info ..................... .... ... ... ... ... .... ............................................. ... ... .... ... ... ... ..........48
4.1.3 WLAN Station List ............................................................................... .... ... ... ............. 49
4.1.4 LAN Statistics ............................ ... .... ... ... ... .............................................. ... ... ... ... ....... 50
4.1.5 Client List ............................................................................................ .... ... ... ... ..........51
Part II: Network....................................................................................... 53
Chapter 5
WAN Setup...............................................................................................................................55
5.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 55
5.1.1 What Yo u Can Do in this Chapter .............................................................................. 55
5.2 What You Need to Know .. ....................................................................................................56
5.3 Before You Begin ....................................................................................................... .......... 56
5.4 The Layer 2 Interface Screen .............................................................................................. 56
5.4.1 Layer 2 Interface Configuration ........................................ ... ... .... ... ............................. 58
5.5 The Internet Connection Screen .......................................................................................... 59
5.5.1 WAN Connection Configuration ................................................................................. 60
5.6 Technical Reference .................. ... ... ............................................. ... .... ... ... ... .... ... ... ... ... ....... 71
Chapter 6
LAN Setup................................................................................................................................77
6.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 77
6.1.1 What Yo u Can Do in this Chapter .............................................................................. 77
6.2 What You Need To Know ..................................................................................................... 78
6.3 The LAN IP Screen ..............................................................................................................79
6.4 Technical Reference .................. ... ... ............................................. ... .... ... ... ... .... ... ... ... ... ....... 81
Chapter 7
Wireless LAN...........................................................................................................................85
12
7.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 85
7.1.1 What Yo u Can Do in this Chapter .............................................................................. 85
7.2 What You Need to Know .. ....................................................................................................86
7.3 Before You Begin ....................................................................................................... .......... 88
P-870H/HW Series User’s Guide
Page 13
Table of Contents
7.4 The General Screen ........................................................................................................... 89
7.4.1 No Security .......................... ... ............................................. ... .... ... ... ... .... ................... 90
7.4.2 WEP Encryption ..... ... ... .... ... ... .................................................................................... 91
7.4.3 WPA(2)-PSK .................................................................... ..........................................93
7.4.4 WPA(2) Authentication .............................. .... ... ... ... .... ... ... ... ... .................................... 94
7.4.5 MAC Filter ............................................................................................................. 95
7.4.6 Adding a New MAC Filtering Rule ......................................................................... 97
7.5 The More AP Screen .......................................................................................................... 97
7.5.1 More AP Edit .............................................................................................................. 98
7.6 The WPS Screen ............................... ... .... ... ... ... ................................................................. 98
7.7 The WPS Station Screen ..................................................................................................100
7.8 The WDS Screen ..............................................................................................................101
7.9 The Advanced Setup Screen ............................................................................................ 103
7.10 Technical Reference ........................................................................................................105
7.10.1 Wireless Network Overview ................................................................................... 105
7.10.2 Additional Wireless Terms ...................................................................................... 106
7.10.3 Wireless Security Overview ...................................................................................106
7.10.4 WiFi Protected Setup ............................................................................................. 109
Chapter 8
Network Address Translation (NAT)....................................................................................117
8.1 Overview ............... ............................................. .... ... ... ... .... ... ............................................117
8.1.1 What Yo u Can Do in this Chapter .............................................................................117
8.2 What You Need to Know .. ...................................................................................................117
8.3 The Port Forwarding Screen ..............................................................................................118
8.3.1 The Port Forwarding Edit Screen ............................................................................120
8.4 The Address Mapping Screen ........................................................................................... 121
8.4.1 The Address Mapping Rule Edit Screen .................................................................. 123
8.5 The Trigger Port Screen ..................................... .... ... ... ................................................ .....124
8.5.1 Trigger Port Configuration ....................................................................................... 126
8.6 The DMZ Host Screen ....................................................................................................... 128
8.7 The ALG Screen ................................ ... .... ... ... ... .... ... ... ... .... .............................................. 128
8.8 Technical Reference .................. ... ... ............................................. ... .... ... ... ... .... ... ... ... ... ..... 129
Part III: Security.................................................................................... 131
Chapter 9
MAC Filter..............................................................................................................................133
9.1 Overview ............. ............................................. ... .... ... ... ... .... .............................................. 133
9.1.1 What Yo u Can Do in this Chapter ............................................................................ 133
9.2 The MAC Filter Screen ......................................................................................................133
P-870H/HW Series User’s Guide
13
Page 14
Table of Contents
9.2.1 Creating MAC Filtering Rules ............................ ... .... ... ... ... ..................................... 135
Chapter 10
Firewall...................................................................................................................................137
10.1 Overview ......................................................................................................................... 137
10.1.1 What You Can Do in this Chapter .......................................................................... 137
10.2 What You Need to Know .................................................................................................. 137
10.3 The Firewall Screen ................. ... ... ... ... ................................................. ... ... .... ................. 138
10.3.1 Creating Incoming Firewall Rules ........................................................................ 140
Chapter 11
Certificate ..............................................................................................................................143
11.1 Overview ..........................................................................................................................143
11.1.1 What You Can Do in this Chapter ...... ... ............................................. .... ... ... ... ... .... . 143
11.2 What You Need to Know .................................................................................................. 143
11.3 The Local Certificates Screen .......................................................................................... 144
11.3.1 Create Certificate Request .................................................................................... 145
11.3.2 Import Certificate ................................................................................................... 146
11.3.3 Certificate Details .................................................................................................. 148
11 .3.4 Load Signed Certificat e ..... ... ... ... .... ... ... ... .... ................................................ ... ... .....150
11.4 The Trusted CA Screen ................................................................................................... 151
11.4.1 View Trusted CA Certificate ................................................................................... 153
11.4.2 Import Trusted CA Certificate .................................................................................154
Part IV: Advanced ................................................................................ 155
Chapter 12
Static Route...........................................................................................................................157
12.1 Overview ....................................................................................................................... 157
12.1.1 What You Can Do in this Chapter .......................................................................... 157
12.2 The Static Route Screen .................................................................................................. 158
12.2.1 Static Route Edit ................................................................................................... 159
Chapter 13
Policy Forwarding.................................................................................................................161
13.1 Overview ....................................................................................................................... 161
13.1.1 What You Can Do in this Chapter .......................................................................... 161
13.2 The Static Route Screen .................................................................................................. 161
13.2.1 Policy Forwarding Setup ...................................................................................... 162
Chapter 14
RIP..........................................................................................................................................165
14
P-870H/HW Series User’s Guide
Page 15
Table of Contents
14.1 Overview ....................................................................................................................... 165
14.1.1 What You Can Do in this Chapter .......................................................................... 165
14.2 The RIP Screen ... ... .... ... ... ... .... ... ................................................ ... .... ... ........................... 165
Chapter 15
Quality of Service (QoS).......................................................................................................167
15.1 Overview ......................................................................................................................... 167
15.1.1 What You Can Do in this Chapter .......................................................................... 167
15.2 What You Need to Know .................................................................................................. 168
15.3 The Quality of Service General Screen .......................................................................... 168
15.4 The Queue Setup Screen ................................................................................................ 170
15.4.1 Adding a QoS Queue ............................................................................................ 171
15.5 The Class Setup Screen ................................................................................................ 172
15.5.1 QoS Class Edit ...................................................................................................... 174
15.6 The QoS Monitor Screen ................................................................................................ 178
15.7 Technical Reference ........................................................................................................ 179
Chapter 16
Dynamic DNS Setup .............................................................................................................181
16.1 Overview ......................................................................................................................... 181
16.1.1 What You Can Do in this Chapter .......................................................................... 181
16.2 What You Need To Know ................................................................................................. 181
16.3 The Dynamic DNS Screen ................................................ ... ... ... ... .... ... ... ... .... ... ... ........... 1 82
Chapter 17
Remote Management............................................................................................................183
17.1 Overview .......................................................................................................................... 183
17.1.1 What You Can Do in this Chapter .......................................................................... 183
17.2 The TR-069 Screen .........................................................................................................183
17.3 The TR-064 Screen .........................................................................................................185
17.4 The Service Control Screen ............................................................................................ 186
17.5 The IP Address Screen ................................................................................................... 187
17.5.1 Adding an IP Address ............................................................................................188
Chapter 18
Universal Plug-and-Play (UPnP)..........................................................................................189
18.1 Overview ......................................................................................................................... 189
18.1.1 What You Can Do in this Chapter .......................................................................... 189
18.2 What You Need to Know .................................................................................................. 189
18.3 The UPnP Screen ............................................................................................................190
18.4 Installing UPnP in Windows Example .............................................................................. 191
18.5 Using UPnP in Windows XP Example ............................................................................. 195
P-870H/HW Series User’s Guide
15
Page 16
Table of Contents
Chapter 19
Parental Control....................................................................................................................203
19.1 Overview .......................................................................................................................... 203
19.1.1 What You Can Do in this Chapter .......................................................................... 203
19.2 The Time Restriction Screen ........................................................................................... 203
19.2.1 Adding a Schedule ................................................................................................. 204
19.3 The URL Filter Screen .....................................................................................................205
19.3.1 Adding URL Filter ................................................................................................... 206
Chapter 20
Interface Group.....................................................................................................................207
20.1 Overview .......................................................................................................................... 207
20.1.1 What You Can Do in this Chapter .......................................................................... 207
20.2 The Interface Group Screen ............................................................................................ 207
20.2.1 Interface Group Configuration ................................................................................208
20.2.2 Interface Grouping Criteria .....................................................................................210
Part V: Maintenance, Troubleshooting and Specifications.............. 213
Chapter 21
System Settings....................................................................................................................215
21.1 Overview .......................................................................................................................... 215
21.1.1 What You Can Do in this Chapter .......................................................................... 215
21.2 The General Screen ........................................................................................................215
21.3 The Time Setting Screen ................................................................................................ 216
Chapter 22
Logs ......................................................................................................................................219
22.1 Overview ......................................................................................................................... 219
22.1.1 What You Can Do in this Chapter .......................................................................... 219
22.2 The View Log Screen ...................................................................................................... 219
22.3 The Log Settings Screen ..... .... ... ...... ... .... ........................................................................ 220
Chapter 23
Tools.......................................................................................................................................223
23.1 Overview .......................................................................................................................... 223
23.1.1 What You Can Do in this Chapter .......................................................................... 223
23.2 The Firmware Screen ...................................................................................................... 224
23.3 The Configuration Screen ................................................................................................ 226
23.4 The Restart Screen .........................................................................................................228
16
P-870H/HW Series User’s Guide
Page 17
Table of Contents
Chapter 24
Diagnostic..............................................................................................................................231
24.1 Overview .......................................................................................................................... 231
24.1.1 What You Can Do in this Chapter .......................................................................... 231
24.2 What You Need to Know .................................................................................................. 231
24.3 The General Diagnostic Screen ...................................................................................... 232
24.4 The 802.1ag Screen ........................................................................................................233
Chapter 25
Troubleshooting....................................................................................................................235
25.1 Power, Hardware Connections, and LEDs .............................. ... ... .... ... ... ... .... ... ... ... ........235
25.2 ZyXEL Device Access and Login .................................................................................... 236
25.3 Internet Access ................................................................................................................ 237
Chapter 26
Product Specifications.........................................................................................................241
26.1 Hardware Specifications ..................................................................................................241
26.2 Firmware Specifications ...................................................................................................241
26.3 Wireless Features ............................................................................................................244
Part VI: Appendices and Index ........................................................... 247
Appendix A Setting Up Your Computer’s IP Address...........................................................249
Appendix B Pop-up Windows, JavaScripts and Java Permissions......................................279
Appendix C IP Addresses and Subnetting...........................................................................289
Appendix D Wireless LANs..................................................................................................301
Appendix E Common Services.............................................................................................317
Appendix F Legal Information ..............................................................................................321
Index.......................................................................................................................................325
P-870H/HW Series User’s Guide
17
Page 18
Table of Contents
18
P-870H/HW Series User’s Guide
Page 19
PART I
Introduction
Introducing the ZyXEL Device (21)
Tutorials (27)
Introducing the Web Configurator (37)
Status Screens (43)
19
Page 20
20
Page 21
CHAPTER 1
Introducing the ZyXEL Device
This chapter introduces the main applications and features of the Z yXEL Device. It
also introduces the ways you can manage the ZyXEL Device.
1.1 Overview
The ZyXEL Device is a VDSL2 gateway that allows super-fast, secure Internet
access.
you can use Quality of Service (QoS) to efficiently manage tr affic on y our network
by giving priority to certain types of traffic and/or to particular computers.
Please refer to the following description of the product name format.
• “H” denotes an integrated 4-port hu b (swi tch).
• “W” denotes wireless functionality. There is an embedded mini-PCI module for
IEEE 802.11g wireless LAN connectivity.
Only use firmware for your ZyXEL Device’s specific model. Refer
to the label on the bottom of your ZyXEL Device.
• Models ending in “1”, for example P-870HW-51a v2, denote a device that works
over the analog telephone system, POTS (Plain Old Telephone Service). Models
ending in “3”, for example P-870H-53a v2, denote a device that works over
ISDN (Integrated Services Digital Network) or T-ISDN (UR-2).
See Chapter 26 on page 241 for a full list of features.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
• Web Configur ator. This is recommended for everyday management of the ZyXEL
Device using a (supported) web browser.
P-870H/HW Series User’s Guide
21
Page 22
Chapter 1 Introducing the ZyXEL Device
Internet
DSL
LAN
• SNMP. The device can be monitored by an SNMP manager. See the SNMP
chapter in this User’s Guide.
• TR-069. This is an auto-configuration server used to remotely configure your
device.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to
manage the ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
ZyXEL Device to its factory default settings . If yo u backed up an earlier
configuration file, you would not have to totally re-configure the ZyXEL Device.
You could simply restore your last configuration.
1.4 Applications for the ZyXEL Device
Here are some example uses for which the ZyXEL Device is well suited.
1.4.1 Internet Access
Your ZyXEL Device provides shared Internet access by connecting the DSL port to
the DSL or MODEM jack on a splitter or your telephone jack. Computers can
connect to the ZyXEL Device’s LAN ports (or wirelessly).
Figure 1 ZyXEL Device’s Router Features
22
P-870H/HW Series User’s Guide
Page 23
Chapter 1 Introducing the ZyXEL Device
You can also configure IP filtering on the Z yXEL Devi ce for secure Internet access.
When the IP filter is on, all incoming traffic from the Internet to your network is
blocked by default unless it is initiated from y our network. This means that probes
from the outside to your network are not allowed, but you can safely browse the
Internet and download files.
P-870H/HW Series User’s Guide
23
Page 24
Chapter 1 Introducing the ZyXEL Device
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs. Not all LEDs are av ailable on
all models.
Figure 2 LEDs on the Top of the Device: P-870HW Series
Figure 3 LEDs on the Top of the Device: P-870H Series
24
P-870H/HW Series User’s Guide
Page 25
Chapter 1 Introducing the ZyXEL Device
None of the LEDs are on if the ZyXEL Device is not receiving power.
Table 1 LED Descriptions
LED
POWER Green On The ZyXEL Device is receiving power and ready for use.
ETHERNET
1-4
WLAN/
WPS
DSL Green On The DSL line is up.
INTERNET Green On The ZyXEL Device has an IP connection but no traffic.
COLO
R
Red On The ZyXEL Device detected an error while self-testing, or
Green On The ZyXEL Device has an Ethernet connection with a
Green On The wireless network is activated and is operating in IEEE
Orange Blinking The ZyXEL Device is setting up a WPS connection.
STATUS DESCRIPTION
Blinking The ZyXEL Device is self-testing.
there is a device malfunction.
Off The ZyXEL Device is not receiving power.
device on the Local Area Network (LAN).
Blinking The ZyXEL Device is sending/receiving data to /from the
LAN.
Off The ZyXEL Device does not have an Ethernet connection
with the LAN.
802.11b/g mode.
Blinking The ZyXEL Device is communicating with other wireless
clients.
Off The wireless network is not activated.
Blinking The ZyXEL Device is initializing the DSL line.
Off The DSL line is down.
Your device has a WAN IP address (either static or
assigned by a DHCP server), PPP negotiation was
successfully completed (if used) and the DSL connection
is up.
Red On The ZyXEL Device attempted to make an IP connection
but failed. Possible causes are no response from a DHCP
server, no PPPoE response, PPPoE authentication failed.
Off The ZyXEL Device does not have an IP connection.
Refer to the Quick Start Guide for information on hardware connections.
1.6 The RESET Button
If you forget your password or cannot access the Web Configurator, you will need
to use the RESET button at the back of the device to reload the factory-default
configuration file. This means that you will lose all configurations that you had
previously and the password will be reset to “1234”.
P-870H/HW Series User’s Guide
25
Page 26
Chapter 1 Introducing the ZyXEL Device
1.6.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking).
2 To set the device back to the factory default settings, press the RESET button for
ten seconds or until the POWER LED begins to blink and then release it. When the
POWER LED begins to blink, the defaults have been restored and the device
restarts.
1.7 The WPS WLAN Button (P-870HW Series only)
You can use the WPS WLAN ON/OFF button ( ) on the top of the device to
turn the wireless LAN off or on. You can also use it to activate WPS in order to
quickly set up a wireless network with strong security.
1.7.1 Turn the Wireless LAN Off or On
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN ON/OFF button for one second and release it. The WLAN/
WPS LED should change from on to off or vice versa.
1.7.2 Activate WPS
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN ON/OFF button for more than five seconds and release it.
Press the WPS button on another WPS -enabled device within range of the ZyXEL
Device. The WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS
connection with the wireless device.
Note: You must activate WPS in the ZyXEL Device and in another wireless device
within two minutes of each other. See Section 7.10.4 on page 109 for more
information.
26
P-870H/HW Series User’s Guide
Page 27
CHAPTER 2
Tutorials
This chapter describes how to set up a wireless network.
2.1 How to Set up a Wireless Network
This tutorial gives you examples of how to set up an access point and wireless
client for wireless communication using the following parameters. The wireless
clients can access the Internet th roug h an AP wirelessly.
2.1.1 Example Parameters
SSID SSID_Example3
Security WPA-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
802.11 mode IEEE 802.11b/g
An access point (AP) or wireless router is referred to as “AP” and a computer with
a wireless network card or USB/PCI adapter is referred to as “wireless client” here.
We use the ZyXEL Device web screens and M-302 utility screens as an example.
The screens may vary slightly for different models.
2.1.2 Configuring the AP
Follow the steps below to configure the wireless settings on your AP.
P-870H/HW Series User’s Guide
27
Page 28
Chapter 2 Tutorials
1 Open the Network > Wireless LAN screen in the AP’s Web Configurator.
Figure 4 AP: Wireless LAN
2 Make sure the Active Wireless LAN check box is selected.
3 Enter “SSID_Example3” as the SSID and select a channel which is not used by
another AP.
4 Set security mode to WPA-PSK and enter “ThisismyWPA-PSKpre-sharedkey” in
the Pre-Shared Key field. Click Apply.
28
P-870H/HW Series User’s Guide
Page 29
Chapter 2 Tutorials
5 Click the Advanced Setup tab and select 802.11b/g Mixed in the 802.11
Mode field. Click Apply.
Figure 5 AP: Wireless LAN > Advanced Setup
6 Open the Status screen.Verify your wireless and wireless security settings under
Device Information and check if the WLAN connection is up under Interface
Status.
Figure 6 AP: Status
P-870H/HW Series User’s Guide
29
Page 30
Chapter 2 Tutorials
C
AP
Internet
7 Click the WLAN Station List hyperlink in the AP’s Status screen. You can see if
any wireless client has connected to the AP.
Figure 7 AP: Status: WLAN Station List
2.1.3 Configuring the Wireless Client
This section describes how to connect the wireless client to a network.
2.1.3.1 Connecting to a Wireless LAN
The following sections show you how to join a wireless network using the ZyXEL
utility, as in the following diagram. The wireless client is labeled C and the access
point is labeled AP.
There are three ways to connect the client to an access point.
• Configure nothing and leave the wireless client to automatically scan for and
connect to any available network that has no wireless security configured.
• Manually connect to a network.
30
• Configure a profile to have the wireless client automatically connect to a specific
network or peer computer.
P-870H/HW Series User’s Guide
Page 31
Chapter 2 Tutorials
This example illustrates how to manually connect your wireless cli ent to an access
point (AP) which is configured for WPA-PSK security and connected to the
Internet. Before you connect to the access point, you must know its Service Set
IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is
“SSID_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”.
After you install the ZyXEL utility and then insert the wireless client, follow the
steps below to connect to a network using the Site Survey screen.
1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown
next.
Figure 8 ZyXEL Utility: Site Survey
2 The wireless client automatically searches for available wireless networks. Click
Scan if you want to search again. If no entry displays in the Available Network
List, that means there is no wireless network available with i n range. Make su re
the AP or peer computer is turned on or move the wireless client closer to the AP
or peer computer.
P-870H/HW Series User’s Guide
31
Page 32
Chapter 2 Tutorials
3 When you try to conn ec t to an A P wi th security configured, a window will pop up
prompting you to specify the security settings. Enter the pre-shared k ey and leave
the encryption type at the default setting.
Use the Next button to move on to the next screen. You can use the Back button
at any time to return to the previous screen, or the Exit button to return to the
Site Survey screen.
Figure 9 ZyXEL Utility: Security Settings
4 The Confirm Save window appears. Check your settings and click Save to
continue.
Figure 10 ZyXEL Utility: Confirm Save
32
P-870H/HW Series User’s Guide
Page 33
Chapter 2 Tutorials
5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless
network using your settings. When the wireless link is established, the ZyXEL
utility icon in the system tray turns green and the Link Info screen displays
details of the active connection. Check the network information in the Link Info
screen to verify that you have successfully connected to the selected network. If
the wireless client is not connected to a network, the fields in this screen remain
blank.
Figure 11 ZyXEL Utility: Link Info
6 Open your Internet browser and enter http://www.zyxel.com or the URL of any
other web site in the address bar. If you are able to access the web site, your
wireless connection is successfully configured.
If you cannot access the web site, try changing the encryption type in the
Security Settings screen, check the Troubleshooting section of this User's Guide
or contact your network administrator.
2.1.3.2 Creating and Using a Profile
A profile lets you automatically connect to the same wireless network every time
you use the wireless client. You can also configure different profiles for different
networks, for example if you connect a notebook computer to wireless networks at
home and at work.
This example illustrates how to set up a profile and connect the wireless client to
an access point configured for WPA-PSK security. In this example, the SSID is
“SSID_Example3”, the profile name is “PN_Example3” and the pre-shared key is
“ThisismyWPA-PSKpre-sharedkey”. You have chosen the profile name
“PN_Example3”.
P-870H/HW Series User’s Guide
33
Page 34
Chapter 2 Tutorials
1 Open the ZyXEL utility and click the Profile tab to open the screen shown next.
Click Add to configure a new profile.
Figure 12 ZyXEL Utility: Profile
2 The Add New Profile screen appears. The wireless client automatically searches
for available wireless networks, which are displayed in the Scan Info box. Click
on Scan if you want to search again. You can also configure your profile for a
wireless network that is not in the list.
Figure 13 ZyXEL Utility: Add New Profile
3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select
Infrastructure and either manually enter or select the AP's SSID in the Scan
Info table and click Select.
34
P-870H/HW Series User’s Guide
Page 35
Chapter 2 Tutorials
4 Choose the same encryption method as the AP to which you want to connect (In
this example, WPA-PSK).
Figure 14 ZyXEL Utility: Profile Security
5 This screen varies depending on the encryption method you selected in the
previous screen. Enter the pre-shared key and leave the encryption type at the
default setting.
Figure 15 ZyXEL Utility: Profile Encryption
6 In the next screen, leave both boxes checked.
Figure 16 Profile: Wireless Protocol Settings.
P-870H/HW Series User’s Guide
35
Page 36
Chapter 2 Tutorials
7 Verify the profile settings in the read-only screen. Click Save to save and go to the
next screen.
Figure 17 Profile: Confirm Save
8 Click Activate Now to use the new profile immediately. Otherwise, click the
Activate Later button.
If you clicked Activate Later, you can select the profile from the list in the Profile
screen and click Connect to activate it.
Note: Only one profile can be activated and used at any given time.
Figure 18 Profile: Activate
9 When you activate the new pro file , the ZyXEL utility returns to t he Link Info
screen while it connects to the AP using your settings. When the wireless link is
established, the ZyXEL utility icon in the system tray turns green and the Link
Info screen displays details of the active connection.
10 Open your Internet browser, enter http://www.zyxel.com or the URL of any other
web site in the address bar and press ENTER. If you are able to access the web
site, your new profile is successfully configured.
11 If you cannot access the Internet go back to the Profile screen, select the profile
you are using and click Edit. Check the details you entered previously. Also, refer
to the Troubleshooting section of this User's Guide or contact your network
administrator if necessary.
36
P-870H/HW Series User’s Guide
Page 37
CHAPTER 3
Introducing the Web
Configurator
This chapter describes how to access and navigate the Web Configurator.
3.1 Web Configurator Overview
The Web Configurator is an HTML-based management interface that allows easy
device setup and management via Internet browser. Use Internet Explorer 6.0 and
later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop -up windows from your device. W eb pop-up blocking is enabl ed
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
See Appendix B on page 279 if you need to make sure these functions are allowed
in Internet Explorer.
3.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick
Start Guide).
2 Launch your web browser.
3 Type "192.168.1.1" as the URL.
P-870H/HW Series User’s Guide
37
Page 38
Chapter 3 Introducing the Web Configurator
A
B
C
D
4 A password screen displays. Enter the default user name admin and default
password 1234.The password displays in non-readable characters. If you have
changed the password, enter your password and click Login. Click Cancel to
revert to the default password in the password field.
Figure 19 Password Screen
3.2 Web Configurator Main Screen
This guide uses the P-870HW-51a v2 screenshots as an example. The screens
may vary slightly for different ZyXEL Device models.
Figure 20 Main Screen
38
P-870H/HW Series User’s Guide
Page 39
Chapter 3 Introducing the Web Configurator
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - navigation panel
• C - main window
• D - status bar
3.2.1 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL
Device features. The following tables describe each menu item.
Table 2 Navigation Panel Summary
LINK TAB FUNCTION
Status This screen shows the ZyXEL Device’s general device and network
status information. Use this screen to access the statistics and
client list.
Network
WAN Layer 2
Interface
Internet
Connection
LAN IP Use this screen to configure LAN TCP/IP, DHCP and IP alias
Wireless LAN General Use this screen to configure the wireless LAN settings, WLAN
More AP Use this screen to configure multiple BSSs on the ZyXEL Device.
WPS Use this screen to enable WPS (Wi-Fi Protected Setup) and view
WPS Station Use this screen to use WPS to set up your wireless network.
WDS Use this screen to set up Wireless Distribution System links to
Advanced
Setup
NAT Port
Forwarding
Address
Mapping
Trigger Port Use this screen to change your ZyXEL Device’s port triggering
DMZ Host Use this screen to configure a default server which receives
ALG Use this screen to allow SIP sessions to pass through the ZyXEL
Use this screen to add or remove a DSL PTM (Packet Transfer
Mode) interface.
Use this screen to configure ISP parameters, WAN IP address
assignment, and other advanced properties.
settings.
authentication/security settings and MAC filtering rules.
the WPS status.
other access points.
Use this screen to configure the advanced wireless LAN settings.
Use this screen to make your local servers visible to the outside
world.
Use this screen to configure network address translation mapping
rules.
settings.
packets from ports that are not specified in the Port Forwarding
screen.
Device.
P-870H/HW Series User’s Guide
39
Page 40
Chapter 3 Introducing the Web Configurator
Table 2 Navigation Panel Summary
LINK TAB FUNCTION
Security
MAC Filter Use this screen to configure filtering rule(s) that blocks or allows
traffic according to its destination and/or source MAC address in
bridge mode.
Firewall Incoming This screen shows a summary of the IP filtering rules, and allows
you to add or remove an incoming IP filtering rule that allows
incoming traffic from the WAN.
Certificate Local
Certificates
Trusted CA Use this screen to view and manage the list of the trusted CAs.
Advanced
Static Route IP Static Route Use this screen to configure IP static routes to tell your device
Policy
Forwarding
RIP Use this screen to configure RIP (Routing Information Protocol)
QoS General Use this screen to enable QoS.
Queue Setup Use this screen to configure QoS q ueues.
Class Setup
Monitor Use this screen to view QoS packets statistics.
Dynamic DNS This screen allows you to use a static hostname alias for a
Remote
MGMT
UPnP General Use this screen to turn UPnP on or off.
Parental
Control
Interface
Group
Maintenance
System General Use this screen to configure your device’s name, domain name,
Logs View Log Use this screen to view the logs for the level that you selected.
TR069 Use this screen to configure the ZyXEL Device to be managed by
TR064 Use this screen to enable management via TR-064 on the LAN.
ServiceControl Use this screen to configure which services/protocols can access
IPAddress Use this screen to configure from which IP address(es) users can
Time
Restriction
URL Filter Use this screen to prevent users of your network from viewing
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Log Settings Use this screen to change your ZyXEL Device’s log settings.
Use this screen to view a summary list of certificates and manage
certificates and certification requests.
about networks beyond the directly connected remote nodes.
Use this screen to configure policy routing on the ZyXEL Device.
settings.
Use this screen to define a classifier.
dynamic IP address.
an ACS (Auto Configuration Server).
which ZyXEL Device interface.
manage the ZyXEL Device.
Use this screen to configure the days and times when the
restrictions are enforced.
inappropriate web content.
Use this screen to map a port to a PVC or bridge group.
management inactivity timeout and password.
40
P-870H/HW Series User’s Guide
Page 41
Chapter 3 Introducing the Web Configurator
Table 2 Navigation Panel Summary
LINK TAB FUNCTION
Tools Firmware Use this screen to upload firmware to your device.
Configuration Use this screen to backup and restore your device’s configuration
(settings) or reset the factory default settings.
Restart This screen allows you to reboot the ZyXEL Device without turning
the power off.
Diagnostic General Use this screen to test the connections to other devices.
802.1ag Use this screen to configure CFM (Connectivity Fault
Management) MD (maintenance domain) and MA (maintenance
association), perform connectivity tests and view test reports.
3.2.2 Main Window
The main window displays information and configuration fields. It is discussed in
the rest of this document.
Right after you log in, the Status screen is displayed. See Chapter 4 on page 43
for more information about the Status screen.
3.2.3 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration
has been updated.
P-870H/HW Series User’s Guide
41
Page 42
Chapter 3 Introducing the Web Configurator
42
P-870H/HW Series User’s Guide
Page 43
CHAPTER 4
Status Screens
Use the Status screens to look at the current status of the device, system
resources and interfaces (LAN and WAN). The Status screen also provides
detailed information from DHCP and statistics from traffic.
4.1 Status Screen
Click Status to open this screen.
Figure 21 Status Screen
P-870H/HW Series User’s Guide
43
Page 44
Chapter 4 Status Screens
Each field is described in the following table.
Table 3 Status Screen
LABEL DESCRIPTION
Refresh Interval Enter how often you want the ZyXEL Device to update this screen.
Apply Click this to update this screen immediately.
Device
Information
User Name This field displays the ZyXEL Device system name. It is used for
Model
Number
MAC
Address
Firmware
Version
DSL
Firmware
Version
WAN
Information
Mode This is the method of encapsulation used by your ISP.
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
LAN
Information
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
DHCP This field displays what DHCP services the ZyXEL Device is providing to
identification. Click this to go to the screen where you can change it.
This is the model name of your device.
This is the MAC (Media Access Control) or Ethernet address unique to
your ZyXEL Device.
This field displays the current version of the firmware inside the device.
It also shows the date the firmware version was created. Click this to go
to the screen where you can change it.
This field displays the current version of the device’s DSL modem code.
WAN.
This field displays the current subnet mask in the WAN.
LAN. Click this to go to the screen where you can change it.
This field displays the current subnet mask in the LAN.
the LAN. Choices are:
44
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP
addresses to other computers in the LAN.
Relay - The ZyXEL Device acts as a surrogate DHCP server and relays
DHCP requests and responses between the remote server and the
clients.
None - The ZyXEL Device is not providing any DHCP services to the
LAN.
Click this to go to the screen where you can change it.
WLAN
Information
Channel This is the channel number used by the ZyXEL Device now.
P-870H/HW Series User’s Guide
Page 45
Chapter 4 Status Screens
Table 3 Status Screen
LABEL DESCRIPTION
WPS Status This field displays the status of WPS (Wi-Fi Protected Setup). Click this
to go to the screen where you can change it.
WDS Status This field displays
• AP when WDS is disabled.
• Bridge when the ZyXEL Device functions as a wireless network
bridge only to use WDS (Wireless Distribution System) to establish
wireless links with other APs.
• AP+Bridge when WDS is enabled and the ZyXEL Device acts as a
bridge and access point simultaneously.
Click this to go to the screen where you can change it
AP Information
ESSID This is the descriptive name used to identify the ZyXEL Device in this
wireless network. Click this to go to the screen where you can change
it.
Status This shows the current status of the wireless network.
Security This shows the level of wireless security the ZyXEL Device is using in
this wireless network.
System Status
System
Uptime
Current
Date/Time
System
Mode
CPU Usage This field displays what percentage of the ZyXEL Device’s processing
Memory
Usage
Interface Status
Interface This column displays each interface the ZyXEL Device has.
This field displays how long the ZyXEL Device has been running since it
last started up. The ZyXEL Device starts up when you plug it in, when
you restart it (Maintenance > Tools > Restart), or when you reset it
(see Section 1.6 on page 25).
This field displays the current date and time in the ZyXEL Device. You
can change this in Maintenance > System > Time Setting.
This displays whether the ZyXEL Device is functioning as a router or a
bridge.
ability is currently used. When this percentage is close to 100%, the
ZyXEL Device is running at full load, and the throughput is not going to
improve anymore. If you want some applications to have more
throughput, you should turn off other applications (for example, using
QoS; see Chapter 15 on page 167).
This field displays what percentage of the ZyXEL Device’s memory is
currently used. Usually, this percentage should not increase much. If
memory usage does get close to 100%, the ZyXEL Device is probably
becoming unstable, and you should restart the device. See Section 23.4
on page 228, or turn off the device (unplug the power) for a few
seconds.
P-870H/HW Series User’s Guide
45
Page 46
Chapter 4 Status Screens
Table 3 Status Screen
LABEL DESCRIPTION
Status This field indicates whether or not the ZyXEL Device is using the
Rate For the DSL interface, it displays the downstream and upstream
More Status
WAN Service
Statistics
Route Info Click this link to view the internal routing table on the ZyXEL Device.
WLAN
Station List
LAN
Statistics
Client List Click this link to view current DHCP client information. See Section
interface.
For the DSL interface, this field displays LinkDown (line is down) or Up
(line is up or connected).
For the LAN interface, this field displays Up when the ZyXEL Device is
using the interface and NoLink when the line is disconnected.
For the WLAN interface, it displays Up when WLAN is enabled or
Disabled when WLAN is not active.
transmission rate.
For the LAN interface, this displays the port speed and duplex setting.
For the WLAN interface, it displays the maximum transmission rate.
Click this link to view packet specific statistics of the WAN
connection(s). See Section 4.1.1 on page 47.
See Section 4.1.2 on page 48.
Click this link to display the MAC address(es) of the wireless stations
that are currently associating with the ZyXEL Device. See Section 4.1.3
on page 49.
Click this link to view packet specific statistics on the LAN and WLAN
interfaces. See Section 4.1.4 on page 50.
4.1.5 on page 51.
46
P-870H/HW Series User’s Guide
Page 47
4.1.1 WAN Service Statistics
Click Status > WLAN Service Statistics to access this screen. Use this screen to
view the WAN statistics.
Figure 22 Status > WAN Service Statistics
Chapter 4 Status Screens
The following table describes the labels in this screen.
Table 4 Status > WAN Service Statistics
LABEL DESCRIPTION
Interface This shows the name of the WAN interface used by this connection.
The default name ptm0 indicates the DSL port. The last number
represents the index number of connections over the same PVC or the
VLAN ID number assigned to traffic sent through this connection.
Description This shows the descriptive name of this connection.
Received
Bytes This indicates the number of bytes received on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
interface.
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
interface.
Drops This indicates the number of outgoing packets dropped on this interface.
P-870H/HW Series User’s Guide
47
Page 48
Chapter 4 Status Screens
Table 4 Status > WAN Service Statistics (continued)
LABEL DESCRIPTION
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
4.1.2 Route Info
Routing is based on the destination address only and the ZyXEL Device takes the
shortest path to forward a packet. Click Status > Route Info to access this
screen. Use this screen to view the internal routing table on the ZyXEL Device.
Figure 23 Status > Route Info
Enter the time interval for refreshing statistics in this field.
Refresh Interval field.
The following table describes the labels in this screen.
Table 5 Status > Route Info
LABEL DESCRIPTION
Destination This indicates the destination IP address of this route.
Gateway This indicates the IP address of the gateway that helps forward this route’s
traffic.
Subnet
Mask
Flag This indicates the route status.
This indicates the destination subnet mask of this route.
Up: The route is up.
!(Reject): The route is blocked and will force a route lookup to fail.
Gateway: The route uses a gateway to forward traffic.
Host: The target of the route is a host.
Reinstate: The route is reinstated for dynamic routing.
Dynamic (redirect): The route is dynamically installed by a routing daemon
or redirect
Modified (redirect): The route is modified from a routing daemon or
redirect.
48
P-870H/HW Series User’s Guide
Page 49
Table 5 Status > Route Info (continued)
LABEL DESCRIPTION
Metric The metric represents the "cost of transmission". A router determines the
best route for transmission by choosing a path with the lowest "cost". The
smaller the number, the lower the "cost".
Service This indicates the name of the service used to forward the route.
Interface This indicates the name of the interface through which the route is
forwarded.
br0 indicates the LAN interface.
ptm0 indicates the WAN interface using IPoE or in bridge mode.
ppp0 indicates the WAN interface using PPPoE.
4.1.3 WLAN Station List
Click Status > WLAN Station List to access this screen. Use this screen to view
the wireless stations that are currently associated to the ZyXEL Device.
Figure 24 Status > WLAN Station List
Chapter 4 Status Screens
The following table describes the labels in this screen.
Table 6 Status > WLAN Station List
LABEL DESCRIPTION
MAC This field shows the MAC (Media Access Control) address of an associated
wireless station.
SSID This field shows the SSID to which the wireless station is connected.
Interface This field shows the wireless interface to which the wireless station is
connected.
Refresh
Interval
P-870H/HW Series User’s Guide
Enter the time interval for refreshing statistics in this field.
49
Page 50
Chapter 4 Status Screens
Table 6 Status > WLAN Station List (continued)
LABEL DESCRIPTION
Set Interval Click this button to apply the new poll interv al y ou entered in the Refresh
Interval field.
Stop Click Stop to stop refreshing statistics.
4.1.4 LAN Statistics
Click Status > LAN Statistics to access this screen. Use this screen to view the
LAN statistics.
Figure 25 Status > LAN Statistics
50
The following table describes the labels in this screen.
Table 7 Status > LAN Statistics
LABEL DESCRIPTION
Interface This shows the LAN or WLAN interface. eth0~3 represent the physical
Ethernet ports 1~ 4.
Received
Bytes This indicates the number of bytes received on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
interface.
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
interface.
P-870H/HW Series User’s Guide
Page 51
Table 7 Status > LAN Statistics (continued)
LABEL DESCRIPTION
Drops This indicates the number of outgoing packets dropped on this interface.
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
4.1.5 Client List
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. You can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the TCP/IP configur ation for the clients. If DHCP
service is disabled, you must have another DHCP server on your LAN, or else the
computer must be manually configured.
Chapter 4 Status Screens
Enter the time interval for refreshing statistics in this field.
Refresh Interval field.
Click Status > Client List to open the following screen. The read-only DHCP table
shows current DHCP client information (including IP Address, Host Name and
MAC Address) of all network clients using the ZyXEL Device’s DHCP server.
Figure 26 Status > Client List
The following table describes the labels in this screen.
Table 8 Status > Client List
LABEL DESCRIPTION
Host Name This indicates the computer host name.
MAC Address Every Ethernet device has a unique MAC (Media Access Control)
address. The MAC address is assigned at the factory and consists of six
pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
This indicates the MAC address of the client computer.
IP Address This indicates the IP address assigned to this client computer.
P-870H/HW Series User’s Guide
51
Page 52
Chapter 4 Status Screens
52
P-870H/HW Series User’s Guide
Page 53
PART II
Network
WAN Setup (55)
LAN Setup (77)
Wireless LAN (85)
Network Address Translation (NAT) (117)
53
Page 54
54
Page 55
CHAPTER 5
Internet
WAN
LAN
WAN Setup
5.1 Overview
This chapter discusses the ZyXEL Device’s WAN screens. Use these screens to
configure your ZyXEL Device for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another
network or the Internet. It connects your private networks (such as a LAN (Local
Area Network) and other networks, so that a computer in one location can
communicate with computers in other locations.
Figure 27 LAN and WAN
• See Section 5.6 on page 71 for advanced technical information on WA N.
5.1.1 What You Can Do in this Chapter
•The Layer 2 Interface screen lets you view, remove or add a DSL PTM
interface (Section 5.4 on page 56).
•The Internet Connection screen lets you view and configure the WAN settings
on the ZyXEL Device for Internet access (Section 5.5 on page 59).
P-870H/HW Series User’s Guide
55
Page 56
Chapter 5 WAN Setup
5.2 What You Need to Know
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower
layer protocol. To set up a WAN connection to the Internet, you need to use the
same encapsulation method used by your ISP (Internet Service Provider). If your
ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA,
they should also provide a username and password (and service name) for user
authentication.
WAN IP Address
The WAN IP address is an IP address for the ZyXEL Device, which makes it
accessible from an outside network. It is used by the ZyXEL Device to
communicate with other devices in other networks. It can be static (fixed) or
dynamically assigned by the ISP each time the ZyXEL Device tries to access the
Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the
subnet mask and DNS server IP address(es) (and a gateway IP add ress if you use
the Ethernet or ENET ENCAP encapsulation method).
PTM
Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2
standard. In PTM, packets are encapsulated directly in the High-level Data Link
Control (HDLC) frames. It is des igned to provide a low-ov erhead, tr ansparent w ay
of transporting packets over DSL links, as an alternative to ATM.
5.3 Before You Begin
You need to know your Internet access settings such as encapsulation and W AN IP
address. Get this information from your ISP.
5.4 The Layer 2 Interface Screen
56
The ZyXEL Device must have a DSL PTM interface to allow users to use the DSL
port to access the Internet.
P-870H/HW Series User’s Guide
Page 57
Chapter 5 WAN Setup
Note: At the time of writing, you can have only one DSL PTM interface on the ZyXEL
Device.
Figure 28 Layer 2 Interface
The following table describes the fields in this screen.
Table 9 Layer 2 Interface
LABEL DESCRIPTION
Interface This is the name of the interface.
Connection Mode This shows the connection mode of the DSL interface.
QoS This shows whether QoS (Quality of Service) is enabled on the ZyXEL
Device.
Remove Click the Remove button to delete this interface from the ZyXEL
Device. A window displays asking you to confirm that you want to
delete the interface.
You cannot remov e the DSL interface when a service is associated with
it.
Add Click this button to create a new DSL interface.
P-870H/HW Series User’s Guide
57
Page 58
Chapter 5 WAN Setup
5.4.1 Layer 2 Interface Configuration
Click the Add button in the Layer 2 Interface screen to open the following
screen. Use this screen to create a new DSL PTM interface. At the time of writing,
you can configure only one DSL interface on the ZyXEL Device.
Figure 29 DSL PTM Interface Configuration
The following table describes the fields in this screen.
Table 10 DSL PTM Interface Configuration
LABEL DESCRIPTION
Select
Connection Mode
Enable Quality Of
Service
Back Click this button to return to the previous screen without saving any
Apply/Save Click this button to save your changes and go back to the previous
Select MSC Mode to allow multiple WAN services over a single virtual
circuit.
Select VLAN MUX Mode to allow multiplexing of multiple protocols
over a single virtual circuit. You need to assign a VLAN ID and priority
level to traffic through each WAN connection.
Select this option to activate QoS (Quality of Service) on this interface
to group and prioritize traffic. Traffic is grouped according to the VLAN
group.
The QoS setting applies to all WAN connections over the same PVC.
changes.
screen.
58
P-870H/HW Series User’s Guide
Page 59
5.5 The Internet Connection Screen
Use this screen to change your ZyXEL Device’s WAN settings. Click Network >
WAN > Internet Connection. The summary table shows you the configured
WAN connection(s) on the ZyXEL Device.
To use NAT, firewall or IGMP proxy in the ZyXEL Device, you need to configure a
WAN connection with PPPoE or IPoE.
Note: When the DSL PTM interface is in VLAN MUX mode, you can configure up to
eight connections over a DSL PTM interface on the ZyXEL Device. All WAN
connections share one MAC address.
When the DSL PTM interface is in MSC mode, you can have up to four WAN
connections and only one bridge connection. Each WAN connection has its
own MAC address.
Figure 30 Internet Connection
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 11 Internet Connection
LABEL DESCRIPTION
Interface This shows the name of the interface used by this connection.
The default name ptm0_ or ppp0_ indicates the DSL port. The last
number represents the index number of connections over the same
PVC or the VLAN ID number assigned to traffic sent through this
connection.
Description This is the service name of this connection.
0 and 1 are the default VPI and VCI numbers. The last number
represents the index number of connections over the same PVC or the
VLAN ID number assigned to traffic sent through this connection.
Type This shows the method of encapsulation used by this connection.
Rate This shows the maximum data rate (in Kbps) allowed for traffic sent
through this connection. This displays N/A when there is no limit on
transmission rate.
P-870H/HW Series User’s Guide
59
Page 60
Chapter 5 WAN Setup
Table 11 Internet Connection
LABEL DESCRIPTION
Vlan8021p This indicates the 802.1P priority level assigned to traffic sent through
VlanMuxId This indicates the VLAN ID number assigned to traffic sent through
ConnId This shows the index number of each connection.
IGMP This shows whether IGMP (Internet Group Multicast Protocol) is
NAT This shows whether NAT is activated or not for this interface. NAT is
Firewall This shows whether the firewall is activated or not for this connection.
Modify Click the Edit icon to configure the WAN connection.
Add Click Add to create a new connection.
this connection. This displays N/A when there is no priority level
assigned.
this connection. This displays N/A when there is no VLAN ID number
assigned.
activated or not for this connection. IGMP is not available when the
connection uses the bridging service.
not available when the connection uses the bridging service.
The firewall is not available when the connection uses the bridging
service.
Click the Remove icon to delete the WAN connection.
5.5.1 WAN Connection Configuration
Click the Edit or Add button in the WAN Service screen to configure a WAN
connection.
5.5.1.1 WAN Interface
This screen displays when you add a new WAN connection.
Figure 31 WAN Configuration: WAN Interface
60
P-870H/HW Series User’s Guide
Page 61
The following table describes the labels in this screen.
Table 12 WAN Configuration: WAN Interface
LABEL DESCRIPTION
Select a layer 2
interface for this
service
Back Click this button to return to the previous screen.
Next Click this button to continue.
5.5.1.2 Service Type
Figure 32 WAN Configuration: Service Type
Chapter 5 WAN Setup
Select ptm0 to use the DSL port as the WAN port for this connection.
The following table describes the labels in this screen.
Table 13 WAN Configuration: Service Type
LABEL DESCRIPTION
Select WAN
service type
Enter Service
Description
Rate Limit Enter the maximum transmission rate in Kbps for traffic sent through the
Tag VLAN ID
for egress
packets
P-870H/HW Series User’s Guide
Select the method of encapsulation used by your ISP.
Choices are PPP over Ethernet (PPPoE), IP over Ethernet and
Bridging.
Specify a name for this connection or use the automatically generated
one.
WAN connection. Otherwise, leave this field blank to disable the rate
limit.
Select this option to add the VLAN tag (specified below) to the outgoing
traffic through this connection.
This field is available when the PTM interface is in VLANMUX mode.
61
Page 62
Chapter 5 WAN Setup
Table 13 WAN Configuration: Service Type
LABEL DESCRIPTION
Enter 802.1P
Priority
Enter 802.1Q
VLAN ID
Back Click this button to return to the previous screen.
Next Click this button to continue.
IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into
a MAC-layer frame that contains bits to define class of service.
T ype the IEEE 802.1p priorit y level (from 0 to 7) to add to tr affic through
this connection. The greater the number, the higher the priority level.
This field is available when the PTM interface is in VLANMUX mode.
Type the VLAN ID number (from 1 to 4094) for traffic through this
connection.
This field is available when the PTM interface is in VLANMUX mode.
5.5.1.3 WAN IP Address and DNS Server
The screen differs by the encapsulation you selected in the previous scr een. See
Section 5.6 on page 71 for more information.
62
P-870H/HW Series User’s Guide
Page 63
Chapter 5 WAN Setup
PPPoE
This screen displays when you select PPP over Ethernet (PPPoE) in the WAN
Service Configuration screen.
Figure 33 WAN Configuration: PPPoE
The following table describes the labels in this screen.
Table 14 WAN Configuration: PPPoE
LABEL DESCRIPTION
PPP User Name Enter the user name exactly as your ISP assigned. If assigned a name
PPP Password Enter the password associated with the user name above.
PPPoE Service
Name
P-870H/HW Series User’s Guide
in the form user@domain where domain identifies a service name,
then enter both components exactly as given.
Type the name of your PPPoE service here.
63
Page 64
Chapter 5 WAN Setup
Table 14 WAN Configuration: PPPoE
LABEL DESCRIPTION
Authentication
Method
Enable Fullcone
NAT
Dial on Demand Select this check box when you do not want the connection up all the
Inactivity
Timeout
Use Static IPv4
Address
IPv4 Address Enter the static IP address provided by your ISP.
Enable PPP
Debug Mode
Bridge PPPoE
Frames Between
WAN and Local
Ports
The ZyXEL Device supports PAP (Password Authentication Protocol)
and CHAP (Challenge Handshake Authentication Protocol). CHAP is
more secure than PAP; however, PAP is readily available on more
platforms.
Use the drop-down list box to select an authentication protocol for
outgoing calls. Options are:
AUTO - Your ZyXEL Device accepts either CHAP or PAP when
requested by this remote node.
CHAP - Your ZyXEL Device accepts CHAP only.
PAP - Your ZyXEL Device accepts PAP only.
MSCHAP - Your ZyXEL Device accepts MSCHAP only. MS-CHAP is the
Microsoft version of the CHAP.
Select this option to enable full cone NAT on the ZyXEL Device.
time and specify an idle time-out in the Inactivity Timeout field.
Specify an idle time-out when you select Dial on Demand. The
default setting is 0, which means the Internet session will not timeout.
A static IPv4 address is a fixed IP that your ISP gives you. A dynamic
IP address is not fixed; the ISP assigns you a different one each time
you connect to the Internet. Select this if you do not have a dynamic
IP address.
Select this option to display PPP debugging messages on the console.
Select this option to forward PPPoE packets from the WAN port to the
LAN ports and from the LAN ports to the WAN port.
In addition to the ZyXEL Device's built-in PPPoE client, you can select
this to allow up to ten hosts on the LAN to use PPPoE client software
on their computers to connect to the ISP via the ZyXEL Device. Each
host can have a separate account and a public WAN IP address.
64
This is an alternative to NAT for application where NAT is not
appropriate.
Clear this if you do not need to allow hosts on the LAN to use PPPoE
client software on their computers to connect to the ISP.
Enable IGMP
Multicast Proxy
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this check box to have the ZyXEL Device act as an IGMP proxy
on this connection. This allows the ZyXEL Device to get subscribing
information and maintain a joined member list for each multicast
group. It can reduce multicast traffic significantly.
P-870H/HW Series User’s Guide
Page 65
Chapter 5 WAN Setup
IPoE
This screen displays when you select IP over Ethernet in the WAN Service
Configuration screen.
Figure 34 WAN Configuration: IPoE
The following table describes the labels in this screen.
Table 15 WAN Configuration: IPoE
LABEL DESCRIPTION
Obtain an IP
address
automatically
Enable DHCP
Option 60
Vendor Class
Identifier
Enable DHCP
Option 61
IAID Enter the Identity Association Identifier (IAID) of the ZyXEL Device.
P-870H/HW Series User’s Guide
A static IP address is a fixed IP that your ISP gives you. A dynamic IP
address is not fixed; the ISP assigns you a different one each time you
connect to the Internet. Select this if you have a dynamic IP address.
Select this to identify the vendor and functionality of the ZyXEL Device
in DHCP requests that the ZyXEL Device sends to a DHCP server when
getting a WAN IP address.
Enter the Vendor Class Identifier (Option 60), such as the type of the
hardware or firmware.
Select this to identify the ZyXEL Device in DHCP requests that the
ZyXEL Device sends to a DHCP server when getting a WAN IP address.
For example, the WAN connection index number.
65
Page 66
Chapter 5 WAN Setup
Table 15 WAN Configuration: IPoE
LABEL DESCRIPTION
DUID Type Select Other to enter any string that identifies the ZyXEL Device in
DUID Enter the DHCP Unique Identifier (DUID) of the ZyXEL Device.
Enterprise
number
Identifier Enter a unique identifier assigned by the vendor.
Enable DHCP
Option 125
Manufacturer
OUI
Product Class Enter the product class of the ZyXEL Device.
Model Name Enter the model name of the ZyXEL Device.
Serial Number Enter the serial number of the ZyXEL Device.
Use the following
Static IP address
WAN IP
Address
WAN Subnet
Mask
WAN gateway
IP Address
Back Click this button to return to the previous screen.
Next Click this button to continue.
the DUID field.
Select DUID-LL (DUID Based on Link-layer Address) to enter the
ZyXEL Device’s hardware address, that is the MAC address in the
DUID field.
Select DUID-EN (DUID Assigned by Vendor Based on Enterprise
Number) to enter the vendor’s registered private enterprise number.
Enter the vendor’s 32-bit enterprise number registered with the IANA
(Internet Assigned Numbers Authority).
This field is available when you select DUID-EN in the DUID Type
field.
This field is available when you select DUID-EN in the DUID Type
field.
Select this to add vendor specific information to DHCP requests that
the ZyXEL Device sends to a DHCP server when getting a WAN IP
address.
Specify the vendor’s OUI (Organization Unique Identifier). It is usually
the first three bytes of the MAC address.
Select this if you have a static IP address.
Enter the static IP address provided by your ISP.
Enter the subnet mask provided by your ISP.
Enter the gateway IP address provided by your ISP.
66
P-870H/HW Series User’s Guide
Page 67
5.5.1.4 NAT, IGMP Multicast and Firewall Activation
The screen is available only when you select IP over Ethernet in the WAN
Service Configuration screen.
Figure 35 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 16 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE
LABEL DESCRIPTION
Enable NAT Select this check box to activate NAT on this connection.
Enable Fullcone
NAT
Enable Address
Mapping
Address Mapping
Set
Enable Firewall Select this check box to activate Firewall on this connection.
Enable IGMP
Multicast Proxy
Select this check box to activate full cone NAT on this connection.
This field is available only when you select Enable NAT.
Select this check box to activate NAT address mapping on this
connection. There is no default address mapping rule. You need to
configure the address mapping rules manually in the NAT > Address
Mapping screen.
This field is available only when you configure a static IP address in
the previous screen and select Enable NAT.
Select the index number of the address mapping set that you want to
use on this connection.
This field is available only when you configure a static IP address in
the previous screen and select Enable NAT.
Select this check box to have the ZyXEL Device act as an IGMP proxy
on this connection. This allows the ZyXEL Device to get subscribing
information and maintain a joined member list for each multicast
group. It can reduce multicast traffic significantly.
P-870H/HW Series User’s Guide
67
Page 68
Chapter 5 WAN Setup
Table 16 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE
LABEL DESCRIPTION
Back Click this button to return to the previous screen.
Next Click this button to continue.
5.5.1.5 Default Gateway
The screen is available when you select PPP over Ethernet or IP over Ethernet
in the WAN Service Configuration screen.
Figure 36 WAN Configuration: Default Gateway: PPPoE or IPoE
The following table describes the labels in this screen.
Table 17 WAN Configuration: Default Gateway: PPPoE or IPoE
LABEL DESCRIPTION
Selected WAN
Interface
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select a WAN interface through which you want to forward the traffic.
68
P-870H/HW Series User’s Guide
Page 69
5.5.1.6 DNS Server
The screen is available when you select PPP over Ethernet or IP over Ethernet
in the WAN Service Configuration screen.
Figure 37 WAN Configuration: DNS Server: PPPoE or IPoE
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 18 WAN Configuration: DNS Server: PPPoE or IPoE
LABEL DESCRIPTION
Obtain DNS info
from a WAN
interface
WAN interface
selected
Use the following
Static DNS IP
address
Primary DNS
server
Secondary
DNS server
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this to have the ZyXEL Device get the DNS server addresses
from the ISP automatically.
This displays the WAN interface you selected in the previous screen.
Select this to have the ZyXEL Device use the DNS server addresses
you configure manually.
Enter the first DNS server address assigned by the ISP.
Enter the second DNS server address assigned by the ISP.
P-870H/HW Series User’s Guide
69
Page 70
Chapter 5 WAN Setup
5.5.1.7 Configuration Summary
This read-only screen shows the current WAN connection settings.
Figure 38 WAN Configuration: Configuration Summary
The following table describes the labels in this screen.
Table 19 WAN Configuration: Configuration Summary
LABEL DESCRIPTION
Connection Type This is the encapsulation method used by this connection.
Service Name This is the name of the service.
IP Address This shows whether the WAN IP address is assigned by the ISP,
manually configured or not configurable.
Service State This shows whether this service is active or not.
NAT This shows whether NAT is active or not for this connection.
Full Cone NAT This shows whether full cone NAT is active or not for this connection.
Firewall This shows whether Firewall is active or not for this connection.
IGMP Multicast This shows whether IGMP multicasting is active or not for this
connection.
Quality Of
Service
Back Click this button to return to the previous screen.
Apply/Save Click this button to save your changes.
This shows whether QoS is active or not for this connection.
70
P-870H/HW Series User’s Guide
Page 71
5.6 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device
can work in bridge mode or routing mod e. When the ZyXEL Device is in routing
mode, it supports the following methods.
ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented
with the IP network protocol. IP packets are routed between the Ethernet interface
and the WAN interface and then formatted so that they can be understood in a
bridged environment. For instance, it encapsulates routed Ethernet frames into
bridged ATM cells.
Chapter 5 WAN Setup
PPP over Ethernet
Point-to-Point Protocol over Ethernet (PPPoE) provides access control and bil ling
functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF
standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that
works with existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network
services, a function known as dynamic servic e selection. This enables the service
provider to easily create and offer new IP services for individuals.
Operationally, PPPoE saves significant ef fort for both you and the ISP or carrier, as
it requires no specific configuration of the broadband modem at the customer site .
By implementing PPPoE directly on the ZyXEL Device (rather than individual
computers), the computers on the LAN do not need PPPoE software installed,
since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of
the LANs’ computers will have access.
IP Address Assignment
A static IP is a fixed IP that your ISP gives y ou. A dynamic IP is not fix e d; the ISP
assigns you a different one each time. The Single User Account feature can be
enabled or disabled if you have either a dynamic or static IP. However the
P-870H/HW Series User’s Guide
71
Page 72
Chapter 5 WAN Setup
2, B
1, A
encapsulation method assigned influences your choices for IP address and default
gateway.
Full Cone NAT
In full cone NAT, the NAT router maps all outgoing packets from an internal IP
address and port to a single IP address and port on the external network. The NA T
router also maps packets coming to that external IP address and port to the
internal IP address and port.
In the following example, the ZyXEL Device maps the source address of all
packets sent from the internal IP address 1 and port A to IP address 2 and port B
on the external network. The ZyXEL Device also performs NAT on all incoming
packets sent to IP address 2 and port B and forwards them to IP address 1, port
A.
Figure 39 Full Cone NAT Example
Symmetric NAT
The full, restricted and port restricted cone NAT types use the same mapping for
an outgoing packet’s source address regardless of the destination IP address and
port. In symmetric NAT, the mapping of an outgoing packet’s source address to a
source address in another network is different for each different destination IP
address and port.
In the following example, the ZyXEL Devi ce maps the source address IP address 1
and port A to IP address 2 and port B on the external network for packets sent to
IP address 3 and port C. The Z yXEL Device uses a different mapping (IP address 2
and port M) for packets sent to IP address 4 and port
A host on the external network (IP address 3 and port C for example) can only
send packets to the internal host via the external IP address and port that the NA T
router used in sending a packet to the external host’s IP address and port. So in
D.
72
P-870H/HW Series User’s Guide
Page 73
Chapter 5 WAN Setup
1, A
2, M
2, B
4, D
4, E
3, C
5, B
the example, only 3, C is allowed to send packets to 2, B and onl y 4, D is allowed
to send packets to 2, M.
Figure 40 Symmetric NAT
Introduction to VLANs
A Virtual Local Area Network (VLAN) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In Multi-Tenant Unit (MTU) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Introduction to IEEE 802.1Q Tagged VLAN
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
P-870H/HW Series User’s Guide
73
Page 74
Chapter 5 WAN Setup
contains two bytes of TPID (Tag Protocol Identifier), residing within th e typ e/
length field of the Ethernet frame) and two bytes of TCI (Tag Control Information),
starts after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 Bits
Multicast
IP packets are transmitted in either one of two ways - Unicas t ( 1 sen der - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers
IP packets to a group of hosts on the network - not everybody and not just 1.
Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
74
At start up, the ZyXEL Device queries all directly connected networks to gather
group membership. After that, the ZyXEL Device periodically updates this
information.
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP
address and vice versa, for instance, the IP address of www.zyxel.com is
P-870H/HW Series User’s Guide
Page 75
Chapter 5 WAN Setup
204.217.0.2. The DNS server is extremely important because without it, you must
know the IP address of a computer before you can access it.
The ZyXEL Device can get the DNS server addresses in the following ways.
1 The ISP tells you the DNS server addresses, usually in the form of an information
sheet, when you sign up. If your ISP gives you DNS server addresses, manually
enter them in the DNS server fields.
2 If your ISP dynamically assigns the DNS server IP addresses (along with the
ZyXEL Device’s WAN IP address), set the DNS server fields to get the DNS server
address from the ISP.
P-870H/HW Series User’s Guide
75
Page 76
Chapter 5 WAN Setup
76
P-870H/HW Series User’s Guide
Page 77
CHAPTER 6
Internet
DSL
LAN
LAN Setup
6.1 Overview
A Local Area Network (LAN) is a shared communication system to which many
computers are attached. A LAN is usually located in one immediate area such as a
building or floor of a building.
The LAN screens can help you configure a LAN DHCP server and manage IP
addresses.
• See Section 6.4 on page 81 for more information on LANs.
• See Appendix D on page 301 for more information on IP addresses and
subnetting.
6.1.1 What You Can Do in this Chapter
The LAN IP screen lets you set the LAN IP address and subnet mask of your
ZyXEL device and configure other LAN TCP/IP settings (Section 6.3 on page 79).
P-870H/HW Series User’s Guide
77
Page 78
Chapter 6 LAN Setup
6.2 What You Need To Know
IP Address
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number. This is known as an
Internet Protocol address.
Subnet Mask
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
DHCP
DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP
configuration at start-up from a server. This ZyXEL Device has a built-in DHCP
server capability that assigns IP addresses and DNS servers to systems that
support DHCP client capability.
DHCP Relay
You can also configure the ZyXEL Device to relay client DHCP requests to a DHCP
server and the server’s responses back to the clients.
RIP
RIP (Routing Information Protocol) allows a router to exchange routing
information with other routers.
Multicast and IGMP
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data.
There are two versions 1 and 2. IGMP version 2 is an improvement over version 1
but IGMP version 1 is still in wide use.
78
P-870H/HW Series User’s Guide
Page 79
DNS
DNS (Domain Name System) maps a domain name to its corresponding IP
address and vice versa. The DNS server is extremely important because without
it, you must know the IP address of a computer before you can access it. The DNS
server addresses you enter when you set up DHCP are passed to the client
machines along with the assigned IP address and subnet mask.
6.3 The LAN IP Screen
Click Network > LAN to open the IP screen. See Section 6.4 on page 81 for
background information. Use this screen to set the Local Area Network IP address
and subnet mask of your ZyXEL Device.
Figure 41 LAN > IP
Chapter 6 LAN Setup
P-870H/HW Series User’s Guide
79
Page 80
Chapter 6 LAN Setup
The following table describes the fields in this screen.
Table 20 LAN > IP
LABEL DESCRIPTION
LAN TCP/IP
Group Name Select the interface group for which you want to configure the LAN
IP Address Enter the LAN IP address you want to assign to your ZyXEL Device in
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for
DHCP Setup
Active DHCP Select this to have the ZyXEL Device act as a DHCP server or DHCP
DHCP Server Select this option to have the ZyXEL Device assign IP addresses and
TCP/IP settings. See Chapter 20 on page 207 for how to create a new
interface group.
dotted decimal notation, for example, 192.168.1.1 (factory default).
example 255.255.255.0 (factory default).
relay agent.
Otherwise, deselect this to not have the Zy XEL Device provide any
DHCP services. The DHCP server will be disabled.
provide subnet mask, gateway, and DNS server information to the
network. The ZyXEL Device is the DHCP server for the network.
When the ZyXEL Device acts as a DHCP server, the following items
need to be set:
IP Pool
Starting
Address
Pool Size This field specifies the size, or count of the IP address pool.
DHCP Relay Select this option to have the ZyXEL Device forward DHCP request to
Relay Server If you select DHCP Relay, enter the IP address of the DHCP server.
DNS Servers Assigned by DHCP Server
If you do not configure DNS servers, the ZyXEL Device uses its LAN IP address and tells
the DHCP clients on the LAN that itself is the DNS server. When a LAN client sends a DNS
query to the ZyXEL Device, the ZyXEL Device forwards the query to its system DNS server
you configured in the WAN screen.
First DNS
Server
Second DNS
Server
IGMP Snooping
Active IGMP
Snooping
Standard
Mode
Blocking Mode Select this to have the ZyXEL Device block all unknown multicast
This field specifies the first of the contiguous addresses in the IP
address pool.
the DHCP server.
Enter the first DNS (Domain Name System) server IP address the
ZyXEL Device passes to the DHCP clients.
Enter the second DNS (Domain Name System) server IP address the
ZyXEL Device passes to the DHCP clients.
Select this option to enable IGMP snooping. This allows the ZyXEL
Device to passively learn multicast group.
Select this to have the ZyXEL Device forward multicast packets to a
port that joins the multicast group and broadcast unknown multicast
packets from the WAN to all LAN ports.
packets from the WAN.
80
P-870H/HW Series User’s Guide
Page 81
Table 20 LAN > IP
Internet
WAN
LAN
LABEL DESCRIPTION
Active IP Alias Select the check box to configure another LAN network for the ZyXEL
Device.
IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet
Mask
Apply Click Apply to save your changes back to the ZyXEL Device.
Type the subnet mask of your network in dotted decimal notation, for
example 255.255.255.0 (factory default).
6.4 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
LANs, WANs and the ZyXEL Device
Chapter 6 LAN Setup
The actual physical connection determines whether the ZyXEL Device ports are
LAN or WAN ports. There are two separate IP networks, one inside the LAN
network and the other outside the WAN network as shown next.
Figure 42 LAN and WAN IP Addresses
DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. You can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you
turn DHCP service off, you must have another DHCP server on your LAN, or else
the computer must be manually configured.
P-870H/HW Series User’s Guide
81
Page 82
Chapter 6 LAN Setup
IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP
clients (DHCP Pool). See the product specif ic a t i o ns in the appendices. Do not
assign static IP addresses from the DHCP pool to your LAN computers.
LAN TCP/IP
The ZyXEL Device has built-in DHCP server capability that assigns IP addresses
and DNS servers to systems that support DHCP client capability.
IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number.
Where you obtain your network number depends on your particular situation. If
the ISP or your network administrator assigns you a block of registered IP
addresses, follow their instructions in selecting the IP addresses and the subnet
mask.
If the ISP did not explicitly give you an IP network number, then most likely you
have a single user account and the ISP will assign you a dynamic IP address when
the connection is established. If this is the case, it is recommended that you select
a network number from 192.168.0.0 to 192.168.255.0 and you must enable the
Network Address Translation (NAT) feature of the ZyXEL Device. The Internet
Assigned Number Authority (IANA) reserved this block of addresses sp ecifically for
private use; please do not use any other number unless you are told otherwise.
Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are
reserved). In other words, the first three numbers specify the network number
while the last number identifies an individual computer on that network.
Once you have decided on the network number , pick an IP address that is easy to
remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that
no other device on your network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
82
Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are
isolated from the Internet, for example, only between your two branch offices, you
can assign any IP addresses to the hosts without problems. However, the Internet
P-870H/HW Series User’s Guide
Page 83
Chapter 6 LAN Setup
Assigned Numbers Authority (IANA) has reserved the following three blocks of IP
addresses specifically for private networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
You can obtain your IP address from the IANA, from an ISP or it can be assigned
from a private network. If you belong to a small organization and your Internet
access is through an ISP, the ISP can provide you with the Internet addresses for
your local networks. On the other hand, if you are part of a much larger
organization, you should consult your network administrator for the appropriate IP
addresses.
Note: Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, “Address Allocation for Private
Internets” and RFC 1466, “Guidelines for Management of IP Address Space”.
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
The ZyXEL Device supports both IGMP ve rsion 1 (IGMP-v1) and IGMP version 2
(IGMP-v2). At start up, the ZyXEL Device q ueries all directly connected networks
to gather group membership. After that, the Z yXEL Device periodically updates
this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN
and/or WAN interfaces in the Web Configurator (LAN; WAN). Select None to
disable IP multicasting on these interfaces.
P-870H/HW Series User’s Guide
83
Page 84
Chapter 6 LAN Setup
Ethernet
Interface
A: 192.168.1.1 - 192.168.1.24
B: 192.168.2.1 - 192.168.2.24
IP Alias
IP alias allows you to partitio n a physi c a l network into different logical networks
over the same Ethernet interface. The ZyXEL Device supports three logical LAN
interfaces via its single physical Ethernet interface with the ZyXEL Device itself as
the gateway for each LAN network.
When you use IP alias, you can also configure firewall rules to control access
between the LAN's logical networks (subnets).
Note: Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A and B.
Figure 43 Physical Network & Partitioned Logical Networks
84
P-870H/HW Series User’s Guide
Page 85
CHAPTER 7
Wireless LAN
7.1 Overview
This chapter describes how to perform tasks related to setting up and optimizing
your wireless network, includ i ng the following.
• Turning the wireless connection on or off.
• Configuring a name, wireless channel and security for the network.
• Using WiFi Protected Setup (WPS) to configure your wireless network.
• Using a MAC (Media Access Control) address filter to restrict access to the
wireless network.
See Chapter 2 on page 27 for a tutorial showing how to set up your wireless
connection in an example scenario.
See Section 7.10 on page 105 for advanced technical information on wireless
networks.
7.1.1 What You Can Do in this Chapter
This chapter describes the ZyXEL Device’s Network > Wireless LAN screens.
Use these screens to set up your ZyXEL Device’s wireless connection.
•The General screen lets you turn the wireless connection on or off, set up
wireless security and make other basic configuration changes (Section 7.4 on
page 89). You can also configure the MAC filter to allow or block access to the
ZyXEL Device based on the MAC addresses of the wireless stations.
•The More AP screen lets you set up multiple wireless networks on your ZyXEL
Device (Section 7.5 on page 97).
•Use the WPS screen and the WPS Station screen to use WiFi Protected Setup
(WPS). WPS lets you set up a secure network quickly, when connecting to other
WPS-enabled devices.
Use the WPS screen (see Section 7.6 on page 98) to enable or disable WPS,
generate a security PIN (Personal Identification Number) and see information
about the ZyXEL Device’s WPS status.
Use the WPS Station (see Section 7.7 on page 100) screen to set up WPS by
pressing a button or using a PIN.
P-870H/HW Series User’s Guide
85
Page 86
Chapter 7 Wireless LAN
•The WDS screen lets you set up a Wireless Distribution System, in which the
ZyXEL Device acts as a bridge with other ZyXEL access points (Section 7.8 on
page 101).
•The Advanced Setup screen lets you change the wireless mode, and make
other advanced wireless configuration changes (Section 7.9 on page 103).
You don’t necessarily need to use all these screens to set up your wireless
connection. For example, you may just want to set up a network name, a wireless
radio channel and some security in the General screen.
7.2 What You Need to Know
Wireless Basics
“Wireless” is essentially radio communication. In the same way that walkie-talkie
radios send and receive information over the airwaves, wireless networking
devices exchange information with one another. A wireless networking device is
just like a radio that lets your computer exchange information with radios
attached to other computers. Like walkie-talkies, most wireless networking
devices operate at radio frequency bands that are open to the public and do not
require a license to use. However, wireless networking is different from that of
most traditional radio communications in that there a number of wireless
networking standards available with different methods of data encryption.
Wireless Network Construction
Wireless networks consist of wireless clients, access points and bridges.
• A wireless client is a radio connected to a user’s computer.
• An access point is a radio with a wired connection to a network, which can
connect with numerous wireless clients and let them access the network.
• A bridge is a radio that relays communications between access points and
wireless clients, extending a network’s range.
Traditionally, a wireless network operates in one of two ways.
• An “infrastructure” type of network has one or more access points and one or
more wireless clients. The wireless clients connect to the access points.
• An “ad-hoc” type of network is one in which there is no access point. Wireless
clients connect to one another in order to exchange information.
Network Names
Each network must have a name, referred to as the SSID - “Service Set
IDentifier”. The “service set” is the network, so the “service set identifier” is the
86
P-870H/HW Series User’s Guide
Page 87
Chapter 7 Wireless LAN
network’s name. This helps you identify your wireless network when wireless
networks’ coverage areas overlap and you have a variety of networks to choose
from.
Radio Channels
In the radio spectrum, there are certain frequency bands allocated for unlicensed,
civilian use. For the purposes of wireless networking, t hese bands are divided into
numerous channels. This allows a variety of networks to exist in the same place
without interfering with one another. When you create a network, you must select
a channel to use.
Since the available unlicensed spectrum varies from one country to another, the
number of available channels also varies.
Wireless Security
By their nature, radio communications are simple to intercept. For wireless data
networks, this means that anyone within range of a wireless network without
security can not only read the data passing over the airwaves, but also join the
network. Once an unauthorized person has access to the network s/he can either
steal information or introduce malware (malicious software) intended to
compromise the network. For these reasons, a variety of security systems have
been developed to ensure that only authorized people can use a wireless data
network, or understand the data carried on it.
These security standards do two things. First, they authenticate. This means that
only people presenting the right credentials (often a username and password, or a
“key” phrase) can access the network. Second, they encrypt. This means that the
information sent over the air is encoded. Only people with the code key can
understand the information, and only people who have been authenticated are
given the code key.
These security standards vary in effectiveness. Some can be broken, such as the
old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at
all, but it will not keep a determined attacker out. Other security standards are
secure in themselves but can be broken if a user does not use them properly. For
example, the WPA-PSK security standard is perfectly secure if you use a long key
which is difficult for an attacker’s softw are to gues s - f or example, a twenty-letter
long string of apparently random numbers and letters - but it is not very secure if
you use a short key which is very easy to guess - for example, a three-letter word
from the dictionary.
Because of the damage that can be done by a malicious attacker, it’s not just
people who have sensitive information on their network who should use security.
Everybody who uses any wireless network should ensure that effective security is
in place.
P-870H/HW Series User’s Guide
87
Page 88
Chapter 7 Wireless LAN
A good way to come up with effective security keys , passwords and so on is to use
obscure information that you personally will easily remember, and to enter it in a
way that appears random and does not include real words. For example, if your
mother owns a 1970 Dodge Challenger and her favorite movie is Vanishing Point
(which you know was made in 1971) you could use “70dodchal71vanpoi” as your
security key.
Signal Problems
Because wireless networks are radio networks, their signals are subject to
limitations of distance, interference and absorption.
Problems with distance occur when the two radios are too far apart. Problems with
interference occur when other radio waves interrupt the data signal. Interference
may come from other radio transmissions, such as military or air traffic control
communications, or from machines that are coincidental emitters such as electric
motors or microwaves. Problems with absorption occur when physical objects
(such as thick walls) are between the two radios, muffling the signal.
7.3 Before You Begin
Before you start using these screens, ask yourself the following questions. See
Section 7.2 on page 86 if some of the terms used here do not make sense to you.
• What wireless standards do the other wireless devices support (IEEE 802.11g,
for example)? What is the most appropriate standard to use?
• What security options do the other wireless devices support (WPA-PSK, for
example)? What is the best one to use?
• Do the other wireless devices support WPS (Wi-Fi Protected Setup)? If so, you
can set up a well-secured network very easily.
Even if some of your devices support WPS and some do not, you can use WPS to
set up your network and then add the non-WPS devices manually, although this
is somewhat more complicated to do.
• What advanced options do you want to configure, if any? If you want to
configure advanced options, ensure that you know precisely what you want to
do. If you do not want to configure advanced options, leav e them alone.
88
P-870H/HW Series User’s Guide
Page 89
7.4 The General Screen
Note: If you are configuring the ZyXEL Device from a computer connected to the
wireless LAN and you change the ZyXEL Device’s SSID or security settings,
you will lose your wireless connection when you press Apply to confirm. You
must then change the wireless settings of your computer to match the ZyXEL
Device’s new settings.
Click Network > Wireless LAN to open the General screen.
Figure 44 Network > Wireless LAN > General
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 21 Network > Wireless LAN > General
LABEL DESCRIPTION
Active
Wireless LAN
Channel
Selection
Network
Name (SSID)
Click the check box to activate wireless LAN.
Set the operating frequency/channel depending on your particular region.
Select a channel from the drop-down list box.
The SSID (Service Set IDentity) identifies the service set with which a
wireless device is associated. Wireless devices associating to the access
point (AP) must have the same SSID. Enter a descriptive name (up to 32
printable 7-bit ASCII characters) for the wireless LAN.
Note: If you are configuring the ZyXEL Device from a computer
P-870H/HW Series User’s Guide
connected to the wireless LAN and you change the ZyXEL
Device’s SSID or WEP settings, you will lose your wireless
connection when you press Apply to confirm. You must then
change the wireless settings of your computer to match the
ZyXEL Device’s new settings.
89
Page 90
Chapter 7 Wireless LAN
Table 21 Network > Wireless LAN > General
LABEL DESCRIPTION
Hide Network
Name (SSID)
Disable WMM
Advertise
BSSID This shows the MAC address of the wireless interface on the ZyXEL Device
Security
Mode
MAC Filter Click this button to go to the MAC Filter screen to configure whether the
Apply Click this to save your changes back to the ZyXEL Device.
Reset Click this to reload the previous configuration for this screen.
Select this check box to hide the SSID in the outgoing beacon frame so a
station cannot obtain the SSID through scanning using a site survey tool.
WMM (Wi-Fi MultiMedia) QoS (Quality of Service) allows you to prioritize
wireless traffic according to the delivery requirements of individual
services. To do this, you must enable WMM QoS on all wireless devices in
your network.
Select this option to not broadcast the WMM information in beacon frames
and disable WMM QoS on the ZyXEL Device.
when wireless LAN is enabled.
See the following sections for more details about this field.
wireless devices with the MAC addresses listed are allowed or denied to
access the ZyXEL Device using this SSID.
7.4.1 No Security
Select No Security to allow wireless devices to communicate with the access
points without any data encryption or authentication.
Note: If you do not enable any wireless security on your ZyXEL Device, your network
is accessible to any wireless networking device that is within range.
Figure 45 Wireless LAN > General: No Security
90
P-870H/HW Series User’s Guide
Page 91
The following table describes the labels in this screen.
Table 22 Wireless LAN > General: No Security
LABEL DESCRIPTION
Security
Mode
Choose No Security from the drop-down list box.
7.4.2 WEP Encryption
In order to configure and enable WEP encryption; click Network > Wireless LAN
to display the General screen. Select WEP from the Security Mode list.
Figure 46 Wireless LAN > General: Static WEP Encryption
Chapter 7 Wireless LAN
P-870H/HW Series User’s Guide
91
Page 92
Chapter 7 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 23 Network > Wireless LAN > General: Static WEP Encryption
LABEL DESCRIPTION
Auto
Generate Key
Security
Mode
WEP
Encryption
Key 1 to Key 4The WEP key is used to secure your data from eavesdropping by
Select this option to have the ZyXEL Device automatically generate an
SSID and WEP key. The SSID, WEP Encryption and key fields will not be
configurable when you select this option.
Choose WEP from the drop-down list box.
WEP (Wired Equivalent Privacy) provides data encryption to prevent
unauthorized wireless stations from accessing data transmitted over the
wireless network.
Select 64-bit WEP or 128-bit WEP to enable data encryption.
unauthorized wireless users. Both the ZyXEL Device and the wireless
stations must use the same WEP key for data transmission.
Only one key can be activated at any one time. Select a default k ey to use
for data encryption.
If you chose 64-bit WEP in the WEP Encryption field, then enter any 5
characters (ASCII string) or 10 hexadecimal characters ("0-9", "A-F")
preceded by 0x for each key.
If you chose 128-bit WEP in the WEP Encryption field, then enter 13
characters (ASCII string) or 26 hexadecimal characters ("0-9", "A-F")
preceded by 0x for each key.
92
P-870H/HW Series User’s Guide
Page 93
7.4.3 WPA(2)-PSK
In order to configure and enable WPA(2)-PSK authentication; click Network >
Wireless LAN to display the General screen. Select WPA-PSK or WPA2-PSK
from the Security Mode list.
Figure 47 Wireless LAN > General: WPA(2)-PSK
Chapter 7 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 24 Wireless LAN > General: WPA(2)-PSK
LABEL DESCRIPTION
Auto Generate
Key
Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box.
Active
Compatible
Encryption Select the encryption type (TKIP, AES or TKIP+AES) for data
This field is only available for WPA-PSK.
Select this option to have the ZyXEL Device automatically generate an
SSID and pre-shared key. The SSID and Pre-Shared Key fields will
not be configurable when you select this option.
This field is only available for WPA2-PSK. Select this if you want the
ZyXEL Device to support WPA-PSK and WPA2-PSK simultaneously.
encryption.
P-870H/HW Series User’s Guide
93
Page 94
Chapter 7 Wireless LAN
Table 24 Wireless LAN > General: WPA(2)-PSK
LABEL DESCRIPTION
Pre-Shared Key The encryption mechanisms used for WPA(2) and WPA(2)-PSK are
the same. The only difference between the two is that WPA(2)-PSK
uses a simple common password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII characters
(including spaces and symbols).
Group Key
Update Timer
The Group Key Update Timer is the rate at which the AP (if using
WPA(2)-PSK key management) or RADIUS server (if using WPA(2)
key management) sends a new group key out to all clients. The rekeying process is the WPA(2) equivalent of automatically changing the
WEP key for an AP and all stations in a WLAN on a periodic basis.
Setting of the Group Key Update Timer is also supported in WPA(2)-
PSK mode. The ZyXEL Device default is 1800 seconds (30 minutes).
7.4.4 WPA(2) Authentication
Use this screen to configure and enable WPA or WPA2 authentication; clic k the
Wireless LAN link under Network to display the General screen. Select WPA or
WPA2 from the Security Mode list.
Figure 48 Wireless LAN > General: WPA(2)
94
P-870H/HW Series User’s Guide
Page 95
Chapter 7 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 25 Wireless LAN > General: WPA(2)
LABEL DESCRIPTION
Security Mode Choose WPA or WPA2 from the drop-down list box.
Active
Compatible
Encryption Select the encryption type (TKIP, AES or TKIP+AES) for data
WPA2
Preauthenticatio
n
Network Re-auth
Interval
This field is only available for WPA2. Select this if you want the ZyXEL
Device to support WPA and WPA2 simultaneously.
encryption.
This field is available only when you select WPA2.
Pre-authentication enables fast roaming by allowing the wireless client
(already connecting to an AP) to perform IEEE 802.1x authentication
with another AP before connecting to it. Select Enabled to turn on
preauthentication in WAP2. Otherwise, select Disabled.
This field is available only when you select WPA2.
Specify how often wireless clients have to resend usernames and
passwords in order to stay connected. Enter a time interval between
10 and 2147483647 seconds.
Note: If wireless client authentication is done using a RADIUS
server, the reau thentication timer on the RADIUS server has
priority.
Group Key
Update Timer
Authentication Server
IP Address Enter the IP address of the external authentication server in dotted
Port Number Enter the port number of the external authentication server. The
Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be
The Group Key Update Timer is the rate at which the AP (if using
WPA(2)-PSK key management) or RADIUS server (if using WPA(2)
key management) sends a new group key out to all clients. The rekeying process is the WPA(2) equivalent of automatically changing the
WEP key for an AP and all stations in a WLAN on a periodic basis.
Setting of the Group Key Update Timer is also supported in
WPA(2)-PSK mode. The ZyXEL Device default is 1800 seconds (30
minutes).
decimal notation.
default port number is 1812.
You need not change this value unless your network administrator
instructs you to do so with additional information.
shared between the external authentication server and the ZyXEL
Device.
The key must be the same on the external authentication server and
your ZyXEL Device. The key is not sent over the network.
7.4.5 MAC Filter
This screen allows you to configure the ZyXEL Device to give exclusive access to
specific devices (Allow) or exclude specific devices from accessing the ZyXEL
P-870H/HW Series User’s Guide
95
Page 96
Chapter 7 Wireless LAN
Device (Deny). Every Ethernet device has a unique MAC (Media Access Control)
address. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the
MAC addresses of the devices to configure this screen.
Use this screen to change your Zy XEL Device’s MAC filter settings. Click the Edit
button in the Wireless LAN > General screen. The following screen displays.
Figure 49 Wireless LAN > MAC Filter
The following table describes the labels in this screen.
Table 26 Wireless LAN > MAC Filter
LABEL DESCRIPTION
MAC Restrict
Mode
#
MAC
Address
Modify Click the Remove icon to delete the entry.
Back Click this to return to the previous screen without saving changes.
Add Click this to create a new MAC filtering rule.
Define the filter action for the list of MAC addresses in the table below.
Select Disabled to turn off MAC address filtering.
Select Allow to permit access to the ZyXEL Device, MAC addresses not
listed will be denied access to the ZyXEL Device.
Select Deny to block access to the ZyXEL Device, MAC addresses not listed
will be allowed to access the ZyXEL Device
This is the index number of the MAC address.
This is the MAC addresses of the wireless devices that are allowed or denied
access to the ZyXEL Device.
96
P-870H/HW Series User’s Guide
Page 97
7.4.6 Adding a New MAC Filtering Rule
Click the Add button in the MAC Filter screen. The following screen displays.
Figure 50 Wireless LAN > MAC Filter > Add
The following table describes the labels in this screen.
Table 27 Wireless LAN > MAC Filter > Add
LABEL DESCRIPTION
MAC
Address
Back Click this to return to the previous screen without saving changes.
Apply Click this to save your changes and go back to the previous screen.
Enter the MAC addresses of the wireless devices that are allowed or denied
access to the ZyXEL Device in these address fields. Enter the MAC
addresses in a valid MAC address format, that is, six hexadecimal character
pairs, for example, 12:34:56:78:9a:bc.
Chapter 7 Wireless LAN
7.5 The More AP Screen
This screen allows you to enable and configure multiple wireless networks on the
ZyXEL Device.
Click Network > Wireless LAN > More AP. The following screen displays.
Figure 51 Network > Wireless LAN > More AP
P-870H/HW Series User’s Guide
97
Page 98
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 28 Network > Wireless LAN > More AP
LABEL DESCRIPTION
# This is the index number of each SSID profile.
Active Select the check box to activate an SSID profile.
SSID An SSID profile is the set of parameters relating to one of the ZyXEL
Security This field indicates the security mode of the SSID profile.
Modify Click the Edit icon to configure the SSID profile.
Apply Click Apply to save your changes back to the ZyXEL Device.
Reset Click Reset to reload the previous configuration for this screen.
7.5.1 More AP Edit
Device’s BSSs. The SSID (Service Set IDentifier) identifies the Service
Set with which a wireless device is associated.
This field displays the name of the wireless profile on the network. When
a wireless client scans for an AP to associate with, this is the name that
is broadcast and seen in the wireless client utility.
Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the
More AP screen. The following screen displays.
Figure 52 Network > Wireless LAN > More AP: Edit
See Section 7.4 on page 89 for more details about the fields in this screen.
7.6 The WPS Screen
Use this screen to configure WiFi Protected Setup (WPS) on your ZyXEL Device.
98
P-870H/HW Series User’s Guide
Page 99
Chapter 7 Wireless LAN
WPS allows you to quickly set up a wireless network with strong security, without
having to configure security setti ng s manually. Set up each W PS connection
between two devices. Both devices must support WPS.
Click Network > Wireless LAN >WPS. The following screen displays.
Figure 53 Network > Wireless LAN > WPS
The following table describes the labels in this screen.
Table 29 Network > Wireless LAN > WPS
LABEL DESCRIPTION
WPS Setup
Enable WPS Select the check box to activate WPS on the ZyXEL Device.
PIN Number This shows the PIN (Personal Identification Number) of the ZyXEL
Device. Enter this PIN in the configuration utility of the device you want
to connect to using WPS.
The PIN is not necessary when you use WPS push-button method.
Generate Click this button to have the ZyXEL Device create a new PIN.
WPS Status This displays Configured when the ZyXEL Device has connected to a
wireless network using WPS or Enable WPS is selected and wireless or
wireless security settings have been changed. The current wireless and
wireless security settings also appear in the screen.
This displays Unconfigured if WPS is disabled and there is no wireless
or wireless security changes on the ZyXEL Device or you click
Release_Configuration to remove the configured wireless and
wireless security settings.
P-870H/HW Series User’s Guide
99
Page 100
Chapter 7 Wireless LAN
Table 29 Network > Wireless LAN > WPS
LABEL DESCRIPTION
Release_Co
nfiguration
Apply Click Apply to save your changes back to the ZyXEL Device.
This button is available when the WPS status is Configured but not
configurable if you disable WPS.
Click this button to remove all configured wireless and wireless security
settings for WPS connections on the ZyXEL Device.
7.7 The WPS Station Screen
Use this screen to set up a WPS wireless network using either Push Button
Configuration (PBC) or PIN Configuration.
Click Network > Wireless LAN > WPS Station. The following screen displays.
Figure 54 Network > Wireless LAN > WPS Station
100
P-870H/HW Series User’s Guide
Loading...