ZyXEL Prestige 660HW-Dx User Guide
P-660HW-Dx
802.11g Wireless ADSL 2+ 4-port Gateway
User’s Guide
Version 3.40
8/2007
Edition 2
www.zyxel.com
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL Device using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
A It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
• Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
P-660HW-Dx User’s Guide
3
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
P Warnings tell you about things that could harm you or your device.
A Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-660HW-Dx may be referred to as the “ZyXEL Device”, the “device” or the
“system” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
4
P-660HW-Dx User’s Guide
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
P-660HW-Dx User’s Guide
5
Safety Warnings
Safety Warnings
P For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Please use only No. 26 AWG (American Wire Gauge) or larger telecommunication line
cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
6
This product is recyclable. Dispose of it properly.
P-660HW-Dx User’s Guide
Safety Warnings
P-660HW-Dx User’s Guide
7
Safety Warnings
8
P-660HW-Dx User’s Guide
Contents Overview
Contents Overview
Introduction ............................................................................................................................31
Introducing the ZyXEL Device ...................................................................................................33
Introducing the Web Configurator .............................................................................................. 37
Wizards ...................................................................................................................................51
Wizard Setup for Internet Access .............................................................................................. 53
Bandwidth Management Wizard ................................................................................................ 67
Network ...................................................................................................................................73
WAN Setup ................................................................................................................................ 75
LAN Setup ................................................................................................................................. 93
Wireless LAN ........................................................................................................................... 105
Network Address Translation (NAT) Screens .......................................................................... 129
Security .................................................................................................................................141
Firewalls .................................................................................................................................. 143
Firewall Configuration .............................................................................................................. 155
Content Filtering ...................................................................................................................... 177
Advanced ..............................................................................................................................181
Static Route ............................................................................................................................. 183
Bandwidth Management .......................................................................................................... 187
Dynamic DNS Setup ................................................................................................................ 199
Remote Management Configuration ........................................................................................ 203
Universal Plug-and-Play (UPnP) ............................................................................................. 213
Maintenance and Troubleshooting .....................................................................................225
System ..................................................................................................................................... 227
Logs ........................................................................................................................................ 233
Tools ........................................................................................................................................ 251
Diagnostic ................................................................................................................................ 257
Troubleshooting ....................................................................................................................... 259
Appendices and Index ......................................................................................................... 263
P-660HW-Dx User’s Guide
9
Contents Overview
10
P-660HW-Dx User’s Guide
Table of Contents
Table of Contents
About This User's Guide ..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................6
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures .........................................................................................................................21
List of Tables...........................................................................................................................27
Part I: Introduction................................................................................. 31
Chapter 1
Introducing the ZyXEL Device...............................................................................................33
1.1 Overview .............................................................................................................................. 33
1.2 Ways to Manage the ZyXEL Device .................................................................................... 35
1.3 Good Habits for Managing the ZyXEL Device ..................................................................... 35
1.4 LEDs .................................................................................................................................... 35
1.5 Hardware Connections ........................................................................................................ 36
Chapter 2
Introducing the Web Configurator ........................................................................................37
2.1 Web Configurator Overview ................................................................................................. 37
2.2 Accessing the Web Configurator ......................................................................................... 37
2.2.1 User Access ............................................................................................................... 38
2.2.2 Administrator Access ................................................................................................. 38
2.3 Resetting the ZyXEL Device ................................................................................................ 40
2.3.1 Using the Reset Button .............................................................................................. 40
2.4 Navigating the Web Configurator ......................................................................................... 40
2.4.1 Navigation Panel ........................................................................................................ 40
2.4.2 Status Screen ............................................................................................................. 43
2.4.3 Status: Any IP Table ................................................................................................... 46
2.4.4 Status: WLAN Status .................................................................................................. 46
2.4.5 Status: Bandwidth Status ........................................................................................... 47
2.4.6 Status: Packet Statistics ............................................................................................. 47
P-660HW-Dx User’s Guide
11
Table of Contents
2.4.7 Changing Login Password ........................................................................................ 49
Part II: Wizards ....................................................................................... 51
Chapter 3
Wizard Setup for Internet Access..........................................................................................53
3.1 Introduction .......................................................................................................................... 53
3.2 Internet Access Wizard Setup ............................................................................................. 53
3.2.1 Automatic Detection ................................................................................................... 55
3.2.2 Manual Configuration ................................................................................................. 55
3.3 Wireless Connection Wizard Setup ..................................................................................... 60
3.3.1 Manually assign a WPA-PSK key .............................................................................. 63
3.3.2 Manually assign a WEP key ....................................................................................... 63
Chapter 4
Bandwidth Management Wizard............................................................................................ 67
4.1 Introduction .......................................................................................................................... 67
4.2 Predefined Media Bandwidth Management Services .......................................................... 67
4.3 Bandwidth Management Wizard Setup ............................................................................... 68
Part III: Network...................................................................................... 73
Chapter 5
WAN Setup............................................................................................................................... 75
5.1 WAN Overview ................................................................................................................... 75
5.1.1 Encapsulation ............................................................................................................. 75
5.1.2 Multiplexing ................................................................................................................ 76
5.1.3 Encapsulation and Multiplexing Scenarios ................................................................. 76
5.1.4 VPI and VCI ............................................................................................................... 77
5.1.5 IP Address Assignment .............................................................................................. 77
5.1.6 Nailed-Up Connection (PPP) ..................................................................................... 77
5.1.7 NAT ............................................................................................................................ 78
5.2 Metric .................................................................................................................................. 78
5.3 Traffic Shaping ..................................................................................................................... 78
5.3.1 ATM Traffic Classes ................................................................................................... 79
5.4 Zero Configuration Internet Access ..................................................................................... 80
5.5 Internet Connection ............................................................................................................ 80
5.5.1 Configuring Advanced Internet Connection Setup ..................................................... 82
5.6 Configuring More Connections ............................................................................................ 84
5.6.1 More Connections Edit .............................................................................................. 85
12
P-660HW-Dx User’s Guide
Table of Contents
5.6.2 Configuring More Connections Advanced Setup ...................................................... 88
5.7 Traffic Redirect ................................................................................................................... 89
5.8 Configuring WAN Backup ................................................................................................... 89
Chapter 6
LAN Setup................................................................................................................................93
6.1 LAN Overview ..................................................................................................................... 93
6.1.1 LANs, WANs and the ZyXEL Device .......................................................................... 93
6.1.2 DHCP Setup ...............................................................................................................94
6.2 DNS Server Addresses .......................................................................................................94
6.3 LAN TCP/IP ......................................................................................................................... 94
6.3.1 IP Address and Subnet Mask ..................................................................................... 95
6.3.2 RIP Setup ................................................................................................................... 96
6.3.3 Multicast ..................................................................................................................... 96
6.3.4 Any IP ......................................................................................................................... 97
6.4 Configuring LAN IP .............................................................................................................. 98
6.4.1 Configuring Advanced LAN Setup ............................................................................. 99
6.5 DHCP Setup ...................................................................................................................... 100
6.6 LAN Client List ................................................................................................................... 101
6.7 LAN IP Alias ...................................................................................................................... 102
Chapter 7
Wireless LAN.........................................................................................................................105
7.1 Wireless Network Overview ............................................................................................... 105
7.2 Wireless Security Overview ............................................................................................... 106
7.2.1 SSID ......................................................................................................................... 106
7.2.2 MAC Address Filter .................................................................................................. 106
7.2.3 User Authentication .................................................................................................. 106
7.2.4 Encryption ................................................................................................................ 107
7.2.5 One-Touch Intelligent Security Technology (OTIST) ................................................ 108
7.3 General Wireless LAN Screen .......................................................................................... 108
7.3.1 No Security ............................................................................................................... 109
7.3.2 WEP Encryption ........................................................................................................110
7.3.3 WPA-PSK/WPA2-PSK ...............................................................................................111
7.3.4 WPA/WPA2 ...............................................................................................................113
7.3.5 Wireless LAN Advanced Setup .................................................................................115
7.4 OTIST ................................................................................................................................117
7.4.1 Enabling OTIST .........................................................................................................117
7.4.2 Starting OTIST ..........................................................................................................119
7.4.3 Notes on OTIST ....................................................................................................... 120
7.5 MAC Filter ..................................................................................................................... 121
7.6 WMM QoS ......................................................................................................................... 122
7.6.1 WMM QoS Example ................................................................................................. 122
P-660HW-Dx User’s Guide
13
Table of Contents
7.6.2 WMM QoS Priorities ................................................................................................. 122
7.6.3 Services ................................................................................................................... 123
7.7 QoS Screen ....................................................................................................................... 125
7.7.1 ToS (Type of Service) and WMM QoS ..................................................................... 125
7.7.2 Application Priority Configuration ............................................................................. 127
Chapter 8
Network Address Translation (NAT) Screens.....................................................................129
8.1 NAT Overview ................................................................................................................... 129
8.1.1 NAT Definitions ........................................................................................................ 129
8.1.2 What NAT Does ....................................................................................................... 130
8.1.3 How NAT Works ....................................................................................................... 130
8.1.4 NAT Application ........................................................................................................ 130
8.1.5 NAT Mapping Types ................................................................................................. 131
8.2 SUA (Single User Account) Versus NAT ........................................................................... 132
8.3 SIP ALG ............................................................................................................................. 132
8.4 NAT General Setup ........................................................................................................... 133
8.5 Port Forwarding ................................................................................................................. 133
8.5.1 Default Server IP Address ........................................................................................ 134
8.5.2 Port Forwarding: Services and Port Numbers .......................................................... 134
8.5.3 Configuring Servers Behind Port Forwarding (Example) ......................................... 135
8.6 Configuring Port Forwarding ............................................................................................. 135
8.6.1 Port Forwarding Rule Edit ....................................................................................... 136
8.7 Address Mapping .............................................................................................................. 137
8.7.1 Address Mapping Rule Edit ..................................................................................... 139
Part IV: Security ................................................................................... 141
Chapter 9
Firewalls.................................................................................................................................143
9.1 Firewall Overview ............................................................................................................. 143
9.2 Types of Firewalls .............................................................................................................. 143
9.2.1 Packet Filtering Firewalls ......................................................................................... 143
9.2.2 Application-level Firewalls ........................................................................................ 144
9.2.3 Stateful Inspection Firewalls ..................................................................................... 144
9.3 Introduction to ZyXEL’s Firewall ........................................................................................ 144
9.3.1 Denial of Service Attacks ......................................................................................... 145
9.4 Denial of Service ............................................................................................................... 145
9.4.1 Basics ....................................................................................................................... 145
9.4.2 Types of DoS Attacks ............................................................................................... 146
9.5 Stateful Inspection ............................................................................................................. 148
14
P-660HW-Dx User’s Guide
Table of Contents
9.5.1 Stateful Inspection Process ...................................................................................... 149
9.5.2 Stateful Inspection and the ZyXEL Device ............................................................... 150
9.5.3 TCP Security ............................................................................................................ 150
9.5.4 UDP/ICMP Security .................................................................................................. 151
9.5.5 Upper Layer Protocols ............................................................................................. 151
9.6 Guidelines for Enhancing Security with Your Firewall ....................................................... 152
9.6.1 Security In General .................................................................................................. 152
9.7 Packet Filtering Vs Firewall ...............................................................................................153
9.7.1 Packet Filtering: ....................................................................................................... 153
9.7.2 Firewall ..................................................................................................................... 153
Chapter 10
Firewall Configuration ..........................................................................................................155
10.1 Access Methods .............................................................................................................. 155
10.2 Firewall Policies Overview ............................................................................................... 155
10.3 Rule Logic Overview ........................................................................................................ 156
10.3.1 Rule Checklist ........................................................................................................ 156
10.3.2 Security Ramifications ............................................................................................ 156
10.3.3 Key Fields For Configuring Rules ......................................................................... 157
10.4 Connection Direction ....................................................................................................... 157
10.4.1 LAN to WAN Rules ................................................................................................. 158
10.4.2 Alerts ...................................................................................................................... 158
10.5 General Firewall Policy ................................................................................................. 158
10.6 Firewall Rules Summary ................................................................................................. 159
10.6.1 Configuring Firewall Rules ................................................................................... 161
10.6.2 Customized Services ............................................................................................ 164
10.6.3 Configuring a Customized Service ....................................................................... 164
10.7 Example Firewall Rule .....................................................................................................165
10.8 Predefined Services ........................................................................................................ 169
10.9 Anti-Probing ..................................................................................................................... 171
10.10 DoS Thresholds ............................................................................................................ 172
10.10.1 Threshold Values ................................................................................................. 172
10.10.2 Half-Open Sessions ............................................................................................. 173
10.10.3 Configuring Firewall Thresholds ........................................................................... 173
Chapter 11
Content Filtering ................................................................................................................... 177
11.1 Content Filtering Overview .............................................................................................. 177
11.2 Configuring Keyword Blocking ........................................................................................ 177
11.3 Configuring the Schedule ................................................................................................ 178
11.4 Configuring Trusted Computers ...................................................................................... 179
P-660HW-Dx User’s Guide
15
Table of Contents
Part V: Advanced ................................................................................. 181
Chapter 12
Static Route ...........................................................................................................................183
12.1 Static Route .................................................................................................................. 183
12.2 Configuring Static Route .................................................................................................183
12.2.1 Static Route Edit ................................................................................................... 184
Chapter 13
Bandwidth Management.......................................................................................................187
13.1 Bandwidth Management Overview ................................................................................. 187
13.2 Application-based Bandwidth Management .................................................................... 187
13.3 Subnet-based Bandwidth Management .......................................................................... 187
13.4 Application and Subnet-based Bandwidth Management ................................................. 188
13.5 Scheduler ........................................................................................................................ 188
13.5.1 Priority-based Scheduler ........................................................................................ 188
13.5.2 Fairness-based Scheduler ..................................................................................... 189
13.6 Maximize Bandwidth Usage ............................................................................................ 189
13.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 189
13.6.2 Maximize Bandwidth Usage Example .................................................................... 189
13.6.3 Bandwidth Management Priorities ......................................................................... 191
13.7 Over Allotment of Bandwidth ........................................................................................... 191
13.8 Configuring Summary ..................................................................................................... 191
13.9 Bandwidth Management Rule Setup ............................................................................. 192
13.10 DiffServ .......................................................................................................................... 194
13.10.1 DSCP and Per-Hop Behavior ............................................................................... 194
13.10.2 Rule Configuration ............................................................................................... 194
13.11 Bandwidth Monitor ........................................................................................................ 197
Chapter 14
Dynamic DNS Setup .............................................................................................................199
14.1 Dynamic DNS Overview ................................................................................................. 199
14.1.1 DYNDNS Wildcard ................................................................................................. 199
14.2 Configuring Dynamic DNS .............................................................................................. 199
Chapter 15
Remote Management Configuration ...................................................................................203
15.1 Remote Management Overview ..................................................................................... 203
15.1.1 Remote Management Limitations .......................................................................... 204
15.1.2 Remote Management and NAT .............................................................................. 204
15.1.3 System Timeout .................................................................................................... 204
15.2 WWW .............................................................................................................................. 204
15.3 Telnet ............................................................................................................................... 205
16
P-660HW-Dx User’s Guide
Table of Contents
15.4 Configuring Telnet ............................................................................................................ 205
15.5 Telnet Login ..................................................................................................................... 206
15.6 Configuring FTP ............................................................................................................. 207
15.7 SNMP .............................................................................................................................. 207
15.7.1 Supported MIBs ..................................................................................................... 209
15.7.2 SNMP Traps ........................................................................................................... 209
15.7.3 Configuring SNMP ................................................................................................. 209
15.8 Configuring DNS ............................................................................................................. 210
15.9 Configuring ICMP .............................................................................................................211
Chapter 16
Universal Plug-and-Play (UPnP).......................................................................................... 213
16.1 Introducing Universal Plug and Play ............................................................................... 213
16.1.1 How do I know if I'm using UPnP? ......................................................................... 213
16.1.2 NAT Traversal ........................................................................................................ 213
16.1.3 Cautions with UPnP ............................................................................................... 213
16.2 UPnP and ZyXEL ............................................................................................................214
16.2.1 Configuring UPnP ................................................................................................. 214
16.3 Installing UPnP in Windows Example .............................................................................. 215
16.3.1 Installing UPnP in Windows Me ............................................................................. 215
16.3.2 Installing UPnP in Windows XP ............................................................................. 216
16.4 Using UPnP in Windows XP Example ............................................................................. 217
16.4.1 Auto-discover Your UPnP-enabled Network Device .............................................. 218
16.4.2 Web Configurator Easy Access ............................................................................. 221
Part VI: Maintenance and Troubleshooting ....................................... 225
Chapter 17
System ...................................................................................................................................227
17.1 General Setup ................................................................................................................. 227
17.1.1 General Setup and System Name ......................................................................... 227
17.1.2 General Setup ....................................................................................................... 227
17.2 Time Setting .................................................................................................................... 229
Chapter 18
Logs ......................................................................................................................................233
18.1 Logs Overview ................................................................................................................ 233
18.1.1 Alerts and Logs ...................................................................................................... 233
18.2 Viewing the Logs ............................................................................................................. 233
18.3 Configuring Log Settings ................................................................................................ 234
18.3.1 Example E-mail Log ............................................................................................... 236
P-660HW-Dx User’s Guide
17
Table of Contents
18.4 Log Descriptions .............................................................................................................. 237
Chapter 19
Tools.......................................................................................................................................251
19.1 Firmware Upgrade .......................................................................................................... 251
19.2 Configuration Screen ....................................................................................................... 253
19.2.1 Backup Configuration ............................................................................................. 253
19.2.2 Restore Configuration ............................................................................................ 254
19.2.3 Back to Factory Defaults ........................................................................................ 255
19.3 Restart ............................................................................................................................. 255
Chapter 20
Diagnostic..............................................................................................................................257
20.1 General Diagnostic ......................................................................................................... 257
20.2 DSL Line Diagnostic ...................................................................................................... 257
Chapter 21
Troubleshooting....................................................................................................................259
21.1 Power, Hardware Connections, and LEDs ...................................................................... 259
21.2 ZyXEL Device Access and Login .................................................................................... 260
21.3 Internet Access ................................................................................................................ 261
Part VII: Appendices and Index .......................................................... 263
Appendix A Product Specifications and Wall Mounting........................................................265
Appendix B Wireless LANs ..................................................................................................271
Appendix C Setting up Your Computer’s IP Address ...........................................................285
Appendix D IP Addresses and Subnetting ...........................................................................301
Appendix E Firewall Commands .......................................................................................... 309
Appendix F Internal SPTGEN...............................................................................................315
Appendix G Command Interpreter .......................................................................................331
Appendix H Pop-up Windows, JavaScripts and Java Permissions ...................................... 333
Appendix I NetBIOS Filter Commands .................................................................................339
Appendix J Splitters and Microfilters ....................................................................................341
Appendix K Triangle Route...................................................................................................345
18
P-660HW-Dx User’s Guide
Table of Contents
Appendix L Legal Information............................................................................................... 347
Appendix M Customer Support ............................................................................................351
Index.......................................................................................................................................357
P-660HW-Dx User’s Guide
19
Table of Contents
20
P-660HW-Dx User’s Guide
List of Figures
List of Figures
Figure 1 Protected Internet Access Applications .................................................................................... 34
Figure 2 LAN-to-LAN Application Example ............................................................................................ 34
Figure 3 Front Panel .............................................................................................................................. 35
Figure 4 Password Screen ..................................................................................................................... 38
Figure 5 User status screen ................................................................................................................... 38
Figure 6 Change Password at Login ...................................................................................................... 39
Figure 7 Select a Mode .......................................................................................................................... 39
Figure 8 Web Configurator: Main Screen .............................................................................................. 41
Figure 9 Status Screen ........................................................................................................................... 44
Figure 10 Status: Any IP Table ............................................................................................................... 46
Figure 11 Status: WLAN Status .............................................................................................................. 46
Figure 12 Status: Bandwidth Status ........................................................................................................ 47
Figure 13 Status: Packet Statistics ......................................................................................................... 48
Figure 14 System General ...................................................................................................................... 49
Figure 15 Select a Mode ........................................................................................................................ 53
Figure 16 Wizard: Welcome ................................................................................................................... 54
Figure 17 Auto Detection: No DSL Connection ...................................................................................... 54
Figure 18 Auto Detection: Failed ............................................................................................................ 55
Figure 19 Auto-Detection: PPPoE .......................................................................................................... 55
Figure 20 Internet Access Wizard Setup: ISP Parameters ..................................................................... 56
Figure 21 Internet Connection with PPPoE ............................................................................................ 57
Figure 22 Internet Connection with RFC 1483 ....................................................................................... 57
Figure 23 Internet Connection with ENET ENCAP ................................................................................. 58
Figure 24 Internet Connection with PPPoA ............................................................................................ 59
Figure 25 Connection Test Failed-1 ........................................................................................................ 59
Figure 26 Connection Test Failed-2. ....................................................................................................... 60
Figure 27 Connection Test Successful ................................................................................................... 60
Figure 28 Wireless LAN Setup Wizard 1 ................................................................................................ 61
Figure 29 Wireless LAN Setup Wizard 2 ................................................................................................ 62
Figure 30 Manually assign a WPA key ................................................................................................... 63
Figure 31 Manually assign a WEP key ................................................................................................... 64
Figure 32 Wireless LAN Setup 3 ............................................................................................................ 64
Figure 33 Internet Access and WLAN Wizard Setup Complete ............................................................. 65
Figure 34 Select a Mode ........................................................................................................................ 68
Figure 35 Wizard: Welcome ................................................................................................................... 69
Figure 36 Bandwidth Management Wizard: General Information ........................................................... 69
Figure 37 Bandwidth Management Wizard: Configuration ..................................................................... 70
Figure 38 Bandwidth Management Wizard: Complete ........................................................................... 71
P-660HW-Dx User’s Guide
21
List of Figures
Figure 39 Example of Traffic Shaping .................................................................................................... 79
Figure 40 Internet Connection (PPPoE) ................................................................................................. 81
Figure 41 Advanced Internet Connection Setup ..................................................................................... 83
Figure 42 More Connections .................................................................................................................. 84
Figure 43 More Connections Edit ........................................................................................................... 86
Figure 44 More Connections Advanced Setup ....................................................................................... 88
Figure 45 Traffic Redirect Example ........................................................................................................ 89
Figure 46 Traffic Redirect LAN Setup ..................................................................................................... 89
Figure 47 WAN Backup Setup ................................................................................................................ 90
Figure 48 LAN and WAN IP Addresses .................................................................................................. 93
Figure 49 Any IP Example ...................................................................................................................... 97
Figure 50 LAN IP .................................................................................................................................... 98
Figure 51 Advanced LAN Setup ............................................................................................................. 99
Figure 52 DHCP Setup ......................................................................................................................... 100
Figure 53 LAN Client List ...................................................................................................................... 101
Figure 54 Physical Network & Partitioned Logical Networks ................................................................ 102
Figure 55 LAN IP Alias ......................................................................................................................... 103
Figure 56 Example of a Wireless Network ........................................................................................... 105
Figure 57 Wireless LAN: General ........................................................................................................ 108
Figure 58 Wireless: No Security ............................................................................................................110
Figure 59 Wireless: Static WEP Encryption ...........................................................................................111
Figure 60 Wireless: WPA-PSK/WPA2-PSK ...........................................................................................112
Figure 61 Wireless: WPA/WPA2 ............................................................................................................114
Figure 62 Advanced ..............................................................................................................................116
Figure 63 OTIST ....................................................................................................................................118
Figure 64 Example Wireless Client OTIST Screen ...............................................................................119
Figure 65 Security Key ..........................................................................................................................119
Figure 66 OTIST in Progress (AP) ........................................................................................................119
Figure 67 OTIST in progress (Client) ................................................................................................... 120
Figure 68 No AP with OTIST Found ..................................................................................................... 120
Figure 69 Start OTIST? ........................................................................................................................ 120
Figure 70 MAC Address Filter .............................................................................................................. 121
Figure 71 Wireless LAN: QoS .............................................................................................................. 126
Figure 72 Application Priority Configuration ......................................................................................... 127
Figure 73 How NAT Works ................................................................................................................... 130
Figure 74 NAT Application With IP Alias .............................................................................................. 131
Figure 75 NAT General ........................................................................................................................ 133
Figure 76 Multiple Servers Behind NAT Example ................................................................................ 135
Figure 77 NAT Port Forwarding ............................................................................................................ 136
Figure 78 Port Forwarding Rule Setup ................................................................................................ 137
Figure 79 Address Mapping Rules ....................................................................................................... 138
Figure 80 Edit Address Mapping Rule ................................................................................................. 139
Figure 81 Firewall Application .............................................................................................................. 145
22
P-660HW-Dx User’s Guide
List of Figures
Figure 82 Three-Way Handshake ......................................................................................................... 146
Figure 83 SYN Flood ............................................................................................................................ 147
Figure 84 Smurf Attack ......................................................................................................................... 147
Figure 85 Stateful Inspection ................................................................................................................ 149
Figure 86 Firewall: General .................................................................................................................. 158
Figure 87 Firewall Rules ...................................................................................................................... 160
Figure 88 Firewall: Edit Rule ................................................................................................................ 162
Figure 89 Firewall: Customized Services ............................................................................................. 164
Figure 90 Firewall: Configure Customized Services ............................................................................. 165
Figure 91 Firewall Example: Rules ....................................................................................................... 166
Figure 92 Edit Custom Port Example ................................................................................................... 166
Figure 93 Firewall Example: Edit Rule: Destination Address .............................................................. 167
Figure 94 Firewall Example: Edit Rule: Select Customized Services ................................................... 168
Figure 95 Firewall Example: Rules: MyService ................................................................................... 169
Figure 96 Firewall: Anti Probing ........................................................................................................... 171
Figure 97 Firewall: Threshold ............................................................................................................... 174
Figure 98 Content Filter: Keyword ........................................................................................................ 177
Figure 99 Content Filter: Schedule ....................................................................................................... 178
Figure 100 Content Filter: Trusted ........................................................................................................ 179
Figure 101 Example of Static Routing Topology ................................................................................... 183
Figure 102 Static Route ........................................................................................................................ 184
Figure 103 Static Route Edit ................................................................................................................. 185
Figure 104 Subnet-based Bandwidth Management Example .............................................................. 188
Figure 105 Bandwidth Management: Summary ................................................................................... 192
Figure 106 Bandwidth Management: Rule Setup ................................................................................. 193
Figure 107 DiffServ: Differentiated Service Field .................................................................................. 194
Figure 108 Bandwidth Management Rule Configuration ...................................................................... 195
Figure 109 Bandwidth Management: Monitor ......................................................................................198
Figure 110 Dynamic DNS ..................................................................................................................... 200
Figure 111 Remote Management: WWW ............................................................................................. 204
Figure 112 Telnet Configuration on a TCP/IP Network ......................................................................... 205
Figure 113 Remote Management: Telnet ............................................................................................. 206
Figure 114 Remote Management: FTP ................................................................................................ 207
Figure 115 SNMP Management Model ................................................................................................ 208
Figure 116 Remote Management: SNMP .............................................................................................209
Figure 117 Remote Management: DNS ................................................................................................211
Figure 118 Remote Management: ICMP .............................................................................................. 212
Figure 119 Configuring UPnP ............................................................................................................... 214
Figure 120 Add/Remove Programs: Windows Setup: Communication ................................................ 215
Figure 121 Add/Remove Programs: Windows Setup: Communication: Components .......................... 216
Figure 122 Network Connections ......................................................................................................... 216
Figure 123 Windows Optional Networking Components Wizard .......................................................... 217
Figure 124 Networking Services ........................................................................................................... 217
P-660HW-Dx User’s Guide
23
List of Figures
Figure 125 Network Connections ......................................................................................................... 218
Figure 126 Internet Connection Properties .......................................................................................... 219
Figure 127 Internet Connection Properties: Advanced Settings ........................................................... 219
Figure 128 Internet Connection Properties: Advanced Settings: Add .................................................. 220
Figure 129 System Tray Icon ................................................................................................................ 220
Figure 130 Internet Connection Status ................................................................................................. 221
Figure 131 Network Connections ......................................................................................................... 222
Figure 132 Network Connections: My Network Places ........................................................................ 223
Figure 133 Network Connections: My Network Places: Properties: Example ...................................... 223
Figure 134 System General Setup ....................................................................................................... 228
Figure 135 System Time Setting .......................................................................................................... 229
Figure 136 View Log ............................................................................................................................. 234
Figure 137 Log Settings ....................................................................................................................... 235
Figure 138 E-mail Log Example ........................................................................................................... 237
Figure 139 Firmware ........................................................................................................................... 251
Figure 140 Firmware Upload In Progress ............................................................................................. 252
Figure 141 Network Temporarily Disconnected ....................................................................................252
Figure 142 Error Message .................................................................................................................... 253
Figure 143 Configuration ...................................................................................................................... 253
Figure 144 Configuration Restore Successful ...................................................................................... 254
Figure 145 Temporarily Disconnected .................................................................................................. 254
Figure 146 Configuration Restore Error ............................................................................................... 255
Figure 147 Restart Screen ................................................................................................................... 255
Figure 148 Diagnostic: General ............................................................................................................ 257
Figure 149 Diagnostic: DSL Line .......................................................................................................... 258
Figure 150 Wall-mounting Example ...................................................................................................... 269
Figure 151 Masonry Plug and M4 Tap Screw .......................................................................................270
Figure 152 Peer-to-Peer Communication in an Ad-hoc Network ......................................................... 271
Figure 153 Basic Service Set ............................................................................................................... 272
Figure 154 Infrastructure WLAN ........................................................................................................... 273
Figure 155 RTS/CTS ........................................................................................................................... 274
Figure 156 WPA(2) with RADIUS Application Example ....................................................................... 281
Figure 157 WPA(2)-PSK Authentication ............................................................................................... 282
Figure 158 WIndows 95/98/Me: Network: Configuration ...................................................................... 286
Figure 159 Windows 95/98/Me: TCP/IP Properties: IP Address .......................................................... 287
Figure 160 Windows 95/98/Me: TCP/IP Properties: DNS Configuration .............................................. 288
Figure 161 Windows XP: Start Menu .................................................................................................... 289
Figure 162 Windows XP: Control Panel ............................................................................................... 289
Figure 163 Windows XP: Control Panel: Network Connections: Properties ......................................... 290
Figure 164 Windows XP: Local Area Connection Properties ............................................................... 290
Figure 165 Windows XP: Internet Protocol (TCP/IP) Properties .......................................................... 291
Figure 166 Windows XP: Advanced TCP/IP Properties ....................................................................... 292
Figure 167 Windows XP: Internet Protocol (TCP/IP) Properties .......................................................... 293
24
P-660HW-Dx User’s Guide
List of Figures
Figure 168 Macintosh OS 8/9: Apple Menu .......................................................................................... 294
Figure 169 Macintosh OS 8/9: TCP/IP ................................................................................................. 294
Figure 170 Macintosh OS X: Apple Menu ............................................................................................ 295
Figure 171 Macintosh OS X: Network .................................................................................................. 296
Figure 172 Red Hat 9.0: KDE: Network Configuration: Devices ......................................................... 297
Figure 173 Red Hat 9.0: KDE: Ethernet Device: General .................................................................. 297
Figure 174 Red Hat 9.0: KDE: Network Configuration: DNS ............................................................... 298
Figure 175 Red Hat 9.0: KDE: Network Configuration: Activate ........................................................ 298
Figure 176 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 ............................................... 299
Figure 177 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 ................................................... 299
Figure 178 Red Hat 9.0: DNS Settings in resolv.conf ........................................................................ 299
Figure 179 Red Hat 9.0: Restart Ethernet Card ................................................................................. 299
Figure 180 Red Hat 9.0: Checking TCP/IP Properties ....................................................................... 300
Figure 181 Network Number and Host ID ............................................................................................ 302
Figure 182 Subnetting Example: Before Subnetting ............................................................................ 304
Figure 183 Subnetting Example: After Subnetting ............................................................................... 305
Figure 184 Configuration Text File Format: Column Descriptions ........................................................ 315
Figure 185 Invalid Parameter Entered: Command Line Example ........................................................ 316
Figure 186 Valid Parameter Entered: Command Line Example ........................................................... 316
Figure 187 Internal SPTGEN FTP Download Example ........................................................................ 317
Figure 188 Internal SPTGEN FTP Upload Example ............................................................................ 317
Figure 189 Pop-up Blocker ................................................................................................................... 333
Figure 190 Internet Options: Privacy .................................................................................................... 334
Figure 191 Internet Options: Privacy .................................................................................................... 335
Figure 192 Pop-up Blocker Settings ..................................................................................................... 335
Figure 193 Internet Options: Security ................................................................................................... 336
Figure 194 Security Settings - Java Scripting ....................................................................................... 337
Figure 195 Security Settings - Java ...................................................................................................... 337
Figure 196 Java (Sun) .......................................................................................................................... 338
Figure 197 Connecting a POTS Splitter ............................................................................................... 341
Figure 198 Connecting a Microfilter ...................................................................................................... 342
Figure 199 Connecting a Microfilter and Y-Connector .......................................................................... 342
Figure 200 ZyXEL Device with ISDN .................................................................................................... 343
Figure 201 Ideal Setup ......................................................................................................................... 345
Figure 202 “Triangle Route” Problem ................................................................................................... 346
Figure 203 IP Alias ............................................................................................................................... 346
P-660HW-Dx User’s Guide
25
List of Figures
26
P-660HW-Dx User’s Guide
List of Tables
List of Tables
Table 1 ADSL Standards ....................................................................................................................... 34
Table 2 Front Panel LEDs ...................................................................................................................... 36
Table 3 Web Configurator Screens Summary ....................................................................................... 41
Table 4 Status Screen ............................................................................................................................ 44
Table 5 Status: Any IP Table .................................................................................................................. 46
Table 6 Status: WLAN Status ................................................................................................................. 47
Table 7 Status: Packet Statistics ............................................................................................................ 48
Table 8 Internet Access Wizard Setup: ISP Parameters ....................................................................... 56
Table 9 Internet Connection with PPPoE ............................................................................................... 57
Table 10 Internet Connection with RFC 1483 ........................................................................................ 57
Table 11 Internet Connection with ENET ENCAP ................................................................................. 58
Table 12 Internet Connection with PPPoA ............................................................................................. 59
Table 13 Wireless LAN Setup Wizard 1 ................................................................................................. 61
Table 14 Wireless LAN Setup Wizard 2 ................................................................................................. 62
Table 15 Manually assign a WPA key .................................................................................................... 63
Table 16 Manually assign a WEP key ................................................................................................... 64
Table 17 Media Bandwidth Management Setup: Services .................................................................... 67
Table 18 Bandwidth Management Wizard: General Information ........................................................... 69
Table 19 Bandwidth Management Wizard: Configuration ...................................................................... 70
Table 20 Internet Connection ................................................................................................................. 81
Table 21 Advanced Internet Connection Setup ..................................................................................... 83
Table 22 More Connections ................................................................................................................... 85
Table 23 More Connections Edit ............................................................................................................ 86
Table 24 More Connections Advanced Setup ....................................................................................... 88
Table 25 WAN Backup Setup ................................................................................................................ 90
Table 26 LAN IP ..................................................................................................................................... 98
Table 27 Advanced LAN Setup .............................................................................................................. 99
Table 28 DHCP Setup ......................................................................................................................... 100
Table 29 LAN Client List ...................................................................................................................... 101
Table 30 LAN IP Alias .......................................................................................................................... 103
Table 31 Types of Encryption for Each Type of Authentication ........................................................... 107
Table 32 Wireless LAN: General ......................................................................................................... 109
Table 33 Wireless No Security ..............................................................................................................110
Table 34 Wireless: Static WEP Encryption ...........................................................................................111
Table 35 Wireless: WPA-PSK/WPA2-PSK ............................................................................................112
Table 36 Wireless: WPA/WPA2 ............................................................................................................114
Table 37 Wireless LAN: Advanced .......................................................................................................116
Table 38 OTIST ....................................................................................................................................118
P-660HW-Dx User’s Guide
27
List of Tables
Table 39 MAC Address Filter ............................................................................................................... 121
Table 40 WMM QoS Priorities ............................................................................................................. 122
Table 41 Commonly Used Services ..................................................................................................... 124
Table 42 Wireless Lan: QoS ................................................................................................................ 126
Table 43 Application Priority Configuration .......................................................................................... 127
Table 44 NAT Definitions ..................................................................................................................... 129
Table 45 NAT Mapping Types .............................................................................................................. 132
Table 46 NAT General ......................................................................................................................... 133
Table 47 Services and Port Numbers .................................................................................................. 134
Table 48 NAT Port Forwarding ............................................................................................................ 136
Table 49 Port Forwarding Rule Setup .................................................................................................. 137
Table 50 Address Mapping Rules ........................................................................................................ 138
Table 51 Edit Address Mapping Rule .................................................................................................. 140
Table 52 Common IP Ports .................................................................................................................. 145
Table 53 ICMP Commands That Trigger Alerts ................................................................................... 148
Table 54 Legal NetBIOS Commands ................................................................................................... 148
Table 55 Legal SMTP Commands ....................................................................................................... 148
Table 56 Firewall: General ................................................................................................................... 159
Table 57 Firewall Rules ....................................................................................................................... 160
Table 58 Firewall: Edit Rule ................................................................................................................. 163
Table 59 Customized Services ............................................................................................................ 164
Table 60 Firewall: Configure Customized Services ............................................................................. 165
Table 61 Predefined Services .............................................................................................................. 169
Table 62 Firewall: Anti Probing ............................................................................................................ 172
Table 63 Firewall: Threshold ................................................................................................................ 174
Table 64 Content Filter: Keyword ........................................................................................................ 178
Table 65 Content Filter: Schedule ....................................................................................................... 179
Table 66 Content Filter: Trusted .......................................................................................................... 179
Table 67 Static Route ........................................................................................................................... 184
Table 68 Static Route Edit ................................................................................................................... 185
Table 69 Application and Subnet-based Bandwidth Management Example ....................................... 188
Table 70 Maximize Bandwidth Usage Example ................................................................................... 189
Table 71 Priority-based Allotment of Unused and Unbudgeted Bandwidth Example .......................... 190
Table 72 Fairness-based Allotment of Unused and Unbudgeted Bandwidth Example ....................... 190
Table 73 Bandwidth Management Priorities ........................................................................................ 191
Table 74 Over Allotment of Bandwidth Example ................................................................................. 191
Table 75 Media Bandwidth Management: Summary ........................................................................... 192
Table 76 Bandwidth Management: Rule Setup ................................................................................... 193
Table 77 Sub-Classes of AF Services ................................................................................................. 194
Table 78 Bandwidth Management Rule Configuration ........................................................................ 195
Table 79 Services and Port Numbers .................................................................................................. 197
Table 80 Bandwidth Management Monitor .......................................................................................... 198
Table 81 Dynamic DNS ....................................................................................................................... 200
28
P-660HW-Dx User’s Guide
List of Tables
Table 82 Remote Management: WWW ...............................................................................................205
Table 83 Remote Management: Telnet ................................................................................................ 206
Table 84 Remote Management: FTP ................................................................................................... 207
Table 85 SNMP Traps .......................................................................................................................... 209
Table 86 Remote Management: SNMP ............................................................................................... 210
Table 87 Remote Management: DNS ...................................................................................................211
Table 88 Remote Management: ICMP ................................................................................................ 212
Table 89 Configuring UPnP ................................................................................................................. 214
Table 90 System General Setup .......................................................................................................... 228
Table 91 System Time Setting ............................................................................................................. 230
Table 92 View Log ............................................................................................................................... 234
Table 93 Log Settings .......................................................................................................................... 235
Table 94 System Maintenance Logs .................................................................................................... 237
Table 95 System Error Logs ................................................................................................................ 238
Table 96 Access Control Logs ............................................................................................................. 238
Table 97 TCP Reset Logs .................................................................................................................... 239
Table 98 Packet Filter Logs ................................................................................................................. 239
Table 99 ICMP Logs ............................................................................................................................ 240
Table 100 CDR Logs ........................................................................................................................... 240
Table 101 PPP Logs ............................................................................................................................ 240
Table 102 UPnP Logs .......................................................................................................................... 241
Table 103 Content Filtering Logs ......................................................................................................... 241
Table 104 Attack Logs ......................................................................................................................... 242
Table 105 IPSec Logs .......................................................................................................................... 242
Table 106 IKE Logs ............................................................................................................................. 243
Table 107 PKI Logs ............................................................................................................................. 246
Table 108 Certificate Path Verification Failure Reason Codes ............................................................ 247
Table 109 ACL Setting Notes .............................................................................................................. 247
Table 110 ICMP Notes ......................................................................................................................... 248
Table 111 Syslog Logs ......................................................................................................................... 249
Table 112 RFC-2408 ISAKMP Payload Types .................................................................................... 249
Table 113 Firmware Upgrade .............................................................................................................. 251
Table 114 Maintenance Restore Configuration .................................................................................... 254
Table 115 Diagnostic: General ............................................................................................................. 257
Table 116 Diagnostic: DSL Line ........................................................................................................... 258
Table 117 Hardware Specifications ...................................................................................................... 265
Table 118 Firmware Specifications ...................................................................................................... 265
Table 119 Wireless Firmware Specifications ....................................................................................... 267
Table 120 Standards Supported .......................................................................................................... 267
Table 121 IEEE 802.11g ...................................................................................................................... 275
Table 122 Wireless Security Levels ..................................................................................................... 276
Table 123 Comparison of EAP Authentication Types .......................................................................... 279
Table 124 Wireless Security Relational Matrix .................................................................................... 282
P-660HW-Dx User’s Guide
29
List of Tables
Table 125 IP Address Network Number and Host ID Example ........................................................... 302
Table 126 Subnet Masks ..................................................................................................................... 303
Table 127 Maximum Host Numbers .................................................................................................... 303
Table 128 Alternative Subnet Mask Notation ....................................................................................... 303
Table 129 Subnet 1 .............................................................................................................................. 305
Table 130 Subnet 2 .............................................................................................................................. 306
Table 131 Subnet 3 .............................................................................................................................. 306
Table 132 Subnet 4 .............................................................................................................................. 306
Table 133 Eight Subnets ...................................................................................................................... 306
Table 134 24-bit Network Number Subnet Planning ............................................................................ 307
Table 135 16-bit Network Number Subnet Planning ............................................................................ 307
Table 136 Firewall Commands ............................................................................................................ 309
Table 137 Abbreviations Used in the Example Internal SPTGEN Screens Table ............................... 318
Table 138 Menu 1 General Setup ........................................................................................................ 318
Table 139 Menu 3 ................................................................................................................................ 318
Table 140 Menu 4 Internet Access Setup ............................................................................................ 320
Table 141 Menu 12 .............................................................................................................................. 322
Table 142 Menu 15 SUA Server Setup ................................................................................................ 322
Table 143 Menu 21.1 Filter Set #1 ....................................................................................................... 324
Table 144 Menu 21.1 Filer Set #2, ....................................................................................................... 325
Table 145 Menu 23 System Menus ..................................................................................................... 327
Table 146 Menu 24.11 Remote Management Control ......................................................................... 328
Table 147 Command Examples ........................................................................................................... 329
Table 148 NetBIOS Filter Default Settings .......................................................................................... 340
30
P-660HW-Dx User’s Guide
Loading...