Zyxel PRESTIGE 662H, PRESTIGE 662HW-d user manual

P-662H/HW-D Series
802.11g ADSL2+ 4-Port Security Gateway

User’s Guide

Version 3.40 12/2008 Edition 3
IP Address http://192.168.1.1 User Password user Admin Password 1234
www.zyxel.com

About This User's Guide

About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
Related Documentation
• Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary
information.
" It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk Refer to the included CD for support documents.
• ZyXEL Web Site Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
P-662H/HW-D Series User’s Guide
3

Document Conventions

Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1 Warnings tell you about things that could harm you or your device.
" Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-662H/HW-D may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key. “Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Maintenance > Log > Log Setting means you first click Maintenance in the navigation panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
4
P-662H/HW-D Series User’s Guide
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
P-662H/HW-D Series User’s Guide
5

Safety Warnings

Safety Warnings
1 For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged.
6
P-662H/HW-D Series User’s Guide
This product is recyclable. Dispose of it properly.
Safety Warnings
P-662H/HW-D Series User’s Guide
7
Safety Warnings
8
P-662H/HW-D Series User’s Guide

Contents Overview

Contents Overview
Introduction and Wizards ......................................................................................................37
Getting To Know Your ZyXEL Device ........................................................................................39
Introducing the Web Configurator .............................................................................................. 43
Wizard Setup for Internet Access.............................................................................................. 59
Bandwidth Management Wizard ............ ............................................................. .... ...................73
Network ...................................................................................................................................79
WAN Setup ...................................... ... ... ... ... .... ... ... ... ................................................................. 81
LAN Setup ............................................................................................................................... 101
Wireless LAN ......................................... ... ... ........................................................... ... ... ............113
DMZ ....................................... .................................................... .............................................. 137
Network Address Translation (NAT) Screens .......................................................................... 141
Security .................................................................................................................................155
Firewalls .................................................................................................................................. 157
Firewall Configuration ..............................................................................................................169
Content Filtering ................................. ... ... .......................................................... .... ... ... ........... 191
Content Access Control ...........................................................................................................195
Register ....................................................................................................................................211
Introduction to IPSec ................................... .... .......................................................... ... ... ........ 215
VPN Screens ............ ... .......................................................... .... ... ... ... ... .................................. 221
Certificates ................................... ....................... ....................... ...................... ........................ 247
Advanced ..............................................................................................................................271
Static Route ............................................................................................................................. 273
Bandwidth Management ........................................ ... .... ... ... ... .... ... ........................................... 277
Dynamic DNS Setup ................................................................................................................ 287
Remote Management Configuration ......................... ....................... .......................... .............. 291
Universal Plug-and-Play (UPnP) .............................................................................................303
Maintenance, Troubleshooting and Specifications ..........................................................315
System ................................... ...................... ....................... ....................... .............................. 317
Logs ........................................................................................................................................ 323
Tools ........................................................................................................................................ 329
Diagnostic .................................... ....................................................... ..................................... 335
Troubleshooting ..................................................... .................................................................. 337
Product Specifications ............................................................................................................ 347
P-662H/HW-D Series User’s Guide
9
Contents Overview
Appendices and Index .........................................................................................................353
10
P-662H/HW-D Series User’s Guide

Table of Contents

Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings ........................................................................................................................6
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................23
List of Tables...........................................................................................................................31
Part I: Introduction and Wizards........................................................... 37
Chapter 1
Getting To Know Your ZyXEL Device....................................................................................39
1.1 Introducing the ZyXEL Device ............................................................................................. 39
1.1.1 Applications of the ZyXEL Device .............................................................................. 39
1.1.2 Firewall for Secure Broadband Internet Access ............................................ ... ... .... ... 40
1.1.3 Front Panel LEDs ................................................... .... ... ... ... ... .... ... ... .......................... 41
Chapter 2
Introducing the Web Configurator ........................................................................................43
2.1 Web Configurator Overview .................................................................................................43
2.2 Accessing the Web Configurator ......................................................................................... 43
2.3 Resetting the ZyXEL Device ................................................................................................ 46
2.3.1 Using the Reset Button .......................................... .... ... ... ... ... .... ................................ 46
2.4 Navigating the Web Configurator ................................................. ... .................................... 47
2.4.1 Navigation Panel ....................... ... .... ..........................................................................47
2.4.2 Status Screen ................... ... ... ... ... .... ... ... .......................................................... ... .... ... 50
2.4.3 Status: Any IP Table ......................................... .......................................................... 53
2.4.4 Status: WLAN Status .............................. ... .... ... ... ... .................................................... 53
2.4.5 Status: Bandwidth Status ...........................................................................................54
2.4.6 Status: VPN Status ..................................................................................................... 54
2.4.7 Status: Packet Statistics ......................................................... .... ................................ 55
2.4.8 Changing Login Password ........................................................................................ 57
P-662H/HW-D Series User’s Guide
11
Table of Contents
Chapter 3
Wizard Setup for Internet Access..........................................................................................59
3.1 Introduction ...................................... ... ... .... .......................................................... ... .............59
3.2 Internet Access Wizard Setup ............................................................................................. 59
3.2.1 Automatic Detection ......... ... ... ... ... .... ... .......................................................... ... ... .... ... 61
3.2.2 Manual Configuration ................... .... ... ... ... .... ... ... ... .... ... ............................................. 61
3.3 Wireless Connection Wizard Setup ..................................................................................... 66
3.3.1 Automatically assign a WPA key ................................................................................69
3.3.2 Manually assign a WPA-PSK key .............................................................................. 69
3.3.3 Manually assign a WEP key ....................................................................................... 69
Chapter 4
Bandwidth Management Wizard.................................................................................... ........73
4.1 Introduction ...................................... ... ... .... .......................................................... ... .............73
4.2 Predefined Media Bandwidth Management Services .......................................... ... ... ... .... ... 73
4.3 Bandwidth Management Wizard Setup ............................................................................... 74
Part II: Network....................................................................................... 79
Chapter 5
WAN Setup...............................................................................................................................81
5.1 WAN Overview ................................................................................................................... 81
5.1.1 Encapsulation ................... ... ... ... ... ........................................................... ... ... ... ... .......81
5.1.2 Multiplexing ...................................... ... ... ... .... ... ... ... .................................................... 82
5.1.3 VPI and VCI ........................................................................ ... .... ... ... ..........................82
5.1.4 IP Address Assignment ....................................................... ... .... ... ............................. 82
5.1.5 Nailed-Up Connection (PPP) ..................................................................................... 83
5.1.6 NAT .............. ... .... ... ... ... .............................................................................................. 83
5.2 Metric ........................................... ... ... .......................................................... .... ...................83
5.3 Traffic Shaping ....................................... .... ... ... ... .... ... ... ... .................................................... 84
5.3.1 ATM Traffic Classes ................................................................................................... 85
5.4 Zero Configuration Internet Access ..................................................................................... 85
5.5 Internet Connection ............................................................................................................86
5.5.1 Configuring Advanced Internet Connection ............................................................... 87
5.6 Configuring More Connections .. ... ... ... .......................................................... .... ... ... ... ... .... ... 89
5.6.1 More Connections Edit .............................................. ... ... ... ... .... ................................ 90
5.6.2 Configuring More Connections Advanced Setup .................................... ... ... ... ... .... ... 92
5.7 Traffic Redirect .......................... ... ... ... ... .... .......................................................... ... ............. 94
5.8 Configuring WAN Backup ............................... ... .... ... ... ....................................................... 94
5.9 WAN Backup Advanced Screen .........................................................................................96
5.10 Dial Backup Modem Setup ............................................................................................... 99
12
P-662H/HW-D Series User’s Guide
Table of Contents
Chapter 6
LAN Setup..............................................................................................................................101
6.1 LAN Overview ................................................................................................................... 101
6.1.1 LANs, WANs and the ZyXEL Device ........................................................................ 101
6.1.2 DHCP Setup ..................... ... ... ... ... .... ... ... ... .......................................................... .... . 102
6.1.3 DNS Server Address .............................................. .... ... ........................................... 102
6.1.4 DNS Server Address Assignment ................. ... ... ... .... ... ... ... ..................................... 102
6.2 LAN TCP/IP ..... ... ... ... .... .......................................................... ... ... ..................................... 103
6.2.1 IP Address and Subnet Mask ...................................................................................103
6.2.2 RIP Setup ............................................... ... .... ... ... ... .... ... ........................................... 104
6.2.3 Multicast .............. .......................................................... ... ... ..................................... 104
6.2.4 Any IP ............................................................................... ... ..................................... 105
6.3 Configuring LAN IP .................................... ... ... .......................................................... ... ..... 106
6.3.1 Configuring Advanced LAN Setup ...........................................................................107
6.4 DHCP Setup ....... ... ... .... ... ... ... .... .......................................................... ... ... ... .... .................108
6.5 LAN Client List ................................................................................................................... 109
6.6 LAN IP Alias ....................................... ... .... ... ... ... .... ............................................................110
Chapter 7
Wireless LAN.........................................................................................................................113
7.1 Wireless Network Overview ... .... ... ... ... ... .... ... ... ... .......................................................... .... ..113
7.2 Wireless Security Overview ............................. ... .... .......................................................... ..114
7.2.1 SSID ................................................. ... ... .......................................................... .........114
7.2.2 MAC Address Filter ...................... ....................................................................... ......114
7.2.3 User Authentication .......................................... ... ... .... ... ............................................114
7.2.4 Encryption ........................................... ... ... .......................................................... ......115
7.2.5 One-Touch Intelligent Security Technology (OTIST) .. ...............................................116
7.3 Wireless Performance Overview ............................ ... ... ... .... ... ... .........................................116
7.3.1 Quality of Service (QoS) .................. ... ... ... .... ... ... ... .... ...............................................116
7.4 Additional Wireless Terms ..................................................................................................116
7.5 General Wireless LAN Screen .............. .... ... ............................................................. ... .... ..117
7.5.1 No Security .......................... ... .......................................................... ... .... ... ... ............118
7.5.2 WEP Encryption Screen ...................... ... ... .... ... ... ......................................................119
7.5.3 WPA(2)-PSK ............................................................................................................ 120
7.5.4 WPA(2) Authentication Screen ............................................... .... ... ... ... .... ... ... ... ... .... . 122
7.5.5 Wireless LAN Advanced Setup ................................................................................124
7.6 OTIST .......... .... ... .......................................................... ... .... ... ... ........................................ 125
7.6.1 Enabling OTIST ...................... ... ... .... ... .......................................................... ... ... .... . 125
7.6.2 Starting OTIST ....................................... ... .... ... ... ... .... ... ........................................... 127
7.6.3 Notes on OTIST ............................................ .......................................................... . 128
7.7 MAC Filter ....................................................................................................................... 129
7.8 WMM QoS .......... ... ... ........................................................... ... ... ... ... .... ..............................130
7.8.1 WMM QoS Example ..................... ........................................................... ... ... ... ... .... . 130
P-662H/HW-D Series User’s Guide
13
Table of Contents
7.8.2 WMM QoS Priorities ......................... ... .....................................................................130
7.8.3 Services ..................................................................... ... ... ... ..................................... 131
7.9 QoS Screen ........... ... ........................................................... ... ... ... ... .... .............................. 131
7.9.1 ToS (Type of Service) and WMM QoS .....................................................................131
7.9.2 Application Priority Configuration ........................ ..................................................... 132
7.10 Multiple SSID (P-662HW-D Models only) ........................................................................ 133
7.10.1 Multiple SSID Commands ................. ..................................................................... 134
7.10.2 Multiple SSID Example .......................................................................................... 135
Chapter 8
DMZ........................................................................................................................................137
8.1 Introduction ...................................... ... ... .... .......................................................... ... ...........137
8.2 Configuring DMZ ............................................................ .... ... ... ... ... .... ... ... ... .....................137
8.3 DMZ Public IP Address Example .... ... ... .... ........................................................................139
Chapter 9
Network Address Translation (NAT) Screens.....................................................................141
9.1 NAT Overview ................................................................................................................... 141
9.1.1 NAT Definitions ...................................... ... .... ... ... ... .... ... ........................................... 141
9.1.2 What NAT Does ........................................ .... ... ... ... .... ... ........................................... 142
9.1.3 How NAT Works ....................................................................................................... 142
9.1.4 NAT Application ...................................................... .... ... ... ... ..................................... 142
9.1.5 NAT Mapping Types ............................................ ... .................................................. 143
9.2 SUA (Single User Account) Versus NAT ...........................................................................144
9.3 NAT General Setup ............... .... ............................................................. ... ........................144
9.4 Port Forwarding ........ .... .......................................................... ... ... ... .... ... ... ... .... ... ..............145
9.4.1 Default Server IP Address ......................... .... ... ... ... .... ... ... ........................................ 146
9.4.2 Port Forwarding: Services and Port Numbers ..... ............. ............. ............. ............. . 146
9.4.3 Configuring Servers Behind Port Forwarding (Example) .........................................146
9.5 Configuring Port Forwarding ........... ... ... .............................................................. ... ...........147
9.5.1 Port Forwarding Rule Edit ....................................................................................... 148
9.6 Address Mapping .............................................................................................................. 149
9.6.1 Address Mapping Rule Edit .....................................................................................150
9.7 Trigger Port ...................................................................................................................... 151
9.8 Edit Trigger Port ............................................. ... .... ... ... ... .... ... ........................................... 153
Part III: Security.................................................................................... 155
Chapter 10
Firewalls.................................................................................................................................157
10.1 Firewall Overview ...........................................................................................................157
14
P-662H/HW-D Series User’s Guide
Table of Contents
10.2 Types of Firewalls ............................................................................................................ 157
10.2.1 Packet Filtering Firewalls .......................................................................................157
10.2.2 Application-level Firewalls ........................... .......................................... ................. 158
10.2.3 Stateful Inspection Firewalls .................................................................................. 158
10.3 Introduction to ZyXEL’s Firewall ...................................................................................... 158
10.3.1 Denial of Service Attacks .......................................................................................159
10.4 Denial of Service .............................................................................................................159
10.4.1 Basics ..................................................................................................................... 159
10.4.2 Types of DoS Attacks ............................................................................................. 160
10.5 Stateful Inspection ........................................................................................................... 162
10.5.1 Stateful Inspection Process ....................................................................................163
10.5.2 Stateful Inspection and the ZyXEL Device ............................................................ . 164
10.5.3 TCP Security .......................................................................................................... 164
10.5.4 UDP/ICMP Security ................................................................................................ 165
10.5.5 Upper Layer Protocols ........................................................................................... 165
10.6 Guidelines for Enhancing Security with Your Firewall .....................................................166
10.6.1 Security In General ................................................................................................ 166
10.7 Packet Filtering Vs Firewall ............................................................................................. 167
10.7.1 Packet Filtering: ..................................................................................................... 167
10.7.2 Firewall ...................................................................................................................167
Chapter 11
Firewall Configuration..........................................................................................................169
11.1 Access Methods ............................................................................................................... 169
11.2 Firewall Policies Overview ...............................................................................................169
11.3 Rule Logic Overview ........................................................................................................ 170
11.3.1 Security Ramifications ............................................................................................ 170
11.3.2 Key Fields For Configuring Rules ........................................................................... 171
11.4 Connection Direction ........................................................................................................ 171
11.4.1 LAN to WAN Rules ................................................................................................. 172
11.4.2 Alerts ...................................................................................................................... 172
11.5 General Firewall Policy .................................................................................................172
11.6 Firewall Rules Summary ................................................................................................. 173
11.6.1 Configuring Firewall Rules ...................................................................................175
11.6.2 Customized Services . .... ... ... ... ... .... ............................................................. ... ... .... . 178
11.6.3 Configuring A Customized Service ........................................................................ 178
11.7 Example Firewall Rule .....................................................................................................179
11.8 Predefined Services .........................................................................................................183
11.9 Anti-Probing ..................................................................................................................... 185
11.10 DoS Thresholds ............................................................................................................ 186
11.10.1 Threshold Values ................... ... .... ... ... ... .......................................................... .... . 186
11.10.2 Half-Open Sessions .............. ... .... ... ... ... .... .......................................................... . 187
11.10.3 Configuring Firewall Thresholds ...........................................................................187
P-662H/HW-D Series User’s Guide
15
Table of Contents
Chapter 12
Content Filtering...................................................................................................................191
12.1 Content Filtering Overview .............................................................................................191
12.2 Configuring Keyword Blocking ........................................................................................ 191
12.3 Configuring the Schedule ............................................................................................... 192
12.4 Configuring Trusted Computers ...................................................................................... 193
Chapter 13
Content Access Control.......................................................................................................195
13.1 Content Access Control Overview ...................................................................................195
13.1.1 Content Access Control WLAN Application ........................................................... 195
13.1.2 Configuration Steps ................................................................................................ 195
13.2 Activating CAC and Creating User Groups .................................................................... 196
13.2.1 Configuring Time Schedule ................................................................................... 197
13.2.2 Configuring Services ............................................................................................. 198
13.2.3 Configuring Web Site Filters .................................................................................200
13.2.4 Testing Web Site Access Privileges ......................................................................205
13.3 User Account Setup ........................................................................................................ 206
13.4 User Online Status ..........................................................................................................207
13.5 Trusted Devices .............................................................................................................. 208
13.6 Trusted-external Websites .............................................................................................. 208
13.7 Content Access Control Logins .......................................................................................209
13.7.1 User Login ..............................................................................................................209
13.7.2 Administrator Login ................................................................................................210
Chapter 14
Register..................................................................................................................................211
14.1 myZyXEL.com overview ...................................................................................................211
14.1.1 Subscription Services Available on the ZyXEL Device ...........................................211
14.2 Registration .....................................................................................................................212
14.3 Service ............................................................................................................................. 213
Chapter 15
Introduction to IPSec............................................................................................................215
15.1 VPN Overview ................................................................................................................. 215
15.1.1 IPSec ...................................................................................................................... 215
15.1.2 Security Association ............................................................................................... 215
15.1.3 Other Terminology .................................................................................................. 215
15.1.4 VPN Applications ................................................................................................... 216
15.2 IPSec Architecture ...................... ................................................... .................................. 216
15.2.1 IPSec Algorithms .................................................................................................... 217
15.2.2 Key Management ................................................................................................... 217
15.3 Encapsulation .................................................................................................................. 217
16
P-662H/HW-D Series User’s Guide
Table of Contents
15.3.1 Transport Mode ...................................................................................................... 218
15.3.2 Tunnel Mode ....................................................... .... ... ... ... ..................................... 218
15.4 IPSec and NAT ................................................................................................................218
Chapter 16
VPN Screens..........................................................................................................................221
16.1 VPN/IPSec Overview ....................................................................................................... 221
16.2 IPSec Algorithms ............................................................................................................. 221
16.2.1 AH (Authentication Header) Protocol .....................................................................221
16.2.2 ESP (Encapsulating Security Payload) Protocol ...................... .............................. 221
16.3 My IP Address ................................................................................................................. 222
16.4 Secure Gateway Address .................... .................................................... ........................ 222
16.4.1 Dynamic Secure Gateway Address .......................................................................223
16.5 VPN Setup Screen .........................................................................................................223
16.6 Keep Alive ....................................................................................................................... 225
16.7 VPN, NAT, and NAT Traversal ......................................................................................... 225
16.8 Remote DNS Server ........................................................................................................226
16.9 ID Type and Content ........................................................................................................227
16.9.1 ID Type and Content Examples .............................................................................228
16.10 Pre-Shared Key ............................................................................................................. 229
16.11 Editing VPN Policies .....................................................................................................229
16.12 IKE Phases ...................................................................................................................233
16.12.1 Negotiation Mode .................................................................................................234
16.12.2 Diffie-Hellman (DH) Key Groups ..........................................................................235
16.12.3 Perfect Forward Secrecy (PFS) .......................................................................... 235
16.13 Configuring Advanced IKE Settings ............................................................................. 235
16.14 Manual Key Setup .........................................................................................................238
16.14.1 Security Parameter Index (SPI) ........... .... .......................................................... . 238
16.15 Configuring Manual Key ...............................................................................................238
16.16 Viewing SA Monitor ......................................................................................................241
16.17 Configuring Global Setting ............................................................................................ 242
16.18 Telecommuter VPN/IPSec Examples ............................................................................243
16.18.1 Telecommuters Sharing One VPN Rule Example ................................................243
16.18.2 Telecommuters Using Unique VPN Rules Example ............................................. 244
16.19 VPN and Remote Management .....................................................................................245
Chapter 17
Certificates ............................................................................................................................247
17.1 Certificates Overview ....................................................................................................... 247
17.1.1 Advantages of Certificates ..................................................................................... 248
17.2 Self-signed Certificates .................................................................................................... 248
17.3 Configuration Summary ...................................................................................................248
17.4 My Certificates ................................................................................................................248
P-662H/HW-D Series User’s Guide
17
Table of Contents
17.5 My Certificate Import ...................................................................................................... 250
17.5.1 Certificate File Formats ..........................................................................................251
17.6 My Certificate Create ......................................................................................................252
17.7 My Certificate Details .............. ... ... ... ... .... ... ... ... ............................................................... 254
17.8 Trusted CAs ................................................................................................................... 257
17.9 Trusted CA Import .........................................................................................................259
17.10 Trusted CA Details .........................................................................................................260
17.11 Trusted Remote Hosts .................................................................................................262
17.12 Verifying a Trusted Remote Host’s Certificate ...............................................................264
17.12.1 Trusted Remote Host Certificate Fingerprints ..................................................... . 264
17.13 Trusted Remote Hosts Import ...................................................................................... 265
17.14 Trusted Remote Host Certificate Details ..................................................................... 265
17.15 Directory Servers ...........................................................................................................268
17.16 Directory Server Add or Edit ........................................................................................269
Part IV: Advanced ................................................................................ 271
Chapter 18
Static Route...........................................................................................................................273
18.1 Static Route Overview ..................................................................................................273
18.2 Configuring Static Routes ...............................................................................................274
18.2.1 Static Route Edit ................................................................................................... 275
Chapter 19
Bandwidth Management.......................................................................................................277
19.1 Bandwidth Management Overview ................................................................................. 277
19.2 Application-based Bandwidth Management .................................................................... 277
19.3 Subnet-based Bandwidth Management .......................................................................... 277
19.4 Application and Subnet-based Bandwidth Management .................................................278
19.5 Scheduler ........................................................................................................................278
19.5.1 Priority-based Scheduler ........................................................................................ 278
19.5.2 Fairness-based Scheduler ..................................................................................... 279
19.6 Maximize Bandwidth Usage ............................................................................................279
19.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 279
19.6.2 Maximize Bandwidth Usage Example .................................................................... 279
19.6.3 Bandwidth Management Priorities ......................................................................... 281
19.7 Configuring Summary .....................................................................................................281
19.8 Bandwidth Management Rule Setup .............................................................................282
19.8.1 Rule Configuration ................................................................................................. 283
19.9 Bandwidth Monitor ..........................................................................................................286
18
P-662H/HW-D Series User’s Guide
Table of Contents
Chapter 20
Dynamic DNS Setup .............................................................................................................287
20.1 Dynamic DNS Overview ................................................................................................. 287
20.1.1 DYNDNS Wildcard ......................... ....................................................................... . 287
20.2 Configuring Dynamic DNS .............................................................................................. 287
Chapter 21
Remote Management Configuration...................................................................................291
21.1 Remote Management Overview ..................................................................................... 291
21.1.1 Remote Management Limitations ..........................................................................292
21.1.2 Remote Management and NAT .............................................................................. 292
21.1.3 System Timeout ....................................................................................................292
21.2 WWW .............................................................................................................................. 292
21.3 Telnet ...............................................................................................................................294
21.4 Configuring Telnet ............................................................................................................ 294
21.5 Configuring FTP ............................................................................................................. 295
21.6 SNMP .............................................................................................................................. 296
21.6.1 Supported MIBs ..................................................................................................... 297
21.6.2 SNMP Traps ........................................................................................................... 297
21.6.3 Configuring SNMP ................................................................................................. 297
21.7 Configuring DNS ............................................................................................................. 299
21.8 Configuring ICMP ............................................................................................................299
21.9 TR-069 ............................................................................................................................. 300
Chapter 22
Universal Plug-and-Play (UPnP)..........................................................................................303
22.1 Introducing Universal Plug and Play ............................................................................... 303
22.1.1 How do I know if I'm using UPnP? ......................................................................... 303
22.1.2 NAT Traversal ........................................................................................................ 303
22.1.3 Cautions with UPnP ...............................................................................................303
22.2 UPnP and ZyXEL ............................................................................................................304
22.2.1 Configuring UPnP .................................................................................................. 304
22.3 Installing UPnP in Windows Example ..............................................................................305
22.4 Using UPnP in Windows XP Example .............................................................................308
Part V: Maintenance, Troubleshooting and Specifications.............. 315
Chapter 23
System...................................................................................................................................317
23.1 General Setup and System Name .................... ....................................................... ........317
23.1.1 System Configuration ............................................................................................ 317
P-662H/HW-D Series User’s Guide
19
Table of Contents
23.2 Time Setting .................................................................................................................... 319
Chapter 24
Logs ......................................................................................................................................323
24.1 Logs Overview ................................................................................................................323
24.1.1 Alerts and Logs ......................................................................................................323
24.2 Viewing the Logs .............................................................................................................323
24.3 Configuring Log Settings ................................................................................................324
24.4 SMTP Error Messages ....................................................................................................326
24.4.1 Example E-mail Log ..............................................................................................327
Chapter 25
Tools.......................................................................................................................................329
25.1 Firmware Upgrade ............................................... ........................................................... 329
25.2 Configuration Screen .......................................................................................................331
25.2.1 Backup Configuration ........................ ....................................... .............................. 331
25.2.2 Restore Configuration ............................................................................................ 332
25.2.3 Back to Factory Defaults ................... ... ... .......................................................... .... . 333
25.3 Restart ............................................................................................................................. 333
Chapter 26
Diagnostic..............................................................................................................................335
26.1 General Diagnostic ......................................................................................................... 335
26.2 DSL Line Diagnostic ....... ... .... ... ... ... ...............................................................................336
Chapter 27
Troubleshooting....................................................................................................................337
27.1 Problems Starting Up the ZyXEL Device ......................................................................... 337
27.2 Problems with the LAN .................................................................................................... 337
27.3 Problems with the WAN ................................................................................................... 338
27.4 Problems Accessing the ZyXEL Device ............... ... ... ..................................................... 3 38
27.4.1 Pop-up Windows, JavaScripts and Java Permissions ...........................................339
27.4.2 ActiveX Controls in Internet Explorer ..................................................................... 344
Chapter 28
Product Specifications........................................................................................................347
28.1 General ZyXEL Device Specifications .............................................................................347
28.2 Wall-mounting Instructions ..............................................................................................351
Part VI: Appendices and Index ........................................................... 353
Appendix A Setting up Your Computer’s IP Address............................................................355
20
P-662H/HW-D Series User’s Guide
Table of Contents
Appendix B Pop-up Windows, JavaScripts and Java Permissions......................................377
Appendix C IP Addresses and Subnetting ...........................................................................385
Appendix D Wireless LANs ..................................................................................................395
Appendix E Management with Wireless Zero Configuration................................................409
Appendix F Common Services.............................................................................................423
Appendix G Virtual Circuit Topology.....................................................................................427
Appendix H Importing Certificates........................................................................................429
Appendix I NetBIOS Filter Commands.................................................................................435
Appendix J Command Interpreter ........................................................................................437
Appendix K Internal SPTGEN ..............................................................................................443
Appendix L Log Descriptions................................................................................................459
Appendix M Legal Information..............................................................................................475
Appendix N Customer Support.............................................................................................479
Index.......................................................................................................................................485
P-662H/HW-D Series User’s Guide
21
Table of Contents
22
P-662H/HW-D Series User’s Guide

List of Figures

List of Figures
Figure 1 ZyXEL Device Internet Access Application ..............................................................................40
Figure 2 ZyXEL Device LAN-to-LAN Application Example ..................... ................... ................... .......... 40
Figure 3 Firewall Application .................................................................................................................. 41
Figure 4 P-662H Front Panel .................................................................................................................. 41
Figure 5 P-662HW Front Panel ..............................................................................................................41
Figure 6 Password Screen .....................................................................................................................44
Figure 7 Change Password at Login ...................................................................................................... 45
Figure 8 Replace Factory Default Certificate ..........................................................................................45
Figure 9 Select a Mode .......................................................................................................................... 46
Figure 10 Web Configurator: Main Screen ........................................................................................... 47
Figure 11 Status Screen ......................................................................................................................... 51
Figure 12 Status: Any IP Table ............................................................................................................... 53
Figure 13 Status: WLAN Status .............................................................................................................. 54
Figure 14 Status: Bandwidth Status ........................................................................................................ 54
Figure 15 Status: VPN Status ................................................................................................................. 55
Figure 16 Status: Packet Statistics ......................................................................................................... 56
Figure 17 System General ...................................................................................................................... 57
Figure 18 Select a Mode ........................................................................................................................ 59
Figure 19 Wizard: Welcome ...................................................................................................................60
Figure 20 Auto Detection: No DSL Connection ...................................................................................... 60
Figure 21 Auto Detection: Failed ............................................................................................................ 61
Figure 22 Auto-Detection: PPPoE ..........................................................................................................61
Figure 23 Internet Access Wizard Setup: ISP Parameters ................. .................... ................... ............. 62
Figure 24 Internet Connection with PPPoE ............................................................................................ 63
Figure 25 Internet Connection with RFC 1483 ......................................................................................63
Figure 26 Internet Connection with ENET ENCAP .................................................................................64
Figure 27 Internet Connection with PPPoA ............................................................................................ 65
Figure 28 Connection Test Failed-1 ........................................................................................................65
Figure 29 Connection Test Failed-2. .......................................................................................................66
Figure 30 Connection Test Successful .................................. .... ... ... ... .... ... ... ... ... .... ... ... ... .... ... ... .............66
Figure 31 Wireless LAN Setup Wizard 1 ................................................................................................ 67
Figure 32 Wireless LAN Setup Wizard 2 ................................................................................................ 68
Figure 33 Manually assign a WPA key ...................................................................................................69
Figure 34 Manually assign a WEP key ...................................................................................................70
Figure 35 Wireless LAN Setup 3 ............................................................................................................70
Figure 36 Internet Access and WLAN Wizard Setup Complete ............................................................. 71
Figure 37 Select a Mode ........................................................................................................................ 74
Figure 38 Wizard: Welcome ...................................................................................................................75
P-662H/HW-D Series User’s Guide
23
List of Figures
Figure 39 Bandwidth Management Wizard: General Information ...........................................................75
Figure 40 Bandwidth Management Wizard: Configuration ..................................................................... 76
Figure 41 Bandwidth Management Wizard: Complete ........................................................................... 77
Figure 42 Example of Traffic Shaping ....................................................................................................84
Figure 43 Internet Connection (PPPoE) .................................................................................................86
Figure 44 Advanced Internet Connection ............................................................................................... 88
Figure 45 More Connections ........................................... ... ... .... ... ... ... .... ................................................ 90
Figure 46 More Connections Edit ................. ... ... ... ... .... ... ... ... .... ... ... ... .................................................... 91
Figure 47 More Connections Advanced Setup ................................................ ... .... ... ... ... .... ... ... ... ... .... ... 93
Figure 48 Traffic Redirect Example .............. .......................................................................................... 94
Figure 49 Traffic Redirect LAN Setup ..................................................................................................... 94
Figure 50 WAN Backup Setup ...................... ... ... ... ... .... ... .......................................................................95
Figure 51 WAN Backup Advanced Setup ............................................................................................... 97
Figure 52 WAN Dial Backup Modem Setup ............................................................ ... ... ... .... ... ... ... ... ....... 99
Figure 53 LAN and WAN IP Addresses ................................................................................................ 101
Figure 54 Any IP Example ....................................................................................................................105
Figure 55 LAN IP .................................................................................................................................. 106
Figure 56 Advanced LAN Setup ........................................................................................................... 107
Figure 57 DHCP Setup .........................................................................................................................108
Figure 58 LAN Client List .......................................................................................................................110
Figure 59 Physical Network & Partitioned Logical Networks .................................................................111
Figure 60 LAN IP Alias ..........................................................................................................................111
Figure 61 Example of a Wireless Network ............................................................................................113
Figure 62 Wireless LAN: General .........................................................................................................117
Figure 63 Wireless: No Security ............................................................................................................119
Figure 64 Wireless: Static WEP Encryption ............................................................ ...................... ........ 120
Figure 65 Wireless: WPA(2)-PSK .........................................................................................................121
Figure 66 Wireless: WPA(2) ................................................................................................................. 122
Figure 67 Advanced ............................................................................................................................. 124
Figure 68 OTIST ................................................................................................................................... 126
Figure 69 Example Wireless Client OTIST Screen .............................................................................. 127
Figure 70 Security Key .......................................... ... .... ... ... ..................................................................127
Figure 71 OTIST in Progress (AP) ............... ........................................................................................ 128
Figure 72 OTIST in Progress (Client) ...................................................................................................128
Figure 73 No AP with OTIST Found .....................................................................................................128
Figure 74 Start OTIST? ........................................................................................................................128
Figure 75 MAC Address Filter ..............................................................................................................129
Figure 76 Wireless LAN: QoS ............ ... ... .... ........................................................................................ 131
Figure 77 Application Priority Configuration .........................................................................................132
Figure 78 Multiple SSID Network Example ..........................................................................................134
Figure 79 DMZ ...................................................................................................................................... 138
Figure 80 DMZ Public Address Example ...................... ................... ................... .................... .............. 139
Figure 81 How NAT Works ...................................................................................................................142
24
P-662H/HW-D Series User’s Guide
List of Figures
Figure 82 NAT Application With IP Alias ..............................................................................................143
Figure 83 NAT General .........................................................................................................................145
Figure 84 Multiple Servers Behind NAT Example ................................................................................ 146
Figure 85 NAT Port Forwarding ................................................................. ........................................... 147
Figure 86 Port Forwarding Rule Setup ................................................................................................148
Figure 87 Address Mapping Rules .......................................................................................................149
Figure 88 Edit Address Mapping Rule ............................................ ... .... ... ........................................... 150
Figure 89 Trigger Port ..........................................................................................................................152
Figure 90 Trigger Port Edit .................................................................................................................. 153
Figure 91 Firewall Application .............................................................................................................. 159
Figure 92 Three-Way Handshake ......................................................................................................... 160
Figure 93 SYN Flood ....................... ... ... ... .... ... .......................................................... ... ... .....................161
Figure 94 Smurf Attack .........................................................................................................................161
Figure 95 Stateful Inspection ................................................................................................................163
Figure 96 Firewall: General ..................................................................................................................172
Figure 97 Firewall Rules ......................................................................................................................174
Figure 98 Firewall: Edit Rule ................................................................................................................ 176
Figure 99 Firewall: Customized Services .............................................................................................178
Figure 100 Firewall: Configure Customized Services ...........................................................................179
Figure 101 Firewall Example: Rules ............................. ................................................ ........................ 180
Figure 102 Edit Custom Port Example .................................................................................................180
Figure 103 Firewall Example: Edit Rule: Destination Address ............................................................ 181
Figure 104 Firewall Example: Edit Rule: Select Customized Services ................................................. 182
Figure 105 Firewall Example: Rules: MyService .................................................................................183
Figure 106 Firewall: Anti Probing ......................................................................................................... 185
Figure 107 Firewall: Threshold ............................................................................................................. 188
Figure 108 Content Filter: Keyword ...................................................................................................... 191
Figure 109 Content Filter: Schedule .....................................................................................................192
Figure 110 Content Filter: Trusted ........................................................................................................ 193
Figure 111 Content Access Control with WLAN Application ................................................................195
Figure 112 Content Access Control: General ......................................................................................196
Figure 113 Control Access Control: General: Time Scheduling ........................ .... ... ... ........................ 197
Figure 114 Content Access Control: General: Services .................................... .... ... ... ... .... .................199
Figure 115 Content Access Control: G e neral: Web Site Filter ..... ... ... .................................................. 200
Figure 116 Content Access Control: General: Diagnose ... ... .... ... ........................................................ 205
Figure 117 Content Access Control: User Profiles ..............................................................................206
Figure 118 Content Access Control: Online Status ................................ ... ... ... ... .... ..............................207
Figure 119 Content Access Control: Trusted Device ........................................................................... 208
Figure 120 Content Access Control: Trusted-external Website ................... ... ... .... .............................. 209
Figure 121 Content Access Control: User Login Screen .................................................................... 210
Figure 122 Content Access Control: User Logout Screen ...................................................................210
Figure 123 Security > Register ............................................................................................................. 212
Figure 124 Security > Register > Service .............................................................................................213
P-662H/HW-D Series User’s Guide
25
List of Figures
Figure 125 Encryption and Decryption .................................................................................................216
Figure 126 IPSec Architecture .............................................................................................................. 217
Figure 127 Transport and T unnel Mode IPSec Encapsulation ............................................................. 218
Figure 128 IPSec Summary Fields .......................................................................................................223
Figure 129 VPN Setup .......................................................................................................................... 224
Figure 130 NAT Router Between IPSec Routers .................................................................................225
Figure 131 VPN Host using Intranet DNS Server Example ..................................................................227
Figure 132 Edit VPN Policies ...................... ... ... ... ... .... ........................................................................229
Figure 133 Two Phases to Set Up the IPSec SA .................................................................................233
Figure 134 Advanced VPN Policies ...................................................................................................... 236
Figure 135 VPN: Manual Key ............................................................................................................... 239
Figure 136 VPN: SA Monitor ................................................................................................................242
Figure 137 VPN: Global Setting ........................................................................................................... 242
Figure 138 Telecommuters Sharing One VPN Rule Example .............................................................. 243
Figure 139 Telecommuters Using Unique VPN Rules Example ........................................................... 244
Figure 140 Certificate Configuration Overview .....................................................................................248
Figure 141 My Certificates ................................................................................................................... 249
Figure 142 My Certificate Import ..........................................................................................................251
Figure 143 My Certificate Create .......................................................................................................... 252
Figure 144 My Certificate Details ......................................................................................................... 255
Figure 145 Trusted CAs ........................................................................................................................258
Figure 146 Trusted CA Import .............................................................................................................. 259
Figure 147 Trusted CA Details .............................................................................................................260
Figure 148 Trusted Remote Hosts ........................................................................................................ 263
Figure 149 Remote Host Certificates ...................................................................................................264
Figure 150 Certificate Details .............................................................................................................. 264
Figure 151 Trusted Remote Host Import .............................................................................................. 265
Figure 152 Trusted Remote Host Details .............................................................................................266
Figure 153 Directory Servers ................................................................................................................ 269
Figure 154 Directory Server Add ..........................................................................................................270
Figure 155 Example of Static Routing Topology ...................................................................................273
Figure 156 Static Route ........................................................................................................................274
Figure 157 Static Route Edit ................................................................................................................. 275
Figure 158 Subnet-based Bandwidth Management Example ............................................. ... ... ... ... .... . 278
Figure 159 Bandwidth Management: Summary ................................................................................... 281
Figure 160 Bandwidth Management: Rule Setup ................................................................................. 282
Figure 161 Bandwidth Management Rule Configuration ...................................................................... 284
Figure 162 Bandwidth Management: Monitor ......................................................................................286
Figure 163 Dynamic DNS .....................................................................................................................288
Figure 164 Remote Management: WWW ............................................................................................. 293
Figure 165 Telnet Configuration on a TCP/IP Network .............. ................ ............. ................ .............. 294
Figure 166 Remote Management: Telnet .............................................................................................294
Figure 167 Remote Management: FTP ................................................................................................295
26
P-662H/HW-D Series User’s Guide
List of Figures
Figure 168 SNMP Management Model ................................................................................................296
Figure 169 Remote Management: SNMP ............................................................................................298
Figure 170 Remote Management: DNS ...............................................................................................299
Figure 171 Remote Management: ICMP ............................ .................................................... ..............300
Figure 172 Enabling TR-069 ............................................................................................................... 301
Figure 173 Configuring UPnP ............................................................................................................... 304
Figure 174 Add/Remove Programs: Windows Setup: Communication ................................................ 305
Figure 175 Add/Remove Programs: Windows Setup: Communication: Components .......................... 306
Figure 176 Network Connections .........................................................................................................306
Figure 177 Windows Optional Networking Components Wizard ............................... ... ... .... .................307
Figure 178 Networking Services ........................................................................................................... 307
Figure 179 Network Connections .........................................................................................................308
Figure 180 Internet Connection Properties .......................................................................................... 309
Figure 181 Internet Connection Properties: Advanced Settings ...........................................................310
Figure 182 Internet Connection Properties: Advanced Settings: Add .................................................. 310
Figure 183 System Tray Icon .................................................................................................................311
Figure 184 Internet Connection Status ..................................................................................................311
Figure 185 Network Connections .........................................................................................................312
Figure 186 Network Connections: My Network Places ........................................................................ 313
Figure 187 Network Connections: My Network Places: Properties: Example ......................................313
Figure 188 System General Setup .......................................................................................................318
Figure 189 System Time Setting ..........................................................................................................319
Figure 190 View Log ............................................................................................................................. 324
Figure 191 Log Settings ....................................................................................................................... 325
Figure 192 E-mail Log Example ...........................................................................................................327
Figure 193 Firmware Upgrade .............................................................................................................. 329
Figure 194 Firmware Upload In Progress ........................... .................... ................... ................... ........ 330
Figure 195 Network Temporarily Disconnected ....................................................................................330
Figure 196 Error Message ....................................................................................................................331
Figure 197 Configuration ...................................................................................................................... 331
Figure 198 Configuration Restore Successful ......................................................................................332
Figure 199 Temporarily Disconnected ..................................................................................................332
Figure 200 Configuration Restore Error ............................................................................................... 333
Figure 201 Restart Screen ................................................................................................................... 333
Figure 202 Diagnostic: General ............................................................................................................335
Figure 203 Diagnostic: DSL Line ..........................................................................................................336
Figure 204 Pop-up Blocker ...................................................................................................................339
Figure 205 Internet Options .................................................................................................................340
Figure 206 Internet Options ..................................................................................................................341
Figure 207 Pop-up Blocker Settings .....................................................................................................341
Figure 208 Internet Options ..................................................................................................................342
Figure 209 Security Settings - Java Scripting ....................................................................................... 343
Figure 210 Security Settings - Java ...................................................................................................... 343
P-662H/HW-D Series User’s Guide
27
List of Figures
Figure 211 Java (Sun) .......................................................................................................................... 344
Figure 212 Internet Options Security ....................................................................................................345
Figure 213 Security Setting ActiveX Controls .......................................................................................345
Figure 214 Wall-mounting Example ...................................................................................................... 352
Figure 215 Masonry Plug and M4 Tap Screw .......................................................................................352
Figure 216 WIndows 95/98/Me: Network: Configuration ...................................................................... 356
Figure 217 Windows 95/98/Me: TCP/IP Properties: IP Address .......................................................... 357
Figure 218 Windows 95/98/Me: TCP/IP Properties: DNS Configuration .............................................. 358
Figure 219 Windows XP: Start Menu .................................................................................................... 359
Figure 220 Windows XP: Control Panel ...............................................................................................359
Figure 221 Windows XP: Control Panel: Network Connections: Properties . ... ... .... ... ... ... .... ... ... ... ... .... . 360
Figure 222 Windows XP: Local Area Connection Properties ............................................................... 360
Figure 223 Windows XP: Internet Protocol (TCP/IP) Properties ........................ .................................. 361
Figure 224 Windows XP: Advanced TCP/IP Properties ....................................................................... 362
Figure 225 Windows XP: Internet Protocol (TCP/IP) Properties ........................ .................................. 363
Figure 226 Windows Vista: Start Menu ................................................................................................. 364
Figure 227 Windows Vista: Control Panel ............................................................................................ 364
Figure 228 Windows Vista: Network And Internet ................................................................................ 364
Figure 229 Windows Vista: Network and Sharing Center ..................................................................... 364
Figure 230 Windows Vista: Network and Sharing Center ..................................................................... 365
Figure 231 Windows Vista: Local Area Connection Properties ............................................................ 365
Figure 232 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties ...................................366
Figure 233 Windows Vista: Advanced TCP/IP Properties .................................. .................................. 367
Figure 234 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties ...................................368
Figure 235 Macintosh OS 8/9: Apple Menu .......................................................................................... 369
Figure 236 Macintosh OS 8/9: TCP/IP .................................................................................................369
Figure 237 Macintosh OS X: Apple Menu ............................................................................................370
Figure 238 Macintosh OS X: Network ..................................................................................................371
Figure 239 Red Hat 9.0: KDE: Network Configuration: Devices ......................................................... 372
Figure 240 Red Hat 9.0: KDE: Ethernet Device: General .................................... ... ... ........................ 372
Figure 241 Red Hat 9.0: KDE: Network Configuration: DNS ...............................................................373
Figure 242 Red Hat 9.0: KDE: Network Configuration: Activate ............. ... ... ... .................................. 373
Figure 243 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 ...............................................374
Figure 244 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 ...................................................374
Figure 245 Red Hat 9.0: DNS Settings in resolv.conf ........................................................................ 374
Figure 246 Red Hat 9.0: Restart Ethernet Card ................................................................................. 374
Figure 247 Red Hat 9.0: Checking TCP/IP Properties .......................................................................375
Figure 248 Pop-up Blocker ...................................................................................................................377
Figure 249 Internet Options: Privacy .................................................................................................... 378
Figure 250 Internet Options: Privacy .................................................................................................... 379
Figure 251 Pop-up Blocker Settings .....................................................................................................379
Figure 252 Internet Options: Security ................................................................................................... 380
Figure 253 Security Settings - Java Scripting ....................................................................................... 381
28
P-662H/HW-D Series User’s Guide
List of Figures
Figure 254 Security Settings - Java ...................................................................................................... 381
Figure 255 Java (Sun) .......................................................................................................................... 382
Figure 256 Mozilla Firefox: Tools > Options .......... ... ........................................................... ... ... ... ........ 383
Figure 257 Mozilla Firefox Content Security .........................................................................................383
Figure 258 Network Number and Host ID ............................................................................................ 386
Figure 259 Subnetting Example: Before Subnetting ....................................... ... .... ... ... ... .....................388
Figure 260 Subnetting Example: After Subnetting ....................................... ... ... .... ... ... ... .....................389
Figure 261 Conflicting Computer IP Addresses Example .................................................................... 393
Figure 262 Conflicting Computer IP Addresses Example .................................................................... 393
Figure 263 Conflicting Computer and Router IP Addresses Example .................................................. 394
Figure 264 Peer-to-Peer Communication in an Ad-hoc Network ......................................................... 395
Figure 265 Basic Service Set ...............................................................................................................396
Figure 266 Infrastructure WLAN ............................... ................................................. ........................... 397
Figure 267 RTS/CTS ........................................................................................................................... 398
Figure 268 WPA(2) with RADIUS Application Example .......................................................................405
Figure 269 WPA(2)-PSK Authentication ...............................................................................................406
Figure 270 Windows XP SP1: Wireless Network Connection Status ................................................... 409
Figure 271 Windows XP SP2: Wireless Network Connection Status ................................................... 410
Figure 272 Windows XP SP1: Wireless Network Connection Properties .............................................410
Figure 273 Windows XP SP2: Wireless Network Connection Properties ..............................................411
Figure 274 Windows XP SP2: WZC Not Available ................................................................................411
Figure 275 Windows XP SP2: System Tray Icon .................................................................................412
Figure 276 Windows XP SP2: Wireless Network Connection Status ................................................... 412
Figure 277 Windows XP SP1: Wireless Network Connection Status ................................................... 413
Figure 278 Windows XP SP2: Wireless Network Connection .............................................................. 413
Figure 279 Windows XP SP1: Wireless Network Connection Properties .............................................414
Figure 280 Windows XP SP2: Wireless Network Connection: WEP or WPA-PSK ..............................415
Figure 281 Windows XP SP2: Wireless Network Connection: No Security ........................................ 415
Figure 282 Windows XP: Wireless (network) properties: Association .......... ........................................ 416
Figure 283 Windows XP: Wireless (network) properties: Authentication ............................................. 417
Figure 284 Windows XP: Protected EAP Properties ............................................................................ 418
Figure 285 Windows XP: Smart Card or other Certificate Properties ...................................................419
Figure 286 Windows XP SP2: Wireless Networks: Preferred Networks ..............................................420
Figure 287 Windows XP SP1: Wireless Networks: Preferred Networks ..............................................421
Figure 288 Virtual Circuit Topology ....................................................................................................... 427
Figure 289 Security Certificate .............................................................................................................429
Figure 290 Login Screen ......................................................................................................................430
Figure 291 Certificate General Information before Import ....................................................................430
Figure 292 Certificate Import Wizard 1 .................................................................................................431
Figure 293 Certificate Import Wizard 2 .................................................................................................431
Figure 294 Certificate Import Wizard 3 .................................................................................................432
Figure 295 Root Certificate Store ......................................................................................................... 432
Figure 296 Certificate General Information after Import ....................................................................... 433
P-662H/HW-D Series User’s Guide
29
List of Figures
Figure 297 Displaying Log Categories Example ..................................................................................438
Figure 298 Displaying Log Parameters Example ................................................................................. 438
Figure 299 Routing Command Example ..............................................................................................440
Figure 300 Backup Gateway ................................................................................................................441
Figure 301 Configuration Text File Format: Column Descriptions ........................................................443
Figure 302 Invalid Parameter Entered: Command Line Example ....................................... ... ... ... ... .... . 444
Figure 303 Valid Parameter Entered: Command Line Example ...........................................................444
Figure 304 Internal SPTGEN FTP Download Example ........................................................................ 445
Figure 305 Internal SPTGEN FTP Upload Example ............................................................................ 445
Figure 306 Displaying Log Categories Example ..................................................................................472
Figure 307 Displaying Log Parameters Example ................................................................................. 473
30
P-662H/HW-D Series User’s Guide

List of Tables

List of Tables
Table 1 Front Panel LEDs ...................................................................................................................... 41
Table 2 Web Configurator Screens Summary ....................................................................................... 47
Table 3 Status Screen ............................................................................................................................51
Table 4 Status: Any IP Table .................................................................................................................. 53
Table 5 Status: WLAN Status ................................................................................................................. 54
Table 6 Status: VPN Status ................... ............................................................. .... ................................ 55
Table 7 Status: Packet Statistics ............................................................................................................56
Table 8 System General: Password ...................................................................................................... 57
Table 9 Internet Access Wizard Setup: ISP Parameters ....................................................................... 62
Table 10 Internet Connection with PPPoE ............................................................................................ 63
Table 11 Internet Connection with RFC 1483 ................................................. ... .... ... ... ... .... ... ... ... ..........63
Table 12 Internet Connection with ENET ENCAP ................................................................................. 64
Table 13 Internet Connection with PPPoA ............................................................................................. 65
Table 14 Wireless LAN Setup Wizard 1 .................................................................................................67
Table 15 Wireless LAN Setup Wizard 2 .................................................................................................68
Table 16 Manually assign a WPA key ....................................................................................................69
Table 17 Manually assign a WEP key ...................................................................................................70
Table 18 Media Bandwidth Management Setup: Services ....................................................................73
Table 19 Bandwidth Management Wizard: General Information ........................................................... 75
Table 20 Bandwidth Management Wizard: Configuration ......................................................................76
Table 21 Internet Connection ................................................................................................................. 86
Table 22 Advanced Internet Connection ................................................................................................88
Table 23 More Connections ............................................... ... .... ... ... ... .................................................... 90
Table 24 More Connections Edit .................. ... ... ... ... .... ... ... ... .... ... ... ....................................................... 91
Table 25 More Connections Advanced Setup ............. ... ... ... ................................................................. 93
Table 26 WAN Backup Setup ................................................................................................................ 95
Table 27 WAN Backup Advanced Setup ..................................... ... ... .... ... ... ... ... .... ... ... ..........................97
Table 28 WAN Dial Backup Modem Setup .................. ... ... ... .... ... ... ... .... ... ... ... ... ..................................100
Table 29 LAN IP ...................................................................................................................................107
Table 30 Advanced LAN Setup ............................................................................................................ 107
Table 31 DHCP Setup .........................................................................................................................109
Table 32 LAN Client List .......................................................................................................................110
Table 33 LAN IP Alias ...........................................................................................................................112
Table 34 Types of Encryption for Each Type of Authentication ............................................................115
Table 35 Additional Wireless Terms ......................................................................................................116
Table 36 Wireless LAN: General ..........................................................................................................118
Table 37 Wireless No Security ..................... ... ... ... ... .... ... ... ... .... ... ... ... .... ... ... ... ... ...................................119
Table 38 Wireless: Static WEP Encryption .......................................................................................... 120
P-662H/HW-D Series User’s Guide
31
List of Tables
Table 39 Wireless: WPA(2)-PSK ......................................................................................................... 121
Table 40 Wireless: WPA(2) .................................................................................................................. 123
Table 41 Wireless LAN: Advanced ......................................................................................................124
Table 42 OTIST .... ... ... ... .... ... ... ... ........................................................... ... ... ... ... .... ..............................126
Table 43 MAC Address Filter ...............................................................................................................129
Table 44 WMM QoS Priorities .............. ... .... ... ... ... ... .... ... ... ... .... ... ... ... .... ... ... ... ... .... ..............................130
Table 45 Wireless LAN: QoS ............................................................................................................... 131
Table 46 Application Priority Configuration .......................................................................................... 132
Table 47 Multiple SSID Commands .....................................................................................................134
Table 48 Multiple SSID Example Configuration ................................................................................... 135
Table 49 DMZ ...................................................................................................................................... 138
Table 50 NAT Definitions ..................................................................................................................... 141
Table 51 NAT Mapping Types .............................................................................................................. 144
Table 52 NAT General ......................................................................................................................... 145
Table 53 NAT Port Forwarding ............................................................................................................147
Table 54 Port Forwarding Rule Setup ..................................................................................................148
Table 55 Address Mapping Rules ........................................................................................................150
Table 56 Edit Address Mapping Rule .......................................................... ... ... .... ... ... ........................151
Table 57 Trigger Port ...........................................................................................................................152
Table 58 Trigger Port Edit ....................................................................................................................153
Table 59 Common IP Ports .................................................................................................................. 159
Table 60 ICMP Commands That Trigger Alerts ................................................................................... 162
Table 61 Legal NetBIOS Commands ................................................................................................... 162
Table 62 Legal SMTP Commands ......................................................................................................162
Table 63 Firewall: General ...................................................................................................................173
Table 64 Firewall Rules ........... ... .... ... ... ............................................................. .... ... ...........................174
Table 65 Firewall: Edit Rule ................................................................................................................. 177
Table 66 Customized Services ............................................................................................................178
Table 67 Firewall: Configure Customized Services ............................................................................. 179
Table 68 Predefined Services .............................................................................................................183
Table 69 Firewall: Anti Probing ............................................................................................................ 186
Table 70 Firewall: Threshold ................................................................................................................ 188
Table 71 Content Filter: Keyword ................................ ... ... ... .... ... ........................................................ 192
Table 72 Content Filter: Schedule .......................................................................................................193
Table 73 Content Filter: Trusted ..........................................................................................................193
Table 74 Content Access Control: General .........................................................................................196
Table 75 Control Access Control: General: Time Scheduling ... ... ... ... .... .............................................. 198
Table 76 Content Access Control: General: Services ............... ................... ................... .................... . 199
Table 77 Content Access Control: General: Web Site Filter ................................................................ 201
Table 78 Content Access Control: General: Diagnostic ....................................................................... 205
Table 79 Content Access Control: User Profiles .................................................................................. 206
Table 80 Content Access Control: Online Status .................................................................................207
Table 81 Content Access Control: Trusted Device .............................................................................. 208
32
P-662H/HW-D Series User’s Guide
List of Tables
Table 82 Content Access Control: Trusted-external Website ..............................................................209
Table 83 Security > Register ................................................................................................................ 212
Table 84 Security > Register > Service ............................................................................................... 214
Table 85 VPN and NAT ................................................ ... ... ... .... ... ... ... .... ... ... ... ... ..................................219
Table 86 AH and ESP .......................................................................................................................... 222
Table 87 VPN Setup ............................................. ... .... ... ..................................................................... 224
Table 88 VPN and NAT ................................................ ... ... ... .... ... ... ... .... ... ... ... ... ..................................226
Table 89 Local ID Type and Content Fields ......................................................................................... 227
Table 90 Peer ID Type and Content Fields .......................................................................................... 228
Table 91 Matching ID Type and Content Configuration Example ........................................................ 228
Table 92 Mismatching ID Type and Content Configuration Example .................................................. 228
Table 93 Edit VPN Policies .................................................................................................................. 230
Table 94 Advanced VPN Policies ........................................................................................................236
Table 95 VPN: Manual Key .................................................................................................................. 239
Table 96 VPN: SA Monitor ...................................................................................................................242
Table 97 VPN: Global Setting ............... ... .... ... ... ... ... .... ... ... ... .... ... ... ..................................................... 243
Table 98 Telecommuters Sharing One VPN Rule Example .................................................................244
Table 99 Telecommuters Using Unique VPN Rules Example ............................................................. 245
Table 100 My Certificates ....................................................................................................................249
Table 101 My Certificate Import ...........................................................................................................251
Table 102 My Certificate Create ..........................................................................................................252
Table 103 My Certificate Details .......................................................................................................... 256
Table 104 Trusted CAs ........................................................................................................................ 258
Table 105 Trusted CA Import ............................................................................................................... 259
Table 106 Trusted CA Details ..............................................................................................................261
Table 107 Trusted Remote Hosts ........................................................................................................ 263
Table 108 Trusted Remote Host Import ............................................................................................... 265
Table 109 Trusted Remote Host Details ..............................................................................................267
Table 110 Directory Servers ................................................................................................................ 269
Table 111 Directory Server Add ........................................................................................................... 270
Table 112 Static Route ......................................................................................................................... 274
Table 113 Static Route Edit .................................................................................................................. 275
Table 114 Application and Subnet-based Bandwidth Management Example ..................... ... ... ... ... .... . 278
Table 115 Maximize Bandwidth Usage Example ................................................................................. 279
Table 116 Priority-based Allotment of Unused and Unbudgeted Bandwidth Example ........................ 280
Table 117 Fairness-based Allotment of Unused and Unbudgeted Bandwidth Example ...................... 280
Table 118 Bandwidth Management Priorities .......................................................................................281
Table 119 Media Bandwidth Management: Summary ......................................................................... 281
Table 120 Bandwidth Management: Rule Setup ................................................................................. 282
Table 121 Bandwidth Management Rule Configuration ...................................................................... 284
Table 122 Dynamic DNS .....................................................................................................................288
Table 123 Remote Management: WWW ............................................................................................. 293
Table 124 Remote Management: Telnet .............................................................................................. 295
P-662H/HW-D Series User’s Guide
33
List of Tables
Table 125 Remote Management: FTP ................................................................................................. 295
Table 126 SNMP Traps ........................................................................................................................297
Table 127 Remote Management: SNMP .............................................................................................298
Table 128 Remote Management: DNS ................................................................................................ 299
Table 129 Remote Management: ICMP .............................................................................................. 300
Table 130 TR-069 Commands ............................................................................................................. 301
Table 131 Configuring UPnP ............................................................................................................... 304
Table 132 System General Setup ........................................................................................................318
Table 133 System Time Setting ...........................................................................................................320
Table 134 View Log ............................................................................................................................. 324
Table 135 Log Settings ........................................................................................................................ 325
Table 136 SMTP Error Messages ........................................................................................................ 326
Table 137 Firmware Upgrade ..............................................................................................................329
Table 138 Maintenance Restore Configuration ...................................................................................332
Table 139 Diagnostic: General ............................................................................................................335
Table 140 Diagnostic: DSL Line ..........................................................................................................336
Table 141 Troubleshooting Starting Up Your ZyXEL Device ........ ... ... .... ... ... ... ..................................... 337
Table 142 Troubleshooting the LAN ....................................................................................................337
Table 143 Troubleshooting the WAN ................................................................................................... 338
Table 144 Troubleshooting Accessing the ZyXEL Device ...................................................................338
Table 145 Hardware Specifications .....................................................................................................347
Table 146 Firmware Specifications ......................................................................................................348
Table 147 ADSL Standards ................................................................................................................. 351
Table 148 IP Address Network Number and Host ID Example ........................................................... 386
Table 149 Subnet Masks ..................................................................................................................... 387
Table 150 Maximum Host Numbers .................................................................................................... 387
Table 151 Alternative Subnet Mask Notation ....................................................................................... 387
Table 152 Subnet 1 .............................................................................................................................. 389
Table 153 Subnet 2 .............................................................................................................................. 390
Table 154 Subnet 3 .............................................................................................................................. 390
Table 155 Subnet 4 .............................................................................................................................. 390
Table 156 Eight Subnets ...................................................................................................................... 390
Table 157 24-bit Network Number Subnet Planning ............................................................................391
Table 158 16-bit Network Number Subnet Planning ............................................................................391
Table 159 IEEE 802.11g ...................................................................................................................... 399
Table 160 Wireless Security Levels .....................................................................................................400
Table 161 Comparison of EAP Authentication Types .......................................................................... 403
Table 162 Wireless Security Relational Matrix .................................................................................... 406
Table 163 Windows XP SP2: System Tray Icon .................................................................................. 412
Table 164 Windows XP SP2: Wireless Network Connection ...............................................................414
Table 165 Windows XP: Wireless Networks ........................................................................................415
Table 166 Windows XP: Wireless (network) properties: Association ................................. ... ... ... ........416
Table 167 Windows XP: Wireless (network) properties: Authentication .............................................. 4 17
34
P-662H/HW-D Series User’s Guide
List of Tables
Table 168 Windows XP: Protected EAP Properties ............................................................................. 418
Table 169 Windows XP: Smart Card or other Certificate Properties ................................................... 419
Table 170 Commonly Used Services .................... ... .... ... ... ... ............................................................... 423
Table 171 NetBIOS Filter Default Settings ..........................................................................................436
Table 172 Abbreviations Used in the Example Internal SPTGEN Screens Table ...............................446
Table 173 Menu 1 General Setup ........................................................................................................ 446
Table 174 Menu 3 ................................................................................................................................ 446
Table 175 Menu 4 Internet Access Setup ............................................................................................ 449
Table 176 Menu 12 .............................................................................................................................. 451
Table 177 Menu 15 SUA Server Setup ................................................................................................451
Table 178 Menu 21.1 Filter Set #1 ....................................................................................................... 453
Table 179 Menu 21.1 Filer Set #2 ........................................................................................................454
Table 180 Menu 23 System Menus .....................................................................................................456
Table 181 Menu 24.11 Remote Management Control ......................................................................... 457
Table 182 Command Examples ........................................................................................................... 458
Table 183 System Maintenance Logs .................................................................................................. 459
Table 184 System Error Logs ..............................................................................................................460
Table 185 Access Control Logs ........................................................................................................... 460
Table 186 TCP Reset Logs .................................................................................................................. 461
Table 187 Packet Filter Logs ............................................................................................................... 461
Table 188 ICMP Logs .......................................................................................................................... 461
Table 189 CDR Logs ........................................................................................................................... 462
Table 190 PPP Logs ............................................................................................................................ 462
Table 191 UPnP Logs .......................................................................................................................... 462
Table 192 Content Filtering Logs .........................................................................................................463
Table 193 Attack Logs ......................................................................................................................... 463
Table 194 IPSec Logs .......................................................................................................................... 464
Table 195 IKE Logs ............................................................................................................................. 465
Table 196 PKI Logs .............................................................................................................................467
Table 197 Certificate Path Verification Failure Reason Codes ............................................................468
Table 198 802.1X Logs ........................................................................................................................469
Table 199 ACL Setting Notes ..............................................................................................................470
Table 200 ICMP Notes ......................................................................................................................... 470
Table 201 Syslog Logs ........................................................................................................................471
Table 202 RFC-2408 ISAKMP Payload Types .................................................................................... 472
P-662H/HW-D Series User’s Guide
35
List of Tables
36
P-662H/HW-D Series User’s Guide
PART I
Introduction and
Wizards
Getting To Know Your ZyXEL Device (39) Introducing the Web Configurator (43) Wizard Setup for Internet Access (59) Bandwidth Management Wizard (73)
37
38
CHAPTER 1
Getting To Know Your ZyXEL
Device
This chapter describes the key features and applications of your ZyXEL Device.

1.1 Introducing the ZyXEL Device

Your ZyXEL Device integrates high-speed 10/100Mbps auto-negotiating LAN interface(s) and a high-speed ADSL port into a single package. The ZyXEL Device is ideal for high-speed Internet browsing and making LAN-to-LAN connections to remote networks.
In the ZyXEL Device product name, “H” denotes an integrated 4-port hub and “W” denotes wireless functionality. The P-662HW-Dx has an embedded mini-PCI module for 802.11g+ Wireless LAN connectivity.
" All wireless features in this guide pertain to the P-662HW-Dx series only.
Models ending in “1”, for example P-662HW-D1, denote a device that works over the analog telephone system, POTS (Plain Old T elephone Service). Models ending in “3” denote a device that works over ISDN (Integrated Services Digital Network). Models ending in “7” denote a device that works over T-ISDN (UR-2).
1 Only use firmware for your ZyXEL Device’s specific model. Refer to the label
on the bottom of your ZyXEL Device.
1.1.1 Applications of the ZyXEL Device
The following sections describe the features of the ZyXEL Device.
P-662H/HW-D Series User’s Guide
39
Chapter 1 Getting To Know Your ZyXEL Device
" See the product specifications in the appendix for detailed features and
standards support.
1.1.1.1 Internet Access
The ZyXEL Device is the ideal high-speed Internet access solution. Your ZyXEL Device supports the TCP/IP protocol, which the Internet uses exclusively. It is compatible with all major ADSL DSLAM (Digital Subscriber Line Access Multiplexer) providers. A DSLAM is a rack of ADSL line cards with data multiplexed into a backbone network interface/connection (for example, T1, OC3, DS3, ATM or Frame Relay). Think of it as the equivalent of a modem rack for ADSL. In addition, the ZyXEL Device allows wireless clients access to your network resources. A typical Internet access application is shown below.
Figure 1 ZyXEL Device Internet Access Application
1.1.1.2 LAN to LAN Application
You can use the ZyXEL Device to connect two geographically dispersed networks over the ADSL line. A typical LAN-to-LAN application example for the ZyXEL Device is shown as follows.
Figure 2 ZyXEL Device LAN-to-LAN Application Example
1.1.2 Firewall for Secure Broadband Internet Access
The ZyXEL Device provides protection from attacks by Internet hackers. By default, the firewall blocks all incoming traffic from the WAN. The firewall supports TCP/UDP inspection and DoS (Denial of Services) detection and prevention, as well as real time alerts, reports and logs.
40
P-662H/HW-D Series User’s Guide
Figure 3 Firewall Application
1.1.3 Front Panel LEDs
Figure 4 P-662H Front Panel
Chapter 1 Getting To Know Your ZyXEL Device
Figure 5 P-662HW Front Panel
The following table describes the Lights.
Table 1 Front Pane l LE Ds
LED COLOR STATUS DESCRIPTION POWER Green On The ZyXEL Device is receiving power and functioning
properly.
Blinking The ZyXEL Device is rebooting or performing diagnostics.
Red On Post (Power On Self Test) failure or the device has
malfunctioned.
Off The system is not receiving powe r.
LAN 1-4 Green On The ZyXEL Device has a successful 10/100Mb Ethernet
connection.
Blinking The ZyXEL Device is sending/receiving data.
None Off The LAN is not connected.
P-662H/HW-D Series User’s Guide
41
Chapter 1 Getting To Know Your ZyXEL Device
Table 1 Front Panel LEDs (continued)
LED COLOR STATUS DESCRIPTION WLAN (P-
662HW only)
DSL/ACT Green On The ZyXEL Device has a successful DSL connection.
INTERNET Green On The ZyXEL Device is connected with no traffic detected.
CON/AUX Green On The CON/AUX switch is set to CON, the CON/AUX port is
Green On The ZyXEL Device is ready, but is not sending/receiving data
Blinking The ZyXEL Device is sending/receiving data through the
None Off The wireless LAN is not ready or has failed.
Blinking The DSL is attempting to synchronize with the ZyXEL
Off The system is not receiving power or there is no DSL
Blinking The ZyXEL Device is sending/receiving data.
Red On The ZyXEL Device failed to authenticate.
Off The DSL line is down.
Amber On The CON/AUX switch is set to AUX and the CON/AUX port
Blinking The CON/AUX switch is set to AUX and the CON/AUX port
Off The CON/AUX link is not ready, or has failed.
through the wireless LAN.
wireless LAN.
Device.
connection.
connected to a management computer and someone is logged into the ZyXEL Device.
has an Internet connection through a dial-up modem.
is sending or receiving data through a dial-up modem or ISDN TA.
Refer to the Quick Start Guide for information on hardware connections.
42
P-662H/HW-D Series User’s Guide
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.

2.1 Web Configurator Overview

The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See the chapter on troubleshooting if you need to make sure these functions are allowed in Internet Explorer.

2.2 Accessing the Web Configurator

" Even though you can connect to the ZyXEL Device wirelessly, it is
recommended that you connect your computer to a LAN port for initial configuration.
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to the
Quick Start Guide).
3 Launch your web browser.
P-662H/HW-D Series User’s Guide
43
Chapter 2 Introducing the Web Configurator
4 Type "192.168.1.1" as the URL. 5 A window displays as shown. Enter the default admin password 1234 to configure the
wizards and the advanced features or the default user password user to view the status only. Click Login to proceed to a screen asking you to change your password or click Cancel to revert to the default password.
Figure 6 Password Screen
6 If you entered the user password, skip the next two steps and refer to Section 2.4.2 on
page 50 for more information about the Status screen.
If you entered the admin password, it is highly recommended you change the default admin password! Enter a new password between 1 and 30 characters, retype it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if you do not want to change the password now.
" If you do not change the password at least once, the following screen appears
every time you log in with the admin password.
44
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Figure 7 Change Password at Login
7 It is highly recommended you replace the factory default certificate by creating your
own unique certificate based on your ZyXEL Device’s MAC address. Click Apply to create the certificate, alternatively click Ignore to proceed to the nex t menu if you do not want to replace the certificate now.
" If you do not replace the certificate, the following screen appears every time
you log in.
Figure 8 Replace Factory Default Certificate
8 Select Go to Wizard setup and click Apply to display the wizard main screen.
Otherwise, select Go to Advanced setup and click Apply to display the Status screen.
P-662H/HW-D Series User’s Guide
45
Chapter 2 Introducing the Web Configurator
Figure 9 Select a Mode
" The management session automatically times out when the time period set in
the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the ZyXEL Device if this happens to you.

2.3 Resetting the ZyXEL Device

If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the ZyXEL Device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
2.3.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking). 2 Press the RESET button for 10 seconds or until the POWER LED begins to blink and
then release it. When the POWER LED begins to blink, the defaults have been restored and the ZyXEL Device restarts.
You can also use the RESET button to:
• Activate/Deactivate the wireless network - by pressing the RESET button for 1 second.
• Start OTIST - by pressing the RESET button for 3 seconds.
46
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator

2.4 Navigating the Web Configurator

We use the P-662HW-D1 web screens in this guide as an example. Screens vary slightly for different ZyXEL Device models.
2.4.1 Navigation Panel
After you enter the admin password, use the sub-menus on the navigation panel to configure ZyXEL Device features. The following table describes the sub-menus.
Figure 10 Web Configurator: Main Screen
Click the Logout icon at any time
Click the Logout icon at any time
to exit the web configurator.
to exit the web configurator.
Use submenus to configure ZyXEL Device
" Click the icon (located in the top right corner of most screens) to view
embedded help.
Table 2 Web Configurator Screens Summary
LINK/ICON SUB-LINK FUNCTION
Wizard INTERNET/
WIRELESS SETUP
BANDWIDTH MANAGEMENT SETUP
Logout Click this icon to exit the web configurator.
Use these screens for initial configuration including general setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment.
Use these screens to limit bandwidth usage by application or packet type.
P-662H/HW-D Series User’s Guide
47
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICON SUB-LINK FUNCTION
Status This screen shows the ZyXEL Device’s general device, system
Network Remote Node Use this screen to configure placing calls to a remote gateway. WAN Internet Access
LAN IP Use this screen to configure LAN TCP/IP settings, enable Any
Wireless LAN (Wireless
devices only)
DMZ DMZ NAT General Use this screen to enable NAT.
Security Firewall General Use this screen to activate/deactivate the firewall and the
Setup
More Connections Use this screen to configure additional WAN connections. WAN Backup
Setup
DHCP Setup Use this screen to configure LAN DHCP settings. Client List
IP Alias Use this screen to partition your LAN interface into subnets. General Use this screen to configure the wireless LAN settings and
OTIST This screen allows you to assign wireless clients the ZyXEL
MAC Filter Use this screen to configure the ZyXEL Device to block access
QoS WMM QoS allows you to prioritize wireless traffic according to
Port Forwarding Use this screen to configure servers behind the ZyXEL Device. Address Mapping
Trigger Port
Rules This screen shows a summary of the firewall rules, and allows
Anti Probing Use this screen to change your anti-probing settings. Threshold Use this screen to configure the threshold for DoS attacks.
and interface status information. Use this screen to access the summary statistics tables.
This screen allows you to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties.
Use this screen to configure your traffic redirect properties and WAN backup settings.
IP and other advanced properties.
Use this screen to view current DHCP client information and to always assign an IP address to a MAC address (and host name).
WLAN authentication/security settings.
Device’s wireless security settings.
to devices or block the devices from accessing the ZyXEL Device.
the delivery requirements of the individual and applications. Use this screen to create and enable a DMZ port.
Use this screen to configure IP address ranges for servers behind the ZyXEL Device.
Use this screen to configure port triggering on the ZyXEL Device.
direction of network traffic to which to apply the rule.
you to edit/add a firewall rule.
48
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICON SUB-LINK FUNCTION
Content Filter Keyword Use this screen to block sites containing certain keywords in
the URL.
Schedule Use this screen to set the days and times for the ZyXEL Device
to perform content filtering.
Trusted Use this screen to exclude a range of users on the LAN from
content filtering on your ZyXEL Device.
Content Access Control
Register Registration Use this screen to register with myZyXEL.com and activate
VPN Setup Use this screen to configure each VPN tunnel.
Certificates My Certificates Use this screen to generate and export self-signed certificates
Advanced Static Route Use this screen to configure IP static routes. Bandwidth
MGMT
Dynamic DNS Use this screen to set up dynamic DNS.
General Use this screen to activate Content Access Control and create
user groups. User Profile Use this screen to create user accounts. Online Status Use this screen to view information about users accessing the
Internet. Trusted Device Use this screen to configure computers excluded from Content
Trusted-external Website
Service Use this screen to update your licen se key information and
Monitor Use this screen to lo ok at the current status of each VPN
VPN Global Setting
Trusted CAs Use this screen to save CA certificates to the ZyXEL Device. Trusted Remote
Hosts Directory Servers Use this screen to configure a list of addresses of directory
Summary Use this screen to enable bandwidth management on an
Rule Setup Use this screen to define a bandwidth rule. Monitor Use this screen to view the ZyXEL Device’s bandwidth usage
Access Control settings.
Use this screen to configure web sites excluded from Content
Access Control settings.
services on the ZyXEL Device.
update the status of the services you subscribe to.
tunnel.
Use this screen to allow NetBIOS traffic through VPN tunnels.
or certification requests and import the ZyXEL Device’s CA-
signed certificates.
Use this screen to import self-signed certificates.
servers (that contain lists of valid and revoked certificates).
interface.
and allotments.
P-662H/HW-D Series User’s Guide
49
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICON SUB-LINK FUNCTION
Remote MGMT WWW Use this screen to configure through which interface(s) and
Telnet Use this screen to configure through which interface(s) and
FTP Use this screen to configure through which interface(s) and
SNMP Use this screen to configure your ZyXEL Device’s settings for
DNS Use this screen to configure through which interface(s) and
ICMP Use this screen to change your anti-probing settings.
UPnP Use this screen to enable UPnP on the ZyXEL Device. Maintenance System General This screen contains administrative and system-related
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Logs View Log Use this screen to view the logs for the categories that you
Log Settings Use this screen to change your ZyXEL Device’s log settings.
Tools Firmware Use this screen to upload firmware to your ZyXEL Device.
Configuration Use this screen to backup and restore the configuration or
Restart This screen allows you to reboot the ZyXEL Device without
Diagnostic General These screens display information to help you identify
DSL Line These screens display information to help you identify
from which IP address(es) users can use HTTPS or HTTP to
manage the ZyXEL Device.
from which IP address(es) users can use Telnet to manage the
ZyXEL Device.
from which IP address(es) users can use FTP to access the
ZyXEL Device.
Simple Network Management Protocol management.
from which IP address(es) users can send DNS queries to the
ZyXEL Device.
information and also allows you to change your password.
selected.
reset the factory defaults to your ZyXEL Device.
turning the power off.
problems with the ZyXEL Device general connection.
problems with the DSL line.
2.4.2 Status Screen
Use this screen to look at the current status of the ZyXEL Device. Some fields or links are not available if you entered the user password in the login password screen (see Figure 6 on page
44).
50
P-662H/HW-D Series User’s Guide
Figure 11 Status Screen
Chapter 2 Introducing the Web Configurator
The following table describes the labels shown in the Status screen.
Table 3 Status Screen
LABEL DESCRIPTION
Refresh Interval Select a number of seconds or None from the drop-down list box to refresh all
screen statistics automatically at the end of every time interval or to not refresh the
screen statistics. Apply Click this button to refresh the status screen statistics. Device Information Host Name This is the System Name you enter in the Maintenance > System > General
screen. It is for identification purposes. Model Number MAC Address This is the MAC (Media Access Control) or Ethernet address unique to your
ZyXEL Device. ZyNOS Firmware
Version DSL Firmware
Version WAN Information DSL Mode This is the standard that your ZyXEL Device is using. IP Address IP Subnet Mask Default Gateway VPI/VCI This is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's
proprietary Network Operating System design.
This is the DSL firmware version associated with your ZyXEL Device.
This is the WAN port IP address.
This is the WAN port IP subnet mask.
This is the IP address of the default gateway, if applicable.
the Wizard or WAN screen.
P-662H/HW-D Series User’s Guide
51
Chapter 2 Introducing the Web Configurator
Table 3 Status Screen
LABEL DESCRIPTION
IP Address This is the LAN port IP address. IP Subnet Mask This is the LAN port IP subnet mask. DHCP This is the WAN port DHCP role - Server, Relay or None. WLAN Information (wireless devices only) SSID This is the descriptive name used to identify the ZyXEL Device in the wireless
LAN. Channel This is the channel number used by the ZyXEL Device now. WEP This displays the status of WEP data encryption. Security Firewall This displays whether or not the ZyXEL Device’s firewall is activated. Content Filter This displays whether or not the ZyXEL Device’s content filtering is activated. Content Access
Control System Status System Uptime This is the total time the ZyXEL Device has been on. Current Date/
Time System Mode This displays whether the ZyXEL Device is functioning as a router or a bridge. CPU Usage This number shows how many kilobytes of the heap memory the ZyXEL Device is
Memory Usage This number shows the ZyXEL Device's total heap memory (in kilobytes).
Interface Status Interface This displays the ZyXEL Device port types. Status This field displays Down (line is down), Up (line is up or connected) if you're using
Rate For the LAN and DMZ ports, this displays the port speed and duplex setting.
Summary Any IP Table Use this screen to view a list of IP addresses and MAC addresses of computers,
WLAN Status (wireless devices only)
This displays whether or not the ZyXEL Device’s content access control is
activated.
This field displays your ZyXEL Device’s present date and time.
using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL
Network Operating System) and is thus available for running processes like NAT,
VPN and the firewall.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle
(line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're
using PPPoE encapsulation.
For the WLAN port, it displays Active when WLAN is enabled or Inactive when
WLAN is disabled.
The DMZ 1 port only displays if DMZ is enabled.
For the DSL port, it displays the downstream and upstream transmission rate.
For the WLAN port, it displays the transmission rate when WLAN is enabled or N/
A when WLAN is disabled.
which are not in the same subnet as the ZyXEL Device.
This screen displays the MAC address(es) of the wireless stations that are
currently associating with the ZyXEL Device.
52
P-662H/HW-D Series User’s Guide
Table 3 Status Screen
LABEL DESCRIPTION
Bandwidth Status Use this screen to view the ZyXEL Device’s bandwidth usage and allotments. Packet Statistics Use this screen to view port status and packet specific statistics. VPN Status Use this screen to view VPN status and settings.
2.4.3 Status: Any IP Table
Click the Any IP Table hyperlink in the Status screen. The Any IP table shows current read- only information (including the IP address and the MAC address) of all network devices that use the Any IP feature to communicate with the ZyXEL Device.
Figure 12 Status: Any IP Table
Chapter 2 Introducing the Web Configurator
The following table describes the labels in this screen.
Table 4 Status: Any IP Table
LABEL DESCRIPTION
# This is the index number of the host computer. IP Address T his field displays the IP address of the network device. MAC Address This field displays the MAC (Media Access Control) address of the computer with the
displayed IP address. Every Ethernet device has a unique MAC address. The MAC address is assigned at
the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Refresh Click Refresh to update this screen.
2.4.4 Status: WLAN Status
Click the WLAN Status hyperlink in the Status screen to view the wireless stations that are currently associated to the ZyXEL Device.
P-662H/HW-D Series User’s Guide
53
Chapter 2 Introducing the Web Configurator
Figure 13 Status: WLAN Status
The following table describes the labels in this screen.
Table 5 Status: WLAN Status
LABEL DESCRIPTION
# This is the index number of an associated wireless station. MAC Address This field displays the MAC (Media Access Control) address of an associated
Association TIme
Refresh Click Refresh to reload this screen.
wireless station. This field displays the time a wireless station first associated with the P-662H/HW-Dx.
2.4.5 Status: Bandwidth Status
Select the Bandwidth Status hyperlink in the Status screen. View the bandwidth usage of the LAN, WAN and WLAN configured bandwidth rules. This is also shown as bandwidth usage over the bandwidth budget for each rule. The gray section of the bar represents the percentage of unused bandwidth and the orange color represents the percentage of bandwidth in use.
Figure 14 Status: Bandwidth Status
2.4.6 Status: VPN Status
Click the VPN Status hyperlink in the Status screen. The VPN Status shows the current status of any VPN tunnels the ZyXEL Device has negotiated.
54
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Figure 15 Status: VPN Status
The following table describes the labels in this screen.
Table 6 Status: VPN Status
LABEL DESCRIPTION
No This is the security association index number. Name This field displays the identification name for this VPN policy. Encapsulation This field displays Tunnel or Transport mode. IPSec
Algorithm Disconnect Select one of the security associations, and then click Disconnect to stop that
Refresh Click Refresh to display the current active VPN connection(s).
This field displays the security protocol, encryption algorithm, and authentication algorithm used in each SA.
security association.
2.4.7 Status: Packet Statistics
Click the Packet Statistics hyperlink in the Status screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interval(s) field is configurable.
P-662H/HW-D Series User’s Guide
55
Chapter 2 Introducing the Web Configurator
Figure 16 Status: Packet Statistics
The following table describes the fields in this screen.
Table 7 Status: Packet Statistics
LABEL DESCRIPTION
System Monitor System up Time This is the elapsed time the system has been up. Current Date/Time This field displays your ZyXEL Device’s present date and time. CPU Usage This field specifies the percentage of CPU utilization. Memory Usage This field specifies the percentage of memory utilization. LAN or WAN Port
Statistics Link Status This is the status of your WAN link. Upstream Speed This is the upstream speed of your ZyXEL Device. Downstream Speed This is the downstream speed of your ZyXEL Device. Node-Link This field displays the remote node index number and link type. Link types are
Interface This field displays the type of port. Status This field displays Down (line is down), Up (line is up or connected) if you're
TxPkts This field displays the number of packets transmitted on this port. RxPkts This field displays the number of packets received on this port. Errors This field displays the number of error packets on this port. Tx B/s This field displays the number of bytes transmitted in the last second.
This is the WAN or LA N po rt.
PPPoA, ENET, RFC 1483 and PPPoE.
using Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation.
For the WLAN port, it displays the transmission rate when WLAN is enabled or
N/A when WLAN is disabled.
56
P-662H/HW-D Series User’s Guide
Table 7 Status: Packet Statistics (continued)
LABEL DESCRIPTION
Rx B/s This field displays the number of bytes received in the last second. Up Time This field displays the elapsed time this port has been up. Collisions This is the number of collisions on this port. Poll Interval(s) Type the time interval for the browser to refresh system statistics. Set Interval Click this button to apply the new poll interval you entered in the Poll Interval
field above.
Stop Click this button to halt the refreshing of the system statistics.
2.4.8 Changing Login Password
It is highly recommended that you periodically change the password for accessing the ZyXEL Device. If you didn’t change the default one after you logged in or you want to change to a new password again, then click Maintenance > System to display the screen as shown next.
Figure 17 System General
Chapter 2 Introducing the Web Configurator
The following table describes the fields in this screen.
Table 8 System General: Password
LABEL DESCRIPTION
Old Password Type the default password or the existing password you use to access the system
in this field. New Password Type the new password in this field. Retype to Confirm Type the new password again in this field.
P-662H/HW-D Series User’s Guide
57
Chapter 2 Introducing the Web Configurator
Table 8 System General: Password
LABEL DESCRIPTION
Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh.
58
P-662H/HW-D Series User’s Guide
CHAPTER 3

Wizard Setup for Internet Access

This chapter provides information on the Wizard Setup screens for Internet access in the web configurator.

3.1 Introduction

Use the Wizard Setup screens to configure your system for Internet access with the information given to you by your ISP.
" See the advanced menu chapters for background information on these fields.

3.2 Internet Access Wizard Setup

1 After you enter the admin password to access the web configurator, select Go to Wizard
setup and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the web configurator to display the wizard main screen.
Figure 18 Select a Mode
P-662H/HW-D Series User’s Guide
59
Chapter 3 Wizard Setup for Internet Access
2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and
wireless connection.
Figure 19 Wizard: Welcome
3 The wizard attempts to detect which WAN connection type you are using.
If the wizard detects your connection type and your ISP uses PPPoE or PPPoA, go to
Section 3.2.1 on page 61. The screen varies depending on the connection type you use.
If the wizard does not detect a connection type and the following screen appears (see
Figure 20 on page 60), check your hardware connections and click Restart the Internet/
Wireless Setup Wizard to have the ZyXEL Device detect your connection again.
Figure 20 Auto Detection: No DSL Connection
If the wizard still cannot detect a connection type and the following screen appears (see
Figure 21 on page 61), click Next and refer to Section 3.2.2 on page 61 on how to
configure the ZyXEL Device for Internet access manually.
60
P-662H/HW-D Series User’s Guide
Figure 21 Auto Detection: Failed
3.2.1 Automatic Detection
1 If you have a PPPoE or PPPoA connection, a screen displays prompting you to enter
your Internet account information. Enter the username, password and/or service name exactly as provided.
2 Click Next and see Section 3.3 on page 66 for wireless connection wizard setup.
Chapter 3 Wizard Setup for Internet Access
Figure 22 Auto-Detection: PPPoE
3.2.2 Manual Configuration
1 If the ZyXEL Device fails to detect your DSL connection type, enter the Internet access
information given to you by your ISP exactly in the wizard screen. If not given, leave the fields set to the default.
P-662H/HW-D Series User’s Guide
61
Chapter 3 Wizard Setup for Internet Access
Figure 23 Internet Access Wizard Setup: ISP Parameters
The following table describes the fields in this screen.
Table 9 Internet Access Wizard Setup: ISP Parameters
LABEL DESCRIPTION
Mode From the Mode drop-down list box, select Routing (default) if your ISP allows
Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list
Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
VPI Enter the VPI assigned to you. This field may already be configured. VCI Enter the VCI assigned to you. This field may already be configure d. Back Click Back to go back to the previous screen. Next Click Next to continue to the next wizard screen. The next wizard screen you see
Exit Click Exit to close the wizard screen with out saving your changes.
multiple computers to share an Internet account. Otherwise select Bridge.
box. Choices vary depending on what you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
box either VC-based or LLC-based.
Refer to the appendix for more information.
depends on what protocol you chose above.
2 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to continue. See Section 3.3 on page 66 for wireless connection wizard setup
62
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 24 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 10 Internet Connection with PPPoE
LABEL DESCRIPTION
User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form
user@domain where domain identifies a service name, then enter both components
exactly as given. Password Enter the password associated with the user name above. Service Name Type the name of your PPPoE service here. Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes back to the ZyXEL Device. Exit Click Exit to close the wizard screen with out saving your changes.
Figure 25 Internet Connection with RFC 1483
The following table describes the fields in this screen.
Table 11 Internet Connection with RFC 1483
LABEL DESCRIPTION
IP Address This field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
Back Click Back to go back to the previous wizard screen.
P-662H/HW-D Series User’s Guide
63
Chapter 3 Wizard Setup for Internet Access
Table 11 Internet Connection with RFC 1483 (continued)
LABEL DESCRIPTION
Next Click Next to continue to the next wizard screen. Exit Click Exit to close the wizard screen without saving your changes.
Figure 26 Internet Connection with ENET ENCAP
The following table describes the fields in this screen.
Table 12 Internet Connection with ENET ENCAP
LABEL DESCRIPTION
Obtain an IP Address Automatically
Static I P Address
IP Address Enter your ISP assigned IP address. Subnet Mask Enter a subnet mask in dotted decimal notation.
Gateway IP address
First DNS Server
Second DNS Server
Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes back to the ZyXEL Device. Exit Click Exit to close the wizard screen without saving your changes.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address. A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet. Select Static IP Address if your ISP gives you a fixed IP address.
Refer to the appendices to calculate a subnet mask If you are implementing subnetting.
You must specify a gateway IP address (supplied by your ISP) when you use ENET ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask.
As above.
64
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 27 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 13 Internet Connection with PPPoA
LABEL DESCRIPTION
User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes back to the ZyXEL Device. Exit Click Exit to close the wizard screen with out saving your changes.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not
correct, the screen displays as shown next. Click Back to Username and Password setup to go back to the screen where you can modify them.
Figure 28 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the Internet/Wireless Setup Wizard to verify your Internet access settings.
P-662H/HW-D Series User’s Guide
65
Chapter 3 Wizard Setup for Internet Access
Figure 29 Connection Test Failed-2.

3.3 Wireless Connection Wizard Setup

After you configure the Internet access information, use the following screens to set up your wireless LAN.
1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to
Step 6.
Figure 30 Connection Test Successful
2 Use this screen to activate the wireless LAN and OTIST. Click Next to continue.
66
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 31 Wireless LAN Setup Wizard 1
The following table describes the labels in this screen.
Table 14 Wireless LAN Setup Wizard 1
LABEL DESCRIPTION
Active Select the check box to turn on the wireless LAN.
Note: You can also activate the wireless LAN by pressing the
RESET button for 1 second.
Enable OTIST Select the check box to enable OTIST if you want to transfer your ZyXEL
Device’s SSID and WEP or WPA-PSK security settings to wireless clients that support OTIST and are within transmission range.
You must also activate and start OTIST on the wireless client at the same time. The process takes three minutes to complete.
Note: You can start OTIST by pressing the RESET button for 3
seconds.
Setup Key T ype an OTIST Setup Key of up to eigh t AS CII ch arac te rs in le ngt h. Be su re to
use the same OTIST Setup Key on the ZyXEL Device and wireless clients. Back Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
Click Back to display the previous screen.
3 Configure your wireless settings in this screen. Click Next.
P-662H/HW-D Series User’s Guide
67
Chapter 3 Wizard Setup for Internet Access
Figure 32 Wireless LAN Setup Wizard 2
The following table describes the labels in this screen.
Table 15 Wireless LAN Setup Wizard 2
LABEL DESCRIPTION
Network Name(SSID)
Channel Selection
Security Select Automatically assign a WPA key to allow the ZyXEL Device to configure a
Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the same SSID in order to access the network.
The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a channel. Select a channel ID that is not already in use by a neighboring device.
WPA key for you based on the setu p key you entered on the previ ous screen. This option is only available if you selected Enable OTIST. See Section 3.3.1 on page 69 for more information.
Select Manually assign a WP A-PSK key to configure a Pre-Shared Key (WP A-PSK). Choose this option only if your wireless clients support WPA. See Sectio n 3.3.2 on
page 69 for more information.
Select Manually assign a WEP key to configure a WEP Key. See Section 3.3.3 on
page 69 for more information.
Select Disable wireless security to have no wireless LAN security configured and your network is accessible to any wireless networking device that is within range.
" The wireless stations and ZyXEL Device must use the same SSID, channel ID
and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is enabled) for wireless communication.
4 This screen varies depending on the security mode you selected in the previous screen.
Fill in the field (if available) and click Next.
68
P-662H/HW-D Series User’s Guide
3.3.1 Automatically assign a WPA key
Choose Manually assign a WPA key in the Wireless LAN setup screen to allow the ZyXEL Device to configure a PSK key for you based on the setup key you entered on the previous Wireless LAN setup screen. This key acts like a password to ensure only those Wireless LAN devices you authorize are configured by OTIST.
3.3.2 Manually assign a WPA-PSK key
Choose Manually assign a WPA-PSK key in the Wireless LAN setup screen to set up a Pre­Shared Key.
Figure 33 Manually assign a WPA key
Chapter 3 Wizard Setup for Internet Access
The following table describes the labels in this screen.
Table 16 Manually assign a WPA key
LABEL DESCRIPTION
Pre-Shared Key
Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless connection by configuring WPA in the wireless LAN screens. You need to configure an authentication server to do this.
3.3.3 Manually assign a WEP key
Choose Manually assign a WEP key to setup WEP Encryption parameters.
P-662H/HW-D Series User’s Guide
69
Chapter 3 Wizard Setup for Internet Access
Figure 34 Manually assign a WEP key
The following table describes the labels in this screen.
Table 17 Manually assign a WEP key
LABEL DESCRIPTION
Key The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
stations must use the same WEP key for data transmission. Enter any 5, 13 or 29 ASCII characters or 10, 26 or 58 hexadecimal characters ("0-9",
"A-F") for a 64-bit, 128-bit or 256-bit WEP key respectively. Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
70
5 Click Apply to save your wireless LAN settings.
Figure 35 Wireless LAN Setup 3
6 Use the read-only summary table to check whether what you have configured is correct.
Click Finish to complete and save the wizard setup.
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 36 Internet Access and WLAN Wizard Setup Complete
7 Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this guide for more detailed information on the complete range of ZyXEL Device features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct.
P-662H/HW-D Series User’s Guide
71
Chapter 3 Wizard Setup for Internet Access
72
P-662H/HW-D Series User’s Guide
CHAPTER 4

Bandwidth Management Wizard

This chapter shows you how to configure basic bandwidth management using the wizard screens.

4.1 Introduction

Bandwidth management allows you to control the amount of bandwidth going out through the ZyXEL Device’s WAN port and prioritize the distribution of the bandwidth accord i ng to service bandwidth requirements. This helps keep one service from using all of the available bandwidth and shutting out other users.

4.2 Predefined Media Bandwidth Management Services

The following is a description of the services that you can select and to which you can apply media bandwidth management using the wizard screens.
Table 18 Media Bandwidth Management Setup: Services
SERVICE DESCRIPTION
WWW The World Wide Web (WWW) is an Internet system to distribute graphical, hyper-
linked information, based on Hyper T ext Transfer Protocol (HTTP) - a client/server protocol for the World Wide Web. The Web is not synonymous with the Internet; rather, it is just one service on the Internet. Other services on the Internet include Internet Relay Chat and Newsgroups. The Web is accessed through use of a browser.
FTP File Transfer Program enables fast transfer of files, including large files that may
not be possible by e-mail. FTP uses port number 21.
E-Mail Electronic mail consists of messages sent through a computer network to specific
groups or individuals. Here are some default ports for e-mail: POP3 - port 110 IMAP - port 143 SMTP - port 25 HTTP - port 80
Telnet The purpose of the TELNET Protocol is to provide a fairly general, bi-directional,
NetMeeting (H.323)
eight-bit byte oriented communications facility. It is typically used to provide user oriented command line login sessions between
hosts on the Internet. Telnet uses port number 23. H.323 is an umbrella recommendation from the ITU-T , that defines the protocols to
provide audio-visual communication sessions on any packet network.
P-662H/HW-D Series User’s Guide
73
Chapter 4 Bandwidth Management Wizard
Table 18 Media Bandwidth Management Setup: Services (continued)
SERVICE DESCRIPTION
VoIP (SIP) Sending voic e signals over the Internet is called Voice over IP or VoIP. Session
Initiated Protocol (SIP) is an internationally recognized standard for implementing VoIP. SIP is an application-layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet.
SIP is transported primarily over UDP but can also be transported over TCP, using the default port number 5060.
VoIP (H.323) H.323 is an umbrella recommendation from the ITU-T, that defines the protocols to
provide audio-visual communication sessions on any packet network.
TFTP Trivial File Transfer Protocol (TFTP) is a very simple file transf er protoc ol, with the
functionality of a very basic form of FTP. It is used to transfer small files between hosts on a network, such as when a remote X Window System terminal or any other thin client boots from a network host or server. TFTP is transported primarily over UDP.

4.3 Bandwidth Management Wizard Setup

1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the web configurator to display the wizard main screen.
Figure 37 Select a Mode
2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet
access and wireless connection.
74
P-662H/HW-D Series User’s Guide
Chapter 4 Bandwidth Management Wizard
Figure 38 Wizard: Welcome
3 Activate bandwidth management and select to allocate bandwidth to packets based on
the services.
Figure 39 Bandwidth Management Wizard: General Information
The following fields describe the label in this screen.
Table 19 Bandwidth Manage m ent Wiza rd : Ge ne ra l Inf orma tio n
LABEL DESCRIPTION
Active Select the Active check box to have the ZyXEL Device apply bandwidth
management to traffic going out through the ZyXEL Device’s WAN, LAN or WLAN port.
Select Services Setup to allocate bandwidth based on the service requirements. Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
4 Use the second wizard screen to select the services that you want to apply bandwidth
management and select the priorities that you want to apply to the services listed.
P-662H/HW-D Series User’s Guide
75
Chapter 4 Bandwidth Management Wizard
Figure 40 Bandwidth Management Wizard: Configuration
The following table describes the labels in this screen.
Table 20 Bandwidth Management Wizard: Configuration
LABEL DESCRIPTION
Active Select an entry’s Active check box to turn on bandwidth management for the service/
Service These fields display the services names. Priority Select High, Mid or Low priority for each service to have your ZyXEL Device use a
Auto classifier rest bandwidth
Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes back to the ZyXEL Device. Exit Click Exit to close the wizard screen without saving your changes.
application.
priority for traffic that matches that service. A service with High priority is given as much bandwidth as it needs. If you select services as having the same priority, then bandwidth is divided equally
amongst those services. Services not specified in bandwidth management are allocated bandwidth after all
specified services receive their bandwidth requirements. If the rules set up in this wizard are changed in Advanced > Bandwidth MGMT >
Rule Setup, then the service priority radio button will be set to User Configured. The Advanced > Bandwidth MGMT > Rule Setup screen allows you to edit these
rule configurations. Select Auto classifier rest bandwidth to automatically allocate unbudgeted or
unused bandwidth to services based on the packet type.
76
5 Follow the on-screen instructions and click Finish to complete the wizard setup and save
your configuration.
P-662H/HW-D Series User’s Guide
Chapter 4 Bandwidth Management Wizard
Figure 41 Bandwidth Management Wizard: Complete
P-662H/HW-D Series User’s Guide
77
Chapter 4 Bandwidth Management Wizard
78
P-662H/HW-D Series User’s Guide
PART II

Network

WAN Setup (81) LAN Setup (101) Wireless LAN (113) DMZ (137) Network Address Translation (NAT) Screens (141)
79
80
CHAPTER 5

WAN Setup

This chapter describes how to configure WAN settings.

5.1 WAN Overview

A WAN (Wide Area Network) is an outside connection to another network or the Internet.
5.1.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods.
5.1.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol. IP packets are routed between the Ethernet interface and the WAN interface and then formatted so that they can be understood in a bridged environment. For instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the second wizard screen. You can get this information from your ISP.
5.1.1.2 PPP over Ethernet
PPPoE (Point-to-Point Protocol over Ethernet) provides access control and billing functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband mod em (DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals.
Operationally , PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
P-662H/HW-D Series User’s Guide
81
Chapter 5 WAN Setup
5.1.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP.
5.1.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to the RFC for more detailed information.
5.1.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP.
5.1.2.1 VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical.
5.1.2.2 LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs.
5.1.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for more information.
5.1.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP. However the encapsulation method assigned influences your choices for IP address and ENET ENCAP gateway.
82
P-662H/HW-D Series User’s Guide
5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the ENET ENCAP Gateway field.
5.1.4.2 IP Assignment with RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP Address and ENET ENCAP Gateway fields as stated above.
5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server
assigns them to the ZyXEL Device.
5.1.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic demand. The ZyXEL Device does two things when you specify a nailed-up connection. The first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons.
Chapter 5 WAN Setup
Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern
5.1.6 NAT
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

5.2 Metric

The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the default routes have the same metric, the ZyXEL Device uses the following pre-defined priorities:
• Normal route: designated by the ISP (see Section 5.5 on page 86)
• Traffic-redirect route ( see Section 5.7 on page 94)
• WAN-backup route, also called dial-backup (see Section 5.8 on page 94)
P-662H/HW-D Series User’s Guide
83
Chapter 5 WAN Setup
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect route also fails.
If you want the dial-backup route to take first priority over the traffic-redirect route or even the normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to "2" (or greater).
IP Policy Routing overrides the default routing behavior and takes priority over all of the routes mentioned above.

5.3 Traffic Shaping

Traf fic Shap ing is a n agre ement be twee n the carrie r and th e subs crib er to regu late the av erag e rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits), so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the maximum average rate at which cells can be sent over the virtual connection. SCR may not be greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 42 Example of Traffic Shaping
84
P-662H/HW-D Series User’s Guide
5.3.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification.
5.3.1.1 Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for connections that continuously require a specific amount of bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR would be high-resolution video and voice.
5.3.1.2 Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections.
The VBR-R T (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is specified) but is only available when data is being sent. An example of an VBR-RT connection would be video conferencing. Video conferencing requires real-time data transfers and the bandwidth requirement varies in proportion to the video image's changing dynamics.
Chapter 5 WAN Setup
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
5.3.1.3 Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer.

5.4 Zero Configuration Internet Access

Once you turn on and connect the ZyXEL Device to a telephone jack, it automatically detects the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method) from the ISP and makes the necessary configuration changes. In cases where additional account information (such as an Internet account user name and password) is required or the ZyXEL Device cannot connect to the ISP, you will be redirected to web screen(s) for information input or troubleshooting.
Zero configuration for Internet access is disabled when
• the ZyXEL Device is in bridge mode
• you set the ZyXEL Device to use a static (fixed) WAN IP address.
P-662H/HW-D Series User’s Guide
85
Chapter 5 WAN Setup

5.5 Internet Connection

Use this screen to change your ZyXEL Device’ s WAN remote node settings. Click Network > WAN to view the screen as shown. The screen differs by the encapsulation.
See Section 5.1 on page 81 for more information.
Figure 43 Internet Connection (PPPoE)
86
The following table describes the labels in this screen.
Table 21 Internet Connection
LABEL DESCRIPTION
General Name Enter the name of your Internet Service Provider, e.g., MyISP. This information
is for identification purposes only.
Mode Select Routing (default) from the drop-down list box if your ISP allows multiple
computers to share an Internet account. Otherwise select Bridge.
Encapsulation Select the method of encapsulation used by your ISP from the drop-down list
box. Choices vary depending on the mode you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
User Name (PPPoA and PPPoE only) Enter the user name exactly as your ISP assigned. If
assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Table 21 Internet Connection
LABEL DESCRIPTION
Password (PPPoA and PPPoE only) Enter the password associated with the user name
above. Service Name (PPPoE only) Type the name of your PPPoE service here. Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
Choices are VC or LLC. Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP Address These fields only appea r if the Mode is Routing.
Obtain an IP Address Automatically
Static IP Address (PPPoE, PPPoA, and ENET ENCAP only) Select this if you do not have a
IP Address Enter the static IP address provided by your ISP. Subnet Mask (ENET ENCAP only) Enter the subnet mask provided by your ISP. Gateway IP address (ENET ENCAP only) Enter the gateway IP address provided by your ISP. Connection This section only appears if the Encapsulation is PPPoE and PPPoA. Nailed-Up
Connection
Connect on Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect
Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh. Advanced Setup Click this button to display the Advanced WAN Setup screen and edit more
circuit. Refer to the appendix for more information.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet. ‘
(PPPoE, PPPoA, and ENET ENCAP only) Select this if you have a dynamic IP
address.
dynamic IP address.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
details of your WAN setup.
5.5.1 Configuring Advanced Internet Connection
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Internet Connection screen. The screen appears as shown.
P-662H/HW-D Series User’s Guide
87
Chapter 5 WAN Setup
Figure 44 Advanced Internet Connection
The following table describes the labels in this screen.
Table 22 Advanced Internet Connection
LABEL DESCRIPTION
RIP & Multicast Setup
RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
RIP Version RIP (Routing Information Protocol) allows a router to exchange routing information
Multicast IGMP (Internet Group Management Protocol) is a network-layer protocol used to
ATM QoS
exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
with other routers. This field is enabled if RIP Direction is not None. The RIP Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
establish membership in a multicast group. Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast packets (packets sent to one computer) and broadcast packets (packets sent to every computer).
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select
None to disable it.
88
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Table 22 Advanced Internet Connection
LABEL DESCRIPTION
ATM QoS Type Select CBR (Constant Bit Rate) to specify fixed (always-on) bandwidth for voice or
data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with other applications.
Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst Size
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
Zero Configuration
PPPoE Passthrough
(PPPoE encapsulation only)
Back Click Back to return to the previous screen. Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh.
This feature is not applicable/available when you configure the ZyXEL Device to use a static WAN IP address or in bridge mode.
Select Yes to set the ZyXEL Device to automatically detect the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method) from the ISP and make the necessary configuration changes.
Select No to disable this feature. You must manually configure the ZyXEL Device for Internet access.
This field is available when you select PPPoE encapsulation. In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE
pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the ZyXEL Device. Each host can have a separate account and a public WAN IP address.
PPPoE passthrough is an alternative to NAT for application where NAT is not appropriate.
Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP.

5.6 Configuring More Connections

Use this screen to manage additional connections via the WAN interface. When you use the WAN > Internet Connection screen to set up Internet access, you are configuring the first WAN connection.
Click Network > WAN > More Connections to display the screen as shown next.
P-662H/HW-D Series User’s Guide
89
Chapter 5 WAN Setup
Figure 45 More Connections
The following table describes the labels in this screen.
Table 23 More Connections
LABEL DESCRIPTION
# This is the index number of a connection. Active This display whether this connection is activated. Clear the check box to disable
Name This is the descriptive name for this connection. VPI/VCI This is the VPI and VCI values used for this connection. Encapsulation This is the method of encapsulation used for this connection. Modify The first (ISP) connection is read-only in this screen. Use the WAN > Internet
Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh.
the connection. Select the check box to enable it.
Connection screen to edit it.
Click the edit icon to go to the screen where you can edit the connection.
Click the delete icon to remove an existing connection. You cannot remove the
first connection.
5.6.1 More Connections Edit
Use this screen to configure additional connections via the WAN interface. Click the edit icon in the More Connections screen to configure a connection.
90
P-662H/HW-D Series User’s Guide
Figure 46 More Connections Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 24 More Connections Edit
LABEL DESCRIPTION
Active Select the check box to activate or clear the check box to deactivate this
connection. Name Enter a unique, descriptive name of up to 13 ASCII characters for this
connection. Mode Select Routing from the drop-down list box if your ISP allows multiple
Encapsulation Select the method of encapsulation used by your ISP from the drop-down list
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
Password (PPPoA and PPPoE encapsulation only) Enter the password associated with the
Service Name (PPPoE only) Type the name of your PPPoE service here.
computers to share an Internet account.
If you select Bridge, the ZyXEL Device will forward any packet that it does not
route to this remote node; otherwise, the packets are discarded.
box. Choices are PPPoA, RFC 1483, ENET ENCAP or PPPoE.
ISP assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as given.
user name above.
P-662H/HW-D Series User’s Guide
91
Chapter 5 WAN Setup
Table 24 More Connections Edit (continued)
LABEL DESCRIPTION
Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP Address This option is available if you sele ct Routing in the Mode field.
Subnet Mask Enter a subnet mask in dotted decimal notation.
Gateway IP address Specify a gateway IP address (supplied by your ISP). Connection Nailed-Up
Connection
Connect on Demand
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect
NAT SUA only is available only when you select Routing in the Mode field.
Back Click Back to return to the previous screen. Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh. Advanced Setup Click this button to display the More Connections Advanced screen and edit
Choices are VC or LLC.
By prior agreement, a protocol is assigned a specific virtual circuit, for example,
VC1 will carry IP. If you select VC, specify separate VPI and VCI numbers for
each protocol.
For LLC-based multiplexing or PPP encapsulation, one VC carries multiple
protocols with protocol identifying information being contained in each packet
header. In this case, only one set of VPI and VCI numbers need be specified for
all protocols.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet.
If you use any encapsulation type except RFC 1483, select Obtain an IP
Address Automatically when you have a dynamic IP address; otherwise select
Static IP Address and type your ISP assigned IP address in the IP Address
field below.
If you use RFC 1483, enter the IP address given by your ISP in the IP Address
field.
Refer to the appendices to calculate a subnet mask If you are implementing
subnetting.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
Select SUA Only if you have one public IP address and want to use NAT. Click
Edit to go to the Port Forwarding screen to edit a server mapping set.
Otherwise, select None to disable NAT.
more details of your WAN setup.
5.6.2 Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown.
92
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Figure 47 More Connections Advanced Setup
The following table describes the labels in this screen.
Table 25 More Connections Advanced Setup
LABEL DESCRIPTION
RIP & Multicast Setup
RIP Direction Select the RIP direction from None, Both, In Only and Out Only. RIP Version Select the RIP version from RIP-1, RIP-2B and RIP-2M. Multicast IGMP (Internet Group Management Protocol) is a network-layer protocol used to
ATM QoS ATM QoS Type Select CBR (Constant Bit Rate) to specify fixed (always-on) bandwidth for voice or
Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst Size
Back Click Back to return to the previous screen. Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh.
establish membership in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
P-662H/HW-D Series User’s Guide
93
Chapter 5 WAN Setup

5.7 Traffic Redirect

Traffic redirect f orwards traffic to a backup gateway when the ZyXEL Device cannot connect to the Internet. An example is shown in the figure below.
Figure 48 Traffic Redirect Example
The following network topology allows you to avoid triangle route security issues when the backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in another subnet (Subnet 2). Configure filters that allow packets from the protected LAN (Subnet 1) to the backup gateway (Subnet 2).
Figure 49 Traffic Redirect LAN Setup

5.8 Configuring WAN Backup

Use this screen to change your ZyXEL Device’s WAN backup settings, click WAN > WAN Backup Setup. The screen appears as shown.
94
P-662H/HW-D Series User’s Guide
Figure 50 WAN Backup Setup
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 26 WAN Backup Setup
LABEL DESCRIPTION
Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.
Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses configured in the Check WAN IP Address fields.
Check WAN IP Address1-3
Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP address of a reliable nearby computer (for example, your ISP's DNS server address).
Note: If you activate either traffic redirect or dial backup, you must
configure at least one IP address here.
When using a WAN backup connection, the ZyXEL Device periodically pings the addresses configured here and uses the other WAN backup connection (if configured) if there is no response.
Fail Tolerance Type the number of times (2 recommended) that your ZyXEL Device may ping the
IP addresses configured in the Check WAN IP Address field without getting a response before switching to a WAN backup connection (or a different WAN backup connection).
Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN
backup connection), it periodically checks to whether or not it can use a higher priority connection.
Type the number of seconds (30 recommended) for the ZyXEL Device to wait between checks. Allow more time if your destination IP address handles lots of traffic.
P-662H/HW-D Series User’s Guide
95
Chapter 5 WAN Setup
Table 26 WAN Backup Setup (continued)
LABEL DESCRIPTION
Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a
Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device
Active Traffic Redirect
Metric This field sets this route's priority among the routes the ZyXEL Device uses.
Backup Gateway Type the IP address of your backup gateway in dotted decimal notation. The
Dial Backup Active Dial
Backup Metric This field sets this route's priority among the three routes the ZyXEL Device uses
Port Speed Select the speed of the connection between the dial backup port and the external
User Name Enter the user name fo r this backup connection. Password E nter the password for this backup connection. Primary Phone
Number Advanced Setup Click this to configure advanced settings for dial backup. Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh.
ping response from one of the IP addresses in the Check WAN IP Address field before timing out the request. The WAN connection is considered "down" after the ZyXEL Device times out the number of times specified in the Fail Tolerance field. Use a higher value in this field if your network is busy or congested.
cannot connect to the Internet. Select this check box to have the ZyXEL Device use traffic redirect if the normal
WAN connection goes down.
Note: If you activate traffic redirect, you must configure at least one
Check WAN IP Address.
The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the measurement of cost, with a minimum of "1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost".
ZyXEL Device automatically forwards traffic to this IP address if the ZyXEL Device's Internet connection terminates.
Select this box to activate dial up backup.
(normal, traffic redirect and dial backup). Type a number (1 to 15) to set the priority of the dial backup route for data transmission. The smaller the number, the higher the priority.
If the three routes have the same metrics, the priority of the routes is as follows: WAN, Traffic Redirect, Dial Backup.
device. Available speeds are: 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Enter the phone number your modem should dial to create a connection.

5.9 WAN Backup Advanced Screen

Use this screen to change your ZyXEL Device’s WAN backup advanced settings, click WAN > WAN Backup Setup > Advanced Setup. The screen appears as shown.
96
P-662H/HW-D Series User’s Guide
Figure 51 WAN Backup Advanced Setup
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 27 WAN Backup Advanced Setup
LABEL DESCRIPTION
Authentication Type
Secondary Phone Number
Dial Backup Port Speed
AT Command Initial String
Advanced Modem Setup
TCP/IP Options
Use the drop-down list box to select an authentication protocol for outgoing calls. Options are:
CHAP/PAP - Your ZyXEL Device accepts either CHAP or PAP when requested by this remote node.
CHAP - Your ZyXEL Device accepts CHAP only. PAP - Your ZyXEL Device accept PAP only.
Type the secondary phone number from the ISP for this remote node. If the primary phone number is busy or does not answer, your ZyXEL Device dials the secondary phone number if available. Some areas require dialing the pound sign # before the phone number for local calls. Include a # symbol at the beginning of the phone numbers as required.
Use the drop-down list box to select the speed of the connection between the dial backup port and the external device. Available speeds are: 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Type the AT command string to initialize the W AN device. Consult the manual of your WAN device connected to your dial backup port for specific AT commands.
Click the Edit button to display the Advanced Modem Setup screen and edit the details of your dial backup setup.
P-662H/HW-D Series User’s Guide
97
Chapter 5 WAN Setup
Table 27 WAN Backup Advanced Setup
LABEL DESCRIPTION
Metric This field sets this route's priority among the three routes the ZyXEL Device uses
Enable SUA Network Address Translation (NAT) allows the translation of an Internet protocol
Enable RIP Select this check box to turn on RIP (Routing Information Protocol), which allows a
RIP Version The RIP Version field controls the format and the broadcasting method of the RIP
RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information
Enable Multicast Select this check box to turn on IGMP (Internet Group Management Protocol).
Multicast Select IGMP-v1 or IGMP-v2. IGMP version 2 (RFC 2236) is an improvement over
PPP Options Encapsulation Select CISCO PPP from the drop-down list box if your backup WAN device uses
Compression Select this check box to enable stac compression. Connection Nailed-Up
Connection Connect on
Demand Max Idle Timeout Specify an idle time -out in the Max Idle Timeout field when you select Connect on
(normal, traffic redirect and dial backup). Type a number (1 to 15) to set the priority of the dial backup route for data transmission. The smaller the number, the higher the priority.
If the three routes have the same metrics, the priority of the routes is as follows: WAN, Traffic Redirect, Dial Backup.
address used within one network to a different IP address known within another network.
SUA (Single User Account) is a subset of NAT that supports two types of mapping: Many-to-One and Server.
router to exchange routing information with other routers.
packets that the ZyXEL Device sends (it recognizes both formats when receiving). Choose RIP-1, RIP-2B or RIP-2M. RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is
probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
with other routers. The RIP Direction field controls the sending and receiving of RIP packets.
Choose Both, In Only or Out Only. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table
periodically. When set to Both or In Only, the ZyXEL Device will incorporate RIP information
that it receives.
IGMP is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data.
version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236.
Cisco PPP encapsulation; otherwise select Standard PPP.
Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time and specify an idle time-out in the Max Idle Timeout field.
Demand. The default setting is 0, which means the Internet session will not timeout.
98
P-662H/HW-D Series User’s Guide
Table 27 WAN Backup Advanced Setup
LABEL DESCRIPTION
Budget The configuration in the Budget fields has priority over your Connection settings. Allocated Budget Type the amount of time (in minutes) that the dial backup connection can be used
Period Type the time period (in hours) for how often the budget should be reset. For
Back
Click Back to return to the previous screen.
Apply Click Apply to save the changes. Cancel Click Cancel to begi n configuring this screen afresh.
during the time configured in the Period field. Set an amount that is less than the time period configured in the Period field. If you set the Allocated Budget to 0, you will not be able to use the dial backup connection.
example, to allow calls to this remote node for a maximum of 10 minutes every hour, set the Allocated Budget to 10 (minutes) and the Period to 1 (hour). If you set the Period to 0, there is no budget control and the ZyXEL Device uses the Connection settings.

5.10 Dial Backup Modem Setup

Use this screen to configure the advanced modem settings. Click Edit in the WAN > WAN Backup Setup > Advanced Setup to view the screen as shown.
Chapter 5 WAN Setup
Figure 52 WAN Dial Backup Modem Setup
P-662H/HW-D Series User’s Guide
99
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 28 WAN Dial Backup Modem Setup
LABEL DESCRIPTION
AT Command Strings
Type the AT Command string to make a call. Example: atdt
Dial Drop Type the AT Command string to drop a call. "~" represents a one second wait, for
Answer
Type the AT Command string to answer a call. Example: ata
Drop DTR When Hang Up
AT Response Strings
CLID
Type the keyword that precedes the CLID (Calling Line Identification) in the AT
Called ID Type the keyword preceding the dialed number. Speed
Type the keyword preceding the connection speed. Example: CONNECT
Call Control Dial Timeout Type a number of seconds for the ZyXEL Device to try to set up an outgoing call
Retry Count Type a number of times for the ZyXEL Device to retry a busy or no-answer phone
Retry Interval Type a number of seconds for the ZyXEL Device to wait before trying another call
Drop Timeout Type the number of seconds for the ZyXEL Device to wait before dropping the DTR
Call Back Delay Type a number of seconds for the ZyXEL Device to wait between dropping a
Back
Click Back to return to the previous screen.
Apply Click Apply to save the changes. Cancel Click Cancel to begi n configuring this screen afresh.
example, "~~+++~~ath" can be used if your modem has a slow response time.
Select this check box to have the ZyXEL Device drop the DTR (Data Terminal Ready) signal after the "AT Command String: Drop" is sent out.
response string. This lets the ZyXEL Device capture the CLID in the AT response string that comes from the WAN device. CLID is required for CLID authentication. Example: NMBR
before timing out (stopping). Example: 60
number before blacklisting the number. Example: 0
after a call has failed. This applies before a phone number is blacklisted. Example: 10
signal if it does not receive a positive disconnect confirmation. Example: 20
callback request call and dialing the corresponding callback call. Example: 15
100
P-662H/HW-D Series User’s Guide
Loading...