IP Addresshttp://192.168.1.1
User Passworduser
Admin Password1234
www.zyxel.com
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL Device using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
"It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
P-662H/HW-D Series User’s Guide
3
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-662H/HW-D may be referred to as the “ZyXEL Device”, the “device”, the
“system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
4
P-662H/HW-D Series User’s Guide
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your device.
ZyXEL DeviceComputerNotebook computer
ServerDSLAMFirewall
TelephoneSwitchRouter
P-662H/HW-D Series User’s Guide
5
Safety Warnings
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
6
P-662H/HW-D Series User’s Guide
This product is recyclable. Dispose of it properly.
Safety Warnings
P-662H/HW-D Series User’s Guide
7
Safety Warnings
8
P-662H/HW-D Series User’s Guide
Contents Overview
Contents Overview
Introduction and Wizards ......................................................................................................37
Getting To Know Your ZyXEL Device ........................................................................................39
Introducing the Web Configurator .............................................................................................. 43
Wizard Setup for Internet Access.............................................................................................. 59
Figure 53 LAN and WAN IP Addresses ................................................................................................ 101
Figure 54 Any IP Example ....................................................................................................................105
Figure 55 LAN IP .................................................................................................................................. 106
Figure 56 Advanced LAN Setup ........................................................................................................... 107
Getting To Know Your ZyXEL Device (39)
Introducing the Web Configurator (43)
Wizard Setup for Internet Access (59)
Bandwidth Management Wizard (73)
37
38
CHAPTER 1
Getting To Know Your ZyXEL
Device
This chapter describes the key features and applications of your ZyXEL Device.
1.1 Introducing the ZyXEL Device
Your ZyXEL Device integrates high-speed 10/100Mbps auto-negotiating LAN interface(s)
and a high-speed ADSL port into a single package. The ZyXEL Device is ideal for high-speed
Internet browsing and making LAN-to-LAN connections to remote networks.
In the ZyXEL Device product name, “H” denotes an integrated 4-port hub and “W” denotes
wireless functionality. The P-662HW-Dx has an embedded mini-PCI module for 802.11g+
Wireless LAN connectivity.
"All wireless features in this guide pertain to the P-662HW-Dx series only.
Models ending in “1”, for example P-662HW-D1, denote a device that works over the analog
telephone system, POTS (Plain Old T elephone Service). Models ending in “3” denote a device
that works over ISDN (Integrated Services Digital Network). Models ending in “7” denote a
device that works over T-ISDN (UR-2).
1Only use firmware for your ZyXEL Device’s specific model. Refer to the label
on the bottom of your ZyXEL Device.
1.1.1 Applications of the ZyXEL Device
The following sections describe the features of the ZyXEL Device.
P-662H/HW-D Series User’s Guide
39
Chapter 1 Getting To Know Your ZyXEL Device
"See the product specifications in the appendix for detailed features and
standards support.
1.1.1.1 Internet Access
The ZyXEL Device is the ideal high-speed Internet access solution. Your ZyXEL Device
supports the TCP/IP protocol, which the Internet uses exclusively. It is compatible with all
major ADSL DSLAM (Digital Subscriber Line Access Multiplexer) providers. A DSLAM is a
rack of ADSL line cards with data multiplexed into a backbone network interface/connection
(for example, T1, OC3, DS3, ATM or Frame Relay). Think of it as the equivalent of a modem
rack for ADSL. In addition, the ZyXEL Device allows wireless clients access to your network
resources. A typical Internet access application is shown below.
Figure 1 ZyXEL Device Internet Access Application
1.1.1.2 LAN to LAN Application
You can use the ZyXEL Device to connect two geographically dispersed networks over the
ADSL line. A typical LAN-to-LAN application example for the ZyXEL Device is shown as
follows.
Figure 2 ZyXEL Device LAN-to-LAN Application Example
1.1.2 Firewall for Secure Broadband Internet Access
The ZyXEL Device provides protection from attacks by Internet hackers. By default, the
firewall blocks all incoming traffic from the WAN. The firewall supports TCP/UDP inspection
and DoS (Denial of Services) detection and prevention, as well as real time alerts, reports and
logs.
40
P-662H/HW-D Series User’s Guide
Figure 3 Firewall Application
1.1.3 Front Panel LEDs
Figure 4 P-662H Front Panel
Chapter 1 Getting To Know Your ZyXEL Device
Figure 5 P-662HW Front Panel
The following table describes the Lights.
Table 1 Front Pane l LE Ds
LEDCOLORSTATUSDESCRIPTION
POWERGreenOnThe ZyXEL Device is receiving power and functioning
properly.
Blinking The ZyXEL Device is rebooting or performing diagnostics.
RedOnPost (Power On Self Test) failure or the device has
malfunctioned.
OffThe system is not receiving powe r.
LAN 1-4GreenOnThe ZyXEL Device has a successful 10/100Mb Ethernet
connection.
Blinking The ZyXEL Device is sending/receiving data.
NoneOffThe LAN is not connected.
P-662H/HW-D Series User’s Guide
41
Chapter 1 Getting To Know Your ZyXEL Device
Table 1 Front Panel LEDs (continued)
LEDCOLORSTATUSDESCRIPTION
WLAN (P-
662HW only)
DSL/ACTGreenOn The ZyXEL Device has a successful DSL connection.
INTERNETGreenOn The ZyXEL Device is connected with no traffic detected.
CON/AUXGreenOn The CON/AUX switch is set to CON, the CON/AUX port is
GreenOnThe ZyXEL Device is ready, but is not sending/receiving data
BlinkingThe ZyXEL Device is sending/receiving data through the
NoneOffThe wireless LAN is not ready or has failed.
BlinkingThe DSL is attempting to synchronize with the ZyXEL
OffThe system is not receiving power or there is no DSL
BlinkingThe ZyXEL Device is sending/receiving data.
RedOnThe ZyXEL Device failed to authenticate.
OffThe DSL line is down.
AmberOnThe CON/AUX switch is set to AUX and the CON/AUX port
BlinkingThe CON/AUX switch is set to AUX and the CON/AUX port
OffThe CON/AUX link is not ready, or has failed.
through the wireless LAN.
wireless LAN.
Device.
connection.
connected to a management computer and someone is
logged into the ZyXEL Device.
has an Internet connection through a dial-up modem.
is sending or receiving data through a dial-up modem or
ISDN TA.
Refer to the Quick Start Guide for information on hardware connections.
42
P-662H/HW-D Series User’s Guide
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
2.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy ZyXEL
Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or
Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768
pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See the chapter on troubleshooting if you need to make sure these functions are allowed in
Internet Explorer.
2.2 Accessing the Web Configurator
"Even though you can connect to the ZyXEL Device wirelessly, it is
recommended that you connect your computer to a LAN port for initial
configuration.
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to the
Quick Start Guide).
3 Launch your web browser.
P-662H/HW-D Series User’s Guide
43
Chapter 2 Introducing the Web Configurator
4 Type "192.168.1.1" as the URL.
5 A window displays as shown. Enter the default admin password 1234 to configure the
wizards and the advanced features or the default user password user to view the status
only. Click Login to proceed to a screen asking you to change your password or click
Cancel to revert to the default password.
Figure 6 Password Screen
6 If you entered the user password, skip the next two steps and refer to Section 2.4.2 on
page 50 for more information about the Status screen.
If you entered the admin password, it is highly recommended you change the default
admin password! Enter a new password between 1 and 30 characters, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the main menu if you
do not want to change the password now.
"If you do not change the password at least once, the following screen appears
every time you log in with the admin password.
44
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Figure 7 Change Password at Login
7 It is highly recommended you replace the factory default certificate by creating your
own unique certificate based on your ZyXEL Device’s MAC address. Click Apply to
create the certificate, alternatively click Ignore to proceed to the nex t menu if you do not
want to replace the certificate now.
"If you do not replace the certificate, the following screen appears every time
you log in.
Figure 8 Replace Factory Default Certificate
8 Select Go to Wizard setup and click Apply to display the wizard main screen.
Otherwise, select Go to Advanced setup and click Apply to display the Status screen.
P-662H/HW-D Series User’s Guide
45
Chapter 2 Introducing the Web Configurator
Figure 9 Select a Mode
"The management session automatically times out when the time period set in
the Administrator Inactivity Timer field expires (default five minutes). Simply
log back into the ZyXEL Device if this happens to you.
2.3 Resetting the ZyXEL Device
If you forget your password or cannot access the web configurator, you will need to use the
RESET button at the back of the ZyXEL Device to reload the factory-default configuration
file. This means that you will lose all configurations that you had previously and the password
will be reset to “1234”.
2.3.1 Using the Reset Button
1 Make sure the POWER LEDis on (not blinking).
2 Press the RESET button for 10 seconds or until the POWER LEDbegins to blink and
then release it. When the POWER LEDbegins to blink, the defaults have been restored
and the ZyXEL Device restarts.
You can also use the RESET button to:
• Activate/Deactivate the wireless network - by pressing the RESET button for 1 second.
• Start OTIST - by pressing the RESET button for 3 seconds.
46
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
2.4 Navigating the Web Configurator
We use the P-662HW-D1 web screens in this guide as an example. Screens vary slightly for
different ZyXEL Device models.
2.4.1 Navigation Panel
After you enter the admin password, use the sub-menus on the navigation panel to configure
ZyXEL Device features. The following table describes the sub-menus.
Figure 10 Web Configurator: Main Screen
Click the Logout icon at any time
Click the Logout icon at any time
to exit the web configurator.
to exit the web configurator.
Use
submenus
to configure
ZyXEL
Device
"Click the icon (located in the top right corner of most screens) to view
embedded help.
Table 2 Web Configurator Screens Summary
LINK/ICONSUB-LINKFUNCTION
Wizard INTERNET/
WIRELESS
SETUP
BANDWIDTH
MANAGEMENT
SETUP
Logout Click this icon to exit the web configurator.
Use these screens for initial configuration including general
setup, ISP parameters for Internet Access and WAN IP/DNS
Server/MAC address assignment.
Use these screens to limit bandwidth usage by application or
packet type.
P-662H/HW-D Series User’s Guide
47
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICONSUB-LINKFUNCTION
StatusThis screen shows the ZyXEL Device’s general device, system
Network
Remote NodeUse this screen to configure placing calls to a remote gateway.
WANInternet Access
LANIPUse this screen to configure LAN TCP/IP settings, enable Any
Wireless LAN
(Wireless
devices only)
DMZDMZ
NATGeneralUse this screen to enable NAT.
Security
FirewallGeneralUse this screen to activate/deactivate the firewall and the
Setup
More Connections Use this screen to configure additional WAN connections.
WAN Backup
Setup
DHCP SetupUse this screen to configure LAN DHCP settings.
Client List
IP AliasUse this screen to partition your LAN interface into subnets.
GeneralUse this screen to configure the wireless LAN settings and
OTISTThis screen allows you to assign wireless clients the ZyXEL
MAC FilterUse this screen to configure the ZyXEL Device to block access
QoSWMM QoS allows you to prioritize wireless traffic according to
Port ForwardingUse this screen to configureservers behind the ZyXEL Device.
Address Mapping
Trigger Port
RulesThis screen shows a summary of the firewall rules, and allows
Anti ProbingUse this screen to change your anti-probing settings.
ThresholdUse this screen to configure the threshold for DoS attacks.
and interface status information. Use this screen to access the
summary statistics tables.
This screen allows you to configure ISP parameters, WAN IP
address assignment, DNS servers and other advanced
properties.
Use this screen to configure your traffic redirect properties and
WAN backup settings.
IP and other advanced properties.
Use this screen to view current DHCP client information and to
always assign an IP address to a MAC address (and host
name).
WLAN authentication/security settings.
Device’s wireless security settings.
to devices or block the devices from accessing the ZyXEL
Device.
the delivery requirements of the individual and applications.
Use this screen to create and enable a DMZ port.
Use this screen to configureIP address ranges for servers
behind the ZyXEL Device.
Use this screen to configure port triggering on the ZyXEL
Device.
direction of network traffic to which to apply the rule.
you to edit/add a firewall rule.
48
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICONSUB-LINKFUNCTION
Content FilterKeywordUse this screen to block sites containing certain keywords in
the URL.
ScheduleUse this screen to set the days and times for the ZyXEL Device
to perform content filtering.
TrustedUse this screen to exclude a range of users on the LAN from
content filtering on your ZyXEL Device.
Content Access
Control
RegisterRegistrationUse this screen to register with myZyXEL.com and activate
VPNSetupUse this screen to configure each VPN tunnel.
CertificatesMy CertificatesUse this screen to generate and export self-signed certificates
Advanced
Static RouteUse this screen to configure IP static routes.
Bandwidth
MGMT
Dynamic DNSUse this screen to set up dynamic DNS.
GeneralUse this screen to activate Content Access Control and create
user groups.
User ProfileUse this screen to create user accounts.
Online StatusUse this screen to view information about users accessing the
Internet.
Trusted DeviceUse this screen to configure computers excluded from Content
Trusted-external
Website
ServiceUse this screen to update your licen se key information and
MonitorUse this screen to lo ok at the current status of each VPN
VPN Global
Setting
Trusted CAsUse this screen to save CA certificates to the ZyXEL Device.
Trusted Remote
Hosts
Directory ServersUse this screen to configure a list of addresses of directory
SummaryUse this screen to enable bandwidth management on an
Rule SetupUse this screen to define a bandwidth rule.
MonitorUse this screen to view the ZyXEL Device’s bandwidth usage
Access Control settings.
Use this screen to configure web sites excluded from Content
Access Control settings.
services on the ZyXEL Device.
update the status of the services you subscribe to.
tunnel.
Use this screen to allow NetBIOS traffic through VPN tunnels.
or certification requests and import the ZyXEL Device’s CA-
signed certificates.
Use this screen to import self-signed certificates.
servers (that contain lists of valid and revoked certificates).
interface.
and allotments.
P-662H/HW-D Series User’s Guide
49
Chapter 2 Introducing the Web Configurator
Table 2 Web Configurator Screens Summary (continued)
LINK/ICONSUB-LINKFUNCTION
Remote MGMTWWWUse this screen to configure through which interface(s) and
TelnetUse this screen to configure through which interface(s) and
FTPUse this screen to configure through which interface(s) and
SNMPUse this screen to configure your ZyXEL Device’s settings for
DNSUse this screen to configure through which interface(s) and
ICMPUse this screen to change your anti-probing settings.
UPnPUse this screen to enable UPnP on the ZyXEL Device.
Maintenance
System GeneralThis screen contains administrative and system-related
Time SettingUse this screen to change your ZyXEL Device’s time and date.
LogsView LogUse this screen to view the logs for the categories that you
Log SettingsUse this screen to change your ZyXEL Device’s log settings.
ToolsFirmwareUse this screen to upload firmware to your ZyXEL Device.
ConfigurationUse this screen to backup and restore the configuration or
RestartThis screen allows you to reboot the ZyXEL Device without
DiagnosticGeneralThese screens display information to help you identify
DSL LineThese screens display information to help you identify
from which IP address(es) users can use HTTPS or HTTP to
manage the ZyXEL Device.
from which IP address(es) users can use Telnet to manage the
ZyXEL Device.
from which IP address(es) users can use FTP to access the
ZyXEL Device.
Simple Network Management Protocol management.
from which IP address(es) users can send DNS queries to the
ZyXEL Device.
information and also allows you to change your password.
selected.
reset the factory defaults to your ZyXEL Device.
turning the power off.
problems with the ZyXEL Device general connection.
problems with the DSL line.
2.4.2 Status Screen
Use this screen to look at the current status of the ZyXEL Device. Some fields or links are not
available if you entered the user password in the login password screen (see Figure 6 on page
44).
50
P-662H/HW-D Series User’s Guide
Figure 11 Status Screen
Chapter 2 Introducing the Web Configurator
The following table describes the labels shown in the Status screen.
Table 3 Status Screen
LABELDESCRIPTION
Refresh IntervalSelect a number of seconds or None from the drop-down list box to refresh all
screen statistics automatically at the end of every time interval or to not refresh the
screen statistics.
ApplyClick this button to refresh the status screen statistics.
Device Information
Host NameThis is the System Name you enter in the Maintenance > System > General
screen. It is for identification purposes.
Model Number
MAC AddressThis is the MAC (Media Access Control) or Ethernet address unique to your
ZyXEL Device.
ZyNOS Firmware
Version
DSL Firmware
Version
WAN Information
DSL ModeThis is the standard that your ZyXEL Device is using.
IP Address
IP Subnet Mask
Default Gateway
VPI/VCIThis is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's
proprietary Network Operating System design.
This is the DSL firmware version associated with your ZyXEL Device.
This is the WAN port IP address.
This is the WAN port IP subnet mask.
This is the IP address of the default gateway, if applicable.
the Wizard or WAN screen.
P-662H/HW-D Series User’s Guide
51
Chapter 2 Introducing the Web Configurator
Table 3 Status Screen
LABELDESCRIPTION
IP AddressThis is the LAN port IP address.
IP Subnet MaskThis is the LAN port IP subnet mask.
DHCPThis is the WAN port DHCP role - Server, Relay or None.
WLAN Information (wireless devices only)
SSIDThis is the descriptive name used to identify the ZyXEL Device in the wireless
LAN.
ChannelThis is the channel number used by the ZyXEL Device now.
WEP This displays the status of WEP data encryption.
Security
FirewallThis displays whether or not the ZyXEL Device’s firewall is activated.
Content FilterThis displays whether or not the ZyXEL Device’s content filtering is activated.
Content Access
Control
System Status
System UptimeThis is the total time the ZyXEL Device has been on.
Current Date/
Time
System ModeThis displays whether the ZyXEL Device is functioning as a router or a bridge.
CPU UsageThis number shows how many kilobytes of the heap memory the ZyXEL Device is
Memory UsageThis number shows the ZyXEL Device's total heap memory (in kilobytes).
Interface Status
InterfaceThis displays the ZyXEL Device port types.
StatusThis field displays Down (line is down), Up (line is up or connected) if you're using
RateFor the LAN and DMZ ports, this displays the port speed and duplex setting.
Summary
Any IP TableUse this screen to view a list of IP addresses and MAC addresses of computers,
WLAN Status
(wireless devices
only)
This displays whether or not the ZyXEL Device’s content access control is
activated.
This field displays your ZyXEL Device’s presentdate and time.
using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL
Network Operating System) and is thus available for running processes like NAT,
VPN and the firewall.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
The bar displays what percent of the ZyXEL Device's heap memory is in use. The
bar turns from green to red when the maximum is being approached.
Ethernet encapsulation and Down (line is down), Up (line is up or connected), Idle
(line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're
using PPPoE encapsulation.
For the WLAN port, it displays Active when WLAN is enabled or Inactive when
WLAN is disabled.
The DMZ 1 port only displays if DMZ is enabled.
For the DSL port, it displays the downstream and upstream transmission rate.
For the WLAN port, it displays the transmission rate when WLAN is enabled or N/
A when WLAN is disabled.
which are not in the same subnet as the ZyXEL Device.
This screen displays the MAC address(es) of the wireless stations that are
currently associating with the ZyXEL Device.
52
P-662H/HW-D Series User’s Guide
Table 3 Status Screen
LABELDESCRIPTION
Bandwidth StatusUse this screen to view the ZyXEL Device’s bandwidth usage and allotments.
Packet StatisticsUse this screen to view port status and packet specific statistics.
VPN StatusUse this screen to view VPN status and settings.
2.4.3 Status: Any IP Table
Click the Any IP Table hyperlink in the Status screen. The Any IP table shows current read-
only information (including the IP address and the MAC address) of all network devices that
use the Any IP feature to communicate with the ZyXEL Device.
Figure 12 Status: Any IP Table
Chapter 2 Introducing the Web Configurator
The following table describes the labels in this screen.
Table 4 Status: Any IP Table
LABEL DESCRIPTION
# This is the index number of the host computer.
IP AddressT his field displays the IP address of the network device.
MAC AddressThis field displays the MAC (Media Access Control) address of the computer with the
displayed IP address.
Every Ethernet device has a unique MAC address. The MAC address is assigned at
the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02.
RefreshClick Refresh to update this screen.
2.4.4 Status: WLAN Status
Click the WLAN Status hyperlink in the Status screen to view the wireless stations that are
currently associated to the ZyXEL Device.
P-662H/HW-D Series User’s Guide
53
Chapter 2 Introducing the Web Configurator
Figure 13 Status: WLAN Status
The following table describes the labels in this screen.
Table 5 Status: WLAN Status
LABEL DESCRIPTION
# This is the index number of an associated wireless station.
MAC AddressThis field displays the MAC (Media Access Control) address of an associated
Association
TIme
RefreshClick Refresh to reload this screen.
wireless station.
This field displays the time a wireless station first associated with the P-662H/HW-Dx.
2.4.5 Status: Bandwidth Status
Select the Bandwidth Status hyperlink in the Status screen. View the bandwidth usage of the
LAN, WAN and WLAN configured bandwidth rules. This is also shown as bandwidth usage
over the bandwidth budget for each rule. The gray section of the bar represents the percentage
of unused bandwidth and the orange color represents the percentage of bandwidth in use.
Figure 14 Status: Bandwidth Status
2.4.6 Status: VPN Status
Click the VPN Status hyperlink in the Status screen. The VPN Status shows the current
status of any VPN tunnels the ZyXEL Device has negotiated.
54
P-662H/HW-D Series User’s Guide
Chapter 2 Introducing the Web Configurator
Figure 15 Status: VPN Status
The following table describes the labels in this screen.
Table 6 Status: VPN Status
LABEL DESCRIPTION
NoThis is the security association index number.
NameThis field displays the identification name for this VPN policy.
EncapsulationThis field displays Tunnel or Transport mode.
IPSec
Algorithm
DisconnectSelect one of the security associations, and then click Disconnect to stop that
RefreshClick Refresh to display the current active VPN connection(s).
This field displays the security protocol, encryption algorithm, and authentication
algorithm used in each SA.
security association.
2.4.7 Status: Packet Statistics
Click the Packet Statistics hyperlink in the Status screen. Read-only information here
includes port status and packet specific statistics. Also provided are "system up time" and "poll
interval(s)". The Poll Interval(s) field is configurable.
P-662H/HW-D Series User’s Guide
55
Chapter 2 Introducing the Web Configurator
Figure 16 Status: Packet Statistics
The following table describes the fields in this screen.
Table 7 Status: Packet Statistics
LABELDESCRIPTION
System Monitor
System up TimeThis is the elapsed time the system has been up.
Current Date/TimeThis field displays your ZyXEL Device’s presentdate and time.
CPU UsageThis field specifies the percentage of CPU utilization.
Memory UsageThis field specifies the percentage of memory utilization.
LAN or WAN Port
Statistics
Link StatusThis is the status of your WAN link.
Upstream SpeedThis is the upstream speed of your ZyXEL Device.
Downstream Speed This is the downstream speed of your ZyXEL Device.
Node-LinkThis field displays the remote node index number and link type. Link types are
InterfaceThis field displays the type of port.
Status This field displays Down (line is down), Up (line is up or connected) if you're
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
ErrorsThis field displays the number of error packets on this port.
Tx B/s This field displays the number of bytes transmitted in the last second.
This is the WAN or LA N po rt.
PPPoA, ENET, RFC 1483 and PPPoE.
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation.
For the WLAN port, it displays the transmission rate when WLAN is enabled or
N/A when WLAN is disabled.
56
P-662H/HW-D Series User’s Guide
Table 7 Status: Packet Statistics (continued)
LABELDESCRIPTION
Rx B/sThis field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this port has been up.
CollisionsThis is the number of collisions on this port.
Poll Interval(s)Type the time interval for the browser to refresh system statistics.
Set IntervalClick this button to apply the new poll interval you entered in the Poll Interval
field above.
StopClick this button to halt the refreshing of the system statistics.
2.4.8 Changing Login Password
It is highly recommended that you periodically change the password for accessing the ZyXEL
Device. If you didn’t change the default one after you logged in or you want to change to a
new password again, then click Maintenance > System to display the screen as shown next.
Figure 17 System General
Chapter 2 Introducing the Web Configurator
The following table describes the fields in this screen.
Table 8 System General: Password
LABELDESCRIPTION
Old PasswordType the default password or the existing password you use to access the system
in this field.
New PasswordType the new password in this field.
Retype to ConfirmType the new password again in this field.
P-662H/HW-D Series User’s Guide
57
Chapter 2 Introducing the Web Configurator
Table 8 System General: Password
LABELDESCRIPTION
ApplyClick Apply to save your changes back to the ZyXEL Device.
CancelClick Cancel to begin configuring this screen afresh.
58
P-662H/HW-D Series User’s Guide
CHAPTER 3
Wizard Setup for Internet Access
This chapter provides information on the Wizard Setup screens for Internet access in the web
configurator.
3.1 Introduction
Use the Wizard Setup screens to configure your system for Internet access with the
information given to you by your ISP.
"See the advanced menu chapters for background information on these fields.
3.2 Internet Access Wizard Setup
1 After you enter the admin password to access the web configurator, select Go to Wizard
setup and click Apply. Otherwise, click the wizard icon () in the top right corner of
the web configurator to display the wizard main screen.
Figure 18 Select a Mode
P-662H/HW-D Series User’s Guide
59
Chapter 3 Wizard Setup for Internet Access
2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and
wireless connection.
Figure 19 Wizard: Welcome
3 The wizard attempts to detect which WAN connection type you are using.
If the wizard detects your connection type and your ISP uses PPPoE or PPPoA, go to
Section 3.2.1 on page 61. The screen varies depending on the connection type you use.
If the wizard does not detect a connection type and the following screen appears (see
Figure 20 on page 60), check your hardware connections and click Restart the Internet/
Wireless Setup Wizard to have the ZyXEL Device detect your connection again.
Figure 20 Auto Detection: No DSL Connection
If the wizard still cannot detect a connection type and the following screen appears (see
Figure 21 on page 61), click Nextand refer to Section 3.2.2 on page 61 on how to
configure the ZyXEL Device for Internet access manually.
60
P-662H/HW-D Series User’s Guide
Figure 21 Auto Detection: Failed
3.2.1 Automatic Detection
1 If you have a PPPoE or PPPoA connection, a screen displays prompting you to enter
your Internet account information. Enter the username, password and/or service name
exactly as provided.
2 Click Next and see Section 3.3 on page 66 for wireless connection wizard setup.
Chapter 3 Wizard Setup for Internet Access
Figure 22 Auto-Detection: PPPoE
3.2.2 Manual Configuration
1 If the ZyXEL Device fails to detect your DSL connection type, enter the Internet access
information given to you by your ISP exactly in the wizard screen. If not given, leave the
fields set to the default.
P-662H/HW-D Series User’s Guide
61
Chapter 3 Wizard Setup for Internet Access
Figure 23 Internet Access Wizard Setup: ISP Parameters
The following table describes the fields in this screen.
Table 9 Internet Access Wizard Setup: ISP Parameters
LABELDESCRIPTION
ModeFrom the Mode drop-down list box, select Routing (default) if your ISP allows
EncapsulationSelect the encapsulation type your ISP uses from the Encapsulation drop-down list
MultiplexingSelect the multiplexing method used by your ISP from the Multiplex drop-down list
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
VPIEnter the VPI assigned to you. This field may already be configured.
VCIEnter the VCI assigned to you. This field may already be configure d.
BackClick Back to go back to the previous screen.
NextClick Next to continue to the next wizard screen. The next wizard screen you see
ExitClick Exit to close the wizard screen with out saving your changes.
multiple computers to share an Internet account. Otherwise select Bridge.
box. Choices vary depending on what you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
box either VC-based or LLC-based.
Refer to the appendix for more information.
depends on what protocol you chose above.
2 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to
continue. See Section 3.3 on page 66 for wireless connection wizard setup
62
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 24 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 10 Internet Connection with PPPoE
LABELDESCRIPTION
User NameEnter the user name exactly as your ISP assigned. If assigned a name in the form
user@domain where domain identifies a service name, then enter both components
exactly as given.
PasswordEnter the password associated with the user name above.
Service Name Type the name of your PPPoE service here.
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes back to the ZyXEL Device.
ExitClick Exit to close the wizard screen with out saving your changes.
Figure 25 Internet Connection with RFC 1483
The following table describes the fields in this screen.
Table 11 Internet Connection with RFC 1483
LABELDESCRIPTION
IP AddressThis field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
BackClick Back to go back to the previous wizard screen.
P-662H/HW-D Series User’s Guide
63
Chapter 3 Wizard Setup for Internet Access
Table 11 Internet Connection with RFC 1483 (continued)
LABELDESCRIPTION
NextClick Next to continue to the next wizard screen.
ExitClick Exit to close the wizard screen without saving your changes.
Figure 26 Internet Connection with ENET ENCAP
The following table describes the fields in this screen.
Table 12 Internet Connection with ENET ENCAP
LABELDESCRIPTION
Obtain an IP
Address
Automatically
Static I P
Address
IP AddressEnter your ISP assigned IP address.
Subnet MaskEnter a subnet mask in dotted decimal notation.
Gateway IP
address
First DNS
Server
Second DNS
Server
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes back to the ZyXEL Device.
ExitClick Exit to close the wizard screen without saving your changes.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Static IP Address if your ISP gives you a fixed IP address.
Refer to the appendices to calculate a subnet mask If you are implementing
subnetting.
You must specify a gateway IP address (supplied by your ISP) when you use ENET ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP
clients along with the IP address and the subnet mask.
As above.
64
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 27 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 13 Internet Connection with PPPoA
LABELDESCRIPTION
User NameEnter the login name that your ISP gives you.
PasswordEnter the password associated with the user name above.
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes back to the ZyXEL Device.
ExitClick Exit to close the wizard screen with out saving your changes.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not
correct, the screen displays as shown next. Click Back to Username and Password setup
to go back to the screen where you can modify them.
Figure 28 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the
Internet/Wireless Setup Wizard to verify your Internet access settings.
P-662H/HW-D Series User’s Guide
65
Chapter 3 Wizard Setup for Internet Access
Figure 29 Connection Test Failed-2.
3.3 Wireless Connection Wizard Setup
After you configure the Internet access information, use the following screens to set up your
wireless LAN.
1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to
Step 6.
Figure 30 Connection Test Successful
2 Use this screen to activate the wireless LAN and OTIST. Click Next to continue.
66
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 31 Wireless LAN Setup Wizard 1
The following table describes the labels in this screen.
Table 14 Wireless LAN Setup Wizard 1
LABELDESCRIPTION
ActiveSelect the check box to turn on the wireless LAN.
Note: You can also activate the wireless LAN by pressing the
RESET button for 1 second.
Enable OTISTSelect the check box to enable OTIST if you want to transfer your ZyXEL
Device’s SSID and WEP or WPA-PSK security settings to wireless clients that
support OTIST and are within transmission range.
You must also activate and start OTIST on the wireless client at the same time.
The process takes three minutes to complete.
Note: You can start OTIST by pressing the RESET button for 3
seconds.
Setup KeyT ype an OTIST Setup Key of up to eigh t AS CII ch arac te rs in le ngt h. Be su re to
use the same OTIST Setup Key on the ZyXEL Device and wireless clients.
Back
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Click Back to display the previous screen.
3 Configure your wireless settings in this screen. Click Next.
P-662H/HW-D Series User’s Guide
67
Chapter 3 Wizard Setup for Internet Access
Figure 32 Wireless LAN Setup Wizard 2
The following table describes the labels in this screen.
Table 15 Wireless LAN Setup Wizard 2
LABELDESCRIPTION
Network
Name(SSID)
Channel
Selection
SecuritySelect Automatically assign a WPA key to allow the ZyXEL Device to configure a
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless
LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the
same SSID in order to access the network.
The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a
channel. Select a channel ID that is not already in use by a neighboring device.
WPA key for you based on the setu p key you entered on the previ ous screen. This
option is only available if you selected Enable OTIST. See Section 3.3.1 on page 69
for more information.
Select Manually assign a WP A-PSK key to configure a Pre-Shared Key (WP A-PSK).
Choose this option only if your wireless clients support WPA. See Sectio n 3.3.2 on
page 69 for more information.
Select Manually assign a WEP key to configure a WEP Key. See Section 3.3.3 on
page 69 for more information.
Select Disable wireless security to have no wireless LAN security configured and
your network is accessible to any wireless networking device that is within range.
"The wireless stations and ZyXEL Device must use the same SSID, channel ID
and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is
enabled) for wireless communication.
4 This screen varies depending on the security mode you selected in the previous screen.
Fill in the field (if available) and click Next.
68
P-662H/HW-D Series User’s Guide
3.3.1 Automatically assign a WPA key
Choose Manually assign a WPA key in the Wireless LAN setup screen to allow the ZyXEL
Device to configure a PSK key for you based on the setup key you entered on the previous
Wireless LAN setup screen. This key acts like a password to ensure only those Wireless LAN
devices you authorize are configured by OTIST.
3.3.2 Manually assign a WPA-PSK key
Choose Manually assign a WPA-PSK key in the Wireless LAN setup screen to set up a PreShared Key.
Figure 33 Manually assign a WPA key
Chapter 3 Wizard Setup for Internet Access
The following table describes the labels in this screen.
Table 16 Manually assign a WPA key
LABELDESCRIPTION
Pre-Shared
Key
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure
wireless connection by configuring WPA in the wireless LAN screens. You need to
configure an authentication server to do this.
3.3.3 Manually assign a WEP key
Choose Manually assign a WEP key to setup WEP Encryption parameters.
P-662H/HW-D Series User’s Guide
69
Chapter 3 Wizard Setup for Internet Access
Figure 34 Manually assign a WEP key
The following table describes the labels in this screen.
Table 17 Manually assign a WEP key
LABELDESCRIPTION
Key The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
stations must use the same WEP key for data transmission.
Enter any 5, 13 or 29 ASCII characters or 10, 26 or 58 hexadecimal characters ("0-9",
"A-F") for a 64-bit, 128-bit or 256-bit WEP key respectively.
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
70
5 Click Apply to save your wireless LAN settings.
Figure 35 Wireless LAN Setup 3
6 Use the read-only summary table to check whether what you have configured is correct.
Click Finish to complete and save the wizard setup.
P-662H/HW-D Series User’s Guide
Chapter 3 Wizard Setup for Internet Access
Figure 36 Internet Access and WLAN Wizard Setup Complete
7 Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this guide for more detailed information on the complete
range of ZyXEL Device features. If you cannot access the Internet, open the web
configurator again to confirm that the Internet settings you configured in the wizard
setup are correct.
P-662H/HW-D Series User’s Guide
71
Chapter 3 Wizard Setup for Internet Access
72
P-662H/HW-D Series User’s Guide
CHAPTER 4
Bandwidth Management Wizard
This chapter shows you how to configure basic bandwidth management using the wizard
screens.
4.1 Introduction
Bandwidth management allows you to control the amount of bandwidth going out through the
ZyXEL Device’s WAN port and prioritize the distribution of the bandwidth accord i ng to
service bandwidth requirements. This helps keep one service from using all of the available
bandwidth and shutting out other users.
4.2 Predefined Media Bandwidth Management Services
The following is a description of the services that you can select and to which you can apply
media bandwidth management using the wizard screens.
Table 18 Media Bandwidth Management Setup: Services
SERVICEDESCRIPTION
WWWThe World Wide Web (WWW) is an Internet system to distribute graphical, hyper-
linked information, based on Hyper T ext Transfer Protocol (HTTP) - a client/server
protocol for the World Wide Web. The Web is not synonymous with the Internet;
rather, it is just one service on the Internet. Other services on the Internet include
Internet Relay Chat and Newsgroups. The Web is accessed through use of a
browser.
FTPFile Transfer Program enables fast transfer of files, including large files that may
not be possible by e-mail. FTP uses port number 21.
E-MailElectronic mail consists of messages sent through a computer network to specific
groups or individuals. Here are some default ports for e-mail:
POP3 - port 110
IMAP - port 143
SMTP - port 25
HTTP - port 80
TelnetThe purpose of the TELNET Protocol is to provide a fairly general, bi-directional,
NetMeeting
(H.323)
eight-bit byte oriented communications facility.
It is typically used to provide user oriented command line login sessions between
hosts on the Internet. Telnet uses port number 23.
H.323 is an umbrella recommendation from the ITU-T , that defines the protocols to
provide audio-visual communication sessions on any packet network.
P-662H/HW-D Series User’s Guide
73
Chapter 4 Bandwidth Management Wizard
Table 18 Media Bandwidth Management Setup: Services (continued)
SERVICEDESCRIPTION
VoIP (SIP)Sending voic e signals over the Internet is called Voice over IP or VoIP. Session
Initiated Protocol (SIP) is an internationally recognized standard for implementing
VoIP. SIP is an application-layer control (signaling) protocol that handles the
setting up, altering and tearing down of voice and multimedia sessions over the
Internet.
SIP is transported primarily over UDP but can also be transported over TCP, using
the default port number 5060.
VoIP (H.323)H.323 is an umbrella recommendation from the ITU-T, that defines the protocols to
provide audio-visual communication sessions on any packet network.
TFTPTrivial File Transfer Protocol (TFTP) is a very simple file transf er protoc ol, with the
functionality of a very basic form of FTP. It is used to transfer small files between
hosts on a network, such as when a remote X Window System terminal or any
other thin client boots from a network host or server. TFTP is transported primarily
over UDP.
4.3 Bandwidth Management Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon () in the top right corner of the
web configurator to display the wizard main screen.
Figure 37 Select a Mode
2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet
access and wireless connection.
74
P-662H/HW-D Series User’s Guide
Chapter 4 Bandwidth Management Wizard
Figure 38 Wizard: Welcome
3 Activate bandwidth management and select to allocate bandwidth to packets based on
the services.
Figure 39 Bandwidth Management Wizard: General Information
The following fields describe the label in this screen.
Table 19 Bandwidth Manage m ent Wiza rd : Ge ne ra l Inf orma tio n
LABELDESCRIPTION
ActiveSelect the Active check box to have the ZyXEL Device apply bandwidth
management to traffic going out through the ZyXEL Device’s WAN, LAN or WLAN
port.
Select Services Setup to allocate bandwidth based on the service requirements.
BackClick Back to display the previous screen.
NextClick Next to proceed to the next screen.
ExitClick Exit to close the wizard screen without saving.
4 Use the second wizard screen to select the services that you want to apply bandwidth
management and select the priorities that you want to apply to the services listed.
ActiveSelect an entry’s Active check box to turn on bandwidth management for the service/
ServiceThese fields display the services names.
PrioritySelect High, Mid or Low priority for each service to have your ZyXEL Device use a
Auto classifier
rest bandwidth
BackClick Back to go back to the previous wizard screen.
ApplyClick Apply to save your changes back to the ZyXEL Device.
ExitClick Exit to close the wizard screen without saving your changes.
application.
priority for traffic that matches that service.
A service with High priority is given as much bandwidth as it needs.
If you select services as having the same priority, then bandwidth is divided equally
amongst those services.
Services not specified in bandwidth management are allocated bandwidth after all
specified services receive their bandwidth requirements.
If the rules set up in this wizard are changed in Advanced > Bandwidth MGMT >
Rule Setup, then the service priority radio button will be set to User Configured.
The Advanced > Bandwidth MGMT > Rule Setup screen allows you to edit these
rule configurations.
Select Auto classifier rest bandwidth to automatically allocate unbudgeted or
unused bandwidth to services based on the packet type.
76
5 Follow the on-screen instructions and click Finish to complete the wizard setup and save
your configuration.
P-662H/HW-D Series User’s Guide
Chapter 4 Bandwidth Management Wizard
Figure 41 Bandwidth Management Wizard: Complete
P-662H/HW-D Series User’s Guide
77
Chapter 4 Bandwidth Management Wizard
78
P-662H/HW-D Series User’s Guide
PART II
Network
WAN Setup (81)
LAN Setup (101)
Wireless LAN (113)
DMZ (137)
Network Address Translation (NAT) Screens (141)
79
80
CHAPTER 5
WAN Setup
This chapter describes how to configure WAN settings.
5.1 WAN Overview
A WAN (Wide Area Network) is an outside connection to another network or the Internet.
5.1.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports
the following methods.
5.1.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the
IP network protocol. IP packets are routed between the Ethernet interface and the WAN
interface and then formatted so that they can be understood in a bridged environment. For
instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP
requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the
second wizard screen. You can get this information from your ISP.
5.1.1.2 PPP over Ethernet
PPPoE (Point-to-Point Protocol over Ethernet) provides access control and billing
functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF standard
(RFC 2516) specifying how a personal computer (PC) interacts with a broadband mod em
(DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.
Operationally , PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.
P-662H/HW-D Series User’s Guide
81
Chapter 5 WAN Setup
5.1.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA
connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual
Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please
refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information
on PPP.
5.1.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation
Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single
ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each
protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer
to the RFC for more detailed information.
5.1.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be
sure to use the multiplexing method required by your ISP.
5.1.2.1 VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit;
for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments
where dynamic creation of large numbers of ATM VCs is fast and economical.
5.1.2.2 LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being
contained in each packet header. Despite the extra bandwidth and processing overhead, this
method may be advantageous if it is not practical to have a separate VC for each carried
protocol, for example, if charging heavily depends on the number of simultaneous VCs.
5.1.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to
65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for
more information.
5.1.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you
a different one each time. The Single User Account feature can be enabled or disabled if you
have either a dynamic or static IP. However the encapsulation method assigned influences
your choices for IP address and ENET ENCAP gateway.
82
P-662H/HW-D Series User’s Guide
5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and
not the ENET ENCAP Gateway field.
5.1.4.2 IP Assignment with RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP
Address and ENET ENCAP Gateway fields as stated above.
5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP
Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP
Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server
assigns them to the ZyXEL Device.
5.1.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic
demand. The ZyXEL Device does two things when you specify a nailed-up connection. The
first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up
the connection when turned on and whenever the connection is down. A nailed-up connection
can be very expensive for obvious reasons.
Chapter 5 WAN Setup
Do not specify a nailed-up connection unless your telephone company offers flat-rate service
or you need a constant connection and the cost is of no concern
5.1.6 NAT
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.
5.2 Metric
The metric represents the "cost of transmission". A router determines the best route for
transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the
measurement of cost, with a minimum of "1" for directly connected networks. The number
must be between "1" and "15"; a number greater than "15" means the link is down. The
smaller the number, the lower the "cost".
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the
default routes have the same metric, the ZyXEL Device uses the following pre-defined
priorities:
• Normal route: designated by the ISP (see Section 5.5 on page 86)
• Traffic-redirect route ( see Section 5.7 on page 94)
• WAN-backup route, also called dial-backup (see Section 5.8 on page 94)
P-662H/HW-D Series User’s Guide
83
Chapter 5 WAN Setup
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric
of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary
default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the
traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route
if the traffic-redirect route also fails.
If you want the dial-backup route to take first priority over the traffic-redirect route or even the
normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to
"2" (or greater).
IP Policy Routing overrides the default routing behavior and takes priority over all of the
routes mentioned above.
5.3 Traffic Shaping
Traf fic Shap ing is a n agre ement be twee n the carrie r and th e subs crib er to regu late the av erag e
rate and fluctuations of data transmission over an ATM network. This agreement helps
eliminate congestion, which is important for transmission of real time data such as audio and
video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter
may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits),
so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not
guaranteed because it is dependent on the line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the
maximum average rate at which cells can be sent over the virtual connection. SCR may not be
greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At
this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value
that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 42 Example of Traffic Shaping
84
P-662H/HW-D Series User’s Guide
5.3.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0
Specification.
5.3.1.1 Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is
being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for
connections that continuously require a specific amount of bandwidth. A PCR is specified and
if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR
would be high-resolution video and voice.
5.3.1.2 Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections
that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or
non-real time (VBR-nRT) connections.
The VBR-R T (real-time Variable Bit Rate) type is used with bursty connections that require
closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a
PCR is specified) but is only available when data is being sent. An example of an VBR-RT
connection would be video conferencing. Video conferencing requires real-time data transfers
and the bandwidth requirement varies in proportion to the video image's changing dynamics.
Chapter 5 WAN Setup
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do
not require closely controlled delay and delay variation. It is commonly used for "bursty"
traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum
level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
5.3.1.3 Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR
doesn't guarantee any bandwidth and only delivers traffic when the network has spare
bandwidth. An example application is background file transfer.
5.4 Zero Configuration Internet Access
Once you turn on and connect the ZyXEL Device to a telephone jack, it automatically detects
the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method)
from the ISP and makes the necessary configuration changes. In cases where additional
account information (such as an Internet account user name and password) is required or the
ZyXEL Device cannot connect to the ISP, you will be redirected to web screen(s) for
information input or troubleshooting.
Zero configuration for Internet access is disabled when
• the ZyXEL Device is in bridge mode
• you set the ZyXEL Device to use a static (fixed) WAN IP address.
P-662H/HW-D Series User’s Guide
85
Chapter 5 WAN Setup
5.5 Internet Connection
Use this screen to change your ZyXEL Device’ s WAN remote node settings. Click Network >
WAN to view the screen as shown. The screen differs by the encapsulation.
See Section 5.1 on page 81 for more information.
Figure 43 Internet Connection (PPPoE)
86
The following table describes the labels in this screen.
Table 21 Internet Connection
LABELDESCRIPTION
General
NameEnter the name of your Internet Service Provider, e.g., MyISP. This information
is for identification purposes only.
ModeSelect Routing (default) from the drop-down list box if your ISP allows multiple
computers to share an Internet account. Otherwise select Bridge.
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down list
box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
User Name(PPPoA and PPPoE only) Enter the user name exactly as your ISP assigned. If
assigned a name in the form user@domain where domain identifies a service
name, then enter both components exactly as given.
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Table 21 Internet Connection
LABELDESCRIPTION
Password(PPPoA and PPPoE only) Enter the password associated with the user name
above.
Service Name(PPPoE only) Type the name of your PPPoE service here.
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
Choices are VC or LLC.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThese fields only appea r if the Mode is Routing.
Obtain an IP
Address
Automatically
Static IP Address(PPPoE, PPPoA, and ENET ENCAP only) Select this if you do not have a
IP AddressEnter the static IP address provided by your ISP.
Subnet Mask(ENET ENCAP only) Enter the subnet mask provided by your ISP.
Gateway IP address (ENET ENCAP only) Enter the gateway IP address provided by your ISP.
ConnectionThis section only appears if the Encapsulation is PPPoE and PPPoA.
Nailed-Up
Connection
Connect on
Demand
Max Idle TimeoutSpecify an idle time-out in the Max Idle Timeout field when you select Connect
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
Advanced SetupClick this button to display the Advanced WAN Setup screen and edit more
circuit. Refer to the appendix for more information.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet. ‘
(PPPoE, PPPoA, and ENET ENCAP only) Select this if you have a dynamic IP
address.
dynamic IP address.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
details of your WAN setup.
5.5.1 Configuring Advanced Internet Connection
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the Internet Connection screen. The screen appears as shown.
P-662H/HW-D Series User’s Guide
87
Chapter 5 WAN Setup
Figure 44 Advanced Internet Connection
The following table describes the labels in this screen.
Table 22 Advanced Internet Connection
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
RIP VersionRIP (Routing Information Protocol) allows a router to exchange routing information
MulticastIGMP (Internet Group Management Protocol) is a network-layer protocol used to
ATM QoS
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
with other routers. This field is enabled if RIP Direction is not None. The RIP Version field controls the format and the broadcasting method of the RIP packets
that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is
universally supported but RIP-2 carries more information. RIP-1 is probably
adequate for most networks, unless you have an unusual network topology. Both
RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being
that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.
Multicasting can reduce the load on non-router machines since they generally do
not listen to the RIP multicast address and so will not receive the RIP packets.
However, if one router uses multicasting, then all routers on your network must use
multicasting, also.
establish membership in a multicast group. Multicast packets are sent to a group of
computers on the LAN and are an alternative to unicast packets (packets sent to
one computer) and broadcast packets (packets sent to every computer).
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select
None to disable it.
88
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Table 22 Advanced Internet Connection
LABELDESCRIPTION
ATM QoS TypeSelect CBR (Constant Bit Rate) to specify fixed (always-on) bandwidth for voice or
data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time
sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or
VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with
other applications.
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst
Size
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the
PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be
sent at the peak rate. Type the MBS, which is less than 65535.
Zero
Configuration
PPPoE
Passthrough
(PPPoE
encapsulation
only)
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
This feature is not applicable/available when you configure the ZyXEL Device to
use a static WAN IP address or in bridge mode.
Select Yes to set the ZyXEL Device to automatically detect the Internet connection
settings (such as the VCI/VPI numbers and the encapsulation method) from the
ISP and make the necessary configuration changes.
Select No to disable this feature. You must manually configure the ZyXEL Device
for Internet access.
This field is available when you select PPPoE encapsulation.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE
pass through to allow up to ten hosts on the LAN to use PPPoE client software on
their computers to connect to the ISP via the ZyXEL Device. Each host can have a
separate account and a public WAN IP address.
PPPoE passthrough is an alternative to NAT for application where NAT is not
appropriate.
Disable PPPoE pass through if you do not need to allow hosts on the LAN to use
PPPoE client software on their computers to connect to the ISP.
5.6 Configuring More Connections
Use this screen to manage additional connections via the WAN interface. When you use the
WAN > Internet Connection screen to set up Internet access, you are configuring the first
WAN connection.
Click Network > WAN > More Connections to display the screen as shown next.
P-662H/HW-D Series User’s Guide
89
Chapter 5 WAN Setup
Figure 45 More Connections
The following table describes the labels in this screen.
Table 23 More Connections
LABELDESCRIPTION
#This is the index number of a connection.
ActiveThis display whether this connection is activated. Clear the check box to disable
NameThis is the descriptive name for this connection.
VPI/VCIThis is the VPI and VCI values used for this connection.
EncapsulationThis is the method of encapsulation used for this connection.
ModifyThe first (ISP) connection is read-only in this screen. Use the WAN > Internet
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
the connection. Select the check box to enable it.
Connection screen to edit it.
Click the edit icon to go to the screen where you can edit the connection.
Click the delete icon to remove an existing connection. You cannot remove the
first connection.
5.6.1 More Connections Edit
Use this screen to configure additional connections via the WAN interface. Click the edit icon
in the More Connections screen to configure a connection.
90
P-662H/HW-D Series User’s Guide
Figure 46 More Connections Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 24 More Connections Edit
LABELDESCRIPTION
ActiveSelect the check box to activate or clear the check box to deactivate this
connection.
NameEnter a unique, descriptive name of up to 13 ASCII characters for this
connection.
ModeSelect Routing from the drop-down list box if your ISP allows multiple
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down list
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
Password(PPPoA and PPPoE encapsulation only) Enter the password associated with the
Service Name(PPPoE only) Type the name of your PPPoE service here.
computers to share an Internet account.
If you select Bridge, the ZyXEL Device will forward any packet that it does not
route to this remote node; otherwise, the packets are discarded.
box. Choices are PPPoA, RFC 1483, ENET ENCAP or PPPoE.
ISP assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as given.
user name above.
P-662H/HW-D Series User’s Guide
91
Chapter 5 WAN Setup
Table 24 More Connections Edit (continued)
LABELDESCRIPTION
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThis option is available if you sele ct Routing in the Mode field.
Subnet Mask Enter a subnet mask in dotted decimal notation.
Gateway IP address Specify a gateway IP address (supplied by your ISP).
Connection
Nailed-Up
Connection
Connect on
Demand
Max Idle TimeoutSpecify an idle time-out in the Max Idle Timeout field when you select Connect
NATSUA only is available only when you select Routing in the Mode field.
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
Advanced SetupClick this button to display the More ConnectionsAdvanced screen and edit
Choices are VC or LLC.
By prior agreement, a protocol is assigned a specific virtual circuit, for example,
VC1 will carry IP. If you select VC, specify separate VPI and VCI numbers for
each protocol.
For LLC-based multiplexing or PPP encapsulation, one VC carries multiple
protocols with protocol identifying information being contained in each packet
header. In this case, only one set of VPI and VCI numbers need be specified for
all protocols.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet.
If you use any encapsulation type except RFC 1483, select Obtain an IP
Address Automatically when you have a dynamic IP address; otherwise select
Static IP Address and type your ISP assigned IP address in the IP Address
field below.
If you use RFC 1483, enter the IP address given by your ISP in the IP Address
field.
Refer to the appendices to calculate a subnet mask If you are implementing
subnetting.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
Select SUA Only if you have one public IP address and want to use NAT. Click
Edit to go to the Port Forwarding screen to edit a server mapping set.
Otherwise, select None to disable NAT.
more details of your WAN setup.
5.6.2 Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the More Connections Edit screen. The screen appears as shown.
92
P-662H/HW-D Series User’s Guide
Chapter 5 WAN Setup
Figure 47 More Connections Advanced Setup
The following table describes the labels in this screen.
Table 25 More Connections Advanced Setup
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionSelect the RIP direction from None, Both, In Only and Out Only.
RIP VersionSelect the RIP version from RIP-1, RIP-2B and RIP-2M.
MulticastIGMP (Internet Group Management Protocol) is a network-layer protocol used to
ATM QoS
ATM QoS TypeSelect CBR (Constant Bit Rate) to specify fixed (always-on) bandwidth for voice or
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell
Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
Maximum Burst
Size
BackClick Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
establish membership in a multicast group. The ZyXEL Device supports both IGMP
version 1 (IGMP-v1) and IGMP-v2. Select None to disable it.
data traffic. Select UBR (Unspecified Bit Rate) for applications that are non-time
sensitive, such as e-mail. Select VBR-nRT (Variable Bit Rate-non Real Time) or
VBR-RT (Variable Bit Rate-Real Time) for bursty traffic and bandwidth sharing with
other applications.
Rate (PCR). This is the maximum rate at which the sender can send cells. Type the
PCR here.
transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be
sent at the peak rate. Type the MBS, which is less than 65535.
P-662H/HW-D Series User’s Guide
93
Chapter 5 WAN Setup
5.7 Traffic Redirect
Traffic redirect f orwards traffic to a backup gateway when the ZyXEL Device cannot connect
to the Internet. An example is shown in the figure below.
Figure 48 Traffic Redirect Example
The following network topology allows you to avoid triangle route security issues when the
backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three
logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the
protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in
another subnet (Subnet 2). Configure filters that allow packets from the protected LAN
(Subnet 1) to the backup gateway (Subnet 2).
Figure 49 Traffic Redirect LAN Setup
5.8 Configuring WAN Backup
Use this screen to change your ZyXEL Device’s WAN backup settings, click WAN > WAN
Backup Setup. The screen appears as shown.
94
P-662H/HW-D Series User’s Guide
Figure 50 WAN Backup Setup
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 26 WAN Backup Setup
LABELDESCRIPTION
Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.
Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM
is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses
configured in the Check WAN IP Address fields.
Check WAN IP
Address1-3
Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP
address of a reliable nearby computer (for example, your ISP's DNS server
address).
Note: If you activate either traffic redirect or dial backup, you must
configure at least one IP address here.
When using a WAN backup connection, the ZyXEL Device periodically pings the
addresses configured here and uses the other WAN backup connection (if
configured) if there is no response.
Fail ToleranceType the number of times (2 recommended) that your ZyXEL Device may ping the
IP addresses configured in the Check WAN IP Address field without getting a
response before switching to a WAN backup connection (or a different WAN
backup connection).
Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN
backup connection), it periodically checks to whether or not it can use a higher
priority connection.
Type the number of seconds (30 recommended) for the ZyXEL Device to wait
between checks. Allow more time if your destination IP address handles lots of
traffic.
P-662H/HW-D Series User’s Guide
95
Chapter 5 WAN Setup
Table 26 WAN Backup Setup (continued)
LABELDESCRIPTION
Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a
Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device
Active Traffic
Redirect
MetricThis field sets this route's priority among the routes the ZyXEL Device uses.
Backup GatewayType the IP address of your backup gateway in dotted decimal notation. The
Dial Backup
Active Dial
Backup
MetricThis field sets this route's priority among the three routes the ZyXEL Device uses
Port SpeedSelect the speed of the connection between the dial backup port and the external
User NameEnter the user name fo r this backup connection.
PasswordE nter the password for this backup connection.
Primary Phone
Number
Advanced SetupClick this to configure advanced settings for dial backup.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
ping response from one of the IP addresses in the Check WAN IP Address field
before timing out the request. The WAN connection is considered "down" after the
ZyXEL Device times out the number of times specified in the Fail Tolerance field.
Use a higher value in this field if your network is busy or congested.
cannot connect to the Internet.
Select this check box to have the ZyXEL Device use traffic redirect if the normal
WAN connection goes down.
Note: If you activate traffic redirect, you must configure at least one
Check WAN IP Address.
The metric represents the "cost of transmission". A router determines the best
route for transmission by choosing a path with the lowest "cost". RIP routing uses
hop count as the measurement of cost, with a minimum of "1" for directly
connected networks. The number must be between "1" and "15"; a number greater
than "15" means the link is down. The smaller the number, the lower the "cost".
ZyXEL Device automatically forwards traffic to this IP address if the ZyXEL
Device's Internet connection terminates.
Select this box to activate dial up backup.
(normal, traffic redirect and dial backup). Type a number (1 to 15) to set the priority
of the dial backup route for data transmission. The smaller the number, the higher
the priority.
If the three routes have the same metrics, the priority of the routes is as follows:
WAN, Traffic Redirect, Dial Backup.
device. Available speeds are: 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Enter the phone number your modem should dial to create a connection.
5.9 WAN Backup Advanced Screen
Use this screen to change your ZyXEL Device’s WAN backup advanced settings, click WAN
> WAN Backup Setup > Advanced Setup. The screen appears as shown.
96
P-662H/HW-D Series User’s Guide
Figure 51 WAN Backup Advanced Setup
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 27 WAN Backup Advanced Setup
LABELDESCRIPTION
Authentication
Type
Secondary
Phone Number
Dial Backup Port
Speed
AT Command
Initial String
Advanced
Modem Setup
TCP/IP Options
Use the drop-down list box to select an authentication protocol for outgoing calls.
Options are:
CHAP/PAP - Your ZyXEL Device accepts either CHAP or PAP when requested by
this remote node.
CHAP - Your ZyXEL Device accepts CHAP only.
PAP - Your ZyXEL Device accept PAP only.
Type the secondary phone number from the ISP for this remote node. If the primary
phone number is busy or does not answer, your ZyXEL Device dials the secondary
phone number if available. Some areas require dialing the pound sign # before the
phone number for local calls. Include a # symbol at the beginning of the phone
numbers as required.
Use the drop-down list box to select the speed of the connection between the dial
backup port and the external device. Available speeds are: 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Type the AT command string to initialize the W AN device. Consult the manual of
your WAN device connected to your dial backup port for specific AT commands.
Click the Edit button to display the Advanced Modem Setup screen and edit the
details of your dial backup setup.
P-662H/HW-D Series User’s Guide
97
Chapter 5 WAN Setup
Table 27 WAN Backup Advanced Setup
LABELDESCRIPTION
Metric This field sets this route's priority among the three routes the ZyXEL Device uses
Enable SUA Network Address Translation (NAT) allows the translation of an Internet protocol
Enable RIP Select this check box to turn on RIP (Routing Information Protocol), which allows a
RIP Version The RIP Version field controls the format and the broadcasting method of the RIP
RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information
Enable Multicast Select this check box to turn on IGMP (Internet Group Management Protocol).
Multicast Select IGMP-v1 or IGMP-v2. IGMP version 2 (RFC 2236) is an improvement over
PPP Options
Encapsulation Select CISCO PPP from the drop-down list box if your backup WAN device uses
Compression Select this check box to enable stac compression.
Connection
Nailed-Up
Connection
Connect on
Demand
Max Idle Timeout Specify an idle time -out in the Max Idle Timeout field when you select Connect on
(normal, traffic redirect and dial backup). Type a number (1 to 15) to set the priority
of the dial backup route for data transmission. The smaller the number, the higher
the priority.
If the three routes have the same metrics, the priority of the routes is as follows:
WAN, Traffic Redirect, Dial Backup.
address used within one network to a different IP address known within another
network.
SUA (Single User Account) is a subset of NAT that supports two types of mapping:
Many-to-One and Server.
router to exchange routing information with other routers.
packets that the ZyXEL Device sends (it recognizes both formats when receiving).
Choose RIP-1, RIP-2B or RIP-2M.
RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is
probably adequate for most networks, unless you have an unusual network
topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the
difference being that RIP-2B uses subnet broadcasting while RIP-2M uses
multicasting. Multicasting can reduce the load on non-router machines since they
generally do not listen to the RIP multicast address and so will not receive the RIP
packets. However, if one router uses multicasting, then all routers on your network
must use multicasting, also.
with other routers. The RIP Direction field controls the sending and receiving of RIP
packets.
Choose Both, InOnly or OutOnly.
When set to Both or Out Only, the ZyXEL Device will broadcast its routing table
periodically.
When set to Both or In Only, the ZyXEL Device will incorporate RIP information
that it receives.
IGMP is a network-layer protocol used to establish membership in a Multicast
group - it is not used to carry user data.
version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to
read more detailed information about interoperability between IGMP version 2 and
version 1, please see sections 4 and 5 of RFC 2236.
Cisco PPP encapsulation; otherwise select Standard PPP.
Select Nailed-Up Connection when you want your connection up all the time. The
ZyXEL Device will try to bring up the connection automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
Demand. The default setting is 0, which means the Internet session will not
timeout.
98
P-662H/HW-D Series User’s Guide
Table 27 WAN Backup Advanced Setup
LABELDESCRIPTION
Budget The configuration in the Budget fields has priority over your Connection settings.
Allocated Budget Type the amount of time (in minutes) that the dial backup connection can be used
Period Type the time period (in hours) for how often the budget should be reset. For
Back
Click Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begi n configuring this screen afresh.
during the time configured in the Period field. Set an amount that is less than the
time period configured in the Period field. If you set the Allocated Budget to 0, you
will not be able to use the dial backup connection.
example, to allow calls to this remote node for a maximum of 10 minutes every
hour, set the Allocated Budget to 10 (minutes) and the Period to 1 (hour). If you set
the Period to 0, there is no budget control and the ZyXEL Device uses the
Connection settings.
5.10 Dial Backup Modem Setup
Use this screen to configure the advanced modem settings. Click Edit in the WAN > WAN
Backup Setup > Advanced Setup to view the screen as shown.
Chapter 5 WAN Setup
Figure 52 WAN Dial Backup Modem Setup
P-662H/HW-D Series User’s Guide
99
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 28 WAN Dial Backup Modem Setup
LABELDESCRIPTION
AT Command
Strings
Type the AT Command string to make a call. Example: atdt
Dial
Drop Type the AT Command string to drop a call. "~" represents a one second wait, for
Answer
Type the AT Command string to answer a call. Example: ata
Drop DTR When
Hang Up
AT Response
Strings
CLID
Type the keyword that precedes the CLID (Calling Line Identification) in the AT
Called ID Type the keyword preceding the dialed number.
Speed
Type the keyword preceding the connection speed. Example: CONNECT
Call Control
Dial Timeout Type a number of seconds for the ZyXEL Device to try to set up an outgoing call
Retry Count Type a number of times for the ZyXEL Device to retry a busy or no-answer phone
Retry Interval Type a number of seconds for the ZyXEL Device to wait before trying another call
Drop Timeout Type the number of seconds for the ZyXEL Device to wait before dropping the DTR
Call Back Delay Type a number of seconds for the ZyXEL Device to wait between dropping a
Back
Click Back to return to the previous screen.
ApplyClick Apply to save the changes.
CancelClick Cancel to begi n configuring this screen afresh.
example, "~~+++~~ath" can be used if your modem has a slow response time.
Select this check box to have the ZyXEL Device drop the DTR (Data Terminal
Ready) signal after the "AT Command String: Drop" is sent out.
response string. This lets the ZyXEL Device capture the CLID in the AT response
string that comes from the WAN device. CLID is required for CLID authentication.
Example: NMBR
before timing out (stopping). Example: 60
number before blacklisting the number. Example: 0
after a call has failed. This applies before a phone number is blacklisted. Example:
10
signal if it does not receive a positive disconnect confirmation. Example: 20
callback request call and dialing the corresponding callback call. Example: 15
100
P-662H/HW-D Series User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.