The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise,
without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the patent
rights of others. ZyXEL further reserves the right to make changes in any products described
herein without notice.
This publication is subject to change without notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be
properties of their respective owners.
ii Copyright
HomeSafe User’s Guide
Federal Communications Commission
(FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
This device may not cause harmful interference.
This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a CLASS B digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial environment. This equipment generates, uses, and
can radiate radio frequency energy, and if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and the receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could
void the user's authority to operate the equipment.
Certifications
1. Go to www.zyxel.com.
2. Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
3. Select the certification you wish to view from this page.
FCC iii
HomeSafe User’s Guide
Information for Canadian Users
The Industry Canada label identifies certified equipment. This certification means that the
equipment meets certain telecommunications network protective, operation, and safety
requirements. The Industry Canada does not guarantee that the equipment will operate to a user's
satisfaction.
Before installing this equipment, users should ensure that it is permissible to be connected to the
facilities of the local telecommunications company. The equipment must also be installed using
an acceptable method of connection. In some cases, the company's inside wiring associated with a
single line individual service may be extended by means of a certified connector assembly. The
customer should be aware that the compliance with the above conditions may not prevent
degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian maintenance facility
designated by the supplier. Any repairs or alterations made by the user to this equipment, or
equipment malfunctions, may give the telecommunications company cause to request the user to
disconnect the equipment.
For their own protection, users should ensure that the electrical ground connections of the power
utility, telephone lines, and internal metallic water pipe system, if present, are connected together.
This precaution may be particularly important in rural areas.
Caution
Users should not attempt to make such connections themselves, but should contact the
appropriate electrical inspection authority, or electrician, as appropriate.
Note
This digital apparatus does not exceed the class A limits for radio noise emissions from digital
apparatus set out in the radio interference regulations of Industry Canada.
iv Information for Canadian Users
HomeSafe User’s Guide
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in
materials or workmanship for a period of up to two years from the date of purchase. During the
warranty period, and upon proof of purchase, should the product have indications of failure due to
faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective
products or components without charge for either parts or labor, and to whatever extent it shall
deem necessary to restore the product or components to proper operating condition. Any
replacement will consist of a new or re-manufactured functionally equivalent product of equal
value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product
is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions.
NOTE
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser.
This warranty is in lieu of all other warranties, express or implied, including any implied
warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be
held liable for indirect or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material
Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended
that the unit be insured when shipped. Any returned products without proof of purchase or those
with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the
customer will be billed for parts and labor. All repaired or replaced products will be shipped by
ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal
rights, and you may also have other rights that vary from country to country.
Online Registration
) Register your product online at www.zyxel.com for global
products, or at www.us.zyxel.com for North American
products.
Warranty v
HomeSafe User’s Guide
Customer Support
When you contact your customer support representative please have the following information
ready:
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
System, LAN, WLAN and WAN ...................................................................................................................II
Chapter 4 System Screens............................................................................................................................4-1
4.1 System Overview............................................................................................................................4-1
4.2 Configuring General Setup...........................................................................................................4-1
4.6 Configuring T ime Setting..............................................................................................................4-4
Chapter 5 LAN Screens ...............................................................................................................................5-1
5.1 LAN Overview................................................................................................................................5-1
5.3 LAN TCP/IP...................................................................................................................................5-1
5.4 Any IP.............................................................................................................................................5-2
Chapter 8 WAN Screens...............................................................................................................................8-1
8.1 WAN Overview...............................................................................................................................8-1
9.2 Using NAT.......................................................................................................................................9-4
9.3 SUA Server......................................................................................................................................9-4
9.4 Configuring SUA Server................................................................................................................9-6
Remote Management...................................................................................................................................... V
Logs and Maintenance..................................................................................................................................VI
20.3 TCP/IP Ethernet Setup and DHCP........................................................................................20-1
20.4 Wireless LAN Setup................................................................................................................ 20-5
Chapter 21 Internet Access........................................................................................................................ 21-1
21.1 Introduction to Internet Access Setup ...................................................................................21-1
34.1 Introduction to Call Scheduling.............................................................................................34-1
Appendices and Index...................................................................................................................................IX
Appendix A T roubleshooting...................................................................................................................... A-1
Appendix B PPPoE...................................................................................................................................... B-1
Appendix C PPTP ....................................................................................................................................... C-1
Appendix D Log Descriptions.....................................................................................................................D-1
Appendix E Setting up Your Computer’s IP Address............................................................................... E-1
Appendix F Wireless LAN and IEEE 802.11..............................................................................................F-1
Appendix G Wireless LAN With IEEE 802.1x..........................................................................................G-1
Appendix H Types of EAP Authentication................................................................................................H-1
Appendix I Antenna Selection and Positioning Recommendation........................................................... I-1
Appendix K Triangle Route........................................................................................................................K-1
Appendix L Index........................................................................................................................................ L-1
Table of Contents xi
HomeSafe User’s Guide
List of Figures
Figure 1-1 Secure Internet Access via Cable, DSL or Wireless Modem.....................................................1-5
Figure 1-2 HomeSafe Parental Control Gateway Application..................................................................... 1-5
Figure 1-3 Wir e less LAN Application Example..........................................................................................1-6
Figure 4-1 SYSTEM : General Setup.......................................................................................................... 4-1
List of Figures xiii
HomeSafe User’s Guide
Figure 4-2 SYSTEM : DDNS......................................................................................................................4-3
Figure 4-3 SYSTEM : Password.................................................................................................................4-4
Figure 4-4 SYSTEM : Time Setting............................................................................................... ............. 4-5
Figure 5-1 Any IP Example Application......................................................................................................5-3
Figure 5-2 LAN : IP .................................................................................................................................... 5-4
Figure 5-3 LAN : Static DHCP...................................................................................................................5-6
Figure 5-4 LAN : IP Alias ...........................................................................................................................5-7
Figure 6-1 IBSS (Ad-hoc) Wireless LAN ................................................................................................... 6-1
Figure 6-2 Basic Service set........................................................................................................................ 6-2
Figure 6-3 Extended Service Set.................................................................................................................6-2
Figure 8-1 WAN : Route..............................................................................................................................8-1
Figure 8-2 WAN ISP : Ethernet Encapsulation........................................................................................... 8-2
Figure 8-3 WAN ISP : PPPoE Encapsulation.............................................................................................. 8-4
Figure 8-4 WAN ISP : PPTP Encapsulation................................................................................................8-5
Figure 8-5 WAN : IP.................................................................................................................................... 8-6
Figure 8-6 WAN : MAC Setup....................................................................................................................8-8
Figure 8-7 Traffic Redirect WAN Setup ......................................................................................................8-9
Figure 8-8 Traffic Redirect LAN Setup.......................................................................................................8-9
Figure 8-9 WAN : Traffic Redirect............................................................................................................ 8-10
Figure 9-1 How NAT Works........................................................................................................................9-2
Figure 9-2 NAT Application W ith IP Alias.................................................................................................. 9-3
Figure 9-3 Multiple Servers Behind NAT Example ....................................................................................9-6
Table 3-7 Private IP Address Ranges........................................................................................................... 3-8
Table 3-8 Example of Network Properties for LAN Servers with Fixed IP Addresses.............................3-10
Table 3-9 Connection Wizard : WAN Setup.............................................................................................. 3-10
Table 4-1 SYSTEM : General Setup ........................................................................................................... 4-1
Table 4-2 SYSTEM : DDNS.......................................................................................................................4-3
Table 4-3 SYSTEM : Password................................................................................................................... 4-4
Table 4-4 SYSTEM : Time Setting..............................................................................................................4-5
Table 5-1 LAN : IP...................................................................................................................................... 5-4
Table 5-2 LAN : Static DHCP..................................................................................................................... 5-7
Table 5-3 LAN : IP Alias.............................................................................................................................5-7
Table 8-1 WAN : Route ............................................................................................................................... 8-2
Table 8-2 WAN ISP : Ethernet Encapsulation.............................................................................................8-2
Table 8-3 WAN ISP : PPPoE Encapsulation................................................................................................8-4
Table 8-4 WAN ISP : PPTP Encapsulation..................................................................................................8-5
Table 8-5 WAN : IP .....................................................................................................................................8-6
Table 8-6 WAN : Traffic Redirect..............................................................................................................8-10
Table 32-2 Call History Fields................................................................................................................... 32-3
Table 32-3 Time and Date Setting Fields .................................................................................................. 32-4
Table 33-1 Menu 24.11 – Remote Management Control........................................................................... 33-1
Table 34-1 Menu 26.1 Schedule Set Setup................................................................................................34-2
xxii List of Tables
HomeSafe User’s Guide
Preface
About This User's Manual
Congratulations on your purchase of the HS-100 Parental Control Gateway or HS-100W Parental
Control Gateway. This manual is designed to guide you through the configuration of your
HomeSafe for its various applications.
) Some parts of this manual relate to the Wireless Parental
Control Gateway.
) Use the web configurator, System Management Terminal
(SMT) or command interpreter interface to configure your
HomeSafe. Not all features can be configured through all
interfaces.
The web configurator parts of this guide contain background information on features configurable
by the web configurator and the SMT. The SMT parts of this guide contain background
information solely on features not configurable by the web configurator.
This manual may refer to the HS-100, HS-100W, Parental Control Gateway or Wireless Parental
Control Gateway as the HomeSafe.
Related Documentation
¾Support Disk
Refer to the included CD for support documents.
¾Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
a detailed easy-to-follow connection diagram, default settings, handy checklists and
information on setting up your network and configuring for Internet access.
¾Web Configurator Online Help
Embedded web help for descriptions of indivi d ual scree ns and sup pl ementary information.
¾Packing List Card
The Packing List Card lists all items that should have come in the package.
¾ Certifications
Refer to the product page at www.zyxel.com for information on product certifications.
¾ZyXEL Glossary and Web Site
Please refer to www.zyxel.com
support documentation.
for an online glossary of networking terms and additional
User’s Guide Feedback
Help us help you. E-mail all User’s Guide-related comments, questions or suggestions for
improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team,
ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu,
300, Taiwan. Thank you.
Preface xxiii
HomeSafe User’s Guide
Syntax Conventions
• The version number on the title page is the latest firmware version that is documented in this
User’s Guide. Earlier versions may also be included.
• “Enter” means for you to type one or more characters and press the carriage return. “Select”
or “Choose” means for you to use one of the predefined choices.
• The SMT menu titles and labels are in Bold Times New Roman font. Command and arrow
keys are enclosed in square brackets. [ENTER] means the Enter, or carriage return key;
[ESC] means the Escape key and [SPACE BAR] means the Space Bar.
• The choices of a menu item are in Bold Arialfont.
• Mouse action sequences are denoted using a comma. For example, “click the Apple icon,
Control Panels and then Modem” means first click the Apple icon, then point your mouse
pointer to Control Panels and then click Modem.
• For brevity’s sake, we will use “e.g.” as a shorthand for “for instance” and “i.e.” for “that is”
or “in other words” throughout this manual.
Graphics Icons Key
HS-100W
Server
Telephone
DSLAM
Computer
Modem
Switch
Wireless Access Point
Notebook computer
Firewall
Router
Wireless Signal
xxiv Preface
HomeSafe User’s Guide
Preface xxv
Getting Started
PPaarrtt II::
Getting Started
This part helps you get to know your HomeSafe, introduces the web configurator and cove rs how
to configure the Connection and Parental Control Wizard Setup screens.
I
HomeSafe User’s Guide
Chapter 1
Getting to Know Your HomeSafe
This chapter introduces the main features and applications of the HomeSafe.
1.1 HomeSafe Parental Control Gateway Overview
HomeSafe is a parental control security gateway that can give a parent control over a child’s
Internet access privileges. It is the ideal secure gateway for all data passing between the Internet
and LAN’s.
By integrating web content filtering, NAT, firewall, ZyXEL’s HomeSafe protects your Intranet
and efficiently manages data traffic on your network.
The embedded web configurator is easy to operate.
1.2 HomeSafe Features
The following sections describe HomeSafe features.
This auto-negotiation feature allows the HomeSafe to detect the speed of incoming transmissions
and adjust appropriately without manual intervention. It allows data transfer of either 10 Mbps or
100 Mbps in either half-duplex or full-duplex mode depending on your Ethernet network.
Auto-crossover 10/100 Mbps Ethernet Interface(s)
These interfaces automatically adjust to either a crossover or straight-through Ethernet cable.
4-Port Switch
A combination of switch and router makes your HomeSafe a cost-effective and viable network
solution. You can add up to four computers to the HomeSafe without the cost of a hub. Add more
than four computers to your LAN by using a hub.
Time and Date
The HomeSafe allows you to get the current time and date from an external server when you turn
on your HomeSafe. You can also set the time manually.
Reset Button
The HomeSafe reset button is built into the rear panel. Use this button to restore the factory
default password to 1234; IP address to 192.168.1.1, subnet mask to 255.255.255.0 and DHCP
server enabled with a pool of 32 IP addresses starting at 192.168.1.33.
1.2.2 Non-Physical Features
Parental Control
The HomeSafe can control access privileges to website and services through Parental Control.
Parental Control can be defined as the ability for a parent (LAN administrator) to control a child’s
(LAN user) Internet access privileges. The administrator can create a login name and password
for each user on the network. Up to ten user accounts can be configured. Each user must log into
the system before they can gain access to the Internet. Each account will have specific access
restrictions.
Getting to Know Your HomeSafe 1-1
HomeSafe User’s Guide
Content Filtering
The HomeSafe can block access to Internet services according to how you configure parental
control application blocking. You can define time periods and days during which content filtering
is enabled and include or exclude categories on the LAN.
Firewall
The HomeSafe is a stateful inspection firewall with DoS (Denial of Service) protection. By
default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked
unless it is initiated from the LAN. The HomeSafe firewall supports TCP/UDP inspection, DoS
detection and prevention, real time alerts, reports and logs.
IEEE 802.1x Network Security (HS-100W only)
The HomeSafe supports the IEEE 802.1x standard to enhance user authentication. Use the builtin user profile database to authenticate up to 32 users using MD5 encryption. Use an EAPcompatible RADIUS (RFC2138, 2139 - Remote Authentication Dial In User Service) server to
authenticate users using EAP (Extensible Authentication Protocol). EAP is an authentication
protocol that supports multiple types of authentication.
Brute-Force Password Guessing Protection
The HomeSafe has a special protection mechanism to discourage brute-force password guessing
attacks on the HomeSafe’s management interfaces. You can specify a wait-time that must expire
before entering a fourth password after three incorrect passwords have been entered. Please see
the appendices for details about this feature.
802.11b Wireless LAN Standard (HS-100W only)
The HomeSafe, complies with the IEEE 802.11b wireless standard.
The IEEE 802.11b data rate and corresponding modulation techniques are as follows. The
modulation technique defines how bits are encoded onto radio waves.
Table 1-1 IEEE 802.11b
DATA RATE (MBPS) MODULATION
1 DBPSK (Differential Binary Phase Shift Keyed)
2
5.5 / 11 CCK (Complementary Code Keying)
DQPSK (Differential Quadrature Phase Shift Keying
)
) The HomeSafe may be prone to RF (Radio Frequency)
interference from other 2.4 GHz devices such as microwave
ovens, wireless phones, Bluetooth enabled devices, and other
wireless LANs.
802.11g Wireless LAN Standard (HS-100W only)
The HomeSafe, complies with the IEEE 802.11g wireless standard and is also fully compatible
with the IEEE 802.11b standard. This means an IEEE 802.11b wireless card can interface directly
with an IEEE 802.11g device (and vice versa) at 11 Mbps or lower depending on range. IEEE
802.11g has several intermediate rate steps between the maximum and minimum data rates. The
IEEE 802.11g data rate and modulation are as follows:
1-2 Getting to Know Your HomeSafe
HomeSafe User’s Guide
Table 1-2 IEEE 802.11g
DATA RATE (MBPS) MODULATION
6/9/12/18/24/36/48/54 OFDM (Orthogonal Frequency Division Multiplexing)
Packet Filtering
The packet filtering mechanism blocks unwanted traffic from entering/leaving your network.
Universal Plug and Play (UPnP)
Using the standard TCP/IP protocol, the HomeSafe and other UPnP enabled devices can
dynamically join a network, obtain an IP address and convey its capabilities to other devices on
the network.
Call Scheduling
Configure call time periods to restrict and allow access for users on remote nodes.
PPPoE
PPPoE facilitates the interaction of a host with an Internet modem to achieve access to high-speed
data networks via a familiar "dial-up networking" user interface.
PPTP Encapsulation
Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of
data from a remote client to a private server, creating a Virtual Private Network (VPN) using a
TCP/IP-based network.
PPTP supports on-demand, multi-protocol and virtual private networking over public networks,
such as the Internet. The HomeSafe supports one PPTP server connection at any given time.
Dynamic DNS Support
With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a
dynamic IP address, allowing the host to be more easily accessible from various locations on the
Internet. You must register for this service with a Dynamic DNS service provider.
IP Multicast
Deliver IP packets to a specific group of hosts using IP multicast. IGMP (Internet Group
Management Protocol) is the protocol used to support multicast groups. The latest version is
version 2 (see RFC 2236); the HomeSafe supports both versions 1 and 2.
IP Alias
IP Alias allows you to partition a physical network into logical networks over the same Ethernet
interface. The HomeSafe supports three logical LAN interfaces via its single physical Ethernet
LAN interface with the HomeSafe itself as the gateway for each LAN network.
SNMP
SNMP (Simple Network Management Protocol) is a protocol used for exchanging management
information between network devices. SNMP is a member of the TCP/IP protocol suite. Your
HomeSafe supports SNMP agent functionality, which allows a manager station to manage and
monitor the HomeSafe through the network. The HomeSafe supports SNMP version one
(SNMPv1).
Getting to Know Your HomeSafe 1-3
Loading...
+ 327 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.