Page 1
P-2602HW(L) Series
802.11g Wireless ADSL2+ VoIP IAD
P-2602H Series
ADSL2+ VoIP IAD
User’s Guide
Version 3.40
12/2006
Edition 2
www.zyxel.com
Page 2
Page 3
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyXEL Device using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
" It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
P-2602H(W)(L)-DxA User’s Guide
3
Page 4
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1 Warnings tell you about things that could harm you or your device.
" Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-2602HWL-DxA may be referred to as the “ZyXEL Device”, the “device”, the
“system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
4
P-2602H(W)(L)-DxA User’s Guide
Page 5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
P-2602H(W)(L)-DxA User’s Guide
5
Page 6
Safety Warnings
Safety Warnings
1 For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).
6
This product is recyclable. Dispose of it properly.
P-2602H(W)(L)-DxA User’s Guide
Page 7
Safety Warnings
P-2602H(W)(L)-DxA User’s Guide
7
Page 8
Safety Warnings
8
P-2602H(W)(L)-DxA User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction ............................................................................................................................ 37
Introducing the ZyXEL Device ...................................................................................................39
Introducing the Web Configurator .............................................................................................. 47
Wizard ..................................................................................................................................... 55
Internet and Wireless Setup Wizard .......................................................................................... 57
VoIP Wizard And Example ........................................................................................................71
Bandwidth Management Wizard ................................................................................................ 77
Advanced ................................................................................................................................ 81
Status Screens .......................................................................................................................... 83
WAN Setup ................................................................................................................................ 93
LAN Setup ............................................................................................................................... 105
Wireless LAN ............................................................................................................................117
Network Address Translation (NAT) Screens .......................................................................... 137
Voice ........................................................................................................................................ 149
VoIP Trunking .......................................................................................................................... 175
Phone Usage ........................................................................................................................... 191
Firewalls .................................................................................................................................. 195
Firewall Configuration .............................................................................................................. 207
Content Filtering ...................................................................................................................... 227
Introduction to IPSec ............................................................................................................... 231
VPN Screens ........................................................................................................................... 237
Certificates ............................................................................................................................... 263
Static Route ............................................................................................................................. 287
Bandwidth Management .......................................................................................................... 291
Dynamic DNS Setup ................................................................................................................ 299
Remote Management Configuration ........................................................................................ 303
Universal Plug-and-Play (UPnP) ............................................................................................. 313
Maintenance and Troubleshooting ..................................................................................... 325
System ..................................................................................................................................... 327
Logs ........................................................................................................................................ 331
Tools ........................................................................................................................................ 345
Diagnostic ............................................................................................................................... 357
Troubleshooting ....................................................................................................................... 361
Appendices and Index ......................................................................................................... 369
P-2602H(W)(L)-DxA User’s Guide
9
Page 10
Contents Overview
10
P-2602H(W)(L)-DxA User’s Guide
Page 11
Table of Contents
Table of Contents
About This User's Guide ..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................6
Contents Overview ...................................................................................................................9
Table of Contents.................................................................................................................... 11
List of Figures ......................................................................................................................... 23
List of Tables...........................................................................................................................31
Part I: Introduction................................................................................. 37
Chapter 1
Introducing the ZyXEL Device...............................................................................................39
1.1 Overview .............................................................................................................................. 39
1.2 Ways to Manage the ZyXEL Device .................................................................................... 40
1.3 Good Habits for Managing the ZyXEL Device ..................................................................... 40
1.4 Applications for the ZyXEL Device ...................................................................................... 41
1.4.1 Internet Access ..........................................................................................................41
1.4.2 Making Calls via Internet Telephony Service Provider ............................................... 41
1.4.3 Make Peer-to-peer Calls ............................................................................................ 42
1.4.4 Firewall for Secure Broadband Internet Access ......................................................... 42
1.4.5 LAN to LAN Application .............................................................................................. 43
1.5 LEDs .................................................................................................................................... 44
1.6 The RESET Button .............................................................................................................. 45
1.6.1 Using The Reset Button ............................................................................................. 45
Chapter 2
Introducing the Web Configurator ........................................................................................ 47
2.1 Web Configurator Overview ................................................................................................. 47
2.1.1 Accessing the Web Configurator ................................................................................ 47
2.2 Web Configurator Main Screen ........................................................................................... 50
2.2.1 Title Bar ...................................................................................................................... 50
2.2.2 Navigation Panel ........................................................................................................ 51
2.2.3 Main Window ..............................................................................................................53
P-2602H(W)(L)-DxA User’s Guide
11
Page 12
Table of Contents
2.2.4 Status Bar ................................................................................................................... 53
Part II: Wizard ......................................................................................... 55
Chapter 3
Internet and Wireless Setup Wizard...................................................................................... 57
3.1 Introduction .......................................................................................................................... 57
3.2 Internet Access Wizard Setup ............................................................................................. 57
3.2.1 Manual Configuration ................................................................................................. 60
3.3 Wireless Connection Wizard Setup ..................................................................................... 65
3.3.1 Manually Assign a WPA key ...................................................................................... 68
3.3.2 Manually Assign a WEP Key ...................................................................................... 68
Chapter 4
VoIP Wizard And Example...................................................................................................... 71
4.1 Introduction .......................................................................................................................... 71
4.2 VoIP Wizard Setup .............................................................................................................. 71
Chapter 5
Bandwidth Management Wizard............................................................................................ 77
5.1 Introduction .......................................................................................................................... 77
5.2 Bandwidth Management Wizard Setup ............................................................................... 77
Part III: Advanced................................................................................... 81
Chapter 6
Status Screens........................................................................................................................ 83
6.1 Status Screen ..................................................................................................................... 83
6.2 Any IP Table ........................................................................................................................ 86
6.3 WLAN Status (“W” models only) .......................................................................................... 87
6.4 Packet Statistics .................................................................................................................. 87
6.5 VoIP Statistics ...................................................................................................................... 89
Chapter 7
WAN Setup...............................................................................................................................93
7.1 WAN Overview .................................................................................................................... 93
7.1.1 Encapsulation ............................................................................................................. 93
7.1.2 Multiplexing ................................................................................................................ 94
7.1.3 VPI and VCI ............................................................................................................... 94
7.1.4 IP Address Assignment .............................................................................................. 94
12
P-2602H(W)(L)-DxA User’s Guide
Page 13
Table of Contents
7.1.5 Nailed-Up Connection (PPP) ..................................................................................... 95
7.1.6 NAT ............................................................................................................................ 95
7.2 Metric .................................................................................................................................. 95
7.3 Traffic Shaping ..................................................................................................................... 96
7.3.1 ATM Traffic Classes ................................................................................................... 97
7.4 Zero Configuration Internet Access ..................................................................................... 97
7.5 Internet Access Setup ........................................................................................................ 98
7.5.1 Advanced Internet Access Setup ............................................................................. 100
7.6 WAN More Connections ................................................................................................... 101
7.7 Traffic Redirect .................................................................................................................. 102
7.8 WAN Backup Setup ..........................................................................................................103
Chapter 8
LAN Setup.............................................................................................................................. 105
8.1 LAN Overview ................................................................................................................... 105
8.1.1 LANs, WANs and the ZyXEL Device ........................................................................ 105
8.1.2 DHCP Setup ............................................................................................................. 106
8.2 DNS Server Addresses ..................................................................................................... 106
8.3 LAN TCP/IP ....................................................................................................................... 106
8.3.1 IP Address and Subnet Mask ................................................................................... 107
8.3.2 RIP Setup ................................................................................................................. 108
8.3.3 Multicast ................................................................................................................... 108
8.3.4 Any IP ....................................................................................................................... 109
8.4 Configuring LAN IP .............................................................................................................110
8.4.1 Configuring Advanced LAN Setup ............................................................................111
8.5 DHCP Setup .......................................................................................................................112
8.6 LAN Client List ....................................................................................................................113
8.7 LAN IP Alias .......................................................................................................................114
Chapter 9
Wireless LAN......................................................................................................................... 117
9.1 Wireless Network Overview ................................................................................................117
9.2 Wireless Security Overview ................................................................................................118
9.2.1 SSID ..........................................................................................................................118
9.2.2 MAC Address Filter ...................................................................................................118
9.2.3 User Authentication ...................................................................................................118
9.2.4 Encryption .................................................................................................................119
9.2.5 One-Touch Intelligent Security Technology (OTIST) ................................................ 120
9.3 Wireless Performance Overview ....................................................................................... 120
9.3.1 Quality of Service (QoS) .......................................................................................... 120
9.4 Additional Wireless Terms ................................................................................................. 120
9.5 General WLAN Screen ..................................................................................................... 121
9.5.1 No Security ............................................................................................................... 122
P-2602H(W)(L)-DxA User’s Guide
13
Page 14
Table of Contents
9.5.2 WEP Encryption Screen ........................................................................................... 123
9.5.3 WPA(2)-PSK ............................................................................................................ 124
9.5.4 WPA(2) Authentication Screen ................................................................................. 125
9.5.5 Wireless LAN Advanced Setup ............................................................................... 127
9.6 OTIST Screen .................................................................................................................... 128
9.6.1 Notes on OTIST ....................................................................................................... 130
9.7 MAC Filter ..................................................................................................................... 131
9.8 QoS Screen ....................................................................................................................... 133
9.8.1 Application Priority Configuration ............................................................................. 134
Chapter 10
Network Address Translation (NAT) Screens.....................................................................137
10.1 NAT General Overview ................................................................................................... 137
10.1.1 NAT Definitions ...................................................................................................... 137
10.1.2 What NAT Does ..................................................................................................... 138
10.1.3 How NAT Works ..................................................................................................... 138
10.1.4 NAT Application ...................................................................................................... 138
10.1.5 NAT Mapping Types ............................................................................................... 139
10.2 SUA (Single User Account) Versus NAT ......................................................................... 140
10.3 NAT General Setup .......................................................................................................... 140
10.4 Port Forwarding ............................................................................................................. 141
10.4.1 Default Server IP Address ...................................................................................... 142
10.4.2 Port Forwarding: Services and Port Numbers ........................................................ 142
10.4.3 Configuring Servers Behind Port Forwarding (Example) ....................................... 142
10.5 Configuring Port Forwarding ............................................................................................ 143
10.5.1 Port Forwarding Rule Edit ..................................................................................... 144
10.6 Address Mapping ............................................................................................................ 145
10.6.1 Address Mapping Rule Edit ................................................................................... 146
10.6.2 SIP ALG ................................................................................................................148
Chapter 11
Voice.......................................................................................................................................149
11.1 Introduction to VoIP .......................................................................................................... 149
11.2 SIP .................................................................................................................................. 149
11.2.1 SIP Identities ..........................................................................................................149
11.2.2 SIP Call Progression .............................................................................................. 150
11.2.3 SIP Servers ............................................................................................................ 150
11.2.4 RTP ........................................................................................................................ 152
11.2.5 Pulse Code Modulation .......................................................................................... 152
11.2.6 Voice Coding .......................................................................................................... 152
11.2.7 PSTN Call Setup Signaling .................................................................................... 153
11.2.8 MWI (Message Waiting Indication) ......................................................................... 153
11.2.9 Custom Tones (IVR) ............................................................................................... 153
14
P-2602H(W)(L)-DxA User’s Guide
Page 15
Table of Contents
11.3 Quality of Service (QoS) ..................................................................................................154
11.3.1 Type of Service (ToS) ............................................................................................. 154
11.3.2 DiffServ ................................................................................................................... 154
11.3.3 VLAN Tagging ........................................................................................................ 155
11.4 SIP Settings Screen ........................................................................................................ 155
11.5 Advanced SIP Setup Screen .......................................................................................... 156
11.6 SIP QoS Screen .............................................................................................................. 160
11.7 Phone .............................................................................................................................. 160
11.7.1 Voice Activity Detection/Silence Suppression ........................................................ 160
11.7.2 Comfort Noise Generation ...................................................................................... 161
11.7.3 Echo Cancellation .................................................................................................. 161
11.8 Analog Phone Screen ..................................................................................................... 161
11.9 Advanced Analog Phone Setup Screen .......................................................................... 162
11.10 Common Phone Settings Screen .................................................................................. 163
11.11 Phone Services Overview .............................................................................................. 164
11.11.1 The Flash Key ...................................................................................................... 165
11.11.2 Europe Type Supplementary Phone Services ...................................................... 165
11.11.3 USA Type Supplementary Services ...................................................................... 166
11.12 Phone Region Screen ................................................................................................... 168
11.13 Speed Dial .................................................................................................................... 168
11.14 Incoming Call Policy Screen ......................................................................................... 170
11.15 Distinctive Ring Screen ..................................................................................................172
11.16 PSTN Line (“L” models only) .......................................................................................... 173
11.17 PSTN Line Screen (“L” models only) ............................................................................ 174
Chapter 12
VoIP Trunking........................................................................................................................ 175
12.1 VoIP Trunking Overview ................................................................................................. 175
12.2 VoIP Trunking and Security ............................................................................................. 175
12.2.1 Auto Attendant and Authentication ......................................................................... 175
12.2.2 Peer Call Authentication ......................................................................................... 176
12.3 Call Rules ........................................................................................................................ 177
12.4 VoIP Trunking Scenarios ................................................................................................. 177
12.4.1 VoIP Phone To PSTN Phone ................................................................................. 177
12.4.2 PSTN Phone To VoIP Phone ................................................................................. 177
12.4.3 PSTN Phone To PSTN Phone via VoIP ................................................................. 178
12.5 Trunking General Screen ................................................................................................. 178
12.6 Trunking Peer Call Screen ............................................................................................... 179
12.7 Trunking Call Rule Screen ............................................................................................... 181
12.8 VoIP Trunking Example: VoIP to PSTN ........................................................................... 183
12.8.1 Background Information ......................................................................................... 183
12.8.2 Configuration Details: Outgoing ............................................................................. 183
12.8.3 Configuration Details: Incoming ............................................................................. 184
P-2602H(W)(L)-DxA User’s Guide
15
Page 16
Table of Contents
12.8.4 Call Progression ..................................................................................................... 185
12.9 VoIP Trunking Example: PSTN to PSTN via VoIP ........................................................... 185
12.9.1 Background Information ......................................................................................... 186
12.9.2 Configuration Details: Outgoing ............................................................................. 186
12.9.3 Configuration Details: Incoming ............................................................................. 188
12.9.4 Call Progression ..................................................................................................... 188
Chapter 13
Phone Usage ......................................................................................................................... 191
13.1 Dialing a Telephone Number ........................................................................................... 191
13.2 Using Speed Dial to Dial a Telephone Number ............................................................... 191
13.3 Internal Calls .................................................................................................................... 191
13.4 Using Call Park and Pickup ............................................................................................. 191
13.5 Checking the ZyXEL Device’s IP Address ....................................................................... 192
13.6 Auto Provisioning and Auto Firmware Upgrade .............................................................. 192
13.7 Phone Functions Summary ............................................................................................. 192
Chapter 14
Firewalls................................................................................................................................. 195
14.1 Firewall Overview ........................................................................................................... 195
14.2 Types of Firewalls ............................................................................................................ 195
14.2.1 Packet Filtering Firewalls ....................................................................................... 195
14.2.2 Application-level Firewalls ...................................................................................... 196
14.2.3 Stateful Inspection Firewalls .................................................................................. 196
14.3 Introduction to ZyXEL’s Firewall ...................................................................................... 196
14.3.1 Denial of Service Attacks ....................................................................................... 197
14.4 Denial of Service ............................................................................................................. 197
14.4.1 Basics ..................................................................................................................... 197
14.4.2 Types of DoS Attacks ............................................................................................. 198
14.5 Stateful Inspection ........................................................................................................... 200
14.5.1 Stateful Inspection Process .................................................................................... 201
14.5.2 Stateful Inspection on Your ZyXEL Device ............................................................. 202
14.5.3 TCP Security .......................................................................................................... 202
14.5.4 UDP/ICMP Security ................................................................................................ 203
14.5.5 Upper Layer Protocols ........................................................................................... 203
14.6 Guidelines for Enhancing Security with Your Firewall ..................................................... 204
14.6.1 Security In General ................................................................................................ 204
14.7 Packet Filtering Vs Firewall ............................................................................................. 205
14.7.1 Packet Filtering: ..................................................................................................... 205
14.7.2 Firewall ................................................................................................................... 205
Chapter 15
Firewall Configuration ..........................................................................................................207
16
P-2602H(W)(L)-DxA User’s Guide
Page 17
Table of Contents
15.1 Access Methods .............................................................................................................. 207
15.2 General Firewall Policy Overview ................................................................................... 207
15.3 Rule Logic Overview ....................................................................................................... 208
15.3.1 Rule Checklist ........................................................................................................ 208
15.3.2 Security Ramifications ............................................................................................ 208
15.3.3 Key Fields For Configuring Rules .......................................................................... 209
15.4 Connection Direction ....................................................................................................... 209
15.4.1 LAN to WAN Rules ................................................................................................. 210
15.4.2 Alerts ...................................................................................................................... 210
15.5 General Firewall Policy ................................................................................................... 210
15.6 Firewall Rules Summary ..................................................................................................211
15.6.1 Configuring Firewall Rules ................................................................................... 213
15.6.2 Customized Services ............................................................................................ 216
15.6.3 Configuring A Customized Service ...................................................................... 216
15.7 Example Firewall Rule .....................................................................................................217
15.8 DoS Thresholds .............................................................................................................. 221
15.8.1 Threshold Values ................................................................................................... 221
15.8.2 Half-Open Sessions ............................................................................................... 222
15.8.3 Configuring Firewall Thresholds ............................................................................. 222
15.9 Firewall Commands .........................................................................................................224
Chapter 16
Content Filtering ................................................................................................................... 227
16.1 Content Filtering Overview ............................................................................................. 227
16.2 Configuring Keyword Blocking ....................................................................................... 227
16.3 Configuring the Schedule .............................................................................................. 228
16.4 Configuring Trusted Computers ..................................................................................... 229
Chapter 17
Introduction to IPSec............................................................................................................231
17.1 VPN Overview ................................................................................................................. 231
17.1.1 IPSec ...................................................................................................................... 231
17.1.2 Security Association ............................................................................................... 231
17.1.3 Other Terminology .................................................................................................. 231
17.1.4 VPN Applications ................................................................................................... 232
17.2 IPSec Architecture ........................................................................................................... 232
17.2.1 IPSec Algorithms .................................................................................................... 233
17.2.2 Key Management ................................................................................................... 233
17.3 Encapsulation .................................................................................................................. 233
17.3.1 Transport Mode ...................................................................................................... 234
17.3.2 Tunnel Mode ......................................................................................................... 234
17.4 IPSec and NAT ................................................................................................................ 234
P-2602H(W)(L)-DxA User’s Guide
17
Page 18
Table of Contents
Chapter 18
VPN Screens.......................................................................................................................... 237
18.1 VPN/IPSec Overview ....................................................................................................... 237
18.2 IPSec Algorithms ............................................................................................................. 237
18.2.1 AH (Authentication Header) Protocol ..................................................................... 237
18.2.2 ESP (Encapsulating Security Payload) Protocol .................................................... 237
18.3 My IP Address ................................................................................................................. 238
18.4 Secure Gateway Address ................................................................................................ 238
18.4.1 Dynamic Secure Gateway Address ....................................................................... 239
18.5 VPN Setup Screen .........................................................................................................239
18.6 Keep Alive ....................................................................................................................... 241
18.7 VPN, NAT, and NAT Traversal ......................................................................................... 241
18.8 Remote DNS Server ........................................................................................................ 242
18.9 ID Type and Content ........................................................................................................ 243
18.9.1 ID Type and Content Examples ............................................................................. 244
18.10 Pre-Shared Key ............................................................................................................. 245
18.11 Editing VPN Policies ..................................................................................................... 245
18.12 IKE Phases ................................................................................................................... 250
18.12.1 Negotiation Mode ................................................................................................. 251
18.12.2 Diffie-Hellman (DH) Key Groups .......................................................................... 251
18.12.3 Perfect Forward Secrecy (PFS) .......................................................................... 251
18.13 Configuring Advanced IKE Settings ............................................................................. 251
18.14 Manual Key Setup .........................................................................................................254
18.14.1 Security Parameter Index (SPI) .......................................................................... 254
18.15 Configuring Manual Key ............................................................................................... 254
18.16 Viewing SA Monitor ......................................................................................................257
18.17 Configuring Global Setting ............................................................................................ 259
18.18 Telecommuter VPN/IPSec Examples ............................................................................ 259
18.18.1 Telecommuters Sharing One VPN Rule Example ................................................ 259
18.18.2 Telecommuters Using Unique VPN Rules Example ............................................. 260
18.19 VPN and Remote Management ..................................................................................... 262
Chapter 19
Certificates ............................................................................................................................263
19.1 Certificates Overview ...................................................................................................... 263
19.1.1 Advantages of Certificates ..................................................................................... 264
19.2 Self-signed Certificates .................................................................................................... 264
19.3 Configuration Summary ................................................................................................... 264
19.4 My Certificates ................................................................................................................. 265
19.5 My Certificate Import ...................................................................................................... 266
19.5.1 Certificate File Formats .......................................................................................... 267
19.6 My Certificate Create ...................................................................................................... 268
19.7 My Certificate Details ...................................................................................................... 270
18
P-2602H(W)(L)-DxA User’s Guide
Page 19
Table of Contents
19.8 Trusted CAs ................................................................................................................... 273
19.9 Trusted CA Import ......................................................................................................... 275
19.10 Trusted CA Details ......................................................................................................... 276
19.11 Trusted Remote Hosts ................................................................................................. 278
19.12 Verifying a Trusted Remote Host’s Certificate ............................................................... 280
19.12.1 Trusted Remote Host Certificate Fingerprints ...................................................... 280
19.13 Trusted Remote Hosts Import ...................................................................................... 281
19.14 Trusted Remote Host Certificate Details ..................................................................... 281
19.15 Directory Servers ........................................................................................................... 284
19.16 Directory Server Add and Edit ...................................................................................... 285
Chapter 20
Static Route ........................................................................................................................... 287
20.1 Static Route .................................................................................................................. 287
20.2 Configuring Static Route ..................................................................................................287
20.2.1 Static Route Edit ................................................................................................... 288
Chapter 21
Bandwidth Management.......................................................................................................291
21.1 Bandwidth Management Overview ................................................................................. 291
21.2 Application-based Bandwidth Management .................................................................... 291
21.3 Auto Classifier ................................................................................................................. 291
21.4 Subnet-based Bandwidth Management .......................................................................... 292
21.5 Application and Subnet-based Bandwidth Management ................................................. 293
21.5.1 Bandwidth Management Priorities ......................................................................... 293
21.6 Configuring Bandwidth Management (General) .............................................................. 293
21.7 Bandwidth Management Rule Setup ............................................................................. 294
21.7.1 Rule Configuration ................................................................................................. 295
21.8 Bandwidth Monitor ......................................................................................................... 297
Chapter 22
Dynamic DNS Setup ............................................................................................................. 299
22.1 Dynamic DNS Overview ................................................................................................ 299
22.1.1 DYNDNS Wildcard ................................................................................................. 299
22.2 Configuring Dynamic DNS .............................................................................................. 299
Chapter 23
Remote Management Configuration ...................................................................................303
23.1 Remote Management Overview ..................................................................................... 303
23.1.1 Remote Management Limitations .......................................................................... 304
23.1.2 Remote Management and NAT .............................................................................. 304
23.1.3 System Timeout .................................................................................................... 304
23.2 WWW .............................................................................................................................. 304
P-2602H(W)(L)-DxA User’s Guide
19
Page 20
Table of Contents
23.3 Telnet ............................................................................................................................... 305
23.4 Configuring Telnet ............................................................................................................ 306
23.5 Configuring FTP ............................................................................................................. 306
23.6 SNMP .............................................................................................................................. 307
23.6.1 Supported MIBs ..................................................................................................... 308
23.6.2 SNMP Traps ........................................................................................................... 309
23.6.3 Configuring SNMP ................................................................................................. 309
23.7 Configuring DNS ............................................................................................................ 310
23.8 Configuring ICMP .............................................................................................................311
Chapter 24
Universal Plug-and-Play (UPnP).......................................................................................... 313
24.1 Introducing Universal Plug and Play ............................................................................... 313
24.1.1 How do I know if I'm using UPnP? ......................................................................... 313
24.1.2 NAT Traversal ........................................................................................................ 313
24.1.3 Cautions with UPnP ............................................................................................... 313
24.2 UPnP and ZyXEL ............................................................................................................314
24.2.1 Configuring UPnP .................................................................................................. 314
24.3 Installing UPnP in Windows Example .............................................................................. 315
24.4 Using UPnP in Windows XP Example ............................................................................. 318
Part IV: Maintenance and Troubleshooting ....................................... 325
Chapter 25
System ................................................................................................................................... 327
25.1 General Setup and System Name ................................................................................... 327
25.1.1 General Setup ....................................................................................................... 327
25.2 Time Setting .................................................................................................................... 329
Chapter 26
Logs ...................................................................................................................................... 331
26.1 Logs Overview ................................................................................................................ 331
26.1.1 Alerts and Logs ...................................................................................................... 331
26.2 Viewing the Logs ............................................................................................................. 331
26.3 Configuring Log Settings ................................................................................................ 332
26.4 SMTP Error Messages .................................................................................................... 334
26.4.1 Example E-mail Log ............................................................................................... 335
26.5 Log Descriptions .............................................................................................................. 336
Chapter 27
Tools.......................................................................................................................................345
20
P-2602H(W)(L)-DxA User’s Guide
Page 21
Table of Contents
27.1 Introduction ...................................................................................................................... 345
27.2 Filename Conventions ..................................................................................................... 345
27.3 File Maintenance Over WAN ........................................................................................... 346
27.4 Firmware Upgrade Screen ............................................................................................ 347
27.5 Backup and Restore .......................................................................................................348
27.5.1 Backup Configuration ............................................................................................ 349
27.5.2 Restore Configuration ........................................................................................... 349
27.5.3 Reset to Factory Defaults ...................................................................................... 350
27.6 Restart ............................................................................................................................. 351
27.7 Using FTP or TFTP to Back Up Configuration ................................................................ 351
27.7.1 Using the FTP Commands to Back Up Configuration ............................................ 351
27.7.2 FTP Command Configuration Backup Example ................................................... 352
27.7.3 Configuration Backup Using GUI-based FTP Clients ............................................ 352
27.7.4 Backup Configuration Using TFTP ......................................................................... 352
27.7.5 TFTP Command Configuration Backup Example .................................................. 353
27.7.6 Configuration Backup Using GUI-based TFTP Clients .......................................... 353
27.8 Using FTP or TFTP to Restore Configuration ............................................................... 354
27.8.1 Restore Using FTP Session Example .................................................................... 354
27.9 FTP and TFTP Firmware and Configuration File Uploads .............................................. 354
27.9.1 FTP File Upload Command from the DOS Prompt Example ................................. 355
27.9.2 FTP Session Example of Firmware File Upload .................................................... 355
27.9.3 TFTP File Upload ................................................................................................... 355
27.9.4 TFTP Upload Command Example ......................................................................... 356
Chapter 28
Diagnostic ............................................................................................................................. 357
28.1 General Diagnostic ......................................................................................................... 357
28.2 DSL Line Diagnostic ...................................................................................................... 357
Chapter 29
Troubleshooting.................................................................................................................... 361
29.1 Power, Hardware Connections, and LEDs ...................................................................... 361
29.2 ZyXEL Device Access and Login .................................................................................... 362
29.3 Internet Access ................................................................................................................ 364
29.4 Phone Calls and VoIP ......................................................................................................365
29.5 Problems With Multiple SIP Accounts ............................................................................. 366
29.5.1 Outgoing Calls ........................................................................................................ 366
29.5.2 Incoming Calls ........................................................................................................ 367
Part V: Appendices and Index ............................................................ 369
Appendix A Product Specifications.......................................................................................371
P-2602H(W)(L)-DxA User’s Guide
21
Page 22
Table of Contents
Appendix B Setting up Your Computer’s IP Address............................................................ 381
Appendix C Pop-up Windows, JavaScripts and Java Permissions ...................................... 393
Appendix D IP Addresses and Subnetting ........................................................................... 399
Appendix E Wireless LANs ..................................................................................................407
Appendix F Services ............................................................................................................ 417
Appendix G Command Interpreter .......................................................................................421
Appendix H Internal SPTGEN ..............................................................................................425
Appendix I Legal Information................................................................................................ 449
Appendix J Customer Support .............................................................................................453
Index....................................................................................................................................... 457
22
P-2602H(W)(L)-DxA User’s Guide
Page 23
List of Figures
List of Figures
Figure 1 Internet Access Application ...................................................................................................... 41
Figure 2 Internet Telephony Service Provider Application ...................................................................... 42
Figure 3 Peer-to-peer Calling ................................................................................................................. 42
Figure 4 Firewall Application .................................................................................................................. 43
Figure 5 LAN-to-LAN Application ........................................................................................................... 43
Figure 6 LEDs ......................................................................................................................................... 44
Figure 7 Password Screen ..................................................................................................................... 48
Figure 8 Change Password Screen ........................................................................................................ 48
Figure 9 Replace Certificate Screen ....................................................................................................... 49
Figure 10 Wizard or Advanced Screen .................................................................................................. 49
Figure 11 Main Screen ........................................................................................................................... 50
Figure 12 Select a Mode ........................................................................................................................ 58
Figure 13 Wizard Welcome .................................................................................................................... 58
Figure 14 Auto Detection: No DSL Connection ...................................................................................... 59
Figure 15 Auto-Detection: PPPoE .......................................................................................................... 59
Figure 16 Auto Detection: Failed ............................................................................................................ 60
Figure 17 Internet Access Wizard Setup: ISP Parameters ..................................................................... 61
Figure 18 Internet Connection with PPPoE ............................................................................................ 62
Figure 19 Internet Connection with RFC 1483 ...................................................................................... 62
Figure 20 Internet Connection with ENET ENCAP ................................................................................. 63
Figure 21 Internet Connection with PPPoA ............................................................................................ 64
Figure 22 Connection Test Failed-1 ........................................................................................................ 65
Figure 23 Connection Test Failed-2. ....................................................................................................... 65
Figure 24 Connection Test Successful ................................................................................................... 66
Figure 25 Wireless LAN Setup Wizard 1 ................................................................................................ 66
Figure 26 Wireless LAN .......................................................................................................................... 67
Figure 27 Manually Assign a WPA key ................................................................................................... 68
Figure 28 Manually Assign a WEP key .................................................................................................. 68
Figure 29 Wireless LAN Setup 3 ............................................................................................................ 69
Figure 30 Internet Access and WLAN Wizard Setup Complete ............................................................. 70
Figure 31 VoIP Phone Calls ................................................................................................................... 71
Figure 32 Select a Mode ........................................................................................................................ 72
Figure 33 Wizard: Welcome ................................................................................................................... 72
Figure 34 VoIP Wizard Configuration ..................................................................................................... 73
Figure 35 SIP Registration Test .............................................................................................................. 74
Figure 36 VoIP Wizard Fail ..................................................................................................................... 74
Figure 37 VoIP Wizard Finish ................................................................................................................ 75
Figure 38 Select a Mode ........................................................................................................................ 77
P-2602H(W)(L)-DxA User’s Guide
23
Page 24
List of Figures
Figure 39 Wizard: Welcome ................................................................................................................... 78
Figure 40 Bandwidth Management Wizard: General Information ........................................................... 78
Figure 41 Bandwidth Management Wizard: Complete ........................................................................... 79
Figure 42 Status Screen ......................................................................................................................... 83
Figure 43 Any IP Table ........................................................................................................................... 86
Figure 44 WLAN Status .......................................................................................................................... 87
Figure 45 Packet Statistics ..................................................................................................................... 88
Figure 46 VoIP Statistics ......................................................................................................................... 89
Figure 47 Example of Traffic Shaping .................................................................................................... 96
Figure 48 Internet Access Setup (PPPoE) ............................................................................................. 98
Figure 49 Advanced Internet Access Setup ......................................................................................... 100
Figure 50 WAN More Connections ....................................................................................................... 102
Figure 51 Traffic Redirect Example ...................................................................................................... 102
Figure 52 Traffic Redirect LAN Setup ................................................................................................... 103
Figure 53 LAN and WAN IP Addresses ................................................................................................ 105
Figure 54 Any IP Example .................................................................................................................... 109
Figure 55 LAN IP ...................................................................................................................................110
Figure 56 Advanced LAN Setup ............................................................................................................111
Figure 57 DHCP Setup ..........................................................................................................................112
Figure 58 LAN Client List .......................................................................................................................114
Figure 59 Physical Network & Partitioned Logical Networks .................................................................115
Figure 60 LAN IP Alias ..........................................................................................................................115
Figure 61 Example of a Wireless Network ............................................................................................117
Figure 62 Wireless LAN: General ........................................................................................................ 121
Figure 63 Wireless: No Security ........................................................................................................... 123
Figure 64 Wireless: Static WEP Encryption .......................................................................................... 123
Figure 65 Wireless: WPA(2)-PSK ......................................................................................................... 124
Figure 66 Wireless: WPA(2) ................................................................................................................. 126
Figure 67 Advanced ............................................................................................................................. 127
Figure 68 Network > Wireless LAN > OTIST ........................................................................................ 128
Figure 69 Example: Wireless Client OTIST Screen ............................................................................. 129
Figure 70 OTIST: Settings .................................................................................................................... 130
Figure 71 OTIST: In Progress on the ZyXEL Device ............................................................................ 130
Figure 72 OTIST: In Progress on the Wireless Device ......................................................................... 130
Figure 73 Start OTIST? ........................................................................................................................ 131
Figure 74 MAC Address Filter .............................................................................................................. 132
Figure 75 Wireless LAN: QoS .............................................................................................................. 133
Figure 76 Application Priority Configuration ......................................................................................... 134
Figure 77 How NAT Works ................................................................................................................... 138
Figure 78 NAT Application With IP Alias .............................................................................................. 139
Figure 79 NAT General ......................................................................................................................... 141
Figure 80 Multiple Servers Behind NAT Example ................................................................................ 142
Figure 81 Port Forwarding .................................................................................................................... 143
24
P-2602H(W)(L)-DxA User’s Guide
Page 25
List of Figures
Figure 82 Port Forwarding Rule Setup ............................................................................................... 144
Figure 83 Address Mapping Rules ....................................................................................................... 145
Figure 84 Edit Address Mapping Rule ................................................................................................ 147
Figure 85 Network > NAT > ALG .......................................................................................................... 148
Figure 86 SIP User Agent ..................................................................................................................... 151
Figure 87 SIP Proxy Server .................................................................................................................. 151
Figure 88 SIP Redirect Server .............................................................................................................. 152
Figure 89 DiffServ: Differentiated Service Field .................................................................................... 155
Figure 90 SIP > SIP Settings ................................................................................................................ 155
Figure 91 VoIP > SIP Settings > Advanced .......................................................................................... 157
Figure 92 SIP > QoS ............................................................................................................................ 160
Figure 93 Phone > Analog Phone ........................................................................................................ 161
Figure 94 Phone > Analog Phone > Advanced .................................................................................... 162
Figure 95 Phone > Common ................................................................................................................ 164
Figure 96 VoIP > Phone > Region ........................................................................................................ 168
Figure 97 Phone Book > Speed Dial .................................................................................................... 169
Figure 98 Phone Book > Incoming Call Policy ..................................................................................... 170
Figure 99 Phone Book > Distinctive Ring ............................................................................................. 172
Figure 100 PSTN Line > General ......................................................................................................... 174
Figure 101 Peer Devices Connecting ................................................................................................... 176
Figure 102 VoIP Phone To PSTN Phone .............................................................................................. 177
Figure 103 PSTN Phone To VoIP Phone .............................................................................................. 178
Figure 104 PSTN Phone To PSTN Phone via VoIP ............................................................................. 178
Figure 105 VoIP > Trunking > General ................................................................................................. 178
Figure 106 VoIP > Trunking > Peer Call .............................................................................................. 180
Figure 107 VoIP > Trunking > Call Rule ............................................................................................... 182
Figure 108 VoIP to PSTN Example ...................................................................................................... 183
Figure 109 VoIP to PSTN Example - Speed Dial Screen ..................................................................... 184
Figure 110 VoIP to PSTN Example - Outgoing Authentication ............................................................. 184
Figure 111 VoIP to PSTN Example - Incoming Authentication ............................................................. 185
Figure 112 PSTN to PSTN Example .................................................................................................... 186
Figure 113 PSTN to PSTN Example: General Configuration ............................................................... 187
Figure 114 PSTN to PSTN Example - Outgoing Authentication From Device B .................................. 187
Figure 115 PSTN to PSTN Example - Call Rule ................................................................................... 188
Figure 116 PSTN to PSTN Example - Incoming Authentication To Device C ....................................... 188
Figure 117 Firewall Application ............................................................................................................. 197
Figure 118 Three-Way Handshake ....................................................................................................... 198
Figure 119 SYN Flood .......................................................................................................................... 199
Figure 120 Smurf Attack ....................................................................................................................... 199
Figure 121 Stateful Inspection .............................................................................................................. 201
Figure 122 Firewall: General ................................................................................................................ 210
Figure 123 Firewall Rules .................................................................................................................... 212
Figure 124 Firewall: Edit Rule .............................................................................................................. 214
P-2602H(W)(L)-DxA User’s Guide
25
Page 26
List of Figures
Figure 125 Firewall: Customized Services ........................................................................................... 216
Figure 126 Firewall: Configure Customized Services ........................................................................... 217
Figure 127 Firewall Example: Rules ..................................................................................................... 218
Figure 128 Edit Custom Port Example ................................................................................................. 218
Figure 129 Firewall Example: Edit Rule: Destination Address ............................................................ 219
Figure 130 Firewall Example: Edit Rule: Select Customized Services ................................................. 220
Figure 131 Firewall Example: Rules: MyService .................................................................................221
Figure 132 Firewall: Threshold ............................................................................................................. 223
Figure 133 Content Filter: Keyword ...................................................................................................... 227
Figure 134 Content Filter: Schedule ..................................................................................................... 228
Figure 135 Content Filter: Trusted ........................................................................................................ 229
Figure 136 Encryption and Decryption ................................................................................................. 232
Figure 137 IPSec Architecture .............................................................................................................. 233
Figure 138 Transport and Tunnel Mode IPSec Encapsulation ............................................................. 234
Figure 139 IPSec Summary Fields ....................................................................................................... 239
Figure 140 VPN Setup .......................................................................................................................... 240
Figure 141 NAT Router Between IPSec Routers ................................................................................. 242
Figure 142 VPN Host using Intranet DNS Server Example .................................................................. 243
Figure 143 Edit VPN Policies .............................................................................................................. 246
Figure 144 Two Phases to Set Up the IPSec SA ................................................................................. 250
Figure 145 Advanced VPN Policies ...................................................................................................... 252
Figure 146 VPN: Manual Key ............................................................................................................... 255
Figure 147 VPN: SA Monitor ................................................................................................................ 258
Figure 148 VPN: Global Setting ........................................................................................................... 259
Figure 149 Telecommuters Sharing One VPN Rule Example .............................................................. 260
Figure 150 Telecommuters Using Unique VPN Rules Example ........................................................... 261
Figure 151 Certificate Configuration Overview ..................................................................................... 264
Figure 152 My Certificates ................................................................................................................... 265
Figure 153 My Certificate Import .......................................................................................................... 267
Figure 154 My Certificate Create .......................................................................................................... 268
Figure 155 My Certificate Details ......................................................................................................... 271
Figure 156 Trusted CAs ........................................................................................................................ 274
Figure 157 Trusted CA Import .............................................................................................................. 275
Figure 158 Trusted CA Details ............................................................................................................. 276
Figure 159 Trusted Remote Hosts ........................................................................................................ 279
Figure 160 Remote Host Certificates ................................................................................................... 280
Figure 161 Certificate Details .............................................................................................................. 280
Figure 162 Trusted Remote Host Import .............................................................................................. 281
Figure 163 Trusted Remote Host Details ............................................................................................. 282
Figure 164 Directory Servers ................................................................................................................ 285
Figure 165 Directory Server Add and Edit ............................................................................................ 286
Figure 166 Example of Static Routing Topology ................................................................................... 287
Figure 167 Static Route ........................................................................................................................ 288
26
P-2602H(W)(L)-DxA User’s Guide
Page 27
List of Figures
Figure 168 Static Route Edit ................................................................................................................. 289
Figure 169 Subnet-based Bandwidth Management Example .............................................................. 292
Figure 170 Bandwidth Management: General ...................................................................................... 293
Figure 171 Bandwidth Management: Rule Setup ................................................................................. 294
Figure 172 Bandwidth Management Rule Configuration ...................................................................... 295
Figure 173 Bandwidth Management: Monitor ......................................................................................297
Figure 174 Dynamic DNS ..................................................................................................................... 300
Figure 175 Secure and Insecure Remote Management From the WAN .............................................. 303
Figure 176 Remote Management: WWW ............................................................................................. 305
Figure 177 Telnet Configuration on a TCP/IP Network ......................................................................... 305
Figure 178 Remote Management: Telnet ............................................................................................. 306
Figure 179 Remote Management: FTP ................................................................................................ 307
Figure 180 SNMP Management Model ................................................................................................ 308
Figure 181 Remote Management: SNMP ............................................................................................ 309
Figure 182 Remote Management: DNS ................................................................................................311
Figure 183 Remote Management: ICMP .............................................................................................. 312
Figure 184 Configuring UPnP ............................................................................................................... 314
Figure 185 Add/Remove Programs: Windows Setup: Communication ................................................ 315
Figure 186 Add/Remove Programs: Windows Setup: Communication: Components .......................... 316
Figure 187 Network Connections ......................................................................................................... 316
Figure 188 Windows Optional Networking Components Wizard .......................................................... 317
Figure 189 Networking Services ........................................................................................................... 317
Figure 190 Network Connections ......................................................................................................... 318
Figure 191 Internet Connection Properties .......................................................................................... 319
Figure 192 Internet Connection Properties: Advanced Settings ........................................................... 320
Figure 193 Internet Connection Properties: Advanced Settings: Add .................................................. 320
Figure 194 System Tray Icon ................................................................................................................ 321
Figure 195 Internet Connection Status ................................................................................................. 321
Figure 196 Network Connections ......................................................................................................... 322
Figure 197 Network Connections: My Network Places ........................................................................ 323
Figure 198 Network Connections: My Network Places: Properties: Example ...................................... 323
Figure 199 System General Setup ....................................................................................................... 328
Figure 200 System Time Setting .......................................................................................................... 329
Figure 201 View Log ............................................................................................................................. 332
Figure 202 Log Settings ....................................................................................................................... 333
Figure 203 E-mail Log Example ........................................................................................................... 335
Figure 204 Firmware Upgrade .............................................................................................................. 347
Figure 205 Firmware Upload In Progress ............................................................................................. 348
Figure 206 Network Temporarily Disconnected ....................................................................................348
Figure 207 Error Message .................................................................................................................... 348
Figure 208 Configuration ...................................................................................................................... 349
Figure 209 Configuration Upload Successful ....................................................................................... 350
Figure 210 Network Temporarily Disconnected ....................................................................................350
P-2602H(W)(L)-DxA User’s Guide
27
Page 28
List of Figures
Figure 211 Configuration Upload Error ................................................................................................. 350
Figure 212 Reset Warning Message .................................................................................................... 350
Figure 213 Reset In Process Message ................................................................................................ 351
Figure 214 Restart Screen ................................................................................................................... 351
Figure 215 FTP Session Example ........................................................................................................ 352
Figure 216 Restore Using FTP Session Example ................................................................................ 354
Figure 217 FTP Session Example of Firmware File Upload ................................................................. 355
Figure 218 Diagnostic: General ............................................................................................................ 357
Figure 219 Diagnostic: DSL Line .......................................................................................................... 358
Figure 220 Outgoing Calls: Default ..................................................................................................... 366
Figure 221 Outgoing Calls: Individual Configuration ............................................................................366
Figure 222 Incoming Calls: Default ..................................................................................................... 367
Figure 223 Incoming Calls: Individual Configuration ............................................................................367
Figure 224 WIndows 95/98/Me: Network: Configuration ...................................................................... 382
Figure 225 Windows 95/98/Me: TCP/IP Properties: IP Address .......................................................... 383
Figure 226 Windows 95/98/Me: TCP/IP Properties: DNS Configuration .............................................. 384
Figure 227 Windows XP: Start Menu .................................................................................................... 385
Figure 228 Windows XP: Control Panel ............................................................................................... 385
Figure 229 Windows XP: Control Panel: Network Connections: Properties ......................................... 386
Figure 230 Windows XP: Local Area Connection Properties ............................................................... 386
Figure 231 Windows XP: Advanced TCP/IP Settings .......................................................................... 387
Figure 232 Windows XP: Internet Protocol (TCP/IP) Properties .......................................................... 388
Figure 233 Macintosh OS 8/9: Apple Menu .......................................................................................... 389
Figure 234 Macintosh OS 8/9: TCP/IP ................................................................................................. 389
Figure 235 Macintosh OS X: Apple Menu ............................................................................................ 390
Figure 236 Macintosh OS X: Network .................................................................................................. 391
Figure 237 Pop-up Blocker ................................................................................................................... 393
Figure 238 Internet Options: Privacy .................................................................................................... 394
Figure 239 Internet Options: Privacy .................................................................................................... 395
Figure 240 Pop-up Blocker Settings ..................................................................................................... 395
Figure 241 Internet Options: Security ................................................................................................... 396
Figure 242 Security Settings - Java Scripting ....................................................................................... 397
Figure 243 Security Settings - Java ...................................................................................................... 397
Figure 244 Java (Sun) .......................................................................................................................... 398
Figure 245 Network Number and Host ID ............................................................................................ 400
Figure 246 Subnetting Example: Before Subnetting ............................................................................ 402
Figure 247 Subnetting Example: After Subnetting ............................................................................... 403
Figure 248 Peer-to-Peer Communication in an Ad-hoc Network ......................................................... 407
Figure 249 Basic Service Set ............................................................................................................... 408
Figure 250 Infrastructure WLAN ........................................................................................................... 409
Figure 251 RTS/CTS ............................................................................................................................ 410
Figure 252 Displaying Log Categories Example .................................................................................. 422
Figure 253 Displaying Log Parameters Example ................................................................................. 422
28
P-2602H(W)(L)-DxA User’s Guide
Page 29
List of Figures
Figure 254 Configuration Text File Format: Column Descriptions ........................................................ 425
Figure 255 Invalid Parameter Entered: Command Line Example ........................................................ 426
Figure 256 Valid Parameter Entered: Command Line Example ........................................................... 426
Figure 257 Internal SPTGEN FTP Download Example ........................................................................ 427
Figure 258 Internal SPTGEN FTP Upload Example ............................................................................ 427
P-2602H(W)(L)-DxA User’s Guide
29
Page 30
List of Figures
30
P-2602H(W)(L)-DxA User’s Guide
Page 31
List of Tables
List of Tables
Table 1 Models Covered ........................................................................................................................ 39
Table 2 LEDs ......................................................................................................................................... 44
Table 3 Web Configurator Icons in the Title Bar .................................................................................... 50
Table 4 Navigation Panel Summary ...................................................................................................... 51
Table 5 Internet Access Wizard Setup: ISP Parameters ....................................................................... 61
Table 6 Internet Connection with PPPoE .............................................................................................. 62
Table 7 Internet Connection with RFC 1483 .......................................................................................... 63
Table 8 Internet Connection with ENET ENCAP ...................................................................................63
Table 9 Internet Connection with PPPoA ............................................................................................... 64
Table 10 Wireless LAN Setup Wizard 1 ................................................................................................. 66
Table 11 Wireless LAN Setup Wizard 2 ................................................................................................. 67
Table 12 Manually Assign a WPA key ................................................................................................... 68
Table 13 Manually Assign a WEP key ................................................................................................... 69
Table 14 Sample SIP Account Information ............................................................................................ 72
Table 15 VoIP Wizard Configuration ...................................................................................................... 73
Table 16 Bandwidth Management Wizard: General Information ........................................................... 78
Table 17 Status Screen .......................................................................................................................... 84
Table 18 Any IP Table ............................................................................................................................ 87
Table 19 WLAN Status ........................................................................................................................... 87
Table 20 Packet Statistics ...................................................................................................................... 88
Table 21 VoIP Statistics ......................................................................................................................... 89
Table 22 Internet Access Setup ............................................................................................................. 98
Table 23 Advanced Internet Access Setup .......................................................................................... 100
Table 24 Advanced Internet Access Setup .......................................................................................... 102
Table 25 WAN Backup Setup .............................................................................................................. 104
Table 26 LAN IP ....................................................................................................................................110
Table 27 Advanced LAN Setup .............................................................................................................111
Table 28 DHCP Setup ..........................................................................................................................112
Table 29 LAN Client List .......................................................................................................................114
Table 30 LAN IP Alias ...........................................................................................................................116
Table 31 Types of Encryption for Each Type of Authentication ............................................................119
Table 32 Additional Wireless Terms ..................................................................................................... 120
Table 33 Wireless LAN: General ......................................................................................................... 122
Table 34 Wireless No Security ............................................................................................................. 123
Table 35 Wireless: Static WEP Encryption .......................................................................................... 124
Table 36 Wireless: WPA(2)-PSK ......................................................................................................... 124
Table 37 Wireless: WPA(2) .................................................................................................................. 126
Table 38 Wireless LAN: Advanced ...................................................................................................... 127
P-2602H(W)(L)-DxA User’s Guide
31
Page 32
List of Tables
Table 39 Network > Wireless LAN > OTIST ........................................................................................ 129
Table 40 MAC Address Filter ............................................................................................................... 132
Table 41 Wireless LAN: QoS ............................................................................................................... 133
Table 42 Application Priority Configuration .......................................................................................... 134
Table 43 NAT Definitions ..................................................................................................................... 137
Table 44 NAT Mapping Types .............................................................................................................. 140
Table 45 NAT General ......................................................................................................................... 141
Table 46 Port Forwarding .................................................................................................................... 143
Table 47 Port Forwarding Rule Setup .................................................................................................. 144
Table 48 Address Mapping Rules ........................................................................................................ 145
Table 49 Edit Address Mapping Rule .................................................................................................. 147
Table 50 Network > NAT > ALG .......................................................................................................... 148
Table 51 SIP Call Progression ............................................................................................................. 150
Table 52 Custom Tones Details ........................................................................................................... 153
Table 53 SIP > SIP Settings ................................................................................................................ 156
Table 54 VoIP > SIP Settings > Advanced .......................................................................................... 157
Table 55 SIP > QoS ............................................................................................................................. 160
Table 56 Phone > Analog Phone ......................................................................................................... 161
Table 57 Phone > Analog Phone > Advanced ..................................................................................... 163
Table 58 Phone > Common ................................................................................................................. 164
Table 59 European Flash Key Commands ..........................................................................................165
Table 60 USA Flash Key Commands .................................................................................................. 167
Table 61 VoIP > Phone > Region ........................................................................................................ 168
Table 62 Phone Book > Speed Dial ..................................................................................................... 169
Table 63 Phone Book > Incoming Call Policy ...................................................................................... 171
Table 64 Phone Book > Distinctive Ring .............................................................................................. 172
Table 65 PSTN Line > General ............................................................................................................ 174
Table 66 Matching Incoming and Outgoing Authentication ................................................................. 176
Table 67 Call Rules .............................................................................................................................. 177
Table 68 VoIP > Trunking > General .................................................................................................... 179
Table 69 VoIP > Trunking > Peer Call .................................................................................................. 180
Table 70 VoIP > Trunking > Call Rule .................................................................................................. 182
Table 71 VoIP Trunking Call Progression ............................................................................................ 185
Table 72 PSTN to PSTN: VoIP Trunking Call Progression .................................................................. 189
Table 73 Phone Functions Summary ................................................................................................... 192
Table 74 Common IP Ports .................................................................................................................. 197
Table 75 ICMP Commands That Trigger Alerts ................................................................................... 200
Table 76 Legal NetBIOS Commands ................................................................................................... 200
Table 77 Legal SMTP Commands ...................................................................................................... 200
Table 78 Firewall: General ....................................................................................................................211
Table 79 Firewall Rules ....................................................................................................................... 212
Table 80 Firewall: Edit Rule ................................................................................................................. 214
Table 81 Customized Services ............................................................................................................ 216
32
P-2602H(W)(L)-DxA User’s Guide
Page 33
List of Tables
Table 82 Firewall: Configure Customized Services ............................................................................. 217
Table 83 Firewall: Threshold ................................................................................................................ 223
Table 84 Sys Firewall Commands ....................................................................................................... 224
Table 85 Content Filter: Keyword ........................................................................................................ 228
Table 86 Content Filter: Schedule ....................................................................................................... 229
Table 87 Content Filter: Trusted .......................................................................................................... 229
Table 88 VPN and NAT ........................................................................................................................ 235
Table 89 AH and ESP .......................................................................................................................... 238
Table 90 VPN Setup ............................................................................................................................ 240
Table 91 VPN and NAT ........................................................................................................................ 242
Table 92 Local ID Type and Content Fields ......................................................................................... 244
Table 93 Peer ID Type and Content Fields .......................................................................................... 244
Table 94 Matching ID Type and Content Configuration Example ........................................................ 244
Table 95 Mismatching ID Type and Content Configuration Example .................................................. 245
Table 96 Edit VPN Policies .................................................................................................................. 246
Table 97 Advanced VPN Policies ........................................................................................................ 252
Table 98 VPN: Manual Key .................................................................................................................. 255
Table 99 VPN: SA Monitor ................................................................................................................... 258
Table 100 VPN: Global Setting ............................................................................................................ 259
Table 101 Telecommuters Sharing One VPN Rule Example ............................................................... 260
Table 102 Telecommuters Using Unique VPN Rules Example ........................................................... 261
Table 103 My Certificates .................................................................................................................... 265
Table 104 My Certificate Import ........................................................................................................... 267
Table 105 My Certificate Create .......................................................................................................... 268
Table 106 My Certificate Details .......................................................................................................... 272
Table 107 Trusted CAs ........................................................................................................................ 274
Table 108 Trusted CA Import ............................................................................................................... 275
Table 109 Trusted CA Details .............................................................................................................. 277
Table 110 Trusted Remote Hosts ........................................................................................................ 279
Table 111 Trusted Remote Host Import ............................................................................................... 281
Table 112 Trusted Remote Host Details .............................................................................................. 283
Table 113 Directory Servers ................................................................................................................ 285
Table 114 Directory Server Add and Edit ............................................................................................. 286
Table 115 Static Route ......................................................................................................................... 288
Table 116 Static Route Edit .................................................................................................................. 289
Table 117 Typical Packet Sizes ........................................................................................................... 292
Table 118 Automatic Traffic Classifier Priorities ................................................................................... 292
Table 119 Application and Subnet-based Bandwidth Management Example ...................................... 293
Table 120 Bandwidth Management Priorities ...................................................................................... 293
Table 121 Bandwidth Management: General ...................................................................................... 294
Table 122 Bandwidth Management: Rule Setup ................................................................................. 294
Table 123 Bandwidth Management Rule Configuration ...................................................................... 296
Table 124 Dynamic DNS ..................................................................................................................... 300
P-2602H(W)(L)-DxA User’s Guide
33
Page 34
List of Tables
Table 125 Remote Management: WWW ............................................................................................. 305
Table 126 Remote Management: Telnet .............................................................................................. 306
Table 127 Remote Management: FTP ................................................................................................. 307
Table 128 SNMP Traps ........................................................................................................................ 309
Table 129 Remote Management: SNMP .............................................................................................310
Table 130 Remote Management: DNS .................................................................................................311
Table 131 Remote Management: ICMP .............................................................................................. 312
Table 132 Configuring UPnP ............................................................................................................... 314
Table 133 System General Setup ........................................................................................................ 328
Table 134 System Time Setting ........................................................................................................... 329
Table 135 View Log ............................................................................................................................. 332
Table 136 Log Settings ........................................................................................................................ 333
Table 137 SMTP Error Messages ........................................................................................................ 335
Table 138 System Maintenance Logs .................................................................................................. 336
Table 139 System Error Logs .............................................................................................................. 337
Table 140 Access Control Logs ........................................................................................................... 337
Table 141 TCP Reset Logs .................................................................................................................. 337
Table 142 Packet Filter Logs ............................................................................................................... 338
Table 143 ICMP Logs .......................................................................................................................... 338
Table 144 CDR Logs ........................................................................................................................... 338
Table 145 PPP Logs ............................................................................................................................ 339
Table 146 UPnP Logs .......................................................................................................................... 339
Table 147 Content Filtering Logs ......................................................................................................... 339
Table 148 Attack Logs ......................................................................................................................... 339
Table 149 802.1X Logs ........................................................................................................................ 340
Table 150 ACL Setting Notes .............................................................................................................. 341
Table 151 ICMP Notes ......................................................................................................................... 341
Table 152 Syslog Logs ........................................................................................................................ 342
Table 153 SIP Logs ............................................................................................................................. 342
Table 154 RTP Logs ............................................................................................................................ 343
Table 155 FSM Logs: Caller Side ........................................................................................................ 343
Table 156 FSM Logs: Callee Side ....................................................................................................... 343
Table 157 PSTN Logs .......................................................................................................................... 343
Table 158 RFC-2408 ISAKMP Payload Types .................................................................................... 344
Table 159 Filename Conventions ........................................................................................................ 346
Table 160 Firmware Upgrade .............................................................................................................. 347
Table 161 Restore Configuration ......................................................................................................... 349
Table 162 General Commands for GUI-based FTP Clients ................................................................ 352
Table 163 General Commands for GUI-based TFTP Clients .............................................................. 353
Table 164 Diagnostic: General ............................................................................................................ 357
Table 165 Diagnostic: DSL Line .......................................................................................................... 358
Table 166 Hardware Specifications ..................................................................................................... 371
Table 167 Firmware Specifications ...................................................................................................... 371
34
P-2602H(W)(L)-DxA User’s Guide
Page 35
List of Tables
Table 168 Voice Features .................................................................................................................... 376
Table 169 Wireless Features ............................................................................................................... 378
Table 170 IEEE 802.11g ...................................................................................................................... 379
Table 171 P-2602HWL Series Power Adaptor Specifications ............................................................. 380
Table 172 Subnet Masks ..................................................................................................................... 400
Table 173 Subnet Masks ..................................................................................................................... 401
Table 174 Maximum Host Numbers .................................................................................................... 401
Table 175 Alternative Subnet Mask Notation ....................................................................................... 401
Table 176 Subnet 1 .............................................................................................................................. 403
Table 177 Subnet 2 .............................................................................................................................. 404
Table 178 Subnet 3 .............................................................................................................................. 404
Table 179 Subnet 4 .............................................................................................................................. 404
Table 180 Eight Subnets ...................................................................................................................... 404
Table 181 24-bit Network Number Subnet Planning ............................................................................ 405
Table 182 16-bit Network Number Subnet Planning ............................................................................ 405
Table 183 IEEE 802.11g .......................................................................................................................411
Table 184 Comparison of EAP Authentication Types .......................................................................... 414
Table 185 Wireless Security Relational Matrix .................................................................................... 415
Table 186 Examples of Services ......................................................................................................... 417
Table 187 Abbreviations Used in the Example Internal SPTGEN Screens Table ............................... 427
Table 188 Menu 1 General Setup ........................................................................................................ 428
Table 189 Menu 3 ................................................................................................................................ 428
Table 190 Menu 4 Internet Access Setup ............................................................................................ 431
Table 191 Menu 12 .............................................................................................................................. 433
Table 192 Menu 15 SUA Server Setup ................................................................................................ 437
Table 193 Menu 21.1 Filter Set #1 ....................................................................................................... 439
Table 194 Menu 21.1 Filer Set #2, ....................................................................................................... 442
Table 195 Menu 23 System Menus ..................................................................................................... 446
Table 196 Menu 24.11 Remote Management Control ......................................................................... 448
Table 197 Command Examples ........................................................................................................... 448
P-2602H(W)(L)-DxA User’s Guide
35
Page 36
List of Tables
36
P-2602H(W)(L)-DxA User’s Guide
Page 37
PART I
Introduction
Introducing the ZyXEL Device (39)
Introducing the Web Configurator (47)
37
Page 38
38
Page 39
CHAPTER 1
Introducing the ZyXEL Device
This chapter introduces the main applications and features of the ZyXEL Device. It also
introduces the ways you can manage the ZyXEL Device.
1.1 Overview
The P-2602H(W)(L)-DxA series are Integrated Access Devices (IADs) that combine an
ADSL2+ router with Voice over IP (VoIP) communication capabilities to allow you to use a
traditional analog or ISDN telephone to make Internet calls. By integrating DSL and NAT,
you are provided with ease of installation and high-speed, shared Internet access. The P2602H(W)(L)-DxA is also a complete security solution with a robust firewall and content
filtering.
At the time of writing, this guide covers the following models.
Table 1 Models Covered
P-2602HWL-D1A P-2602HWL-D3A
P-2602HW-D1A P-2602HW-D3A
P-2602H-D1A P-2602H-D3A
Not all models include all features. Please refer to the following description of the product
name format.
• “H” denotes an integrated 4-port hub (switch). The “H” models also include Virtual
Private Network (VPN) capability.
• “W” denotes wireless functionality. There is an embedded mini-PCI module for IEEE
802.11g wireless LAN connectivity. All wireless features documented in this user’s guide
refer to the “W” models only.
• “L” denotes the PSTN (Public Switched Telephone Network) line feature. The PSTN line
lets you have VoIP phone service and PSTN phone service at the same time. All PSTN
line features documented in this user’s guide refer to the “L” models only.
1 When the ZyXEL Device does not have power, only the phone connected to
the PHONE 1 port can be used for making calls. Ensure you know which
phone this is, so that in case of emergency you can make outgoing calls.
P-2602H(W)(L)-DxA User’s Guide
39
Page 40
Chapter 1 Introducing the ZyXEL Device
• Model names with “3” as the penultimate character (like the P-2602HWL-D3A) denote a
device that works over ISDN (Integrated Services Digital Network). Models with “1” as
the penultimate character (like the P-2602HWL-D1A) denote a device that works over TISDN (U-R2).
1 Only use firmware for your ZyXEL Device’s specific model. Refer to the label
on the bottom of your ZyXEL Device.
" All screens displayed in this user’s guide are from the P-2602HWL-D1A
model.
See the appendix on Product Specifications for a full list of features.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
• Web Configurator. This is recommended for everyday management of the ZyXEL Device
using a (supported) web browser.
• Command Line Interface. Line commands are mostly used for troubleshooting by service
engineers.
• FTP for firmware upgrades and configuration backup/restore.
• SNMP. The device can be monitored by an SNMP manager. See the SNMP chapter in this
User’s Guide.
• SPTGEN. SPTGEN is a text configuration file that allows you to configure the device by
uploading an SPTGEN file. This is especially convenient if you need to configure many
devices of the same type.
• Vantage CNM (Centralized Network Management). The device can be remotely managed
using a Vantage CNM server.
• TR-069. This is an auto-configuration server used to remotely configure your device.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to manage the
ZyXEL Device more effectively.
40
• Change the password. Use a password that’s not easy to guess and that consists of
different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
P-2602H(W)(L)-DxA User’s Guide
Page 41
• Back up the configuration (and make sure you know how to restore it). Restoring an
earlier working configuration may be useful if the device becomes unstable or even
crashes. If you forget your password, you will have to reset the ZyXEL Device to its
factory default settings. If you backed up an earlier configuration file, you would not have
to totally re-configure the ZyXEL Device. You could simply restore your last
configuration.
1.4 Applications for the ZyXEL Device
Here are some example uses for which the ZyXEL Device is well suited.
1.4.1 Internet Access
Your device is the ideal high-speed Internet access solution. It supports the TCP/IP protocol,
which the Internet uses exclusively. It is compatible with all major ADSL DSLAM (Digital
Subscriber Line Access Multiplexer) providers. A DSLAM is a rack of ADSL line cards with
data multiplexed into a backbone network interface/connection (for example, T1, OC3, DS3,
ATM or Frame Relay). Think of it as the equivalent of a modem rack for ADSL. In addition,
your device allows wireless clients access to your network resources and the Internet. A
typical Internet access application is shown below.
Chapter 1 Introducing the ZyXEL Device
Figure 1 Internet Access Application
1.4.1.1 Internet Single User Account
For a SOHO (Small Office/Home Office) environment, your device offers the Single User
Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to access
the Internet concurrently for the cost of a single IP address
1.4.2 Making Calls via Internet Telephony Service Provider
In a home or small office environment, you can use your device to make and receive VoIP
telephone calls through an Internet Telephony Service Provider (ITSP).
The following figure shows a basic example of how you would make a VoIP call through an
ITSP. You use your analog phone (A in the figure) and your device (B) changes the call into
VoIP. Your device then sends your call to the Internet and the ITSP’s SIP server (C). The
VoIP call server forwards calls to PSTN phones (E) through a trunking gateway (D) to the
PSTN network. The VoIP call server forwards calls to IP phones (F) through the Internet.
P-2602H(W)(L)-DxA User’s Guide
41
Page 42
Chapter 1 Introducing the ZyXEL Device
Figure 2 Internet Telephony Service Provider Application
1.4.3 Make Peer-to-peer Calls
You can call directly to someone’s IP address without using a SIP proxy server. Peer-to-peer
calls are also called “Point to Point” or “IP-to-IP” calls. You must know the peer’s IP address
in order to do this.
The following figure shows a basic example of how you would make a peer-to-peer VoIP call.
You use your analog phone (A in the figure) and your device (B) changes the call into VoIP.
and sends the call through the Internet to the peer VoIP device (C).
Figure 3 Peer-to-peer Calling
1.4.4 Firewall for Secure Broadband Internet Access
Your device provides protection from attacks by Internet hackers. By default, the firewall
blocks all incoming traffic from the WAN. The firewall supports TCP/UDP inspection and
DoS (Denial of Services) detection and prevention, as well as real time alerts, reports and logs.
42
P-2602H(W)(L)-DxA User’s Guide
Page 43
Figure 4 Firewall Application
1.4.5 LAN to LAN Application
You can use your device to connect two geographically dispersed networks over the ADSL
line. A typical LAN-to-LAN application is shown as follows.
Chapter 1 Introducing the ZyXEL Device
Figure 5 LAN-to-LAN Application
P-2602H(W)(L)-DxA User’s Guide
43
Page 44
Chapter 1 Introducing the ZyXEL Device
1.5 LEDs
Figure 6 LEDs
44
The following table describes your device’s LEDs.
Table 2 LEDs
LED COLOR STATUS DESCRIPTION
POWER Green On Your device is receiving power and functioning properly.
Blinking Your device is rebooting and performing a self-test.
Red On Your device is not ready or there is a malfunction.
None Off Your device is not turned on.
ETHERNET
1-4
WLAN Green On Your device is ready, but is not sending/receiving data
Green On Your device has a successful Ethernet connection.
Blinking The ZyXEL Device is sending/receiving data.
None Off The Ethernet port is not connected.
through the wireless LAN.
Blinking Your device is sending/receiving data through the wireless
LAN.
None Off The wireless LAN is not ready or has failed.
P-2602H(W)(L)-DxA User’s Guide
Page 45
Chapter 1 Introducing the ZyXEL Device
Table 2 LEDs (continued)
LED COLOR STATUS DESCRIPTION
DSL Green On Your device has a DSL connection.
Blinking Your device is initializing the DSL line.
None Off The DSL link is down.
INTERNET Green On Your device has an IP connection but no traffic.
Your device has a WAN IP address (either static or assigned
by a DHCP server), PPP negotiation was successfully
completed (if used) and the DSL connection is up.
Blinking Your device is sending or receiving IP traffic.
Red On Your device attempted to make an IP connection but failed.
Possible causes are no response from a DHCP server, no
PPPoE response, PPPoE authentication failed).
None Off Your device does not have an IP connection
PHONE 1, 2 Green On A SIP account is registered for the phone port.
Blinking A telephone connected to the phone port has its receiver off
of the hook or there is an incoming call.
Orange On A SIP account is registered for the phone port and there is a
Blinking A telephone connected to the phone port has its receiver off
None Off The phone port does not have a SIP account registered.
voice message in the corresponding SIP account.
of the hook and there is a voice message in the
corresponding SIP account.
Refer to the Quick Start Guide for information on hardware connections.
1.6 The RESET Button
You can use the RESET button at the back of the device to turn the wireless LAN off or on.
You can also use it to activate OTIST in order to assign your wireless security settings to
wireless clients. If you forget your password or cannot access the web configurator, you will
need to use the RESET button to reload the factory-default configuration file. This means that
you will lose all configurations that you had previously and the password will be reset to
“1234”. You can also use the
1.6.1 Using The Reset Button
1 Make sure the POWER LED is on (not blinking).
2 Do one of the following.
To turn the wireless LAN off or on, press the RESET button for one second and release
it. The WLAN LED should change from on to off or vice versa. (“W” models only)
To activate OTIST in order to assign your wireless security settings to wireless clients,
press the RESET button for five seconds and release it. The WLAN LED should flash
while the device uses OTIST to send wireless settings to OTIST clients.(“W” models
only)
P-2602H(W)(L)-DxA User’s Guide
45
Page 46
Chapter 1 Introducing the ZyXEL Device
To set the device back to the factory default settings, press the RESET button for ten
seconds or until the POWER LED begins to blink and then release it. When the
POWER LED begins to blink, the defaults have been restored and the device restarts.
46
P-2602H(W)(L)-DxA User’s Guide
Page 47
CHAPTER 2
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
2.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy device setup
and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape
Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See Appendix C on page 393 if you need to make sure these functions are allowed in Internet
Explorer.
2.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Launch your web browser.
3 Type "192.168.1.1" as the URL.
4 A password screen displays. The default password (“1234”) displays in non-readable
characters. If you haven’t changed the password yet, you can just click Login. Click
Cancel to revert to the default password in the password field. If you have changed the
password, enter your password and click Login.
P-2602H(W)(L)-DxA User’s Guide
47
Page 48
Chapter 2 Introducing the Web Configurator
Figure 7 Password Screen
5 The following screen displays if you have not yet changed your password. It is strongly
recommended you change the default password. Enter a new password, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the main menu if you
do not want to change the password now.
Figure 8 Change Password Screen
48
6 Click Apply in the Replace Certificate screen to create a certificate using your ZyXEL
Device’s MAC address that will be specific to this device.
P-2602H(W)(L)-DxA User’s Guide
Page 49
Chapter 2 Introducing the Web Configurator
Figure 9 Replace Certificate Screen
7 A screen displays to let you choose whether to go to the wizard or the advanced screens.
• Click Go to Wizard setup if you are logging in for the first time or if you want to make
basic changes. The wizard selection screen appears after you click Apply. See Chapter 3
on page 57 for more information.
• Click Go to Advanced setup if you want to configure features that are not available in the
wizards. Select the check box if you always want to go directly to the advanced screens.
The main screen appears after you click Apply. See Section 2.2 on page 50 for more
information.
• Click Exit if you want to log out.
" For security reasons, the ZyXEL Device automatically logs you out if you do
not use the web configurator for five minutes (default). If this happens, log in
again.
Figure 10 Wizard or Advanced Screen
P-2602H(W)(L)-DxA User’s Guide
49
Page 50
Chapter 2 Introducing the Web Configurator
2.2 Web Configurator Main Screen
Figure 11 Main Screen
B
C
A
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - navigation panel
• C - main window
• D - status bar
2.2.1 Title Bar
The title bar allows you to change the language and provides some icons in the upper right
corner.
The icons provide the following functions.
Table 3 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
D
Help: Click this icon to open up help screens.
Wizards: Click this icon to go to the configuration wizards. See Chapter 3 on page
57 for more information.
Logout: Click this icon to log out of the web configurator.
50
P-2602H(W)(L)-DxA User’s Guide
Page 51
Chapter 2 Introducing the Web Configurator
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL Device
features. The following tables describe each menu item.
Table 4 Navigation Panel Summary
LINK TAB FUNCTION
Status This screen contains administrative and system-related information.
Network
WAN Internet Access
Setup
More
Connections
WAN Backup
Setup
LAN IP Use this screen to configure LAN TCP/IP settings, enable Any IP and other
DHCP Setup Use this screen to configure LAN DHCP settings.
Client List Use this screen to view current DHCP client information and to always
IP Alias Use this screen to partition your LAN interface into subnets.
Wireless LAN
(“W” models
only)
NAT General Use this screen to enable NAT.
VoIP
SIP SIP Settings Use this screen to configure your ZyXEL Device’s Voice over IP settings.
Phone Analog Phone Use this screen to set which phone ports use which SIP accounts.
General Use this screen to configure the wireless LAN settings and WLAN
OTIST Use this screen to assign your wireless security settings to wireless clients.
MAC Filter Use this screen to configure the ZyXEL Device to give exclusive access to
QoS WMM QoS allows you to prioritize wireless traffic according to the delivery
Port Forwarding Use this screen to make your local servers visible to the outside world.
Address
Mapping
ALG Use this screen to enable or disable SIP ALG.
QoS Use this screen to configure your ZyXEL Device’s Quality of Service
Common Use this screen to configure general phone port settings.
Region Use this screen to select your location and call service mode.
Use this screen to configure ISP parameters, WAN IP address assignment,
DNS servers and other advanced properties.
Use this screen to configure additional WAN connections.
Use this screen to configure a backup gateway.
advanced properties.
assign specific IP addresses to individual MAC addresses (and host
names).
authentication/security settings.
specific wireless clients or exclude specific wireless clients from accessing
the ZyXEL Device.
requirements of individual services.
Use this screen to configure network address translation mapping rules.
settings for VoIP.
P-2602H(W)(L)-DxA User’s Guide
51
Page 52
Chapter 2 Introducing the Web Configurator
Table 4 Navigation Panel Summary
LINK TAB FUNCTION
Phone Book Speed Dial Use this screen to configure speed dial for SIP phone numbers that you call
often.
Incoming Call
Policy
Distinctive Ring Use this screen to configure ring tone behavior based on the origin of
PSTN Line
(“L” models
only)
Trunking General Use this screen to enable trunking on your ZyXEL Device.
Security
Firewall General Use this screen to activate/deactivate the firewall and the default action to
Content Filter Keyword Use this screen to block access to web sites containing certain keywords in
VPN Setup Use this screen to configure each VPN tunnel.
Certificates My Certificates Use this screen to generate and export self-signed certificates or
Advanced
Static Route IP Static Route Use this screen to configure IP static routes to tell your device about
Bandwidth
MGMT
General Use this screen to configure your ZyXEL Device’s settings for PSTN calls.
Peer Call Use this screen to configure peer device authentication for trunking calls.
Call Rule Use this screen to configure forwarding rules on your ZyXEL Device for
Rules This screen shows a summary of the firewall rules, and allows you to edit/
Threshold Use this screen to configure the thresholds for determining when to drop
Schedule Use this screen to set the days and times for your device to perform content
Trusted Use this screen to exclude a range of users on the LAN from content
Monitor Use this screen to look at the current status of each VPN tunnel.
VPN Global
Setting
Trusted CAs Use this screen to save CA certificates to the ZyXEL Device.
Trusted Remote
Hosts
Directory
Servers
General Use this screen to configure bandwidth management on an interface.
Rule Setup Use this screen to define a bandwidth rule.
Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and
Use this screen to configure call-forwarding.
incoming calls.
trunking calls.
take on network traffic going in specific directions.
add a firewall rule.
sessions that do not become fully established.
the URL.
filtering.
filtering.
Use this screen to allow NetBIOS traffic through VPN tunnels.
certification requests and import the ZyXEL Device’s CA-signed
certificates.
Use this screen to import self-signed certificates.
Use this screen to configure a list of addresses of directory servers (that
contain lists of valid and revoked certificates).
networks beyond the directly connected remote nodes.
allotments.
52
P-2602H(W)(L)-DxA User’s Guide
Page 53
Chapter 2 Introducing the Web Configurator
Table 4 Navigation Panel Summary
LINK TAB FUNCTION
Dynamic DNS This screen allows you to use a static hostname alias for a dynamic IP
address.
Remote MGMT WWW Use this screen to configure through which interface(s) and from which IP
address(es) users can use HTTP to manage the ZyXEL Device.
Telnet Use this screen to configure through which interface(s) and from which IP
address(es) users can use Telnet to manage the ZyXEL Device.
FTP Use this screen to configure through which interface(s) and from which IP
address(es) users can use FTP to access the ZyXEL Device.
SNMP Use this screen to configure your ZyXEL Device’s settings for Simple
DNS Use this screen to configure through which interface(s) and from which IP
ICMP Use this screen to set whether or not your device will respond to pings and
UPnP General Use this screen to turn UPnP on or off.
Maintenance
System General Use this screen to configure your device’s name, domain name,
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Logs View Log Use this screen to display your device’s logs.
Log Settings Use this screen to select which logs and/or immediate alerts your device is
Tools Firmware Use this screen to upload firmware to your device.
Configuration Use this screen to backup and restore your device’s configuration (settings)
Restart This screen allows you to reboot the ZyXEL Device without turning the
Diagnostic General Use this screen to test the connections to other devices.
DSL Line These screen displays information to help you identify problems with the
Network Management Protocol management.
address(es) users can send DNS queries to the ZyXEL Device.
probes for services that you have not made available.
management inactivity timeout and password.
to record. You can also set it to e-mail the logs to you.
or reset the factory default settings.
power off.
DSL connection.
2.2.3 Main Window
The main window displays information and configuration fields. It is discussed in the rest of
this document.
Right after you log in, the Status screen is displayed. See Chapter 6 on page 83 for more
information about the Status screen.
2.2.4 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration has been
updated.
P-2602H(W)(L)-DxA User’s Guide
53
Page 54
Chapter 2 Introducing the Web Configurator
54
P-2602H(W)(L)-DxA User’s Guide
Page 55
PART II
Wizard
Internet and Wireless Setup Wizard (57)
VoIP Wizard And Example (71)
Bandwidth Management Wizard (77)
55
Page 56
56
Page 57
CHAPTER 3
Internet and Wireless Setup
Wizard
This chapter provides information on the Wizard Setup screens for Internet access in the web
configurator.
3.1 Introduction
Use the wizard setup screens to configure your system for Internet access with the information
given to you by your ISP.
" See the advanced menu chapters for background information on these fields.
3.2 Internet Access Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the
web configurator to go to the wizards.
P-2602H(W)(L)-DxA User’s Guide
57
Page 58
Chapter 3 Internet and Wireless Setup Wizard
Figure 12 Select a Mode
2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and
wireless connection.
Figure 13 Wizard Welcome
3 Your ZyXEL device attempts to detect your DSL connection and your connection type.
3a The following screen appears if a connection is not detected. Check your hardware
connections and click Restart the Internet/Wireless Setup Wizard to return to the
wizard welcome screen. If you still cannot connect, click Manually configure your
Internet connection. Follow the directions in the wizard and enter your Internet
setup information as provided to you by your ISP. See Section 3.2.1 on page 60 for
more details.
If you would like to skip your Internet setup and configure the wireless LAN
settings, leave Ye s selected and click Next.
58
P-2602H(W)(L)-DxA User’s Guide
Page 59
Chapter 3 Internet and Wireless Setup Wizard
Figure 14 Auto Detection: No DSL Connection
3b The following screen displays if a PPPoE or PPPoA connection is detected. Enter
your Internet account information (username, password and/or service name)
exactly as provided by your ISP. Then click Next and see Section 3.3 on page 65 for
wireless connection wizard setup.
Figure 15 Auto-Detection: PPPoE
3c The following screen appears if the ZyXEL device detects a connection but not the
connection type. Click Next and refer to Section 3.2.1 on page 60 on how to
manually configure the ZyXEL Device for Internet access.
P-2602H(W)(L)-DxA User’s Guide
59
Page 60
Chapter 3 Internet and Wireless Setup Wizard
Figure 16 Auto Detection: Failed
3.2.1 Manual Configuration
1 If the ZyXEL Device fails to detect your DSL connection type but the physical line is
connected, enter your Internet access information in the wizard screen exactly as your
service provider gave it to you. Leave the defaults in any fields for which you were not
given information.
60
P-2602H(W)(L)-DxA User’s Guide
Page 61
Chapter 3 Internet and Wireless Setup Wizard
Figure 17 Internet Access Wizard Setup: ISP Parameters
The following table describes the fields in this screen.
Table 5 Internet Access Wizard Setup: ISP Parameters
LABEL DESCRIPTION
Mode From the Mode drop-down list box, select Routing (default) if your ISP allows
multiple computers to share an Internet account. Otherwise select Bridge.
Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list
box. Choices vary depending on what you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list
box either VC-based or LLC-based.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
Refer to the appendix for more information.
VPI Enter the VPI assigned to you. This field may already be configured.
VCI Enter the VCI assigned to you. This field may already be configured.
Back Click Back to go back to the previous screen.
Next Click Next to continue to the next wizard screen. The next wizard screen you see
depends on what protocol you chose above.
Exit Click Exit to close the wizard screen without saving your changes.
2 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to
continue. See Section 3.3 on page 65 for wireless connection wizard setup
P-2602H(W)(L)-DxA User’s Guide
61
Page 62
Chapter 3 Internet and Wireless Setup Wizard
Figure 18 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 6 Internet Connection with PPPoE
LABEL DESCRIPTION
User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form
user@domain where domain identifies a service name, then enter both components
exactly as given.
Password Enter the password associated with the user name above.
Service Name Type the name of your PPPoE service here.
Back Click Back to go back to the previous wizard screen.
Apply Click Apply to save your changes back to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
62
Figure 19 Internet Connection with RFC 1483
P-2602H(W)(L)-DxA User’s Guide
Page 63
Chapter 3 Internet and Wireless Setup Wizard
The following table describes the fields in this screen.
Table 7 Internet Connection with RFC 1483
LABEL DESCRIPTION
IP Address This field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
Back Click Back to go back to the previous wizard screen.
Next Click Next to continue to the next wizard screen.
Exit Click Exit to close the wizard screen without saving your changes.
Figure 20 Internet Connection with ENET ENCAP
The following table describes the fields in this screen.
Table 8 Internet Connection with ENET ENCAP
LABEL DESCRIPTION
Obtain an IP
Address
Automatically
Static IP
Address
IP Address Enter your ISP assigned IP address.
Subnet Mask Enter a subnet mask in dotted decimal notation.
Gateway IP
address
First DNS
Server
Second DNS
Server
Back Click Back to go back to the previous wizard screen.
P-2602H(W)(L)-DxA User’s Guide
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address.
Select Static IP Address if your ISP gave you an IP address to use.
Refer to the appendix to calculate a subnet mask If you are implementing subnetting.
You must specify a gateway IP address (supplied by your ISP) when you use ENET
ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP
clients along with the IP address and the subnet mask.
As above.
63
Page 64
Chapter 3 Internet and Wireless Setup Wizard
Table 8 Internet Connection with ENET ENCAP (continued)
LABEL DESCRIPTION
Apply Click Apply to save your changes back to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
Figure 21 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 9 Internet Connection with PPPoA
LABEL DESCRIPTION
User Name Enter the login name that your ISP gives you.
Password Enter the password associated with the user name above.
Back Click Back to go back to the previous wizard screen.
Apply Click Apply to save your changes back to the ZyXEL Device.
Exit Click Exit to close the wizard screen without saving your changes.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not
correct, the screen displays as shown next. Click Back to Username and Password setup
to go back to the screen where you can modify them.
64
P-2602H(W)(L)-DxA User’s Guide
Page 65
Chapter 3 Internet and Wireless Setup Wizard
Figure 22 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the
Internet/Wireless Setup Wizard to verify your Internet access settings.
Figure 23 Connection Test Failed-2.
3.3 Wireless Connection Wizard Setup
After you configure the Internet access information, use the following screens to set up your
wireless LAN.
1 Select Ye s and click Next to configure wireless settings. Otherwise, select No and skip
to Step 6.
P-2602H(W)(L)-DxA User’s Guide
65
Page 66
Chapter 3 Internet and Wireless Setup Wizard
Figure 24 Connection Test Successful
2 Use this screen to activate the wireless LAN and OTIST. Click Next to continue.
Figure 25 Wireless LAN Setup Wizard 1
66
The following table describes the labels in this screen.
Table 10 Wireless LAN Setup Wizard 1
LABEL DESCRIPTION
Active Select the check box to turn on the wireless LAN.
Enable OTIST Select the check box to enable OTIST if you want to transfer your ZyXEL
Device’s SSID and WEP or WPA-PSK security settings to wireless clients that
support OTIST and are within transmission range.
You must also activate and start OTIST on the wireless client at the same time.
The process takes three minutes to complete.
Setup Key Type an OTIST Setup Key of up to eight ASCII characters in length. Be sure to
use the same OTIST Setup Key on the ZyXEL Device and wireless clients.
Back
Next
Exit Click Exit to close the wizard screen without saving.
Click Back to display the previous screen.
Click Next to proceed to the next screen.
P-2602H(W)(L)-DxA User’s Guide
Page 67
Chapter 3 Internet and Wireless Setup Wizard
3 Configure your wireless settings in this screen. Click Next.
Figure 26 Wireless LAN
The following table describes the labels in this screen.
Tabl e 11 Wireless LAN Setup Wizard 2
LABEL DESCRIPTION
Network
Name(SSID)
Channel
Selection
Security Select Automatically assign a WPA key (only available if you enable OTIST) if
Back Click Back to display the previous screen.
Next Click Next to proceed to the next screen.
Exit Click Exit to close the wizard screen without saving.
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless
LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the
same SSID in order to access the network.
The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a
channel. Select a channel ID that is not already in use by a neighboring device.
you want OTIST to configure a WPA key for you.
Select Manually assign a WPA-PSK key to configure a Pre-Shared Key (WPA-PSK).
Choose this option only if your wireless clients support WPA. See Section 3.3.1 on
page 68 for more information.
Select Manually assign a WEP key to configure a WEP Key. See Section 3.3.2 on
page 68 for more information.
Select Disable wireless security to have no wireless LAN security configured and
your network is accessible to any wireless networking device that is within range.
" The wireless stations and ZyXEL Device must use the same SSID, channel ID
and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is
enabled) for wireless communication.
4 This screen varies depending on the security mode you selected in the previous screen.
Fill in the field (if available) and click Next.
P-2602H(W)(L)-DxA User’s Guide
67
Page 68
Chapter 3 Internet and Wireless Setup Wizard
3.3.1 Manually Assign a WPA key
Choose Manually assign a WPA key in the Wireless LAN setup screen to set up a PreShared Key.
Figure 27 Manually Assign a WPA key
The following table describes the labels in this screen.
Table 12 Manually Assign a WPA key
LABEL DESCRIPTION
Pre-Shared
Key
Back Click Back to display the previous screen.
Next Click Next to proceed to the next screen.
Exit Click Exit to close the wizard screen without saving.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure
wireless connection by configuring WPA in the wireless LAN screens. You need to
configure an authentication server to do this.
3.3.2 Manually Assign a WEP Key
Choose Manually assign a WEP key to setup WEP Encryption parameters.
Figure 28 Manually Assign a WEP key
68
P-2602H(W)(L)-DxA User’s Guide
Page 69
Chapter 3 Internet and Wireless Setup Wizard
The following table describes the labels in this screen.
Table 13 Manually Assign a WEP key
LABEL DESCRIPTION
Key The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
Back Click Back to display the previous screen.
Next Click Next to proceed to the next screen.
Exit Click Exit to close the wizard screen without saving.
5 Click Apply to save your wireless LAN settings.
Figure 29 Wireless LAN Setup 3
stations must use the same WEP key for data transmission.
Enter any 5, 13 or 29 ASCII characters or 10, 26 or 58 hexadecimal characters ("0-9",
"A-F") for a 64-bit, 128-bit or 256-bit WEP key respectively.
6 Use the read-only summary table to check whether what you have configured is correct.
Click Finish to complete and save the wizard setup.
" No wireless LAN settings display if you chose not to configure wireless LAN
settings.
P-2602H(W)(L)-DxA User’s Guide
69
Page 70
Chapter 3 Internet and Wireless Setup Wizard
Figure 30 Internet Access and WLAN Wizard Setup Complete
7 Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this guide for more detailed information on the complete
range of ZyXEL Device features. If you cannot access the Internet, open the web
configurator again to confirm that the Internet settings you configured in the wizard
setup are correct.
70
P-2602H(W)(L)-DxA User’s Guide
Page 71
CHAPTER 4
VoIP Wizard And Example
This chapter shows you how to configure your SIP account(s) and make a VoIP phone call.
4.1 Introduction
The ZyXEL Device has Voice over IP (VoIP) communication capabilities that allow you to
use a traditional analog telephone to make Internet calls. You can configure the ZyXEL
Device to use up to two SIP based VoIP accounts.
This section describes how you can set up your ZyXEL Device to call someone who is also
using a VoIP device. Make sure your telephone is connected to the Phone 1 port before you
start with our example.
In the following figure, A represents your phone and B represents the phone of the person you
would like to call.
Figure 31 VoIP Phone Calls
In order to make VoIP calls you need to register at least one SIP account on your ZyXEL
Device. You can register your SIP account in the VOICE OVER INTERNET SETUP
wizard.
4.2 VoIP Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the
web configurator to display the wizard main screen.
P-2602H(W)(L)-DxA User’s Guide
71
Page 72
Chapter 4 VoIP Wizard And Example
Figure 32 Select a Mode
2 Click VOICE OVER INTERNET SETUP to configure your SIP settings.
Figure 33 Wizard: Welcome
3 Fill in the VOICE OVER INTERNET SETUP wizard screen with the information
provided by your VoIP service provider. Your VoIP service provider supplies you with
the following information. When you are finished, click Apply.
Table 14 Sample SIP Account Information
INFORMATION
FROM VOIP SERVICE
PROVIDER
SIP account address 11223344@SIPA-Account.com 11223344 is your SIP number. This is the
SIP server address a.b.c.d a.b.c.d is the IP address or domain name
EXAMPLE VALUES DESCRIPTION
part that comes before the “@” symbol in
your SIP account address. SIPA-
Account.com is your SIP server domain.
of your SIP server.
72
P-2602H(W)(L)-DxA User’s Guide
Page 73
Chapter 4 VoIP Wizard And Example
Table 14 Sample SIP Account Information
INFORMATION
FROM VOIP SERVICE
PROVIDER
Username VoIPUser This is the username you use to login to
Password Password This is the password you use to login to
EXAMPLE VALUES DESCRIPTION
your SIP account.
your SIP account.
Figure 34 VoIP Wizard Configuration
The following table describes the labels in this screen.
Table 15 VoIP Wizard Configuration
LABEL DESCRIPTION
SIP Number Enter your SIP number in this field. Use the number or text that comes
before the @ symbol in a SIP account. If your SIP account is
11223344@SIPA-Account.com
can use up to 127 ASCII characters.
SIP Server Address Type the IP address or domain name of the SIP server in this field. It
doesn’t matter whether the SIP server is a proxy, redirect or register
server. You can use up to 95 ASCII characters.
SIP Service Domain Enter the SIP service domain name in this field (the domain name that
comes after the @ symbol in a SIP account like 11223344@SIPA-
Account.com). You can use up to 127 ASCII Extended set characters.
User Name This is the name used to register this SIP account with the SIP register
server. Type the user name exactly as it was given to you. You can use up
to 95 ASCII characters.
Password Type the password associated with the user name above. You can use up
to 95 ASCII Extended set characters.
Check here to set up
SIP2 settings.
This screen configures SIP account 1. Select the check box if you have
a second SIP account that you want to use. You will need to configure
the same fields for the second SIP account.
, your SIP number is “11223344”. You
Note: If you configure more than one SIP account, you need
to configure Analog Phone settings to distinguish
between the two accounts when you make and
receive phone calls.
P-2602H(W)(L)-DxA User’s Guide
73
Page 74
Chapter 4 VoIP Wizard And Example
Table 15 VoIP Wizard Configuration
LABEL DESCRIPTION
Back Click Back to return to the previous screen.
Apply Click Apply to complete the wizard setup and save your configuration.
Exit Click Exit to close the wizard without saving your settings.
4 Your ZyXEL Device will attempt to register your SIP account with your VoIP service
provider. When your account is registered your PHONE 1 light will come on and you
are ready to make and receive VoIP phone calls.
Figure 35 SIP Registration Test
5 This screen displays if SIP account registration fails. If your DSL cable was
disconnected, you can try connecting it. Then wait a few seconds and click Register
Again. If your Internet connection was already working, you can click Back and try re-
entering your SIP account settings.
Figure 36 VoIP Wizard Fail
6 This screen displays if your SIP account registration was successful. Click Return to
Wizard Main Page if you want to use another configuration wizard. Click Go to
Advanced Setup page or Finish to close the wizard and go to the main web
configurator screens.
74
P-2602H(W)(L)-DxA User’s Guide
Page 75
Chapter 4 VoIP Wizard And Example
Figure 37 VoIP Wizard Finish
7 To call other VoIP users, you need to follow a similar process to ensure that their SIP
account is registered and active. After it is registered, they need to provide you with their
SIP number. You can use your VoIP service provider’s dialing plan to call SIP numbers.
You can also use your VoIP service provider’s dialing plan to call regular phone
numbers. You dial a prefix number, provided to you by your VoIP service provider,
followed by a regular phone number.
" To find out more information about configuring your VoIP features and making
non-VoIP calls see Chapter 11 on page 149.
P-2602H(W)(L)-DxA User’s Guide
75
Page 76
Chapter 4 VoIP Wizard And Example
76
P-2602H(W)(L)-DxA User’s Guide
Page 77
CHAPTER 5
Bandwidth Management Wizard
This chapter shows you how to configure basic bandwidth management using the wizard
screens.
5.1 Introduction
Bandwidth management allows you to control the amount of bandwidth going out through the
ZyXEL Device’s WAN port and prioritize the distribution of the bandwidth according to
service bandwidth requirements. This helps keep one service from using all of the available
bandwidth and shutting out other users.
5.2 Bandwidth Management Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the
web configurator to display the wizard main screen.
Figure 38 Select a Mode
2 Click BANDWIDTH MANAGEMENT SETUP.
P-2602H(W)(L)-DxA User’s Guide
77
Page 78
Chapter 5 Bandwidth Management Wizard
Figure 39 Wizard: Welcome
3 Select Active to allocate bandwidth to packets based on the packet size.
Figure 40 Bandwidth Management Wizard: General Information
The following fields describe the label in this screen.
Table 16 Bandwidth Management Wizard: General Information
LABEL DESCRIPTION
Active Select the Active check box to have the ZyXEL Device apply bandwidth
management to traffic going out through the ZyXEL Device’s WAN, LAN or WLAN
port based on the packet size.
Back Click Back to display the previous screen.
Next Click Next to proceed to the next screen.
Exit Click Exit to close the wizard screen without saving.
4 Follow the on-screen instructions and click Finish to complete the wizard setup and save
your configuration.
78
P-2602H(W)(L)-DxA User’s Guide
Page 79
Chapter 5 Bandwidth Management Wizard
Figure 41 Bandwidth Management Wizard: Complete
P-2602H(W)(L)-DxA User’s Guide
79
Page 80
Chapter 5 Bandwidth Management Wizard
80
P-2602H(W)(L)-DxA User’s Guide
Page 81
PART III
Advanced
Status Screens (83)
WA N S e t u p ( 9 3 )
LAN Setup (105)
Wireless LAN (117)
Network Address Translation (NAT) Screens (137)
Vo i c e ( 1 4 9 )
VoIP Trunking (175)
Phone Usage (191)
Firewalls (195)
Firewall Configuration (207)
Content Filtering (227)
Introduction to IPSec (231)
VPN Screens (237)
Certificates (263)
Static Route (287)
Bandwidth Management (291)
Dynamic DNS Setup (299)
Remote Management Configuration (303)
Universal Plug-and-Play (UPnP) (313)
81
Page 82
82
Page 83
CHAPTER 6
Status Screens
Use the Status screens to look at the current status of the device, system resources, interfaces
(LAN and WAN), and SIP accounts. You can also register and unregister SIP accounts. The
Status screen also provides detailed information from Any IP and DHCP and statistics from
VoIP, bandwidth management, and traffic.
6.1 Status Screen
Click Status to open this screen.
Figure 42 Status Screen
P-2602H(W)(L)-DxA User’s Guide
83
Page 84
Chapter 6 Status Screens
Each field is described in the following table.
Table 17 Status Screen
LABEL DESCRIPTION
Refresh Interval Enter how often you want the ZyXEL Device to update this screen.
Apply Click this to update this screen immediately.
Device
Information
Host Name This field displays the ZyXEL Device system name. It is used for identification.
Model
Number
MAC Address This is the MAC (Media Access Control) or Ethernet address unique to your
ZyNOS
Firmware
Ver si on
DSL Firmware
Ver si on
WAN Information
DSL Mode This is the DSL standard that your ZyXEL Device is using.
IP Address This field displays the current IP address of the ZyXEL Device in the WAN. Click
IP Subnet
Mask
Default
Gateway
VPI/VCI This is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
IP Address This field displays the current IP address of the ZyXEL Device in the LAN. Click
IP Subnet
Mask
DHCP This field displays what DHCP services the ZyXEL Device is providing to the LAN.
WLAN
Information
SSID This is the descriptive name used to identify the ZyXEL Device in the wireless
Channel This is the channel number used by the ZyXEL Device now.
Security This displays the type of security mode the ZyXEL Device is using in the wireless
You can change this in the Maintenance > System > General screen’s System
Name field.
This is the model name of your device.
ZyXEL Device.
This field displays the current version of the firmware inside the device. It also
shows the date the firmware version was created. Click this to go to the screen
where you can change it.
This field displays the current version of the device’s DSL modem code.
this to go to the screen where you can change it.
This field displays the current subnet mask in the WAN.
This is the IP address of the default gateway, if applicable.
the wizard or WAN screen.
this to go to the screen where you can change it.
This field displays the current subnet mask in the LAN.
Choices are:
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP addresses
to other computers in the LAN.
Relay - The ZyXEL Device acts as a surrogate DHCP server and relays DHCP
requests and responses between the remote server and the clients.
None - The ZyXEL Device is not providing any DHCP services to the LAN.
Click this to go to the screen where you can change it.
(“W” models only)
LAN. Click this to go to the screen where you can change it.
LAN.
84
P-2602H(W)(L)-DxA User’s Guide
Page 85
Chapter 6 Status Screens
Table 17 Status Screen
LABEL DESCRIPTION
Security
Firewall This displays whether or not the ZyXEL Device’s firewall is activated. Click this to
Content Filter This displays whether or not the ZyXEL Device’s content filtering is activated.
System Status
System
Uptime
Current Date/
Time
System Mode This displays whether the ZyXEL Device is functioning as a router or a bridge.
CPU Usage This field displays what percentage of the ZyXEL Device’s processing ability is
Memory
Usage
Interface Status
Interface This column displays each interface the ZyXEL Device has.
Status This field indicates whether or not the ZyXEL Device is using the interface.
Rate For the LAN interface, this displays the port speed and duplex setting.
Summary
Client List Click this link to view current DHCP client information. See Section 8.6 on page
AnyIP Table Click this link to view a list of IP addresses and MAC addresses of computers,
WLAN Status Click this link to display the MAC address(es) of the wireless stations that are
Bandwidth
Status
go to the screen where you can change it.
Click this to go to the screen where you can change it.
This field displays how long the ZyXEL Device has been running since it last
started up. The ZyXEL Device starts up when you plug it in, when you restart it
(Maintenance > Tools > Restart), or when you reset it (see Section 1.6 on page
48).
This field displays the current date and time in the ZyXEL Device. You can change
this in Maintenance > System > Time Setting.
currently used. When this percentage is close to 100%, the ZyXEL Device is
running at full load, and the throughput is not going to improve anymore. If you
want some applications to have more throughput, you should turn off other
applications (for example, using bandwidth management; see Chapter 21 on page
291).
This field displays what percentage of the ZyXEL Device’s memory is currently
used. Usually, this percentage should not increase much. If memory usage does
get close to 100%, the ZyXEL Device is probably becoming unstable, and you
should restart the device. See Section 27.6 on page 351, or turn off the device
(unplug the power) for a few seconds.
For the DSL interface, this field displays Down (line is down), Up (line is up or
connected) if you're using Ethernet encapsulation and Down (line is down), Up
(line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and
Drop (dropping a call) if you're using PPPoE encapsulation.
For the LAN interface, this field displays Up when the ZyXEL Device is using the
interface and Down when the ZyXEL Device is not using the interface.
For the WLAN interface, it displays Active when WLAN is enabled or Inactive
when WLAN is disabled.
For the DSL interface, it displays the downstream and upstream transmission rate.
For the WLAN interface, it displays the transmission rate when WLAN is enabled
or N/A when WLAN is disabled.
113 .
which are not in the same subnet as the ZyXEL Device. See Section 6.2 on page
86.
currently associating with the ZyXEL Device. See Section 6.3 on page 87.
Click this link to view the ZyXEL Device’s bandwidth usage and allotments. See
Section 21.8 on page 297.
P-2602H(W)(L)-DxA User’s Guide
85
Page 86
Chapter 6 Status Screens
Table 17 Status Screen
LABEL DESCRIPTION
VPN Status Click this link to view the ZyXEL Device’s current VPN connections. See Section
Packet
Statistics
VoIP Statistics Click this link to view statistics about your VoIP usage. See Section 6.5 on page
VoIP Status
Account This column displays each SIP account in the ZyXEL Device.
Registration This field displays the current registration status of the SIP account. You have to
URI This field displays the account number and service domain of the SIP account.
18.16 on page 257.
Click this link to view port status and packet specific statistics. See Section 6.4 on
page 87.
89.
register SIP accounts with a SIP server to use VoIP.
If the SIP account is already registered with the SIP server,
• Click Unregister to delete the SIP account’s registration in the SIP server.
This does not cancel your SIP account, but it deletes the mapping between
your SIP identity and your IP address or domain name.
• The second field displays Registered.
If the SIP account is not registered with the SIP server,
• Click Register to have the ZyXEL Device attempt to register the SIP account
with the SIP server.
• The second field displays the reason the account is not registered.
Inactive - The SIP account is not active. You can activate it in VoIP > SIP > SIP
Settings.
Register Fail - The last time the ZyXEL Device tried to register the SIP account
with the SIP server, the attempt failed. The ZyXEL Device automatically tries to
register the SIP account when you turn on the ZyXEL Device or when you activate
it.
You can change these in VoIP > SIP > SIP Settings.
6.2 Any IP Table
Click Status > AnyIP Table to access this screen. Use this screen to view the IP address and
MAC address of each computer that is using the ZyXEL Device but is in a different subnet
than the ZyXEL Device.
Figure 43 Any IP Table
86
P-2602H(W)(L)-DxA User’s Guide
Page 87
Each field is described in the following table.
Table 18 Any IP Table
LABEL DESCRIPTION
# This field is a sequential value. It is not associated with a specific entry.
IP Address
MAC Address
Refresh
This field displays the IP address of each computer that is using the ZyXEL Device
but is in a different subnet than the ZyXEL Device.
This field displays the MAC address of the computer that is using the ZyXEL
Device but is in a different subnet than the ZyXEL Device.
Click this to update this screen.
6.3 WLAN Status (“W” models only)
Click Status > WLAN Status to access this screen. Use this screen to view the wireless
stations that are currently associated to the ZyXEL Device.
Figure 44 WLAN Status
Chapter 6 Status Screens
The following table describes the labels in this screen.
Table 19 WLAN Status
LABEL DESCRIPTION
# This is the index number of an associated wireless station.
MAC Address This field displays the MAC (Media Access Control) address of an associated
wireless station.
Association
TIme
Refresh Click Refresh to reload this screen.
This field displays the time a wireless station first associated with the ZyXEL Device.
6.4 Packet Statistics
Click Status > Packet Statistics to access this screen. Read-only information here includes
port status and packet specific statistics. Also provided are "system up time" and "poll
interval(s)". The Poll Interval(s) field is configurable.
P-2602H(W)(L)-DxA User’s Guide
87
Page 88
Chapter 6 Status Screens
Figure 45 Packet Statistics
The following table describes the fields in this screen.
Table 20 Packet Statistics
LABEL DESCRIPTION
System Monitor
System up Time This is the elapsed time the system has been up.
Current Date/Time This field displays your ZyXEL Device’s present date and time.
CPU Usage This field specifies the percentage of CPU utilization.
Memory Usage This field specifies the percentage of memory utilization.
WAN Port Statistics
Link Status This is the status of your WAN link.
WAN IP Address This is the IP address of the ZyXEL Device’s WAN port.
Upstream Speed This is the upstream speed of your ZyXEL Device.
Downstream Speed This is the downstream speed of your ZyXEL Device.
Node-Link This field displays the remote node index number and link type. Link types are
PPPoA, ENET, RFC 1483 and PPPoE.
Status This field displays Down (line is down), Up (line is up or connected) if you're
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
Errors This field displays the number of error packets on this port.
Tx B/s This field displays the number of bytes transmitted in the last second.
Rx B/s This field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this port has been up.
LAN Port Statistics
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation.
88
P-2602H(W)(L)-DxA User’s Guide
Page 89
Table 20 Packet Statistics (continued)
LABEL DESCRIPTION
Interface This field displays either Ethernet (LAN ports) or Wireless (WLAN port).
Status For the LAN ports, this field displays Down (line is down) or Up (line is up or
TxPkts This field displays the number of packets transmitted on this interface.
RxPkts This field displays the number of packets received on this interface.
Collisions This is the number of collisions on this interfaces.
Poll Interval(s) Type the time interval for the browser to refresh system statistics.
Set Interval Click this to apply the new poll interval you entered in the Poll Interval field
Stop Click this button to halt the refreshing of the system statistics.
6.5 VoIP Statistics
Chapter 6 Status Screens
connected).
For the WLAN port, it displays the transmission rate when WLAN is enabled or
N/A when WLAN is disabled.
above.
Click Status > VoIP Statistic s to access this screen.
Figure 46 VoIP Statistics
Each field is described in the following table.
Table 21 VoIP Statistics
LABEL DESCRIPTION
SIP Status
Account This column displays each SIP account in the ZyXEL Device.
P-2602H(W)(L)-DxA User’s Guide
89
Page 90
Chapter 6 Status Screens
Table 21 VoIP Statistics
LABEL DESCRIPTION
Registration This field displays the current registration status of the SIP account. You can
Last Registration This field displays the last time you successfully registered the SIP account. It
URI This field displays the account number and service domain of the SIP account.
Protocol This field displays the transport protocol the SIP account uses. SIP accounts
Message Waiting This field indicates whether or not there are any messages waiting for the SIP
Last Incoming
Number
Last Outgoing
Number
Call Statistics
Phone This field displays each phone port in the ZyXEL Device.
Hook This field indicates whether the phone is on the hook or off the hook.
Status This field displays the current state of the phone call.
Codec This field displays what voice codec is being used for a current VoIP call through a
Peer Number This field displays the SIP number of the party that is currently engaged in a VoIP
Duration This field displays how long the current call has lasted.
Tx Pkts This field displays the number of packets the ZyXEL Device has transmitted in the
Rx Pkts This field displays the number of packets the ZyXEL Device has received in the
Tx B/s This field displays how quickly the ZyXEL Device has transmitted packets in the
Rx B/s This field displays how quickly the ZyXEL Device has received packets in the
change this in the Status screen.
Registered - The SIP account is registered with a SIP server.
Register Fail - The last time the ZyXEL Device tried to register the SIP account
with the SIP server, the attempt failed. The ZyXEL Device automatically tries to
register the SIP account when you turn on the ZyXEL Device or when you activate
it.
Inactive - The SIP account is not active. You can activate it in VoIP > SIP > SIP
Settings.
displays N/A if you never successfully registered this account.
You can change these in VoIP > SIP > SIP Settings.
always use UDP.
account.
This field displays the last number that called the SIP account. It displays N/A if no
number has ever dialed the SIP account.
This field displays the last number the SIP account called. It displays N/A if the
SIP account has never dialed a number.
On - The phone is hanging up or already hung up.
Off - The phone is dialing, calling, or connected.
N/A - There are no current VoIP calls, incoming calls or outgoing calls being
made.
DIAL - The callee’s phone is ringing.
RING - The phone is ringing for an incoming VoIP call.
Process - There is a VoIP call in progress.
DISC - The callee’s line is busy, the callee hung up or your phone was left off the
hook.
phone port.
call through a phone port.
current call.
current call.
current call. The rate is the average number of bytes transmitted per second.
current call. The rate is the average number of bytes transmitted per second.
90
P-2602H(W)(L)-DxA User’s Guide
Page 91
Chapter 6 Status Screens
Table 21 VoIP Statistics
LABEL DESCRIPTION
Poll Interval(s) Enter how often you want the ZyXEL Device to update this screen, and click Set
Interval.
Set Interval Click this to make the ZyXEL Device update the screen based on the amount of
time you specified in Poll Interval.
Stop Click this to make the ZyXEL Device stop updating the screen.
P-2602H(W)(L)-DxA User’s Guide
91
Page 92
Chapter 6 Status Screens
92
P-2602H(W)(L)-DxA User’s Guide
Page 93
CHAPTER 7
WAN Setup
This chapter describes how to configure WAN settings.
7.1 WAN Overview
A WAN (Wide Area Network) is an outside connection to another network or the Internet.
7.1.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports
the following methods.
7.1.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the
IP network protocol. IP packets are routed between the Ethernet interface and the WAN
interface and then formatted so that they can be understood in a bridged environment. For
instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP
requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the
second wizard screen. You can get this information from your ISP.
7.1.1.2 PPP over Ethernet
The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an
IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up
connection using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.
P-2602H(W)(L)-DxA User’s Guide
93
Page 94
Chapter 7 WAN Setup
7.1.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA
connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual
Circuit) to the Internet Service Provider’s (ISP) DSLAM (Digital Subscriber Line (DSL)
Access Multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC
1661 for more information on PPP.
7.1.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation
Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single
ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each
protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer
to RFC 1483 for more detailed information.
7.1.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be
sure to use the multiplexing method required by your ISP.
7.1.2.1 VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit;
for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments
where dynamic creation of large numbers of ATM VCs is fast and economical.
7.1.2.2 LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being
contained in each packet header. Despite the extra bandwidth and processing overhead, this
method may be advantageous if it is not practical to have a separate VC for each carried
protocol, for example, if charging heavily depends on the number of simultaneous VCs.
7.1.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to
65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for
more information.
7.1.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you
a different one each time. The Single User Account feature can be enabled or disabled if you
have either a dynamic or static IP. However the encapsulation method assigned influences
your choices for IP address and ENET ENCAP gateway.
94
P-2602H(W)(L)-DxA User’s Guide
Page 95
7.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and
not the ENET ENCAP Gateway field.
7.1.4.2 IP Assignment with RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP
Address and ENET ENCAP Gateway fields as stated above.
7.1.4.3 IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP
Address and ENET ENCAP Gateway fields as supplied by your ISP. However for a
dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP
Address and ENET ENCAP Gateway fields are not applicable (N/A) as the DHCP server
assigns them to the ZyXEL Device.
7.1.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic
demand. The ZyXEL Device does two things when you specify a nailed-up connection. The
first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up
the connection when turned on and whenever the connection is down. A nailed-up connection
can be very expensive for obvious reasons.
Chapter 7 WAN Setup
Do not specify a nailed-up connection unless your telephone company offers flat-rate service
or you need a constant connection and the cost is of no concern.
7.1.6 NAT
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.
7.2 Metric
The metric represents the "cost of transmission". A router determines the best route for
transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the
measurement of cost, with a minimum of "1" for directly connected networks. The number
must be between "1" and "15"; a number greater than "15" means the link is down. The
smaller the number, the lower the "cost".
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the
default routes have the same metric, the ZyXEL Device uses the following pre-defined
priorities:
• Normal route: designated by the ISP (see Section 7.5 on page 98)
• Traffic-redirect route (see Section 7.7 on page 102)
• WAN-backup route, also called dial-backup (see Section 7.8 on page 103)
P-2602H(W)(L)-DxA User’s Guide
95
Page 96
Chapter 7 WAN Setup
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric
of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary
default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the
traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route
if the traffic-redirect route also fails.
If you want the dial-backup route to take first priority over the traffic-redirect route or even the
normal route, all you need to do is set the dial-backup route’s metric to "1" and the others to
"2" (or greater).
IP Policy Routing overrides the default routing behavior and takes priority over all of the
routes mentioned above.
7.3 Traffic Shaping
Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average
rate and fluctuations of data transmission over an ATM network. This agreement helps
eliminate congestion, which is important for transmission of real time data such as audio and
video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter
may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits),
so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not
guaranteed because it is dependent on the line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the
maximum average rate at which cells can be sent over the virtual connection. SCR may not be
greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At
this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value
that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 47 Example of Traffic Shaping
96
P-2602H(W)(L)-DxA User’s Guide
Page 97
7.3.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0
Specification.
7.3.1.1 Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is
being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for
connections that continuously require a specific amount of bandwidth. A PCR is specified and
if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR
would be high-resolution video and voice.
7.3.1.2 Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections
that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or
non-real time (VBR-nRT) connections.
The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require
closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a
PCR is specified) but is only available when data is being sent. An example of an VBR-RT
connection would be video conferencing. Video conferencing requires real-time data transfers
and the bandwidth requirement varies in proportion to the video image's changing dynamics.
Chapter 7 WAN Setup
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do
not require closely controlled delay and delay variation. It is commonly used for "bursty"
traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum
level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
7.3.1.3 Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR
doesn't guarantee any bandwidth and only delivers traffic when the network has spare
bandwidth. An example application is background file transfer.
7.4 Zero Configuration Internet Access
Once you turn on and connect the ZyXEL Device to a telephone jack, it automatically detects
the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method)
from the ISP and makes the necessary configuration changes. In cases where additional
account information (such as an Internet account user name and password) is required or the
ZyXEL Device cannot connect to the ISP, you will be redirected to web screen(s) for
information input or troubleshooting.
Zero configuration for Internet access is disabled when
• the ZyXEL Device is in bridge mode
• you set the ZyXEL Device to use a static (fixed) WAN IP address.
P-2602H(W)(L)-DxA User’s Guide
97
Page 98
Chapter 7 WAN Setup
7.5 Internet Access Setup
Use this screen to change your ZyXEL Device’s WAN remote node settings. Click Network >
WAN > Internet Access Setup. The screen differs by the encapsulation you select.
See Section 7.1 on page 93 for more information.
Figure 48 Internet Access Setup (PPPoE)
98
The following table describes the labels in this screen.
Table 22 Internet Access Setup
LABEL DESCRIPTION
General
Mode Select Routing (default) from the drop-down list box if your ISP allows multiple
computers to share an Internet account. Otherwise select Bridge.
Encapsulation Select the method of encapsulation used by your ISP from the drop-down list
box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
ISP assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as given.
Password (PPPoA and PPPoE encapsulation only) Enter the password associated with the
user name above.
Service Name (PPPoE only) Type the name of your PPPoE service here.
P-2602H(W)(L)-DxA User’s Guide
Page 99
Chapter 7 WAN Setup
Table 22 Internet Access Setup (continued)
LABEL DESCRIPTION
Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
Choices are VC or LLC.
Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
circuit. Refer to the appendix for more information.
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
management of ATM traffic). Enter the VCI assigned to you.
IP Address
IP Address This option is available if you select Routing in the Mode field.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address;
otherwise select Static IP Address and type your ISP assigned IP address in
the IP Address field below.
Subnet Mask
(ENET ENCAP
encapsulation only)
Gateway IP address
(ENET ENCAP
encapsulation only)
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
Connection
(PPPoA and PPPoE
encapsulation only)
Nailed-Up
Connection
Connect on
Demand
Enter a subnet mask in dotted decimal notation.
Refer to the appendix to calculate a subnet mask If you are implementing
subnetting.
You must specify a gateway IP address (supplied by your ISP) when you select
ENET ENCAP in the Encapsulation field
Select Obtained From ISP if your ISP dynamically assigns DNS server
information (and the ZyXEL Device's WAN IP address).
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave
the IP address set to 0.0.0.0, User-Defined changes to None after you click
Apply. If you set a second choice to User-Defined, and enter the same IP
address, the second User-Defined changes to None after you click Apply.
Select DNS Relay to have the ZyXEL Device act as a DNS proxy only when the
ISP uses IPCP DNS server extensions. The ZyXEL Device's LAN IP address
displays in the field to the right (read-only). The ZyXEL Device tells the DHCP
clients on the LAN that the ZyXEL Device itself is the DNS server. When a
computer on the LAN sends a DNS query to the ZyXEL Device, the ZyXEL
Device forwards the query to the real DNS server learned through IPCP and
relays the response back to the computer. You can only select DNS Relay for
one of the three servers; if you select DNS Relay for a second or third DNS
server, that choice changes to None after you click Apply.
Select None if you do not want to configure DNS servers. You must have
another DNS server on your LAN, or else the computers must have their DNS
server addresses manually configured. If you do not configure a DNS server,
you must know the IP address of a computer in order to access it.
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
P-2602H(W)(L)-DxA User’s Guide
99
Page 100
Chapter 7 WAN Setup
Table 22 Internet Access Setup (continued)
LABEL DESCRIPTION
Max Idle Timeout Specify an idle time-out in the Max Idle Timeout field when you select Connect
on Demand. The default setting is 0, which means the Internet session will not
timeout.
Apply Click Apply to save the changes.
Cancel Click Cancel to begin configuring this screen afresh.
Advanced Setup Click this button to display the Advanced WAN Setup screen and edit more
details of your WAN setup.
7.5.1 Advanced Internet Access Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the Internet Access Setup screen. The screen appears as shown.
Figure 49 Advanced Internet Access Setup
100
The following table describes the labels in this screen.
Table 23 Advanced Internet Access Setup
LABEL DESCRIPTION
RIP & Multicast
Setup
RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information
with other routers. Use this field to control how much routing information the ZyXEL
Device sends and receives on the subnet.
Select the RIP direction from None, Both, In Only and Out Only.
RIP Version
Select the RIP version from RIP-1, RIP-2B and RIP-2M.
P-2602H(W)(L)-DxA User’s Guide
Loading...