ZyXEL Communications P320W Users manual

P-320W

802.11g Wireless Firewall Router

User’s Guide

Version 1.00

11/2005

Edition 1

P-320W User’s Guide

Copyright

Copyright © 2005 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Copyright 3

P-320W User’s Guide

Federal Communications

Commission (FCC) Interference

Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause
undesired operations.

This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.

If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and the receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.

• Consult the dealer or an experienced radio/TV technician for help.

Caution

1 To comply with FCC RF exposure compliance requirements, a separation distance of at

least 20 cm must be maintained between the antenna of this device and all persons.

2 This transmitter must not be co-located or operating in conjunction with any other

antenna or transmitter.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

4 Federal Communications Commission (FCC) Interference Statement

P-320W User’s Guide

Certifications

1 Go to www.zyxel.com

2 Select your product from the drop-down list box on the ZyXEL home page to go to that

product's page.

3 Select the certification you wish to view from this page.

Federal Communications Commission (FCC) Interference Statement 5

P-320W User’s Guide

For your safety, be sure to read and follow all warning notices and instructions.

• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger
telecommunication line cord.

• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel can
service the device. Please contact your vendor for further information.

• Use ONLY the dedicated power supply for your device. Connect the power cord or
power adaptor to the right supply voltage (110V AC in North America or 230V AC in
Europe).

• Do NOT use the device if the power supply is damaged as it might cause electrocution.

• If the power supply is damaged, remove it from the power outlet.

• Do NOT attempt to repair the power supply. Contact your local vendor to order a new
power supply.

• Place connecting cables carefully so that no one will step on them or stumble over them.
Do NOT allow anything to rest on the power cord and do NOT locate the product where
anyone can walk on the power cord.

• If you wall mount your device, make sure that no electrical, gas or water pipes will be
damaged.

• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of
electric shock from lightning.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.

• Make sure to connect the cables to the correct ports.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

• Do NOT store things on the device.

• Connect ONLY suitable accessories to the device.

Safety Warnings

6 Safety Warnings

P-320W User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

ZyXEL Limited Warranty 7

P-320W User’s Guide

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

Customer Support

METHOD

LOCATION

CORPORATE
HEADQUARTERS
(WORLDWIDE)

CZECH REPUBLIC

DENMARK

FINLAND

FRANCE

GERMANY

HUNGARY

KAZAKHSTAN

NORTH AMERICA

NORWAY

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.zyxel.com

[e-mail] [phone] ftp.zyxel.com

[e-mail] [phone] www.zyxel.cz ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.dk ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fi ZyXEL Communications Oy

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fr ZyXEL France

[phone]

[e-mail] [phone] www.zyxel.de ZyXEL Deutschland GmbH.

[e-mail] [phone]

[e-mail] [phone] www.zyxel.hu ZyXEL Hungary

[e-mail] [phone]

http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan

[e-mail] [phone]

[e-mail] 1-800-255-4101

[phone]

[e-mail] [phone] ftp.us.zyxel.com

[e-mail] [phone] www.zyxel.no ZyXEL Communications A/S

[e-mail] [phone]

A

WEB SITE

www.europe.zyxel.com

ftp.europe.zyxel.com

www.us.zyxel.com ZyXEL Communications Inc.

REGULAR MAIL

ZyXEL Communications Corp.
6 Innovation Road II

Science Park
Hsinchu 300
Ta iw a n

Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika

Columbusvej
2860 Soeborg
Denmark

Malminkaari 10
00700 Helsinki
Finland

1 rue des Vergers
Bat. 1 / C
69760 Limonest
France

Adenauerstr. 20/A2 D-52146
Wuerselen
Germany

48, Zoldlomb Str.
H-1025, Budapest
Hungary

43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan

1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.

Nils Hansens vei 13
0667 Oslo
Norway

8 Customer Support

P-320W User’s Guide

METHOD

LOCATION

POLAND

RUSSIA

SPAIN

SWEDEN

UKRAINE

UNITED KINGDOM

A. “+” is the (prefix) number you enter to make an international telephone call.

SUPPORT E-MAIL TELEPHONE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.pl.zyxel.com ZyXEL Communications

[phone]

http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia

[e-mail] [phone]

[e-mail] [phone] www.zyxel.es ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.se ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.ua.zyxel.com ZyXEL Ukraine

[e-mail] [phone]

[e-mail] [phone]

08707 555779 (UK only)

[e-mail] [phone] ftp.zyxel.co.uk

A

WEB SITE

REGULAR MAIL

ul.Emilli Plater 53
00-113 Warszawa
Poland

Ostrovityanova 37a Str.
Moscow, 117279
Russia

Alejandro Villegas 33
1º, 28043 Madrid
Spain

Sjöporten 4, 41764 Göteborg
Sweden

13, Pimonenko Str.
Kiev, 04050
Ukraine

www.zyxel.co.uk ZyXEL Communications UK

Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)

Customer Support 9

P-320W User’s Guide

10 Customer Support

P-320W User’s Guide

Table of Contents

Copyright ..................................................................................................................3

Federal Communications Commission (FCC) Interference Statement ............... 4

Safety Warnings ....................................................................................................... 6

ZyXEL Limited Warranty.......................................................................................... 7

Customer Support.................................................................................................... 8

Table of Contents ................................................................................................... 11

Preface ....................................................................................................................25

Chapter 1

Getting to Know Your Prestige ............................................................................. 27

1.1 Prestige Overview ..............................................................................................27

1.2 Prestige Features ...............................................................................................27

1.2.1 Physical Features .....................................................................................27

1.2.2 Non-Physical Features .............................................................................28

1.2.3 Wireless Features .....................................................................................30

1.3 Applications for the Prestige ..............................................................................31

1.3.1 Secure Broadband Internet Access via Cable or DSL Modem .................31

1.3.2 Wireless LAN Application .........................................................................32

1.3.3 Front Panel LEDs .....................................................................................32

Chapter 2

Introducing the Web Configurator........................................................................ 35

2.1 Web Configurator Overview ...............................................................................35

2.2 Accessing the Prestige Web Configurator .........................................................35

2.3 Resetting the Prestige ........................................................................................37

2.3.1 Procedure To Use The Reset Button ........................................................37

2.4 Navigating the Prestige Web Configurator .........................................................37

2.4.1 Navigation Panel .......................................................................................39

2.4.2 Summary: DHCP Table..............................................................................41

2.4.3 Summary: Association List ........................................................................42

2.4.4 Summary: Packet Statistics .......................................................................42

Chapter 3

Connection Wizard................................................................................................. 45

3.1 Wizard Setup ......................................................................................................45

Table of Contents 11

P-320W User’s Guide

Chapter 4

Wireless LAN .......................................................................................................... 61

3.2 Connection Wizard: STEP 1: System Information .............................................46

3.2.1 System Name ...........................................................................................46

3.2.2 Domain Name ...........................................................................................46

3.3 Connection Wizard: STEP 2: Wireless LAN .......................................................47

3.3.1 Basic(WEP) Security .................................................................................49

3.3.2 Extend(WPA-PSK) Security.......................................................................50

3.3.3 OTIST ........................................................................................................51

3.4 Connection Wizard: STEP 3: Internet Configuration ..........................................52

3.4.1 Ethernet Connection Type ........................................................................53

3.4.2 PPPoE Connection Type ..........................................................................53

3.4.3 PPTP Connection Type ............................................................................55

3.4.4 Your IP Address .........................................................................................56

3.4.5 WAN MAC Address ...................................................................................57

3.4.6 Connection Wizard Complete ....................................................................58

4.1 Introduction ........................................................................................................61

4.2 Wireless Security Overview ...............................................................................61

4.2.1 Encryption .................................................................................................61

4.2.2 Authentication ...........................................................................................61

4.2.3 Restricted Access .....................................................................................62

4.2.4 Hide Prestige Identity ................................................................................62

4.2.5 Using OTIST .............................................................................................62

4.3 Configuring Wireless LAN on the Prestige .........................................................62

4.4 General Wireless LAN Screen ..........................................................................63

4.4.1 No Security ...............................................................................................64

4.4.2 WEP Encryption ........................................................................................65

4.4.3 Introduction to WPA .................................................................................67

4.4.4 WPA-PSK Application Example ................................................................67

4.4.5 WPA-PSK Authentication Screen .............................................................68

4.4.6 WPA with RADIUS Application Example ..................................................69

4.4.7 Wireless Client WPA Supplicants .............................................................69

4.4.8 WPA Authentication Screen ......................................................................69

4.4.9 IEEE 802.1x Overview ..............................................................................70

4.4.10 IEEE 802.1x and Dynamic WEP Key Exchange Screen ........................71

4.5 OTIST .................................................................................................................72

4.5.1 Enabling OTIST ........................................................................................72

4.5.1.1 AP ...................................................................................................72

4.5.1.2 Wireless Client ................................................................................74

4.5.2 Starting OTIST ..........................................................................................75

4.5.3 Notes on OTIST ........................................................................................75

4.6 MAC Filter ..........................................................................................................76

12 Table of Contents

P-320W User’s Guide

4.7 Wireless LAN Advanced Screen ........................................................................78

Chapter 5

WAN......................................................................................................................... 81

5.1 WAN IP Address Assignment .............................................................................81

5.2 IP Address and Subnet Mask .............................................................................81

5.3 DNS Server Address Assignment ......................................................................82

5.4 TCP/IP Priority (Metric) ......................................................................................82

5.5 WAN MAC Address ............................................................................................83

5.6 Internet Connection ............................................................................................83

5.6.1 Ethernet Encapsulation .............................................................................83

5.6.2 PPPoE Encapsulation ...............................................................................85

5.6.3 PPTP Encapsulation .................................................................................87

5.7 Advanced WAN Screen ......................................................................................89

5.8 Traffic Redirect ...................................................................................................90

5.9 Traffic Redirect Screen .......................................................................................90

Chapter 6

LAN..........................................................................................................................93

6.1 LAN Overview ....................................................................................................93

6.1.1 IP Pool Setup ............................................................................................93

6.1.2 System DNS Servers ................................................................................93

6.2 LAN TCP/IP ........................................................................................................93

6.2.1 Factory LAN Defaults ................................................................................93

6.2.2 IP Address and Subnet Mask ...................................................................94

6.3 IP Screen ...........................................................................................................94

Chapter 7

DHCP Server........................................................................................................... 95

7.1 DHCP .................................................................................................................95

7.2 DHCP Screen .....................................................................................................95

7.3 Static DHCP Screen ...........................................................................................96

7.4 Client List Screen ...............................................................................................97

Chapter 8

Network Address Translation (NAT).....................................................................99

8.1 NAT Overview ....................................................................................................99

8.1.1 NAT Definitions .........................................................................................99

8.1.2 What NAT Does ......................................................................................100

8.1.3 How NAT Works .....................................................................................100

8.1.4 NAT Application ......................................................................................101

8.1.5 Default Server IP Address ......................................................................101

8.1.6 Port Forwarding: Services and Port Numbers ........................................102

Table of Contents 13

P-320W User’s Guide

Chapter 9

Firewall..................................................................................................................109

8.1.7 Configuring Servers Behind SUA (Example) ..........................................103

8.2 General NAT Screen ........................................................................................103

8.3 Port Forwarding Screen ...................................................................................104

8.3.1 Rule Setup Screen...................................................................................105

8.4 Trigger Port Forwarding ...................................................................................106

8.4.1 Trigger Port Forwarding Example ...........................................................106

8.4.2 Two Points To Remember About Trigger Ports .......................................107

8.5 Trigger Port Forwarding Screen .......................................................................107

9.1 Introduction to Firewall .....................................................................................109

9.1.1 What is a Firewall? .................................................................................109

9.1.2 Stateful Inspection Firewall. ....................................................................109

9.1.3 About the Prestige Firewall .....................................................................109

9.1.4 Guidelines For Enhancing Security With Your Firewall ..........................110

9.2 General Firewall Screen ...................................................................................110

9.3 Services Screen .............................................................................................. 111

9.3.1 Services ..................................................................................................113

Chapter 10

Static Route Screens ........................................................................................... 115

10.1 Static Route Overview ....................................................................................115

10.2 IP Static Route Screen ................................................................................... 115

10.2.1 Static Route Setup Screen.....................................................................116

Chapter 11

Remote Management Screens ............................................................................ 119

11.1 Remote Management Overview ..................................................................... 119

11.1.1 Remote Management Limitations .........................................................119

11.1.2 Remote Management and NAT ............................................................119

11.1.3 System Timeout ...................................................................................120

11.2 WWW Screen .................................................................................................120

11.3 SNMP .............................................................................................................121

11.3.1 Supported MIBs ....................................................................................122

11.3.2 SNMP Traps ..........................................................................................122

11.4 SNMP Screen .................................................................................................122

11.5 Security Screen ..............................................................................................123

Chapter 12

UPnP...................................................................................................................... 125

12.1 Universal Plug and Play Overview ................................................................125

12.1.1 How Do I Know If I'm Using UPnP? ......................................................125

14 Table of Contents

P-320W User’s Guide

12.1.2 NAT Traversal .......................................................................................125

12.1.3 Cautions with UPnP ..............................................................................125

12.2 UPnP and ZyXEL ...........................................................................................126

12.3 UPnP Screen .................................................................................................126

12.4 Installing UPnP in Windows Example ............................................................127

12.4.1 Installing UPnP in Windows Me ............................................................127

12.4.2 Installing UPnP in Windows XP ............................................................128

12.5 Using UPnP in Windows XP Example ..........................................................129

12.5.1 Auto-discover Your UPnP-enabled Network Device .............................130

12.5.2 Web Configurator Easy Access ............................................................133

Chapter 13

System .................................................................................................................. 135

13.1 System Overview ...........................................................................................135

13.2 General Screen ..............................................................................................135

13.3 Dynamic DNS .................................................................................................136

13.3.1 DynDNS Wildcard .................................................................................136

13.4 Dynamic DNS Screen ....................................................................................137

13.5 Time Setting Screen .......................................................................................137

Chapter 14

Logs....................................................................................................................... 141

14.1 View Log .......................................................................................................141

14.2 Log Settings ...................................................................................................142

Chapter 15

Tools ...................................................................................................................... 145

15.1 Firmware Upload Screen ...............................................................................145

15.2 Configuration Screen .....................................................................................146

15.2.1 Backup Configuration ...........................................................................147

15.2.2 Restore Configuration ...........................................................................147

15.2.3 Back to Factory Defaults .......................................................................148

15.3 Restart Screen ...............................................................................................148

Chapter 16

Troubleshooting ...................................................................................................151

16.1 Problems Starting Up the Prestige .................................................................151

16.2 Problems with the LAN ...................................................................................151

16.3 Problems with the WAN .................................................................................152

16.4 Problems with the Password ..........................................................................152

16.5 Problems with Remote Management .............................................................153

16.6 Problems Accessing the Prestige ..................................................................153

16.6.1 Pop-up Windows, JavaScripts and Java Permissions ..........................154

Table of Contents 15