This manual is intended for people who want to configure the ZyXEL Device using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
"It is recommended you use the web configurator to configure the ZyXEL
Device.
• Supporting Disc
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
for additional support documentation and product
Disclaimer
Graphics in this book may differ slightly from the product due to differences in operating
systems, operating system versions, or if you installed updated firmware/software for your
device. Every effort has been made to ensure that the information in this manual is accurate.
P-660HN-F1 User’s Guide
3
Page 4
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-660HN-F1 may be referred to as the “ZyXEL Device”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
4
P-660HN-F1 User’s Guide
Page 5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is
not an exact representation of your device.
ZyXEL DeviceComputerNotebook computer
ServerFirewallTelephone
RouterSwitch
P-660HN-F1 User’s Guide
5
Page 6
Safety Warnings
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included a
• This device is for indoor use only (utilisation intérieure exclusivement).
ntenna(s).
6
This product is recyclable. Dispose of it properly.
Figure 93 “Triangle Route” Problem .....................................................................................................169
Figure 94 IP Alias ................................................................................................................................. 170
Introducing the ZyXEL Device (33)
Introducing the Web Configurator (39)
Status Screens (45)
31
Page 32
32
Page 33
CHAPTER 1
Introducing the ZyXEL Device
This chapter introduces the main applications and features of the ZyXEL Device. It also
introduces the ways you can manage the ZyXEL Device.
1.1 Overview
The P-660HN-F1 series are ADSL2+ routers. By integrating DSL and NAT, you are provided
with ease of installation and high-speed, shared Internet access. The P-660HN-F1 is also a
complete security solution with a robust firewall and content filtering.
Please refer to the following description of the product name format.
• “H” denotes an integrated 4-port hub (switch).
• “N” denotes 802.11n draft 2.0. The “N” models support 802.11n wireless connection
mode.
• Models ending in “1”, for example P-660HN-F1, denote a device that works over the
analog telephone system, POTS (Plain Old Telephone Service). Models ending in “3”
denote a device that works over ISDN (Integrated Services Digital Network) or T-ISDN
(UR-2).
1Only use firmware for your ZyXEL Device’s specific model. Refer to the label
on the bottom of your ZyXEL Device.
"All screens displayed in this user’s guide are from the P-660HN-F1 model.
See the product specifications for a full list of features.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
• Web Configurator. This is recommended for everyday management of the ZyXEL Device
using a (supported) web browser.
P-660HN-F1 User’s Guide
33
Page 34
Chapter 1 Introducing the ZyXEL Device
• Command Line Interface. Line commands are mostly used for troubleshooting by service
engineers.
• FTP for firmware upgrades and configuration backup/restore.
• SNMP. The device can be monitored by an SNMP manager. See the SNMP chapter in this
User’s Guide.
• SPTGEN. SPTGEN is a text configuration file that allows you to configure the device by
uploading an SPTGEN file. This is especially convenient if you need to configure many
devices of the same type.
• TR-069. This is an auto-configuration server used to remotely configure your device.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to manage the
ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of
different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an
earlier working configuration may be useful if the device becomes unstable or even
crashes. If you forget your password, you will have to reset the ZyXEL Device to its
factory default settings. If you backed up an earlier configuration file, you would not have
to totally re-configure the ZyXEL Device. You could simply restore your last
configuration.
1.4 Applications for the ZyXEL Device
Here are some example uses for which the ZyXEL Device is well suited.
1.4.1 Internet Access
Your ZyXEL Device provides shared Internet access by connecting the DSL port to the DSL
or MODEM jack on a splitter or your telephone jack. Computers can connect to the ZyXEL
Device’s LAN por ts (or wirelessly).
34
P-660HN-F1 User’s Guide
Page 35
Chapter 1 Introducing the ZyXEL Device
Figure 1 ZyXEL Device’s Router Features
LAN
DSL
You can also configure firewall and content filtering on the ZyXEL Device for secure Internet
access. When the firewall is on, all incoming traffic from the Internet to your network is
blocked unless it is initiated from your network. This means that probes from the outside to
your network are not allowed, but you can safely browse the Internet and download files.
Use content filtering to block access to specific web sites, with URL’s containing keywords
that you specify. You can define time periods and days during which content filtering is
enabled and include or exclude particular computers on your network from content filtering.
For example, you could block access to certain web sites for the kids.
Use QoS to efficiently manage traffic on your network by giving priority to certain types of
traffic and/or to particular computers. For example, you could make sure that the ZyXEL
Device gives voice over Internet calls high priority, and/or limit bandwidth devoted to the
boss’s excessive file downloading.
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 2 LEDs on the Top of the Device
None of the LEDs are on if the ZyXEL Device is not receiving power.
Table 1 LED Descriptions
LEDCOLOR STATUSDESCRIPTION
POWERGreenOnThe ZyXEL Device is receiving power and ready for use.
RedOnThe ZyXEL Device detected an error while self-testing, or there is
BlinkingThe ZyXEL Device is self-testing.
a device malfunction.
OffThe ZyXEL Device is not receiving power.
P-660HN-F1 User’s Guide
35
Page 36
Chapter 1 Introducing the ZyXEL Device
Table 1 LED Descriptions
LEDCOLOR STATUSDESCRIPTION
ETHERNET
1-4
WLAN/WPS GreenOnThe wireless network is activated.
DSLGreenOnThe DSL line is up.
INTERNETGreenOnThe ZyXEL Device has an IP connection but no traffic.
GreenOnThe ZyXEL Device has an Ethernet connection with a device on
BlinkingThe ZyXEL Device is sending/receiving data to /from the LAN.
OffThe ZyXEL Device does not have an Ethernet connection with
BlinkingThe ZyXEL Device is communicating with other wireless clients.
OrangeBlinkingThe ZyXEL Device is setting up a WPS connection.
OffThe wireless network is not activated.
BlinkingThe ZyXEL Device is initializing the DSL line.
OffThe DSL line is down.
BlinkingThe ZyXEL Device is sending or receiving IP traffic.
RedOnThe ZyXEL Device attempted to make an IP connection but
OffThe ZyXEL Device does not have an IP connection.
the Local Area Network (LAN).
the LAN.
Y our device has a W AN IP address (either static or assigned by a
DHCP server), PPP negotiation was successfully completed (if
used) and the DSL connection is up.
failed. Possible causes are no response from a DHCP server, no
PPPoE response, PPPoE authentication failed.
Refer to the Quick Start Guide for information on hardware connections.
1.6 The RESET Button
If you forget your password or cannot access the web configurator, you will need to use the
RESET button at the back of the device to reload the factory-default configuration file. This
means that you will lose all configurations that you had previously and the password will be
reset to “1234”. You can also use the
1.6.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking).
2 To set the device back to the factory default settings, press the RESET button for ten
seconds or until the POWER LED begins to blink and then release it. When the
POWER LED begins to blink, the defaults have been restored and the device restarts.
1.7 The WPS WLAN Button
You can use the WPS WLAN ON/OFF button () on the top of the device to turn the
wireless LAN off or on. You can also use it to activate WPS in order to quickly set up a
wireless network with strong security.
36
P-660HN-F1 User’s Guide
Page 37
Chapter 1 Introducing the ZyXEL Device
1.7.1 Turn the Wireless LAN Off or On
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN ON/OFF button for less than five seconds and release it. The
WLAN/WPS LED should change from on to off or vice versa.
1.7.2 Activate WPS
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN ON/OFF button for five to ten seconds and release it. Press the
WPS button on another WPS -enabled device within range of the ZyXEL Device. The
WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS connection
with the wireless device.
"You must activate WPS in the ZyXEL Device and in another wireless device
within two minutes of each other. See Section 7.9.8 on page 128 for more
information.
P-660HN-F1 User’s Guide
37
Page 38
Chapter 1 Introducing the ZyXEL Device
38
P-660HN-F1 User’s Guide
Page 39
CHAPTER 2
Introducing the Web
Configurator
2.1 Overview
The web configurator is an HTML-based management interface that allows easy device setup
and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape
Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
See Appendix B on page 343 if you need to make sure these functions are allowed in Internet
Explorer.
2.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start
Guide).
2 Launch your web browser.
3 Type "192.168.1.1" as the URL.
4 A password screen displays. The ZyXEL Device has a dual login system. The default
non-readable characters represents the user password (user by default). Clicking Login
without entering any password brings you to the system’s status screen. To access the
administrative web configurator and manage the ZyXEL Device, type the admin
password (1234 by default) in the password screen and click Login. Click Cancel to
revert to the default user password in the password field. If you have changed the
password, enter your password and click Login.
P-660HN-F1 User’s Guide
39
Page 40
Chapter 2 Introducing the Web Configurator
Figure 3 Password Screen
5 The following screen displays if you have not yet changed your password. It is strongly
recommended you change the default password. Enter a new password, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the main menu if you
do not want to change the password now.
Figure 4 Change Password Screen
6 The following screen displays if you have not replaced the factory default certificate.
Click Apply to create a specific certificate for the device using your computer’s MAC
address.
"For security reasons, the ZyXEL Device automatically logs you out if you do
not use the web configurator for five minutes (default). If this happens, log in
again.
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - navigation panel
• C - main window
• D - status bar
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
B
C
D
P-660HN-F1 User’s Guide
41
Page 42
Chapter 2 Introducing the Web Configurator
The icons provide the following functions.
Table 2 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Help: Click this icon to open up help screens.
Wizards: Click this icon to go to the configuration wizards. See Chapter 4 on page
53 for more information.
Logout: Click this icon to log out of the web configurator.
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL Device
features. The following tables describe each menu item.
Table 3 Navigation Panel Summary
LINKTABFUNCTION
StatusThis screen shows the ZyXEL Device’s general device and network status
information. Use this screen to access the statistics and client list.
Network
WANInternet Access
Setup
More
Connections
WAN Backup
Setup
LANIPUse this screen to configure LAN TCP/IP settings, enable Any IP and other
DHCP SetupUse this screen to configure LAN DHCP settings.
Client ListUse this screen to view current DHCP client information and to always
IP AliasUse this screen to partition your LAN interface into subnets.
Wireless LANAPUse this screen to configure the wireless LAN settings and WLAN
More APUse this screen to configure multiple BSSs on the ZyXEL Device.
WPS StationUse this screen to enable WPS (Wi-Fi Protected Setup) and set up your
WDSUse this screen to set up Wireless Distribution System links to other access
QoSUse this screen to enable or disable Quality of Service (QoS).
SchedulingUse this screen to configure the dates/times to enable or disable the
NATGeneralUse this screen to enable NAT.
Port ForwardingUse this screen to make your localservers visible to the outside world.
ALGUse this screen to enable or disable SIP ALG.
Security
Use this screen to configure ISP parameters, WAN IP address assignment,
DNS servers and other advanced properties.
Use this screen to configure additional WAN connections.
Use this screen to configure a backup gateway.
advanced properties.
assign specific IP addresses to individual MAC addresses (and host
names).
authentication/security settings.
wireless network.
points.
wireless LAN.
42
P-660HN-F1 User’s Guide
Page 43
Chapter 2 Introducing the Web Configurator
Table 3 Navigation Panel Summary
LINKTABFUNCTION
FirewallGeneralUse this screen to activate/deactivate the firewall and the default action to
take on network traffic going in specific directions.
RulesT his screen shows a summary of the firewall rules, and allows you to edit/
add a firewall rule.
ThresholdUse this screen to configure the thresholds for determining when to drop
sessions that do not become fully established.
Content FilterKeywordUse this screen to block access to web sites containing certain keywords in
the URL.
ScheduleUse this screen to set the days and times for your device to perform content
TrustedUse this screen to exclude a range of users on the LAN from content
Packet FilterUse this screen to configure the rules for protocol and generic filter sets.
CertificatesMy CertificatesUse this screen to generate and export self-signed certificates or
Trusted CAsUse this screen to save CA certificates to the ZyXEL Device.
Trusted Remote
Hosts
Directory
Servers
Advanced
Static RouteUse this screen to configure IP static routes to tell your device about
802.1Q/1PGroup SettingUse this screen to activate 802.1Q/1P, specify the management VLAN
Port SettingUse this screen to configure the PVID and assign traffic priority for each
QoSGeneralUse this screen to enable QoS and traffic prioritizing, and configure
Class Setup
MonitorUse this screen to view each queue’s statistics.
Dynamic DNSThis screen allows you to use a static hostname alias for a dynamic IP
Remote MGMT WWWUse this screen to configure through which interface(s) and from which IP
TelnetUse this screen to configure through which interface(s) and from which IP
FTPUse this screen to configure through which interface(s) and from which IP
SNMPUse this screen to configure your ZyXEL Device’s settings for Simple
DNSUse this screen to configure through which interface(s) and from which IP
ICMPUse this screen to set whether or not your device will respond to pings and
filtering.
filtering.
certification requests and import the ZyXEL Device’s CA-signed certificates.
Use this screen to import self-signed certificates.
Use this screen to configure a list of addresses of directory servers (that
contain lists of valid and revoked certificates).
networks beyond the directly connected remote nodes.
group, display the VLAN groups and configure the settings for each VLAN
group.
port.
bandwidth management on the WAN.
Use this screen to define a classifier.
address.
address(es) users can use HTTP to manage the ZyXEL Device.
address(es) users can use Telnet to manage the ZyXEL Device.
address(es) users can use FTP to access the ZyXEL Device.
Network Management Protocol management.
address(es) users can send DNS queries to the ZyXEL Device.
probes for services that you have not ma de ava i l ab l e.
P-660HN-F1 User’s Guide
43
Page 44
Chapter 2 Introducing the Web Configurator
Table 3 Navigation Panel Summary
LINKTABFUNCTION
UPnPGeneralUse this screen to turn UPnP on or off.
Maintenance
SystemGeneralUse this screen to configure your device’s name, domain name,
management inactivity timeout and password.
Time SettingUse this screen to change your ZyXEL Device’s time and date.
LogsView LogUse this screen to display your device’s logs.
Log SettingsUse this screen to select which logs and/or immediate alerts your device is
to record. You can also set it to e-mail the logs to you.
ToolsFirmwareUse this screen to upload firmware to your device.
ConfigurationUse this screen to backup and restore your device’s configuration (settings)
or reset the factory default settings.
RestartThis screen allows you to reboot the ZyXEL Device without turning the
DiagnosticGeneralUse this screen to test the connections to other devices.
DSL LineThese screen displays information to help you identify problems with the
power off.
DSL connection.
2.2.3 Main Window
The main window displays information and configuration fields. It is discussed in the rest of
this document.
Right after you log in, the Status screen is displayed. See Chapter 3 on page 45 for more
information about the Status screen.
2.2.4 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration has been
updated.
44
P-660HN-F1 User’s Guide
Page 45
CHAPTER 3
Status Screens
3.1 Overview
Use the Status screens to look at the current status of the device, system resources, and
interfaces (LAN and WAN). The Status screen also provides detailed information from Any
IP and DHCP and statistics from bandwidth management, and traffic.
3.2 The Status Screen
Use this screen to view the status of the ZyXEL Device. Click Status to open this screen.
Figure 7 Status Screen
Each field is described in the following table.
Table 4 Status Screen
LABELDESCRIPTION
Refresh IntervalEnter how often you want the ZyXEL Device to update this screen.
ApplyClick this to update this screen immediately.
P-660HN-F1 User’s Guide
45
Page 46
Chapter 3 Status Screens
Table 4 Status Screen
LABELDESCRIPTION
Device Information
Host NameThis field displays the ZyXEL Device system name. It is used for identification. You
Model
Number
MAC AddressThis is the MAC (Media Access Control) or Ethernet address unique to your
ZyNOS
Firmware
Version
DSL Firmware
Version
WAN Information
DSL ModeThis is the DSL standard that your ZyXEL Device is using.
IP AddressThis field displays the current IP address of the ZyXEL Device in the WAN. Click
IP Subnet
Mask
Default
Gateway
VPI/VCIThis is the Virtual Path Identifier and Virtual Channel Identifier that you entered in
LAN Information
IP AddressThis field displays the current IP address of the ZyXEL Device in the LAN. Click
IP Subnet
Mask
DHCPThis field displays what DHCP services the ZyXEL Device is providing to the LAN.
WLAN
Information
SSIDThis is the descriptive name used to identify the ZyXEL Device in a wireless LAN.
ChannelThis is the channel number used by the ZyXEL Device now.
SecurityThis displays the type of security mode the ZyXEL Device is using in the wireless
WPSThis displays whether WPS is activated. Click this to go to the screen where you
StatusThis displays whether WLAN is activated.
Security
can change this in the Maintenance > System > General screen’s System Name
field.
This is the model name of your device.
ZyXEL Device.
This field displays the current version of the firmware inside the device. It also
shows the date the firmware version was created. Click this to go to the screen
where you can change it.
This field displays the current version of the device’s DSL modem code.
this to go to the screen where you can change it.
This field displays the current subnet mask in the WAN.
This is the IP address of the default gateway, if applicable.
the wizard or WAN screen.
this to go to the screen where you can change it.
This field displays the current subnet mask in the LAN.
Choices are:
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP addresses
to other computers in the LAN.
Relay - The ZyXEL Device acts as a surrogate DHCP server and relays DHCP
requests and responses between the remote server and the clients.
None - The ZyXEL Device is not providing any DHCP services to the LAN.
Click this to go to the screen where you can change it.
Click this to go to the screen where you can change it.
LAN.
can configure the settings.
46
P-660HN-F1 User’s Guide
Page 47
Chapter 3 Status Screens
Table 4 Status Screen
LABELDESCRIPTION
FirewallThis displays whether or not the ZyXEL Device’s firewall is activated. Click this to
go to the screen where you can change it.
Content FilterThis displays whether or not the ZyXEL Device’s content filtering is activated. Click
this to go to the screen where you can change it.
System Status
System
Uptime
Current Date/
Time
System ModeThis displays whether the ZyXEL Device is functioning as a router or a bridge.
CPU UsageThis field displays what percentage of the ZyXEL Device’s processing ability is
Memory
Usage
Interface Status
InterfaceThis column displays each interface the ZyXEL Device has.
StatusThis field indicates whether or not the ZyXEL Device is using the interface.
RateFor the LAN interface, this displays the port speed and duplex setting.
Summary
Client ListClick this link to view current DHCP client information. See Section 6.4 on page
AnyIP TableClick this link to view a list of IP addresses and MAC addresses of computers,
WLAN StatusClick this link to display the MAC address(es) of the wireless stations that are
Packet
Statistics
This field displays how long the ZyXEL Device has been running since it last
started up. The ZyXEL Device starts up when you plug it in, when you restart it
(Maintenance > Tools > Restart), or when you reset it.
This field displays the current date and time in the ZyXEL Device. Y ou can change
this in Maintenance > System > Time Setting.
currently used. When this percentage is close to 100%, the ZyXEL Device is
running at full load, and the throughput is not going to improve anymore. If you
want some applications to have more throughput, you should turn off other
applications (for example, using QoS; see Chapter 15 on page 227).
This field displays what percentage of the ZyXEL Device’s memory is currently
used. Usually, this percentage should not increase much. If memory usage does
get close to 100%, the ZyXEL Device is probably becoming unstable, and you
should restart the device. See Section 21.4 on page 299, or turn off the device
(unplug the power) for a few seconds.
For the DSL interface, this field displays Down (line is down), Up (line is up or
connected) if you're using Ethernet encapsulation and Down (line is down), Up
(line is up or connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and
Drop (dropping a call) if you're using PPPoE encapsulation.
For the LAN interface, this field displays Up when the ZyXEL Device is using the
interface and Down when the ZyXEL Device is not using the interface.
For the WLAN interface, it displays Active when WLAN is enabled or InActive
when WLAN is disabled.
For the DSL interface, it displays the downstream and upstream transmission rate.
For the WLAN interface, it displays the maximum transmission rate when WLAN is
enabled or N/A when WLAN is disabled.
95.
which are not in the same subnet as the ZyXEL Device. See Section 3.3 on page
48.
currently associating with the ZyXEL Device. See Section 3.4 on page 48.
Click this link to view port status and packet specific statistics. See Section 3.5 on
page 48.
P-660HN-F1 User’s Guide
47
Page 48
Chapter 3 Status Screens
3.3 Client List
See Section 6.4 on page 95 for information on this screen.
3.4 WLAN Status
Use this screen to view the wireless stations that are currently associated to the ZyXEL
Device. Click Status > WLAN Status to access this screen.
Figure 8 WLAN Status
The following table describes the labels in this screen.
Table 5 WLAN Status
LABEL DESCRIPTION
# This is the index number of an associated wireless station.
MAC AddressThis field displays the MAC (Media Access Control) address of an associated
Association
TIme
RefreshClick this to reload this screen.
wireless station.
This field displays the time a wireless station first associated with the ZyXEL Device.
3.5 Packet Statistics
Read-only information here includes port status and packet specific statistics. Also provided
are "system up time" and "poll interval(s)". The Poll Interval(s) field is configurable. Click Status > Packet Statistics to access this screen.
48
P-660HN-F1 User’s Guide
Page 49
Figure 9 Packet Statistics
Chapter 3 Status Screens
The following table describes the fields in this screen.
Table 6 Packet Statistics
LABELDESCRIPTION
System Monitor
System up TimeThis is the elapsed time the system has been up.
Current Date/TimeThis field displays your ZyXEL Device’s presentdate and time.
CPU UsageThis field specifies the percentage of CPU utilization.
Memory UsageThis field specifies the percentage of memory utilization.
WAN Port Statistics
Link StatusThis is the status of your WAN link.
WAN IP Addr essThis is the IP address of the ZyXEL Device’s WAN port.
Upstream SpeedThis is the upstream speed of your ZyXEL Device.
Downstream Speed This is the downstream speed of your ZyXEL Device.
Node-LinkThis field displays the remote node index number and link type. Link types are
PPPoA, ENET, RFC 1483 and PPPoE.
StatusThis field displays Down (line is down), Up (line is up or connected) if you're
using Ethernet encapsulation and Down (line is down), Up (line is up or
connected), Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you're using PPPoE encapsulation.
TxPkts This field displays the number of packets transmitted on this port.
RxPkts This field displays the number of packets received on this port.
ErrorsThi s field displays the number of error packets on this port.
Tx B/s This field displays the number of bytes transmitted in the last second.
P-660HN-F1 User’s Guide
49
Page 50
Chapter 3 Status Screens
Table 6 Packet Statistics (continued)
LABELDESCRIPTION
Rx B/sThis field displays the number of bytes received in the last second.
Up Time This field displays the elapsed time this port has been up.
LAN Port Statistics
InterfaceThis field displays either Ethernet (LAN ports) or Wireless (WLAN port).
StatusFor the LAN ports, this field displays Down (line is down) or Up (line is up or
TxPktsThis field displays the number of packets transmitted on this interface.
RxPktsThis field displays the number of packets received on this interface.
CollisionsThis is the number of collisions on this interfaces.
Poll Interval(s)Type the time interval for the browser to refresh system statistics.
Set IntervalClick this to apply the new poll interval you entered in the Poll Interval field
StopClick this to halt the refreshing of the system statistics.
connected).
For the WLAN port, it displays the transmission rate when WLAN is enabled or
N/A when WLAN is disabled.
above.
3.6 Any IP Table
Click Status > AnyIP Table to access this screen. Use this screen to view the IP address and
MAC address of each computer that is using the ZyXEL Device but is in a different subnet
than the ZyXEL Device.
Figure 10 Any IP Table
Each field is described in the following table.
Table 7 Any IP Table
LABELDESCRIPTION
#This field is a sequential value. It is not associated with a specific entry.
IP AddressThis field displays the IP address of each computer that is using the ZyXEL Device
MAC Address
Refresh
but is in a different subnet than the ZyXEL Device.
This field displays the MAC address of the computer that is using the ZyXEL
Device but is in a different subnet than the ZyXEL Device.
Click this to update this screen.
50
P-660HN-F1 User’s Guide
Page 51
PART II
Wizard
Internet and Wireless Setup Wizard (53)
51
Page 52
52
Page 53
CHAPTER 4
Internet and Wireless Setup
Wizard
4.1 Overview
Use the wizard setup screens to configure your system for Internet access with the information
given to you by your ISP.
"See the advanced menu chapters for background information on these fields.
4.2 Internet Access Wizard Setup
1 After you enter the password to access the web configurator, select Go to Wizard setup
and click Apply. Otherwise, click the wizard icon () in the top right corner of the
web configurator to go to the wizards.
Figure 11 Select a Mode
2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and
wireless connection.
P-660HN-F1 User’s Guide
53
Page 54
Chapter 4 Internet and Wireless Setup Wizard
Figure 12 Wizard Welcome
3 Your ZyXEL device attempts to detect your DSL connection and your connection type.
3a The following screen appears if a connection is not detected. Check your hardware
connections and click Restart the INTERNET/WIRELESS SETUP Wizard to
return to the wizard welcome screen. If you still cannot connect, click Manually configure your Internet connection. Follow the directions in the wizard and enter
your Internet setup information as provided to you by your ISP. See Section 4.2.1
on page 55 for more details.
If you would like to skip your Internet setup and configure the wireless LAN
settings, leave Yes selected and click Next.
Figure 13 Auto Detection: No DSL Connection
3b The following screen displays if a PPPoE or PPPoA connection is detected. Enter
your Internet account information (username, password and/or service name)
exactly as provided by your ISP. Then click Next and see Section 4.3 on page 60 for
wireless connection wizard setup.
54
P-660HN-F1 User’s Guide
Page 55
Chapter 4 Internet and Wireless Setup Wizard
Figure 14 Auto-Detection: PPPoE
3c The following screen appears if the ZyXEL device detects a connection but not the
connection type. Click Nextand refer to Section 4.2.1 on page 55 on how to
manually configure the ZyXEL Device for Internet access.
Figure 15 Auto Detection: Failed
4.2.1 Manual Configuration
1 If the ZyXEL Device fails to detect your DSL connection type but the physical line is
connected, enter your Internet access information in the wizard screen exactly as your
service provider gave it to you. Leave the defaults in any fields for which you were not
given information.
P-660HN-F1 User’s Guide
55
Page 56
Chapter 4 Internet and Wireless Setup Wizard
Figure 16 Internet Access Wizard Setup: ISP Parameters
The following table describes the fields in this screen.
Table 8 Internet Access Wizard Setup: ISP Parameters
LABELDESCRIPTION
ModeSelect Routing (default) from the drop-down list box if your ISP give you one IP
address only and you want multiple computers to share an Internet account. Select
Bridge when your ISP provides you more than one IP address and you want the
connected computers to get individual IP address from ISP’s DHCP server directly. If
you select Bridge, you cannot use Firewall, DHCP server and NAT on the ZyXEL
Device.
EncapsulationSelect the encapsulation type your ISP uses from the Encapsulation drop-down list
box. Choices vary depending on what you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or
PPPoE.
MultiplexingSelect the multiplexing method used by your ISP from the Multiplex drop-down list
box either VC-based or LLC-based.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
VPIE nter the VPI assigned to you. This field may already be configured.
VCIEnter the VCI assigned to you. This field may already be configured.
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen. The next wizard screen you see
ExitClick this to close the wizard screen without saving.
Refer to the appendix for more information.
depends on what protocol you chose above.
56
P-660HN-F1 User’s Guide
Page 57
Chapter 4 Internet and Wireless Setup Wizard
2 The next wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to
continue. See Section 4.3 on page 60 for wireless connection wizard setup
Figure 17 Internet Connection with PPPoE
The following table describes the fields in this screen.
Table 9 Internet Connection with PPPoE
LABELDESCRIPTION
User NameEnter the user name exactly as your ISP assigned. If assigned a name in the form
user@domain where domain identifies a service name, then enter both components
exactly as given.
PasswordEnter the password associated with the user name above.
Service Name Type the name of your PPPoE service here.
BackClick this to return to the previous screen without saving.
ApplyClick this to save your changes.
ExitClick this to close the wizard screen without saving.
Figure 18 Internet Connection with RFC 1483
P-660HN-F1 User’s Guide
57
Page 58
Chapter 4 Internet and Wireless Setup Wizard
The following table describes the fields in this screen.
Table 10 Internet Connection with RFC 1483
LABELDESCRIPTION
IP AddressThis field is available if you select Routing in the Mode field.
Type your ISP assigned IP address in this field.
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen.
ExitClick this to close the wizard screen without saving.
Figure 19 Internet Connection with ENET ENCAP
58
The following table describes the fields in this screen.
Table 11 Internet Connection with ENET ENCAP
LABELDESCRIPTION
Obtain an IP
Address
Automatically
Static IP
Address
IP AddressEnter your ISP assigned IP address.
Subnet MaskEnter a subnet mask in dotted decimal notation.
Gateway IP
address
First DNS
Server
Second DNS
Server
BackClick this to return to the previous screen without saving.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not
fixed; the ISP assigns you a different one each time you connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address.
Select Static IP Address if your ISP gave you an IP address to use.
Refer to the appendix to calculate a subnet mask If you are implementing subnetting.
You must specify a gateway IP address (supplied by your ISP) when you use ENET
ENCAP in the Encapsulation field in the previous screen.
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP
clients along with the IP address and the subnet mask.
As above.
P-660HN-F1 User’s Guide
Page 59
Chapter 4 Internet and Wireless Setup Wizard
Table 11 Internet Connection with ENET ENCAP (continued)
LABELDESCRIPTION
ApplyClick this to save your changes.
ExitClick this to close the wizard screen without saving.
Figure 20 Internet Connection with PPPoA
The following table describes the fields in this screen.
Table 12 Internet Connection with PPPoA
LABELDESCRIPTION
User NameEnter the login name that your ISP gives you.
PasswordEnter the password associated with the user name above.
BackClick this to return to the previous screen without saving.
ApplyClick this to save your changes.
ExitClick this to close the wizard screen without saving.
• If the user name and/or password you entered for PPPoE or PPPoA connection are not
correct, the screen displays as shown next. Click Back to Username and Password setup
to go back to the screen where you can modify them.
P-660HN-F1 User’s Guide
59
Page 60
Chapter 4 Internet and Wireless Setup Wizard
Figure 21 Connection Test Failed-1
• If the following screen displays, check if your account is activated or click Restart the
Internet/Wireless Setup Wizard to verify your Internet access settings.
Figure 22 Connection Test Failed-2.
4.3 Wireless Connection Wizard Setup
After you configure the Internet access information, use the following screens to set up your
wireless LAN.
1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to
Step 6.
60
P-660HN-F1 User’s Guide
Page 61
Chapter 4 Internet and Wireless Setup Wizard
Figure 23 Connection Test Successful
2 Use this screen to activat e the wireless LAN. Click Next to continue.
Figure 24 Wireless LAN Setup Wizard 1
The following table describes the labels in this screen.
Table 13 Wireless LAN Setup Wizard 1
LABELDESCRIPTION
ActiveSelect the check box to turn on the wireless LAN.
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen.
ExitClick this to close the wizard screen without saving.
3 Configure your wireless settings in this screen. Click Next.
P-660HN-F1 User’s Guide
61
Page 62
Chapter 4 Internet and Wireless Setup Wizard
Figure 25 Wireless LAN
The following table describes the labels in this screen.
Table 14 Wireless LAN Setup Wizard 2
LABELDESCRIPTION
Network
Name(SSID)
Channel
Selection
SecuritySelect Manually assign a WPA-PSK key to configure a Pre-Shared Key (WP A-PSK).
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen.
ExitClick this to close the wizard screen without saving.
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless
LAN.
If you change this field on the ZyXEL Device, make sure all wireless stations use the
same SSID in order to access the network.
The range of radio frequencies used by IEEE 802.11b/g wireless devices is called a
channel. Select a channel ID that is not already in use by a neighboring device.
Choose this option only if your wireless clients support WPA. See Sectio n 4.3.1 on
page 63 for more information.
Select Manually assign a WEP key to configure a WEP Key. See Section 4.3.2 on
page 63 for more information.
Select Disable wireless security to have no wireless LAN security configured and
your network is accessible to any wireless networking device that is within range.
"The wireless stations and ZyXEL Device must use the same SSID, channel ID
and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is
enabled) for wireless communication.
4 This screen varies depending on the security mode you selected in the previous screen.
Fill in the field (if available) and click Next.
62
P-660HN-F1 User’s Guide
Page 63
4.3.1 Manually Assign a WPA-PSK key
Choose Manually assign a WPA-PSK key in the Wireless LAN setup screen to set up a PreShared Key.
Figure 26 Manually Assign a WPA-PSK key
The following table describes the labels in this screen.
Table 15 Manually Assign a WPA-PSK key
LABELDESCRIPTION
Pre-Shared
Key
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen.
ExitClick this to close the wizard screen without saving.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure
wireless connection by configuring WPA in the wireless LAN screens. You need to
configure an authentication server to do this.
Chapter 4 Internet and Wireless Setup Wizard
4.3.2 Manually Assign a WEP Key
Choose Manually assign a WEP key to setup WEP Encryption parameters.
Figure 27 Manually Assign a WEP key
P-660HN-F1 User’s Guide
63
Page 64
Chapter 4 Internet and Wireless Setup Wizard
The following table describes the labels in this screen.
Table 16 Manually Assign a WEP key
LABELDESCRIPTION
Key The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless
BackClick this to return to the previous screen without saving.
NextClick this to continue to the next wizard screen.
ExitClick this to close the wizard screen without saving.
5 Click Apply to save your wireless LAN settings.
Figure 28 Wireless LAN Setup 3
stations must use the same WEP key for data transmission.
Enter any 5 or 13 ASCII characters, or 10 or 26 hexadecimal characters ("0-9", "A-F")
for a 64-bit or 128-bit WEP key respectively.
6 Use the read-only summary table to check whether what you have configured is correct.
Click Finish to complete and save the wizard setup.
"No wireless LAN settings display if you chose not to configure wireless LAN
settings.
64
P-660HN-F1 User’s Guide
Page 65
Chapter 4 Internet and Wireless Setup Wizard
Figure 29 Internet Access and WLAN Wizard Setup Complete
7 Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the rest of this guide for more detailed information on the complete
range of ZyXEL Device features. If you cannot access the Internet, open the web
configurator again to confirm that the Internet settings you configured in the wizard
setup are correct.
P-660HN-F1 User’s Guide
65
Page 66
Chapter 4 Internet and Wireless Setup Wizard
66
P-660HN-F1 User’s Guide
Page 67
PART III
Network
WAN Setup (69)
LAN Setup (89)
Wireless LAN (105)
Network Address Translation (NAT) (135)
67
Page 68
68
Page 69
CHAPTER 5
WAN Setup
5.1 Overview
This chapter describes how to configure WAN settings from the WAN screens. Use these
screens to configure your ZyXEL Device for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another network or the
Internet. It connects your private networks (such as a LAN (Local Area Network) and other
networks, so that a computer in one location can communicate with computers in other
locations.
Figure 30 LAN and WAN
LAN
5.1.1 What You Can Do in the WAN Screens
• Use the Internet Access Setup screen (Section 5.2 on page 70) to configure the WAN
settings on the ZyXEL Device for Internet access.
• Use the More Connections screen (Section 5.3 on page 75) to set up additional Internet
access connections.
• Use the WAN Backup Setup screen (Section 5.4 on page 80) to set up a backup gateway
that helps forward traffic to its destination when the default WAN connection is down.
5.1.2 What You Need to Know About WAN
Encapsulation Method
WAN
Encapsulation is used to include data from an upper layer protocol into a lower layer protocol.
To set up a WAN connection to the Internet, you need to use the same encapsulation method
used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection
using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and
password (and service name) for user authentication.
P-660HN-F1 User’s Guide
69
Page 70
Chapter 5 WAN Setup
WAN IP Address
The WAN IP address is an IP address for the ZyXEL Device, which makes it accessible from
an outside network. It is used by the ZyXEL Device to communicate with other devices in
other networks. It can be static (fixed) or dynamically assigned by the ISP each time the
ZyXEL Device tries to access the Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask
and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET
ENCAP encapsulation method).
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to
a group of hosts on the network - not everybody and not just one.
IGMP
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a Multicast group - it is not used to carry user data. There are three versions of
IGMP. IGMP version 2 is an improvement over version 1, but IGMP version 1 is still in wide
use. IGMP version 3 supports source filtering, reporting or ignoring traffic from specific
source address to a particular host on the network.
Finding Out More
See Section 5.5 on page 82 for technical background information on WAN.
5.1.3 Before You Begin
You need to know your Internet access settings such as encapsulation and WAN IP address.
Get this information from your ISP.
5.2 The Internet Access Setup Screen
Use this screen to change your ZyXEL Device’s WAN settings. Click Network > WAN >
Internet Access Setup. The screen differs by the WAN type and encapsulation you select.
70
P-660HN-F1 User’s Guide
Page 71
Figure 31 Network > WAN >Internet Access Setup (PPPoE)
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 17 Network > WAN > Internet Access Setup
LABELDESCRIPTION
Line
ModulationSelect the modulation supported by your ISP .
General
P-660HN-F1 User’s Guide
Use Multi Mode if you are not sure which mode to choose from. The ZyXEL
Device dynamically diagnoses the mode supported by the ISP and selects the
best compatible one for your connection.
Other options are ADSL G.dmt, ADSL2, ADSL2+, ADSL2 AnnexM, ADSL2+
AnnexM, READSL2 Mode and ANSI T1.413.
71
Page 72
Chapter 5 WAN Setup
Table 17 Network > WAN > Internet Access Setup (continued)
LABELDESCRIPTION
ModeSelect Routing (default) from the drop-down list box i f your ISP gives you one IP
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down list
User Name(PPPoA and PPPoE encapsulation only) Enter the user name exactly as your
Password(PPPoA and PPPoE encapsulation only) Enter the password associated with the
Service Name(PPPoE only) Type the name of your PPPoE service here.
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
Virtual Circuit IDVPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThi s option is available if you select Routing in the Mode field.
Subnet Mask This option is available if you select ENET ENCAP in the Encapsulation field.
Gateway IP
address
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
Connection (PPPoA and PPPoE encapsulation only)
address only and you want multiple computers to share an Internet account.
Select Bridge when your ISP provides you more than one IP address and you
want the connected computers to get individual IP address from ISP’s DHCP
server directly. If you select Bridge, you cannot use Firewall, DHCP server and
NAT on the ZyXEL Device.
box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
ISP assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as given.
user name above.
Choices are VC or LLC.
This field is not available if you set the WAN type to Ethernet.
circuit. Refer to the appendix for more information.
These fields are not available if you set the WAN type to Ethernet.
management of ATM traffic). Enter the VCI assigned to you.
A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is
not fixed; the ISP assigns you a different one each time you connect to the
Internet.
Select Obtain an IP Address Automatically if you have a dynamic IP address;
otherwise select Static IP Address and type your ISP assigned IP address in
the IP Address field below.
Enter a subnet mask in dotted decimal notation.
This option is available if you select ENET ENCAP in the Encapsulation field.
Specify a gateway IP address (supplied by your ISP).
Select ObtainedFrom ISP if your ISP dynamically assigns DNS server
information (and the ZyXEL Device's WAN IP address) and you select Obtain an IP Address Automatically.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave
the IP address set to 0.0.0.0, User-Defined changes to None after you click
Apply. If you set a second choice to User-Defined, and enter the same IP
address, the second User-Defined changes to None after you click Apply.
Select None if you do not want to configure DNS servers. You must have
another DNS server on your LAN, or else the computers must have their DNS
server addresses manually configured. If you do not configure a DNS server,
you must know the IP address of a computer in order to access it.
72
P-660HN-F1 User’s Guide
Page 73
Table 17 Network > WAN > Internet Access Setup (continued)
LABELDESCRIPTION
Nailed-Up
Connection
Connect on
Demand
Max Idle TimeoutS pecify an idle time-out in the Max Idle Timeout field when you select Connect
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Advanced SetupClick this to display the Advanced WAN Setup screen and edit more details of
Select Nailed-Up Connection when you want your connection up all the time.
The ZyXEL Device will try to bring up the connection automatically if it is
disconnected.
Select Connect on Demand when you don't want the connection up all the time
and specify an idle time-out in the Max Idle Timeout field.
on Demand. The default setting is 0, which means the Internet session will not
timeout.
your WAN setup.
5.2.1 Advanced Internet Access Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the Internet Access Setup screen. The screen appears as shown.
Chapter 5 WAN Setup
Figure 32 Network > WAN > Internet Access Setup: Advanced Setup
P-660HN-F1 User’s Guide
73
Page 74
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 18 Network > WAN > Internet Access Setup: Advanced Setup
LABELDESCRIPTION
RIP & Multicast
Setup
RIP DirectionRIP (Routing Information Protocol) allows a router to exchange routing
RIP VersionThis field is not configu rable if you select None in the RIP Direction field.
MulticastMulticast packets are sent to a group of computers on the LAN and are an
ATM QoS
ATM QoS TypeSelect CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak
Sustain Cell
Rate
Maximum Burst
Size
PPPoE
Passthrough
(PPPoE
encapsulation only)
MTU
MTUThe Maximum Transmission Unit (MTU) defines the size of the largest packet
Packet Filter
Incoming Filter Sets
This section is not available when you configure the ZyXEL Device to be in
bridge mode.
information with other routers. Use this field to control how much routing
information the ZyXEL Device sends and receives on the subnet.
Select the RIP direction from None, Both, In Only and Out Only.
Select the RIP version from RIP-1, RIP-2B and RIP-2M.
alternative to unicast packets (packets sent to one computer) and broadcast
packets (packets sent to every computer).
Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to
establish membership in a multicast group. The ZyXEL Device supports IGMP-v1, IGMP-v2 and IGMP-v3. Select None to disable it.
voice or data traffic. Select UBR (Unspecified Bit Rate) for applications that are
non-time sensitive, such as e-mail. Select VBR-RT (real-time Variable Bit Rate)
type for applications with bursty connections that require closely controlled delay
and delay variation. Select VBR-nRT (non real-time Variable Bit Rate) type for
connections that do not require closely controlled delay and delay variation.
Cell Rate (PCR). This is the maximum rate at which the sender can send cells.
Type the PC R h ere .
The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be
transmitted. Type the SCR, which must be less than the PCR. Note that system
default is 0 cells/sec.
Maximum Burst Size (MBS) refers to the maximum number of cells that can be
sent at the peak rate. Type the MBS, which is less than 65535.
This field is available when you select PPPoE encapsulation.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE
pass through to allow up to ten hosts on the LAN to use PPPoE client software
on their computers to connect to the ISP via the ZyXEL Device. Each host can
have a separate account and a public WAN IP address.
PPPoE pass through is an alternative to NAT for application where NAT is not
appropriate.
Disable PPPoE pass through if you do not need to allow hosts on the LAN to use
PPPoE client software on their computers to connect to the ISP.
allowed on an interface or connection. Enter the MTU in this field.
For ENET ENCAP, the MTU value is 1500.
For PPPoE, the MTU value is 1492.
For PPPoA and RFC 1483, the MTU is 65535.
74
P-660HN-F1 User’s Guide
Page 75
Chapter 5 WAN Setup
Table 18 Network > WAN > Internet Access Setup: Advanced Setup (continued)
LABELDESCRIPTION
Protocol FilterSelect the protocol filter(s) to control incoming traffic. You may choose up to 4
sets of filters.
You can configure packet filters in the Packet Filter screen. See Chapter 11 on
page 177 for more details.
Generic FilterSelect the generic filter(s) to control incoming traffic. You may choose up to 4
sets of filters.
You can configure generic filters in the Packet Filter screen. See Chapter 11 on
page 177 for more details.
Outgoing Filter Sets
Protocol FilterSelect the protocol filter(s) to control outgoing traffic. You may choose up to 4
sets of filters.
Y ou can con figure prot ocol filters in the Packet Filter screen. See Chapter 1 1 on
page 177 for more details.
Generic FilterSelect the generic filter(s) to control outgoing traffic. You may choose up to 4
sets of filters.
You can configure generic filters in the Packet Filter screen. See Chapter 11 on
page 177 for more details.
BackClick this to return to the previous screen without saving.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
5.3 The More Connections Screen
The ZyXEL Device allows you to configure more than one Internet access connection. To
configure additional Internet access connections click Network > WAN > More
Connections. The screen differs by the encapsulation you select. When you use the WAN >
Internet Access Setup screen to set up Internet access, you are configuring the first WAN
connection.
Figure 33 Network > WAN > More Connections
P-660HN-F1 User’s Guide
75
Page 76
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 19 Network > WAN > More Connections
LABELDESCRIPTION
#This is an index number indicating the number of the corresponding connection.
ActiveThis field indicates whether the connection is active or not.
NameThis is the name you gave to the Internet connection.
VPI/VCIThis field displays the Virtual Path Identifier (VPI) and Virtual Channel Identifier
EncapsulationThis field indicates the encapsulation method of the Internet connection.
ModifyThe first (ISP) connection is read-only in this screen. Use the WAN > Internet
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Clear the check box to disable the connection. Select the check box to enable it.
(VCI) numbers configured for this WAN connection.
Access Setup screen to edit it.
Click the Edit icon to edit the Internet connection settings. Click this icon on an
empty configuration to add a new Internet access setup.
Click the Remove icon to delete the Internet access setup from your connection list.
5.3.1 More Connections Edit
Use this screen to configure a connection. Click the edit icon in the More Connections screen
to display the following screen.
76
P-660HN-F1 User’s Guide
Page 77
Figure 34 Network > WAN > More Connections: Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 20 Network > WAN > More Connections: Edit
LABELDESCRIPTION
General
ActiveSelect the check box to activate or clear the check box to deactivate this
NameEnter a unique, descriptive name of up to 13 ASCII characters for this
ModeSelect Routing from the drop-down list box if your ISP allows multiple
EncapsulationSelect the method of encapsulation used by your ISP from the drop-down
P-660HN-F1 User’s Guide
connection.
connection.
computers to share an Internet account.
If you select Bridge, the ZyXEL Device will forward any packet that it does
not route to this remote node; otherwise, the packets are discarded.
list box. Choices vary depending on the mode you select in the Mode field.
If you select Bridge in the Mode field, select either PPPoA or RFC 1483.
If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET
ENCAP or PPPoE.
77
Page 78
Chapter 5 WAN Setup
Table 20 Network > WAN > More Connections: Edit (continued)
LABELDESCRIPTION
User Name (PPPoA and PPPoE encapsulation only) Enter the user name exactly as
Password(PPPoA and PPPoE encapsulation only) Enter the password associated
Service Name(PPPoE only) Type the name of your PPPoE service here.
MultiplexingSelect the method of multiplexing used by your ISP from the drop-down list.
VPIThe valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCIThe valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
IP AddressThis option is available if you select Routing in the Mode field.
Subnet Mask This option is available if you select ENET ENCAP in the Encapsulation
Gateway IP addressThis option is available if you select ENET ENCAP in the Encapsulation
Connection
Nailed-Up ConnectionSelect Nailed-Up Connection when you want your connection up all the
Connect on DemandSelect Connect on Demand when you don't want the connection up all the
Max Idle TimeoutSpecify an idle time-out in the Max Idle Timeout field when you select
NATSUA only is available only when you select Routing in the Mode field.
BackClick this to return to the previous screen without saving.
your ISP assigned. If assigned a name in the form user@domain where
domain identifies a service name, then enter both components exactly as
given.
with the user name above.
Choices are VC or LLC.
By prior agreement, a protocol is assigned a specific virtual circuit, for
example, VC1 will carry IP. If you select VC, specify separate VPI and VCI
numbers for each protocol.
For LLC-based multiplexing or PPP encapsulation, one VC carries multiple
protocols with protocol identifying information being contained in each
packet header. In this case, only one set of VPI and VCI numbers need be
specified for all protocol s.
management of ATM traffic). Enter the VCI assigned to you .
A static IP address is a fixed IP that your ISP gives you. A dynamic IP
address is not fixed; the ISP assigns you a different one each time you
connect to the Internet.
If you use the encapsulation type except RFC 1483, select Obtain an IP Address Automatically when you have a dynamic IP address; otherwise
select Static IP Address and type your ISP assigned IP address in the IP Address field below.
If you use RFC 1483, enter the IP address given by your ISP in the IP Address field.
field.
Enter a subnet mask in dotted decimal notation.
field.
Specify a gateway IP address (supplied by your ISP).
time. The ZyXEL Device will try to bring up the connection automatically if it
is disconnected.
time and specify an idle time-out in the Max Idle Timeout field.
Connect on Demand. The default setting is 0, which means the Internet
session will not timeout.
Select SUA Only if you have one public IP address and want to use NAT.
Click Edit Detail to go to the Port Forwarding screen to edit a server
mapping set.
Otherwise, select None to disable NAT.
78
P-660HN-F1 User’s Guide
Page 79
Table 20 Network > WAN > More Connections: Edit (continued)
LABELDESCRIPTION
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Advanced SetupClick this to display the More ConnectionsAdvanced Setup screen and
edit more details of your WAN setup.
5.3.2 Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced
Setup button in the More Connections Edit screen. The screen appears as shown.
Figure 35 Network > WAN > More Connections: Edit: Advanced Setup
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 21 Network > WAN > More Connections: Edit: Advanced Setup
LABELDESCRIPTION
RIP & Multicast SetupThis section is not available when you configure the ZyXEL Device to be in
RIP DirectionSelect the RIP direction from None, Both, In Only and Out Only.
RIP VersionSelect the RIP version from RIP-1, RIP-2B and RIP-2M.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used
ATM QoS
P-660HN-F1 User’s Guide
bridge mode.
to establish membership in a multicast group. The ZyXEL Device supports
IGMP-v1, IGMP-v2 and IGMP-v3. Select None to disable it.
79
Page 80
Chapter 5 WAN Setup
Table 21 Network > WAN > More Connections: Edit: Advanced Setup (continued)
LABELDESCRIPTION
ATM QoS TypeSelect CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth
Peak Cell RateDivide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the
Sustain Cell RateThe Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can
Maximum Burst SizeMaximum Burst Size (MBS) refers to the maximum number of cells that can
MTU
MTUThe Maximum Transmission Unit (MTU) defines the size of the largest
Packet Filter
Incoming Filter Sets
Protocol FilterSelect the protocol filter(s) t o control incoming tra ffic. You may choose up to
Generic FilterSelect the generic filter(s) to control incoming traffic. You may choose up to
Outgoing Filter Sets
Protocol FilterSelect the protocol fil ter(s) to control outgoing traffic. You may choose up to
Generic FilterSelect the generic filter(s) to control outgoing traffic. You may choose up to
BackClick this to return to the previous screen without saving.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
for voice or data traffic. Select UBR (Unspecified Bit Rate) for applications
that are non-time sensitive, such as e-mail. Select VBR-nRT (Variable Bit
Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for bursty
traffic and bandwidth sharing with other applications.
Peak Cell Rate (PCR). This is the maximum rate at which the sender can
send cells. Type the PCR here.
be transmitted. Type the SCR, which must be less than the PCR. Note that
system default is 0 cells/sec.
be sent at the peak rate. Type the MBS, which is less than 65535.
packet allowed on an interface or connection. Enter the MTU in this field.
For ENET ENCAP, the MTU value is 1500.
For PPPoE, the MTU value is 1492.
For PPPoA and RFC, the MTU is 65535.
4 sets of filters.
Y ou can configure packet filters in the Packet Filter screen. See Chapter 1 1
on page 177 for more details.
4 sets of filters.
You can configure generic filters in the Packet Filter screen. See Chapter
11 on page 177 for more details.
4 sets of filters.
You can configure protocol filters in the Packet Filter screen. See Chapter
11 on page 177 for more details.
4 sets of filters.
You can configure generic filters in the Packet Filter screen. See Chapter
11 on page 177 for more details.
5.4 The WAN Backup Setup Screen
Use this screen to configure your ZyXEL Device’s WAN backup. Click Network > WAN >
WAN Backup Setup.
80
P-660HN-F1 User’s Guide
Page 81
Chapter 5 WAN Setup
Figure 36 Network > W AN > WAN Backup
The following table describes the labels in this screen.
Table 22 Network > WAN > WAN Backup
LABELDESCRIPTION
WAN Backup Setup
Backup Type Select the method that the ZyXEL Device uses to check the DSL connection.
Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM
is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses
configured in the Check WAN IP Address fields.
Check WAN IP
Address1-3
Configure this field to test your ZyXEL Device's WAN accessibility. Type the IP
address of a reliable nearby computer (for example, your ISP's DNS server
address).
Fail ToleranceType the number of times (2 recommended) that your ZyXEL Device may ping the
Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN
Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a
P-660HN-F1 User’s Guide
Note: If you activate either traffic redirect or dial backup, you must
configure at least one IP address here.
When using a WAN backup connection, the ZyXEL Device periodically pings the
addresses configured here and uses the other WAN backup connection (if
configured) if there is no response.
IP addresses configured in the Check WAN IP Address field without getting a
response before switching to a WAN backup connection (or a different WAN
backup connection).
backup connection), it periodically checks whether or not it can use a higher priority
connection.
Type the number of seconds (30 recommended) for the ZyXEL Device to wait
between checks. Allow more time if your destination IP address handles lots of
traffic.
ping response from one of the IP addresses in the Check WAN IP Address field
before timing out the request. The WAN connection is considered "down" after the
ZyXEL Device times out the number of times specified in the Fail Tolerance field.
Use a higher value in this field if your network is busy or congested.
81
Page 82
Chapter 5 WAN Setup
Table 22 Network > WAN > WAN Backup
LABELDESCRIPTION
Traffic Redirect T raffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot
Active Traffic
Redirect
MetricThis field sets this route's priority among the routes the ZyXEL Device uses.
Backup GatewayType the IP address of your backup gateway in dotted decimal notation. The
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
connect to the Internet.
Select this check box to have the ZyXEL Device use traffic redirect if the normal
WAN connection goes down.
Note: If you activate traffic redirect, you must configure at least one
Check WAN IP Address.
The metric represents the "cost of transmission". A router determines the best
route for transmission by choosing a path with the lowest "cost". RIP routing uses
hop count as the measurement of cost, with a minimum of "1" for directly
connected networks. The number must be between "1" and "15"; a number greater
than "15" means the link is down. The smaller the number, the lower the "cost".
ZyXEL Device automatically forwards traffic to this IP address if the ZyXEL
Device's Internet connection terminates.
5.5 WAN Technical Reference
This section provides some technical background information about the topics covered in this
chapter.
5.5.1 Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports
the following methods.
5.5.1.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the
IP network protocol. IP packets are routed between the Ethernet interface and the WAN
interface and then formatted so that they can be understood in a bridged environment. For
instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP
requires that you specify a gateway IP address in the Gateway IP Address field in the wizard
or WAN screen. You can get this information from your ISP.
5.5.1.2 PPP over Ethernet
The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an
IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up
connection using PPPoE.
82
For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for example RADIUS).
P-660HN-F1 User’s Guide
Page 83
One of the benefits of PPPoE is the ability to let you access one of multiple network services,
a function known as dynamic service selection. This enables the service provider to easily
create and offer new IP services for individuals.
Operationally , PPPoE saves significant effort for both you and the ISP or carrier, as it requires
no specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers),
the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device
does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have
access.
5.5.1.3 PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA
connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual
Circuit) to the Internet Service Provider’s (ISP) DSLAM (Digital Subscriber Line (DSL)
Access Multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC
1661 for more information on PPP.
5.5.1.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation
Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single
ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each
protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer
to RFC 1483 for more detailed information.
Chapter 5 WAN Setup
5.5.2 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be
sure to use the multiplexing method required by your ISP.
VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit;
for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments
where dynamic creation of large numbers of ATM VCs is fas t and economica l.
LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information being
contained in each packet header. Despite the extra bandwidth and processing overhead, this
method may be advantageous if it is not practical to have a separate VC for each carried
protocol, for example, if charging heavily depends on the number of simultaneous VCs.
5.5.3 VPI and VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to
65535 (0 to 31 is reserved for local management of ATM traffic). Please see the appendix for
more information.
P-660HN-F1 User’s Guide
83
Page 84
Chapter 5 WAN Setup
5.5.4 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you
a different one each time. The Single User Account feature can be enabled or disabled if you
have either a dynamic or static IP. However the encapsulation method assigned influences
your choices for IP address and ENET ENCAP gateway.
IP Assignment with PPPoA or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and Gateway IP Address fields are not
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and
not the Gateway IP Address field.
IP Assignment with RFC 1483 Encapsulation
In this case the IP address assignment must be static.
IP Assignment with ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP
Address and Gateway IP Address fields as supplied by your ISP. However for a dynamic IP , the ZyXEL Device acts as a DHCP client on the WAN port and so the IP Address and
Gateway IP Address fields are not applicable (N/A) as the DHCP server assigns them to the
ZyXEL Device.
5.5.5 Nailed-Up Connection (PPP)
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic
demand. The ZyXEL Device does two things when you specify a nailed-up connection. The
first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up
the connection when turned on and whenever the connection is down. A nailed-up connection
can be very expensive for obvious reasons.
Do not specify a nailed-up connection unless your telephone company offers flat-rate service
or you need a constant connection and the cost is of no concern.
5.5.6 NAT
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.
5.6 Metric
The metric represents the "cost of transmission". A router determines the best route for
transmission by choosing a path with the lowest "cost". RIP routing uses hop count as the
measurement of cost, with a minimum of "1" for directly connected networks. The number
must be between "1" and "15"; a number greater than "15" means the link is down. The
smaller the number, the lower the "cost".
84
P-660HN-F1 User’s Guide
Page 85
The metric sets the priority for the ZyXEL Device’s routes to the Internet. If any two of the
default routes have the same metric, the ZyXEL Device uses the following pre-defined
priorities:
• Normal route: designated by the ISP (see Section 5.2 on page 70)
• Traffic-redirect route ( see Section 5.8 on page 86)
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric
of "2", then the normal route acts as the primary default route. If the normal route fails to
connect to the Internet, the ZyXEL Device tries the traffic-redirect route next.
5.7 Traffic Shaping
Traf fic Shap ing is a n agre ement be twee n the carrie r and th e subs crib er to regu late the av erag e
rate and fluctuations of data transmission over an ATM network. This agreement helps
eliminate congestion, which is important for transmission of real time data such as audio and
video connections.
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter
may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits),
so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not
guaranteed because it is dependent on the line speed.
Chapter 5 WAN Setup
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the
maximum average rate at which cells can be sent over the virtual connection. SCR may not be
greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At
this time, more cells (up to the MBS) can be sent at the PCR again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value
that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 37 Example of Traffic Shaping
P-660HN-F1 User’s Guide
85
Page 86
Chapter 5 WAN Setup
5.7.1 ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0
Specification.
Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is
being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for
connections that continuously require a specific amount of bandwidth. A PCR is specified and
if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR
would be high-resolution video and voice.
Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections
that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or
non-real time (VBR-nRT) connections.
The VBR-R T (real-time Variable Bit Rate) type is used with bursty connections that require
closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a
PCR is specified) but is only available when data is being sent. An example of an VBR-RT
connection would be video conferencing. Video conferencing requires real-time data transfers
and the bandwidth requirement varies in proportion to the video image's changing dynamics.
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do
not require closely controlled delay and delay variation. It is commonly used for "bursty"
traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum
level. An example of an VBR-nRT connection would be non-time sensitive data file transfers.
Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR
doesn't guarantee any bandwidth and only delivers traffic when the network has spare
bandwidth. An example application is background file transfer.
5.8 Traffic Redirect
Traffic redirect f orwards traffic to a backup gateway when the ZyXEL Device cannot connect
to the Internet. An example is shown in the figure below.
86
P-660HN-F1 User’s Guide
Page 87
Figure 38 Traffic Redirect Example
Chapter 5 WAN Setup
LAN
WAN
Backup Gateway
The following network topology allows you to avoid triangle route security issues when the
backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three
logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the
protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in
another subnet (Subnet 2). Configure filters that allow packets from the protected LAN
(Subnet 1) to the backup gateway (Subnet 2).
Figure 39 Traffic Redirect LAN Setup
Subnet 1
192.168.1.0 - 192.168.1. 24
WAN
LAN
P-660HN-F1 User’s Guide
Backup Gateway
Subnet 2
192.168.2.0 - 192.168.2.24
87
Page 88
Chapter 5 WAN Setup
88
P-660HN-F1 User’s Guide
Page 89
CHAPTER 6
LAN Setup
6.1 Overview
A Local Area Network (LAN) is a shared communication system to which many networking
devices are connected. It is usually located in one immediate area such as a building or floor of
a building.
Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses.
LAN
DSL
6.1.1 What You Can Do in the LAN Screens
• Use the LAN IP screen (Section 6.2 on page 90) to set the LAN IP address and subnet
mask of your ZyXEL device. You can also edit your ZyXEL Device's RIP, multicast, any
IP and Windows Networking settings from this screen.
• Use the DHCP Setup screen (Section 6.3 on page 93) to configure the ZyXEL Device’s
DHCP settings.
• Use the Client List screen (Section 6.4 on page 95) to assign IP addresses on the LAN to
specific individual computers based on their MAC Addresses.
•Use the IP Alias screen (Section 6.5 on page 96) to change your ZyXEL Device’ s IP alias
settings.
6.1.2 What You Need To Know About LAN
IP Address
IP addresses identify individual devices on a network. Every networking device (including
computers, servers, routers, printers, etc.) needs an IP address to communicate across the
network. These networking devices are also known as hosts.
P-660HN-F1 User’s Guide
89
Page 90
Chapter 6 LAN Setup
Subnet Mask
Subnet masks determine the maximum number of possible hosts on a network. You can also
use subnet masks to divide one network into multiple sub-networks.
DHCP
A DHCP (Dynamic Host Configuration Protocol) server can assign your ZyXEL Device an IP
address, subnet mask, DNS and other routing information when it's turned on.
RIP
RIP (Routing Information Protocol) allows a router to exchange routing information with
other routers.
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to
a group of hosts on the network - not everybody and not just 1.
IGMP
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a Multicast group - it is not used to carry user data. There are three versions of
IGMP. IGMP version 2 is an improvement over version 1, but IGMP version 1 is still in wide
use. IGMP version 3 supports source filtering, reporting or ignoring traffic from specific
source address to a particular host on the network.
DNS
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address
and vice versa. The DNS server is extremely important because without it, you must know the
IP address of a networking device before you can access it.
Finding Out More
See Section 6.6 on page 98 for technical background information on LANs.
6.1.3 Before You Begin
Find out the MAC addresses of your network devices if you intend to add them to the DHCP
Client List screen.
6.2 The LAN IP Screen
90
Use this screen to set the Local Area Network IP address and subnet mask of your ZyXEL
Device. Click Network > LAN to open the IP screen.
Follow these steps to configure your LAN settings.
1 Enter an IP address into the IP Address field. The IP address must be in dotted decimal
notation. This will become the IP address of your ZyXEL Device.
P-660HN-F1 User’s Guide
Page 91
Chapter 6 LAN Setup
2 Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it
is best to leave this alone, the configurator will automatically compute a subnet mask
based upon the IP address you entered.
3 Click Apply to save your settings.
Figure 40 Network > LAN > IP
The following table describes the fields in this screen.
Table 23 Network > LAN > IP
LABELDESCRIPTION
IP AddressEnter the LAN IP address you want to assign to your ZyXEL Device in dotted
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Advanced SetupClick this to display the Advanced LAN Setup screen and edit more details of
decimal notation, for example, 192.168.1.1 (factory default).
255.255.255.0 (factory default). Your ZyXEL Device automatically computes the
subnet mask based on the IP Address you enter, so do not change this field
unless you are instructed to do so.
your LAN setup.
6.2.1 The Advanced LAN IP Setup Screen
Use this screen to edit your ZyXEL Device's RIP , mul ticast, Any IP and Windows Networking
settings. Click the Advanced Setup button in the LAN IP screen. The screen appears as
shown.
P-660HN-F1 User’s Guide
91
Page 92
Chapter 6 LAN Setup
Figure 41 Network > LAN > IP: Advanced Setup
The following table describes the labels in this screen.
Table 24 Network > LAN > IP: Advanced Setup
LABELDESCRIPTION
RIP & Multicast Setup
RIP DirectionSelect the RIP direction from None, Both, In Only and Out Only.
RIP VersionSelect the RIP version from RIP-1, RIP-2B and RIP-2M.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a multicast group. The ZyXEL Device supports IGMP-v1, IGMP-v2 and IGMP-v3. Select None to disable it.
Any IP SetupSelect the Active check box to enable the Any IP feature. This allows a
computer to access the Internet via the ZyXEL Device without changing the
network settings (such as IP address and subnet mask) of the computer, even
when the IP addresses of the computer and the ZyXEL Device are not in the
same subnet.
When you disable the Any IP feature, only computers with dynamic IP
addresses or static IP addresses in the same subnet as the ZyXEL Device’s
LAN IP address can connect to the ZyXEL Device or access the Internet
through the ZyXEL Device.
Note: You must enable NAT/SUA in the NAT screen to use the
Any IP feature on the ZyXEL Device
Windows
Networking
(NetBIOS over TCP/
IP)
NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that
enable a computer to connect to and communicate with a LAN. For some dialup services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls.
However it may sometimes be necessary to allow NetBIOS packets to pass
through to the WAN in order to find a computer on the WAN.
92
P-660HN-F1 User’s Guide
Page 93
Chapter 6 LAN Setup
Table 24 Network > LAN > IP: Advanced Setup
LABELDESCRIPTION
Allow between LAN
and WAN
Packet Filter
Incoming Filter Sets
Protocol FilterSelect the protocol filter(s) to control incoming traffic. You may choose up to 4
Generic FilterSelect the generic filter(s) to control incoming traffic. You may choose up to 4
Outgoing Filter Sets
Protocol FilterSelect the protocol filter(s) to control outgoing traffic. You may choose up to 4
Generic FilterSelect the generic filter(s) to control outgoing traffic. You may choose up to 4
BackClick this to return to the previous screen without saving.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Select this check box to forward NetBIOS packets from the LAN to the WAN
and from the WAN to the LAN. If your firewall is enabled with the default policy
set to block WAN to LAN traffic, you also need to enable the default WAN to
LAN firewall rule that forwards NetBIOS traffic.
Clear this check box to block all NetBIOS packets going from the LAN to the
WAN and from the WAN to the LA N.
sets of filters.
You can configure packet filters in the Packet Filter screen. See Chapter 11 on
page 177 for more details.
sets of filters.
Y ou can configure generic filters in the Packet Filter screen. See Chapter 1 1 on
page 177 for more details.
sets of filters.
You can configure protocol filters in the Packet Filter screen. See Chapter 11
on page 177 for more details.
sets of filters.
Y ou can configure generic filters in the Packet Filter screen. See Chapter 1 1 on
page 177 for more details.
6.3 The DHCP Setup Screen
Use this screen to configure the DNS server information that the ZyXEL Device sends to the
DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen.
P-660HN-F1 User’s Guide
93
Page 94
Chapter 6 LAN Setup
Figure 42 Network > LAN > DHCP Setup
The following table describes the labels in this screen.
Table 25 Network > LAN > DHCP Setup
LABELDESCRIPTION
DHCP Setup
DHCPIf set to Server, your ZyXEL Device can assign IP addresses, an IP default
IP Pool Starting
Address
Pool SizeThis field specifies the size, or count of the IP address pool.
Remote DHCP
Server
DNS Server
DNS Servers
Assigned by DHCP
Server
gateway and DNS servers to Windows 95, Windows NT and other systems that
support the DHCP client.
If set to None, the DHCP server will be disabled.
If set to Relay, the ZyXEL Device acts as a surrogate DHCP server and relays
DHCP requests and responses between the remote server and the clients.
Enter the IP address of the actual, remote DHCP server in the Remote DHCP Server field in this case.
When DHCP is used, the following items need to be set:
This field specifies the first of the contiguous addresses in the IP address pool.
If Relay is selected in the DHCP field above then ente r the IP address of the
actual remote DHCP server here.
The ZyXEL Device passes a DNS (Domain Name System) server IP address to
the DHCP clients.
94
P-660HN-F1 User’s Guide
Page 95
Table 25 Network > LAN > DHCP Setup
LABELDESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Select Obtained From ISP if your ISP dynamically assigns DNS server
information (and the ZyXEL Device's WAN IP address).
Select User-Defined if you have the IP address of a DNS server. Enter the
DNS server's IP address in the field to the right. If you chose User-Defined, but
leave the IP address set to 0.0.0.0, User-Defined changes to None after you
click Apply. If you set a second choice to User-Defined, and enter the same IP
address, the second User-Defined changes to None after you click Apply.
Select DNS Relay to have the ZyXEL Device act as a DNS proxy only when the
ISP uses IPCP DNS server extensions.The ZyXEL Device's LAN IP address
displays in the field to the right (read-only). The ZyXEL Device tells the DHCP
clients on the LAN that the ZyXEL Device itself is the DNS server. When a
computer on the LAN sends a DNS query to the ZyXEL Device , th e ZyXEL
Device forwards the query to the real DNS server learned through IPCP and
relays the response back to the computer. You can only select DNS Relay for
one of the three servers; if you select DNS Relay for a second or third DNS
server, that choice changes to None after you click Apply.
Select None if you do not want to configure DNS servers. You must have
another DHCP sever on your LAN, or else the computers must have their DNS
server addresses manually configured. If you do not configure a DNS server,
you must know the IP address of a computer in order to access it.
Chapter 6 LAN Setup
6.4 The Client List Screen
This table allows you to assign IP addresses on the LAN to specific individual computers
based on their MAC Addresses.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address
is assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02.
Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network > LAN> Client List to open the following screen.
Figure 43 Network > LAN > Client List
P-660HN-F1 User’s Guide
95
Page 96
Chapter 6 LAN Setup
The following table describes the labels in this screen.
Table 26 Network > LAN > Client List
LABELDESCRIPTION
IP AddressEnter the IP address that you want to assign to the computer on your LAN with
MAC AddressEnter the MAC address of a computer on your LAN.
AddClick this to add a static DHCP entry.
#This is the index number of the static IP table entry (row).
StatusThis field displays whether the client is connected to the ZyXEL Device.
Host Name This field displays the computer host name.
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThe MAC (Media Access Control) or Ethernet address on a LAN (Local Area
ReserveSelect the check box in the heading row to automatically select all check boxes or
ModifyC lick the modify icon to have the IP address field editable and change it.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
RefreshClick thi s to reload the DHCP table.
the MAC address that you will also specify.
Network) is unique to your computer (six pairs of hexadecimal notation).
A network interface card such as an Ethernet adapter has a hardwired address
that is assigned at the factory. This address follows an industry standard that
ensures no other adapter has a similar address.
select the check box(es) in each entry to have the ZyXEL Device always assign
the selected entry(ies)’s IP address(es) to the corresponding MAC address(es)
(and host name(s)). You can select up to 10 entries in this table.
6.5 The IP Alias Screen
IP alias allows you to partition a physical network into different logical networks over the
same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its
single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN
network.
When you use IP alias, you can also configure firewall rules to control access between the
LAN's logical networks (subnets).
"Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A, B, and C.
Use this screen to change your ZyXEL Device’ s IP alias settings. Click Network > LAN > IP
Alias to open the following screen.
Figure 45 Network > LAN > IP Alias
The following table describes the labels in this screen.
Table 27 Network > LAN > IP Alias
LABELDESCRIPTION
IP Alias 1, 2Select the check box to configure anoth er LAN network for the ZyXEL Device.
IP AddressEnter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet MaskYour ZyXEL Device will automatically calculate the subnet mask based on the IP
P-660HN-F1 User’s Guide
Alternatively, click the right mouse button to copy and/or paste the IP address.
address that you assign. Unless you are implementing subnetting, use the subnet
mask computed by the ZyXEL Device.
97
Page 98
Chapter 6 LAN Setup
Table 27 Network > LAN > IP Alias
LABELDESCRIPTION
RIP DirectionRIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to
RIP VersionThe RIP Version field controls the format and the broadcasting method of the RIP
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
exchange routing information with other routers. The RIP Direction field controls
the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will
broadcast its routing table periodically. When set to Both or In Only, it will
incorporate the RIP information that it receives; when set to None, it will not send
any RIP packets and will ignore any RIP packets received.
packets that the ZyXEL Device sends (it recognizes both formats when receiving).
RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is
probably adequate for most networks, unless you have an unusual network
topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the
difference being that RIP-2B uses subnet broadcasting while RIP-2M uses
multicasting. Multicasting can reduce the load on non-router machines since they
generally do not listen to the RIP multicast address and so will not receive the RIP
packets. However, if one router uses multicasting, then all routers on your network
must use multicasting, also. By default, RIP direction is set to Both and the
Version set to RIP-1.
6.6 LAN Technical Reference
This section provides some technical background information about the topics covered in this
chapter.
6.6.1 LANs, WANs and the ZyXEL Device
The actual physical connection determines wh ether the ZyXEL Device ports are LAN or
WAN ports. There are two separate IP networks, one inside the LAN network and the other
outside the WAN network as shown next.
Figure 46 LAN and WAN IP Addresses
LAN
WAN
98
P-660HN-F1 User’s Guide
Page 99
6.6.2 DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual
clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL
Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device
provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must
have another DHCP server on your LAN, or else the computer must be manually configured.
IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP clients (DHCP
Pool). See the product specifications in the appendices. Do not assign static IP addresses from
the DHCP pool to your LAN computers.
6.6.3 DNS Server Addresses
DNS (Domain Name System) maps a domain name to its corresponding IP address and vice
versa. The DNS server is extremely important because without it, you must know the IP
address of a computer before you can access it. The DNS server addresses you enter when you
set up DHCP are passed to the client machines along with the assigned IP address and subnet
mask.
Chapter 6 LAN Setup
There are two ways that an ISP disseminates the DNS server addresses.
• The ISP tells you the DNS server addresses, usually in the form of an information sheet,
when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen.
• Some ISPs choose to disseminate the DNS server addresses using the DNS server
extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not
give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP
negotiation. The ZyXEL Device supports the IPCP DNS server extensions through the
DNS proxy feature.
If the DNS Server fields in the DHCP Setup screen are set to DNS Relay, the ZyXEL
Device tells the DHCP clients that it itself is the DNS server. When a computer sends a
DNS query to the ZyXEL Device, the ZyXEL Device acts as a DNS proxy and forwards
the query to the real DNS server learned through IPCP and relays the response back to the
computer.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server
extensions. It does not mean you can leave the DNS servers out of the DHCP setup under
all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter
their IP addresses in the DHCP Setup screen.
6.6.4 LAN TCP/IP
The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS
servers to systems that support DHCP client capability.
IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do computers on a
LAN share one common network number.
P-660HN-F1 User’s Guide
99
Page 100
Chapter 6 LAN Setup
Where you obtain your network number depends on your particular situation. If the ISP or
your network administrator assigns you a block of registered IP addresses, follow their
instructions in selecting the IP addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single
user account and the ISP will assign you a dynamic IP address when the connection is
established. If this is the case, it is recommended that you select a network number from
192.168.0.0 to 192.168.255.0 and you must enable the Network Address Translation (NAT)
feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this
block of addresses specifically for private use; please do not use any other number unless you
are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other
words, the first three numbers specify the network number while the last number identifies an
individual computer on that network.
Once you have decided on the network number, pick an IP address that is easy to remember,
for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your
network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device
will compute the subnet mask automatically based on the IP address that you entered. You
don't need to change the subnet mask computed by the ZyXEL Device unless you are
instructed to do otherwise.
Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from
the Internet, for example, only between your two branch offices, you can assign any IP
addresses to the hosts without problems. However, the Internet Assigned Numbers Authority
(IANA) has reserved the following three blocks of IP addresses specifically for private
networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
You can obtain your IP address from the IANA, from an ISP or it can be assigned from a
private network. If you belong to a small organization and your Internet access is through an
ISP, the ISP can provide you with the Internet addresses for your local netwo rks. On th e o ther
hand, if you are part of a much larger organization, you should consult your network
administrator for the appropriate IP addresses.
"Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, “Address Allocation for Private
Internets” and RFC 1466, “Guidelines for Management of IP Address S pace”.
100
P-660HN-F1 User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.