Page 1
P-870HN-51b
802.11n VDSL2 4-port Gateway
Default Login Details
IP Address http://192.168.1.1
User Name admin
Password 1234
Firmware Version 1.0
Edition 1, 9/2009
www.zyxel.com
www.zyxel.com
Copyright © 2009
ZyXEL Communications Corporation
Page 2
Page 3
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Zy XEL Device using
the web configurator.
Related Documentation
•Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It
contains information on setting up your network and configuring for Internet
access.
• Support Disc
Refer to the included CD for support documents.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Need More Help?
More help is available at www.zyx el.com.
P-870HN-51b User’s Guide
3
Page 4
About This User's Guide
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
P-870HN-51b User’s Guide
Page 5
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-870HN-51b may be referred to as the “ZyXEL Device”, the “device”, the
“system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “return” key on you r keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
P-870HN-51b User’s Guide
5
Page 6
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Z yXEL Device
icon is not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
P-870HN-51b User’s Guide
Page 7
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when using
the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
Your product is marked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical
and electronic products should not be mixed with general waste. Used electrical and
electronic equipment should be treated separately.
P-870HN-51b User’s Guide
7
Page 8
Safety Warnings
8
P-870HN-51b User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction ............................................................................................................................19
Introducing the ZyXEL Device ...................................................................................................21
Tutorials ..................................................................................................................................... 27
Introducing the Web Configurator .............................................................................................. 49
Status Screens .......................................................................................................................... 55
Network ...................................................................................................................................65
WAN Setup ...................................................................... ... ... .... ... ... .......................................... 67
LAN Setup ................................................................................................................................. 93
Wireless LAN ............................ ... .... ... ............................................. ... ... .... ... ... ........................ 101
Network Address Translation (NAT) ........................................................................................ 133
Security .................................................................................................................................145
Firewall .................................................................................................................................... 147
Certificate ................................................................................................................................ 153
Advanced ..............................................................................................................................165
Static Route ............................................................................................................................. 167
Policy Forwarding .................................................................................................................... 171
RIP ............................... .................... ................... ................... .................... ..............................175
Quality of Service (QoS) ........................... ... .... ... ... ... .... ... ... ... .... ... ... ........................................ 177
Dynamic DNS Setup ................................................................................................................ 191
Remote Management ..............................................................................................................193
Universal Plug-and-Play (UPnP) ............................................................................................. 199
Parental Control .......................................................................................................................213
Interface Group ........................................................................................................................217
Maintenance, Troubleshooting and Specifications ..........................................................223
System Settings ........... ............................................. .... ... ... ... .... .............................................. 225
Logs ........................................................................................................................................ 229
Tools ........................................................................................................................................ 233
Diagnostic .................................... ....................................................... ..................................... 241
Troubleshooting ..................................................... .................................................................. 247
Product Specifications ............................................................................................................. 253
Appendices and Index .........................................................................................................259
P-870HN-51b User’s Guide
9
Page 10
Contents Overview
10
P-870HN-51b User’s Guide
Page 11
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 19
Chapter 1
Introducing the ZyXEL Device...............................................................................................21
1.1 Overview ............. ............................................. ... .... ... ... ... .................................................... 21
1.2 Ways to Manage the ZyXEL Device ................... .... ... ... ... .... ............................................. ... 21
1.3 Good Habits for Managing the ZyXEL Device .....................................................................22
1.4 Applications for the ZyXEL Device ...................................................................................... 22
1.4.1 Internet Access ................................................ ... ... .... ............................................. ...22
1.5 LEDs (Lights) ......................... .... ... ............................................. ... ... .... ... ... .......................... 24
1.6 The RESET Button ............................. ... .... ... ... ... .... ... ............................................. ... ... ....... 25
1.6.1 Using the Reset Button ............. ... .... ... ... ... .... ... ... ............................................. ... .... ... 26
1.7 The WPS WLAN Button ............................................................................................... .... ... 26
1.7.1 Turn the Wireless LAN Off or On ............................................................................... 26
1.7.2 Activate WPS ......... ... ............................................. .... ... .............................................26
Chapter 2
Tutorials...................................................................................................................................27
2.1 How to Set up a Wireless Network ...................................................................................... 27
2.1.1 Example Parameters ........................... ... ... .... ... ... ... .... ... ............................................. 27
2.1.2 Configuring the AP ....... .... ... ... ... ... .............................................. ... ... ... .... ... ... ... .......... 27
2.1.3 Configuring the Wireless Client .................................................................................. 30
2.2 How to Set up Multiple VDSL Connection Groups .............................................................. 37
2.2.1 Adding WAN Internet Connections ............................................. ... ... ... .... ... ... ... ... .... ... 37
2.2.2 Setting Interface Groups ........ ... ............................................. .... ... ... ... .... ... ... ... .......... 42
2.2.3 Configuring Interface Group IP ........................................................ ... .... ... ... ... ... .... ... 46
2.2.4 Testing the VDSL Connection Groups ....................................................................... 47
P-870HN-51b User’s Guide
11
Page 12
Table of Contents
Chapter 3
Introducing the Web Configurator ........................................................................................49
3.1 Web Configurator Overview ................................................................................................. 49
3.1.1 Accessing the Web Configurator ................................................................................ 49
3.2 Web Configurator Main Screen ........................................................................................... 50
3.2.1 Navigation Panel ....... ... .... ... ... ... ... .... ... ....................................................................... 51
3.2.2 Main Window .......................... ... ............................................. .... ... ... ... .... ... ................53
3.2.3 Status Bar ............................................... ... .............................................. ... ................ 53
Chapter 4
Status Screens........................................................................................................................55
4.1 Status Screen .................................. ... ............................................. .... ... ... ... .... ................... 55
4.1.1 WAN Service Statistics ............................................................................................... 59
4.1.2 Route Info ..................... .... ... ... ... ... .... ............................................. ... ... .... ... ... .............60
4.1.3 WLAN Station List ..................................... .... ............................................. ... ... ... .......62
4.1.4 LAN Statistics ............................ ... .... ... ... ............................................. .... ... ... .............63
4.1.5 Client List ............................................................................................ .... ... ... .............64
Part II: Network....................................................................................... 65
Chapter 5
WAN Setup...............................................................................................................................67
5.1 Overview ............. ............................................. ... .... ... ... ... .................................................... 67
5.1.1 What Yo u Can Do in this Chapter .............................................................................. 67
5.2 What You Need to Know ..... ... .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ..........68
5.3 Before You Begin ................... .... ............................................. ... ... ... .... ... ... ... .... ... ................68
5.4 The Layer 2 Interface Screen .............................................................................................. 69
5.4.1 Layer 2 Interface Configuration ........................................ ... ... .................................... 70
5.5 The Internet Connection Screen .......................................................................................... 73
5.5.1 WAN Connection Configuration ................................................................................. 75
5.6 Technical Reference ..................... ... ... ... .... ... ... ... .... ... ............................................. ... ... ....... 85
Chapter 6
LAN Setup................................................................................................................................93
6.1 Overview ............. ............................................. ... .... ... ... ... .................................................... 93
6.1.1 What Yo u Can Do in this Chapter .............................................................................. 93
6.2 What You Need To Know ....... .... ... ... ... ... .... ... ... ............................................. .... ... ... ... ... .... ... 94
6.3 The LAN IP Screen ..............................................................................................................95
6.4 Technical Reference ..................... ... ... ... .... ... ... ... .... ... ............................................. ... ... ....... 97
Chapter 7
Wireless LAN.........................................................................................................................101
12
P-870HN-51b User’s Guide
Page 13
Table of Contents
7.1 Overview ............. ............................................. ... .... ... ... ... .................................................. 101
7.1.1 What Yo u Can Do in this Chapter ............................................................................ 101
7.2 What You Need to Know ..... ... .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ........102
7.3 Before You Begin ................... .... ............................................. ... ... ... .... ... ... ... .... ... ..............104
7.4 The General Screen ......................................................................................................... 105
7.4.1 No Security .......................... ... ............................................. ... .... ... ... ... .....................107
7.4.2 WEP Encryption ..... ... ... .............................................. ... ... ... ... .... .............................. 108
7.4.3 WPA(2)-PSK ............................................................................................................ 109
7.4.4 WPA(2) Authentication .............................. .... ... ... ... .... ... ... ... ......................................111
7.4.5 MAC Filter ............................................................................................................112
7.4.6 Adding a New MAC Filtering Rule ........................................................................113
7.5 The More AP Screen .........................................................................................................114
7.5.1 More AP Edit .............................................................................................................115
7.6 The WPS Screen ............................... ... .... ... ... ............................................. .... ... ... ... ... ......115
7.7 The WPS Station Screen ...................................................................................................116
7.8 The WDS Screen ...............................................................................................................117
7.9 The Advanced Setup Screen .............................................................................................119
7.10 Technical Reference ........................................................................................................121
7.10.1 Wireless Network Overview ................................................................................... 121
7.10.2 Additional Wireless Terms ...................................................................................... 122
7.10.3 Wireless Security Overview ...................................................................................123
7.10.4 WiFi Protected Setup ............................................................................................. 125
Chapter 8
Network Address Translation (NAT)....................................................................................133
8.1 Overview ............... ............................................. .... ... ... ... .... .............................................. 133
8.1.1 What Yo u Can Do in this Chapter ............................................................................ 133
8.2 What You Need to Know ..... ... .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ........133
8.3 The Port Forwarding Screen ............................................................................................. 134
8.3.1 The Port Forwarding Edit Screen ............................................................................ 136
8.4 The Trigger Port Screen ..................................... .... ... ... ... .... ... ... ... ... .... ... ...........................137
8.4.1 Trigger Port Configuration ....................................................................................... 140
8.5 The DMZ Host Screen ....................................................................................................... 142
8.6 The ALG Screen ................................ ... .... ... ... ... .... ... ... ... ............................................. ..... 142
8.7 Technical Reference ..................... ... ... ... .... ... ... ... .... ... ............................................. ... ... ..... 143
Part III: Security.................................................................................... 145
Chapter 9
Firewall...................................................................................................................................147
9.1 Overview ............... ............................................. .... ... ... ... .... .............................................. 147
P-870HN-51b User’s Guide
13
Page 14
Table of Contents
9.1.1 What Yo u Can Do in this Chapter ............................................................................ 147
9.2 What You Need to Know ..... ... .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ........147
9.3 The Firewall Screen ...........................................................................................................148
9.3.1 Creating Incoming Firewall Rules .................................................. ... .... ... ... ... ... .... . 150
Chapter 10
Certificate ..............................................................................................................................153
10.1 Overview .......................................................................................................................... 153
10.1.1 What You Can Do in this Chapter .......................................................................... 153
10.2 What You Need to Know .................................................................................................. 153
10.3 The Local Certificates Screen ......................................................................................... 154
10.3.1 Create Certificate Request .................................................................................... 155
10.3.2 Import Certificate . ... ... .... ................................................ ... ..................................... 156
10.3.3 Certificate Details .................................................................................................. 158
10.3.4 Load Signed Certificate ..........................................................................................160
10.4 The Trusted CA Screen .................................... ............................................................... 161
10.4.1 View Trusted CA Certificate ...................................................................................163
10.4.2 Import Trusted CA Certificate ................................................................................. 164
Part IV: Advanced ................................................................................ 165
Chapter 11
Static Route...........................................................................................................................167
11.1 Overview .......................................................................................................................167
11.1.1 What You Can Do in this Chapter ......................................... .... .............................. 167
11.2 The Static Route Screen ..................................................................................................168
11.2.1 Static Route Edit ................................................................................................... 169
Chapter 12
Policy Forwarding.................................................................................................................171
12.1 Overview ....................................................................................................................... 171
12.1.1 What You Can Do in this Chapter .......................................................................... 171
12.2 The Static Route Screen .................................................................................................. 171
12.2.1 Policy Forwarding Setup ...................................................................................... 172
Chapter 13
RIP..........................................................................................................................................175
13.1 Overview ....................................................................................................................... 175
13.1.1 What You Can Do in this Chapter .......................................................................... 175
13.2 The RIP Screen ... ... .... ... ... ... .... ................................................ ........................................ 175
14
P-870HN-51b User’s Guide
Page 15
Table of Contents
Chapter 14
Quality of Service (QoS).......................................................................................................177
14.1 Overview ......................................................................................................................... 177
14.1.1 What You Can Do in this Chapter .......................................................................... 177
14.2 What You Need to Know .................................................................................................. 178
14.3 The Quality of Service General Screen .......................................................................... 178
14.4 The Queue Setup Screen ................................................................................................ 180
14.4.1 Adding a QoS Queue ............................................................................................ 181
14.5 The Class Setup Screen ................................................................................................ 182
14.5.1 QoS Class Edit ...................................................................................................... 184
14.6 The QoS Monitor Screen ................................................................................................ 188
14.7 Technical Reference ........................................................................................................ 189
Chapter 15
Dynamic DNS Setup .............................................................................................................191
15.1 Overview ......................................................................................................................... 191
15.1.1 What You Can Do in this Chapter .......................................................................... 191
15.2 What You Need To Know ................................................................................................. 191
15.3 The Dynamic DNS Screen ................................................ ... ... ... ... .... ... ... ... .... ... ... ........... 192
Chapter 16
Remote Management............................................................................................................193
16.1 Overview .......................................................................................................................... 193
16.1.1 What You Can Do in this Chapter .......................................................................... 193
16.2 The TR-069 Screen .........................................................................................................193
16.3 The TR-064 Screen .........................................................................................................195
16.4 The Service Control Screen ............................................................................................ 196
16.5 The IP Address Screen ................................................................................................... 197
16.5.1 Adding an IP Address ............................................................................................198
Chapter 17
Universal Plug-and-Play (UPnP)..........................................................................................199
17.1 Overview ......................................................................................................................... 199
17.1.1 What You Can Do in this Chapter .......................................................................... 199
17.2 What You Need to Know .................................................................................................. 199
17.3 The UPnP Screen ............................................................................................................200
17.4 Installing UPnP in Windows Example .............................................................................. 201
17.5 Using UPnP in Windows XP Example ............................................................................. 205
Chapter 18
Parental Control....................................................................................................................213
18.1 Overview .......................................................................................................................... 213
18.1.1 What You Can Do in this Chapter .......................................................................... 213
P-870HN-51b User’s Guide
15
Page 16
Table of Contents
18.2 The Time Restriction Screen ........................................................................................... 213
18.2.1 Adding a Schedule ................................................................................................. 214
18.3 The URL Filter Screen .....................................................................................................215
18.3.1 Adding URL Filter ................................................................................................... 216
Chapter 19
Interface Group.....................................................................................................................217
19.1 Overview .......................................................................................................................... 217
19.1.1 What You Can Do in this Chapter .......................................................................... 217
19.2 The Interface Group Screen ............................................................................................ 217
19.2.1 Interface Group Configuration ................................................................................219
19.2.2 Interface Grouping Criteria .....................................................................................220
Part V: Maintenance, Troubleshooting and Specifications.............. 223
Chapter 20
System Settings....................................................................................................................225
20.1 Overview .......................................................................................................................... 225
20.1.1 What You Can Do in this Chapter .......................................................................... 225
20.2 The General Screen ........................................................................................................225
20.3 The Time Setting Screen ................................................................................................ 226
Chapter 21
Logs ......................................................................................................................................229
21.1 Overview ......................................................................................................................... 229
21.1.1 What You Can Do in this Chapter .......................................................................... 229
21.2 The View Log Screen ...................................................................................................... 229
21.3 The Log Settings Screen ..... .... ... ... ... ... ............................................................................ 230
Chapter 22
Tools.......................................................................................................................................233
22.1 Overview .......................................................................................................................... 233
22.1.1 What You Can Do in this Chapter .......................................................................... 233
22.2 The Firmware Screen ...................................................................................................... 234
22.3 The Configuration Screen ................................................................................................ 236
22.4 The Restart Screen .........................................................................................................238
Chapter 23
Diagnostic..............................................................................................................................241
23.1 Overview .......................................................................................................................... 241
23.1.1 What You Can Do in this Chapter .......................................................................... 241
16
P-870HN-51b User’s Guide
Page 17
Table of Contents
23.2 What You Need to Know .................................................................................................. 241
23.3 The General Diagnostic Screen ...................................................................................... 242
23.4 The 802.1ag Screen ........................................................................................................243
23.5 The OAM Ping Test Screen ............................................................................................. 245
Chapter 24
Troubleshooting....................................................................................................................247
24.1 Power, Hardware Connections, and LEDs ................................. ... .................................. 247
24.2 ZyXEL Device Access and Login .................................................................................... 248
24.3 Internet Access ................................................................................................................ 249
Chapter 25
Product Specifications.........................................................................................................253
25.1 Hardware Specifications ..................................................................................................253
25.2 Firmware Specifications ...................................................................................................253
25.3 Wireless Features ............................................................................................................257
Part VI: Appendices and Index ........................................................... 259
Appendix A Setting Up Your Computer’s IP Address...........................................................261
Appendix B Pop-up Windows, JavaScripts and Java Permissions......................................291
Appendix C IP Addresses and Subnetting...........................................................................301
Appendix D Wireless LANs..................................................................................................313
Appendix E Common Services.............................................................................................329
Appendix F Open Software Announcements.......................................................................333
Appendix G Legal Information..............................................................................................339
Index.......................................................................................................................................343
P-870HN-51b User’s Guide
17
Page 18
Table of Contents
18
P-870HN-51b User’s Guide
Page 19
PART I
Introduction
Introducing the ZyXEL Device (21)
Tutorials (27)
Introducing the Web Configurator (49)
Status Screens (55)
19
Page 20
20
Page 21
CHAPTER 1
Introducing the ZyXEL Device
This chapter introduces the main applications and features of the Z yXEL Device. It
also introduces the ways you can manage the ZyXEL Device.
1.1 Overview
The ZyXEL Device is a VDSL2 gateway that allows super-fast, secure Internet
access over analog (POTS) telephone lines. It supports b oth P a ck et Transfer Mode
(PTM) and Asynchronous Transfer Mode (ATM). You can have multiple ADSL
(ADSL, ADSL2, ADSL2+) connections or multiple VDSL (VDSL, VDSL2)
connections.
you can use Quality of Service (QoS) to efficiently manage tr affic on y our network
by giving priority to certain types of traffic and/or to particular computers.
Please refer to the following description of the product name format.
• “H” denotes an integrated 4-port hu b (s wi tc h) .
• “N” denotes 802.11n draft 2.0. The “N” models support 802.11n wireless
connection mode.
Only use firmware for your ZyXEL Device’s specific model. Refer
to the label on the bottom of your ZyXEL Device.
Models ending in “1”, for example P-870HN-51, denote a device that works over
the analog telephone system, POTS (Plain Old Telephone Service).
See Chapter 25 on page 253 for a full list of features.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
P-870HN-51b User’s Guide
21
Page 22
Chapter 1 Introducing the ZyXEL Device
• Web Configur ator. This is recommended for everyday management of the ZyXEL
Device using a (supported) web browser.
• TR-069. This is an auto-configuration server used to remotely configure your
device.
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to
manage the ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
ZyXEL Device to its factory default settings . If yo u backed up an earlier
configuration file, you would not have to totally re-configure the ZyXEL Device.
You could simply restore your last configuration.
1.4 Applications for the ZyXEL Device
Here are some example uses for which the ZyXEL Device is well suited.
1.4.1 Internet Access
Your ZyXEL Device provides shared Internet access by connecting the DSL port to
the DSL or MODEM jack on a splitter or your telephone jack. Computers can
connect to the ZyXEL Device’s LAN ports (or wirelessly). You can have multiple
22
P-870HN-51b User’s Guide
Page 23
Chapter 1 Introducing the ZyXEL Device
WAN services over one ADSL or VDSL line. The ZyXEL Device cannot work in ADSL
and VDSL mode at the same time.
Figure 1 ZyXEL Device’s Internet Access Application
LAN
Bridging
IPoE
PPPoE
ADSL / VDSL
IPoA / PPPoA
ADSL
WAN
Internet
WAN
Internet
You can also configure IP filtering on the Z yXEL Devi ce for secure Internet access.
When the IP filter is on, all incoming traffic from the Internet to your network is
blocked by default unless it is initiated from y our network. This means that probes
from the outside to your network are not allowed, but you can safely browse the
Internet and download files.
P-870HN-51b User’s Guide
23
Page 24
Chapter 1 Introducing the ZyXEL Device
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 2 The Front Panel of the Device:
24
P-870HN-51b User’s Guide
Page 25
Chapter 1 Introducing the ZyXEL Device
None of the LEDs are on if the ZyXEL Device is not receiving power.
Table 1 LED Descriptions
LED COLOR STATUS DESCRIPTION
POWER Green On The ZyXEL Device is receiving power and ready for
use.
Blinking The ZyXEL Device is self-testing.
Red On The ZyXEL Device detected an error while self-testing,
or there is a device malfunction.
Off The ZyXEL Device is not receiving power.
ETHERNET
1-4
WLAN/
WPS
DSL Green On The ADSL line is up.
INTERNET Green On The ZyXEL Device has an IP connection but no traffic.
Green On The ZyXEL Device has an Ethernet connection with a
device on the Local Area Network (LAN).
Blinking The ZyXEL Device is sending/receiving data to /from
the LAN.
Off The ZyXEL Device does not have an Ethernet
connection with the LAN.
Green On The wireless network is activated.
Blinking The ZyXEL Device is communicating with other
wireless clients.
Orange Blinking The ZyXEL Device is setting up a WPS connection.
Off The wireless network is not activated.
Blinking The ZyXEL Device is initializing the ADSL line.
Orange On The VDSL line is up.
Blinking The ZyXEL Device is initializing the VDSL line.
Off The DSL line is down.
Red On The ZyXEL Device attempted to make an IP connection
Off The ZyXEL Device does not have an IP connection.
Refer to the Quick Start Guide for information on hardware connections.
1.6 The RESET Button
If you forget your password or cannot access the web configurator, you will need
to use the RESET button at the back of the device to reload the factory-default
P-870HN-51b User’s Guide
Your device has a WAN IP address (either static or
assigned by a DHCP server), PPP negotiation was
successfully completed (if used) and the DSL
connection is up.
but failed. Possible causes are no response from a
DHCP server, no PPPoE response, PPPoE authentication
failed.
25
Page 26
Chapter 1 Introducing the ZyXEL Device
configuration file. This means that you will lose all configurations that you had
previously and the password will be reset to “1234”. You can also use the
1.6.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking).
2 To set the device back to the factory default settings, press the RESET button for
ten seconds or until the POWER LED begins to blink and then release it. When the
POWER LED begins to blink, the defaults have been restored and the device
restarts.
1.7 The WPS WLAN Button
You can use the WPS WLAN button at the rear panel of the device to turn the
wireless LAN off or on. You can also use it to activate WPS in ord er to q ui c kl y set
up a wireless network with strong security.
1.7.1 Turn the Wireless LAN Off or On
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN button for one second and release it. The WLAN/WPS LED
should change from on to off or vice versa.
1.7.2 Activate WPS
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN button for more than five seconds and release it. Press the
WPS button on another WPS -enabled device within range of the ZyXEL Device.
The WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS
connection with the wireless device.
Note: You must activate WPS in the ZyXEL Device and in another wireless device
within two minutes of each other. See Section 7.10.4 on page 125 for more
information.
26
P-870HN-51b User’s Guide
Page 27
CHAPTER 2
Tutorials
This chapter shows you how to set up a wireless network (see page 27) and how
to set up multiple VDSL connection groups (see page 37).
2.1 How to Set up a Wireless Network
This tutorial gives you examples of how to set up an access point and wireless
client for wireless communication using the following parameters. The wireless
clients can access the Internet th roug h an AP wirelessly.
2.1.1 Example Parameters
SSID SSID_Example3
Security WPA-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
802.11 mode IEEE 802.11b/g
An access point (AP) or wireless router is referred to as “AP” and a computer with
a wireless network card or USB/PCI adapter is referred to as “wireless client” here.
We use the ZyXEL Device web screens and M-302 utility screens as an example.
The screens may vary slightly for different models.
2.1.2 Configuring the AP
Follow the steps below to configure the wireless settings on your AP.
P-870HN-51b User’s Guide
27
Page 28
Chapter 2 Tutorials
1 Open the Network > Wireless LAN screen in the AP’s web configurator.
Figure 3 AP: Wireless LAN
2 Make sure the Active Wireless LAN check box is selected.
3 Enter “SSID_Example3” as the SSID and select a channel which is not used by
another AP.
4 Set security mode to WPA-PSK and enter “ThisismyWPA-PSKpre-sharedkey” in
the Pre-Shared Key field. Click Apply.
28
P-870HN-51b User’s Guide
Page 29
Chapter 2 Tutorials
5 Click the Advanced Setup tab and select 802.11b/g Mixed in the 802.11
Mode field. Click Apply.
Figure 4 AP: Wireless LAN > Advanced Setup
6 Open the Status screen.Verify your wireless and wireless security settings under
Device Information and check if the WLAN connection is up under Interface
Status.
Figure 5 AP: Status
P-870HN-51b User’s Guide
29
Page 30
Chapter 2 Tutorials
7 Click the WLAN Station List hyperlink in the AP’s Status screen. You can see if
any wireless client has connected to the AP.
Figure 6 AP: Status: WLAN Station List
2.1.3 Configuring the Wireless Client
This section describes how to connect the wireless client to a network.
2.1.3.1 Connecting to a Wireless LAN
The following sections show you how to join a wireless network using the ZyXEL
utility, as in the following diagram. The wireless client is labeled C and the access
point is labeled AP.
C
There are three ways to connect the client to an access point.
• Configure nothing and leave the wireless client to automatically scan for and
connect to any available network that has no wireless security configured.
• Manually connect to a network.
AP
Internet
30
• Configure a profile to have the wireless client automatically connect to a specific
network or peer computer.
P-870HN-51b User’s Guide
Page 31
Chapter 2 Tutorials
This example illustrates how to manually connect your wireless cli ent to an access
point (AP) which is configured for WPA-PSK security and connected to the
Internet. Before you connect to the access point, you must know its Service Set
IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is
“SSID_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”.
After you install the ZyXEL utility and then insert the wireless client, follow the
steps below to connect to a network using the Site Survey screen.
1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown
next.
Figure 7 ZyXEL Utility: Site Survey
2 The wireless client automatically searches for available wireless networks. Click
Scan if you want to search again. If no entry displays in the Available Network
List, that means there is no wireless network available with i n range. Make su re
the AP or peer computer is turned on or move the wireless client closer to the AP
or peer computer.
P-870HN-51b User’s Guide
31
Page 32
Chapter 2 Tutorials
3 When you try to connect to an AP with secu ri ty configured, a window will pop up
prompting you to specify the security settings. Enter the pre-shared k ey and leave
the encryption type at the default setting.
Use the Next button to move on to the next screen. You can use the Back button
at any time to return to the previous screen, or the Exit button to return to the
Site Survey screen.
Figure 8 ZyXEL Utility: Security Settings
4 The Confirm Save window appears. Check your settings and click Save to
continue.
Figure 9 ZyXEL Utility: Confirm Save
32
P-870HN-51b User’s Guide
Page 33
Chapter 2 Tutorials
5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless
network using your settings. When the wireless link is established, the ZyXEL
utility icon in the system tray turns green and the Link Info screen displays
details of the active connection. Check the network information in the Link Info
screen to verify that you have successfully connected to the selected network. If
the wireless client is not connected to a network, the fields in this screen remain
blank.
Figure 10 ZyXEL Utility: Link Info
6 Open your Internet browser and enter http://www.zyxel.com or the URL of any
other web site in the address bar. If you are able to access the web site, your
wireless connection is successfully configured.
If you cannot access the web site, try changing the encryption type in the
Security Settings screen, check the Troubleshooting section of this User's Guide
or contact your network administrator.
2.1.3.2 Creating and Using a Profile
A profile lets you automatically connect to the same wireless network every time
you use the wireless client. You can also configure different profiles for different
networks, for example if you connect a notebook computer to wireless networks at
home and at work.
This example illustrates how to set up a profile and connect the wireless client to
an access point configured for WPA-PSK security. In this example, the SSID is
“SSID_Example3”, the profile name is “PN_Example3” and the pre-shared key is
“ThisismyWPA-PSKpre-sharedkey”. You have chosen the profile name
“PN_Example3”.
P-870HN-51b User’s Guide
33
Page 34
Chapter 2 Tutorials
1 Open the ZyXEL utility and click the Profile tab to open the screen shown next.
Click Add to configure a new profile.
Figure 11 ZyXEL Utility: Profile
2 The Add New Profile screen appears. The wireless client automatically searches
for available wireless networks, which are displayed in the Scan Info box. Click
on Scan if you want to search again. You can also configure your profile for a
wireless network that is not in the list.
Figure 12 ZyXEL Utility: Add New Profile
3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select
Infrastructure and either manually enter or select the AP's SSID in the Scan
Info table and click Select.
34
P-870HN-51b User’s Guide
Page 35
Chapter 2 Tutorials
4 Choose the same encryption method as the AP to which you want to connect (In
this example, WPA-PSK).
Figure 13 ZyXEL Utility: Profile Security
5 This screen varies depending on the encryption method you selected in the
previous screen. Enter the pre-shared key and leave the encryption type at the
default setting.
Figure 14 ZyXEL Utility: Profile Encryption
6 In the next screen, leave both boxes checked.
Figure 15 Profile: Wireless Protocol Settings.
P-870HN-51b User’s Guide
35
Page 36
Chapter 2 Tutorials
7 Verify the profile settings in the read-only screen. Click Save to save and go to the
next screen.
Figure 16 Profile: Confirm Save
8 Click Activate Now to use the new profile immediately. Otherwise, click the
Activate Later button.
If you clicked Activate Later, you can select the profile from the list in the Profile
screen and click Connect to activate it.
Note: Only one profile can be activated and used at any given time.
Figure 17 Profile: Activate
9 When you activate the new profile, the ZyXEL utility returns to the Link Info
screen while it connects to the AP using your settings. When the wireless link is
established, the ZyXEL utility icon in the system tray turns gr een and the Link
Info screen displays details of the active connection.
10 Open your Internet browser, enter http://www.zyxel.com or the URL of any other
web site in the address bar and press ENTER. If you are able to access the web
site, your new profile is successfully configured.
11 If you cannot access the Internet go back to the Profile screen, select the profile
you are using and click Edit. Check the details you entered previously. Also, refer
to the Troubleshooting section of this User's Guide or contact your network
administrator if necessary.
36
P-870HN-51b User’s Guide
Page 37
Chapter 2 Tutorials
2.2 How to Set up Multiple VDSL Connection
Groups
This tutorial shows you how to set up two VDSL WAN connections for two LAN
groups. GR1 will use VDSL connection 1. GR2 will use VDSL connection 2. There is
also a third default group that has no WAN connection associated to it.
Table 2 VDSL Connection Groups
GROUP LAN WAN
Default LAN2 N/A
GR1 LAN1, WLAN VDSL1: ptm0_1(PTM/Bridge)
GR2 LAN3, LAN4 VDSL2: ptm0_2(PTM/PPPoE)
Multiple VDSL Connection Groups
Default: LAN2
192.168.1.x
VDSL1
ptm0_1(PTM/Bridge)
GR1: LAN1, WLAN
192.168.2.x
GR2: LAN3, 4
192.168.3.x
VDSL2
ptm0_2(PTM/PPPoE)
2.2.1 Adding WAN Internet Connections
In this example, we will add 2 new WAN connections: PTM/Bridge and PTM/PPP oE.
Internet
P-870HN-51b User’s Guide
37
Page 38
Chapter 2 Tutorials
2.2.1.1 Adding a PTM/Bridge WAN Service
1 Click Network > WAN > Layer 2 Interface. Select PTM as your interface, then
click Add.
2 Select the MSC Mode as the PTM Connection Mode. Then click Apply/Save.
38
3 The PTM interface is added to the Layer 2 Interface screen. Click Network >
WAN > Internet Connection and click Add.
4 Select PTM0/(0_0_1) as the layer 2 interface for this service and click Next.
P-870HN-51b User’s Guide
Page 39
Chapter 2 Tutorials
5 Select Bridging as the WAN service type. Then click Next to finish the setup.
6 The WAN setup summary is displayed. If the settings are correct, click Apply/
Save.
7 The PTM/Bridge WAN connection is configured successfully. The Internet
Connection screen should look like the following.
P-870HN-51b User’s Guide
39
Page 40
Chapter 2 Tutorials
2.2.1.2 Adding a PTM/PPPoE WAN Service
1 Click Network > WAN > Internet Connection and click Add.
2 Select PTM0/(0_0_1) as the layer 2 interface for this service and click Next.
3 Select PPP over Ethernet as the WAN service type. Then click Next.
40
P-870HN-51b User’s Guide
Page 41
Chapter 2 Tutorials
4 Configure the PPP User and Password screen. The PPP Username is
Service@ISP.net, the PPP Password is 1234, and the PPPoE Service Name is
User. Clic k Next when you finish the settings.
5 Select pppoe_0_0_1_2/ppp0_2 as the WAN Interface. Then click Next.
6 Obtain DNS from the PPPoE WAN interface that you selected. Then click Next to
finish the setup.
P-870HN-51b User’s Guide
41
Page 42
Chapter 2 Tutorials
7 The WAN setup summary is displayed. If the settings are correct, click Apply/
Save.
8 The PTM/PPPoE WAN connection is configured successfully. The Internet
Connection screen should look like the following.
2.2.2 Setting Interface Groups
This part shows examples of creating multiple networks groups with the W AN
services tha t you have configured in the previous section.
42
P-870HN-51b User’s Guide
Page 43
Chapter 2 Tutorials
1 Click Advanced Setup > Interface Group to open the following screen. Click
Add to create a new interface group GR1.
2 Enter GR1 as the Group Name. In this group, we will associate PTM/Bridge as the
WAN interface with LAN1 and WL_ZyXEL01 (WLAN) as the LAN interfaces. Select
br_0_0_1_1/ptm0_1(VDSL1) from the WAN Interface drop-down list. Select
LAN1 and WL_ZyXEL01 (WLAN) from the Available LAN Interfaces list and
click <- to add it to the Grouped LAN Interfaces. Click Apply to finish the
settings.
P-870HN-51b User’s Guide
43
Page 44
Chapter 2 Tutorials
3 GR1 has been added successfully to the interface group list. Click Add to create
another interface group: GR2.
4 Enter GR2 as the Group Name. In this group, we will associate PTM/PPPoE as the
WAN interface with LAN3 and LAN4 as the LAN interfaces. Select
pppoe_0_0_1_2/ppp0_2 (VDSL2) from the WAN Interface drop-down list.
Select LAN3 and LAN4 from the Available LAN Interfaces list and click <- to
add them to the Grouped LAN Interfaces. Click Apply to finish the settings.
44
P-870HN-51b User’s Guide
Page 45
Chapter 2 Tutorials
5 GR2 has been added successfully to the interface group list. The screen should
look like the following.
P-870HN-51b User’s Guide
45
Page 46
Chapter 2 Tutorials
2.2.3 Configuring Interface Group IP
1 Click Network > LAN > IP. Select GR1 from the GroupName drop-down list. The
IP Address (192.168.2.1) and IP Subnet Mask (255.255.255.0) is obtained
automatically.
46
P-870HN-51b User’s Guide
Page 47
Chapter 2 Tutorials
2 Select GR2 from the GroupName drop-down list. The IP Address (192.168.3.1)
and IP Subnet Mask (255.255.255.0) is obtained automatically. Select Active
DHCP and DHCP Server to have the ZyXEL Device act as the DHCP server for the
network. Click Apply when you finish the settings.
2.2.4 Testing the VDSL Connection Groups
To test if the connection groups are successfully configured, you can do the
following: connect your computer to LAN1 of the ZyXEL Device. After a few
seconds, your computer gets a new IP from the WAN side. If you can access
Internet by using this VDSL connection, GR1 is successfully configured.
To test GR2, connect your computer to LAN3 or LAN4 of the Z yXEL Device. After a
few seconds, the IP address of your computer should be renewed to 192.168.3.x
automatically. If you can access Internet by using this VDSL connection, GR2 is
successfully configured.
P-870HN-51b User’s Guide
47
Page 48
Chapter 2 Tutorials
48
P-870HN-51b User’s Guide
Page 49
CHAPTER 3
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
3.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy
device setup and management via Internet browser. Use Internet Explorer 6.0 and
later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop -up windows from your device. W eb pop-up blocking is enabl ed
by default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See Appendix B on page 291 if you need to make sure these functions are allowed
in Internet Explorer.
3.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick
Start Guide).
2 Launch your web browser.
3 Type "http://192.168.1.1" as the URL.
P-870HN-51b User’s Guide
49
Page 50
Chapter 3 Introducing the Web Configurator
4 A password screen displays. Enter the default admin user name admin and
default admin password 1234. Otherwise, enter the default user name user and
user password user. You cannot configure some settings with the user account.
The password displays in non-readable characters. If you have changed the
password, enter your password and click Login. Click Cancel to revert to the
default password in the password field.
Figure 18 Password Screen
3.2 Web Configurator Main Screen
This guide uses the P-870HN-51b screenshots as an example. The screens may
vary slightly for different ZyXEL Device models.
Figure 19 Main Screen
A
B
C
50
D
P-870HN-51b User’s Guide
Page 51
Chapter 3 Introducing the Web Configurator
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - navigation panel
• C - main window
• D - status bar
3.2.1 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL
Device features. The following tables describe each menu item.
Table 3 Navigation Panel Summary
LINK TAB FUNCTION
Status This screen shows the ZyXEL Device’s general device and network
status information. Use this screen to access the statistics and
client list.
Network
WAN Layer 2
Interface
Internet
Connection
LAN IP Use this screen to configure LAN TCP/IP, DHCP and IP alias
Wireless LAN General Use this screen to configure the wireless LAN settings, WLAN
More AP Use this screen to configure multiple BSSs on the ZyXEL Device.
WPS Use this screen to enable WPS (Wi-Fi Protected Setup) and view
WPS Station Use this screen to use WPS to set up your wireless network.
WDS Use this screen to set up Wireless Distribution System links to
Advanced
Setup
NAT Port
Forwarding
Use this screen to add or remove a DSL PTM (Packet Transfer
Mode) interface.
Use this screen to configure ISP parameters, WAN IP address
assignment, and other advanced properties.
settings.
authentication/security settings and MAC filtering rules.
the WPS status.
other access points.
Use this screen to configure the advanced wireless LAN settings.
The NAT screens are available only when you enable NAT in a
WAN connection.
Trigger Port Use this screen to change your ZyXEL Device’s port triggering
DMZ Host Use this screen to configure a default server which receives
ALG Use this screen to allow SIP sessions to pass through the ZyXEL
P-870HN-51b User’s Guide
Use this screen to make your local servers visible to the outside
world.
settings.
packets from ports that are not specified in the Port Forwarding
screen.
Device.
51
Page 52
Chapter 3 Introducing the Web Configurator
Table 3 Navigation Panel Summary
LINK TAB FUNCTION
Security
MAC Filter Use this screen to configure filtering rule(s) that blocks or allows
traffic according to its destination and/or source MAC address in
bridge mode.
Firewall Incoming This screen shows a summary of the IP filtering rules, and allows
you to add or remove an incoming IP filtering rule that allows
incoming traffic from the WAN.
Certificate Local
Certificates
Trusted CA Use this screen to view and manage the list of the trusted CAs.
Advanced
Static Route IP Static Route Use this screen to configure IP static routes to tell your device
Policy
Forwarding
RIP Use this screen to configure RIP (Routing Information Protocol)
QoS General Use this screen to enable QoS.
Queue Setup Use this screen to configure QoS queues.
Class Setup
Monitor Use this screen to view QoS packets statistics.
Dynamic DNS This screen allows you to use a static hostname alias for a
Remote
MGMT
UPnP General Use this screen to turn UPnP on or off.
Parental
Control
Interface
Group
Maintenance
System General Use this screen to configure your device’s name, domain name,
Logs View Log Use this screen to view the logs for the level that you selected.
TR069 Use this screen to configure the ZyXEL Device to be managed by
TR064 Use this screen to enable management via TR-064 on the LAN.
Service
Control
IP Address Use this screen to configure from which IP address(es) users can
Time
Restriction
URL Filter Use this screen to prevent users of your network from viewing
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Log Settings Use this screen to change your ZyXEL Device’s log settings.
Use this screen to view a summary list of certificates and manage
certificates and certification requests.
about networks beyond the directly connected remote nodes.
Use this screen to configure policy routing on the ZyXEL Device.
settings.
Use this screen to define a classifier.
dynamic IP address.
an ACS (Auto Configuration Server).
Use this screen to configure which services/protocols can access
which ZyXEL Device interface.
manage the ZyXEL Device.
Use this screen to configure the days and times when the
restrictions are enforced.
inappropriate web content.
Use this screen to map a port to a PVC or bridge group.
management inactivity timeout and password.
52
P-870HN-51b User’s Guide
Page 53
Chapter 3 Introducing the Web Configurator
Table 3 Navigation Panel Summary
LINK TAB FUNCTION
Tools Firmware Use this screen to upload firmwa re to your device.
Configuration Use this screen to backup and restore your device’s configuration
(settings) or reset the factory default settings.
Restart This screen allows you to reboot the ZyXEL Device without turning
the power off.
Diagnostic General Use this screen to test the connections to other devices.
802.1ag Use this screen to configure CFM (Connectivity Fault
Management) MD (maintenance domain) and MA (maintenance
association), perform connectivity tests and view test reports.
3.2.2 Main Window
The main window displays information and configuration fields. It is discussed in
the rest of this document.
Right after you log in, the Status screen is displayed. See Chapter 4 on page 55
for more information about the Status screen.
3.2.3 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration
has been updated.
P-870HN-51b User’s Guide
53
Page 54
Chapter 3 Introducing the Web Configurator
54
P-870HN-51b User’s Guide
Page 55
CHAPTER 4
Status Screens
Use the Status screens to look at the current status of the device, system
resources and interfaces (LAN and WAN). The Status screen also provides
detailed information from DHCP and statistics from traffic.
4.1 Status Screen
Click Status to open this screen.
Figure 20 Status Screen
P-870HN-51b User’s Guide
55
Page 56
Chapter 4 Status Screens
Each field is described in the following table.
Table 4 Status Screen
LABEL DESCRIPTION
Refresh Interval Enter how often you want the ZyXEL Device to update this screen.
Apply Click this to update this screen immediately.
Device
Information
User Name This field displays the ZyXEL Device system name. It is used for
Model
Number
MAC
Address
Firmware
Version
DSL
Firmware
Version
WAN
Information
Mode This is the method of encapsulation used by your ISP.
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
LAN
Information
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
DHCP This field displays what DHCP services the ZyXEL Device is providing to
identification. Click this to go to the screen where you can change it.
This is the model name of your device.
This is the MAC (Media Access Control) or Ethernet address unique to
your ZyXEL Device.
This field displays the current version of the firmware inside the device.
It also shows the date the firmware version was created. Click this to go
to the screen where you can change it.
This field displays the current version of the device’s DSL modem code.
WAN.
This field displays the current subnet mask in the WAN.
LAN. Click this to go to the screen where you can change it.
This field displays the current subnet mask in the LAN.
the LAN. Choices are:
56
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP
addresses to other computers in the LAN.
Relay - The ZyXEL Device acts as a surrogate DHCP server and relays
DHCP requests and responses between the remote server and the
clients.
None - The ZyXEL Device is not providing any DHCP services to the
LAN.
Click this to go to the screen where you can change it.
WLAN
Information
Channel This is the channel number used by the ZyXEL Device now.
P-870HN-51b User’s Guide
Page 57
Chapter 4 Status Screens
Table 4 Status Screen
LABEL DESCRIPTION
WPS Status This field displays the status of WPS (Wi-Fi Protected Setup). Click this
to go to the screen where you can change it.
WDS Status This field displays
• AP when WDS is disabled.
• Bridge when the ZyXEL Device functions as a wireless network
bridge only to use WDS (Wireless Distribution System) to establish
wireless links with other APs.
• AP+Bridge when WDS is enabled and the ZyXEL Device acts as a
bridge and access point simultaneously.
Click this to go to the screen where you can change it
AP Information
ESSID This is the descriptive name used to identify the ZyXEL Device in this
wireless network. Click this to go to the screen where you can change
it.
Status This shows the current status of the wireless network.
Security This shows the level of wireless security the ZyXEL Device is using in
this wireless network.
System Status
System
Uptime
Current
Date/Time
System
Mode
CPU Usage This field displays what percentage of the ZyXEL Device’s processing
Memory
Usage
Interface Status
Interface This column displays each interface the ZyXEL Device has.
This field displays how long the ZyXEL Device has been running since it
last started up. The ZyXEL Device starts up when you plug it in, when
you restart it (Maintenance > Tools > Restart), or when you reset it
(see Section 1.6 on page 25).
This field displays the current date and time in the ZyXEL Device. You
can change this in Maintenance > System > Time Setting.
This displays whether the ZyXEL Device is functioning as a router or a
bridge.
ability is currently used. When this percentage is close to 100%, the
ZyXEL Device is running at full load, and the throughput is not going to
improve anymore. If you want some applications to have more
throughput, you should turn off other applications (for example, using
QoS; see Chapter 14 on page 177).
This field displays what percentage of the ZyXEL Device’s memory is
currently used. Usually, this percentage should not increase much. If
memory usage does get close to 100%, the ZyXEL Device is probably
becoming unstable, and you should restart the device. See Section 22.4
on page 238, or turn off the device (unplug the power) for a few
seconds.
P-870HN-51b User’s Guide
57
Page 58
Chapter 4 Status Screens
Table 4 Status Screen
LABEL DESCRIPTION
Status This field indicates whether or not the ZyXEL Device is using the
Rate For the DSL interface, it displays the downstream and upstream
More Status
WAN Service
Statistics
Route Info Click this link to view the internal routing table on the ZyXEL Device.
WLAN
Station List
LAN
Statistics
Client List Click this link to view current DHCP client information. See Section
interface.
For the DSL interface, this field displays LinkDown (line is down) or Up
(line is up or connected).
For the LAN interface, this field displays Up when the ZyXEL Device is
using the interface and NoLink when the line is disconnected.
For the WLAN interface, it displays Up when WLAN is enabled or
Disabled when WLAN is not active.
transmission rate.
For the LAN interface, this displays the port speed and duplex setting.
For the WLAN interface, it displays the maximum transmission rate.
Click this link to view packet specific statistics of the WAN
connection(s). See Section 4.1.1 on page 59.
See Section 4.1.2 on page 60.
Click this link to display the MAC address(es) of the wireless stations
that are currently associating with the ZyXEL Device. See Section 4.1.3
on page 62.
Click this link to view packet specific statistics on the LAN and WLAN
interfaces. See Section 4.1.4 on page 63.
4.1.5 on page 64.
58
P-870HN-51b User’s Guide
Page 59
4.1.1 WAN Service Statistics
Click Status > WAN Service Statistics to access this screen. Use this screen to
view the WAN statistics.
Figure 21 Status > WAN Service Statistics
Chapter 4 Status Screens
The following table describes the labels in this screen.
Table 5 Status > WAN Service Statistics
LABEL DESCRIPTION
Interface This shows the name of the WAN interface used by this connection.
The default name ipoa*, pppoa*, atm* or ptm* indicates the DSL
port. pppx (where x starts from 0 and is the index number of PPP
connection on the ZyXEL Device) indicates a PPP connection via any one
of the WAN interface.
The number after the dot (.) represents the VLAN ID n umber assigned to
traffic sent through this connection. The number after the underscore
(_) represents the index number of connections through the same
interface.
(null) means the entry is not valid.
Description This shows the descriptive name of this connection.
0 and 35 or 0 and 1 are the default VPI and VCI numbers. The last
number represents the index number of connections over the same PVC
or the VLAN ID number assigned to traffic sent through this connection.
(null) means the entry is not valid.
Received
Bytes This indicates the number of bytes received on this interface.
P-870HN-51b User’s Guide
59
Page 60
Chapter 4 Status Screens
Table 5 Status > WAN Service Statistics (continued)
LABEL DESCRIPTION
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
Drops This indicates the number of outgoing packets dropped on this interface.
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
interface.
interface.
Enter the time interval for refreshing statistics in this field.
Refresh Interval field.
4.1.2 Route Info
Routing is based on the destination address only and the ZyXEL Device takes the
shortest path to forward a packet. Click Status > Route Info to access this
screen. Use this screen to view the internal routing table on the ZyXEL Device.
Figure 22 Status > Route Info
The following table describes the labels in this screen.
Table 6 Status > Route Info
LABEL DESCRIPTION
Destination This indicates the destination IP address of this route.
Gateway This indicates the IP address of the gateway that helps forward this route’s
Subnet
Mask
traffic.
This indicates the destination subnet mask of this route.
60
P-870HN-51b User’s Guide
Page 61
Chapter 4 Status Screens
Table 6 Status > Route Info (continued)
LABEL DESCRIPTION
Flag This indicates the route status.
Up: The route is up.
!(Reject): The route is blocked and will force a route lookup to fail.
Gateway: The route uses a gateway to forward traffic.
Host: The target of the route is a host.
Reinstate: The route is reinstated for dynamic routing.
Dynamic (redirect): The route is dynamically installed by a routing daemon
or redirect
Modified (redirect): The route is modified from a routing daemon or
redirect.
Metric The metric represents the "cost of transmission". A router determines the
best route for transmission by choosing a path with the lowest "cost". The
smaller the number, the lower the "cost".
Service This indicates the name of the service used to forward the route.
Interface This indicates the name of the interface through which the route is
forwarded.
• br* indicates the LAN interface.
• ptm* indicates the VDSL WAN interface using IPoE or in bridge mode.
• atm* indicates the ADSL WAN interface using IPoE or in bridge mode.
• pppoa* indicates the ADSL WAN interface using PPPoA.
• ipoa* indicates the ADSL WAN interface using IPoA.
P-870HN-51b User’s Guide
61
Page 62
Chapter 4 Status Screens
4.1.3 WLAN Station List
Click Status > WLAN Station List to access this screen. Use this screen to view
the wireless stations that are currently associated to the ZyXEL Device.
Figure 23 Status > WLAN Station List
The following table describes the labels in this screen.
Table 7 Status > WLAN Station List
LABEL DESCRIPTION
MAC This field shows the MAC (Media Access Control) address of an associated
wireless station.
SSID This field shows the SSID to which the wireless station is connected.
Interface This field shows the wireless interface to which the wireless station is
connected.
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the Refresh
Stop Click Stop to stop refreshing statistics.
Enter the time interval for refreshing statistics in this field.
Interval field.
62
P-870HN-51b User’s Guide
Page 63
4.1.4 LAN Statistics
Click Status > LAN Statistics to access this screen. Use this screen to view the
LAN statistics.
Figure 24 Status > LAN Statistics
Chapter 4 Status Screens
The following table describes the labels in this screen.
Table 8 Status > LAN Statistics
LABEL DESCRIPTION
Interface This shows the LAN or WLAN interface. eth0~3 represent the physical
Ethernet ports 1~ 4.
Received
Bytes This indicates the number of bytes received on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
interface.
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
interface.
Drops This indicates the number of outgoing packets dropped on this interface.
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
Enter the time interval for refreshing statistics in this field.
Refresh Interval field.
P-870HN-51b User’s Guide
63
Page 64
Chapter 4 Status Screens
4.1.5 Client List
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. Y ou can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the TCP/IP configur ation for the clients. If DHCP
service is disabled, you must have another DHCP server on your LAN, or else the
computer must be manually configured.
Click Status > Client List to open the following screen. The read-only DHCP table
shows current DHCP client information (including IP Address, Host Name and
MAC Address) of all network clients using the ZyXEL Device’s DHCP server.
Figure 25 Status > Client List
The following table describes the labels in this screen.
Table 9 Status > Client List
LABEL DESCRIPTION
Host Name This indicates the computer host name.
MAC Address Every Ethernet device has a unique MAC (Media Access Control)
address. The MAC address is assigned at the factory and consists of six
pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
This indicates the MAC address of the client computer.
IP Address This indicates the IP address assigned to this client computer.
64
P-870HN-51b User’s Guide
Page 65
PART II
Network
WAN Setup (67)
LAN Setup (93)
Wireless LAN (101)
Network Address Translation (NAT) (133)
65
Page 66
66
Page 67
CHAPTER 5
WAN Setup
5.1 Overview
This chapter discusses the ZyXEL Device’s WAN screens. Use these screens to
configure your ZyXEL Device for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another
network or the Internet. It connects your private networks (such as a LAN (Local
Area Network) and other networks, so that a computer in one location can
communicate with computers in other locations.
Figure 26 LAN and WAN
LAN
• See Section 5.6 on page 85 for advanced technical information on WAN.
WAN
5.1.1 What You Can Do in this Chapter
•The Layer 2 Interface screen lets you view, remove or add a layer-2 WAN
interface (Section 5.4 on page 69).
•The Internet Connection screen lets you view and configure the WAN settings
on the ZyXEL Device for Internet access (Section 5.5 on page 73).
Internet
P-870HN-51b User’s Guide
67
Page 68
Chapter 5 WAN Setup
5.2 What You Need to Know
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower
layer protocol. To set up a WAN connection to the Internet, you need to use the
same encapsulation method used by your ISP (Internet Service Provider). If your
ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA,
they should also provide a username and password (and service name) for user
authentication.
WAN IP Address
The WAN IP address is an IP address for the ZyXEL Device, which makes it
accessible from an outside network. It is used by the ZyXEL Device to
communicate with other devices in other networks. It can be static (fixed) or
dynamically assigned by the ISP each time the ZyXEL Device tries to access the
Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the
subnet mask and DNS server IP address(es) (and a gateway IP add ress if you use
the Ethernet or ENET ENCAP encapsulation method).
ATM
Asynchronous Transfer Mode (ATM) is a LAN and WAN networking technology that
provides high-speed data transfer. ATM uses fixed-size packets of information
called cells. With A TM, a high QoS (Quality of Service) can be guaranteed. ATM
uses a connection-oriented model and establishes a virtual circuit (VC) between
two endpoints before the actual data exchange begins.
PTM
Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2
standard. In PTM, packets are encapsulated directly in the High-level Data Link
Control (HDLC) frames. It is des igned to provide a low-ov erhead, tr ansparent w ay
of transporting packets over DSL links, as an alternative to ATM.
5.3 Before You Begin
You need to know your Internet access settings such as encapsulation and W AN IP
address. Get this information from your ISP.
68
P-870HN-51b User’s Guide
Page 69
5.4 The Layer 2 Interface Screen
The ZyXEL Device must have a layer-2 interface to allow users to use the DSL port
to access the Internet. The screen varies depending on the interface type you
select.
Note: The ATM and PTM layer-2 interfaces cannot work at the same time.
Figure 27 Layer 2 Interface: PTM
Chapter 5 WAN Setup
Figure 28 Layer 2 Interface: ATM
The following table describes the fields in this screen.
Table 10 Layer 2 Interface
LABEL DESCRIPTION
Interface Select an interface for which you want to configure here.
PTM: The ZyXEL Device uses the VDSL technology for data
transmission over the DSL port.
ATM: The ZyXEL Device uses the ADSL technology for data
transmission over the DSL port.
Interface This is the name of the interface.
Vpi This is the Virtual Path Identifier (VPI).
Vci This is the Virtual Channel Identifier (VCI).
Category This is the ATM traffic class.
Link Type This is the DSL link type of the ATM layer-2 interface.
P-870HN-51b User’s Guide
69
Page 70
Chapter 5 WAN Setup
Table 10 Layer 2 Interface (continued)
LABEL DESCRIPTION
Connection Mode This shows the connection mode of the layer-2 interface.
QoS This shows whether QoS (Quality of Service) is enabled on the ZyXEL
Device.
Remove Click the Remove button to delete this interface from the ZyXEL
Device. A window displays asking you to confirm that you want to
delete the interface.
You cannot remove the layer-2 interface when a WAN service is
associated with it.
Add Click this button to create a new layer-2 interface.
5.4.1 Layer 2 Interface Configuration
Click the Add button in the Layer 2 Interface screen to open the following
screen. Use this screen to create a new layer-2 interface. At the time of writing,
you can configure only one PTM interface on the ZyXEL Device. You can have
multiple ATM layer-2 interfaces using different VPI and/or VCI values. The screen
varies depending on the interface type you select.
70
P-870HN-51b User’s Guide
Page 71
Figure 29 DSL ATM Interface Configuration
Chapter 5 WAN Setup
Figure 30 DSL PTM Interface Configuration
P-870HN-51b User’s Guide
71
Page 72
Chapter 5 WAN Setup
The following table describes the fields in this screen.
Table 11 DSL PTM Interface Configuration
LABEL DESCRIPTION
ATM PVC
Configuration
VPI The valid range for the VPI is 0 to 255. Enter the VPI assigned to you.
VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local
Select DSL Link
Type
Encapsulation
Mode
VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define
a virtual circuit. This section is available only when you configure an
ATM layer-2 interface.
management of ATM traffic). Enter the VCI assigned to you.
Select EoA (Ethernet over ATM) to have an Ethernet header in the
packet, so that you can have multiple services/connections over one
PVC. You can set each connection to have its own MAC address or all
connections share one MAC address but use different VLAN IDs for
different services. EoA supports ENET ENCAP (IPoE), PPPoE and
RFC1483/2684 bridging encapsulation methods.
Select PPPoA (PPP over ATM) to allow just one PPPoA connection over
a PVC.
Select IPoA (IP over ATM) to allow just one RFC 1483 routing
connection over a PVC.
Select the method of multiplexing used by your ISP from the drop-
down list. Choices are:
• VC/MUX: In VC multiplexing, each protocol is carried on a single
ATM virtual circuit (VC). To transport multiple protocols, the ZyXEL
Device needs separate VCs. There is a binding between a VC and
the type of the network protocol carried on the VC. This reduces
payload overhead since there is no need to carry protocol
information in each Protocol Data Unit (PDU) payload.
• LLC/SNAP-BRIDGING: In LCC encapsulation, bridged PDUs are
encapsulated by identifying the type of the bridged media in the
SNAP header. This is available only when you select EoA in the
Select DSL Link Type field.
• LLC/ENCAPSULATION: More than one protocol can be carried
over the same VC. This is available only when you select PPPoA in
the Select DSL Link Type field.
• LLC/SNAP-ROUTING: In LCC encapsulation, bridged PDUs are
encapsulated by identifying the type of the bridged media in the
SNAP header. This is available only when you select EoA in the
Select DSL Link Type field.
Service Category Select UBR Without PCR or UBR With PCR for applications that are
non-time sensitive, such as e-mail.
Select CBR (Continuous Bit Rate) to specify fixed (always-on)
bandwidth for voice or data traffic.
Select Realtime VBR (real-time Variable Bit Rate) for applications
with bursty connections that require closely controlled delay and delay
variation.
Select Non Realtime VBR (non real-time Variable Bit Rate) for
connections that do not require closely controlled delay and delay
variation.
72
P-870HN-51b User’s Guide
Page 73
Chapter 5 WAN Setup
Table 11 DSL PTM Interface Configuration (continued)
LABEL DESCRIPTION
Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find
the Peak Cell Rate (PCR). This is the maximum rate at which the
sender can send cells. Type the PCR here.
This field is not available when you select UBR Without PCR.
Sustainable
Cell Rate
Maximum
Burst Size
Select
Connection Mode
The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that
can be transmitted. Type the SCR, which must be less than the PCR.
Note that system default is 0 cells/sec.
This field is available only when you select Non Realtime VBR or
Realtime VBR.
Maximum Burst Size (MBS) refers to the maximum number of cells
that can be sent at the peak rate. Type the MBS, which is less than
65535.
This field is available only when you select Non Realtime VBR or
Realtime VBR.
Select Default Mode to allow only one WAN service over a single
virtual circuit.
Select VLAN MUX Mode to allow multiplexing of multiple protocols
over a single virtual circuit. You need to assign a VLAN ID and priority
level to traffic through each WAN connection. All WAN connections
share one MAC address.
Select MSC Mode to allow multiple WAN services over a single virtual
circuit. Each WAN connection has its own MAC address.
This field is not available if you select PPPoA or IPoA as the DSL link
type. The ZyXEL Device uses Default Mode automatically for PPPoA
or IPoA.
Enable Quality Of
Service
Back Click this button to return to the previous screen without saving any
Apply/Save Click this button to save your changes and go back to the previous
Select this option to activate QoS (Quality of Service) on this interface
to group and prioritize traffic. Traffic is grouped according to the VLAN
group.
This field is not available when you select CBR or Realtime VBR.
changes.
screen.
5.5 The Internet Connection Screen
Use this screen to change your ZyXEL Device’s WAN settings. Click Network >
WAN > Internet Connection. The summary table shows you the configured
WAN services (connections) on the ZyXEL Device.
To use NAT, firewall or IGMP proxy in the ZyXEL Device, you need to configure a
WAN connection with PPPoE or IPoE.
P-870HN-51b User’s Guide
73
Page 74
Chapter 5 WAN Setup
Note: When a layer-2 interface is in VLAN MUX Mode or MSC Mode, you can
configure up to eight WAN services for each interface.
Figure 31 Internet Connection
The following table describes the labels in this screen.
Table 12 Internet Connection
LABEL DESCRIPTION
Interface This shows the name of the interface used by this connection.
A default name ipoa*, pppoa*, atm* or ptm* indicates DSL port.
The pppx name (where x starts from 0 and is the index number of
PPP connection on the ZyXEL Device) indicates a PPP connection via
any one of the WAN interface.
The number after the dot (.) represents the VLAN ID number assigned
to traffic sent through this connection. The number after the
underscore (_) represents the index number of connections through
the same interface.
(null) means the entry is not valid.
Description This is the service name of this connection.
0 and 35 or 0 and 1 are the default VPI and VCI numbers. The last
number represents the index number of connections over the same
PVC or the VLAN ID number assigned to traffic sent through this
connection.
(null) means the entry is not valid.
Type This shows the method of encapsulation used by this connection.
Rate This shows the maximum data rate (in Kbps) allowed for traffic sent
through this connection. This displays N/A when there is no limit on
transmission rate.
Vlan8021p This indicates the 802.1P priority level assigned to traffic sent through
this connection. This displays N/A when there is no priority level
assigned.
VlanMuxId This indicates the VLAN ID number assigned to traffic sent through
this connection. This displays N/A when there is no VLAN ID number
assigned.
ConnId This shows the index number of each connection. This displays N/A
when the interface used by the connection is in Default Mode.
74
P-870HN-51b User’s Guide
Page 75
Table 12 Internet Connection
LABEL DESCRIPTION
IGMP This shows whether IGMP (Internet Group Multicast Protocol) is
activated or not for this connection. IGMP is not available when the
connection uses the bridging service.
NAT This shows whether NAT is activated or not for this interface. NAT is
not available when the connection uses the bridging service.
Firewall This shows whether the firewall is activated or not for this connection.
The firewall is not available when the connection uses the bridging
service.
Modify Click the Edit icon to configure the WAN connection.
Click the Remove icon to delete the WAN connection.
Add Click Add to create a new connection.
5.5.1 WAN Connection Configuration
Click the Edit or Add button in the WAN Service screen to configure a WAN
connection.
Chapter 5 WAN Setup
5.5.1.1 WAN Interface
This screen displays when you add a new WAN connection.
Figure 32 WAN Configuration: WAN Interface
The following table describes the labels in this screen.
Table 13 WAN Configuration: WAN Interface
LABEL DESCRIPTION
Select a layer 2
interface for this
service
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select ptm0 to use the DSL port as the WAN port and use the VDSL
technology for data transmission.
Select atm0 to use the DSL port as the WAN port and use the ADSL
technology for data transmission.
P-870HN-51b User’s Guide
75
Page 76
Chapter 5 WAN Setup
5.5.1.2 Service Type
If you set the DSL link type to PPPoA or IPoA for the A TM interface and configure
a WAN connection using the ATM interface, you only need to configure the Enter
Service Description field in this screen.
Figure 33 WAN Configuration: Service Type
Figure 34 The following table describes the labels in this screen.
Table 14 WAN Configuration: Service Type
LABEL DESCRIPTION
Select WAN
service type
Enter Service
Description
Rate Limit Enter the maximum transmission rate in Kbps for traffic sent through the
Tag VLAN ID
for egress
packets
Enter 802.1P
Priority
Select the method of encapsulation used by your ISP.
Choices are PPP over Ethernet (PPPoE), IP over Ethernet and
Bridging.
Specify a name for this connection or use the automatically generated
one.
WAN connection. Otherwise, leave this field blank to disable the rate
limit.
This field is not available for an ATM connection if QoS is disabled in the
DSL ATM Interface Configuration.
Select this option to add the VLAN tag (specified below) to the outgoing
traffic through this connection.
This field is available when the layer-2 interface is in VLANMUX mode.
IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into
a MAC-layer frame that contains bits to define class of service.
T ype the IEEE 802.1p priorit y level (from 0 to 7) to add to tr affic through
this connection. The greater the number, the higher the priority level.
76
This field is available when the layer-2 interface is in VLANMUX mode.
P-870HN-51b User’s Guide
Page 77
Table 14 WAN Configuration: Service Type
LABEL DESCRIPTION
Enter 802.1Q
VLAN ID
Back Click this button to return to the previous screen.
Next Click this button to continue.
Type the VLAN ID number (from 1 to 4094) for traffic through this
connection.
This field is available when the PTM interface is in VLANMUX mode.
5.5.1.3 WAN IP Address and DNS Server
The screen differs by the encapsulation you selected in the previous scr een. See
Section 5.6 on page 85 for more information.
PPPoE or PPPoA
This screen displays when you select PPP over Ethernet (PPPoE) in the WAN
Service Configuration screen or set the DSL link type to PPPoA for the ATM
interface and configure a WAN connection using the ATM interface.
Chapter 5 WAN Setup
Figure 35 WAN Configuration: PPPoE
P-870HN-51b User’s Guide
77
Page 78
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 15 WAN Configuration: PPPoE or PPPoA
LABEL DESCRIPTION
PPP User Name Enter the user name exactly as your ISP assigned. If assigned a name
PPP Password Enter the password associated with the user name above .
PPPoE Service
Name
Authentication
Method
in the form user@domain where domain identifies a service name,
then enter both components exactly as given.
Type the name of your PPPoE service here.
This field is not available for a PPPoA connection.
The ZyXEL Device supports PAP (Password Authentication Protocol)
and CHAP (Challenge Handshake Authentication Protocol). CHAP is
more secure than PAP; however, PAP is readily available on more
platforms.
Use the drop-down list box to select an authentication protocol for
outgoing calls. Options are:
AUTO - Your ZyXEL Device accepts either CHAP or PAP when
requested by this remote node.
PAP - Your ZyXEL Device accepts PAP only.
CHAP - Your ZyXEL Device accepts CHAP only.
MSCHAP - Your ZyXEL Device accepts MSCHAP only. MS-CHAP is the
Microsoft version of the CHAP.
Enable Fullcone
NAT
Dial on Demand Select this check box when you do not want the connection up all the
Inactivity
Timeout
Use Static IPv4
Address
IPv4 Address Enter the static IP address provided by your ISP.
Enable PPP
Debug Mode
Select this option to enable full cone NAT on the ZyXEL Device.
time and specify an idle time-out in the Inactivity Timeout field.
Specify an idle time-out when you select Dial on Demand. The
default setting is 0, which means the Internet session will not timeout.
A static IPv4 address is a fixed IP that your ISP gives you. A dynamic
IP address is not fixed; the ISP assigns you a different one each time
you connect to the Internet. Select this if you do not have a dynamic
IP address.
Select this option to display PPP debugging messages on the console.
78
P-870HN-51b User’s Guide
Page 79
Table 15 WAN Configuration: PPPoE or PPPoA
LABEL DESCRIPTION
Bridge PPPoE
Frames Between
WAN and Local
Ports
Enable IGMP
Multicast Proxy
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this option to forward PPPoE packets from the WAN port to the
LAN ports and from the LAN ports to the WAN port.
In addition to the ZyXEL Device's built-in PPPoE client, you can select
this to allow up to ten hosts on the LAN to use PPPoE client software
on their computers to connect to the ISP via the ZyXEL Device. Each
host can have a separate account and a public WAN IP address.
This is an alternative to NAT for application where NAT is not
appropriate.
Clear this if you do not need to allow hosts on the LAN to use PPPoE
client software on their computers to connect to the ISP.
This field is not available for a PPPoA connection.
Select this check box to have the ZyXEL Device act as an IGMP proxy
on this connection. This allows the ZyXEL Device to get subscribing
information and maintain a joined member list for each multicast
group. It can reduce multicast traffic significantly.
Chapter 5 WAN Setup
IPoE
This screen displays when you select IP over Ethernet in the WAN Service
Configuration screen.
Figure 36 WAN Configuration: IPoE
P-870HN-51b User’s Guide
79
Page 80
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 16 WAN Configuration: IPoE
LABEL DESCRIPTION
Obtain an IP
address
automatically
Enable DHCP
Option 60
Vendor Class
Identifier
Enable DHCP
Option 61
IAID Enter the Identity Association Identifier (IAID) of the ZyXEL Device.
DUID Type Select Other to enter any string that identifies the ZyXEL Device in
A static IP address is a fixed IP that your ISP gives you. A dynamic IP
address is not fixed; the ISP assigns you a different one each time you
connect to the Internet. Select this if you have a dynamic IP address.
Select this to identify the vendor and functionality of the ZyXEL Device
in DHCP requests that the ZyXEL Device sends to a DHCP server when
getting a WAN IP address.
Enter the Vendor Class Identifier (Option 60), such as the type of the
hardware or firmware.
Select this to identify the ZyXEL Device in DHCP requests that the
ZyXEL Device sends to a DHCP server when getting a WAN IP address.
For example, the WAN connection index number.
the DUID field.
Select DUID-LL (DUID Based on Link-layer Address) to enter the
ZyXEL Device’s hardware address, that is the MAC address in the
DUID field.
Select DUID-EN (DUID Assigned by Vendor Base d on Enterprise
Number) to enter the vendor’s registered private enterprise number.
Identifier Enter a unique identifier assigned by the vendor.
This field is available when you select DUID-EN in the DUID Type
field.
Enable DHCP
Option 125
Manufacturer
OUI
Product Class Enter the product class of the ZyXEL Device.
Model Name Enter the model name of the ZyXEL Device.
Serial Number Enter the serial number of the ZyXEL Device.
Use the following
Static IP address
WAN IP
Address
WAN Subnet
Mask
WAN gateway
IP Address
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this to add vendor specific information to DHCP requests that
the ZyXEL Device sends to a DHCP server when getting a WAN IP
address.
Specify the vendor’s OUI (Organization Unique Identifier). It is usually
the first three bytes of the MAC address.
Select this if you have a static IP address.
Enter the static IP address provided by your ISP.
Enter the subnet mask provided by your ISP.
Enter the gateway IP address provided by your ISP.
80
P-870HN-51b User’s Guide
Page 81
Chapter 5 WAN Setup
IPoA
Figure 37 This screen displays only when you set the DSL link type to IPoA for
the ATM interface and configure a WAN connection using the ATM interface.
The following table describes the labels in this screen.
Table 17 WAN Configuration: IPoA
LABEL DESCRIPTION
WAN IP Address Enter the static IP address provided by your ISP.
WAN Subnet
Mask
Back Click this button to return to the previous screen.
Next Click this button to continue.
Enter the subnet mask provided by your ISP.
5.5.1.4 NAT, IGMP Multicast and Firewall Activation
The screen is available only when you select IP over Ethernet in the WAN
Service Configuration screen or set the DSL link type to IPoA for the ATM
interface and configure a WAN connection using the ATM interface.
Figure 38 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE/
IPoA
P-870HN-51b User’s Guide
81
Page 82
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 18 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE
LABEL DESCRIPTION
Enable NAT Select this check box to activate NAT on this connection.
Enable Fullcone
NAT
Enable Firewall Select this check box to activate Firewall on this connection.
Enable IGMP
Multicast Proxy
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this check box to activate full cone NAT on this connection.
This field is available only when you select Enable NAT.
Select this check box to have the ZyXEL Device act as an IGMP proxy
on this connection. This allows the ZyXEL Device to get subscribing
information and maintain a joined member list for each multicast
group. It can reduce multicast traffic significantly.
5.5.1.5 Default Gateway
The screen is not available when you select Bridging in the WAN Service
Configuration screen.
Figure 39 WAN Configuration: Default Gateway: PPPoE, PPPoA, IPoE or IPoA
The following table describes the labels in this screen.
Table 19 WAN Configuration: Default Gateway: PPPoE or IPoE
LABEL DESCRIPTION
Selected WAN
Interface
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select a WAN interface through which you want to forward the traffic.
5.5.1.6 DNS Server
The screen is not available when you select Bridging in the WAN Service
Configuration screen.
82
P-870HN-51b User’s Guide
Page 83
Chapter 5 WAN Setup
Note: If you configure only one IPoA or IPoE connection using the ATM interface on
the ZyXEL Device, you must enter the static DNS server address.
Figure 40 WAN Configuration: DNS Server: PPPoE, PPPoA, IPoE or IPoA
The following table describes the labels in this screen.
Table 20 WAN Configuration: DNS Server: PPPoE or IPoE
LABEL DESCRIPTION
Obtain DNS info
from a WAN
interface
WAN interface
selected
Use the following
Static DNS IP
address
Primary DNS
server
Secondary
DNS server
Back Click this button to return to the previous screen.
Next Click this button to continue.
Select this to have the ZyXEL Device get the DNS server addresses
from the ISP automatically.
This displays the WAN interface you selected in the previous screen.
Select this to have the ZyXEL Device use the DNS server addresses
you configure manually.
Enter the first DNS server address assigned by the ISP.
Enter the second DNS server address assigned by the ISP.
P-870HN-51b User’s Guide
83
Page 84
Chapter 5 WAN Setup
5.5.1.7 Configuration Summary
This read-only screen shows the current WAN connection settings.
Figure 41 WAN Configuration: Configuration Summary
The following table describes the labels in this screen.
Table 21 WAN Configuration: Configuration Summary
LABEL DESCRIPTION
Connection Type This is the encapsulation method used by this connection.
Service Name This is the name of the service.
Service Category This is the ATM traffic class.
This field is blank for a PTM or Ethernet WAN connection.
IP Address This shows whether the WAN IP address is assigned by the ISP,
manually configured or not configurable.
Service State This shows whether this service is active or not.
NAT This shows whether NAT is active or not for this connection.
Full Cone NAT This shows whether full cone NAT is active or not for this connection.
Firewall This shows whether Firewall is active or not for this connection.
IGMP Multicast This shows whether IGMP multicasting is active or not for this
connection.
Quality Of
Service
Back Click this button to return to the previous screen.
Apply/Save Click this button to save your changes.
This shows whether QoS is active or not for this connection.
84
P-870HN-51b User’s Guide
Page 85
5.6 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device
can work in bridge mode or routing mod e. When the ZyXEL Device is in routing
mode, it supports the following methods.
IP over Ethernet
IP over Ethernet (IPoE) is an alternative to PPPoE. IP packets are being delivered
across an Ethernet network, without using PPP encapsulation. They are routed
between the Ethernet interface and the WAN interface and then formatted so that
they can be understood in a bridged environment. For instance, it encapsulates
routed Ethernet frames into bridged Ethernet cells.
Chapter 5 WAN Setup
ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented
with the IP network protocol. IP packets are routed between the Ethernet interface
and the WAN interface and then formatted so that they can be understood in a
bridged environment. For instance, it encapsulates routed Ethernet frames into
bridged ATM cells.
PPP over Ethernet
Point-to-Point Protocol over Ethernet (PPPoE) provides access control and billing
functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF
standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that
works with existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network
services, a function known as dynamic servic e selection. This enables the service
provider to easily create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both yo u and the ISP or carri er, as
it requires no specific configuration of the broadband modem at the customer site .
By implementing PPPoE directly on the ZyXEL Device (rather than individual
computers), the computers on the LAN do not need PPPoE software installed,
P-870HN-51b User’s Guide
85
Page 86
Chapter 5 WAN Setup
since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of
the LANs’ computers will have access.
PPPoA
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A
PPPoA connection functions like a dial-up Internet connection. The ZyXEL Device
encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC
(Permanent Virtual Circuit) to the Internet Service Provider’ s (ISP) DSLAM (digital
access multiplexer). Please refer to RFC 2364 for more information on PPPoA.
Refer to RFC 1661 for more information on PPP.
RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM
Adaptation Layer 5 (AAL5). The first method allows multiplexing of multiple
protocols over a single A TM virtual circuit (LL C-based multiplexing) and the second
method assumes that each protocol is carried over a separate ATM virtual circuit
(VC-based multiplexing). Please refer to RFC 1483 for more detailed information.
Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is
carrying. Be sure to use the multiplexing method required by your ISP.
VC-based Multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific
virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be
dominant in environments where dynamic creation of large numbers of ATM VCs is
fast and economical.
LLC-based Multiplexing
In this case one VC carries multiple protocols with protocol identifying information
being contained in each packet header. Despite the extra bandwidth and
processing overhead, this method may be advantageous if it is not practical to
have a separate VC for each carried protocol, for example, if charging heavily
depends on the number of simultaneous VCs.
T raffic Shaping
86
T r affic Shaping is an agreement between the carrier and the subscriber to regulate
the average rate and fluctuations of data transmission over an ATM network. This
agreement helps eliminate congestion, which is important for transmission of real
time data such as audio and video connections.
P-870HN-51b User’s Guide
Page 87
Chapter 5 WAN Setup
Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This
parameter may be lower (but not higher) than the maximum line speed. 1 ATM
cell is 53 bytes (424 bits), so a maximum speed of 832Kbps gives a maximum
PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the
line speed.
Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It
specifies the maximum average rate at which cells can be sent over the virtual
connection. SCR may not be greater than the PCR.
Maximum Burst Size (MBS) is the maximum number of cells that can be sent at
the PCR. After MBS is reached, cell rates fall below SCR until cell rate averages to
the SCR again. At this time, more cells (up to the MBS) can be sent at the PCR
again.
If the PCR, SCR or MBS is set to the default of "0", the system will assign a
maximum value that correlates to your upstream line rate.
The following figure illustrates the relationship between PCR, SCR and MBS.
Figure 42 Example of Traffic Shaping
ATM Traffic Classes
These are the basic ATM traffic classes defined by the ATM Forum Traffic
Management 4.0 Specification.
Constant Bit Rate (CBR)
Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if
no data is being sent. CBR traffic is generally time-sensitive (doesn't tolerate
delay). CBR is used for connections that continuously require a specific amount of
bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be
dropped. Examples of connections that need CBR would be high-resolution video
and voice.
P-870HN-51b User’s Guide
87
Page 88
Chapter 5 WAN Setup
Variable Bit Rate (VBR)
The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections.
Connections that use the Variable Bit Rate (VBR) traffic class can be grouped into
real time (VBR-RT) or non-real time (VBR-nRT) connections.
The VBR-R T (real-time V ariable Bit Rate) type is used with burst y connections that
require closely controlled delay and delay variation. It also provides a fixed
amount of bandwidth (a PCR is specified) but is only available when data is being
sent. An example of an VBR-RT connection would be video conferencing. Video
conferencing requires real-time data transfers and the bandwidth requirement
varies in proportion to the video image's changing dynamics.
The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty
connections that do not require closely controlled delay and delay variation. It is
commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst
levels, SCR defines the minimum level. An example of an VBR-nRT connection
would be non-time sensitive data file transfers.
Unspecified Bit Rate (UBR)
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers.
However, UBR doesn't guarantee any bandwidth and only delivers traffic when the
network has spare bandwidth. An example application is background file transfer.
IP Address Assignment
A static IP is a fixed IP that your ISP gives y ou. A dynamic IP is not fix e d; the ISP
assigns you a different one each time. The Single User Account feature can be
enabled or disabled if you have either a dynamic or static IP. However the
encapsulation method assigned influences your choices for IP address and default
gateway.
Full Cone NAT
In full cone NAT, the NAT router maps all outg oing packets from an internal IP
address and port to a single IP address and port on the external network. The NA T
router also maps packets coming to that external IP address and port to the
internal IP address and port.
88
In the following example, the ZyXEL Device maps the source address of all
packets sent from the internal IP address 1 and port A to IP address 2 and port B
on the external network. The ZyXEL Device also performs NAT on all incoming
P-870HN-51b User’s Guide
Page 89
Chapter 5 WAN Setup
packets sent to IP address 2 and port B and forwards them to IP address 1, port
A.
Figure 43 Full Cone NAT Example
1, A
2, B
Symmetric NAT
The full, restricted and port restricted cone NAT types use the same mapping for
an outgoing packet’s source address regardless of the destination IP address and
port. In symmetric NAT, the mapping of an outgoing packet’s source address to a
source address in another network is different for each different destination IP
address and port.
In the following example, the ZyXEL Devi ce maps the source address IP address 1
and port A to IP address 2 and port B on the external network for packets sent to
IP address 3 and port C. The Z yXEL Device uses a different mapping (IP address 2
and port M) for packets sent to IP address 4 and port
A host on the external network (IP address 3 and port C for example) can only
send packets to the internal host via the external IP address and port that the NA T
router used in sending a packet to the external host’s IP address and port. So in
D.
P-870HN-51b User’s Guide
89
Page 90
Chapter 5 WAN Setup
the example, only 3, C is allowed to send packets to 2, B and onl y 4, D is allowed
to send packets to 2, M.
Figure 44 Symmetric NAT
3, C
2, B
4, D
1, A
2, M
4, E
5, B
Introduction to VLANs
A Virtual Local Area Network (VLAN) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In Multi-Tenant Unit (MTU) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
90
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Introduction to IEEE 802.1Q Tagged VLAN
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
P-870HN-51b User’s Guide
Page 91
Chapter 5 WAN Setup
contains two bytes of TPID (Tag Protocol Identifier), residing within the typ e/
length field of the Ethernet frame) and two bytes of TCI (Tag Control Information),
starts after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 Bits
Multicast
IP packets are transmitted in either one of two ways - Unicas t ( 1 sen der - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers
IP packets to a group of hosts on the network - not everybody and not just 1.
Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The addr ess 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
At start up, the ZyXEL Device queries all directly connected networks to gather
group membership. After that, the ZyXEL Device periodically updates this
information.
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP
address and vice versa, for instance, the IP address of www.zyxel.com is
P-870HN-51b User’s Guide
91
Page 92
Chapter 5 WAN Setup
204.217.0.2. The DNS server is extremely important because without it, you must
know the IP address of a computer before you can access it.
The ZyXEL Device can get the DNS server addresses in the following ways.
1 The ISP tells you the DNS server addresses, usually in the form of an information
sheet, when you sign up. If your ISP gives you DNS server addresses, manually
enter them in the DNS server fields.
2 If your ISP dynamically assigns the DNS server IP addresses (along with the
ZyXEL Device’s WAN IP address), set the DNS server fields to get the DNS server
address from the ISP.
92
P-870HN-51b User’s Guide
Page 93
CHAPTER 6
LAN Setup
6.1 Overview
A Local Area Network (LAN) is a shared communication system to which many
computers are attached. A LAN is usually located in one immediate area such as a
building or floor of a building.
The LAN screens can help you configure a LAN DHCP server and manage IP
addresses.
LAN
DSL
• See Section 6.4 on page 97 for more information on LANs.
• See Appendix D on page 313 for more information on IP addresses and
subnetting.
6.1.1 What You Can Do in this Chapter
The LAN IP screen lets you set the LAN IP address and subnet mask of your
ZyXEL device and configure other LAN TCP/IP settings (Section 6.3 on page 95).
Internet
P-870HN-51b User’s Guide
93
Page 94
Chapter 6 LAN Setup
6.2 What You Need To Know
IP Address
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number. Th is is known as an
Internet Protocol address.
Subnet Mask
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
DHCP
DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP
configuration at start-up from a server. This ZyXEL Device has a built-in DHCP
server capability that assigns IP addresses and DNS servers to systems that
support DHCP client capability.
DHCP Relay
You can also configure the ZyXEL Device to relay client DHCP requests to a DHCP
server and the server’s responses back to the clients.
RIP
RIP (Routing Information Protocol) allows a router to exchange routing
information with other routers.
Multicast and IGMP
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data.
There are two versions 1 and 2. IGMP version 2 is an improvement over version 1
but IGMP version 1 is still in wide use.
94
P-870HN-51b User’s Guide
Page 95
DNS
DNS (Domain Name System) maps a domain name to its corresponding IP
address and vice versa. The DNS server is extremely important because without
it, you must know the IP address of a computer before you can access it. The DNS
server addresses you enter when you set up DHCP are passed to the client
machines along with the assigned IP address and subnet mask.
6.3 The LAN IP Screen
Click Network > LAN to open the IP screen. See Section 6.4 on page 97 for
background information. Use this screen to set the Local Area Network IP address
and subnet mask of your ZyXEL Device.
Figure 45 LAN > IP
Chapter 6 LAN Setup
P-870HN-51b User’s Guide
95
Page 96
Chapter 6 LAN Setup
The following table describes the fields in this screen.
Table 22 LAN > IP
LABEL DESCRIPTION
LAN TCP/IP
Group Name Select the interface group for which you want to configure the LAN
IP Address Enter the LAN IP address you want to assign to your ZyXEL Device in
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for
DHCP Setup
Active DHCP Select this to have the ZyXEL Device act as a DHCP server or DHCP
DHCP Server Select this option to have the ZyXEL Device assign IP addresses and
TCP/IP settings. See Chapter 19 on page 219 for how to create a new
interface group.
dotted decimal notation, for example, 192.168.1.1 (factory default).
example 255.255.255.0 (factory default).
relay agent.
Otherwise, deselect this to not have the ZyXEL Device provide any
DHCP services. The DHCP server will be disabled.
provide subnet mask, gateway, and DNS server information to the
network. The ZyXEL Device is the DHCP server for the network.
When the ZyXEL Device acts as a DHCP server, the following items
need to be set:
IP Pool
Starting
Address
Pool Size This field specifies the size, or count of the IP address pool.
DHCP Relay Select this option to have the ZyXEL Device forward DHCP request to
Relay Server If you select DHCP Relay, enter the IP address of the DHCP server.
DNS Servers Assigned by DHCP Server
If you do not configure DNS servers, the ZyXEL Device uses its LAN IP address and tells
the DHCP clients on the LAN that itself is the DNS server. When a LAN client sends a DNS
query to the ZyXEL Device, the ZyXEL Device forwards the query to its system DNS server
you configured in the WAN screen.
First DNS
Server
Second DNS
Server
IGMP Snooping
Active IGMP
Snooping
Standard
Mode
Blocking Mode Select this to have the ZyXEL Device block all unknown multicast
This field specifies the first of the contiguous addresses in the IP
address pool.
the DHCP server.
Enter the first DNS (Domain Name System) server IP address the
ZyXEL Device passes to the DHCP clients.
Enter the second DNS (Domain Name System) server IP address the
ZyXEL Device passes to the DHCP clients.
Select this option to enable IGMP snooping. This allows the ZyXEL
Device to passively learn multicast group.
Select this to have the ZyXEL Device forward multicast packets to a
port that joins the multicast group and broadcast unknown multicast
packets from the WAN to all LAN ports.
packets from the WAN.
96
P-870HN-51b User’s Guide
Page 97
Table 22 LAN > IP
LABEL DESCRIPTION
Active IP Alias Select the check box to configure another LAN network for t he ZyXEL
Device.
IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet
Mask
Apply Click Apply to save your changes back to the ZyXEL Device.
Type the subnet mask of your network in dotted decimal notation, for
example 255.255.255.0 (factory default).
6.4 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
LANs, WANs and the ZyXEL Device
Chapter 6 LAN Setup
The actual physical connection determines whether the ZyXEL Device ports are
LAN or WAN ports. There are two separate IP networks, one inside the LAN
network and the other outside the WAN network as shown next.
Figure 46 LAN and WAN IP Addresses
LAN
WAN
Internet
DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. Y ou can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you
turn DHCP service off, you must have another DHCP server on your LAN, or else
the computer must be manually configured.
P-870HN-51b User’s Guide
97
Page 98
Chapter 6 LAN Setup
IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP
clients (DHCP Pool). See the product specif ic a t i o ns in the appendices. Do not
assign static IP addresses from the DHCP pool to your LAN computers.
LAN TCP/IP
The ZyXEL Device has built-in DHCP server capability that assigns IP addresses
and DNS servers to systems that support DHCP client capability.
IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number.
Where you obtain your network number depends on your particular situation. If
the ISP or your network administrator assigns you a block of registered IP
addresses, follow their instructions in selecting the IP addresses and the subnet
mask.
If the ISP did not explicitly give you an IP network number, then most likely you
have a single user account and the ISP will assign you a dynamic IP address when
the connection is established. If this is the case, it is recommended that you select
a network number from 192.168.0.0 to 192.168.255.0 and you must enable the
Network Address Translation (NAT) feature of the ZyXEL Device. The Internet
Assigned Number Authority (IANA) reserved this block of addresses sp ecifically for
private use; please do not use any other number unless you are told otherwise.
Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are
reserved). In other words, the first three numbers specify the network number
while the last number identifies an individual computer on that network.
Once you have decided on the network number , pick an IP address that is easy to
remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that
no other device on your network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
98
Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are
isolated from the Internet, for example, only between your two branch offices, you
can assign any IP addresses to the hosts without problems. However, the Internet
P-870HN-51b User’s Guide
Page 99
Chapter 6 LAN Setup
Assigned Numbers Authority (IANA) has reserve d the following three blocks of IP
addresses specifically for private networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
You can obtain your IP address from the IANA, from an ISP or it can be assigned
from a private network. If you belong to a small organization and your Internet
access is through an ISP, the ISP can provide you with the Internet addresses for
your local networks. On the other hand, if you are part of a much larger
organization, you should consult your network administrator for the appropriate IP
addresses.
Note: Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, “Address Allocation for Private
Internets” and RFC 1466, “Guidelines for Management of IP Address Space”.
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The addr ess 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2
(IGMP-v2). At start up, the ZyXEL Device q ueries all directly connected networks
to gather group membership. After that, the Z yXEL Device periodically updates
this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN
and/or WAN interfaces in the web configurator (LAN; WAN). Select None to
disable IP multicasting on these interfaces.
P-870HN-51b User’s Guide
99
Page 100
Chapter 6 LAN Setup
IP Alias
IP alias allows you to partitio n a physi c a l network into different logical networks
over the same Ethernet interface. The ZyXEL Device supports three logical LAN
interfaces via its single physical Ethernet interface with the ZyXEL Device itself as
the gateway for each LAN network.
When you use IP alias, you can also configure firewall rules to control access
between the LAN's logical networks (subnets).
Note: Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A and B.
Figure 47 Physical Network & Partitioned Logical Networks
Ethernet
Interface
A: 192.168.1.1 - 192.168.1.24
B: 192.168.2.1 - 192.168.2.24
100
P-870HN-51b User’s Guide
Loading...