P-870HW-51a v2
802.11bg Wireless VDSL2 4 port gateway
Default Login Details
IP Address http://192.168.1.1
User Name 1234
Password 1234
Firmware Version 1.0
Edition 1, 1/2009
www.zyxel.com
www.zyxel.com
Copyright © 2009
ZyXEL Communications Corporation
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Zy XEL Device using
the web configurator. You should have at least a basic knowledge of TCP/IP
networking concepts and topology.
Related Documentation
•Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It
contains information on setting up your network and configuring for Internet
access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
Note: It is recommended you use the web configurator to configure the ZyXEL
Device.
• Support Disc
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
product certifications.
for additional support documentation and
User Guide Feedback
Help us help you. Send all User Guide-related comments, questi ons or suggestions
for improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
P-870HW-51a v2 User’s Guide
3
About This User's Guide
Customer Support
In the event of problems that cannot be solved by using this manual, you should
contact your vendor. If you cannot contact your vendor, then contact a ZyXEL
office for the region in which you bought the device. See ht t p ://www.zyxel.com/
web/contact_us.php for contact information. Please have the following information
ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
P-870HW-51a v2 User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The P-870HW-51a v2 may be referred to as the “ZyXEL Device”, the “device”,
the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
P-870HW-51a v2 User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Z yXEL Device
icon is not an exact representation of your device.
ZyXEL Device Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
P-870HW-51a v2 User’s Guide
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Antenna Warning! This device meets ETSI and FCC certification requirements when using
the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
Your product is marked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical
and electronic products should not be mixed with general waste. Used electrical and
electronic equipment should be treated separately.
P-870HW-51a v2 User’s Guide
7
Safety Warnings
8
P-870HW-51a v2 User’s Guide
Introduction ............................................................................................................................17
Introducing the ZyXEL Device ...................................................................................................19
Tutorials ..................................................................................................................................... 25
Introducing the Web Configurator .............................................................................................. 35
Status Screens .......................................................................................................................... 39
Network ...................................................................................................................................49
WAN Setup ............................ ............................................. ... .... ... ... ... ... .... ................................ 51
LAN Setup .................................................................................................................................69
Wireless LAN ............................ ... .... ... ... ............................................. ... .... ... ... ... .... ................... 79
Network Address Translation (NAT) ........................................................................................ 107
Security .................................................................................................................................115
IP Filter ........ ............................................. ... .... ... ... ... .... ............................................................117
Advanced ..............................................................................................................................123
Static Route ............................................................................................................................. 125
Quality of Service (QoS) ............................................................................ ... ... ... ..................... 129
Dynamic DNS Setup ................................................................................................................ 141
Remote Management ..............................................................................................................143
Universal Plug-and-Play (UPnP) ............................................................................................. 149
Maintenance, Troubleshooting and Specifications ..........................................................163
System Settings ........... ............................................. .... ... ... ... .... ... ........................................... 165
Logs ........................................................................................................................................169
Tools ........................................................................................................................................ 173
Troubleshooting ..................................................... .................................................................. 181
Product Specifications ............................................................................................................. 187
Appendices and Index .........................................................................................................193
New Template User’s Guide
9
10
New Template User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 17
Chapter 1
Introducing the ZyXEL Device...............................................................................................19
1.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 19
1.2 Ways to Manage the ZyXEL Device ................... .... ... ... ... .... ... ............................................. 19
1.3 Good Habits for Managing the ZyXEL Device .....................................................................20
1.4 Applications for the ZyXEL Device ...................................................................................... 20
1.4.1 Internet Access ................................................ ... ... .... ............................................. ...20
1.5 LEDs (Lights) ......................... .... ... ... ............................................. ... .... ... ... ... .... ... ................ 21
1.6 The RESET Button ............................. ... .... ... ... ............................................. .... ... ... ... ... ....... 22
1.6.1 Using the Reset Button ............. ... .... ... ... .................................................................... 22
1.7 The WPS WLAN Button ............................................................................................... .... ... 23
1.7.1 Turn the Wireless LAN Off or On ............................................................................... 23
1.7.2 Activate WPS ...... ... ... ... .... ... ... ... ............................................. .... ... ... ..........................23
Chapter 2
Tutorials...................................................................................................................................25
2.1 How to Set up a Wireless Network ...................................................................................... 25
2.1.1 Example Parameters ........................... ... ... .... ... ... ... .... ... ............................................. 25
2.1.2 Configuring the AP ....... .... ... ... ... ... .... .......................................................................... 25
2.1.3 Configuring the Wireless Client .................................................................................. 28
Chapter 3
Introducing the Web Configurator ........................................................................................35
3.1 Web Configurator Overview ................................................................................................. 35
3.1.1 Accessing the Web Configurator ................................................................................ 35
3.2 Web Configurator Main Screen ........................................................................................... 36
3.2.1 Navigation Panel .......... .... ... ... ... ................................................................................. 37
3.2.2 Main Window .......................... ... ............................................. .... ... ... ... .... ... ... .............38
P-870HW-51a v2 User’s Guide
11
Table of Contents
3.2.3 Status Bar ............................................... ... .............................................. ... ................ 38
Chapter 4
Status Screens........................................................................................................................39
4.1 Status Screen ............................... ... ... ... .... ... ... ... .............................................. ... ... ... .......... 39
4.1.1 WAN Service Statistics ............................................................................................... 42
4.1.2 Route Info ..................... .... ... ... ... ... .... ............................................. ... ... .... ... ... ... ..........43
4.1.3 WLAN Station List ............................................................................... .... ... ... ............. 45
4.1.4 LAN Statistics ............................ ... .... ... ... ... .............................................. ... ... ... ... ....... 46
4.1.5 Client List ............................................................................................ .... ... ... ... ..........47
Part II: Network....................................................................................... 49
Chapter 5
WAN Setup...............................................................................................................................51
5.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 51
5.1.1 What Yo u Can Do in this Chapter .............................................................................. 51
5.2 What You Need to Know ..................................... .... .............................................................52
5.3 Before You Begin ...... ...........................................................................................................52
5.4 The Internet Connection Screen .......................................................................................... 53
5.4.1 Advanced Internet Connection Setup ........................................................................ 56
5.5 The More Connections Screen ........................................................................................... 57
5.5.1 More Connections Edit ................................. ... ... ... .... ... ... ... ....................................... 59
5.5.2 Configuring More Connections Advanced Setup ....... ... ... ... ... .................................... 62
5.6 Technical Reference .............. .... ... ... ... ................................................................................. 63
Chapter 6
LAN Setup................................................................................................................................69
6.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 69
6.1.1 What Yo u Can Do in this Chapter .............................................................................. 69
6.2 What You Need To Know ................. ... ... .............................................................................. 70
6.3 Before You Begin ...... ...........................................................................................................71
6.4 The LAN IP Screen ..............................................................................................................71
6.5 The Client List Screen ......................................................................................................... 72
6.6 The IP Alias Screen ................................... ................................................ ... .... ................... 73
6.6.1 Configuring the LAN IP Alias Screen ......................................................................... 74
6.7 Technical Reference .............. .... ... ... ... ................................................................................. 75
Chapter 7
Wireless LAN...........................................................................................................................79
7.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 79
12
P-870HW-51a v2 User’s Guide
Table of Contents
7.1.1 What Yo u Can Do in this Chapter .............................................................................. 79
7.2 What You Need to Know ..................................... .... .............................................................80
7.3 Before You Begin ...... ...........................................................................................................82
7.4 The General Screen ........................................................................................................... 82
7.4.1 No Security .......................... ... ............................................. ... .... ... ... ... .... ................... 84
7.4.2 WEP Encryption ..... ... ... .... ... ... .................................................................................... 85
7.4.3 WPA(2)-PSK .............................................................................................................. 86
7.4.4 WPA(2) Authentication .............................. .... ... ... ... .... ... ... ... ... .................................... 88
7.5 The WPS Screen ............................... ... .... ... ... ... ................................................................. 89
7.6 The WPS Station Screen ....................................................................................................91
7.7 The MAC Filter Screen ................................................................................................... 91
7.8 The Advanced Setup Screen .............................................................................................. 93
7.9 Technical Reference .............. .... ... ... ... ................................................................................. 94
7.9.1 Wireless Network Overview ... ... ... .... ... ... ... .... ... ... ............................................. ... .... ... 95
7.9.2 Additional Wireless Terms .......................................................................................... 96
7.9.3 Wireless Security Overview ....................................................................................... 96
7.9.4 WiFi Protected Setup .................................................................................................98
Chapter 8
Network Address Translation (NAT)....................................................................................107
8.1 Overview ............... ............................................. .... ... ... ... .... ... ........................................... 107
8.1.1 What Yo u Can Do in this Chapter ............................................................................ 107
8.2 What You Need to Know ..................................... .... ........................................................... 107
8.3 The Port Forwarding Screen ............................................................................................. 108
8.3.1 The Port Forwarding Edit Screen .............................................................................110
8.4 The DMZ Host Screen ........................................................................................................111
8.5 Technical Reference .............. .... ... ... ... ................................................................................112
Part III: Security.....................................................................................115
Chapter 9
IP Filter...................................................................................................................................117
9.1 Overview ............... ............................................. .... ... ... ... .... ... ............................................117
9.1.1 What Yo u Can Do in this Chapter .............................................................................117
9.2 What You Need to Know ..................................... .... ............................................................117
9.3 The Incoming IP Filtering Screen .......................................................................................118
9.3.1 Creating Incoming Filtering Rules ..........................................................................120
Part IV: Advanced ................................................................................ 123
P-870HW-51a v2 User’s Guide
13
Table of Contents
Chapter 10
Static Route...........................................................................................................................125
10.1 Overview ....................................................................................................................... 125
10.1.1 What You Can Do in this Chapter .......................................................................... 125
10.2 The Static Route Screen .................................................................................................. 126
10.2.1 Static Route Edit ................................................................................................... 127
Chapter 11
Quality of Service (QoS).......................................................................................................129
11.1 Overview ......................................................................................................................... 129
11.1.1 What You Can Do in this Chapter ................................ ... ... ..................................... 129
11.2 What You Need to Know .................................................................................................. 130
11.3 The Quality of Service General Screen .......................................................................... 130
11.4 The Queue Setup Screen ................................................................................................ 131
11.4.1 Adding a QoS Queue ............................................................................................ 132
11.5 The Class Setup Screen ................................................................................................133
11.5.1 QoS Class Edit ...................................................................................................... 135
11.6 Technical Reference ........................................................................................................ 137
Chapter 12
Dynamic DNS Setup .............................................................................................................141
12.1 Overview ......................................................................................................................... 141
12.1.1 What You Can Do in this Chapter .......................................................................... 141
12.2 What You Need To Know ................................................................................................. 141
12.3 The Dynamic DNS Screen ................................................ ... ... ... ... .... ... ... ... .... ... ... ........... 1 42
Chapter 13
Remote Management............................................................................................................143
13.1 Overview .......................................................................................................................... 143
13.1.1 What You Can Do in this Chapter .......................................................................... 143
13.2 The TR-069 Screen .........................................................................................................143
13.3 The Service Control Screen ............................................................................................ 145
13.4 The IP Address Screen ................................................................................................... 146
13.4.1 Adding an IP Address ............................................................................................147
Chapter 14
Universal Plug-and-Play (UPnP)..........................................................................................149
14.1 Overview ......................................................................................................................... 149
14.1.1 What You Can Do in this Chapter .......................................................................... 149
14.2 What You Need to Know .................................................................................................. 149
14.3 The UPnP Screen ............................................................................................................150
14.4 Installing UPnP in Windows Example .............................................................................. 151
14.5 Using UPnP in Windows XP Example ............................................................................. 155
14
P-870HW-51a v2 User’s Guide
Table of Contents
Part V: Maintenance, Troubleshooting and Specifications.............. 163
Chapter 15
System Settings....................................................................................................................165
15.1 Overview .......................................................................................................................... 165
15.1.1 What You Can Do in this Chapter .......................................................................... 165
15.1.2 What You Need to Know ........................................................................................ 165
15.2 The General Screen ........................................................................................................166
15.3 The Time Setting Screen ................................................................................................ 167
Chapter 16
Logs ......................................................................................................................................169
16.1 Overview ......................................................................................................................... 169
16.1.1 What You Can Do in this Chapter .......................................................................... 169
16.2 The View Log Screen ...................................................................................................... 169
16.3 The Log Settings Screen ..... .... ... ...... ... .... ........................................................................ 170
Chapter 17
Tools.......................................................................................................................................173
17.1 Overview .......................................................................................................................... 173
17.1.1 What You Can Do in this Chapter .......................................................................... 173
17.2 The Firmware Upgrade Screen ....................................................................................... 174
17.3 The Configuration Screen ................................................................................................ 176
17.4 The Restart Screen .........................................................................................................178
Chapter 18
Troubleshooting....................................................................................................................181
18.1 Power, Hardware Connections, and LEDs .............................. ... ... .... ... ... ... .... ... ... ... ........181
18.2 ZyXEL Device Access and Login .................................................................................... 182
18.3 Internet Access ................................................................................................................ 183
Chapter 19
Product Specifications.........................................................................................................187
19.1 Hardware Specifications ..................................................................................................187
19.2 Firmware Specifications ...................................................................................................187
19.3 Wireless Features ............................................................................................................190
Part VI: Appendices and Index ........................................................... 193
Appendix A Setting Up Your Computer’s IP Address...........................................................195
Appendix B Pop-up Windows, JavaScripts and Java Permissions......................................225
P-870HW-51a v2 User’s Guide
15
Table of Contents
Appendix C IP Addresses and Subnetting...........................................................................235
Appendix D Wireless LANs..................................................................................................247
Appendix E Common Services.............................................................................................263
Appendix F Legal Information ..............................................................................................267
Index.......................................................................................................................................271
16
P-870HW-51a v2 User’s Guide
PART I
Introduction
Introducing the ZyXEL Device (19)
Tutorials (25)
Introducing the Web Configurator (35)
Status Screens (39)
17
18
CHAPTER 1
Introducing the ZyXEL Device
This chapter introduces the main applications and features of the Z yXEL Device. It
also introduces the ways you can manage the ZyXEL Device.
1.1 Overview
The P-870HW-51a v2 is a VDSL2 gateway that allows super-fast, secure Internet
access over analog (POTS) telephone lines.
you can use Quality of Service (QoS) to efficiently manage tr affic on y our network
by giving priority to certain types of traffic and/or to particular computers.
Please refer to the following description of the product name format.
• “H” denotes an integrated 4-port hub (swi tc h).
• “W” denotes wireless functionality. There is an embedded mini-PCI module for
IEEE 802.11g wireless LAN connectivity.
Only use firmware for your ZyXEL Device’s specific model. Refer
to the label on the bottom of your ZyXEL Device.
See Chapter 19 on page 187 for a full list of features.
1.2 Ways to Manage the ZyXEL Device
Use any of the following methods to manage the ZyXEL Device.
• Web Configur ator. This is recommended for everyday management of the ZyXEL
Device using a (supported) web browser.
• TR-069. This is an auto-configuration server used to remotely configure your
device.
P-870HW-51a v2 User’s Guide
19
Chapter 1 Introducing the ZyXEL Device
1.3 Good Habits for Managing the ZyXEL Device
Do the following things regularly to make the ZyXEL Device more secure and to
manage the ZyXEL Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
ZyXEL Device to its factory default settings . If yo u backed up an earlier
configuration file, you would not have to totally re-configure the ZyXEL Device.
You could simply restore your last configuration.
1.4 Applications for the ZyXEL Device
Here are some example uses for which the ZyXEL Device is well suited.
1.4.1 Internet Access
Your ZyXEL Device provides shared Internet access by connecting the DSL port to
the DSL or MODEM jack on a splitter or your telephone jack. Computers can
connect to the ZyXEL Device’s LAN ports (or wirelessly).
Figure 1 ZyXEL Device’s Router Features
LAN
DSL
Internet
20
You can also configure IP filtering on the Z yXEL Devi ce for secure Internet access.
When the IP filter is on, all incoming traffic from the Internet to your network is
blocked by default unless it is initiated from y our network. This means that probes
from the outside to your network are not allowed, but you can safely browse the
Internet and download files.
P-870HW-51a v2 User’s Guide
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 2 LEDs on the Top of the Device
Chapter 1 Introducing the ZyXEL Device
None of the LEDs are on if the ZyXEL Device is not receiving power.
Table 1 LED Descriptions
LED
POWER Green On The ZyXEL Device is receiving power and ready for use.
ETHERNET
1-4
COLO
R
Red On The ZyXEL Device detected an error while self-testing, or
Green On The ZyXEL Device has an Ethernet connection with a
STATUS DESCRIPTION
Blinking The ZyXEL Device is self-testing.
there is a device malfunction.
Off The ZyXEL Device is not receiving power.
device on the Local Area Network (LAN).
Blinking The ZyXEL Device is sending/receiving data to /from the
LAN.
Off The ZyXEL Device does not have an Ethernet connection
with the LAN.
P-870HW-51a v2 User’s Guide
21
Chapter 1 Introducing the ZyXEL Device
Table 1 LED Descriptions
LED
WLAN/
WPS
DSL Green On The DSL line is up.
INTERNET Green On The ZyXEL Device has an IP connection but no traffic.
COLO
R
Green On The wireless network is activated and is operating in IEEE
Orange Blinking The ZyXEL Device is setting up a WPS connection.
Red On The ZyXEL Device attempted to make an IP connection
STATUS DESCRIPTION
Blinking The ZyXEL Device is communicating with other wireless
Off The wireless network is not activated.
Blinking The ZyXEL Device is initializing the DSL line.
Off The DSL line is down.
Off The ZyXEL Device does not have an IP connection.
802.11b/g mode.
clients.
Your device has a WAN IP address (either static or
assigned by a DHCP server), PPP negotiation was
successfully completed (if used) and the DSL connection
is up.
but failed. Possible causes are no response from a DHCP
server, no PPPoE response, PPPoE authentication failed.
Refer to the Quick Start Guide for information on hardware connections.
1.6 The RESET Button
If you forget your password or cannot access the web configurator, you will need
to use the RESET button at the back of the device to reload the factory-default
configuration file. This means that you will lose all configurations that you had
previously and the password will be reset to “1234”. You can also use the
1.6.1 Using the Reset Button
1 Make sure the POWER LED is on (not blinking).
2 To set the device back to the factory default settings, press the RESET button for
ten seconds or until the POWER LED begins to blink and then release it. When the
POWER LED begins to blink, the defaults have been restored and the device
restarts.
22
P-870HW-51a v2 User’s Guide
1.7 The WPS WLAN Button
You can use the WPS WLAN ON/OFF button ( ) on the top of the device to
turn the wireless LAN off or on. You can also use it to activate WPS in order to
quickly set up a wireless network with strong security.
1.7.1 Turn the Wireless LAN Off or On
1 Make sure the POWER LED is on (not blinking).
2 Press the WPS WLAN ON/OFF button for one second and release it. The WLAN/
WPS LED should change from on to off or vice versa.
1.7.2 Activate WPS
1 Make sure the POWER LED is on (not blinking).
Chapter 1 Introducing the ZyXEL Device
2 Press the WPS WLAN ON/OFF button for more than five seconds and release it.
Press the WPS button on another WPS -enabled device within range of the ZyXEL
Device. The WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS
connection with the wireless device.
Note: You must activate WPS in the ZyXEL Device and in another wireless device
within two minutes of each other. See Section 7.9.4 on page 98 for more
information.
P-870HW-51a v2 User’s Guide
23
Chapter 1 Introducing the ZyXEL Device
24
P-870HW-51a v2 User’s Guide
CHAPTER 2
Tutorials
This chapter describes how to set up a wireless network.
2.1 How to Set up a Wireless Network
This tutorial gives you examples of how to set up an access point and wireless
client for wireless communication using the following parameters. The wireless
clients can access the Internet th roug h an AP wirelessly.
2.1.1 Example Parameters
SSID SSID_Example3
Security WPA-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
802.11 mode IEEE 802.11b/g
An access point (AP) or wireless router is referred to as “AP” and a computer with
a wireless network card or USB/PCI adapter is referred to as “wireless client” here.
We use the ZyXEL Device web screens and M-302 utility screens as an example.
The screens may vary slightly for different models.
2.1.2 Configuring the AP
Follow the steps below to configure the wireless settings on your AP.
P-870HW-51a v2 User’s Guide
25
Chapter 2 Tutorials
1 Open the Network > Wireless LAN screen in the AP’s web configurator.
Figure 3 AP: Wireless LAN
2 Make sure the Active Wireless LAN check box is selected.
3 Enter “SSID_Example3” as the SSID and select a channel which is not used by
another AP.
4 Set security mode to WPA-PSK and enter “ThisismyWPA-PSKpre-sharedkey” in
the Pre-Shared Key field. Click Apply.
26
P-870HW-51a v2 User’s Guide
Chapter 2 Tutorials
5 Click the Advanced Setup tab and select 54g Auto in the 54gTM Mode field.
Click Apply.
Figure 4 AP: Wireless LAN > Advanced Setup
6 Open the Status screen.Verify your wireless and wireless security settings under
Device Information and check if the WLAN connection is up under Interface
Status.
Figure 5 AP: Status
P-870HW-51a v2 User’s Guide
27
Chapter 2 Tutorials
7 Click the WLAN Station List hyperlink in the AP’s Status screen. You can see if
any wireless client has connected to the AP.
Figure 6 AP: Status: WLAN Station List
2.1.3 Configuring the Wireless Client
This section describes how to connect the wireless client to a network.
2.1.3.1 Connecting to a Wireless LAN
The following sections show you how to join a wireless network using the ZyXEL
utility, as in the following diagram. The wireless client is labeled C and the access
point is labeled AP.
C
There are three ways to connect the client to an access point.
• Configure nothing and leave the wireless client to automatically scan for and
connect to any available network that has no wireless security configured.
• Manually connect to a network.
AP
Internet
28
• Configure a profile to have the wireless client automatically connect to a specific
network or peer computer.
P-870HW-51a v2 User’s Guide
Chapter 2 Tutorials
This example illustrates how to manually connect your wireless cli ent to an access
point (AP) which is configured for WPA-PSK security and connected to the
Internet. Before you connect to the access point, you must know its Service Set
IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is
“SSID_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”.
After you install the ZyXEL utility and then insert the wireless client, follow the
steps below to connect to a network using the Site Survey screen.
1 Open the ZyXEL utility and click the Site Survey tab to open the screen shown
next.
Figure 7 ZyXEL Utility: Site Survey
2 The wireless client automatically searches for available wireless networks. Click
Scan if you want to search again. If no entry displays in the Available Network
List, that means there is no wireless network available with i n range. Make su re
the AP or peer computer is turned on or move the wireless client closer to the AP
or peer computer.
P-870HW-51a v2 User’s Guide
29
Chapter 2 Tutorials
3 When you try to conn ec t to an A P wi th security configured, a window will pop up
prompting you to specify the security settings. Enter the pre-shared k ey and leave
the encryption type at the default setting.
Use the Next button to move on to the next screen. You can use the Back button
at any time to return to the previous screen, or the Exit button to return to the
Site Survey screen.
Figure 8 ZyXEL Utility: Security Settings
4 The Confirm Save window appears. Check your settings and click Save to
continue.
Figure 9 ZyXEL Utility: Confirm Save
30
P-870HW-51a v2 User’s Guide
Chapter 2 Tutorials
5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless
network using your settings. When the wireless link is established, the ZyXEL
utility icon in the system tray turns green and the Link Info screen displays
details of the active connection. Check the network information in the Link Info
screen to verify that you have successfully connected to the selected network. If
the wireless client is not connected to a network, the fields in this screen remain
blank.
Figure 10 ZyXEL Utility: Link Info
6 Open your Internet browser and enter http://www.zyxel.com or the URL of any
other web site in the address bar. If you are able to access the web site, your
wireless connection is successfully configured.
If you cannot access the web site, try changing the encryption type in the
Security Settings screen, check the Troubleshooting section of this User's Guide
or contact your network administrator.
2.1.3.2 Creating and Using a Profile
A profile lets you automatically connect to the same wireless network every time
you use the wireless client. You can also configure different profiles for different
networks, for example if you connect a notebook computer to wireless networks at
home and at work.
This example illustrates how to set up a profile and connect the wireless client to
an access point configured for WPA-PSK security. In this example, the SSID is
“SSID_Example3”, the profile name is “PN_Example3” and the pre-shared key is
“ThisismyWPA-PSKpre-sharedkey”. You have chosen the profile name
“PN_Example3”.
P-870HW-51a v2 User’s Guide
31
Chapter 2 Tutorials
1 Open the ZyXEL utility and click the Profile tab to open the screen shown next.
Click Add to configure a new profile.
Figure 11 ZyXEL Utility: Profile
2 The Add New Profile screen appears. The wireless client automatically searches
for available wireless networks, which are displayed in the Scan Info box. Click
on Scan if you want to search again. You can also configure your profile for a
wireless network that is not in the list.
Figure 12 ZyXEL Utility: Add New Profile
3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select
Infrastructure and either manually enter or select the AP's SSID in the Scan
Info table and click Select.
32
P-870HW-51a v2 User’s Guide
Chapter 2 Tutorials
4 Choose the same encryption method as the AP to which you want to connect (In
this example, WPA-PSK).
Figure 13 ZyXEL Utility: Profile Security
5 This screen varies depending on the encryption method you selected in the
previous screen. Enter the pre-shared key and leave the encryption type at the
default setting.
Figure 14 ZyXEL Utility: Profile Encryption
6 In the next screen, leave both boxes checked.
Figure 15 Profile: Wireless Protocol Settings.
P-870HW-51a v2 User’s Guide
33
Chapter 2 Tutorials
7 Verify the profile settings in the read-only screen. Click Save to save and go to the
next screen.
Figure 16 Profile: Confirm Save
8 Click Activate Now to use the new profile immediately. Otherwise, click the
Activate Later button.
If you clicked Activate Later, you can select the profile from the list in the Profile
screen and click Connect to activate it.
Note: Only one profile can be activated and used at any given time.
Figure 17 Profile: Activate
9 When you activate the new pro file , the ZyXEL utility returns to t he Link Info
screen while it connects to the AP using your settings. When the wireless link is
established, the ZyXEL utility icon in the system tray turns green and the Link
Info screen displays details of the active connection.
10 Open your Internet browser, enter http://www.zyxel.com or the URL of any other
web site in the address bar and press ENTER. If you are able to access the web
site, your new profile is successfully configured.
11 If you cannot access the Internet go back to the Profile screen, select the profile
you are using and click Edit. Check the details you entered previously. Also, refer
to the Troubleshooting section of this User's Guide or contact your network
administrator if necessary.
34
P-870HW-51a v2 User’s Guide
CHAPTER 3
Introducing the Web
Configurator
This chapter describes how to access and navigate the web configurator.
3.1 Web Configurator Overview
The web configurator is an HTML-based management interface that allows easy
device setup and management via Internet browser. Use Internet Explorer 6.0 and
later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web brows er pop-up windows from your device. W eb pop-up blocking i s enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScripts (enabled by default).
• Java permissions (enabled by default).
See Appendix B on page 225 if you need to make sure these functions are allowed
in Internet Explorer.
3.1.1 Accessing the Web Configurator
1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick
Start Guide).
2 Launch your web browser.
3 Type "192.168.1.1" as the URL.
P-870HW-51a v2 User’s Guide
35
Chapter 3 Introducing the Web Configurator
A
4 A password screen displays. Enter the default user name 1234 and default
password 1234.The password displays in non-readable characters. If you have
changed the password, enter your password and click Login. Click Cancel to
revert to the default password in the password field.
Figure 18 Password Screen
3.2 Web Configurator Main Screen
Figure 19 Main Screen
B
C
D
36
As illustrated above, the main screen is divided into these parts:
• A - title bar
P-870HW-51a v2 User’s Guide
Chapter 3 Introducing the Web Configurator
• B - navigation panel
• C - main window
• D - status bar
3.2.1 Navigation Panel
Use the menu items on the navigation panel to open screens to configure ZyXEL
Device features. The following tables describe each menu item.
Table 2 Navigation Panel Summary
LINK TAB FUNCTION
Status This screen shows the ZyXEL Device’s general device and network
status information. Use this screen to access the statistics and
client list.
Network
WAN Internet
Connection
More
Connections
LAN IP Use this screen to configure LAN TCP/IP DHCP settings.
Client List Use this screen to view current DHCP client information and to
IP Alias Use this screen to partition your LAN interface into subnets.
Wireless LAN General Use this screen to configure the wireless LAN settings and WLAN
WPS Use this screen to enable WPS (Wi-Fi Protected Setup) and view
WPS Station Use this screen to use WPS to set up your wireless network.
MAC Filter Use this screen to configure the ZyXEL Device to give exclusive
Advanced
Setup
NAT Port
Forwarding
DMZ Host Use this screen to configure a default server which receives
Security
IP Filter Incoming This screen shows a summary of the IP filtering rules, and allows
Advanced
Static Route IP Static Route Use this screen to configure IP static routes to tell your device
Use this screen to configure ISP parameters, WAN IP address
assignment, DNS servers and other advanced properties.
Use this screen to configure additional WAN connections.
always assign specific IP addresses to individual MAC addresses
(and host names).
authentication/security settings.
the WPS status.
access to specific wireless clients or exclude specific wireless
clients from accessing the ZyXEL Device.
Use this screen to configure the advanced wireless LAN settings.
Use this screen to make your local servers visible to the outside
world.
packets from ports that are not specified in the Port Forwarding
screen.
you to add or remove an incoming IP filtering rule that allows
incoming traffic from the WAN.
about networks beyond the directly connected remote nodes.
P-870HW-51a v2 User’s Guide
37
Chapter 3 Introducing the Web Configurator
Table 2 Navigation Panel Summary
LINK TAB FUNCTION
QoS General Use this screen to enable QoS.
Queue Setup Use this screen to configure QoS q ueues.
Class Setup
Dynamic DNS This screen allows you to use a static hostname alias for a
Remote
MGMT
UPnP General Use this screen to turn UPnP on or off.
Maintenance
System General Use this screen to configure your device’s name, domain name,
Logs View Log Use this screen to view the logs for the level that you selected.
Tools Firmware Use this screen to upload firmware to your device.
TR069 Use this screen to configure the ZyXEL Device to be managed by
ServiceControl Use this screen to configure which services/protocols can access
IPAddress Use this screen to configure from which IP address(es) users can
Time Setting Use this screen to change your ZyXEL Device’s time and date.
Log Settings Use this screen to change your ZyXEL Device’s log settings.
Configuration Use this screen to backup and restore your device’s configuration
Restart This screen allows you to reboot the ZyXEL Device without turning
Use this screen to define a classifier.
dynamic IP address.
an ACS (Auto Configuration Server).
which ZyXEL Device interface.
manage the ZyXEL Device.
management inactivity timeout and password.
(settings) or reset the factory default settings.
the power off.
3.2.2 Main Window
The main window displays information and configuration fields. It is discussed in
the rest of this document.
Right after you log in, the Status screen is displayed. See Chapter 4 on page 39
for more information about the Status screen.
3.2.3 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration
has been updated.
38
P-870HW-51a v2 User’s Guide
CHAPTER 4
Status Screens
Use the Status screens to look at the current status of the device, system
resources and interfaces (LAN and WAN). The Status screen also provides
detailed information from DHCP and statistics from traffic.
4.1 Status Screen
Click Status to open this screen.
Figure 20 Status Screen
Each field is described in the following table.
Table 3 Status Screen
LABEL DESCRIPTION
Refresh Interval Enter how often you want the ZyXEL Device to update this screen.
Apply Click this to update this screen immediately.
P-870HW-51a v2 User’s Guide
39
Chapter 4 Status Screens
Table 3 Status Screen
LABEL DESCRIPTION
Device
Information
Host Name This field displays the ZyXEL Device system name. It is used for
Model
Number
MAC
Address
ZyNOS
Firmware
Version
DSL
Firmware
Version
WAN
Information
Mode This is the method of encapsulation used by your ISP.
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
LAN
Information
IP Address This field displays the current IP address of the ZyXEL Device in the
IP Subnet
Mask
DHCP This field displays what DHCP services the ZyXEL Device is providing to
identification. Click this to go to the screen where you can change it.
This is the model name of your device.
This is the MAC (Media Access Control) or Ethernet address unique to
your ZyXEL Device.
This field displays the current version of the firmware inside the device.
It also shows the date the firmware version was created. Click this to go
to the screen where you can change it.
This field displays the current version of the device’s DSL modem code.
WAN. Click this to go to the screen where you can change it.
This field displays the current subnet mask in the WAN.
LAN. Click this to go to the screen where you can change it.
This field displays the current subnet mask in the LAN.
the LAN. Choices are:
40
Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP
addresses to other computers in the LAN.
None - The ZyXEL Device is not providing any DHCP services to the
LAN.
Click this to go to the screen where you can change it.
WLAN
Information
ESSID This is the descriptive name used to identify the ZyXEL Device in the
wireless LAN. Click this to go to the screen where you can change it.
Channel This is the channel number used by the ZyXEL Device now.
WPS Status This field displays the status of WPS (Wi-Fi Protected Setup). Click this
to go to the screen where you can change it.
System Status
P-870HW-51a v2 User’s Guide
Chapter 4 Status Screens
Table 3 Status Screen
LABEL DESCRIPTION
System
Uptime
Current
Date/Time
System
Mode
CPU Usage This field displays what percentage of the ZyXEL Device’s processing
Memory
Usage
Interface Status
Interface This column displays each interface the ZyXEL Device has.
Status This field indicates whether or not the ZyXEL Device is using the
This field displays how long the ZyXEL Device has been running since it
last started up. The ZyXEL Device starts up when you plug it in, when
you restart it (Maintenance > Tools > Restart), or when you reset it
(see Section 1.6 on page 22).
This field displays the current date and time in the ZyXEL Device. You
can change this in Maintenance > System > Time Setting.
This displays whether the ZyXEL Device is functioning as a router or a
bridge.
ability is currently used. When this percentage is close to 100%, the
ZyXEL Device is running at full load, and the throughput is not going to
improve anymore. If you want some applications to have more
throughput, you should turn off other applications (for example, using
QoS; see Chapter 11 on page 129).
This field displays what percentage of the ZyXEL Device’s memory is
currently used. Usually, this percentage should not increase much. If
memory usage does get close to 100%, the ZyXEL Device is probably
becoming unstable, and you should restart the device. See Section 17.4
on page 178, or turn off the device (unplug the power) for a few
seconds.
interface.
For the DSL interface, this field displays NoSignal (line is down) or Up
(line is up or connected).
For the LAN interface, this field displays Up when the ZyXEL Device is
using the interface and Disabled when the ZyXEL Device is not using
the interface.
For the WLAN interface, it displays Up when WLAN is enabled or
Disabled when WLAN is not active.
Rate For the LAN interface, this displays the port speed and duplex setting.
For the DSL interface, it displays the downstream and upstream
transmission rate.
For the WLAN interface, it displays the maximum transmission rate.
More Status
WAN Service
Statistics
Route Info Click this link to view the internal routing table on the ZyXEL Device.
WLAN
Station List
Click this link to view packet specific statistics of the WAN
connection(s). See Section 4.1.1 on page 42.
See Section 4.1.2 on page 43.
Click this link to display the MAC address(es) of the wireless stations
that are currently associating with the ZyXEL Device. See Section 4.1.3
on page 45.
P-870HW-51a v2 User’s Guide
41
Chapter 4 Status Screens
Table 3 Status Screen
LABEL DESCRIPTION
LAN
Statistics
Client List Click this link to view current DHCP client information. See Section
Click this link to view packet specific statistics on the LAN and WLAN
interfaces. See Section 4.1.4 on page 46.
4.1.5 on page 47.
4.1.1 WAN Service Statistics
Click Status > WLAN Service Statistics to access this screen. Use this screen to
view the WAN statistics.
Figure 21 Status > WAN Service Statistics
42
The following table describes the labels in this screen.
Table 4 Status > WAN Service Statistics
LABEL DESCRIPTION
Interface This shows the name of the WAN interface used by this connection.
The default name ptm0 indicates the DSL port. The last number
represents the index number of connections over the same PVC or the
VLAN ID number assigned to traffic sent through this connection.
Description This shows the descriptive name of this connection.
Received
Bytes This indicates the number of bytes received on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
interface.
P-870HW-51a v2 User’s Guide
Table 4 Status > WAN Service Statistics (continued)
LABEL DESCRIPTION
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
Drops This indicates the number of outgoing packets dropped on this interface.
Refresh
Interval
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
4.1.2 Route Info
Chapter 4 Status Screens
interface.
Enter the time interval for refreshing statistics in this field.
Refresh Interval field.
Routing is based on the destination address only and the ZyXEL Device takes the
shortest path to forward a packet. Click Status > Route Info to access this
screen. Use this screen to view the internal routing table on the ZyXEL Device.
Figure 22 Status > Route Info
The following table describes the labels in this screen.
Table 5 Status > Route Info
LABEL DESCRIPTION
Destination This indicates the destination IP address of this route.
Gateway This indicates the IP address of the gateway that helps forward this route’s
traffic.
Subnet
Mask
This indicates the destination subnet mask of this route.
P-870HW-51a v2 User’s Guide
43
Chapter 4 Status Screens
Table 5 Status > Route Info (continued)
LABEL DESCRIPTION
Flag This indicates the route status.
Metric The metric represents the "cost of transmission". A router determines the
Service This indicates the name of the service used to forward the route.
Interface This indicates the name of the interface through which the route is
Up: The route is up.
Reject: The route is blocked and will force a route lookup to fail.
Gateway: The route uses a gateway to forward traffic.
Host: The target of the route is a host.
Reinstate: The route is reinstated for dynamic routing.
Dynamic (redirect): The route is dynamically installed by a routing daemon
or redirect
Modified (redirect): The route is modified from a routing daemon or
rederict.
best route for transmission by choosing a path with the lowest "cost". The
smaller the number, the lower the "cost".
forwarded.
br0 indicates the LAN interface.
ptm0 indicates the WAN interface using ENET ENCAP or in bridge mode.
ppp0 indicates the WAN interface using PPPoE.
44
P-870HW-51a v2 User’s Guide
4.1.3 WLAN Station List
Click Status > WLAN Station List to access this screen. Use this screen to view
the wireless stations that are currently associated to the ZyXEL Device.
Figure 23 Status > WLAN Station List
Chapter 4 Status Screens
The following table describes the labels in this screen.
Table 6 Status > WLAN Station List
LABEL DESCRIPTION
MAC Address This field shows the MAC (Media Access Control) address of an associated
wireless station.
Associated This field shows whether the wireless station is currently associated to the
ZyXEL Device (Yes) or not (No).
Authorized This field shows whether the wireless station is allowed to access network
resources behind the ZyXEL Device (Yes) or not (No).
SSID This field shows the SSID to which the wireless station is connected.
Interface This field shows the wireless interface to which the wireless station is
connected.
Refresh
Interval
Set Interval Click this button to apply the new poll interv al y ou entered in the Refresh
Stop Click Stop to stop refreshing statistics.
Enter the time interval for refreshing statistics in this field.
Interval field.
P-870HW-51a v2 User’s Guide
45
Chapter 4 Status Screens
4.1.4 LAN Statistics
Click Status > LAN Statistics to access this screen. Use this screen to view the
LAN statistics.
Figure 24 Status > LAN Statistics
The following table describes the labels in this screen.
Table 7 Status > LAN Statistics
LABEL DESCRIPTION
Interface This shows the LAN or WLAN interface. eth0~3 represent the physical
Ethernet ports 1~ 4.
Received
Bytes This indicates the number of bytes received on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors received on this
interface.
Drops This indicates the number of received packets dropped on this interface.
Transmitted
Bytes This indicates the number of bytes transmitted on this interface.
Pkts This indicates the number of transmitted packets on this interface.
Errs This indicates the number of frames with errors transmitted on this
interface.
Drops This indicates the number of outgoing packets dropped on this interface.
Refresh
Interval
Enter the time interval for refreshing statistics in this field.
46
P-870HW-51a v2 User’s Guide
Table 7 Status > LAN Statistics (continued)
LABEL DESCRIPTION
Set Interval Click this button to apply the new poll interval you entered in the
Stop Click Stop to stop refreshing statistics.
4.1.5 Client List
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. You can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the T CP/IP configuration for the client s. If DHCP
service is disabled, you must have another DHCP server on your LAN, or else the
computer must be manually configured.
Click Status > Client List to open the following screen. The read-only DHCP table
shows current DHCP client information (including IP Address, Host Name and
MAC Address) of all network clients using the ZyXEL Device’s DHCP server.
Chapter 4 Status Screens
Refresh Interval field.
Figure 25 Status > Client List
The following table describes the labels in this screen.
Table 8 Status > Client List
LABEL DESCRIPTION
Host Name This indicates the computer host name.
MAC Address Every Ethernet device has a unique MAC (Media Access Control)
address. The MAC address is assigned at the factory and consists of six
pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
This indicates the MAC address of the client computer.
IP Address This indicates the IP address assigned to this client computer.
P-870HW-51a v2 User’s Guide
47
Chapter 4 Status Screens
48
P-870HW-51a v2 User’s Guide
PART II
Network
WAN Setup (51)
LAN Setup (69)
Wireless LAN (79)
Network Address Translation (NAT) (107)
49
50
CHAPTER 5
WAN Setup
5.1 Overview
This chapter discusses the ZyXEL Device’s WAN screens. Use these screens to
configure your ZyXEL Device for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another
network or the Internet. It connects your private networks (such as a LAN (Local
Area Network) and other networks, so that a computer in one location can
communicate with computers in other locations.
Figure 26 LAN and WAN
LAN
• See Section 5.6 on page 63 for advanced technical information on WAN.
WAN
5.1.1 What You Can Do in this Chapter
•The Internet Connection screen lets you configure the WAN settings on the
ZyXEL Device for Internet access (Section 5.4 on page 53).
•The More Connections screen lets you set up additional Internet access
connections (Section 5.5 on page 57).
Internet
P-870HW-51a v2 User’s Guide
51
Chapter 5 WAN Setup
5.2 What You Need to Know
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower
layer protocol. To set up a WAN connection to the Internet, you need to use the
same encapsulation method used by your ISP (Internet Service Provider). If your
ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA,
they should also provide a username and password (and service name) for user
authentication.
WAN IP Address
The WAN IP address is an IP address for the ZyXEL Device, which makes it
accessible from an outside network. It is used by the ZyXEL Device to
communicate with other devices in other networks. It can be static (fixed) or
dynamically assigned by the ISP each time the ZyXEL Device tries to access the
Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the
subnet mask and DNS server IP address(es) (and a gateway IP add ress if you use
the Ethernet or ENET ENCAP encapsulation method).
PTM
Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2
standard. In PTM, packets are encapsulated directly in the High-level Data Link
Control (HDLC) frames. It is des igned to provide a low-ov erhead, tr ansparent w ay
of transporting packets over DSL links, as an alternative to ATM.
5.3 Before You Begin
You need to know your Internet access settings such as encapsulation and W AN IP
address. Get this information from your ISP.
52
P-870HW-51a v2 User’s Guide
5.4 The Internet Connection Screen
Use this screen to change your ZyXEL Device’s WAN settings. Click Network >
WAN > Internet Connection. The screen differs by the mode you select.
Figure 27 WAN > Internet Connection (PPPoE)
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 9 WAN > Internet Connection
LABEL DESCRIPTION
General
Name Specify a name for this connection. You can use up to 32 letters,
P-870HW-51a v2 User’s Guide
numerals and any printable character found on a typical English
language keyboard.
53
Chapter 5 WAN Setup
Table 9 WAN > Internet Connection (continued)
LABEL DESCRIPTION
Mode The ZyXEL Device is in routing mode by default. This allows multiple
User Name (PPPoE encapsulation only) Enter the user name exactly as your ISP
Password (PPPoE encapsulation only) Enter the password associated with the
Service Name (PPPoE encapsulation only) T ype the name of your PPP oE service here.
Retry wh en
the
authentication
fails
Retry Interval (PPPoE encapsulation only) Type a number of seconds for the ZyXEL
IP Address A static IP address is a fixed IP that your ISP gives you . A dynamic IP
computers to share an Internet account. Select the method of
encapsulation (ENET ENCAP or PPPoE) used by your ISP from the
drop-down list box.
Otherwise, select Bridge when your ISP provides you more than one
IP address and you want the connected computers to get individual IP
address from ISP’s DHCP server directly. If you select Bridge, you
cannot use IP filter, DHCP server and NAT on the ZyXEL Device.
assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as
given.
user name above.
(PPPoE encapsulation only) Select this to have the ZyXEL Device send
the password for authentication again if an attempt fails.
Device to wait before resending the password for authentication after
an attempt has failed.
address is not fixed; the ISP assigns you a different one each time you
connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic
IP address; otherwise select Static IP Address and type your ISP
assigned IP address in the IP Address field below .
IP Address Enter the IP addr ess assigned by your ISP if you select Static IP
Address.
Subnet Mask Enter a subnet mask in dotted decimal notation when you select ENET
ENCAP in the Mode field.
Gateway IP
address
Connection
(PPPoE only)
Nailed-Up
Connection
Connect on
Demand
Max Idle Time Specify an idle time-out in the Max Idle Time field when you select
NAT
Active NAT Select this check box to enable NAT on this connection.
You must specify a gateway IP address (supplied by your ISP) when
you select ENET ENCAP in the Mode field.
Select Nailed-Up Connection when you want your connection up all
the time. The ZyXEL Device will try to bring up the connection
automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up
all the time and specify an idle time-out in the Max Idle Time field.
Connect on Demand. The default setting is 0, which means the
Internet session will not timeout.
54
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
Table 9 WAN > Internet Connection (continued)
LABEL DESCRIPTION
Symmetric Select this option to enable symmetric NAT on this connection.
This field is available only when you select Active NAT.
Fullcone Select this option to enable full cone NAT on this connection.
This field is available only when you select Active NAT.
DNS Servers Select From ISP if your ISP dynamically assigns DNS server
information (and the ZyXEL Device's WAN IP address).
Select Static IP if you have the IP address of a DNS server.
First DNS Server
Second DNS
Server
VLAN This section is available in this screen only when you select Bridge in
VLAN Active Select this option to enable VLAN multiplexing of multiple protocols
If you select Static IP, enter the DNS server's IP address in the field
to the right.
the Mode field.
over a single virtual circuit. You need to assign a VLAN ID and priority
level to traffic through each WAN connection. All WAN connections
share one MAC address. This allows the backbone switch to classify
and service traffic based on the VLAN tag, instead of the MAC address.
Otherwise, disable VLAN multiplexing and each WAN connection has
its own MAC address.
Note: This field is only configurable for the first WAN connection.
When you change the setting here, all existing WAN
connections will be removed except for the first WAN
connection.
VLAN ID Enter a VLAN ID number for traffic that goes through this connection.
Priority Enter a priority level for traffic that goes through this connection.
Apply Click this to save the changes.
Reset Click this to begin configuring this screen afresh.
Advanced Setup Click this button to display the Advanced WAN Setup screen and
edit more details of your WAN setup.
This button is not available when you select Bridge in the Mode field.
P-870HW-51a v2 User’s Guide
55
Chapter 5 WAN Setup
5.4.1 Advanced Internet Connection Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the
Advanced Setup button in the Internet Connection screen. The screen
appears as shown.
Figure 28 WAN > Internet Connection: Advanced Setup
The following table describes the labels in this screen.
Table 10 WAN > Internet Connection: Advanced Setup
LABEL DESCRIPTION
RIP & Multicast
Setup
RIP Version RIP (Routing Information Protocol) allows a router to exchange routing
RIP
Operation
IGMP
Multicast
This section is not available when you configure the ZyXEL Device to be
in bridge mode.
information with other routers.
This field is available only when you select ENET ENCAP.
This shows the RIP version used for this WAN connection.
This field is available only when you select ENET ENCAP.
This shows whether RIP is enabled (Active) or not (Disable) on this
WAN connection .
Multicast packets are sent to a group of computers on the LAN and are
an alternative to unicast packets (packets sent to one computer) and
broadcast packets (packets sent to every computer).
IGMP (Internet Group Multicast Protocol) is a network-layer protocol
used to establish membership in a multicast group. The ZyXEL Device
supports both IGMP version 1 and version 2. Select Enable to turn on
IGMP. Otherwise, select Disable.
56
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
Table 10 WAN > Internet Connection: Advanced Setup (continued)
LABEL DESCRIPTION
PPPoE
Passthrough
(PPPoE
encapsulati
on only)
IP Filter This section is not available when you configure the ZyXEL Device to be
IP Filter
Active
VLAN
VLAN Active Select this option to enable VLAN multiplexing of multiple protocols over
This field is available when you select PPPoE encapsulation.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable
PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE
client software on their computers to connect to the ISP via the ZyXEL
Device. Each host can have a separate account and a public WAN IP
address.
PPPoE pass through is an alternative to NA T for application where NAT is
not appropriate.
Disable PPPoE pass through if you do not need to allow hosts on the LAN
to use PPPoE client software on their computers to connect to the ISP.
in bridge mode.
Select this option to enable IP filtering on this connection.
a single virtual circuit. You need to assign a VLAN ID and priority level to
traffic through each WAN connection. All WAN connections share one
MAC address. This allows the backbone switch to classify and service
traffic based on the VLAN tag, instead of the MAC address.
Otherwise, disable VLAN multiplexing and each WAN connection has its
own MAC address.
Note: This field is only configurable for the first WAN connection.
When you change the setting here, all existing WAN
connections will be removed except for the first WAN
connection.
VLAN ID Enter a VLAN ID number for traffic that goes through this connection.
Priority Enter a priority level for traffic that goes through this connection.
Back Click this to return to the previous screen.
Apply Click this to save the changes.
Reset Click this to restore your last-saved settings.
5.5 The More Connections Screen
The ZyXEL Device allows you to configure more than one Internet access
connection. To configure additional Internet access connections click Network >
WAN > More Connections. The screen differs by the encapsulation you select.
P-870HW-51a v2 User’s Guide
57
Chapter 5 WAN Setup
When you use the WAN > Internet Connection screen to set up Internet
access, you are configuring the first WAN connection.
Figure 29 WAN > More Connections
The following table describes the labels in this screen.
Table 11 WAN > More Connections
LABEL DESCRIPTION
# This is an index number indicating the number of the corresponding
Name This is the name you gave to the Internet connection.
Interface This shows the name of the ZyXEL Device’s interface used by this
connection.
connection.
ptm0 indicates the WAN using ENET ENCAP or in bridge mode.
ppp0 indicates the WAN interface using PPPoE.
The last number represents the index number of connections over the
same PVC or the VLAN ID number assigned to traffic sent through this
connection.
VLAN ID/
Priority
Encapsulation This field indicates the encapsulation method of the Internet connection.
Modify The first (ISP) connection is read-only in this screen. Use the WAN >
Add Click this to add a new connection.
This field shows the VLAN ID number and priority configured for this
WAN connection when VLAN multiplexing is enabled. Otherwise, it shows
disable.
Internet Connection screen to edit it.
Click the edit icon to edit the Internet connection settings. Click this icon
on an empty configuration to add a new Internet access setup.
Click the remove icon to delete the Internet access setup from your
connection list.
58
P-870HW-51a v2 User’s Guide
5.5.1 More Connections Edit
Click the edit icon or Add button in the More Connections screen to configure a
connection.
Figure 30 WAN > More Connections: Edit
Chapter 5 WAN Setup
The following table describes the labels in this screen.
Table 12 WAN > More Connections: Edit
LABEL DESCRIPTION
General
Active Select the check box to activate or clear the check box to deactivate
Name Specify a name for this connection. You can use up to 32 letters,
P-870HW-51a v2 User’s Guide
this connection.
numerals and any printable character found on a typical English
language keyboard.
59
Chapter 5 WAN Setup
Table 12 WAN > More Connections: Edit (continued)
LABEL DESCRIPTION
Mode The ZyXEL Device is in routing mode by default. This allows multiple
User Name (PPPoE encapsulation only) Enter the user name exactly as your ISP
Password (PPPoE encapsulation only) Enter the password associated with the
Service Name (PPPoE encapsulation only) T ype the name of your PPP oE service here.
Retry wh en
the
authentication
fails
Retry Interval (PPPoE encapsulation only) Type a number of seconds for the ZyXEL
IP Address A static IP address is a fixed IP that your ISP gives you . A dynamic IP
computers to share an Internet account. Select the method of
encapsulation (ENET ENCAP or PPPoE) used by your ISP from the
drop-down list box.
Otherwise, select Bridge when your ISP provides you more than one
IP address and you want the connected computers to get individual IP
address from ISP’s DHCP server directly. If you select Bridge, you
cannot use IP filter, DHCP server and NAT on the ZyXEL Device.
assigned. If assigned a name in the form user@domain where domain
identifies a service name, then enter both components exactly as
given.
user name above.
(PPPoE encapsulation only) Select this to have the ZyXEL Device send
the password for authentication again if an attempt fails.
Device to wait before resending the password for authentication after
an attempt has failed.
address is not fixed; the ISP assigns you a different one each time you
connect to the Internet.
Select Obtain an IP Address Automatically if you have a dynamic
IP address; otherwise select Static IP Address and type your ISP
assigned IP address in the IP Address field below .
IP Address Enter the IP addr ess assigned by your ISP if you select Static IP
Address.
Subnet Mask Enter a subnet mask in dotted decimal notation when you select ENET
ENCAP in the Mode field.
Gateway IP
address
Connection
(PPPoE only)
Nailed-Up
Connection
Connect on
Demand
Max Idle Time Specify an idle time-out in the Max Idle Time field when you select
NAT
Active NAT Select this check box to enable NAT on this connection.
You must specify a gateway IP address (supplied by your ISP) when
you select ENET ENCAP in the Mode field.
Select Nailed-Up Connection when you want your connection up all
the time. The ZyXEL Device will try to bring up the connection
automatically if it is disconnected.
Select Connect on Demand when you don't want the connection up
all the time and specify an idle time-out in the Max Idle Time field.
Connect on Demand. The default setting is 0, which means the
Internet session will not timeout.
60
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
Table 12 WAN > More Connections: Edit (continued)
LABEL DESCRIPTION
Symmetric Select this option to enable symmetric NAT on this connection.
This field is available only when you select Active NAT.
Fullcone Select this option to enable full cone NAT on this connection.
This field is available only when you select Active NAT.
VLAN This section is available in this screen only when you select Bridge in
the Mode field.
VLAN Active Select this option to enable VLAN multiplexing of multiple protocols
over a single virtual circuit. You need to assign a VLAN ID and priority
level to traffic through each WAN connection. All WAN connections
share one MAC address. This allows the backbone switch to classify
and service traffic based on the VLAN tag, instead of the MAC address.
Otherwise, disable VLAN multiplexing and each WAN connection has
its own MAC address.
Note: This field is only configurable for the first WAN connection.
When you change the setting here, all existing WAN
connections will be removed except for the first WAN
connection.
VLAN ID Enter a VLAN ID number for traffic that goes through this connection.
Priority Enter a priority level for traffic that goes through this connection.
Back Click this to return to the More Connections screen with saving your
changes.
Apply Click this to save the changes.
Reset Click this to begin configuring this screen afresh.
Advanced Setup Click this button to display the More Connections Advanced Setup
screen and edit more details of your WAN setup.
P-870HW-51a v2 User’s Guide
This button is not available when you select Bridge in the Mode field.
61
Chapter 5 WAN Setup
5.5.2 Configuring More Connections Advanced Setup
To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup
button in the More Connections Edit screen. The screen appears as shown.
Figure 31 WAN > More Connections: Edit: Advanced Setup
The following table describes the labels in this screen.
Table 13 WAN > More Connections: Edit: Advanced Setup
LABEL DESCRIPTION
RIP & Multicast
Setup
RIP Version RIP (Routing Information Protocol) allows a router to exchange routing
RIP
Operation
IGMP
Multicast
This section is not available when you configure the ZyXEL Device to be
in bridge mode.
information with other routers. The version field controls the format and
the broadcasting method of the RIP packets that the ZyXEL Device sends
(it recognizes both formats when receiving). RIP-1 is universally
supported; but RIP-2 carries more information. RIP-1 is probably
adequate for most networks, unless you have an unusual network
topology
This field is available only when you select ENET ENCAP.
Select the RIP version from RIPv1, RIPv2 and RIPv1v2.
This field is available only when you select ENET ENCAP.
Select Active to enable RIP. Otherwise, select Disable.
Multicast packets are sent to a group of computers on the LAN and are
an alternative to unicast packets (packets sent to one computer) and
broadcast packets (packets sent to every computer).
IGMP (Internet Group Multicast Protocol) is a network-layer protocol
used to establish membership in a multicast group. The ZyXEL Device
supports both IGMP version 1 and version 2. Select Enable to turn on
IGMP. Otherwise, select Disable.
62
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
Table 13 WAN > More Connections: Edit: Advanced Setup (continued)
LABEL DESCRIPTION
PPPoE
Passthrough
(PPPoE
encapsulati
on only)
IP Filter This section is not available when you configure the ZyXEL Device to be
IP Filter
Active
VLAN
VLAN Active Select this option to enable VLAN multiplexing of multiple protocols over
This field is available when you select PPPoE encapsulation.
In addition to the ZyXEL Device's built-in PPPoE client, you can enable
PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE
client software on their computers to connect to the ISP via the ZyXEL
Device. Each host can have a separate account and a public WAN IP
address.
PPPoE pass through is an alternative to NA T for application where NAT is
not appropriate.
Disable PPPoE pass through if you do not need to allow hosts on the LAN
to use PPPoE client software on their computers to connect to the ISP.
in bridge mode.
Select this option to enable IP filtering on this connection.
a single virtual circuit. You need to assign a VLAN ID and priority level to
traffic through each WAN connection. All WAN connections share one
MAC address. This allows the backbone switch to classify and service
traffic based on the VLAN tag.
Otherwise, disable VLAN multiplexing and each WAN connection has its
own MAC address.
Note: This field is only configurable for the first WAN connection.
When you change the setting here, all existing WAN
connections will be removed except for the first WAN
connection.
VLAN ID Enter a VLAN ID number for traffic that goes through this connection.
Priority Enter a priority level for traffic that goes through this connection.
Back Click this to return to the previous screen.
Apply Click this to save the changes.
Reset Click this to restore your last-saved settings.
5.6 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
P-870HW-51a v2 User’s Guide
63
Chapter 5 WAN Setup
Encapsulation
Be sure to use the encapsulation method required by your ISP. The ZyXEL Device
can work in bridge mode or routing mod e. When the ZyXEL Device is in routing
mode, it supports the following methods.
ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented
with the IP network protocol. IP packets are routed between the Ethernet interface
and the WAN interface and then formatted so that they can be understood in a
bridged environment. For instance, it encapsulates routed Ethernet frames into
bridged ATM cells.
PPP over Ethernet
Point-to-Point Protocol over Ethernet (PPPoE) provides access control and billing
functionality in a manner similar to dial-up services using PPP. PPPoE is an IETF
standard (RFC 2516) specifying how a personal computer (PC) interacts with a
broadband modem (DSL, cable, wireless, etc.) connection.
For the service provider, PPPoE offers an access and authentication method that
works with existing access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network
services, a function known as dynamic servic e selection. This enables the service
provider to easily create and offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or c arrier, as
it requires no specific configuration of the broadband modem at the customer site .
By implementing PPPoE directly on the ZyXEL Device (rather than individual
computers), the computers on the LAN do not need PPPoE software installed,
since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of
the LANs’ computers will have access.
IP Address Assignment
A static IP is a fixed IP that your ISP gives y ou. A dynamic IP is not fix e d; the ISP
assigns you a different one each time. The Single User Account feature can be
enabled or disabled if you have either a dynamic or static IP. However the
encapsulation method assigned influences your choices for IP address and default
gateway.
64
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
Full Cone NAT
In full cone NAT, the NAT router maps all outgoing packets from an internal IP
address and port to a single IP address and port on the external network. The NA T
router also maps packets coming to that external IP address and port to the
internal IP address and port.
In the following example, the ZyXEL Device maps the source address of all
packets sent from the internal IP address 1 and port A to IP address 2 and port B
on the external network. The ZyXEL Device also performs NAT on all incoming
packets sent to IP address 2 and port B and forwards them to IP address 1, port
A.
Figure 32 Full Cone NAT Example
1, A
2, B
Symmetric NAT
The full, restricted and port restricted cone NAT types use the same mapping for
an outgoing packet’s source address regardless of the destination IP address and
port. In symmetric NAT, the mapping of an outgoing packet’s source address to a
source address in another network is different for each different destination IP
address and port.
In the following example, the ZyXEL Devi ce maps the source address IP address 1
and port A to IP address 2 and port B on the external network for packets sent to
IP address 3 and port C. The Z yXEL Device uses a different mapping (IP address 2
and port M) for packets sent to IP address 4 and port
A host on the external network (IP address 3 and port C for example) can only
send packets to the internal host via the external IP address and port that the NA T
router used in sending a packet to the external host’s IP address and port. So in
D.
P-870HW-51a v2 User’s Guide
65
Chapter 5 WAN Setup
the example, only 3, C is allowed to send packets to 2, B and onl y 4, D is allowed
to send packets to 2, M.
Figure 33 Symmetric NAT
3, C
2, B
4, D
1, A
2, M
4, E
5, B
Introduction to VLANs
A Virtual Local Area Network (VLAN) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In Multi-Tenant Unit (MTU) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
66
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Introduction to IEEE 802.1Q Tagged VLAN
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
P-870HW-51a v2 User’s Guide
Chapter 5 WAN Setup
contains two bytes of TPID (Tag Protocol Identifier ), res idi ng wi thin the type/
length field of the Ethernet frame) and two bytes of TCI (Tag Control Information),
starts after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 Bits
Multicast
IP packets are transmitted in either one of two ways - Unicas t ( 1 sen der - 1
recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers
IP packets to a group of hosts on the network - not everybody and not just 1.
Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
At start up, the ZyXEL Device queries all directly connected networks to gather
group membership. After that, the ZyXEL Device periodically updates this
information.
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP
address and vice versa, for instance, the IP address of www.zyxel.com is
P-870HW-51a v2 User’s Guide
67
Chapter 5 WAN Setup
204.217.0.2. The DNS server is extremely important because without it, you must
know the IP address of a computer before you can access it.
The ZyXEL Device can get the DNS server addresses in the following ways.
1 The ISP tells you the DNS server addresses, usually in the form of an information
sheet, when you sign up. If your ISP gives you DNS server addresses, manually
enter them in the DNS server fields.
2 If your ISP dynamically assigns the DNS server IP addresses (along with the
ZyXEL Device’s WAN IP address), set the DNS server fields to get the DNS server
address from the ISP.
68
P-870HW-51a v2 User’s Guide
CHAPTER 6
LAN Setup
6.1 Overview
A Local Area Network (LAN) is a shared communication system to which many
computers are attached. A LAN is usually located in one immediate area such as a
building or floor of a building.
The LAN screens can help you configure a LAN DHCP server and manage IP
addresses.
LAN
DSL
• See Section 6.7 on page 75 for more information on LANs.
• See Appendix D on page 247 for more information on IP addresses and
subnetting.
6.1.1 What You Can Do in this Chapter
•The LAN IP screen lets you set the LAN IP address and subnet mask of your
ZyXEL device and configure the ZyXEL Device’s DHCP settings (Section 6.4 on
page 71).
•The Client List screen lets you assign IP addresses on the LAN to specific
individual computers based on their MAC Addresses (Section 6.5 on page 72).
•The IP Alias screen lets you change your ZyXEL Device’s IP alias settings
(Section 6.6 on page 73).
Internet
P-870HW-51a v2 User’s Guide
69
Chapter 6 LAN Setup
6.2 What You Need To Know
IP Address
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number. This is known as a n
Internet Protocol address.
Subnet Mask
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
DHCP
DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP
configuration at start-up from a server. This ZyXEL Device has a built-in DHCP
server capability that assigns IP addresses and DNS servers to systems that
support DHCP client capability.
RIP
RIP (Routing Information Protocol) allows a router to exchange routing
information with other routers.
Multicast and IGMP
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data.
There are two versions 1 and 2. IGMP version 2 is an improvement over version 1
but IGMP version 1 is still in wide use.
DNS
DNS (Domain Name System) maps a domain name to its corresponding IP
address and vice versa. The DNS server is extremely important because without
it, you must know the IP address of a computer before you can access it. The DNS
server addresses you enter when you set up DHCP are passed to the client
machines along with the assigned IP address and subnet mask.
70
P-870HW-51a v2 User’s Guide
6.3 Before You Begin
Find out the MAC addresses of your network devices if you intend to add them to
the DHCP Client List screen.
6.4 The LAN IP Screen
Click Network > LAN to open the IP screen. See Section 6.7 on page 75 for
background information. Use this screen to set the Local Area Network IP address
and subnet mask of your ZyXEL Device.
Follow these steps to configure your LAN settings.
1 Enter an IP address into the IP Address field. The IP address must be in dotted
decimal notation. This will become the IP address of your ZyXEL Device.
Chapter 6 LAN Setup
2 Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed
otherwise it is best to leave this alone, the configurator will automatically compute
a subnet mask based upon the IP address you entered.
3 Click Apply to save your s ettings.
Figure 34 LAN > IP
P-870HW-51a v2 User’s Guide
71
Chapter 6 LAN Setup
The following table describes the fields in this screen.
Table 14 LAN > IP
LABEL DESCRIPTION
LAN TCP/IP
IP Address Enter the LAN IP address you want to assign to your ZyXEL Device in
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for
DHCP Setup
Active DHCP
Server
IP Pool Starting
Address
Pool Size This field specifies the size, or count of the IP address pool.
IGMP Snooping
Active IGMP
Snooping
Apply Click Apply to save your changes back to the ZyXEL Device.
dotted decimal notation, for example, 192.168.1.1 (factory default).
example 255.255.255.0 (factory default).
Select this option to have the ZyXEL Device assign IP addresses and
provide subnet mask, gateway, and DNS server information to the
network. The ZyXEL Device is the DHCP server for the network.
Otherwise, deselect this to not have the ZyXEL Device provide any
DHCP services. The DHCP server will be disabled.
When the ZyXEL Device acts as a DHCP server, the following items
need to be set:
This field specifies the first of the contiguous addresses in the IP
address pool.
Select this option to enable IGMP snooping. This allows the ZyXEL
Device to passively learn multicast group.
6.5 The Client List Screen
This table allows you to assign IP addresses on the LAN to specific individual
computers based on their MAC Addresses.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC
address is assigned at the factory and consists of six pairs of hexadecimal
characters, for example, 00:A0:C5:00:00:02.
72
P-870HW-51a v2 User’s Guide
Chapter 6 LAN Setup
Click Network > LAN > Client List to open the following screen. Use this screen
to change your ZyXEL Device’s static DHCP settings.
Figure 35 LAN > Client List
The following table describes the labels in this screen.
Table 15 LAN > Client List
LABEL DESCRIPTION
IP Address Enter the IP address that you want to assign to the computer on your
LAN with the MAC address that you will also specify.
MAC Address Enter the MAC address of a computer on your LAN.
Add Entries Click this to add a static DHCP entry before the dynamic DHCP
entry(ies).
# This is the index number of the static IP table entry (row).
IP Address This field displays the IP address relative to the # field listed above.
MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local
Area Network) is unique to your computer (six pairs of hexadecimal
notation).
A network interface card such as an Ethernet adapter has a hardwired
address that is assigned at the factory . This address follows an industry
standard that ensures no other adapter has a similar address.
Remove Click this to delete a static DHCP entry. You cannot delete a dynamic
DHCP entry. A window displays asking you to confirm that you want to
delete the selected entry.
6.6 The IP Alias Screen
IP alias allows you to partitio n a physi c a l network into different logical networks
over the same Ethernet interface. The ZyXEL Device supports three logical LAN
interfaces via its single physical Ethernet interface with the ZyXEL Device itself as
the gateway for each LAN network.
When you use IP alias, you can also configure firewall rules to control access
between the LAN's logical networks (subnets).
P-870HW-51a v2 User’s Guide
73
Chapter 6 LAN Setup
Note: Make sure that the subnets of the logical networks do not overlap.
The following figure shows a LAN divided into subnets A and B.
Figure 36 Physical Network & Partitioned Logical Networks
A: 192.168.1.1 - 192.168.1.24
Ethernet
Interface
B: 192.168.2.1 - 192.168.2.24
6.6.1 Configuring the LAN IP Alias Screen
Click Network > LAN > IP Alias to open the following screen. Use this screen to
change your ZyXEL Device’s IP alias settings.
Figure 37 Network > LAN > IP Alias
The following table describes the labels in this screen.
Table 16 Network > LAN > IP Alias
LABEL DESCRIPTION
Active IP Alias Select the check box to configure another LAN network for the ZyXEL
Device.
IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for
example 255.255.255.0 (factory default).
Apply Click this to save your changes back to the ZyXEL Device.
74
P-870HW-51a v2 User’s Guide
6.7 Technical Reference
The following section contains additional technical information about the ZyXEL
Device features described in this chapter.
LANs, WANs and the ZyXEL Device
The actual physical connection determines whether the ZyXEL Device ports are
LAN or WAN ports. There are two separate IP networks, one inside the LAN
network and the other outside the WAN network as shown next.
Figure 38 LAN and WAN IP Addresses
Chapter 6 LAN Setup
LAN
WAN
Internet
DHCP Setup
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows
individual clients to obtain TCP/IP configuration at start-up from a server. You can
configure the ZyXEL Device as a DHCP server or disable it. When configured as a
server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you
turn DHCP service off, you must have another DHCP server on your LAN, or else
the computer must be manually configured.
IP Pool Setup
The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP
clients (DHCP Pool). See the product specif ic a t i o ns in the appendices. Do not
assign static IP addresses from the DHCP pool to your LAN computers.
LAN TCP/IP
The ZyXEL Device has built-in DHCP server capability that assigns IP addresses
and DNS servers to systems that support DHCP client capability.
P-870HW-51a v2 User’s Guide
75
Chapter 6 LAN Setup
IP Address and Subnet Mask
Similar to the way houses on a street share a common street name, so too do
computers on a LAN share one common network number.
Where you obtain your network number depends on your particular situation. If
the ISP or your network administrator assigns you a block of registered IP
addresses, follow their instructions in selecting the IP addresses and the subnet
mask.
If the ISP did not explicitly give you an IP network number, then most likely you
have a single user account and the ISP will assign you a dynamic IP address when
the connection is established. If this is the case, it is recommended that you select
a network number from 192.168.0.0 to 192.168.255.0 and you must enable the
Network Address Translation (NAT) feature of the ZyXEL Device. The Internet
Assigned Number Authority (IANA) reserved this block of addresses sp ecifically for
private use; please do not use any other number unless you are told otherwise.
Let's say you select 192.168.1.0 as the network number; which covers 254
individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are
reserved). In other words, the first three numbers specify the network number
while the last number identifies an individual computer on that network.
Once you have decided on the network number , pick an IP address that is easy to
remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that
no other device on your network is using that IP address.
The subnet mask specifies the network number portion of an IP address. Your
ZyXEL Device will compute the subnet mask automatically based on the IP
address that you entered. Y ou don't need to change the subnet mask computed by
the ZyXEL Device unless you are instructed to do otherwise.
Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are
isolated from the Internet, for example, only between your two branch offices, you
can assign any IP addresses to the hosts without problems. However, the Internet
Assigned Numbers Authority (IANA) has reserved the following three blocks of IP
addresses specifically for private networks:
• 10.0.0.0 — 10.255.255.255
• 172.16.0.0 — 172.31.255.255
• 192.168.0.0 — 192.168.255.255
76
You can obtain your IP address from the IANA, from an ISP or it can be assigned
from a private network. If you belong to a small organization and your Internet
access is through an ISP, the ISP can provide you with the Internet addresses for
your local networks. On the other hand, if you are part of a much larger
P-870HW-51a v2 User’s Guide
Chapter 6 LAN Setup
organization, you should consult your network administrator for the appropriate IP
addresses.
Note: Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address
assignment, please refer to RFC 1597, “Address Allocation for Private
Internets” and RFC 1466, “Guidelines for Management of IP Address Space”.
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1
sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
Multicast delivers IP packets to a group of hosts on the network - not everybody
and not just 1.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to
establish membership in a Multicast group - it is not used to carry user data. IGMP
version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP
version 1 is still in wide use. If you would like to read more detailed information
about interoperability between IGMP version 2 and version 1, please see sections
4 and 5 of RFC 2236. The class D IP address is used to identify host groups and
can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not
assigned to any group and is used by IP multicast computers. The address
224.0.0.1 is used for query messages and is assigned to the permanent group of
all IP hosts (including gateways). All host s must join t he 224.0.0.1 group in order
to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers
group.
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2
(IGMP-v2). At start up, the ZyXEL Device q ueries all directly connected networks
to gather group membership. After that, the Z yXEL Device periodically updates
this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN
and/or WAN interfaces in the web configurator (LAN; WAN). Select None to
disable IP multicasting on these interfaces.
P-870HW-51a v2 User’s Guide
77
Chapter 6 LAN Setup
78
P-870HW-51a v2 User’s Guide
CHAPTER 7
Wireless LAN
7.1 Overview
This chapter describes how to perform tasks related to setting up and optimizing
your wireless network, includ i ng the following.
• Turning the wireless connection on or off.
• Configuring a name, wireless channel and security for the network.
• Using WiFi Protected Setup (WPS) to configure your wireless network.
• Using a MAC (Media Access Control) address filter to restrict access to the
wireless network.
See Chapter 2 on page 25 for a tutorial showing how to set up your wireless
connection in an example scenario.
See Section 7.9 on page 94 for advanced technical information on wireless
networks.
7.1.1 What You Can Do in this Chapter
This chapter describes the ZyXEL Device’s Network > Wireless LAN screens.
Use these screens to set up your ZyXEL Device’s wireless connection.
•The General screen lets you turn the wireless connection on or off, set up
wireless security and make other basic configuration changes (Section 7.4 on
page 82).
•Use the WPS screen and the WPS Station screen to use WiFi Protected Setup
(WPS). WPS lets you set up a secure network quickly, when connecting to other
WPS-enabled devices.
Use the WPS screen (see Section 7.5 on page 89) to enable or disable WPS,
generate a security PIN (Personal Identification Number) and see information
about the ZyXEL Device’s WPS status.
Use the WPS Station (see Section 7.6 on page 91) screen to set up WPS by
pressing a button or using a PIN.
•The MAC Filter screen lets you configure the MAC filter to allow or block access
to the ZyXEL Device based on the MAC addresses of the wireless stations
(Section 7.7 on page 91).
P-870HW-51a v2 User’s Guide
79
Chapter 7 Wireless LAN
•The Advanced Setup screen lets you change the wireless mode, and make
other advanced wireless configuration changes (Section 7.8 on page 93).
You don’t necessarily need to use all these screens to set up your wireless
connection. For example, you may just want to set up a network name, a wireless
radio channel and some security in the General screen.
7.2 What You Need to Know
Wireless Basics
“Wireless” is essentially radio communication. In the same way that walkie-talkie
radios send and receive information over the airwaves, wireless networking
devices exchange information with one another. A wireless networking device is
just like a radio that lets your computer exchange information with radios
attached to other computers. Like walkie-talkies, most wireless networking
devices operate at radio frequency bands that are open to the public and do not
require a license to use. However, wireless networking is different from that of
most traditional radio communications in that there a number of wireless
networking standards available with different methods of data encryption.
Wireless Network Construction
Wireless networks consist of wireless clients, access points and bridges.
• A wireless client is a radio connected to a user’s computer.
• An access point is a radio with a wired connection to a network, which can
connect with numerous wireless clients and let them access the network.
• A bridge is a radio that relays communications between access points and
wireless clients, extending a network’s range.
Traditionally, a wireless network operates in one of two ways.
• An “infrastructure” type of network has one or more access points and one or
more wireless clients. The wireless clients connect to the access points.
• An “ad-hoc” type of network is one in which there is no access point. Wireless
clients connect to one another in order to exchange information.
Network Names
Each network must have a name, referred to as the SSID - “Service Set
IDentifier”. The “service set” is the network, so the “service set identifier” is the
network’s name. This helps you identify your wireless network when wireless
networks’ coverage areas overlap and you have a variety of networks to choose
from.
80
P-870HW-51a v2 User’s Guide
Chapter 7 Wireless LAN
Radio Channels
In the radio spectrum, there are certain frequency bands allocated for unlicensed,
civilian use. For the purposes of wireless networking, t hese bands are divided into
numerous channels. This allows a variety of networks to exist in the same place
without interfering with one another. When you create a network, you must select
a channel to use.
Since the available unlicensed spectrum varies from one country to another, the
number of available channels also varies.
Wireless Security
By their nature, radio communications are simple to intercept. For wireless data
networks, this means that anyone within range of a wireless network without
security can not only read the data passing over the airwaves, but also join the
network. Once an unauthorized person has access to the network s/he can either
steal information or introduce malware (malicious software) intended to
compromise the network. For these reasons, a variety of security systems have
been developed to ensure that only authorized people can use a wireless data
network, or understand the data carried on it.
These security standards do two things. First, they authenticate. This means that
only people presenting the right credentials (often a username and password, or a
“key” phrase) can access the network. Second, they encrypt. This means that the
information sent over the air is encoded. Only people with the code key can
understand the information, and only people who have been authenticated are
given the code key.
These security standards vary in effectiveness. Some can be broken, such as the
old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at
all, but it will not keep a determined attacker out. Other security standards are
secure in themselves but can be broken if a user does not use them properly. For
example, the WPA-PSK security standard is perfectly secure if you use a long key
which is difficult for an attacker’s softw are to gues s - f or example, a twenty-letter
long string of apparently random numbers and letters - but it is not very secure if
you use a short key which is very easy to guess - for example, a three-letter word
from the dictionary.
Because of the damage that can be done by a malicious attacker, it’s not just
people who have sensitive information on their network who should use security.
Everybody who uses any wireless network should ensure that effective security is
in place.
A good way to come up with effective security keys , passwords and so on is to use
obscure information that you personally will easily remember, and to enter it in a
way that appears random and does not include real words. For example, if your
P-870HW-51a v2 User’s Guide
81
Chapter 7 Wireless LAN
mother owns a 1970 Dodge Challenger and her favorite movie is Vanishing Point
(which you know was made in 1971) you could use “70dodchal71vanpoi” as your
security key.
Signal Problems
Because wireless networks are radio networks, their signals are subject to
limitations of distance, interference and absorption.
Problems with distance occur when the two radios are too far apart. Problems with
interference occur when other radio waves interrupt the data signal. Interference
may come from other radio transmissions, such as military or air traffic control
communications, or from machines that are coincidental emitters such as electric
motors or microwaves. Problems with absorption occur when physical objects
(such as thick walls) are between the two radios, muffling the signal.
7.3 Before You Begin
Before you start using these screens, ask yourself the following questions. See
Section 7.2 on page 80 if some of the terms used here do not make sense to you.
• What wireless standards do the other wireless devices support (IEEE 802.11g,
for example)? What is the most appropriate standard to use?
• What security options do the other wireless devices support (WPA-PSK, for
example)? What is the best one to use?
• Do the other wireless devices support WPS (Wi-Fi Protected Setup)? If so, you
can set up a well-secured network very easily.
Even if some of your devices support WPS and some do not, you can use WPS to
set up your network and then add the non-WPS devices manually, although this
is somewhat more complicated to do.
• What advanced options do you want to configure, if any? If you want to
configure advanced options, ensure that you know precisely what you want to
do. If you do not want to configure advanced options, leav e them alone.
7.4 The General Screen
Note: If you are configuring the ZyXEL Device from a computer connected to the
wireless LAN and you change the ZyXEL Device’s SSID or security settings,
you will lose your wireless connection when you press Apply to confirm. You
must then change the wireless settings of your computer to match the ZyXEL
Device’s new settings.
82
P-870HW-51a v2 User’s Guide
Chapter 7 Wireless LAN
Click Network > Wireless LAN to open the General screen.
Figure 39 Network > Wireless LAN > General
The following table describes the labels in this screen.
Table 17 Network > Wireless LAN > General
LABEL DESCRIPTION
Active
Wireless LAN
Network
Name (SSID)
Click the check box to activate wireless LAN.
The SSID (Service Set IDentity) identifies the service set with which a
wireless device is associated. Wireless devices associating to the access
point (AP) must have the same SSID. Enter a descriptive name (up to 32
printable 7-bit ASCII characters) for the wireless LAN.
Note: If you are configuring the ZyXEL Device from a computer
connected to the wireless LAN and you change the ZyXEL
Device’s SSID or WEP settings, you will lose your wireless
connection when you press Apply to confirm. You must then
change the wireless settings of your computer to match the
ZyXEL Device’s new settings.
Hide Network
Name (SSID)
Channel
Selection
BSSID This shows the MAC address of the wireless interface on the ZyXEL Device
Security
Mode
Apply Click this to save your changes back to the ZyXEL Device.
Reset Click this to reload the previous configuration for this screen.
Select this check box to hide the SSID in the outgoing beacon frame so a
station cannot obtain the SSID through scanning using a site survey tool.
Set the operating frequency/channel depending on your particular region.
Select a channel from the drop-down list box.
when wireless LAN is enabled.
See the following sections for more details about this field.
P-870HW-51a v2 User’s Guide
83
Chapter 7 Wireless LAN
7.4.1 No Security
Select No Security to allow wireless devices to communicate with the access
points without any data encryption or authentication.
Note: If you do not enable any wireless security on your ZyXEL Device, your network
is accessible to any wireless networking device that is within range.
Figure 40 Wireless LAN > General: No Security
The following table describes the labels in this screen.
Table 18 Wireless LAN > General: No Security
LABEL DESCRIPTION
Security
Mode
Choose No Security from the drop-down list box.
84
P-870HW-51a v2 User’s Guide
7.4.2 WEP Encryption
In order to configure and enable WEP encryption; click Network > Wireless LAN
to display the General screen. Select WEP from the Security Mode list.
Figure 41 Wireless LAN > General: Static WEP Encryption
Chapter 7 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 19 Network > Wireless LAN > General: Static WEP Encryption
LABEL DESCRIPTION
Security
Mode
P-870HW-51a v2 User’s Guide
Choose Static WEP from the drop-down list box.
85
Chapter 7 Wireless LAN
Table 19 Network > Wireless LAN > General: Static WEP Encryption
LABEL DESCRIPTION
WEP
Encryption
Key 1 to Key 4If you chose 64-bit WEP in the WEP Encryption field, then enter any 5
WEP (Wired Equivalent Privacy) provides data encryption to prevent
unauthorized wireless stations from accessing data transmitted over the
wireless network.
Select 64-bit WEP or 128-bit WEP to enable data encryption.
characters (ASCII string) or 10 hexadecimal characters ("0-9", "A-F")
preceded by 0x for each key.
If you chose 128-bit WEP in the WEP Encryption field, then enter 13
characters (ASCII string) or 26 hexadecimal characters ("0-9", "A-F")
preceded by 0x for each key.
There are four data encryption keys to secure your data from
eavesdropping by unauthorized wireless users. Both the Z yXEL Device and
the wireless stations must use the same WEP key for data transmission.
7.4.3 WPA(2)-PSK
In order to configure and enable WPA(2)-PSK authentication; click Network >
Wireless LAN to display the General screen. Select WPA-PSK or WPA2-PSK
from the Security Mode list.
Figure 42 Wireless LAN > General: WPA(2)-PSK
86
P-870HW-51a v2 User’s Guide
Chapter 7 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 20 Wireless LAN > General: WPA(2)-PSK
LABEL DESCRIPTION
Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box.
Active
Compatible
Pre-Shared Key The encryption mechanisms used for WPA(2) and WPA(2)-PSK are
(WPA) Group
Key Update
Timer
WPA Encryption Select the encryption type (TKIP or AES) for data encryption.
This field is only available for WPA2-PSK. Select this if you want the
ZyXEL Device to support WPA-PSK and WPA2-PSK simultaneously.
the same. The only difference between the two is that WPA(2)-PSK
uses a simple common password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII characters
(including spaces and symbols).
The (WPA) Group Key Update Timer is the rate at which the AP (if
using WPA(2)-PSK key management) or RADIUS server (if using
WPAWPA(2) k ey management) sends a new group key out to all clients.
The re-keying process is the WPA(2) equivalent of automatically
changing the WEP key for an AP and all stations in a WLAN on a periodic
basis. Setting of the (WPA) Group Key Update Timer is also
supported in WPA(2)-PSK mode. The ZyXEL Device default is 1800
seconds (30 minutes).
P-870HW-51a v2 User’s Guide
87
Chapter 7 Wireless LAN
7.4.4 WPA(2) Authentication
Use this screen to configure and enable WPA or WPA2 authentication; clic k the
Wireless LAN link under Network to display the General screen. Select WPA or
WPA2 from the Security Mode list.
Figure 43 Wireless LAN > General: WPA(2)
88
The following table describes the wireless LAN security labels in this screen.
Table 21 Wireless LAN > General: WPA(2)
LABEL DESCRIPTION
Security Mode Choose WPA or WPA2 from the drop-down list box.
Active
Compatible
WPA Encryption Select the en c ryp ti on typ e (TKIP or AES) for data encryption.
WPA2
Preauthenticatio
n
This field is only available for WPA2. Select this if you want the ZyXEL
Device to support WPA and WPA2 simultaneously.
This field is available only when you select WPA2.
Pre-authentication enables fast roaming by allowing the wireless client
(already connecting to an AP) to perform IEEE 802.1x authentication
with another AP before connecting to it. Select Enabled to turn on
preauthentication in WAP2. Otherwise, select Disabled.
P-870HW-51a v2 User’s Guide
Chapter 7 Wireless LAN
Table 21 Wireless LAN > General: WPA(2)
LABEL DESCRIPTION
ReAuthentication
Timer
This field is available only when you select WPA2.
Specify how often wireless stations have to resend usernames and
passwords in order to stay connected. Enter a time interval between
10 and 9999 seconds. The default time interval is 1800 seconds (30
minutes).
Note: If wireless station authentication is done using a RADIUS
server, the reau thentication timer on the RADIUS server has
priority.
Group Key
Update Timer
Authentication Server
IP Address Enter the IP address of the external authentication server in dotted
Port Number Enter the port number of the external authentication server. The
This field is available only when you select WPA.
The Group Key Update Timer is the rate at which the AP (if using
WPA(2)-PSK key management) or RADIUS server (if using WPA(2)
key management) sends a new group key out to all clients. The rekeying process is the WPA(2) equivalent of automatically changing the
WEP key for an AP and all stations in a WLAN on a periodic basis.
Setting of the Group Key Update Timer is also supported in
WPA(2)-PSK mode. The ZyXEL Device default is 1800 seconds (30
minutes).
decimal notation.
default port number is 1812.
You need not change this value unless your network administrator
instructs you to do so with additional information.
Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be
shared between the external authentication server and the ZyXEL
Device.
The key must be the same on the external authentication server and
your ZyXEL Device. The key is not sent over the network.
7.5 The WPS Screen
Use this screen to configure WiFi Protected Setup (WPS) on your ZyXEL Device.
WPS allows you to quickly set up a wireless network with strong security, without
having to configure security setti ng s manually. Set up each WPS connection
between two devices. Both devices must support WPS.
P-870HW-51a v2 User’s Guide
89
Chapter 7 Wireless LAN
Click Network > Wireless LAN >WPS. The following screen displays.
Figure 44 Network > Wireless LAN > WPS
The following table describes the labels in this screen.
Table 22 Network > Wireless LAN > WPS
LABEL DESCRIPTION
WPS Setup
Enable WPS Select the check box to activate WPS on the ZyXEL Device.
PIN Number This shows the PIN (Personal Identification Number) of the ZyXEL
Device. Enter this PIN in the configuration utility of the device you want
to connect to using WPS.
The PIN is not necessary when you use WPS push-button method.
Generate Click this button to have the ZyXEL Device create a new PIN.
WPS Status This displays Configured when the ZyXEL Device has connected to a
wireless network using WPS or Enable WPS is selected and wireless or
wireless security settings have been changed. The current wireless and
wireless security settings also appear in the screen.
This displays Unconfigured if WPS is disabled and there is no wireless
or wireless security changes on the ZyXEL Device or you click
Release_Configuration to remove the configured wireless and
wireless security settings.
Release_Co
nfiguration
Apply Click Apply to save your changes back to the ZyXEL Device.
Refresh Click Refresh to reload the previous configuration for this screen.
This button is available when the WPS status is Configured.
Click this button to remove all configured wireless and wireless security
settings for WPS connections on the ZyXEL Device.
90
P-870HW-51a v2 User’s Guide
7.6 The WPS Station Screen
Use this screen to set up a WPS wireless network using either Push Button
Configuration (PBC) or PIN Configuration.
Click Network > Wireless LAN > WPS Station. The following screen displays.
Figure 45 Network > Wireless LAN > WPS Station
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 23 Network > Wireless LAN > WPS Station
LABEL DESCRIPTION
Push Button Click this button to add another WPS-enabled wireless device (within
wireless range of the ZyXEL Device) to your wireless network. This
button may either be a physical button on the outside of device, or a
menu button similar to the Push Button on this screen.
Note: You must press the other wireless device’s WPS button within
two minutes of pressing this button.
Or input
station's PIN
number
Enter the PIN of the device that you are setting up a WPS connection
with and click Start to authenticate and add the wireless device to your
wireless network.
You can find the PIN either on the outside of the device, or by checking
the device’s settings.
Note: Y ou must also act ivate WPS on that device within two minutes
to have it present its PIN to the ZyXEL Device.
7.7 The MAC Filter Screen
This screen allows you to configure the ZyXEL Device to give exclusive access to
specific devices (Allow) or exclude specific devices from accessing the ZyXEL
Device (Deny). Every Ethernet device has a unique MAC (Media Access Control)
P-870HW-51a v2 User’s Guide
91
Chapter 7 Wireless LAN
address. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the
MAC addresses of the devices to configure this screen.
Use this screen to change your ZyXEL Device’s MAC filter settings.Click Network
> Wireless LAN > MAC Filter. The following screen displays.
Figure 46 Wireless LAN > MAC Filter
The following table describes the labels in this screen.
Table 24 Wireless LAN > MAC Filter
LABEL DESCRIPTION
Active MAC
Filter
MAC Restrict
Mode
MAC
Address
Add Entries Click this to save and insert the entry to the table below.
Set
MAC
Address
Remove Select the entry(ies) that you want to delete in the Remove column, then
Apply Click this to save your changes back to the ZyXEL Device.
Remove Click this to delete the selected entry(ies).
Select the check box to enable MAC address filtering.
Define the filter action for the list of MAC addresses in the table below.
Select Allow to permit access to the ZyXEL Device, MAC addresses not
listed will be denied access to the ZyXEL Device.
Select Deny to block access to the ZyXEL Device, MAC addresses not listed
will be allowed to access the ZyXEL Device
Enter the MAC addresses of the wireless devices that are allowed or denied
access to the ZyXEL Device in these address fields. Enter the MAC
addresses in a valid MAC address format, that is, six hexadecimal character
pairs, for example, 12:34:56:78:9a:bc.
This is the index number of the MAC address.
This is the MAC addresses of the wireless devices that are allowed or denied
access to the ZyXEL Device.
click the Remove button.
92
P-870HW-51a v2 User’s Guide
7.8 The Advanced Setup Screen
To configure advanced wireless settings, click Network > Wireless LAN >
Advanced Setup. The screen appears as shown.
Figure 47 Wireless LAN > Advanced Setup
Chapter 7 Wireless LAN
The following table describes the labels in this screen.
Table 25 Wireless LAN > Advanced Setup
LABEL DESCRIPTION
RTS/CTS
Threshold
Fragmentatio
n Threshold
Number of
Wireless
Stations
Allowed
Output Power Set the output power of the ZyXEL Device. If there is a high density of APs
Multicast
Rate
Enter a value between 0 and 2432.
This is the maximum data fragment size that can be sent. Enter a value
between 256 and 2432.
Specify the maximum number (from 1 to 64) of the wireless stations that
may connect to the ZyXEL Device.
in an area, decrease the output power to reduce interference with other
APs. Select one of the following 20%, 40%, 60%, 80% or 100%.
Select a data rate at which the ZyXEL Device transmits wireless multicast
traffic.
If you select a high rate, multicast traffic may occupy all the bandwidth
and cause metwork congestion.
P-870HW-51a v2 User’s Guide
93
Chapter 7 Wireless LAN
Table 25 Wireless LAN > Advanced Setup
LABEL DESCRIPTION
54gTM Mode Select 54g Auto to allow either IEEE 802.11b or IEEE 802.11g compliant
54gTM
Protection
Preamble Select a preamble type from the drop-down list menu. Choices are Long
Apply Click this to save your changes back to the ZyXEL Device.
Reset Click this to reload the previous configuration for this screen.
WLAN devices to associate with the ZyXEL Device. The ZyXEL Device
adjusts the transmission rate automatically according to the wireless
standard supported by the wireless devices.
Select 54g Performance to allow only IEEE 802.11g compliant WLAN
devices to associate with the ZyXEL Device.
Select 802.11b Only to allow either IEEE 802.11b or IEEE 802.11g
compliant WLAN devices to associate with the ZyXEL Device. In this mode,
all wireless devices can only transmit at the data rates supported by IEEE
802.11b.
Enabling this feature can help prevent collisions in mixed-mode networks
(networks with both IEEE 802.11b and IEEE 802.11g traffic).
Select Auto to have the wireless devices transmit data after a RTS/CTS
handshake. This helps improve IEEE 802.11g performance.
Select Off to disable 54g protection. The transmission rate of your ZyXEL
Device might be reduced in a mixed-mode network.
This field displays Off and is not configurable when you set 54g
to 802.11b Only.
or Short. The default setting is Long. See the appendix for more
information.
This field displays Short and is not configurable when you set 54g
Mode to 54g Performance.
TM
Mode
TM
7.9 Technical Reference
This section discusses wireless LANs in depth. For more information, see the
appendix.
94
P-870HW-51a v2 User’s Guide
7.9.1 Wireless Network Overview
The following figure provides an example of a wireless network.
Figure 48 Example of a Wireless Network
Chapter 7 Wireless LAN
AP
A
The wireless network is the part in the blue circle. In this wireless network,
devices A and B use the access point (AP) to interact with the other devices (such
as the printer) or with the Internet. Your ZyXEL Device is the AP.
B
Every wireless network must follow these basic guidelines.
• Every device in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
• If two wireless networks overlap, they should use a different channel.
Like radio stations or television channels, each wireless network uses a specific
channel, or frequency, to send and receive information.
• Every device in the same wireless network must use security compatible with
the AP.
Security stops unauthorized devices from using the wireless net work. It can also
protect the information that is sent in the wireless network.
P-870HW-51a v2 User’s Guide
95
Chapter 7 Wireless LAN
7.9.2 Additional Wireless Terms
The following table describes some wireless network terms and acronyms used in
the ZyXEL Device’s Web Configurator.
Table 26 Additional Wireless Terms
TERM DESCRIPTION
RTS/CTS Threshold In a wireless network which covers a large area, wireless devices
are sometimes not aware of each other’s presence. This may cause
them to send information to the AP at the same time and result in
information colliding and not getting through.
By setting this value lower than the default value, the wireless
devices must sometimes get permission to send information to the
ZyXEL Device. The lower the value, the more often the devices must
get permission.
If this value is greater than the fragmentation threshold value (see
below), then wireless devices never have to get permission to send
information to the ZyXEL Device.
Preamble A preamble affects the timing in your wireless network. There are
two preamble modes: long and short. If a device uses a different
preamble mode than the ZyXEL Device does, it cannot communicate
with the ZyXEL Device.
Authentication The process of verifying whether a wireless device is allowed to use
the wireless network.
Fragmentation
Threshold
A small fragmentation threshold is recommended for busy networks,
while a larger threshold provides faster performance if the network
is not very busy.
7.9.3 Wireless Security Overview
The following sections introduce different types of wireless s ecurity you can set up
in the wireless network.
7.9.3.1 SSID
Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID
in the area. You can hide the SSID instead, in which case the ZyXEL Device does
not broadcast the SSID. In addition, you should change the default SSID to
something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for
unauthorized wireless devices to get the SSID. In addition, unauthorized wireless
devices can still see the in formation that is sent in the wireless network.
7.9.3.2 MAC Address Filter
Every device that can use a wireless network has a unique identification number,
called a MAC address.
1
A MAC address is usually written using twelve hexadecimal
96
P-870HW-51a v2 User’s Guide
characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC
address for each device in the wireless network, see the device’s User’s Guide or
other documentation.
You can use the MAC address filter to tell the ZyXEL Device which devices are
allowed or not allowed to use the wireless network. If a device is allowed to use
the wireless network, it still has to have the correct information (SSID, channel,
and security). If a device is not allowed to use the wireless network, it does not
matter if it has the correct information.
This type of security does not protect the inf o rm at ion that is sent in the wireless
network. Furthermore, there are ways f or unauthorized wireless devices to get the
MAC address of an authorized device. Then, they can use that MAC address to use
the wireless network.
7.9.3.3 User Authentication
Authentication is the process of verifying whether a wireless device is allowed to
use the wireless network. Y ou can make every user log in to the wireless network
before they can use it. However, every device in the wireless network has to
support IEEE 802.1x to do this.
Chapter 7 Wireless LAN
For wireless networks, you can store the user names and passwords for each user
in a RADIUS server . This is a server used in businesses more than in homes. If you
do not have a RADIUS server, you cannot set up user names and passwords for
your users.
Unauthorized wireless devices can still see the information that is sent in the
wireless network, even if they cannot use the wireless network. Furthermore,
there are ways for unauthorized wireless users to get a valid user name and
password. Then, they can use that user name and password to use the wireless
network.
7.9.3.4 Encryption
Wireless networks can use encryption to protect the informat ion that is sent in the
wireless network. Encryption is like a secret code. If you do not know the secret
code, you cannot understand the message.
1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks.
These kinds of wireless devices might not have MAC addresses.
2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
P-870HW-51a v2 User’s Guide
97
Chapter 7 Wireless LAN
The types of encryption you can choose depend on the type of authentication.
(See Section 7.9.3.3 on page 97 for information about this.)
Table 27 Types of Encryption for Each Type of Authentication
Weakest No Security
StrongestWPA2-PSK WPA2
For example, if the wireless network has a RADIUS server, you can choose WPA
or WPA2. If users do not log in to the wireless network, you can choose no
encryption, Static WEP, WPA-PSK, or WPA2-PSK.
Usually, you should set up the strongest encryption that every device in the
wireless network supports. For example, suppose you have a wireless network
with the ZyXEL Device and you do not have a RADIUS server. Therefore, there is
no authentication. Suppose the wireless network has two devices. Device A only
supports WEP, and device B supports WEP and WPA. Therefore, you should set up
Static WEP in the wireless network.
NO AUTHENTICATION RADIUS SERVER
Static WEP
WPA-PSK
WPA
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. The other types of encryption are better than none at all, but it is still
possible for unauthorized wireless devices to figure out the original information
pretty quickly.
When you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select
an option (WPA compatible) to support WPA as well. In this case, if some of the
devices support WPA and some support WPA2, you should set up WPA2-PSK or
WPA2 (depending on the type of wireless network login) and select the WPA
compatible option in the ZyXEL Device.
Many types of encryption use a key to protect the information in the wireless
network. The longer the key, the stronger the encryption. Every device in the
wireless network must have the same key.
7.9.4 WiFi Protected Setup
Your ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to
set up a secure wireless network. WPS is an industry standard specification,
defined by the WiFi Alliance.
98
WPS allows you to quickly set up a wireless network with strong security, without
having to configure security settings manually. Each WPS connection works
P-870HW-51a v2 User’s Guide
between two devices. Both devices must support WPS (check each device’s
documentation to make sure).
Depending on the devices you have, you can either press a button (on the device
itself , or in its configuration utility) or enter a PIN (a unique P ersonal Identification
Number that allows one device to authenticate the other) in each of the two
devices. When WPS is activated on a device, it has two minutes to find another
device that also has WPS activated. Then, the two devices connect and set up a
secure network by themselves.
7.9.4.1 Push Button Configuration
WPS Push Button Configuration (PBC) is in itiated by pressing a button on each
WPS-enabled device, and allowing them to connect automatically. You do not need
to enter any information.
Not every WPS-enabled device has a physical WPS button. Some may have a WPS
PBC button in their configuration utilities instead of or in addition to the physical
button.
Chapter 7 Wireless LAN
Take the following steps to set up WPS using the button.
1 Ensure that the two devices you want to set up are within wireless range of one
another.
2 Look for a WPS button on each device. If the device does not have one, log into its
configuration utility and locate the button (see the device’s User’ s Guide for how to
do this - for the ZyXEL Device, see Section 7.6 on page 91).
3 Press the button on one of the devices (it doesn’t matte r w hi c h) . For the ZyXEL
Device you must press the WPS button for more than three seconds.
4 Within two minutes, press the button on the other device. The registrar sends the
network name (SSID) and security key throug h an secure connection to the
enrollee.
If you need to make sure that WPS worked, check the list of associated wireless
clients in the AP’s configuration utility. If you see the wireless client in the list,
WPS was successful.
7.9.4.2 PIN Configuration
Each WPS-enabled device has its own PIN (Personal Identification Number). This
may either be static (it cannot be changed) or dynamic (in some devices you can
generate a new PIN by clicking on a button in the configuration interface).
P-870HW-51a v2 User’s Guide
99
Chapter 7 Wireless LAN
Use the PIN method instead of the push-button configuration (PBC) method if you
want to ensure that the connection is esta blished between the devices you specify,
not just the first two devices to activate WPS in r ange of each other. However, you
need to log into the configuration interfaces of both devices to use the PIN
method.
When you use the PIN method, you must enter the PIN from one device (usually
the wireless client) into the second device (usually the Access Point or wireless
router). Then, when WPS is activated on the first device, it presents its PIN to the
second device. If the PIN matches, one device sends the network and security
information to the other, allowing it to join the network.
Take the following steps to set up a WPS connection between an access point or
wireless router (referred to here as the AP) and a client device using the PIN
method.
1 Ensure WPS is enabled on both devices.
2 Access the WPS section of the AP’s configuration interface. See the device’s User’s
Guide for how to do this.
3 Look for the client’s WPS PIN; it will be displayed either on the device, or in the
WPS section of the client’s configuration interface (see the device’s User’s Guide
for how to find the WPS PIN - for the ZyXEL Device, see Section 7.5 on page 89).
4 Enter the client’s PIN in the AP’s configuration interface.
Note: If the client device’s configuration interface has an area for entering another
device’s PIN, you can either enter the client’s PIN in the AP, or enter the AP’s
PIN in the client - it does not matter which.
5 Start WPS on both devices within two minutes.
Note: Use the configuration utility to activate WPS, not the push-button on the device
itself.
6 On a computer connected to the wireless client, try to connect to the Internet. If
you can connect, WPS was successful.
If you cannot connect, check the list of associated wireless clients in the AP’s
configuration utility. If you see the wireless client in the list, WPS was successful.
100
P-870HW-51a v2 User’s Guide
Loading...