Zyxel P-660HWP-Dx - Manual

Safety Warnings P-660HWP-Dx User’s Guide 38 Safety Warnings 1 For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liq...

Contents Overview P-660HWP-Dx User’s Guide 35 Contents Overview Introduction ............................................................................................................................ 33 Introducing the P-660HWP-Dx ......................................................................

Table of Contents P-660HWP-Dx User’s Guide 35 Table of Contents About This User's Guide .......................................................................................................... 3 Document Conventions......................................................................................

List of Figures P-660HWP-Dx User’s Guide 35 List of Figures Figure 1 Protected Internet Access Applications .................................................................................... 36Figure 2 LAN-to-LAN Application Example ....................................................................

List of Tables P-660HWP-Dx User’s Guide 35 List of Tables Table 1 ADSL Standards ....................................................................................................................... 36Table 2 Front Panel LEDs ...........................................................................

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 Introducing the P-660HWP-Dx This chapter introduces the main applications and features of the P-660HWP-Dx. It also introduces the ways you can manage the P-660HWP-Dx. 1.1 Overview The P-660HWP-Dx is an IEEE 802.11b/g wireless ADSL2+ gateway that allows sup...

Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 38 Figure 3 Front Panel The following table describes the LEDs. 1.5 Hardware Connections Refer to the Quick Start Guide for information on hardware connections. Table 2 Front Panel LEDs LED COLOR STATUS DESCRIPTION POWER Green On The P-6...

P-660HWP-Dx User’s Guide 35 C H A P T E R 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator. 2.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy P-660HWP-Dx setup and management via Internet...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 36 5 A window displays as shown. Figure 8 Password Screen 2.2.1 User Access 1 For user access enter the default user password user to view the status only. The following window will appear. Figure 9 User status screen 2.2.2 Administ...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 37 " If you do not change the password at least once, the following screen appears every time you log in with the admin password. Figure 10 Change Password at Login 4 Select Go to Wizard setup and click Apply to display the wiza...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 38 2.3 Resetting the P-660HWP-Dx If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the P-660HWP-Dx to reload the factory-default configuration file. This means th...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 39 " Click the icon (located in the top right corner of most screens) to view embedded help. Table 3 Web Configurator Screens Summary LINK/ICON SUB-LINK FUNCTION Wizard INTERNET/ WIRELESS SETUP Use these screens for initial conf...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 43 2.4.3 Status: Any IP Table Click the Any IP Table hyperlink in the Status screen. The Any IP table shows current read- only information (including the IP address and the MAC address) of all network devices that use the Any IP fea...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 44 The following table describes the labels in this screen. 2.4.4 Status: WLAN Status Click the WLAN Status hyperlink in the Status screen to view the wireless stations that are currently associated to the P-660HWP-Dx. Figure 15 Sta...

Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 45 Figure 16 Status: Bandwidth Status 2.4.6 Status: Powerline Statistics Click the Powerline Statistics hyperlink in the Status screen. The following screen will appear. Figure 17 Status: Powerline See Figure 46 on page 140 for info...

35 P A R T II Wizards Wizard Setup for Internet/Wireless Access (59)Bandwidth Management Wizard (73)

P-660HWP-Dx User’s Guide 35 C H A P T E R 3 Wizard Setup for Internet/ Wireless Access This chapter provides information on the Wizard Setup screens for Internet/Wireless access in the web configurator. 3.1 Introduction Use the wizard setup screens to configure your system for Internet/Wireless acce...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 36 Figure 20 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access. Figure 21 Wizard: Welcome 3 The wizard attempts to detect which WAN connection type you are using. If the wizard detect...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 37 Figure 22 Auto Detection: No DSL Connection If the wizard still cannot detect a connection type and the following screen appears (see Figure 23 on page 37 ), click Next and refer to Section 3.2.2 on page 38 on how to con...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 42 Figure 29 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you entered for PPPoE or PPPoA connection are not correct, the screen displays as shown...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 43 Figure 31 Connection Test Failed-2. 3.3 Wireless Connection Wizard Setup After you configure the Internet access information, use the following screens to set up your wireless LAN. This section is available on the wirele...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 45 Figure 34 Wireless LAN Setup Wizard 2 The following table describes the labels in this screen. Table 14 Wireless LAN Setup Wizard 2 LABEL DESCRIPTION Network Name (SSID) Enter a descriptive name (up to 32 printable 7-bit...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 46 " The wireless stations and P-660HWP-Dx must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is enabled) for wireless communication. 4 This screen varies depending on the...

Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 47 Figure 36 Manually assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 37 Wireless LAN Setup 3 6 Use the read-only summary table to check whe...

P-660HWP-Dx User’s Guide 49 C H A P T E R 4 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens. 4.1 Introduction Bandwidth management allows you to control the amount of bandwidth going out through the P-660HWP-Dx’s WAN port and pr...

Chapter 4 Bandwidth Management Wizard P-660HWP-Dx User’s Guide 50 4.3 Bandwidth Management Wizard Setup 1 After you enter the admin password to access the web configurator, select Go to Wizard setup and click Apply . Otherwise, click the wizard icon ( ) in the top right corner of the web configurato...

Chapter 4 Bandwidth Management Wizard P-660HWP-Dx User’s Guide 51 2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet access. Figure 40 Wizard: Welcome 3 Activate bandwidth management and select to allocate bandwidth to packets based on the service requirements. Figure 41 Bandwid...

35 P A R T III Network WAN Setup (81)LAN Setup (99)Wireless LAN (111)Powerline (135)Network Address Translation (NAT) (143)

P-660HWP-Dx User’s Guide 35 C H A P T E R 5 WAN Setup This chapter describes how to configure WAN settings. 5.1 WAN Overview A WAN (Wide Area Network) is an outside connection to another network or the Internet. 5.1.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The P-...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 36 5.1.1.3 PPPoA PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection. The P-660HWP-Dx encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC (P...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 40 The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, ...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 42 5.5.1 Configuring Advanced Internet Connection Setup To edit your P-660HWP-Dx's advanced WAN settings, click the Advanced Setup button in the Internet Connection screen. The screen appears as shown. VPI The valid range for the VPI is 0 to 255. Enter th...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 44 5.6 Configuring More Connections This section describes the protocol-independent parameters for a remote network. They are required for placing calls to a remote gateway and the network behind it across a WAN connection. When you use the WAN > Inter...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 48 5.6.2 Configuring More Connections Advanced Setup To edit your P-660HWP-Dx's advanced WAN settings, click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 49 More Connections Advanced Setup The followin...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 49 5.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the P-660HWP-Dx cannot connect to the Internet. An example is shown in the figure below. Figure 50 Traffic Redirect Example The following network topology allows you to avo...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 50 Figure 52 WAN Backup Setup The following table describes the labels in this screen. Table 25 WAN Backup Setup LABEL DESCRIPTION WAN Backup Setup Backup Type Select the method that the P-660HWP-Dx uses to check the DSL connection. Select DSL Link to hav...

Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 51 Timeout Type the number of seconds (3 recommended) for your P-660HWP-Dx to wait for a ping response from one of the IP addresses in the Check WAN IP Address field before timing out the request. The WAN connection is considered "down" after the ...

P-660HWP-Dx User’s Guide 35 C H A P T E R 6 LAN Setup This chapter describes how to configure LAN settings. 6.1 LAN Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same b...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 36 6.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the P-660HWP-Dx as a DHCP server or disable it. When configured as ...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 37 • The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. • The P-660HWP-Dx acts as a DNS proxy...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 38 You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 40 " You must enable NAT/SUA to use the Any IP feature on the P-660HWP-Dx. 6.2.4.1 How Any IP Works Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Me...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 43 6.5 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory...

Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 45 When you use IP alias, you can also configure firewall rules to control access between the LAN's logical networks (subnets). " Make sure that the subnets of the logical networks do not overlap. The following figure shows a LAN divided into subnets ...

P-660HWP-Dx User’s Guide 35 C H A P T E R 7 Wireless LAN This chapter discusses how to configure the wireless network settings in your P-660HWP-Dx. See the appendices for more detailed information about wireless networks. 7.1 Wireless Network Overview The following figure provides an example of a wi...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 36 • Every wireless client in the same wireless network must use security compatible with the AP.Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. 7.2 Wireless...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 37 ( ) WPA2-PSK (TKIP or AES):______________ ( ) WPA2 (TKIP or AES) • Preamble type (if available): auto, short or long To set up your wireless network without an AP or wireless router, make sure wireless network cards/adapters use the same following s...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 38 This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 39 " It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quic...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 40 Figure 62 Wireless LAN: General The following table describes the general wireless LAN labels in this screen. See the rest of this chapter for information on the other labels in this screen. 7.4.1 No Security Select No Security to allow wireless cli...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 41 " If you do not enable any wireless security on your P-660HWP-Dx, your network is accessible to any wireless networking device that is within range. Figure 63 Wireless: No Security The following table describes the labels in this screen. 7.4.2 W...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 43 Figure 65 Wireless: WPA-PSK/WPA2-PSK The following table describes the wireless LAN security labels in this screen. Table 35 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box. WPA Compa...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 45 The following table describes the wireless LAN security labels in this screen. Table 36 Wireless: WPA/WPA2 LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the chec...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 48 " If you hold in the RESET button too long, the device will reset to the factory defaults! 7.5.1.1.2 Web Configurator Click the Network > Wireless LAN > OTIST . The following screen displays. Figure 68 OTIST The following table describes t...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 49 Figure 69 Example Wireless Client OTIST Screen 7.5.2 Starting OTIST " You must click Start in the AP OTIST web configurator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). You can start OTIS...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 51 7.6 MAC Filter The MAC filter screen allows you to configure the P-660HWP-Dx to give exclusive access to up to 32 devices ( Allow ) or exclude up to 32 devices from accessing the P-660HWP-Dx ( Deny ). Every Ethernet device has a unique MAC (Media Ac...

Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 57 7.8.2 Application Priority Configuration To edit a WMM QoS application entry, click the edit icon ( ) under Modify . The following screen displays. Figure 77 Application Priority Configuration The following table describes the fields in this screen....

P-660HWP-Dx User’s Guide 35 C H A P T E R 8 Powerline This chapter introduces the main applications and management of the powerline feature. 8.1 Overview The P-660HWP-Dx is a HomePlug AV adaptor integrated DSL product. The P-660HWP-Dx and other HomePlug AV powerline adapters in your network communic...

Chapter 8 Powerline P-660HWP-Dx User’s Guide 36 In this User’s Guide the electrical wiring network may be referred to as the “powerline network”. 8.2 Privacy and Powerline Adapters When the P-660HWP-Dx communicates with each other HomePlug AV compliant powerline adapters, they use encryption to scra...

Chapter 8 Powerline P-660HWP-Dx User’s Guide 38 8.3 Configuring Local Settings Use the Local Setting screen to enter the network password for the network you wish to configure. You can also change the Device Access Key for your P-660HWP-Dx from this screen.Click Network > Powerline to access the ...

Chapter 8 Powerline P-660HWP-Dx User’s Guide 39 8.4 Configuring Remote Settings Use this screen to access the other powerline adapters on your network. You can configure these adapters and add or remove them from your network.Click Network > Po werline > Remote S ettings to access and set up t...

Chapter 8 Powerline P-660HWP-Dx User’s Guide 40 8.5 Powerline Network Status Use this screen to check the status of your powerline network and for expert troubleshooting. Click on Network > Powerline > Status to access advanced information on the status of your powerline network. Figure 83 Net...

P-660HWP-Dx User’s Guide 35 C H A P T E R 9 Network Address Translation (NAT) This chapter discusses how to configure NAT on the P-660HWP-Dx. 9.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 37 Figure 85 NAT Application With IP Alias 9.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the P-660HWP-Dx maps one local IP address to one global IP address. • Many ...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 39 9.4 NAT General Setup You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the P-660HWP-Dx. Click Network > NAT to open the following screen. Figure 86 NAT G...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 40 9.5 Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a s...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 41 9.5.3 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server ( A in the example), port 80 to another ( B in the example) and assign a default server IP ad...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 43 Figure 89 Port Forwarding Rule Setup The following table describes the fields in this screen. 9.7 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NAT > General screen. Or...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 44 rules. For example, if you have already configured rules 1 to 6 in your current set and now you configure rule number 9. In the set summary screen, the new rule will be rule 7, not 9. Now if you delete rule 4, rules 5 to 7 will ...

Chapter 9 Network Address Translation (NAT) P-660HWP-Dx User’s Guide 45 9.7.1 Address Mapping Rule Edit To edit an address mapping rule, click the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 91 Edit Address Mapping Rule The following table describes the fi...

35 P A R T IV Security Firewalls (157)Firewall Configuration (169)Content Filtering (191)Certificates (195)

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 0 Firewalls This chapter gives some background information on firewalls and introduces the P-660HWP-Dx firewall. 10.1 Firewall Overview Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room ...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 36 10.2.2 Application-level Firewalls Application-level firewalls restrict access by serving as proxies for external servers. Since they use programs written for specific Internet services, such as HTTP, FTP and telnet, they can evaluate network packets ...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 37 10.3.1 Denial of Service Attacks Figure 92 Firewall Application 10.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a devic...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 38 10.4.2 Types of DoS Attacks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoo...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 39 Figure 94 SYN Flood • In a LAND Attack , hackers flood SYN packets into the network with a spoofed source IP address of the targeted system. This makes it appear as if the host computer sent the packets to itself, making the system unavailable while t...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 40 10.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that works in concert with IP. The following ICMP types trigger an alert: 10.4.2.2 Illegal Commands (NetBIOS and SMTP) The only legal NetBIOS commands are the following - all others are i...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 41 are allowed in. The P-660HWP-Dx uses stateful packet inspection to protect the private LAN from hackers and vandals on the Internet. By default, the P-660HWP-Dx’s stateful inspection allows all communications to the Internet that originate from the LA...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 44 10.6 Guidelines for Enhancing Security with Your Firewall • Change the default password via CLI (Command Line Interpreter) or web configurator. • Limit who can telnet into your router. • Don't enable any local service (such as SNMP or NTP) that you do...

Chapter 10 Firewalls P-660HWP-Dx User’s Guide 45 • Always shred confidential information, particularly about your computer, before throwing it away. Some hackers dig through the trash of companies or individuals for information that might help them in an attack. 10.7 Packet Filtering Vs Firewall Bel...

P-660HWP-Dx User’s Guide 47 C H A P T E R 11 Firewall Configuration This chapter shows you how to enable and configure the P-660HWP-Dx firewall. 11.1 Access Methods The web configurator is, by far, the most comprehensive firewall configuration tool your P-660HWP-Dx has to offer. For this reason, it ...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 48 " If you configure firewall rules without a good understanding of how they work, you might inadvertently introduce security risks to the firewall and to the protected network. Make sure you test your rules after you configure them. Fo...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 49 3 Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? 4 Does a rule that allows Internet users access to resources on the LAN c...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 50 11.4.1 LAN to WAN Rules The default rule for LAN to WAN traffic is that all users on the LAN are allowed non-restricted access to the WAN. When you configure a LAN to WAN rule, you in essence want to limit some or all users from accessing...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 51 The following table describes the labels in this screen. 11.6 Firewall Rules Summary " The ordering of your rules is very important as rules are applied in turn. Refer to Section 10.1 on page 35 for more information. Click Security &g...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 53 11.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 35 for more information. In the Rules screen, select an index number and click Add or click a rule’s Edit icon to display this screen and refer to the following table for inf...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 56 11.6.2 Customized Services Configure customized services and port numbers not predefined by the P-660HWP-Dx. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further i...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 57 Refer to Section 10.1 on page 35 for more information. Figure 101 Firewall: Configure Customized Services The following table describes the labels in this screen. 11.7 Example Firewall Rule The following Internet firewall rule example all...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 59 Figure 104 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove buttons between Available Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom serv...

Chapter 11 Firewall Configuration P-660HWP-Dx User’s Guide 65 11.10.2 Half-Open Sessions An unusually high number of half-open sessions (either an absolute number or measured as the arrival rate) could indicate that a Denial of Service attack is occurring. For TCP, "half-open" means that the...

P-660HWP-Dx User’s Guide 69 C H A P T E R 1 2 Content Filtering This chapter covers how to configure content filtering. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ability...

Chapter 12 Content Filtering P-660HWP-Dx User’s Guide 70 The following table describes the labels in this screen. 12.3 Configuring the Schedule To set the days and times for the P-660HWP-Dx to perform content filtering, click Security > Content Filter > Schedule . The screen appears as shown. ...

Chapter 12 Content Filtering P-660HWP-Dx User’s Guide 71 The following table describes the labels in this screen. 12.4 Configuring Trusted Computers To exclude a range of users on the LAN from content filtering on your P-660HWP-Dx, click Security > Content Filter > Trusted . The screen appears...

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 3 Certificates This chapter gives background information about public-key certificates and explains how to use them. 13.1 Certificates Overview The P-660HWP-Dx can use certificates (also called digital IDs) to authenticate users. Certificates are based on ...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 36 Certification authorities maintain directory servers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled expiration is called a CRL (Certificate Revocation List). The P-660HWP-Dx...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 37 Figure 113 Certificate Details 4 Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be ove...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 38 13.5 My Certificates Cli ck Security > Certificates > My Certificates to open the My Certificates screen. This is the P-660HWP-Dx’s summary list of certificates and certification requests. Certificates display in black and certification reque...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 39 13.6 My Certificates > Details Click Security > Certificates > My Certificates to open the My Certificates screen (see Figure 115 on page 38 ). Click the edit icon to open the My Certificate Details screen. You can use this screen to view ...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 42 13.7 My Certificates > Create Click Security > Certificates > My Certificates > Create to open the My Certificate Create screen. Use this screen to have the P-660HWP-Dx create a self-signed certificate, enroll a certificate with a certi...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 46 13.9 Trusted CAs Click Security > Certificates > Trusted CAs to open the Trusted CAs screen. This screen displays a summary list of certificates of the certification authorities that you have set the P-660HWP-Dx to accept as trusted. The P-66...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 47 13.10 Trusted CA Details Click Security > Certificates > Trusted CAs to open the Trusted CAs screen. Click the edit icon to open the Trusted CA Details screen. Use this screen to view in-depth information about the certification authority’s c...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 49 13.11 Trusted CA > Import Click Security > Certificates > Trusted CAs to open the Trusted CAs screen and then click Import to open the Trusted CA Import screen. Follow the instructions in this screen to save a trusted certification authori...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 50 Figure 120 Security > Certificates > Trusted CAs > Import The following table describes the labels in this screen. 13.12 Trusted Remote Hosts Click Security > Certificates > Trusted Remote Hosts to open the Trusted Remote Hosts scree...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 52 " The trusted remote host certificate must be a self-signed certificate; and you must remove any spaces from its filename before you can import it. Figure 122 Security > Certificates > Trusted Remote Hosts > Import The following table ...

Chapter 13 Certificates P-660HWP-Dx User’s Guide 55 13.15 Directory Servers Click Security > Certificates > Directory Servers to open the Directory Servers screen. This screen displays a summary list of directory servers (that contain lists of valid and revoked certificates) that have been sav...

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 4 Static Route This chapter shows you how to configure static routes for your P-660HWP-Dx. 14.1 Static Route Each remote node specifies only the network to which the gateway is directly connected, and the P-660HWP-Dx has no knowledge of the networks beyond...

Chapter 14 Static Route P-660HWP-Dx User’s Guide 36 Figure 127 Static Route The following table describes the labels in this screen. 14.2.1 Static Route Edit Select a static route index number and click Edit ( ). The screen shown next appears. Use this screen to configure the required information fo...

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 5 Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the P-660HWP-Dx’s bandwidth management logs. 15.1 Bandwidth Management Overview ZyXEL’s Bandwidth Management allows you to specify ba...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 36 Figure 129 Subnet-based Bandwidth Management Example 15.4 Application and Subnet-based Bandwidth Management You could also create bandwidth classes based on a combination of a subnet and an application. The following example table shows ban...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 37 15.5.2 Fairness-based Scheduler The P-660HWP-Dx divides bandwidth equally among bandwidth classes when using the fairness-based scheduler; thus preventing one bandwidth class from using all of the interface’s bandwidth. 15.6 Maximize Bandwi...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 39 15.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth The following table shows the amount of bandwidth that each class gets. Suppose that all of the classes except for the administration class need more bandwidth. • Each cla...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 40 If you use VoIP and NetMeeting at the same time, the device allocates up to 500 Kbps of bandwidth to each of them before it allocates any bandwidth to FTP. As a result, FTP can only use bandwidth when VoIP and NetMeeting do not use all of t...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 41 15.9 Bandwidth Management Rule Setup You must use the Bandwidth Management Summary screen to enable bandwidth management on an interface before you can configure rules for that interface.Click Advanced > Bandwidth MGMT > Rule Setup to...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 43 PHB consists of two types of services: EF (Expedited Forwarding) and AF (Assured Forwarding). EF has higher priority. EF guarantees services with minimal loss and delay. AF has four sub-classes, each with three levels of importance (drop pr...

Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 46 15.11 Bandwidth Monitor To view the P-660HWP-Dx’s bandwidth usage and allotments, click Advanced > Bandwidth MGMT > Monitor . The screen appears as shown. Select an interface from the drop-down list box to view the bandwidth usage of ...

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 6 Dynamic DNS Setup This chapter discusses how to configure your P-660HWP-Dx to use Dynamic DNS. 16.1 Dynamic DNS Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you...

Chapter 16 Dynamic DNS Setup P-660HWP-Dx User’s Guide 37 Dynamic DNS server auto detect IP Address Select this option only when there are one or more NAT routers between the P- 660HWP-Dx and the DDNS server. This feature has the DDNS server automatically detect and use the IP address of the NAT rout...

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 7 Remote Management Configuration This chapter provides information on configuring remote management. 17.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which P-660HWP-Dx interface (if any) from wh...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 36 17.1.1 Remote Management Limitations Remote management over LAN or WAN will not work when: • You have disabled that service in one of the remote management screens.• The IP address in the Secured Client IP field does not match th...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 38 17.4 Configuring Telnet Click Advanced > Remote MGMT > Telnet tab to display the screen as shown. Figure 138 Remote Management: Telnet The following table describes the labels in this screen. 17.5 Configuring FTP You can up...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 39 Figure 139 Remote Management: FTP The following table describes the labels in this screen. 17.6 SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 42 The following table describes the labels in this screen. 17.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on LAN for background informatio...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 43 Figure 142 Remote Management: DNS The following table describes the labels in this screen. 17.8 Configuring ICMP To change your P-660HWP-Dx’s security settings, click Advanced > Remote MGMT > ICMP . The screen appears as sh...

Chapter 17 Remote Management Configuration P-660HWP-Dx User’s Guide 45 Follow the procedure below to configure your P-660HWP-Dx to be managed by CNM Access. See the Command Interpreter appendix for information on the command structure and how to access the CLI (Command Line Interface) on the P-660HW...

P-660HWP-Dx User’s Guide 47 C H A P T E R 1 8 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configurator. 18.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer n...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 49 18.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. 18.3.1 Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. 1 Click Start and Control ...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 51 Figure 149 Windows Optional Networking Components Wizard 5 In the Networking Services window, select the Universal Plug and Play check box. Figure 150 Networking Services 6 Click OK to go back to the Windows Optional Networking Co...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 54 Figure 154 Internet Connection Properties: Advanced Settings: Add " When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Select Show icon in notification area when...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 55 Figure 156 Internet Connection Status 18.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the P-660HWP-Dx without finding out the IP address of the P-660HWP-Dx first. This comes helpful if y...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 56 Figure 157 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network . 5 Right-click on the icon for your P-660HWP-Dx and select Invoke . The web configurator login screen display...

Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 57 Figure 158 Network Connections: My Network Places 6 Right-click on the icon for your P-660HWP-Dx and select Properties . A properties window displays with basic information about the P-660HWP-Dx. Figure 159 Network Connections: My...

35 P A R T VI Maintenance and Troubleshooting System (265)Logs (271)Tools (289)Diagnostic (295)Troubleshooting (297)

P-660HWP-Dx User’s Guide 35 C H A P T E R 1 9 System Use this screen to configure the P-660HWP-Dx’s time and date settings. 19.1 General Setup 19.1.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. Howeve...

Chapter 19 System P-660HWP-Dx User’s Guide 37 19.2 Time Setting To change your P-660HWP-Dx’s time and date, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the P-660HWP-Dx’s time based on your local time zone. Figure 161 System Time Setting...

P-660HWP-Dx User’s Guide 35 C H A P T E R 2 0 Logs This chapter contains information about configuring general log settings and viewing the P-660HWP-Dx’s logs. Refer to the appendix for example log message explanations. 20.1 Logs Overview The web configurator allows you to choose which categories of...

Chapter 20 Logs P-660HWP-Dx User’s Guide 36 Figure 162 View Log The following table describes the fields in this screen. 20.3 Configuring Log Settings Use the Log Settings screen to configure to where the P-660HWP-Dx is to send logs; the schedule for when the P-660HWP-Dx is to send the logs and whic...

Chapter 20 Logs P-660HWP-Dx User’s Guide 39 Figure 164 E-mail Log Example 20.4 Log Descriptions This section provides descriptions of example log messages. Subject: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: [email protected] To: [email protected] 1| Apr 7 00 |From:192.168.1.1 To:192....

P-660HWP-Dx User’s Guide 35 C H A P T E R 2 1 Tools This chapter describes how to upload new firmware, manage configuration and restart your P-660HWP-Dx. 21.1 Firmware Upgrade Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, "...

Chapter 21 Tools P-660HWP-Dx User’s Guide 36 1 Do NOT turn off the P-660HWP-Dx while firmware upload is in progress! After you see the Firmware Upload in Progress screen, wait two minutes before logging into the P-660HWP-Dx again. Figure 166 Firmware Upload In Progress The P-660HWP-Dx automatically ...

Chapter 21 Tools P-660HWP-Dx User’s Guide 37 Figure 168 Error Message 21.2 Configuration Screen Use this screen to manage your the configuration settings on your device. 21.2.1 Backup Configuration Click Maintenance > Tools > Configuration . Information related to factory defaults, backup conf...

P-660HWP-Dx User’s Guide 41 C H A P T E R 2 2 Diagnostic These read-only screens display information to help you identify problems with the P-660HWP-Dx. 22.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 174 Diagnostic: General The following table describ...

Chapter 22 Diagnostic P-660HWP-Dx User’s Guide 42 22.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 175 Diagnostic: DSL Line The following table describes the fields in this screen. Table 134 Diagnostic: DSL Line LABEL DESCRIPTION ATM Stat...

P-660HWP-Dx User’s Guide 35 C H A P T E R 2 3 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • P-660HWP-Dx Access and Login • Internet Access • Power...

Chapter 23 Troubleshooting P-660HWP-Dx User’s Guide 36 23.2 P-660HWP-Dx Access and Login V I forgot the IP address for the P-660HWP-Dx. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP address and have forgotten it, you might get the IP address of the P-660HWP-Dx by looking up the I...

Chapter 23 Troubleshooting P-660HWP-Dx User’s Guide 37 5 Reset the device to its factory defaults, and try to access the P-660HWP-Dx with the default IP address. See Section 2.3 on page 46 . 6 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestio...

Chapter 23 Troubleshooting P-660HWP-Dx User’s Guide 38 1 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.4 on page 37 . 2 If your ISP gave you Internet connection information, make sure you entered it correctly in the Network &...

Chapter 23 Troubleshooting P-660HWP-Dx User’s Guide 39 Advanced Suggestions • Check the settings for bandwidth management. If it is disabled, you might consider activating it. If it is enabled, you might consider changing the allocations. 23.4 Powerline Issues V I cannot start my powerline device. 1...

35 P A R T VII Appendices and Index Product Specifications and Wall Mounting (305)Wireless LANs (311)Internal SPTGEN (325)Setting up Your Computer’s IP Address (341)IP Subnetting (357)Command Interpreter (365)Firewall Commands (369)Pop-up Windows, JavaScripts and Java Permissions (375)NetBIOS Filter...

P-660HWP-Dx User’s Guide 35 A P P E N D I X A Product Specifications and Wall Mounting Product Specifications The following tables summarize the P-660HWP-Dx’s hardware and firmware features.M4 Table 135 Hardware Specifications Dimensions (W x D x H) 250 x 170 x 36 mm Power Specification Input: 100~2...

Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 36 Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, an FTP or a TFTP tool to put it on the P- 660HWP-Dx. Note: Only upload firmware for your specific model! Confi...

Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 39 Wall-mounting Instructions Complete the following steps to hang your P-660HWP-Dx on a wall. " See the Hardware Specifications table for the size of screws to use and how far apart to place them. 1 Select a high posit...

P-660HWP-Dx User’s Guide 35 A P P E N D I X B Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wirele...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 36 Figure 179 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a D...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 37 Figure 180 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a di...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 38 Figure 181 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same t...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 39 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Preambl...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 40 Wireless security methods available on the P-660HWP-Dx are data encryption, wireless client authentication, restricting access by device MAC address and hiding the P-660HWP-Dx identity.The following figure shows the relative effectiveness of these...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 41 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your AP acts as a message relay betwee...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 42 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certi...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 43 Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication i...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 44 Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IEEE 802.1x. WPA and WPA2 use Advanced Encryption Standard (AES) in the Counter mode with Cipher block chaining...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 45 Wireless Client WPA Supplicants A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 46 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them. Figure 183 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should conf...

Appendix B Wireless LANs P-660HWP-Dx User’s Guide 47 Positioning the antennas properly increases the range and coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11b) or 5GHz(IEEE 802.11a) is needed to communicate efficiently in a wirel...

P-660HWP-Dx User’s Guide 35 A P P E N D I X C Internal SPTGEN This appendix introduces Internal SPTGEN. All menus shown in this appendix are example menus meant to show SPTGEN usage. Actual menus for your product may differ. Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator)...

Appendix C Internal SPTGEN P-660HWP-Dx User’s Guide 36 " DO NOT alter or delete any field except parameters in the Input column. This appendix introduces Internal SPTGEN. All menus shown in this appendix are example menus meant to show SPTGEN usage. Actual menus for your product may differ. Inte...

Appendix C Internal SPTGEN P-660HWP-Dx User’s Guide 37 Figure 187 Internal SPTGEN FTP Download Example " You can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your P-660HWP-Dx. Internal SPTGEN FTP Upload Example 1 Launch your FT...

Appendix C Internal SPTGEN P-660HWP-Dx User’s Guide 38 Example Internal SPTGEN Menus This section provides example Internal SPTGEN menus. Table 143 Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING FIN Field Identification Number FN Field Name PVA Parameter Values ...

P-660HWP-Dx User’s Guide 35 A P P E N D I X D Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 36 Figure 189 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsof...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 37 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically ....

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 38 Figure 191 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways.• If you have a gateway IP address, type it in ...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 39 Figure 192 Windows XP: Start Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in Windows 2000/NT). Figure 193 Windows XP: Control Panel 3 Right-click Local Area Connection and...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 44 Figure 199 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 200 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 45 • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-660HWP-Dx in the Router address box. 5 Close the TCP/IP Control Panel . 6 Click Save if prompted,...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 46 Figure 202 Macintosh OS X: Network 4 For statically assigned settings, do the following:• From the Configure box, select Manually . • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask bo...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 47 " Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the botto...

Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 48 • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click Statically set IP Addresses and fill in the Address , S...

P-660HWP-Dx User’s Guide 35 A P P E N D I X E IP Subnetting This appendix introduces addresses, IP address classes and subnet masks. Introduction to IP Addresses An IP address is made up of four octets, written in dotted decimal notation (for example, 192.168.1.1). An octet is an 8-digit binary numb...

Appendix E IP Subnetting P-660HWP-Dx User’s Guide 36 IP Address Classes and Network IDThe value of the first octet of an IP address determines the class of an address. • Class A addresses have a 0 in the leftmost bit. • Class B addresses have a 1 in the leftmost bit and a 0 in the next leftmost bit....

Appendix E IP Subnetting P-660HWP-Dx User’s Guide 39 Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four poss...

Appendix E IP Subnetting P-660HWP-Dx User’s Guide 40 Example Eight Subnets Similarly use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows class C IP address last octet values for each subnet. The following table is a summary for class “C” s...

P-660HWP-Dx User’s Guide 35 A P P E N D I X F Command Interpreter The following describes how to use the command interpreter. You can telnet to access the CLI (Command Line Interface) on the P-660HWP-Dx. See the included disk or zyxel.com for more detailed information on these commands. 1 Use of und...

Appendix F Command Interpreter P-660HWP-Dx User’s Guide 36 Log Commands This section provides some general examples of how to use the log commands. The items that display with your device may vary but the basic function should be the same. Go to the command interpreter interface. Configuring What Yo...

Appendix F Command Interpreter P-660HWP-Dx User’s Guide 37 • Use the sys logs display [log category] command to show the logs in an individual P- 660HWP-Dx log category. • Use the sys logs clear command to erase all of the P-660HWP-Dx’s logs. Log Command Example This example shows how to set the P-6...

P-660HWP-Dx User’s Guide 35 A P P E N D I X H Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device.• JavaScripts (enabled by default).• Java permissions (enabled by default). " Internet Explorer 6 s...

Appendix H Pop-up Windows, JavaScripts and Java Permissions P-660HWP-Dx User’s Guide 36 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 215 Internet Options: Privacy 3 Click Apply to save this setting...

Appendix H Pop-up Windows, JavaScripts and Java Permissions P-660HWP-Dx User’s Guide 37 Figure 216 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the ...

Appendix H Pop-up Windows, JavaScripts and Java Permissions P-660HWP-Dx User’s Guide 38 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 ...

Appendix H Pop-up Windows, JavaScripts and Java Permissions P-660HWP-Dx User’s Guide 39 Figure 219 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM...

P-660HWP-Dx User’s Guide 35 A P P E N D I X I NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-u...

Appendix I NetBIOS Filter Commands P-660HWP-Dx User’s Guide 36 The filter types and their default settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <type> <on|off> where Table 169 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN an...

P-660HWP-Dx User’s Guide 35 A P P E N D I X J Triangle Route The Ideal Setup When the firewall is on, your P-660HWP-Dx acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the P-660HWP-Dx to protect your LA...

Appendix J Triangle Route P-660HWP-Dx User’s Guide 36 Figure 223 “Triangle Route” Problem The “Triangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet int...

P-660HWP-Dx User’s Guide 35 A P P E N D I X K Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in ...

Appendix K Legal Information P-660HWP-Dx User’s Guide 36 If this device does cause harmful interference to radio/television reception, which can be determined by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures: 1 Reori...

Appendix K Legal Information P-660HWP-Dx User’s Guide 37 ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon p...

P-660HWP-Dx User’s Guide 35 A P P E N D I X L Customer Support Please have the following information ready when you contact customer support. Required Information • Product model and serial number.• Warranty Information.• Date that you received your device.• Brief description of the problem and the ...

Appendix L Customer Support P-660HWP-Dx User’s Guide 36 • Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Republika Denmark • Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +45-39-55-07-00• Fax: +45-39-55-07-07• Web: www.zy...

Appendix L Customer Support P-660HWP-Dx User’s Guide 37 India • Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +91-11-30888144 to +91-11-30888153• Fax: +91-11-30888149, +91-11-26810715• Web: http://www.zyxel.in• Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Fl...

Appendix L Customer Support P-660HWP-Dx User’s Guide 38 • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: [email protected] • Sales E-mail: [email protected]• Telephone: +47-22-80-61-80• Fax: +47-22-80-61-81• Web: www.zyxel.no• Regula...

Appendix L Customer Support P-660HWP-Dx User’s Guide 39 Sweden • Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +46-31-744-7700• Fax: +46-31-744-7701• Web: www.zyxel.se• Regular Mail: ZyXEL Communications A/S, Sjöporten 4, 41764 Göteborg, Sweden Thailand • Support E-mail:...

Index P-660HWP-Dx User’s Guide 35 Index A AAL5 82 access point see AP address assignment 100 Address Resolution Protocol see ARP ADSL standards 36 ADSL line reinitialize 296 ADSL standards 36 Advanced Encryption Standard See AES. AES 320 alerts 271 ALG 146 alternative subnet mask notation 359 antenn...