User ManualTable of ContentsUser’s Guide1About This User's Guide3Document Conventions4Safety Warnings6Contents Overview9Table of Contents11List of Figures21List of Tables27Introduction31Introducing the ZyXEL Device331.1 Overview331.2 Ways to Manage the ZyXEL Device331.3 Configuring Your ZyXEL Device’s Security Features341.3.1 Control Access to Your Device341.3.2 Wireless Security341.3.3 Firewall351.3.4 NAT351.3.5 Content filter351.3.6 UPnP351.4 Maintaining Your ZyXEL Device351.5 Features361.5.1 Wireless Features381.6 Applications for the ZyXEL Device391.6.1 Protected Internet Access401.6.2 LAN to LAN Application401.7 LEDs411.8 Splitters and Microfilters411.8.1 Connecting a POTS Splitter411.8.2 Telephone Microfilters42Introducing the Web Configurator452.1 Web Configurator Overview452.2 Accessing the Web Configurator452.3 Resetting the ZyXEL Device482.3.1 Using the Reset Button482.4 Navigating the Web Configurator482.4.1 Navigation Panel482.4.2 Status Screen502.4.3 Status: Any IP Table532.4.4 Status: WLAN Status532.4.5 Status: Bandwidth Status542.4.6 Status: Packet Statistics542.4.7 Changing Login Password56Wizard Setup for Internet Access573.1 Introduction573.2 Internet Access Wizard Setup573.2.1 Automatic Detection593.2.2 Manual Configuration593.3 Wireless Connection Wizard Setup643.3.1 Manually assign a WPA-PSK key663.3.2 Manually assign a WEP key67Bandwidth Management Wizard694.1 Introduction694.2 Predefined Media Bandwidth Management Services694.3 Bandwidth Management Wizard Setup70Wizard75Wizard Setup for Internet Access775.1 Introduction775.2 Internet Access Wizard Setup775.2.1 Automatic Detection795.2.2 Manual Configuration795.3 Wireless Connection Wizard Setup845.3.1 Manually assign a WPA-PSK key865.3.2 Manually assign a WEP key87Bandwidth Management Wizard896.1 Introduction896.2 Predefined Media Bandwidth Management Services896.3 Bandwidth Management Wizard Setup90Network95WAN Setup977.1 WAN Overview977.1.1 Encapsulation977.1.2 Multiplexing987.1.3 Encapsulation and Multiplexing Scenarios987.1.4 VPI and VCI997.1.5 IP Address Assignment997.1.6 Nailed-Up Connection (PPP)997.1.7 NAT1007.2 Metric1007.3 Traffic Shaping1007.3.1 ATM Traffic Classes1017.4 Zero Configuration Internet Access1027.5 Internet Connection1027.5.1 Configuring Advanced Internet Connection Setup1047.6 Configuring More Connections1067.6.1 More Connections Edit1077.6.2 Configuring More Connections Advanced Setup1107.7 Traffic Redirect1117.8 Configuring WAN Backup112LAN Setup1158.1 LAN Overview1158.1.1 LANs, WANs and the ZyXEL Device1158.1.2 DHCP Setup1168.1.3 DNS Server Address1168.1.4 DNS Server Address Assignment1168.2 LAN TCP/IP1178.2.1 IP Address and Subnet Mask1178.2.2 RIP Setup1188.2.3 Multicast1188.2.4 Any IP1198.3 Configuring LAN IP1208.3.1 Configuring Advanced LAN Setup1218.4 DHCP Setup1228.5 LAN Client List1238.6 LAN IP Alias124Wireless LAN1279.1 Wireless Network Overview1279.2 Wireless Security Overview1289.2.1 SSID1289.2.2 MAC Address Filter1289.2.3 User Authentication1289.2.4 Encryption1299.3 General Wireless LAN Screen1309.3.1 No Security1319.3.2 WEP Encryption1329.3.3 WPA-PSK/WPA2-PSK1339.3.4 WPA/WPA21359.3.5 Wireless LAN Advanced Setup1379.3.6 MAC Filter1389.4 WiFi Protected Setup1399.4.1 Push Button Configuration1399.4.2 PIN Configuration1399.4.3 How WPS Works1419.4.4 Example WPS Network Setup1429.4.5 Limitations of WPS1449.5 The WPS Screen1459.6 The WPS Station Screen146Network Address Translation (NAT)14710.1 NAT Overview14710.1.1 NAT Definitions14710.1.2 What NAT Does14810.1.3 How NAT Works14810.1.4 NAT Application14810.1.5 NAT Mapping Types14910.2 SUA (Single User Account) Versus NAT15010.3 NAT General Setup15010.4 Port Forwarding15110.4.1 Default Server IP Address15210.4.2 Port Forwarding: Services and Port Numbers15210.4.3 Configuring Servers Behind Port Forwarding (Example)15210.5 Configuring Port Forwarding15310.5.1 Port Forwarding Rule Edit154Security157Firewalls15911.1 Firewall Overview15911.2 Types of Firewalls15911.2.1 Packet Filtering Firewalls15911.2.2 Application-level Firewalls16011.2.3 Stateful Inspection Firewalls16011.3 Introduction to ZyXEL’s Firewall16011.3.1 Denial of Service Attacks16111.4 Denial of Service16111.4.1 Basics16111.4.2 Types of DoS Attacks16211.5 Stateful Inspection16411.5.1 Stateful Inspection Process16511.5.2 Stateful Inspection and the ZyXEL Device16611.5.3 TCP Security16611.5.4 UDP/ICMP Security16711.5.5 Upper Layer Protocols16711.6 Guidelines for Enhancing Security with Your Firewall16811.6.1 Security In General16811.7 Packet Filtering Vs Firewall16911.7.1 Packet Filtering:16911.7.2 Firewall16911.8 Triangle Route17011.8.1 The “Triangle Route” Problem17011.8.2 The “Triangle Route” Solutions171Firewall Configuration17312.1 Access Methods17312.2 Firewall Policies Overview17312.3 Rule Logic Overview17412.3.1 Rule Checklist17412.3.2 Security Ramifications17412.3.3 Key Fields For Configuring Rules17512.4 Connection Direction17512.4.1 LAN to WAN Rules17612.4.2 Alerts17612.5 General Firewall Policy17612.6 Firewall Rules Summary17712.6.1 Configuring Firewall Rules17912.6.2 Customized Services18212.6.3 Configuring a Customized Service18212.7 Example Firewall Rule18312.8 Predefined Services18712.9 Anti-Probing18912.10 DoS Thresholds19012.10.1 Threshold Values19012.10.2 Half-Open Sessions19112.10.3 Configuring Firewall Thresholds191Content Filtering19513.1 Content Filtering Overview19513.2 Configuring Keyword Blocking19513.3 Configuring the Schedule19613.4 Configuring Trusted Computers197Advanced199Static Route20114.1 Static Route20114.2 Configuring Static Route20114.2.1 Static Route Edit202Bandwidth Management20515.1 Bandwidth Management Overview20515.2 Application-based Bandwidth Management20515.3 Subnet-based Bandwidth Management20515.4 Application and Subnet-based Bandwidth Management20615.5 Scheduler20615.5.1 Priority-based Scheduler20615.5.2 Fairness-based Scheduler20715.6 Maximize Bandwidth Usage20715.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic20715.6.2 Maximize Bandwidth Usage Example20715.6.3 Bandwidth Management Priorities20915.7 Over Allotment of Bandwidth20915.8 Configuring Summary20915.9 Bandwidth Management Rule Setup21115.9.1 Rule Configuration21215.10 Bandwidth Monitor214Dynamic DNS Setup21716.1 Dynamic DNS Overview21716.1.1 DYNDNS Wildcard21716.2 Configuring Dynamic DNS217Remote Management Configuration22117.1 Remote Management Overview22117.1.1 Remote Management Limitations22217.1.2 Remote Management and NAT22217.1.3 System Timeout22217.2 WWW22217.3 Telnet22317.4 Configuring Telnet22317.5 Configuring FTP22417.6 SNMP22517.6.1 Supported MIBs22617.6.2 SNMP Traps22717.6.3 Configuring SNMP22717.7 Configuring DNS22817.8 Configuring ICMP22917.9 TR-069230Universal Plug-and-Play (UPnP)23318.1 Introducing Universal Plug and Play23318.1.1 How do I know if I'm using UPnP?23318.1.2 NAT Traversal23318.1.3 Cautions with UPnP23318.2 UPnP and ZyXEL23418.2.1 Configuring UPnP23418.3 Installing UPnP in Windows Example23518.3.1 Installing UPnP in Windows Me23518.3.2 Installing UPnP in Windows XP23618.4 Using UPnP in Windows XP Example23718.4.1 Auto-discover Your UPnP-enabled Network Device23818.4.2 Web Configurator Easy Access241Maintenance245System24719.1 General Setup24719.1.1 General Setup and System Name24719.1.2 General Setup24719.2 Time Setting249Logs25320.1 Logs Overview25320.1.1 Alerts and Logs25320.2 Viewing the Logs25320.3 Configuring Log Settings25420.3.1 Example E-mail Log25620.4 Log Descriptions257Tools27121.1 Firmware Upgrade27121.2 Configuration Screen27321.2.1 Backup Configuration27321.2.2 Restore Configuration27421.2.3 Back to Factory Defaults27521.3 Restart275Diagnostic27722.1 General Diagnostic27722.2 DSL Line Diagnostic278Troubleshooting and Specifications279Troubleshooting28123.1 Power, Hardware Connections, and LEDs28123.2 ZyXEL Device Access and Login28223.3 Internet Access28323.4 Reset the ZyXEL Device to Its Factory Defaults284Product Specifications28524.1 General ZyXEL Device Specifications28524.2 Wall-mounting Instructions28824.2.1 M4 Tap Screw and Masonry Plug289Appendices and Index291Setting Up Your Computer’s IP Address293Pop-up Windows, JavaScripts and Java Permissions317IP Addresses and Subnetting325Wireless LANs335Command Interpreter349NetBIOS Filter Commands355Internal SPTGEN357Legal Information373Customer Support377Index383Size: 12.4 MBPages: 392Language: EnglishOpen manual
