ZyXEL Communications P-660H-T Series User Manuals

Table of Contents

• User’s Guide

  1
• Copyright

  3
• Federal Communications Commission (FCC) Interference Statement

  4
• Safety Warnings

  6
• ZyXEL Limited Warranty

  7
• Customer Support

  8
• Table of Contents

  11
• List of Figures

  25
• List of Tables

  33
• Preface

  39
• Introduction to DSL

  41
• Getting To Know Your Prestige

  43
  • 1.1 Introducing the Prestige

    43
  • 1.2 Features

    43
    • 1.2.1 Wireless Features (P-660HW)

      46
  • 1.3 Applications for the Prestige

    47
    • 1.3.1 Protected Internet Access

      47
    • 1.3.2 LAN to LAN Application

      47
  • 1.4 Front Panel LEDs

    47
  • 1.5 Hardware Connection

    48
• Introducing the Web Configurator

  49
  • 2.1 Web Configurator Overview

    49
    • 2.1.1 Accessing the Web Configurator

      49
    • 2.1.2 Resetting the Prestige

      50
      • 2.1.2.1 Using the Reset Button

        50
    • 2.1.3 Navigating the Web Configurator

      51
• Wizard Setup for Internet Access

  55
  • 3.1 Introduction

    55
    • 3.1.1 Internet Access Wizard Setup

      55
• LAN Setup

  63
  • 4.1.1 LANs, WANs and the Prestige

    63
  • 4.1.2 DHCP Setup

    64
    • 4.1.2.1 IP Pool Setup

      64
  • 4.1.3 DNS Server Address

    64
  • 4.1.4 DNS Server Address Assignment

    64
  • 4.2 LAN TCP/IP

    65
    • 4.2.1 IP Address and Subnet Mask

      65
      • 4.2.1.1 Private IP Addresses

        66
    • 4.2.2 RIP Setup

      66
    • 4.2.3 Multicast

      67
    • 4.2.4 Any IP

      67
      • 4.2.4.1 How Any IP Works

        68
• Wireless LAN

  71
  • 5.2 Wireless Security Overview

    71
    • 5.2.1 Encryption

      71
    • 5.2.2 Authentication

      71
    • 5.2.3 Restricted Access

      72
    • 5.2.4 Hide Prestige Identity

      72
    • 5.4.1 WEP Encryption

      74
    • 5.6.1 WPA-PSK Application Example

      78
    • 5.6.2 WPA with RADIUS Application Example

      79
    • 5.6.3 Wireless Client WPA Supplicants

      80
    • 5.7.1 No Access Allowed or Authentication

      81
    • 5.7.2 Authentication Required: 802.1x

      81
    • 5.7.3 Authentication Required: WPA

      83
    • 5.7.4 Authentication Required: WPA-PSK

      85
• WAN Setup

  91
  • 6.1.1 Encapsulation

    91
    • 6.1.1.1 ENET ENCAP

      91
    • 6.1.1.2 PPP over Ethernet

      91
    • 6.1.1.3 PPPoA

      91
    • 6.1.1.4 RFC 1483

      92
  • 6.1.2 Multiplexing

    92
    • 6.1.2.1 VC-based Multiplexing

      92
    • 6.1.2.2 LLC-based Multiplexing

      92
  • 6.1.3 VPI and VCI

    92
  • 6.1.4 IP Address Assignment

    92
    • 6.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation

      92
    • 6.1.4.2 IP Assignment with RFC 1483 Encapsulation

      93
    • 6.1.4.3 IP Assignment with ENET ENCAP Encapsulation

      93
  • 6.1.5 Nailed-Up Connection (PPP)

    93
  • 6.1.6 NAT

    93
  • 6.2 Metric

    93
  • 6.3 PPPoE Encapsulation

    94
  • 6.4 Traffic Shaping

    94
  • 6.5 Zero Configuration Internet Access

    95
• Network Address Translation (NAT) Screens

  103
  • 7.1.1 NAT Definitions

    103
  • 7.1.2 What NAT Does

    104
  • 7.1.3 How NAT Works

    104
  • 7.1.4 NAT Application

    105
  • 7.1.5 NAT Mapping Types

    106
  • 7.2 SUA (Single User Account) Versus NAT

    107
  • 7.3 SUA Server

    107
    • 7.3.1 Default Server IP Address

      107
    • 7.3.2 Port Forwarding: Services and Port Numbers

      107
    • 7.3.3 Configuring Servers Behind SUA (Example)

      108
• Dynamic DNS Setup

  115
  • 8.1.1 DYNDNS Wildcard

    115
• Time and Date

  117
• Firewalls

  119
  • 10.2 Types of Firewalls

    119
    • 10.2.1 Packet Filtering Firewalls

      119
    • 10.2.2 Application-level Firewalls

      120
    • 10.2.3 Stateful Inspection Firewalls

      120
  • 10.3 Introduction to ZyXEL’s Firewall

    120
    • 10.3.1 Denial of Service Attacks

      121
  • 10.4 Denial of Service

    121
    • 10.4.1 Basics

      121
    • 10.4.2 Types of DoS Attacks

      122
      • 10.4.2.1 ICMP Vulnerability

        124
      • 10.4.2.2 Illegal Commands (NetBIOS and SMTP)

        124
      • 10.4.2.3 Traceroute

        125
  • 10.5 Stateful Inspection

    125
    • 10.5.1 Stateful Inspection Process

      126
    • 10.5.2 Stateful Inspection and the Prestige

      127
    • 10.5.3 TCP Security

      127
    • 10.5.4 UDP/ICMP Security

      128
    • 10.5.5 Upper Layer Protocols

      128
  • 10.6 Guidelines for Enhancing Security with Your Firewall

    128
    • 10.6.1 Security In General

      129
  • 10.7 Packet Filtering Vs Firewall

    130
    • 10.7.1 Packet Filtering:

      130
      • 10.7.1.1 When To Use Filtering

        130
    • 10.7.2 Firewall

      130
      • 10.7.2.1 When To Use The Firewall

        130
• Firewall Configuration

  133
  • 11.1 Access Methods

    133
  • 11.2 Firewall Policies Overview

    133
  • 11.3 Rule Logic Overview

    134
    • 11.3.1 Rule Checklist

      134
    • 11.3.2 Security Ramifications

      134
    • 11.3.3 Key Fields For Configuring Rules

      135
      • 11.3.3.1 Action

        135
      • 11.3.3.2 Service

        135
      • 11.3.3.3 Source Address

        135
      • 11.3.3.4 Destination Address

        135
  • 11.4 Connection Direction

    135
    • 11.4.1 LAN to WAN Rules

      135
    • 11.4.2 Alerts

      136
  • 11.9 Example Firewall Rule

    143
  • 11.10 Predefined Services

    147
    • 11.12.1 Threshold Values

      151
    • 11.12.2 Half-Open Sessions

      151
      • 11.12.2.1 TCP Maximum Incomplete and Blocking Time

        151
    • 11.12.3 Configuring Firewall Thresholds

      152
• Content Filtering

  155
  • 12.2 The Main Content Filter Screen

    155
• Remote Management Configuration

  159
  • 13.1.1 Remote Management Limitations

    159
  • 13.1.2 Remote Management and NAT

    160
  • 13.1.3 System Timeout

    160
  • 13.2 Telnet

    160
  • 13.3 FTP

    161
  • 13.4 Web

    161
  • 13.5 Configuring Remote Management

    161
• Universal Plug-and-Play (UPnP)

  163
  • 14.1.1 How do I know if I'm using UPnP?

    163
  • 14.1.2 NAT Traversal

    163
  • 14.1.3 Cautions with UPnP

    164
  • 14.2 UPnP and ZyXEL

    164
  • 14.3 Installing UPnP in Windows Example

    165
  • 14.4 Using UPnP in Windows XP Example

    169
• Logs Screens

  177
  • 15.1.1 Alerts and Logs

    177
  • 15.2 Configuring Log Settings

    177
  • 15.4 SMTP Error Messages

    180
    • 15.4.1 Example E-mail Log

      181
• Media Bandwidth Management Advanced Setup

  183
  • 16.2 Bandwidth Classes and Filters

    183
  • 16.3 Proportional Bandwidth Allocation

    184
  • 16.4 Bandwidth Management Usage Examples

    184
    • 16.4.1 Application-based Bandwidth Management Example

      184
    • 16.4.2 Subnet-based Bandwidth Management Example

      184
    • 16.4.3 Application and Subnet-based Bandwidth Management Example

      185
  • 16.5 Scheduler

    186
    • 16.5.1 Priority-based Scheduler

      186
    • 16.5.2 Fairness-based Scheduler

      186
  • 16.6 Maximize Bandwidth Usage

    186
    • 16.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      186
    • 16.6.2 Maximize Bandwidth Usage Example

      187
  • 16.7 Bandwidth Borrowing

    188
    • 16.7.1 Maximize Bandwidth Usage With Bandwidth Borrowing

      188
• Maintenance

  197
  • 17.1 Maintenance Overview

    197
    • 17.2.1 System Statistics

      199
• Introducing the SMT

  209
  • 18.1 SMT Introduction

    209
    • 18.1.1 Procedure for SMT Configuration via Telnet

      209
    • 18.1.2 Entering Password

      209
    • 18.1.3 Prestige SMT Menus Overview

      210
  • 18.2 Navigating the SMT Interface

    211
    • 18.2.1 System Management Terminal Interface Summary

      212
  • 18.3 Changing the System Password

    213
• Menu 1 General Setup

  215
  • 19.1 General Setup

    215
  • 19.2 Procedure To Configure Menu 1

    215
    • 19.2.1 Procedure to Configure Dynamic DNS

      216
• Menu 2 WAN Backup Setup

  219
  • 20.1 Introduction to WAN Backup Setup

    219
  • 20.2 Configuring Dial Backup in Menu 2

    219
    • 20.2.1 Traffic Redirect Setup

      220
• Menu 3 LAN Setup

  223
  • 21.1 LAN Setup

    223
    • 21.1.1 General Ethernet Setup

      223
  • 21.2 Protocol Dependent Ethernet Setup

    224
  • 21.3 TCP/IP Ethernet Setup and DHCP

    224
• Wireless LAN Setup

  227
  • 22.1 Wireless LAN Overview

    227
  • 22.2 Wireless LAN Setup

    227
    • 22.2.1 Wireless LAN MAC Address Filter

      228
• Internet Access

  231
  • 23.1 Internet Access Overview

    231
  • 23.2 IP Policies

    231
  • 23.3 IP Alias

    231
  • 23.4 IP Alias Setup

    232
  • 23.5 Route IP Setup

    233
  • 23.6 Internet Access Configuration

    234
• Remote Node Configuration

  237
  • 24.1 Remote Node Setup Overview

    237
  • 24.2 Remote Node Setup

    237
    • 24.2.1 Remote Node Profile

      237
    • 24.2.2 Encapsulation and Multiplexing Scenarios

      238
      • 24.2.2.1 Scenario 1: One VC, Multiple Protocols

        238
      • 24.2.2.2 Scenario 2: One VC, One Protocol (IP)

        238
      • 24.2.2.3 Scenario 3: Multiple VCs

        238
    • 24.2.3 Outgoing Authentication Protocol

      240
  • 24.3 Remote Node Network Layer Options

    241
    • 24.3.1 My WAN Addr Sample IP Addresses

      242
  • 24.4 Remote Node Filter

    243
  • 24.5 Editing ATM Layer Options

    244
    • 24.5.1 VC-based Multiplexing (non-PPP Encapsulation)

      244
    • 24.5.2 LLC-based Multiplexing or PPP Encapsulation

      244
    • 24.5.3 Advance Setup Options

      245
• Static Route Setup

  247
  • 25.1 IP Static Route Overview

    247
  • 25.2 Configuration

    247
• Bridging Setup

  251
  • 26.1 Bridging in General

    251
  • 26.2 Bridge Ethernet Setup

    251
    • 26.2.1 Remote Node Bridging Setup

      251
    • 26.2.2 Bridge Static Route Setup

      253
• Network Address Translation (NAT)

  255
  • 27.1 Using NAT

    255
    • 27.1.1 SUA (Single User Account) Versus NAT

      255
  • 27.2 Applying NAT

    255
  • 27.3 NAT Setup

    257
    • 27.3.1 Address Mapping Sets

      257
      • 27.3.1.1 SUA Address Mapping Set

        258
      • 27.3.1.2 User-Defined Address Mapping Sets

        259
      • 27.3.1.3 Ordering Your Rules

        260
  • 27.4 Configuring a Server behind NAT

    261
  • 27.5 General NAT Examples

    262
    • 27.5.1 Example 1: Internet Access Only

      263
    • 27.5.2 Example 2: Internet Access with an Inside Server

      263
    • 27.5.3 Example 3: Multiple Public IP Addresses With Inside Servers

      264
    • 27.5.4 Example 4: NAT Unfriendly Application Programs

      268
• Enabling the Firewall

  271
  • 28.1 Remote Management and the Firewall

    271
  • 28.2 Access Methods

    271
  • 28.3 Enabling the Firewall

    271
• Filter Configuration

  273
  • 29.1 About Filtering

    273
    • 29.1.1 The Filter Structure of the Prestige

      274
  • 29.2 Configuring a Filter Set for the Prestige

    275
  • 29.3 Filter Rules Summary Menus

    276
  • 29.4 Configuring a Filter Rule

    277
    • 29.4.1 TCP/IP Filter Rule

      278
    • 29.4.2 Generic Filter Rule

      280
  • 29.5 Filter Types and NAT

    282
  • 29.6 Example Filter

    282
  • 29.7 Applying Filters and Factory Defaults

    284
    • 29.7.1 Ethernet Traffic

      285
    • 29.7.2 Remote Node Filters

      285
• SNMP Configuration

  287
  • 30.1 About SNMP

    287
  • 30.2 Supported MIBs

    288
  • 30.3 SNMP Configuration

    288
  • 30.4 SNMP Traps

    289
• System Security

  291
  • 31.1 System Security

    291
    • 31.1.1 System Password

      291
    • 31.1.2 Configuring External RADIUS Server

      291
    • 31.1.3 IEEE 802.1x

      293
  • 31.2 Creating User Accounts on the Prestige

    295
• System Information and Diagnosis

  297
  • 32.1 Overview

    297
  • 32.2 System Status

    297
  • 32.3 System Information

    299
    • 32.3.1 System Information

      299
    • 32.3.2 Console Port Speed

      300
  • 32.4 Log and Trace

    301
    • 32.4.1 Viewing Error Log

      301
    • 32.4.2 Syslog and Accounting

      302
  • 32.5 Diagnostic

    304
• Firmware and Configuration File Maintenance

  307
  • 33.1 Filename Conventions

    307
  • 33.2 Backup Configuration

    308
    • 33.2.1 Backup Configuration

      308
    • 33.2.2 Using the FTP Command from the Command Line

      309
    • 33.2.3 Example of FTP Commands from the Command Line

      309
    • 33.2.4 GUI-based FTP Clients

      310
    • 33.2.5 TFTP and FTP over WAN Management Limitations

      310
    • 33.2.6 Backup Configuration Using TFTP

      311
    • 33.2.7 TFTP Command Example

      311
    • 33.2.8 GUI-based TFTP Clients

      311
  • 33.3 Restore Configuration

    312
    • 33.3.1 Restore Using FTP

      312
    • 33.3.2 Restore Using FTP Session Example

      313
  • 33.4 Uploading Firmware and Configuration Files

    314
    • 33.4.1 Firmware File Upload

      314
    • 33.4.2 Configuration File Upload

      314
    • 33.4.3 FTP File Upload Command from the DOS Prompt Example

      315
    • 33.4.4 FTP Session Example of Firmware File Upload

      316
    • 33.4.5 TFTP File Upload

      316
    • 33.4.6 TFTP Upload Command Example

      317
• System Maintenance

  319
  • 34.1 Command Interpreter Mode

    319
  • 34.2 Call Control Support

    320
    • 34.2.1 Budget Management

      320
  • 34.3 Time and Date Setting

    321
    • 34.3.1 Resetting the Time

      323
• Remote Management

  325
  • 35.1 Remote Management Overview

    325
  • 35.2 Remote Management

    325
    • 35.2.1 Remote Management Setup

      325
    • 35.2.2 Remote Management Limitations

      326
  • 35.3 Remote Management and NAT

    327
  • 35.4 System Timeout

    327
• IP Policy Routing

  329
  • 36.1 IP Policy Routing Overview

    329
  • 36.2 Benefits of IP Policy Routing

    329
  • 36.3 Routing Policy

    329
  • 36.4 IP Routing Policy Setup

    330
  • 36.5 Applying an IP Policy

    333
    • 36.5.1 Ethernet IP Policies

      333
  • 36.6 IP Policy Routing Example

    334
• Call Scheduling

  339
  • 37.1 Introduction

    339
• Troubleshooting

  343
  • 38.1 Problems Starting Up the Prestige

    343
  • 38.2 Problems with the LAN

    343
  • 38.3 Problems with the WAN

    344
  • 38.4 Problems Accessing the Prestige

    345
    • 38.4.1 Pop-up Windows, JavaScripts and Java Permissions

      345
      • 38.4.1.1 Internet Explorer Pop-up Blockers

        345
      • 38.4.1.2 JavaScripts

        348
      • 38.4.1.3 Java Permissions

        350
    • 38.4.2 ActiveX Controls in Internet Explorer

      352
• Product Specifications

  355
• Wall-mounting Instructions

  359
• Setting up Your Computer’s IP Address

  361
  • Verifying Settings

    376
• IP Subnetting

  377
• Boot Commands

  385
• Command Interpreter

  387
• Firewall Commands

  389
• NetBIOS Filter Commands

  395
• Splitters and Microfilters

  399
• PPPoE

  403
• Wireless LANs

  405
• Log Descriptions

  415
• Internal SPTGEN

  431
• Index

  457
  • Numerics

    457
  • A

    457
  • B

    457
  • C

    457
  • D

    458
  • E

    459
  • F

    459
  • G

    460
  • H

    460
  • I

    460
  • K

    460
  • L

    461
  • M

    461
  • N

    461
  • O

    462
  • P

    462
  • Q

    462
  • R

    462
  • S

    463
  • T

    464
  • U

    465
  • V

    465
  • W

    465
  • X

    466
  • Z

    466