ZyXEL Communications P-660HW-D Series User Manuals

Table of Contents

• P-660HW-D Series

  1
• Copyright

  3
• Federal Communications Commission (FCC) Interference Statement

  4
• Safety Warnings

  6
• ZyXEL Limited Warranty

  7
• Customer Support

  8
• Table of Contents

  11
• List of Figures

  21
• List of Tables

  27
• Preface

  31
• 1. Getting To Know Your P-660HW- D

  33
  • 1.1 Introducing the P-660HW-D

    33
  • 1.2 Features

    34
    • 1.2.1 Wireless Features

      36
  • 1.3 Applications for the ZyXEL device

    37
    • 1.3.1 Protected Internet Access

      37
    • 1.3.2 LAN to LAN Application

      37
  • 1.4 Front Panel LEDs

    38
  • 1.5 Hardware Connection

    39
• 2. Introducing the Web Configurator

  41
  • 2.1 Web Configurator Overview

    41
  • 2.2 Accessing the Web Configurator

    41
  • 2.3 Resetting the ZyXEL device

    43
    • 2.3.1 Using the Reset Button

      43
  • 2.4 Navigating the Web Configurator

    43
    • 2.4.1 Navigation Panel

      43
    • 2.4.2 Status Screen

      46
    • 2.4.3 Status: Any IP Table

      49
    • 2.4.4 Status: WLAN Status

      49
    • 2.4.5 Status: Bandwidth Status

      50
    • 2.4.6 Status: Packet Statistics

      51
    • 2.4.7 Changing Login Password

      52
• 3. Wizard Setup for Internet Access

  55
  • 3.1 Introduction

    55
  • 3.2 Internet Access Wizard Setup

    55
    • 3.2.1 Automatic Detection

      57
    • 3.2.2 Manual Configuration

      57
  • 3.3 Wireless Connection Wizard Setup

    62
    • 3.3.1 Manually assign a WPA-PSK key

      65
    • 3.3.2 Manually assign a WEP key

      66
• 4. Bandwidth Management Wizard

  69
  • 4.1 Introduction

    69
  • 4.2 Predefined Media Bandwidth Management Services

    69
  • 4.3 Bandwidth Management Wizard Setup

    70
• 5. WAN Setup

  75
  • 5.1 WAN Overview

    75
    • 5.1.1 Encapsulation

      75
      • 5.1.1.1 ENET ENCAP

        75
      • 5.1.1.2 PPP over Ethernet

        75
      • 5.1.1.3 PPPoA

        76
      • 5.1.1.4 RFC 1483

        76
    • 5.1.2 Multiplexing

      76
      • 5.1.2.1 VC-based Multiplexing

        76
      • 5.1.2.2 LLC-based Multiplexing

        76
    • 5.1.3 Encapsulation and Multiplexing Scenarios

      76
      • 5.1.3.1 Scenario 1: One VC, Multiple Protocols

        77
      • 5.1.3.2 Scenario 2: One VC, One Protocol (IP)

        77
      • 5.1.3.3 Scenario 3: Multiple VCs

        77
    • 5.1.4 VPI and VCI

      77
    • 5.1.5 IP Address Assignment

      77
      • 5.1.5.1 IP Assignment with PPPoA or PPPoE Encapsulation

        77
      • 5.1.5.2 IP Assignment with RFC 1483 Encapsulation

        77
      • 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation

        78
    • 5.1.6 Nailed-Up Connection (PPP)

      78
    • 5.1.7 NAT

      78
  • 5.2 Metric

    78
  • 5.3 Traffic Shaping

    79
    • 5.3.1 ATM Traffic Classes

      80
      • 5.3.1.1 Constant Bit Rate (CBR)

        80
      • 5.3.1.2 Variable Bit Rate (VBR)

        80
      • 5.3.1.3 Unspecified Bit Rate (UBR)

        80
  • 5.4 Zero Configuration Internet Access

    80
  • 5.5 Internet Connection

    81
    • 5.5.1 Configuring Advanced Internet Connection Setup

      83
  • 5.6 Configuring More Connections

    84
    • 5.6.1 More Connections Edit

      85
    • 5.6.2 Configuring More Connections Advanced Setup

      88
  • 5.7 Traffic Redirect

    89
  • 5.8 Configuring WAN Backup

    90
• 6. LAN Setup

  93
  • 6.1 LAN Overview

    93
    • 6.1.1 LANs, WANs and the ZyXEL device

      93
    • 6.1.2 DHCP Setup

      94
      • 6.1.2.1 IP Pool Setup

        94
    • 6.1.3 DNS Server Address

      94
    • 6.1.4 DNS Server Address Assignment

      95
  • 6.2 LAN TCP/IP

    95
    • 6.2.1 IP Address and Subnet Mask

      95
      • 6.2.1.1 Private IP Addresses

        96
    • 6.2.2 RIP Setup

      96
    • 6.2.3 Multicast

      97
    • 6.2.4 Any IP

      97
      • 6.2.4.1 How Any IP Works

        98
  • 6.3 Configuring LAN IP

    99
    • 6.3.1 Configuring Advanced LAN Setup

      99
  • 6.4 DHCP Setup

    101
  • 6.5 LAN Client List

    102
  • 6.6 LAN IP Alias

    103
• 7. Wireless LAN

  107
  • 7.1 Wireless Network Overview

    107
  • 7.2 Wireless Security Overview

    108
    • 7.2.1 SSID

      108
    • 7.2.2 MAC Address Filter

      108
    • 7.2.3 User Authentication

      109
    • 7.2.4 Encryption

      109
    • 7.2.5 One-Touch Intelligent Security Technology (OTIST)

      110
  • 7.3 Wireless Performance Overview

    110
    • 7.3.1 Quality of Service (QoS)

      110
  • 7.4 General Wireless LAN Screen

    111
    • 7.4.1 No Security

      112
    • 7.4.2 WEP Encryption

      113
    • 7.4.3 WPA-PSK/WPA2-PSK

      114
    • 7.4.4 WPA/WPA2

      115
    • 7.4.5 Wireless LAN Advanced Setup

      117
  • 7.5 OTIST

    119
    • 7.5.1 Enabling OTIST

      119
      • 7.5.1.1 AP

        119
      • 7.5.1.2 Wireless Client

        121
    • 7.5.2 Starting OTIST

      121
    • 7.5.3 Notes on OTIST

      122
  • 7.6 MAC Filter

    123
  • 7.7 WMM QoS

    124
    • 7.7.1 WMM QoS Example

      124
    • 7.7.2 WMM QoS Priorities

      125
    • 7.7.3 Services

      125
  • 7.8 QoS Screen

    127
    • 7.8.1 ToS (Type of Service) and WMM QoS

      127
    • 7.8.2 Application Priority Configuration

      129
• 8. Network Address Translation (NAT) Screens

  131
  • 8.1 NAT Overview

    131
    • 8.1.1 NAT Definitions

      131
    • 8.1.2 What NAT Does

      132
    • 8.1.3 How NAT Works

      132
    • 8.1.4 NAT Application

      133
    • 8.1.5 NAT Mapping Types

      133
  • 8.2 SUA (Single User Account) Versus NAT

    134
  • 8.3 NAT General Setup

    134
  • 8.4 Port Forwarding

    135
    • 8.4.1 Default Server IP Address

      136
    • 8.4.2 Port Forwarding: Services and Port Numbers

      136
    • 8.4.3 Configuring Servers Behind Port Forwarding (Example)

      136
  • 8.5 Configuring Port Forwarding

    137
    • 8.5.1 Port Forwarding Rule Edit

      138
  • 8.6 Address Mapping

    139
    • 8.6.1 Address Mapping Rule Edit

      141
• 9. Firewalls

  143
  • 9.1 Firewall Overview

    143
  • 9.2 Types of Firewalls

    143
    • 9.2.1 Packet Filtering Firewalls

      143
    • 9.2.2 Application-level Firewalls

      144
    • 9.2.3 Stateful Inspection Firewalls

      144
  • 9.3 Introduction to ZyXEL’s Firewall

    144
    • 9.3.1 Denial of Service Attacks

      145
  • 9.4 Denial of Service

    145
    • 9.4.1 Basics

      145
    • 9.4.2 Types of DoS Attacks

      146
      • 9.4.2.1 ICMP Vulnerability

        148
      • 9.4.2.2 Illegal Commands (NetBIOS and SMTP)

        148
      • 9.4.2.3 Traceroute

        149
  • 9.5 Stateful Inspection

    149
    • 9.5.1 Stateful Inspection Process

      150
    • 9.5.2 Stateful Inspection and the ZyXEL device

      150
    • 9.5.3 TCP Security

      151
    • 9.5.4 UDP/ICMP Security

      151
    • 9.5.5 Upper Layer Protocols

      152
  • 9.6 Guidelines for Enhancing Security with Your Firewall

    152
    • 9.6.1 Security In General

      152
  • 9.7 Packet Filtering Vs Firewall

    153
    • 9.7.1 Packet Filtering:

      153
      • 9.7.1.1 When To Use Filtering

        154
    • 9.7.2 Firewall

      154
      • 9.7.2.1 When To Use The Firewall

        154
• 10. Firewall Configuration

  155
  • 10.1 Access Methods

    155
  • 10.2 Firewall Policies Overview

    155
  • 10.3 Rule Logic Overview

    156
    • 10.3.1 Rule Checklist

      156
    • 10.3.2 Security Ramifications

      156
    • 10.3.3 Key Fields For Configuring Rules

      157
      • 10.3.3.1 Action

        157
      • 10.3.3.2 Service

        157
      • 10.3.3.3 Source Address

        157
      • 10.3.3.4 Destination Address

        157
  • 10.4 Connection Direction

    157
    • 10.4.1 LAN to WAN Rules

      158
    • 10.4.2 Alerts

      158
  • 10.5 General Firewall Policy

    158
  • 10.6 Firewall Rules Summary

    159
    • 10.6.1 Configuring Firewall Rules

      161
    • 10.6.2 Customized Services

      164
    • 10.6.3 Configuring A Customized Service

      165
  • 10.7 Example Firewall Rule

    165
  • 10.8 Predefined Services

    169
  • 10.9 Anti-Probing

    171
  • 10.10 DoS Thresholds

    172
    • 10.10.1 Threshold Values

      172
    • 10.10.2 Half-Open Sessions

      173
      • 10.10.2.1 TCP Maximum Incomplete and Blocking Time

        173
    • 10.10.3 Configuring Firewall Thresholds

      174
• 11. Content Filtering

  177
  • 11.1 Content Filtering Overview

    177
  • 11.2 Configuring Keyword Blocking

    177
  • 11.3 Configuring the Schedule

    178
  • 11.4 Configuring Trusted Computers

    179
• 12. Static Route

  181
  • 12.1 Static Route

    181
  • 12.2 Configuring Static Route

    181
    • 12.2.1 Static Route Edit

      182
• 13. Bandwidth Management

  185
  • 13.1 Bandwidth Management Overview

    185
  • 13.2 Application-based Bandwidth Management

    185
  • 13.3 Subnet-based Bandwidth Management

    185
  • 13.4 Application and Subnet-based Bandwidth Management

    186
  • 13.5 Scheduler

    186
    • 13.5.1 Priority-based Scheduler

      187
    • 13.5.2 Fairness-based Scheduler

      187
  • 13.6 Maximize Bandwidth Usage

    187
    • 13.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      187
    • 13.6.2 Maximize Bandwidth Usage Example

      188
      • 13.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth

        188
      • 13.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth

        189
    • 13.6.3 Bandwidth Management Priorities

      189
  • 13.7 Over Allotment of Bandwidth

    190
  • 13.8 Configuring Summary

    190
  • 13.9 Bandwidth Management Rule Setup

    191
    • 13.9.1 Rule Configuration

      193
  • 13.10 Bandwidth Monitor

    195
• 14. Dynamic DNS Setup

  197
  • 14.1 Dynamic DNS Overview

    197
    • 14.1.1 DYNDNS Wildcard

      197
  • 14.2 Configuring Dynamic DNS

    197
• 15. Remote Management Configuration

  201
  • 15.1 Remote Management Overview

    201
    • 15.1.1 Remote Management Limitations

      201
    • 15.1.2 Remote Management and NAT

      202
    • 15.1.3 System Timeout

      202
  • 15.2 WWW

    202
  • 15.3 Telnet

    203
  • 15.4 Configuring Telnet

    203
  • 15.5 Configuring FTP

    204
  • 15.6 SNMP

    205
    • 15.6.1 Supported MIBs

      206
    • 15.6.2 SNMP Traps

      207
    • 15.6.3 Configuring SNMP

      207
  • 15.7 Configuring DNS

    208
  • 15.8 Configuring ICMP

    209
• 16. Universal Plug-and-Play (UPnP)

  211
  • 16.1 Introducing Universal Plug and Play

    211
    • 16.1.1 How do I know if I'm using UPnP?

      211
    • 16.1.2 NAT Traversal

      211
    • 16.1.3 Cautions with UPnP

      212
  • 16.2 UPnP and ZyXEL

    212
    • 16.2.1 Configuring UPnP

      212
  • 16.3 Installing UPnP in Windows Example

    213
    • 16.3.1 Installing UPnP in Windows Me

      213
    • 16.3.2 Installing UPnP in Windows XP

      215
  • 16.4 Using UPnP in Windows XP Example

    216
    • 16.4.1 Auto-discover Your UPnP-enabled Network Device

      216
    • 16.4.2 Web Configurator Easy Access

      219
• 17. System

  223
  • 17.1 General Setup

    223
    • 17.1.1 General Setup and System Name

      223
    • 17.1.2 General Setup

      223
  • 17.2 Time Setting

    225
• 18. Logs

  229
  • 18.1 Logs Overview

    229
    • 18.1.1 Alerts and Logs

      229
  • 18.2 Viewing the Logs

    229
  • 18.3 Configuring Log Settings

    230
    • 18.3.1 Example E-mail Log

      233
• 19. Tools

  235
  • 19.1 Firmware Upgrade

    235
  • 19.2 Configuration Screen

    237
    • 19.2.1 Backup Configuration

      237
    • 19.2.2 Restore Configuration

      238
    • 19.2.3 Back to Factory Defaults

      239
  • 19.3 Restart

    239
• 20. Diagnostic

  241
  • 20.1 General Diagnostic

    241
  • 20.2 DSL Line Diagnostic

    242
• 21. Troubleshooting

  243
  • 21.1 Problems Starting Up the ZyXEL device

    243
  • 21.2 Problems with the LAN

    243
  • 21.3 Problems with the WAN

    244
  • 21.4 Problems Accessing the ZyXEL device

    245
• A. Product Specifications

  247
• B. About ADSL

  251
• C. Wall-mounting Instructions

  253
• D. Setting up Your Computer’s IP Address

  255
  • 21.4.1 Verifying Settings

    270
• E. IP Subnetting

  271
• F. Command Interpreter

  279
• G. Firewall Commands

  281
• H. NetBIOS Filter Commands

  287
• I. PPPoE

  289
• L. Splitters and Microfilters

  291
• K. Log Descriptions

  295
• L. Wireless LANs

  311
  • 21.4.2 WPA(2)-PSK Application Example

    322
• M. Pop-up Windows, JavaScripts and Java Permissions

  325
• Index

  333
  • Numerics

    333
  • A

    333
  • B

    333
  • C

    333
  • D

    334
  • E

    334
  • F

    334
  • G

    335
  • H

    335
  • I

    335
  • K

    335
  • L

    335
  • M

    336
  • N

    336
  • O

    336
  • P

    336
  • Q

    337
  • R

    337
  • S

    337
  • T

    338
  • U

    338
  • V

    338
  • W

    339
  • Z

    339