用户手册 — ZyXEL ADSL Router Prestige 660HW-D1

目录

• P-660H/HW-D Series

  1
• Copyright

  3
• Certifications

  4
• Safety Warnings

  6
• ZyXEL Limited Warranty

  8
• Customer Support

  9
• Table of Contents

  11
• List of Figures

  23
• List of Tables

  29
• Preface

  33
• 1. Getting To Know Your ZyXEL Device

  35
  • 1.1 Introducing the ZyXEL Device

    35
  • 1.2 Features

    36
    • 1.2.1 Wireless Features (P-660HW-D Only)

      38
  • 1.3 Applications for the ZyXEL Device

    39
    • 1.3.1 Protected Internet Access

      40
    • 1.3.2 LAN to LAN Application

      40
  • 1.4 Front Panel LEDs

    40
  • 1.5 Hardware Connection

    42
• 2. Introducing the Web Configurator

  43
  • 2.1 Web Configurator Overview

    43
  • 2.2 Accessing the Web Configurator

    43
  • 2.3 Resetting the ZyXEL Device

    45
    • 2.3.1 Using the Reset Button

      45
  • 2.4 Navigating the Web Configurator

    45
    • 2.4.1 Navigation Panel

      45
    • 2.4.2 Status Screen

      48
    • 2.4.3 Status: Any IP Table

      51
    • 2.4.4 Status: WLAN Status

      51
    • 2.4.5 Status: Bandwidth Status

      52
    • 2.4.6 Status: Packet Statistics

      53
    • 2.4.7 Changing Login Password

      54
• 3. Wizard Setup for Internet Access

  57
  • 3.1 Introduction

    57
  • 3.2 Internet Access Wizard Setup

    57
    • 3.2.1 Automatic Detection

      59
    • 3.2.2 Manual Configuration

      59
  • 3.3 Wireless Connection Wizard Setup

    64
    • 3.3.1 Manually assign a WPA-PSK key

      67
    • 3.3.2 Manually assign a WEP key

      68
• 4. Bandwidth Management Wizard

  71
  • 4.1 Introduction

    71
  • 4.2 Predefined Media Bandwidth Management Services

    71
  • 4.3 Bandwidth Management Wizard Setup

    72
• 5. WAN Setup

  77
  • 5.1 WAN Overview

    77
    • 5.1.1 Encapsulation

      77
      • 5.1.1.1 ENET ENCAP

        77
      • 5.1.1.2 PPP over Ethernet

        77
      • 5.1.1.3 PPPoA

        78
      • 5.1.1.4 RFC 1483

        78
    • 5.1.2 Multiplexing

      78
      • 5.1.2.1 VC-based Multiplexing

        78
      • 5.1.2.2 LLC-based Multiplexing

        78
    • 5.1.3 Encapsulation and Multiplexing Scenarios

      78
      • 5.1.3.1 Scenario 1: One VC, Multiple Protocols

        79
      • 5.1.3.2 Scenario 2: One VC, One Protocol (IP)

        79
      • 5.1.3.3 Scenario 3: Multiple VCs

        79
    • 5.1.4 VPI and VCI

      79
    • 5.1.5 IP Address Assignment

      79
      • 5.1.5.1 IP Assignment with PPPoA or PPPoE Encapsulation

        79
      • 5.1.5.2 IP Assignment with RFC 1483 Encapsulation

        79
      • 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation

        80
    • 5.1.6 Nailed-Up Connection (PPP)

      80
    • 5.1.7 NAT

      80
  • 5.2 Metric

    80
  • 5.3 Traffic Shaping

    81
    • 5.3.1 ATM Traffic Classes

      82
      • 5.3.1.1 Constant Bit Rate (CBR)

        82
      • 5.3.1.2 Variable Bit Rate (VBR)

        82
      • 5.3.1.3 Unspecified Bit Rate (UBR)

        82
  • 5.4 Zero Configuration Internet Access

    82
  • 5.5 Internet Connection

    83
    • 5.5.1 Configuring Advanced Internet Connection Setup

      85
  • 5.6 Configuring More Connections

    86
    • 5.6.1 More Connections Edit

      87
    • 5.6.2 Configuring More Connections Advanced Setup

      90
  • 5.7 Traffic Redirect

    91
  • 5.8 Configuring WAN Backup

    92
• 6. LAN Setup

  95
  • 6.1 LAN Overview

    95
    • 6.1.1 LANs, WANs and the ZyXEL Device

      95
    • 6.1.2 DHCP Setup

      96
      • 6.1.2.1 IP Pool Setup

        96
    • 6.1.3 DNS Server Address

      96
    • 6.1.4 DNS Server Address Assignment

      97
  • 6.2 LAN TCP/IP

    97
    • 6.2.1 IP Address and Subnet Mask

      97
      • 6.2.1.1 Private IP Addresses

        98
    • 6.2.2 RIP Setup

      98
    • 6.2.3 Multicast

      99
    • 6.2.4 Any IP

      99
      • 6.2.4.1 How Any IP Works

        100
  • 6.3 Configuring LAN IP

    101
    • 6.3.1 Configuring Advanced LAN Setup

      101
  • 6.4 DHCP Setup

    103
  • 6.5 LAN Client List

    104
  • 6.6 LAN IP Alias

    105
• 7. Wireless LAN

  109
  • 7.1 Wireless Network Overview

    109
  • 7.2 Wireless Security Overview

    110
    • 7.2.1 SSID

      110
    • 7.2.2 MAC Address Filter

      110
    • 7.2.3 User Authentication

      111
    • 7.2.4 Encryption

      111
    • 7.2.5 One-Touch Intelligent Security Technology (OTIST)

      112
  • 7.3 Wireless Performance Overview

    112
    • 7.3.1 Quality of Service (QoS)

      112
  • 7.4 General Wireless LAN Screen

    113
    • 7.4.1 No Security

      114
    • 7.4.2 WEP Encryption

      115
    • 7.4.3 WPA-PSK/WPA2-PSK

      116
    • 7.4.4 WPA/WPA2

      117
    • 7.4.5 Wireless LAN Advanced Setup

      120
  • 7.5 OTIST

    121
    • 7.5.1 Enabling OTIST

      121
      • 7.5.1.1 AP

        122
      • 7.5.1.2 Wireless Client

        123
    • 7.5.2 Starting OTIST

      124
    • 7.5.3 Notes on OTIST

      124
  • 7.6 MAC Filter

    125
  • 7.7 WMM QoS

    127
    • 7.7.1 WMM QoS Example

      127
    • 7.7.2 WMM QoS Priorities

      127
    • 7.7.3 Services

      128
  • 7.8 QoS Screen

    129
    • 7.8.1 ToS (Type of Service) and WMM QoS

      130
    • 7.8.2 Application Priority Configuration

      131
• 8. Network Address Translation (NAT) Screens

  133
  • 8.1 NAT Overview

    133
    • 8.1.1 NAT Definitions

      133
    • 8.1.2 What NAT Does

      134
    • 8.1.3 How NAT Works

      134
    • 8.1.4 NAT Application

      135
    • 8.1.5 NAT Mapping Types

      135
  • 8.2 SUA (Single User Account) Versus NAT

    136
  • 8.3 NAT General Setup

    136
  • 8.4 Port Forwarding

    137
    • 8.4.1 Default Server IP Address

      138
    • 8.4.2 Port Forwarding: Services and Port Numbers

      138
    • 8.4.3 Configuring Servers Behind Port Forwarding (Example)

      138
  • 8.5 Configuring Port Forwarding

    139
    • 8.5.1 Port Forwarding Rule Edit

      140
  • 8.6 Address Mapping

    141
    • 8.6.1 Address Mapping Rule Edit

      143
• 9. Firewalls

  145
  • 9.1 Firewall Overview

    145
  • 9.2 Types of Firewalls

    145
    • 9.2.1 Packet Filtering Firewalls

      145
    • 9.2.2 Application-level Firewalls

      146
    • 9.2.3 Stateful Inspection Firewalls

      146
  • 9.3 Introduction to ZyXEL’s Firewall

    146
    • 9.3.1 Denial of Service Attacks

      147
  • 9.4 Denial of Service

    147
    • 9.4.1 Basics

      147
    • 9.4.2 Types of DoS Attacks

      148
      • 9.4.2.1 ICMP Vulnerability

        150
      • 9.4.2.2 Illegal Commands (NetBIOS and SMTP)

        150
      • 9.4.2.3 Traceroute

        151
  • 9.5 Stateful Inspection

    151
    • 9.5.1 Stateful Inspection Process

      152
    • 9.5.2 Stateful Inspection and the ZyXEL Device

      152
    • 9.5.3 TCP Security

      153
    • 9.5.4 UDP/ICMP Security

      153
    • 9.5.5 Upper Layer Protocols

      154
  • 9.6 Guidelines for Enhancing Security with Your Firewall

    154
    • 9.6.1 Security In General

      154
  • 9.7 Packet Filtering Vs Firewall

    155
    • 9.7.1 Packet Filtering:

      155
      • 9.7.1.1 When To Use Filtering

        156
    • 9.7.2 Firewall

      156
      • 9.7.2.1 When To Use The Firewall

        156
• 10. Firewall Configuration

  157
  • 10.1 Access Methods

    157
  • 10.2 Firewall Policies Overview

    157
  • 10.3 Rule Logic Overview

    158
    • 10.3.1 Rule Checklist

      158
    • 10.3.2 Security Ramifications

      158
    • 10.3.3 Key Fields For Configuring Rules

      159
      • 10.3.3.1 Action

        159
      • 10.3.3.2 Service

        159
      • 10.3.3.3 Source Address

        159
      • 10.3.3.4 Destination Address

        159
  • 10.4 Connection Direction

    159
    • 10.4.1 LAN to WAN Rules

      160
    • 10.4.2 Alerts

      160
  • 10.5 General Firewall Policy

    160
  • 10.6 Firewall Rules Summary

    161
    • 10.6.1 Configuring Firewall Rules

      163
    • 10.6.2 Customized Services

      166
    • 10.6.3 Configuring A Customized Service

      167
  • 10.7 Example Firewall Rule

    167
  • 10.8 Predefined Services

    171
  • 10.9 Anti-Probing

    173
  • 10.10 DoS Thresholds

    174
    • 10.10.1 Threshold Values

      174
    • 10.10.2 Half-Open Sessions

      175
      • 10.10.2.1 TCP Maximum Incomplete and Blocking Time

        175
    • 10.10.3 Configuring Firewall Thresholds

      176
• 11. Content Filtering

  179
  • 11.1 Content Filtering Overview

    179
  • 11.2 Configuring Keyword Blocking

    179
  • 11.3 Configuring the Schedule

    180
  • 11.4 Configuring Trusted Computers

    181
• 12. Static Route

  183
  • 12.1 Static Route

    183
  • 12.2 Configuring Static Route

    183
    • 12.2.1 Static Route Edit

      184
• 13. Bandwidth Management

  187
  • 13.1 Bandwidth Management Overview

    187
  • 13.2 Application-based Bandwidth Management

    187
  • 13.3 Subnet-based Bandwidth Management

    187
  • 13.4 Application and Subnet-based Bandwidth Management

    188
  • 13.5 Scheduler

    188
    • 13.5.1 Priority-based Scheduler

      188
    • 13.5.2 Fairness-based Scheduler

      189
  • 13.6 Maximize Bandwidth Usage

    189
    • 13.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      189
    • 13.6.2 Maximize Bandwidth Usage Example

      190
      • 13.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth

        190
      • 13.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth

        191
    • 13.6.3 Bandwidth Management Priorities

      191
  • 13.7 Over Allotment of Bandwidth

    192
  • 13.8 Configuring Summary

    192
  • 13.9 Bandwidth Management Rule Setup

    193
    • 13.9.1 Rule Configuration

      195
  • 13.10 Bandwidth Monitor

    197
• 14. Dynamic DNS Setup

  199
  • 14.1 Dynamic DNS Overview

    199
    • 14.1.1 DYNDNS Wildcard

      199
  • 14.2 Configuring Dynamic DNS

    199
• 15. Remote Management Configuration

  203
  • 15.1 Remote Management Overview

    203
    • 15.1.1 Remote Management Limitations

      203
    • 15.1.2 Remote Management and NAT

      204
    • 15.1.3 System Timeout

      204
  • 15.2 WWW

    204
  • 15.3 Telnet

    205
  • 15.4 Configuring Telnet

    205
  • 15.5 Configuring FTP

    206
  • 15.6 SNMP

    207
    • 15.6.1 Supported MIBs

      208
    • 15.6.2 SNMP Traps

      209
    • 15.6.3 Configuring SNMP

      209
  • 15.7 Configuring DNS

    210
  • 15.8 Configuring ICMP

    211
  • 15.9 TR-069

    212
• 16. Universal Plug-and-Play (UPnP)

  215
  • 16.1 Introducing Universal Plug and Play

    215
    • 16.1.1 How do I know if I'm using UPnP?

      215
    • 16.1.2 NAT Traversal

      215
    • 16.1.3 Cautions with UPnP

      216
  • 16.2 UPnP and ZyXEL

    216
    • 16.2.1 Configuring UPnP

      216
  • 16.3 Installing UPnP in Windows Example

    217
    • 16.3.1 Installing UPnP in Windows Me

      217
    • 16.3.2 Installing UPnP in Windows XP

      219
  • 16.4 Using UPnP in Windows XP Example

    220
    • 16.4.1 Auto-discover Your UPnP-enabled Network Device

      220
    • 16.4.2 Web Configurator Easy Access

      223
• 17. System

  227
  • 17.1 General Setup

    227
    • 17.1.1 General Setup and System Name

      227
    • 17.1.2 General Setup

      227
  • 17.2 Time Setting

    229
• 18. Logs

  233
  • 18.1 Logs Overview

    233
    • 18.1.1 Alerts and Logs

      233
  • 18.2 Viewing the Logs

    233
  • 18.3 Configuring Log Settings

    234
    • 18.3.1 Example E-mail Log

      237
• 19. Tools

  239
  • 19.1 Firmware Upgrade

    239
  • 19.2 Configuration Screen

    241
    • 19.2.1 Backup Configuration

      241
    • 19.2.2 Restore Configuration

      242
    • 19.2.3 Back to Factory Defaults

      243
  • 19.3 Restart

    243
• 20. Diagnostic

  245
  • 20.1 General Diagnostic

    245
  • 20.2 DSL Line Diagnostic

    246
• 21. Troubleshooting

  247
  • 21.1 Problems Starting Up the ZyXEL Device

    247
  • 21.2 Problems with the LAN

    247
  • 21.3 Problems with the WAN

    248
  • 21.4 Problems Accessing the ZyXEL Device

    249
• A. Product Specifications

  251
• B. About ADSL

  255
• C. Internal SPTGEN

  257
• D. Wall-mounting Instructions

  273
• E. Setting up Your Computer’s IP Address

  275
  • 21.4.1 Verifying Settings

    290
• F. IP Addresses and Subnetting

  291
• G. Command Interpreter

  299
• H. Firewall Commands

  301
• I. NetBIOS Filter Commands

  307
• J. Splitters and Microfilters

  309
• K. Log Descriptions

  313
• L. Wireless LANs

  329
  • 21.4.2 WPA(2)-PSK Application Example

    340
• M. Pop-up Windows, JavaScripts and Java Permissions

  343
• N. Triangle Route

  351
• Index

  353
  • A

    353
  • B

    353
  • C

    353
  • D

    353
  • E

    354
  • F

    354
  • G

    354
  • H

    354
  • I

    354
  • K

    355
  • L

    355
  • M

    355
  • N

    355
  • O

    355
  • P

    356
  • Q

    356
  • R

    356
  • S

    356
  • T

    357
  • U

    357
  • V

    357
  • W

    357
  • Z

    358