ZyXEL Communications ZyXEL Prestige P-870HW-51a v2 User Manual
ZyXEL Communications ZyXEL Prestige P-870HW-51a v2 User Manual

ZyXEL Communications ZyXEL Prestige P-870HW-51a v2 User Manual

802.11bg wireless vdsl2 4 port gateway
Hide thumbs Also See for ZyXEL Prestige P-870HW-51a v2:
Table of Contents

Advertisement

Quick Links

P-870HW-51a v2
802.11bg Wireless VDSL2 4 port gateway
Default Login Details
IP Address
http://192.168.1.1
User Name
Password
Firmware Version 1.0
www.zyxel.com
Edition 1, 1/2009
www.zyxel.com
1234
1234
Copyright © 2009
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications ZyXEL Prestige P-870HW-51a v2

  • Page 1 P-870HW-51a v2 802.11bg Wireless VDSL2 4 port gateway Default Login Details IP Address http://192.168.1.1 User Name 1234 Password 1234 Firmware Version 1.0 www.zyxel.com Edition 1, 1/2009 www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation...
  • Page 3: About This User's Guide

    Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
  • Page 4 About This User's Guide Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/ web/contact_us.php for contact information.
  • Page 5: Document Conventions

    Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Server Telephone Computer Notebook computer DSLAM Firewall Switch Router P-870HW-51a v2 User’s Guide...
  • Page 7: Safety Warnings

    • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
  • Page 8 Safety Warnings P-870HW-51a v2 User’s Guide...
  • Page 9: Table Of Contents

    Introduction ... 17 Introducing the ZyXEL Device ... 19 Tutorials ... 25 Introducing the Web Configurator ... 35 Status Screens ... 39 Network ... 49 WAN Setup ... 51 LAN Setup ... 69 Wireless LAN ... 79 Network Address Translation (NAT) ... 107 Security ...
  • Page 10 New Template User’s Guide...
  • Page 11: Table Of Contents

    About This User's Guide ... 3 Document Conventions... 5 Safety Warnings... 7 Table of Contents... 11 Part I: Introduction... 17 Chapter 1 Introducing the ZyXEL Device ... 19 1.1 Overview ... 19 1.2 Ways to Manage the ZyXEL Device ... 19 1.3 Good Habits for Managing the ZyXEL Device ...
  • Page 12 Table of Contents 3.2.3 Status Bar ... 38 Chapter 4 Status Screens ... 39 4.1 Status Screen ... 39 4.1.1 WAN Service Statistics ... 42 4.1.2 Route Info ... 43 4.1.3 WLAN Station List ... 45 4.1.4 LAN Statistics ... 46 4.1.5 Client List ...
  • Page 13 7.1.1 What You Can Do in this Chapter ... 79 7.2 What You Need to Know ... 80 7.3 Before You Begin ... 82 7.4 The General Screen ... 82 7.4.1 No Security ... 84 7.4.2 WEP Encryption ... 85 7.4.3 WPA(2)-PSK ...
  • Page 14 Table of Contents Chapter 10 Static Route ... 125 10.1 Overview ... 125 10.1.1 What You Can Do in this Chapter ... 125 10.2 The Static Route Screen ... 126 10.2.1 Static Route Edit ... 127 Chapter 11 Quality of Service (QoS)... 129 11.1 Overview ...
  • Page 15 Part V: Maintenance, Troubleshooting and Specifications ... 163 Chapter 15 System Settings ... 165 15.1 Overview ... 165 15.1.1 What You Can Do in this Chapter ... 165 15.1.2 What You Need to Know ... 165 15.2 The General Screen ... 166 15.3 The Time Setting Screen ...
  • Page 16 Table of Contents Appendix C IP Addresses and Subnetting ... 235 Appendix D Wireless LANs ... 247 Appendix E Common Services... 263 Appendix F Legal Information ... 267 Index... 271 P-870HW-51a v2 User’s Guide...
  • Page 17: Introduction

    Introduction Introducing the ZyXEL Device (19) Tutorials (25) Introducing the Web Configurator (35) Status Screens (39)
  • Page 19: Introducing The Zyxel Device

    H A P T E R Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways you can manage the ZyXEL Device. 1.1 Overview The P-870HW-51a v2 is a VDSL2 gateway that allows super-fast, secure Internet access over analog (POTS) telephone lines.
  • Page 20: Good Habits For Managing The Zyxel Device

    Chapter 1 Introducing the ZyXEL Device 1.3 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
  • Page 21: Leds (Lights)

    1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 2 LEDs on the Top of the Device None of the LEDs are on if the ZyXEL Device is not receiving power. Table 1 LED Descriptions COLO POWER Green ETHERNET...
  • Page 22: The Reset Button

    Chapter 1 Introducing the ZyXEL Device Table 1 LED Descriptions COLO WLAN/ Green Orange Blinking Green INTERNET Green Refer to the Quick Start Guide for information on hardware connections. 1.6 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file.
  • Page 23: The Wps Wlan Button

    1.7 The WPS WLAN Button You can use the WPS WLAN ON/OFF button ( turn the wireless LAN off or on. You can also use it to activate WPS in order to quickly set up a wireless network with strong security. 1.7.1 Turn the Wireless LAN Off or On Make sure the POWER LED is on (not blinking).
  • Page 24 Chapter 1 Introducing the ZyXEL Device P-870HW-51a v2 User’s Guide...
  • Page 25: Tutorials

    H A P T E R This chapter describes how to set up a wireless network. 2.1 How to Set up a Wireless Network This tutorial gives you examples of how to set up an access point and wireless client for wireless communication using the following parameters. The wireless clients can access the Internet through an AP wirelessly.
  • Page 26 Chapter 2 Tutorials Open the Network > Wireless LAN screen in the AP’s web configurator. Figure 3 AP: Wireless LAN Make sure the Active Wireless LAN check box is selected. Enter “SSID_Example3” as the SSID and select a channel which is not used by another AP.
  • Page 27 Click the Advanced Setup tab and select 54g Auto in the 54g Click Apply. Figure 4 AP: Wireless LAN > Advanced Setup Open the Status screen.Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status.
  • Page 28: Connecting To A Wireless Lan

    Chapter 2 Tutorials Click the WLAN Station List hyperlink in the AP’s Status screen. You can see if any wireless client has connected to the AP. Figure 6 AP: Status: WLAN Station List 2.1.3 Configuring the Wireless Client This section describes how to connect the wireless client to a network. 2.1.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless network using the ZyXEL utility, as in the following diagram.
  • Page 29 This example illustrates how to manually connect your wireless client to an access point (AP) which is configured for WPA-PSK security and connected to the Internet. Before you connect to the access point, you must know its Service Set IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is “SSID_Example3”...
  • Page 30 Chapter 2 Tutorials When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting. Use the Next button to move on to the next screen. You can use the Back button at any time to return to the previous screen, or the Exit button to return to the Site Survey screen.
  • Page 31: Creating And Using A Profile

    The ZyXEL utility returns to the Link Info screen while it connects to the wireless network using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
  • Page 32 Chapter 2 Tutorials Open the ZyXEL utility and click the Profile tab to open the screen shown next. Click Add to configure a new profile. Figure 11 ZyXEL Utility: Profile The Add New Profile screen appears. The wireless client automatically searches for available wireless networks, which are displayed in the Scan Info box.
  • Page 33 Choose the same encryption method as the AP to which you want to connect (In this example, WPA-PSK). Figure 13 ZyXEL Utility: Profile Security This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting.
  • Page 34 Chapter 2 Tutorials Verify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 16 Profile: Confirm Save Click Activate Now to use the new profile immediately. Otherwise, click the Activate Later button. If you clicked Activate Later, you can select the profile from the list in the Profile screen and click Connect to activate it.
  • Page 35: Introducing The Web Configurator

    H A P T E R This chapter describes how to access and navigate the web configurator. 3.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions.
  • Page 36: Web Configurator Main Screen

    Chapter 3 Introducing the Web Configurator A password screen displays. Enter the default user name 1234 and default password 1234.The password displays in non-readable characters. If you have changed the password, enter your password and click Login. Click Cancel to revert to the default password in the password field.
  • Page 37: Navigation Panel

    • B - navigation panel • C - main window • D - status bar 3.2.1 Navigation Panel Use the menu items on the navigation panel to open screens to configure ZyXEL Device features. The following tables describe each menu item. Table 2 Navigation Panel Summary LINK Status...
  • Page 38: Main Window

    Chapter 3 Introducing the Web Configurator Table 2 Navigation Panel Summary LINK General Queue Setup Class Setup Dynamic DNS Remote TR069 MGMT ServiceControl IPAddress UPnP General Maintenance System General Time Setting Logs View Log Log Settings Tools Firmware Configuration Restart 3.2.2 Main Window The main window displays information and configuration fields.
  • Page 39: Status Screens

    H A P T E R Use the Status screens to look at the current status of the device, system resources and interfaces (LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from traffic. 4.1 Status Screen Click Status to open this screen.
  • Page 40 Chapter 4 Status Screens Table 3 Status Screen LABEL DESCRIPTION Device Information Host Name This field displays the ZyXEL Device system name. It is used for identification. Click this to go to the screen where you can change it. Model This is the model name of your device.
  • Page 41 Table 3 Status Screen LABEL DESCRIPTION System This field displays how long the ZyXEL Device has been running since it Uptime last started up. The ZyXEL Device starts up when you plug it in, when you restart it (Maintenance > Tools > Restart), or when you reset it (see Current This field displays the current date and time in the ZyXEL Device.
  • Page 42: Wan Service Statistics

    Chapter 4 Status Screens Table 3 Status Screen LABEL DESCRIPTION Click this link to view packet specific statistics on the LAN and WLAN Statistics interfaces. See Client List Click this link to view current DHCP client information. See 4.1.5 on page 4.1.1 WAN Service Statistics Click Status >...
  • Page 43: Route Info

    Table 4 Status > WAN Service Statistics (continued) LABEL DESCRIPTION Drops This indicates the number of received packets dropped on this interface. Transmitted Bytes This indicates the number of bytes transmitted on this interface. Pkts This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface.
  • Page 44 Chapter 4 Status Screens Table 5 Status > Route Info (continued) LABEL DESCRIPTION Flag This indicates the route status. Up: The route is up. Reject: The route is blocked and will force a route lookup to fail. Gateway: The route uses a gateway to forward traffic. Host: The target of the route is a host.
  • Page 45: Wlan Station List

    4.1.3 WLAN Station List Click Status > WLAN Station List to access this screen. Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. Figure 23 Status > WLAN Station List The following table describes the labels in this screen. Table 6 Status >...
  • Page 46: Lan Statistics

    Chapter 4 Status Screens 4.1.4 LAN Statistics Click Status > LAN Statistics to access this screen. Use this screen to view the LAN statistics. Figure 24 Status > LAN Statistics The following table describes the labels in this screen. Table 7 Status > LAN Statistics LABEL DESCRIPTION Interface...
  • Page 47: Client List

    Table 7 Status > LAN Statistics (continued) LABEL DESCRIPTION Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. 4.1.5 Client List DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server.
  • Page 48 Chapter 4 Status Screens P-870HW-51a v2 User’s Guide...
  • Page 49: Network

    Network WAN Setup (51) LAN Setup (69) Wireless LAN (79) Network Address Translation (NAT) (107)
  • Page 51: Wan Setup

    H A P T E R 5.1 Overview This chapter discusses the ZyXEL Device’s WAN screens. Use these screens to configure your ZyXEL Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
  • Page 52: What You Need To Know

    Chapter 5 WAN Setup 5.2 What You Need to Know Encapsulation Method Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider).
  • Page 53: The Internet Connection Screen

    5.4 The Internet Connection Screen Use this screen to change your ZyXEL Device’s WAN settings. Click Network > WAN > Internet Connection. The screen differs by the mode you select. Figure 27 WAN > Internet Connection (PPPoE) The following table describes the labels in this screen. Table 9 WAN >...
  • Page 54 Chapter 5 WAN Setup Table 9 WAN > Internet Connection (continued) LABEL Mode User Name Password Service Name Retry when authentication fails Retry Interval IP Address IP Address Subnet Mask Gateway IP address Connection (PPPoE only) Nailed-Up Connection Connect on Demand Max Idle Time Active NAT...
  • Page 55 Table 9 WAN > Internet Connection (continued) LABEL DESCRIPTION Symmetric Select this option to enable symmetric NAT on this connection. This field is available only when you select Active NAT. Fullcone Select this option to enable full cone NAT on this connection. This field is available only when you select Active NAT.
  • Page 56: Advanced Internet Connection Setup

    Chapter 5 WAN Setup 5.4.1 Advanced Internet Connection Setup Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Internet Connection screen. The screen appears as shown. Figure 28 WAN > Internet Connection: Advanced Setup The following table describes the labels in this screen.
  • Page 57: The More Connections Screen

    Table 10 WAN > Internet Connection: Advanced Setup (continued) LABEL DESCRIPTION PPPoE This field is available when you select PPPoE encapsulation. Passthrough (PPPoE In addition to the ZyXEL Device's built-in PPPoE client, you can enable encapsulati PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE on only) client software on their computers to connect to the ISP via the ZyXEL Device.
  • Page 58 Chapter 5 WAN Setup When you use the WAN > Internet Connection screen to set up Internet access, you are configuring the first WAN connection. Figure 29 WAN > More Connections The following table describes the labels in this screen. Table 11 WAN >...
  • Page 59: More Connections Edit

    5.5.1 More Connections Edit Click the edit icon or Add button in the More Connections screen to configure a connection Figure 30 WAN > More Connections: Edit The following table describes the labels in this screen. Table 12 WAN > More Connections: Edit LABEL DESCRIPTION General...
  • Page 60 Chapter 5 WAN Setup Table 12 WAN > More Connections: Edit (continued) LABEL Mode User Name Password Service Name Retry when authentication fails Retry Interval IP Address IP Address Subnet Mask Gateway IP address Connection (PPPoE only) Nailed-Up Connection Connect on Demand Max Idle Time Active NAT...
  • Page 61 Table 12 WAN > More Connections: Edit (continued) LABEL DESCRIPTION Symmetric Select this option to enable symmetric NAT on this connection. This field is available only when you select Active NAT. Fullcone Select this option to enable full cone NAT on this connection. This field is available only when you select Active NAT.
  • Page 62: Configuring More Connections Advanced Setup

    Chapter 5 WAN Setup 5.5.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 31 WAN > More Connections: Edit: Advanced Setup The following table describes the labels in this screen.
  • Page 63: Technical Reference

    Table 13 WAN > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION PPPoE This field is available when you select PPPoE encapsulation. Passthrough (PPPoE In addition to the ZyXEL Device's built-in PPPoE client, you can enable encapsulati PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE on only) client software on their computers to connect to the ISP via the ZyXEL Device.
  • Page 64 Chapter 5 WAN Setup Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device can work in bridge mode or routing mode. When the ZyXEL Device is in routing mode, it supports the following methods. ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol.
  • Page 65 Chapter 5 WAN Setup Full Cone NAT In full cone NAT, the NAT router maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network. The NAT router also maps packets coming to that external IP address and port to the internal IP address and port.
  • Page 66 Chapter 5 WAN Setup the example, only 3, C is allowed to send packets to 2, B and only 4, D is allowed to send packets to 2, M. Figure 33 Symmetric NAT 3, C 2, B 4, D 1, A 2, M 4, E 5, B...
  • Page 67 contains two bytes of TPID (Tag Protocol Identifier), residing within the type/ length field of the Ethernet frame) and two bytes of TCI (Tag Control Information), starts after the source address field of the Ethernet frame). The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for Ethernet switches.
  • Page 68 Chapter 5 WAN Setup 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The ZyXEL Device can get the DNS server addresses in the following ways. The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up.
  • Page 69: Lan Setup

    H A P T E R 6.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
  • Page 70: What You Need To Know

    Chapter 6 LAN Setup 6.2 What You Need To Know IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address.
  • Page 71: Before You Begin

    6.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. 6.4 The LAN IP Screen Click Network > LAN to open the IP screen. See background information.
  • Page 72: The Client List Screen

    Chapter 6 LAN Setup The following table describes the fields in this screen. Table 14 LAN > IP LABEL LAN TCP/IP IP Address IP Subnet Mask DHCP Setup Active DHCP Server IP Pool Starting Address Pool Size IGMP Snooping Active IGMP Snooping Apply 6.5 The Client List Screen...
  • Page 73: The Ip Alias Screen

    Click Network > LAN > Client List to open the following screen. Use this screen to change your ZyXEL Device’s static DHCP settings. Figure 35 LAN > Client List The following table describes the labels in this screen. Table 15 LAN > Client List LABEL DESCRIPTION IP Address...
  • Page 74: Configuring The Lan Ip Alias Screen

    Chapter 6 LAN Setup Note: Make sure that the subnets of the logical networks do not overlap. The following figure shows a LAN divided into subnets A and B. Figure 36 Physical Network & Partitioned Logical Networks Ethernet Interface 6.6.1 Configuring the LAN IP Alias Screen Click Network >...
  • Page 75: Technical Reference

    6.7 Technical Reference The following section contains additional technical information about the ZyXEL Device features described in this chapter. LANs, WANs and the ZyXEL Device The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
  • Page 76 Chapter 6 LAN Setup IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
  • Page 77 organization, you should consult your network administrator for the appropriate IP addresses. Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets”...
  • Page 78 Chapter 6 LAN Setup P-870HW-51a v2 User’s Guide...
  • Page 79: Wireless Lan

    H A P T E R 7.1 Overview This chapter describes how to perform tasks related to setting up and optimizing your wireless network, including the following. • Turning the wireless connection on or off. • Configuring a name, wireless channel and security for the network. •...
  • Page 80: What You Need To Know

    Chapter 7 Wireless LAN • The Advanced Setup screen lets you change the wireless mode, and make other advanced wireless configuration changes You don’t necessarily need to use all these screens to set up your wireless connection. For example, you may just want to set up a network name, a wireless radio channel and some security in the General screen.
  • Page 81 Chapter 7 Wireless LAN Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a variety of networks to exist in the same place without interfering with one another.
  • Page 82: Before You Begin

    Chapter 7 Wireless LAN mother owns a 1970 Dodge Challenger and her favorite movie is Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. Signal Problems Because wireless networks are radio networks, their signals are subject to limitations of distance, interference and absorption.
  • Page 83 Click Network > Wireless LAN to open the General screen. Figure 39 Network > Wireless LAN > General The following table describes the labels in this screen. Table 17 Network > Wireless LAN > General LABEL DESCRIPTION Active Click the check box to activate wireless LAN. Wireless LAN Network The SSID (Service Set IDentity) identifies the service set with which a...
  • Page 84: No Security

    Chapter 7 Wireless LAN 7.4.1 No Security Select No Security to allow wireless devices to communicate with the access points without any data encryption or authentication. Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range.
  • Page 85: Wep Encryption

    7.4.2 WEP Encryption In order to configure and enable WEP encryption; click Network > Wireless LAN to display the General screen. Select WEP from the Security Mode list. Figure 41 Wireless LAN > General: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 19 Network >...
  • Page 86: Wpa(2)-Psk

    Chapter 7 Wireless LAN Table 19 Network > Wireless LAN > General: Static WEP Encryption LABEL DESCRIPTION WEP (Wired Equivalent Privacy) provides data encryption to prevent Encryption unauthorized wireless stations from accessing data transmitted over the wireless network. Select 64-bit WEP or 128-bit WEP to enable data encryption. Key 1 to Key If you chose 64-bit WEP in the WEP Encryption field, then enter any 5 characters (ASCII string) or 10 hexadecimal characters ("0-9", "A-F")
  • Page 87 The following table describes the wireless LAN security labels in this screen. Table 20 Wireless LAN > General: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box. Active This field is only available for WPA2-PSK. Select this if you want the Compatible ZyXEL Device to support WPA-PSK and WPA2-PSK simultaneously.
  • Page 88: Wpa(2) Authentication

    Chapter 7 Wireless LAN 7.4.4 WPA(2) Authentication Use this screen to configure and enable WPA or WPA2 authentication; click the Wireless LAN link under Network to display the General screen. Select WPA or WPA2 from the Security Mode list. Figure 43 Wireless LAN > General: WPA(2) The following table describes the wireless LAN security labels in this screen.
  • Page 89: The Wps Screen

    Table 21 Wireless LAN > General: WPA(2) LABEL DESCRIPTION ReAuthentication This field is available only when you select WPA2. Timer Specify how often wireless stations have to resend usernames and passwords in order to stay connected. Enter a time interval between 10 and 9999 seconds.
  • Page 90 Chapter 7 Wireless LAN Click Network > Wireless LAN >WPS. The following screen displays. Figure 44 Network > Wireless LAN > WPS The following table describes the labels in this screen. Table 22 Network > Wireless LAN > WPS LABEL DESCRIPTION WPS Setup Enable WPS...
  • Page 91: The Wps Station Screen

    7.6 The WPS Station Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wireless LAN > WPS Station. The following screen displays. Figure 45 Network > Wireless LAN > WPS Station The following table describes the labels in this screen.
  • Page 92 Chapter 7 Wireless LAN address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. Use this screen to change your ZyXEL Device’s MAC filter settings.Click Network >...
  • Page 93: The Advanced Setup Screen

    7.8 The Advanced Setup Screen To configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup. The screen appears as shown. Figure 47 Wireless LAN > Advanced Setup The following table describes the labels in this screen. Table 25 Wireless LAN > Advanced Setup LABEL DESCRIPTION RTS/CTS...
  • Page 94: Technical Reference

    Chapter 7 Wireless LAN Table 25 Wireless LAN > Advanced Setup LABEL DESCRIPTION Mode Select 54g Auto to allow either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the ZyXEL Device. The ZyXEL Device adjusts the transmission rate automatically according to the wireless standard supported by the wireless devices.
  • Page 95: Wireless Network Overview

    7.9.1 Wireless Network Overview The following figure provides an example of a wireless network. Figure 48 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet.
  • Page 96: Additional Wireless Terms

    Chapter 7 Wireless LAN 7.9.2 Additional Wireless Terms The following table describes some wireless network terms and acronyms used in the ZyXEL Device’s Web Configurator. Table 26 Additional Wireless Terms TERM RTS/CTS Threshold Preamble Authentication Fragmentation Threshold 7.9.3 Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network.
  • Page 97: User Authentication

    characters ; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each device in the wireless network, see the device’s User’s Guide or other documentation. You can use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed to use the wireless network.
  • Page 98: Wifi Protected Setup

    Chapter 7 Wireless LAN The types of encryption you can choose depend on the type of authentication. (See Section 7.9.3.3 on page 97 Table 27 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security Static WEP WPA-PSK Stronges...
  • Page 99: Push Button Configuration

    between two devices. Both devices must support WPS (check each device’s documentation to make sure). Depending on the devices you have, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices.
  • Page 100 Chapter 7 Wireless LAN Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
  • Page 101: How Wps Works

    The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 49 Example WPS Process: PIN Method ENROLLEE 7.9.4.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
  • Page 102 Chapter 7 Wireless LAN The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. Figure 50 How WPS works ACTIVATE ACTIVATE WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes).
  • Page 103: Example Wps Network Setup

    7.9.4.4 Example WPS Network Setup This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee.
  • Page 104: Limitations Of Wps

    Chapter 7 Wireless LAN point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. Figure 53 WPS: Example Network Step 3 CLIENT 1 REGISTRAR CLIENT 2 7.9.4.5 Limitations of WPS WPS has some limitations of which you should be aware.
  • Page 105 Chapter 7 Wireless LAN • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled device could join the network. This is because the registrar has no way of identifying the “correct”...
  • Page 106 Chapter 7 Wireless LAN P-870HW-51a v2 User’s Guide...
  • Page 107: Network Address Translation (Nat)

    H A P T E R Network Address Translation 8.1 Overview This chapter discusses how to configure NAT on the ZyXEL Device. Network Address Translation (NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
  • Page 108: The Port Forwarding Screen

    Chapter 8 Network Address Translation (NAT) NAT makes your whole inside network appear as a single computer to the outside world. 8.3 The Port Forwarding Screen This summary screen provides a summary of all port forwarding rules and their configuration. In addition, this screen allows you to create new port forwarding rules and delete existing rules.
  • Page 109 The following table describes the labels in this screen. Table 28 NAT Port Forwarding LABEL DESCRIPTION Service Name Select a pre-defined service from the drop-down list box. The pre- defined service port number(s) and protocol will display in the External port, Internal port and Protocol fields.
  • Page 110: The Port Forwarding Edit Screen

    Chapter 8 Network Address Translation (NAT) Table 28 NAT Port Forwarding (continued) LABEL DESCRIPTION Internal Port This is the last internal port number that identifies a service. Server IP This field displays the destination IP address for the packet. Address Modify Click the edit icon to go to the screen where you can edit the port forwarding rule.
  • Page 111: The Dmz Host Screen

    Table 29 Port Forwarding Edit (continued) LABEL DESCRIPTION External Start Enter the original destination port for the packets. Port To forward only one port, enter the port number again in the External End Port field. To forward a series of ports, enter the start port number here and the end port number in the External End Port field.
  • Page 112: Technical Reference

    Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 30 NAT - DMZ Host LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not specified in the Note: If you do not assign a Default Server, the ZyXEL Device Save Click Save to save your changes back to the ZyXEL Device.
  • Page 113 Chapter 8 Network Address Translation (NAT) addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 57 Multiple Servers Behind NAT Example P-870HW-51a v2 User’s Guide...
  • Page 114 Chapter 8 Network Address Translation (NAT) P-870HW-51a v2 User’s Guide...
  • Page 115: Security

    Security IP Filter (117)
  • Page 117: Ip Filter

    H A P T E R 9.1 Overview This chapter shows you how to enable and configure the ZyXEL Device IP filtering settings. The ZyXEL Device firewall is a packet filtering firewall and restricts access based on the source/destination computer network address of a packet and the type of application.
  • Page 118: The Incoming Ip Filtering Screen

    Chapter 9 IP Filter Some of the most common IP ports are: Table 32 Common IP Ports Telnet SMTP Default Filtering Policies Filtering rules are grouped based on the direction of travel of packets to which they apply. The default rule for incoming traffic blocks all incoming connections from the WAN to the LAN.
  • Page 119 The following table describes the labels in this screen. Table 33 Incoming IP Filtering LABEL DESCRIPTION Active Select this check box to enable the rule. Filter Name This displays the name of the rule. Interfaces This displays the WAN interface to which this rule is applied. Protocol This displays the IP protocol that defines the service to which this rule applies.
  • Page 120: Creating Incoming Filtering Rules

    Chapter 9 IP Filter 9.3.1 Creating Incoming Filtering Rules In the Incoming screen, click Add to display this screen and refer to the following table for information on the labels. Figure 59 Incoming IP Filtering: Add The following table describes the labels in this screen. Table 34 Incoming IP Filtering: Add LABEL Filter Name...
  • Page 121 Table 34 Incoming IP Filtering: Add (continued) LABEL DESCRIPTION Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. P-870HW-51a v2 User’s Guide Chapter 9 IP Filter...
  • Page 122 Chapter 9 IP Filter P-870HW-51a v2 User’s Guide...
  • Page 123: Advanced

    Advanced Static Route (125) Quality of Service (QoS) (129) Dynamic DNS Setup (141) Remote Management (143) Universal Plug-and-Play (UPnP) (149)
  • Page 125: Static Route

    H A P T E R 10.1 Overview The ZyXEL Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the ZyXEL Device send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the ZyXEL Device’s LAN interface.
  • Page 126: The Static Route Screen

    Chapter 10 Static Route 10.2 The Static Route Screen Click Advanced > Static Route to open the Static Route screen. Figure 61 Advanced > Static Route The following table describes the labels in this screen. Table 35 Advanced > Static Route LABEL DESCRIPTION This is the number of an individual static route.
  • Page 127: Static Route Edit

    10.2.1 Static Route Edit Click the Add button in the Static Route screen. Use this screen to configure the required information for a static route. Figure 62 Static Route: Add The following table describes the labels in this screen. Table 36 Static Route: Add LABEL DESCRIPTION Destination IP...
  • Page 128 Chapter 10 Static Route P-870HW-51a v2 User’s Guide...
  • Page 129: Quality Of Service (Qos)

    H A P T E R Quality of Service (QoS) 11.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
  • Page 130: What You Need To Know

    Chapter 11 Quality of Service (QoS) 11.2 What You Need to Know The following terms and concepts may help as you read through this chapter. QoS versus Cos QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority.
  • Page 131: The Queue Setup Screen

    The following table describes the labels in this screen. Table 37 QoS General LABEL DESCRIPTION Active QoS Select the check box to turn on QoS to improve your network performance. Select Default This field is available only when you select Enable QoS. DSCP Mark If you enable QoS and incoming traffic does not match a class configured in the Class Setup screen, the ZyXEL Device sets the DSCP...
  • Page 132: Adding A Qos Queue

    Chapter 11 Quality of Service (QoS) Table 38 QoS Queue Setup LABEL DESCRIPTION Modify Click the edit icon to go to the screen where you can edit the queue. Click the remove icon to delete an existing queue. Note that subsequent rules move up by one when you take this action.
  • Page 133: The Class Setup Screen

    11.5 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming interface. For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow.
  • Page 134 Chapter 11 Quality of Service (QoS) Table 40 QoS Class Setup (continued) LABEL DstMAC /Mask SrcIP/Mask DstIP/Mask Proto Src Port Dst Port DSCP Check 802.1P Check CLASSIFICATION RESULTS Queue Key DSCP Mark 802.1P Mark VlanID Tag Rate Control Active Modify Apply DESCRIPTION This shows the destination MAC address and the mask of traffic of this...
  • Page 135: Qos Class Edit

    11.5.1 QoS Class Edit Click the Add button or the edit icon in the Class Setup screen to configure a classifier. Figure 67 QoS Class Setup: Add The following table describes the labels in this screen. Table 41 QoS Class Configuration LABEL DESCRIPTION Active...
  • Page 136 Chapter 11 Quality of Service (QoS) Table 41 QoS Class Configuration (continued) LABEL Interface Order Ether Type Tag Configuration Assign Classification Queue Mark Differentiated Services Code Point (DSCP) Mark 802.1p priority Tag VLAN ID Set Rate Control(kbps) Filter Configuration Use the following fields to configure the criteria for traffic classification. Source Address Subnet Mask...
  • Page 137: Technical Reference

    Table 41 QoS Class Configuration (continued) LABEL DESCRIPTION MAC Mask Type the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match.
  • Page 138 Chapter 11 Quality of Service (QoS) IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network.
  • Page 139 Chapter 11 Quality of Service (QoS) DSCP and Per-Hop Behavior DiffServ defines a new Differentiated Services (DS) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels. The following figure illustrates the DS field.
  • Page 140 Chapter 11 Quality of Service (QoS) P-870HW-51a v2 User’s Guide...
  • Page 141: Dynamic Dns Setup

    H A P T E R 12.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU- SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
  • Page 142: The Dynamic Dns Screen

    Chapter 12 Dynamic DNS Setup 12.3 The Dynamic DNS Screen To change your ZyXEL Device’s DDNS, click Advanced > Dynamic DNS. The screen appears as shown. Figure 68 Advanced > Dynamic DNS The following table describes the fields in this screen. Table 43 Advanced >...
  • Page 143: Remote Management

    H A P T E R 13.1 Overview This chapter explains how to configure the TR-069 settings and access control settings on the ZyXEL Device. 13.1.1 What You Can Do in this Chapter • The TR-069 Client screen lets you configure the ZyXEL Device’s TR-069 auto- configuration settings •...
  • Page 144 Chapter 13 Remote Management Click Advanced > Remote MGMT to open the following screen. Use this screen to configure your P-870HA to be managed by an ACS. Figure 69 TR-069 The following table describes the fields in this screen. Table 44 TR-069 LABEL Inform Inform Interval...
  • Page 145: The Service Control Screen

    Table 44 TR-069 (continued) LABEL DESCRIPTION Connection Enter the connection request password. Request When the ACS makes a connection request to the ZyXEL Device, this Password password is used to authenticate the ACS. Connection This shows the connection request URL. Request URL The ACS can use this URL to make a connection request to the ZyXEL Device.
  • Page 146: The Ip Address Screen

    Chapter 13 Remote Management The following table describes the fields in this screen. Table 45 Access Control: Services LABEL Service Control Mode Services Save/Apply 13.4 The IP Address Screen Click Advanced > Remote MGMT > IP Address to open the following screen. Use this screen to specify the “trusted”...
  • Page 147: Adding An Ip Address

    Table 46 IP Address (continued) LABEL DESCRIPTION Remove Select this check box and click the Remove button to delete this entry from the ZyXEL Device. Click this button to create a new entry. Remove Click this button to delete the selected entry. 13.4.1 Adding an IP Address Click the Add button in the IP Address screen to open the following screen.
  • Page 148 Chapter 13 Remote Management P-870HW-51a v2 User’s Guide...
  • Page 149: Universal Plug-And-Play (Upnp)

    H A P T E R Universal Plug-and-Play (UPnP) 14.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
  • Page 150: The Upnp Screen

    Chapter 14 Universal Plug-and-Play (UPnP) Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
  • Page 151: Installing Upnp In Windows Example

    The following table describes the fields in this screen. Table 48 Advanced > UPnP LABEL Active the Universal Plug and Play (UPnP) Feature Apply/Save Cancel 14.4 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me.
  • Page 152 Chapter 14 Universal Plug-and-Play (UPnP) Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Figure 74 Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box.
  • Page 153 Click OK to go back to the Add/Remove Programs Properties window and click Next. Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections.
  • Page 154 Chapter 14 Universal Plug-and-Play (UPnP) The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 77 Windows Optional Networking Components Wizard P-870HW-51a v2 User’s Guide...
  • Page 155: Using Upnp In Windows Xp Example

    In the Networking Services window, select the Universal Plug and Play check box. Figure 78 Networking Services Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 14.5 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP.
  • Page 156 Chapter 14 Universal Plug-and-Play (UPnP) Right-click the icon and select Properties. Figure 79 Network Connections P-870HW-51a v2 User’s Guide...
  • Page 157 Chapter 14 Universal Plug-and-Play (UPnP) In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 80 Internet Connection Properties P-870HW-51a v2 User’s Guide...
  • Page 158 Chapter 14 Universal Plug-and-Play (UPnP) You may edit or delete the port mappings or click Add to manually add port mappings. Figure 81 Internet Connection Properties: Advanced Settings Figure 82 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 159 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. Figure 83 System Tray Icon Double-click on the icon to display your current Internet connection status. Figure 84 Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first.
  • Page 160 Chapter 14 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Figure 85 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-870HW-51a v2 User’s Guide...
  • Page 161 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Figure 86 Network Connections: My Network Places Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 87 Network Connections: My Network Places: Properties: Example P-870HW-51a v2 User’s Guide Chapter 14 Universal Plug-and-Play (UPnP)
  • Page 162 Chapter 14 Universal Plug-and-Play (UPnP) P-870HW-51a v2 User’s Guide...
  • Page 163: Maintenance, Troubleshooting And Specifications

    Maintenance, Troubleshooting and Specifications System Settings (165) Logs (169) Tools (173) Troubleshooting (181) Product Specifications (187)
  • Page 165: System Settings

    H A P T E R 15.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 15.1.1 What You Can Do in this Chapter •...
  • Page 166: The General Screen

    Chapter 15 System Settings 15.2 The General Screen Use the General screen to configure system settings such as the system password. Click Maintenance > System to open the General screen. Figure 88 Maintenance > System > General The following table describes the labels in this screen. Table 49 Maintenance >...
  • Page 167: The Time Setting Screen

    15.3 The Time Setting Screen To change your ZyXEL Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Figure 89 Maintenance >...
  • Page 168 Chapter 15 System Settings Table 50 Maintenance > System > Time Setting (continued) LABEL First NTP time server Second NTP time server Third NTP time server Fourth NTP time server Fifth NTP time server Time zone offset Choose the time zone of your location. This will set the time difference Apply Cancel DESCRIPTION...
  • Page 169: Logs

    H A P T E R 16.1 Overview This chapter contains information about configuring general log settings and viewing the ZyXEL Device’s logs. The web configurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then display the logs or have the ZyXEL Device send them to a syslog server.
  • Page 170: The Log Settings Screen

    Chapter 16 Logs The log wraps around and deletes the old entries after it fills. Figure 90 Maintenance > Logs > View Log The following table describes the fields in this screen. Table 51 Maintenance > Logs > View Log LABEL DESCRIPTION Display...
  • Page 171 To change your ZyXEL Device’s log settings, click Maintenance > Logs > Log Settings. The screen appears as shown. Figure 91 Maintenance > Logs > Log Settings The following table describes the fields in this screen. Table 52 Maintenance > Logs > Log Settings LABEL DESCRIPTION Active...
  • Page 172 Chapter 16 Logs P-870HW-51a v2 User’s Guide...
  • Page 173: Tools

    H A P T E R Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE your ZyXEL Device. 17.1 Overview This chapter explains how to upload new firmware, manage configuration files and restart your ZyXEL Device. Use the instructions in this chapter to change the device’s configuration file or upgrade its firmware.
  • Page 174: The Firmware Upgrade Screen

    Chapter 17 Tools 17.2 The Firmware Upgrade Screen Click Maintenance > Tools to open the Firmware screen. Follow the instructions in this screen to upload firmware to your ZyXEL Device. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
  • Page 175 Chapter 17 Tools After you see the Firmware Upload in Progress screen, wait two minutes before logging into the ZyXEL Device again. Figure 93 Firmware Upload In Progress The ZyXEL Device automatically restarts in this time causing a temporary network disconnect.
  • Page 176: The Configuration Screen

    Chapter 17 Tools 17.3 The Configuration Screen Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next. Figure 96 Maintenance > Tools > Configuration Backup Configuration Backup Configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer.
  • Page 177 Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. Table 54 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ...
  • Page 178: The Restart Screen

    Chapter 17 Tools If the upload was not successful, the following screen will appear. Click Tools > Configuration to go back to the Configuration screen. Figure 99 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the ZyXEL Device to its factory defaults.
  • Page 179 Chapter 17 Tools Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 101 Maintenance > Tools >Restart P-870HW-51a v2 User’s Guide...
  • Page 180 Chapter 17 Tools P-870HW-51a v2 User’s Guide...
  • Page 181: Troubleshooting

    H A P T E R This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access 18.1 Power, Hardware Connections, and LEDs The ZyXEL Device does not turn on.
  • Page 182: Zyxel Device Access And Login

    Chapter 18 Troubleshooting Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the ZyXEL Device off and on. If the problem continues, contact the vendor. 18.2 ZyXEL Device Access and Login I forgot the IP address for the ZyXEL Device.
  • Page 183: Internet Access

    • If you changed the IP address • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled.
  • Page 184 Chapter 18 Troubleshooting Make sure you entered your ISP account information correctly in the WAN screens. These fields are case-sensitive, so make sure [Caps Lock] is not on. If you are trying to access the Internet wirelessly, make sure the wireless settings in the wireless client are the same as the settings in the AP.
  • Page 185 Chapter 18 Troubleshooting • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. P-870HW-51a v2 User’s Guide...
  • Page 186 Chapter 18 Troubleshooting P-870HW-51a v2 User’s Guide...
  • Page 187: Product Specifications

    H A P T E R Product Specifications The following tables summarize the ZyXEL Device’s hardware and firmware features. 19.1 Hardware Specifications Table 55 Hardware Specifications Dimensions Weight Power Specification Built-in Switch RESET Button Antenna WPS Button Operation Temperature Storage Temperature Operation Humidity Storage Humidity 19.2 Firmware Specifications...
  • Page 188 Chapter 19 Product Specifications Table 56 Firmware Specifications (continued) DHCP Server IP Pool Static DHCP Addresses Static Routes Device Management Wireless Functionality (wireless devices only) Firmware Upgrade Configuration Backup & Restoration Port Forwarding DHCP (Dynamic Host Configuration Protocol) Dynamic DNS Support IP Multicast Time and Date...
  • Page 189 Table 56 Firmware Specifications (continued) PPPoE Support (RFC2516) Other PPPoE Features PPPoE idle time out Multiple PVC (Permanent Virtual Circuits) Support IP Alias Packet Filters ADSL Standards P-870HW-51a v2 User’s Guide PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your ISP to use their existing network configuration with newer broadband technologies such as ADSL.
  • Page 190: Wireless Features

    Chapter 19 Product Specifications Table 56 Firmware Specifications (continued) Other Protocol Support Management 19.3 Wireless Features Table 57 Wireless Features External Antenna Wireless LAN MAC Address Filtering WEP Encryption Wi-Fi Protected Access PPP (Point-to-Point Protocol) link layer protocol Transparent bridging for unsupported network layer protocols RIP I/RIP II ICMP ATM QoS...
  • Page 191 Table 57 Wireless Features WPA2 Other Wireless Features The following list, which is not exhaustive, illustrates the standards supported in the ZyXEL Device. Table 58 Standards Supported STANDARD RFC 867 RFC 868 RFC 1058 RFC 1112 RFC 1157 RFC 1305 RFC 1441 RFC 1483 RFC 1631...
  • Page 192 Chapter 19 Product Specifications Table 58 Standards Supported (continued) STANDARD RFC 2408 RFC 2516 RFC 2684 RFC 2766 IEEE 802.11 IEEE 802.11b IEEE 802.11g IEEE 802.11g+ IEEE 802.11d IEEE 802.11x IEEE 802.11e QoS ANSI T1.413, Issue 2 G dmt(G.992.1) ITU G.992.1 (G.DMT) ITU G.992.2 (G.
  • Page 193: Appendices And Index

    Appendices and Note: The appendices provide general information. Some details may not apply to your ZyXEL Device. Setting Up Your Computer’s IP Address (195) Pop-up Windows, JavaScripts and Java Permissions (225) IP Addresses and Subnetting (235) Wireless LANs (247) Common Services (263) Legal Information (267) Index (271) Index...
  • Page 195: Appendix A Setting Up Your Computer's Ip Address

    P P E N D I X Setting Up Your Computer’s IP Note: Your specific ZyXEL device may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings on your computer in order for it to be able to communicate with the other devices on your network.
  • Page 196 Appendix A Setting Up Your Computer’s IP Address Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. Figure 102 Windows XP: Start Menu In the Control Panel, click the Network Connections icon.
  • Page 197 Right-click Local Area Connection and then select Properties. Figure 104 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 105 Windows XP: Local Area Connection Properties P-870HW-51a v2 User’s Guide Appendix A Setting Up Your Computer’s IP Address...
  • Page 198 Appendix A Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. Figure 106 Windows XP: Internet Protocol (TCP/IP) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
  • Page 199 Appendix A Setting Up Your Computer’s IP Address In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information.
  • Page 200: Windows Vista

    Appendix A Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 107 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 108 Windows Vista: Control Panel Click the Network and Sharing Center icon.
  • Page 201 Click Manage network connections. Figure 110 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 111 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-870HW-51a v2 User’s Guide Appendix A Setting Up Your Computer’s IP Address...
  • Page 202 Appendix A Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 112 Windows Vista: Local Area Connection Properties P-870HW-51a v2 User’s Guide...
  • Page 203 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. Figure 113 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically. Select Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields if you have a static IP address that was assigned to you by your network administrator or ISP.
  • Page 204 Appendix A Setting Up Your Computer’s IP Address In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information.
  • Page 205 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 114 Mac OS X 10.4: Apple Menu In the System Preferences window, click the Network icon. Figure 115 Mac OS X 10.4: System Preferences P-870HW-51a v2 User’s Guide Appendix A Setting Up Your Computer’s IP Address...
  • Page 206 Appendix A Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 116 Mac OS X 10.4: Network Preferences For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab.
  • Page 207 For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. Figure 118 Mac OS X 10.4: Network Preferences >...
  • Page 208 Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 119 Mac OS X 10.4: Network Utility P-870HW-51a v2 User’s Guide...
  • Page 209 Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 120 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 121 Mac OS X 10.5: Systems Preferences P-870HW-51a v2 User’s Guide Appendix A Setting Up Your Computer’s IP Address...
  • Page 210 Appendix A Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. Figure 122 Mac OS X 10.5: Network Preferences > Ethernet From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: •...
  • Page 211 Appendix A Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 123 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. P-870HW-51a v2 User’s Guide...
  • Page 212 Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. Figure 124 Mac OS X 10.5: Network Utility Linux: Ubuntu 8 (GNOME) This section shows you how to configure your computer’s TCP/IP settings in the GNU Object Model Environment (GNOME) using the Ubuntu 8 Linux distribution.
  • Page 213 Click System > Administration > Network. Figure 125 Ubuntu 8: System > Administration Menu When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password.
  • Page 214 Appendix A Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 127 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties.
  • Page 215 The Properties dialog box opens. Figure 129 Ubuntu 8: Network Settings > Properties • In the Configuration list, select Automatic Configuration (DHCP) if you have a dynamic IP address. • In the Configuration list, select Static IP address if you have a static IP address.
  • Page 216 Appendix A Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 130 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes.
  • Page 217 Appendix A Setting Up Your Computer’s IP Address tab. The Interface Statistics column shows data if your connection is working properly. Figure 131 Ubuntu 8: Network Tools P-870HW-51a v2 User’s Guide...
  • Page 218 Appendix A Setting Up Your Computer’s IP Address Linux: openSUSE 10.3 (KDE) This section shows you how to configure your computer’s TCP/IP settings in the K Desktop Environment (KDE) using the openSUSE 10.3 Linux distribution. The procedure, screens and file locations may vary depending on your specific distribution, release version, and individual configuration.
  • Page 219 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 133 openSUSE 10.3: K Menu > Computer Menu When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. Figure 134 openSUSE 10.3: YaST Control Center P-870HW-51a v2 User’s Guide Appendix A Setting Up Your Computer’s IP Address...
  • Page 220 Appendix A Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 135 openSUSE 10.3: Network Settings P-870HW-51a v2 User’s Guide...
  • Page 221 When the Network Card Setup window opens, click the Address tab Figure 136 openSUSE 10.3: Network Card Setup Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields.
  • Page 222 Appendix A Setting Up Your Computer’s IP Address If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 137 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window.
  • Page 223 Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 138 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly.
  • Page 224 Appendix A Setting Up Your Computer’s IP Address P-870HW-51a v2 User’s Guide...
  • Page 225: Appendix B Pop-Up Windows, Javascripts And Java Permissions

    P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
  • Page 226 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 141 Internet Options: Privacy Click Apply to save this setting.
  • Page 227 Select Settings…to open the Pop-up Blocker Settings screen. Figure 142 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-870HW-51a v2 User’s Guide Appendix B Pop-up Windows, JavaScripts and Java Permissions...
  • Page 228 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 143 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
  • Page 229 In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 144 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
  • Page 230: Java Permissions

    Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 145 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
  • Page 231 Click OK to close the window. Figure 146 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-870HW-51a v2 User’s Guide Appendix B Pop-up Windows, JavaScripts and Java Permissions...
  • Page 232 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 147 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
  • Page 233 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 149 Mozilla Firefox Content Security P-870HW-51a v2 User’s Guide...
  • Page 234 Appendix B Pop-up Windows, JavaScripts and Java Permissions P-870HW-51a v2 User’s Guide...
  • Page 235: Appendix C Ip Addresses And Subnetting

    P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
  • Page 236: Subnet Masks

    Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 150 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
  • Page 237 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1”...
  • Page 238 Appendix C IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
  • Page 239 Appendix C IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 151 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25).
  • Page 240 Appendix C IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 152 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of –...
  • Page 241 Each subnet contains 6 host ID bits, giving 2 host ID of all zeroes is the subnet itself, all ones is the subnet’s broadcast address). Table 63 Subnet 1 IP/SUBNET MASK IP Address (Decimal) IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.0 Broadcast Address:...
  • Page 242 Appendix C IP Addresses and Subnetting Table 66 Subnet 4 (continued) IP/SUBNET MASK Subnet Address: 192.168.1.192 Broadcast Address: 192.168.1.255 Example: Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet.
  • Page 243 The following table is a summary for subnet planning on a network with a 16-bit network number. Table 69 16-bit Network Number Subnet Planning NO. “BORROWED” HOST BITS Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
  • Page 244 Appendix C IP Addresses and Subnetting address that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
  • Page 245 address to computer A or setting computer A to obtain an IP address automatically. Figure 153 Conflicting Computer IP Addresses Example Conflicting Router IP Addresses Example Since a router connects different networks, it must have interfaces using different network numbers. For example, if a router is set between a LAN and the Internet (WAN), the router’s LAN and WAN addresses must be on different subnets.
  • Page 246 Appendix C IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 155 Conflicting Computer and Router IP Addresses Example P-870HW-51a v2 User’s Guide...
  • Page 247: Appendix D Wireless Lans

    P P E N D I X Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS).
  • Page 248 Appendix D Wireless LANs with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Figure 157 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network.
  • Page 249 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. Figure 158 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data.
  • Page 250 Appendix D Wireless LANs wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. Figure 159 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel.
  • Page 251: Fragmentation Threshold

    Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference.
  • Page 252 Appendix D Wireless LANs several intermediate rate steps between the maximum and minimum data rates. The IEEE 802.11g data rate and modulation are as follows: Table 70 IEEE 802.11g DATA RATE (MBPS) 5.5 / 11 6/9/12/18/24/36/ 48/54 Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network.
  • Page 253 IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices.
  • Page 254: Types Of Eap Authentication

    Appendix D Wireless LANs • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: •...
  • Page 255 However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the authentication server may access the password file. In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication.
  • Page 256: Dynamic Wep Key Exchange

    Appendix D Wireless LANs Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. If this feature is enabled, it is not necessary to configure a default encryption key in the wireless security configuration screen.
  • Page 257 If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not. Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is less secure than WPA or WPA2.
  • Page 258 Appendix D Wireless LANs keys. This prevent all wireless devices sharing the same encryption keys. (a weakness of WEP) User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network.
  • Page 259 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
  • Page 260: Security Parameters Summary

    Appendix D Wireless LANs The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 161 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type.
  • Page 261: Antenna Characteristics

    Antenna Overview An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Positioning the antennas properly increases the range and coverage area of a wireless LAN.
  • Page 262 Appendix D Wireless LANs • Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points.
  • Page 263: Appendix E Common Services

    P P E N D I X The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/ code numbers and services, visit the IANA (Internet Assigned Number Authority) web site.
  • Page 264 Appendix E Common Services Table 74 Commonly Used Services (continued) NAME (IPSEC_TUNNEL) FINGER H.323 HTTP HTTPS ICMP IGMP (MULTICAST) MSN Messenger NEW-ICQ NEWS NNTP PING POP3 PROTOCOL PORT(S) DESCRIPTION User-Defined The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
  • Page 265 Table 74 Commonly Used Services (continued) NAME PROTOCOL PPTP PPTP_TUNNEL User-Defined (GRE) RCMD REAL_AUDIO REXEC RLOGIN RTELNET RTSP TCP/UDP SFTP SMTP SNMP TCP/UDP SNMP-TRAPS TCP/UDP SQL-NET TCP/UDP STRM WORKS SYSLOG TACACS TELNET P-870HW-51a v2 User’s Guide Appendix E Common Services PORT(S) DESCRIPTION 1723...
  • Page 266 Appendix E Common Services Table 74 Commonly Used Services (continued) NAME TFTP VDOLIVE PROTOCOL PORT(S) DESCRIPTION Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). 7000 Another videoconferencing solution.
  • Page 267: Appendix F Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 268 Appendix F Legal Information • This device must accept any interference received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
  • Page 269: Zyxel Limited Warranty

    本機限在不干擾合法電臺與不受被干擾保障條件下於室內使用。 減少電磁波影響,請妥適使用。 Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This device has been designed for the WLAN 2.4 GHz network throughout the EC region and Switzerland, with restrictions in France. This Class B digital apparatus complies with Canadian ICES-003.
  • Page 270 Appendix F Legal Information purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php.
  • Page 271: Index

    AAL5 ADSL2 Advanced Encryption Standard See AES. alternative subnet mask notation antenna directional gain omni-directional AP (access point) applications Internet access ATM AAL5 ATM Adaptation Layer 5 (AAL5) Auto Configuration Server, see ACS auto-negotiating rate adaptation backup Basic Service Set, See BSS blinking LEDs broadcast Canonical Format Indicator See CFI...
  • Page 272 Index Dynamic Host Configuration Protocol. See DHCP. dynamic WEP key exchange DYNDNS wildcard EAP Authentication EAP-MD5 ECHO encapsulated routing link protocol (ENET ENCAP) Encapsulation PPP over Ethernet encapsulation ENET ENCAP encryption ESSID Extended Service Set IDentification Extended Service Set, See ESS external antenna external RADIUS F4/F5 OAM...
  • Page 273 creating or eiding rules introduction policies IP multicasting IP pool IP pool setup LAN statistics LAN TCP/IP logs overview settings MAC address MAC address filter action MAC filter managing the device good habits memory usage Message Integrity Check (MIC) MTU (Multi-Tenant Unit) multicast 67, 70, 77 multiple PVC support...
  • Page 274 Index tagging versus CoS Quality of Service, see QoS Quick Start Guide RADIUS 191, 253 message types messages shared secret key Reach-Extended ADSL registration product related documentation remote management TR-069 Remote Procedure Calls, see RPCs resetting your device restore RFC 1483 RFC 1631 RFC 2131.
  • Page 275 UPnP forum security issues Virtual Local Area Network See VLAN VLAN Introduction number of possible VIDs priority frame static VLAN ID VLAN Identifier See VID VLAN tag WAN (Wide Area Network) WAN interface WAN statistics warranty note Web Configurator WEP (Wired Equivalent Privacy) WEP encryption Wi-Fi Protected Access Wi-Fi Protected Access (WPA)
  • Page 276 Index P-870HW-51a v2 User’s Guide...

Table of Contents