Page 1 P-660HN-TxA 802.11n Wireless ADSL2+ 4-port Gateway Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 3.40 Edition 2, 8/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
Page 3: About This User's Guide
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
Page 4 In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/ web/contact_us.php for contact information.
Page 5: Document Conventions
Syntax Conventions • The P-660HN-TxA may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Telephone Router Switch P-660HN-TxA User’s Guide...
Page 7: Safety Warnings
Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. •...
Page 8 Safety Warnings P-660HN-TxA User’s Guide...
Page 9: Table Of Contents
Contents Overview Contents Overview User’s Guide ........................... 19 Introduction ..........................21 The Web Configurator ....................... 29 Status Screens .......................... 35 Tutorials ............................. 39 Technical Reference ......................57 Internet and Wireless Setup Wizard ..................59 WAN Setup ..........................73 LAN Setup ..........................89 Wireless LAN ...........................
Page 10 Contents Overview P-660HN-TxA User’s Guide...
Page 11: Table Of Contents
Introduction ..........................21 1.1 Overview ..........................21 1.2 Ways to Manage the ZyXEL Device ..................21 1.3 Good Habits for Managing the ZyXEL Device ..............22 1.4 Applications for the ZyXEL Device ..................22 1.4.1 Internet Access ......................22 1.5 Wireless Access ........................23 1.5.1 Using the WPS/WLAN Button ..................
Page 12 Table of Contents 3.2 The Status Screen ....................... 35 Chapter 4 Tutorials ........................... 39 4.1 Overview ..........................39 4.2 Setting Up a Secure Wireless Network ................39 4.2.1 Configuring the Wireless Network Settings ..............40 4.2.2 Using WPS ......................... 41 4.2.3 Without WPS ......................
Page 13 7.5 The IP Alias Screen ......................95 7.5.1 Configuring the LAN IP Alias Screen ................. 96 7.6 LAN Technical Reference ....................97 7.6.1 LANs, WANs and the ZyXEL Device ................98 7.6.2 DHCP Setup ....................... 98 7.6.3 DNS Server Addresses ....................98 7.6.4 LAN TCP/IP ........................
Page 14 Table of Contents 8.4 The WPS Screen ........................115 8.5 The WPS Station Screen ....................116 8.6 The WDS Screen ........................117 8.7 The Scheduling Screen ......................119 8.8 Wireless LAN Technical Reference ................... 120 8.8.1 Wireless Network Overview ..................120 8.8.2 Additional Wireless Terms ..................122 8.8.3 Wireless Security Overview ..................
Page 15 Table of Contents 11.1.1 What You Can Do in the Filter Screens ..............155 11.1.2 What You Need to Know About Filtering ..............155 11.2 The URL Filter Screen ....................156 11.3 The Application Filter Screen ................... 157 11.4 The IP/MAC Filter Screen ....................158 Chapter 12 Static Route ...........................
Page 16 Table of Contents 16.1 Overview .......................... 181 16.1.1 What You Can Do in the Remote Management Screens ........182 16.1.2 What You Need to Know About Remote Management .......... 182 16.2 The WWW Screen ......................183 16.2.1 Configuring the WWW Screen ................183 16.3 The Telnet Screen ......................
Page 17 22.3 The DSL Line Screen ...................... 230 Chapter 23 Troubleshooting........................233 23.1 Power, Hardware Connections, and LEDs ..............233 23.2 ZyXEL Device Access and Login ..................234 23.3 Internet Access ........................ 236 Chapter 24 Product Specifications ......................239 24.1 Hardware Specifications ....................239 24.2 Firmware Specifications ....................
Page 18 Table of Contents P-660HN-TxA User’s Guide...
Page 19: User's Guide
User’s Guide...
Page 21: Introduction
1.2 Ways to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device. • Web Configurator. This is recommended for everyday management of the ZyXEL Device using a (supported) web browser. • Command Line Interface. Line commands are mostly used for troubleshooting by service engineers.
Page 22: Good Habits For Managing The Zyxel Device
1.3 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
Page 23: Wireless Access
Figure 2 Wireless Access Example 1.5.1 Using the WPS/WLAN Button By default, the wireless network is turned off on the ZyXEL Device. To turn it on, simply press the WPS/WLAN button on top of the device for 1 second. Once the WPS/WLAN LED turns green, the wireless network is active.
Page 24 Press the WPS/WLAN button for five to ten seconds and release it. Press the WPS button on another WPS-enabled device within range of the ZyXEL Device. The WPS/WLAN LED should flash while the ZyXEL Device sets up a WPS connection with the other wireless device.
Page 25: Leds (Lights)
Chapter 1 Introduction 1.6 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 3 LEDs None of the LEDs are on if the ZyXEL Device is not receiving power. Table 1 LED Descriptions COLOR STATUS DESCRIPTION POWER Green The ZyXEL Device is receiving power and ready for use.
Page 26: The Reset Button
The DSL line is down. INTERNET Green The ZyXEL Device has an IP connection but no traffic. Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.
Page 27: Using The Reset Button
Chapter 1 Introduction 1.7.1 Using the Reset Button Make sure the POWER LED is on (not blinking). To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts.
Page 28 Chapter 1 Introduction P-660HN-TxA User’s Guide...
Page 29: The Web Configurator
Internet Explorer. 2.1.1 Accessing the Web Configurator Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "192.168.1.1" as the URL.
Page 30 Chapter 2 The Web Configurator A password screen displays. To access the administrative web configurator and manage the ZyXEL Device, type the admin password (1234 by default) in the password screen and click Login. Click Cancel to revert to the default user password in the password field.
Page 31: The Main Screen
Figure 6 Replace Factory Default Certificate Screen Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. 2.2 The Main Screen Figure 7 Main Screen P-660HN-TxA User’s Guide...
Page 32: Title Bar
Logout: Click this icon to log out of the web configurator. 2.2.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure ZyXEL Device features. The following tables describe each menu item. Table 3 Navigation Panel Summary...
Page 33 Use this screen to configure the wireless LAN settings and WLAN authentication/security settings. More AP Use this screen to configure multiple BSSs on the ZyXEL Device. Use this screen to configure and view your WPS (Wi-Fi Protected Setup) settings. WPS Station Use this screen to set up a WPS wireless network.
Page 34: Main Window
IP address(es) users can access the SNMP agent on the ZyXEL Device. Use this screen to configure through which interface(s) and from which IP address(es) users can send DNS queries to the ZyXEL Device. ICMP Use this screen to set whether or not your device will respond to pings and probes for services that you have not made available.
Page 35: Status Screens
(LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from bandwidth management, and traffic. 3.2 The Status Screen Use this screen to view the status of the ZyXEL Device. Click Status to open this screen. Figure 8 Status Screen P-660HN-TxA User’s Guide...
Page 36 This is the DSL standard that your ZyXEL Device is using. IP Address This is the current IP address of the ZyXEL Device in the WAN. Click this to go to the screen where you can change it. IP Subnet This is the current subnet mask in the WAN.
Page 37 This is the channel number used by the ZyXEL Device now. Security This displays the type of security mode the ZyXEL Device is using in the wireless LAN. This displays whether WPS is activated. Click this to go to the screen where you can configure the settings.
Page 38 (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation. For the LAN interface, this field displays Up when the ZyXEL Device is using the interface and Down when the ZyXEL Device is not using the interface.
Page 39: Tutorials
Thomas wants to set up a wireless network so that he can use his notebook to access the Internet. In this wireless network, the ZyXEL Device serves as an access point (AP), and the notebook is the wireless client. The wireless client can access the Internet through the AP.
Page 40: Configuring The Wireless Network Settings
Chapter 4 Tutorials 4.2.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Example Security Mode WPA-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b+g+n Click Network > Wireless LAN to open the AP screen. Configure the screen using the provided parameters (see page 40).
Page 41: Using Wps
ZyXEL Device. Push Button Configuration (PBC) Make sure that your ZyXEL Device is turned on and your notebook is within the cover range of the wireless signal. Make sure that you have installed the wireless client driver and utility in your notebook.
Page 42 Push Button in the Network > Wireless LAN > WPS Station screen. Note: Your ZyXEL Device has a WPS button located on its rear panel as well as a WPS button in its configuration utility. Both buttons have exactly the same function: you can use one or the other.
Page 43: Wireless Client
Chapter 4 Tutorials The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method ZyXEL Device Wireless Client...
Page 44 Chapter 4 Tutorials PIN Configuration When you use the PIN configuration method, you need to use both the ZyXEL Device’s web configurator and the wireless client’s utility. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
Page 45 Chapter 4 Tutorials The following figure shows you how to set up a wireless network and its security on a ZyXEL Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES...
Page 46: Without Wps
“Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The ZyXEL Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 47: Configuring The Mac Address Filter
He decided to prevent Josephine from accessing the Internet so that she can concentrate on preparing for her final exams. Josephine’s computer connects wirelessly to the Internet through the ZyXEL Device. Thomas can deny access to the wireless network using the MAC address of Josephine’s computer.
Page 48 Chapter 4 Tutorials Click Network > LAN > Client List to open the following screen. Look for the MAC address of Josephine’s computer. Click Network > Wireless LAN to open the AP screen. Click the Edit button in the MAC Filter field. P-660HN-TxA User’s Guide...
Page 49: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the ZyXEL Device’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
Page 50 In this case, B will never receive the traffic. You need to specify a static routing rule on the ZyXEL Device to specify R as the router in charge of forwarding traffic to N2. In this case, the ZyXEL Device routes traffic from A to R and then R routes the traffic to B.
Page 51 192.168.10.2 192.168.10.33 To configure a static route to route traffic from N1 to N2: Log into the ZyXEL Device’s Web Configurator in advanced mode. Click Advanced > Static Route. Click Edit on a new rule in the Static Route screen.
Page 52: Multiple Public And Private Ip Address Mappings
IP addresses. You want to map them to two servers A and IP-1 IP-2 This tutorial uses the following example settings: Table 6 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device’s WAN 172.16.1.253 (IP-1) 172.16.1.254 (IP-2) The ZyXEL Device’s LAN 192.168.1.1 192.168.1.2 192.168.1.3 a.b.c.d...
Page 53: Full Feature Nat + Many-To-Many No Overload Mapping
Chapter 4 Tutorials 4.5.1 Full Feature NAT + Many-to-Many No Overload Mapping Use this setting if your applications can use random public IP addresses and the applications are initiated from the Intranet computers (A and B). For example, VoIP application. See Section 4.5.2 on page 54 if it is not.
Page 54: Full Feature Nat + One-To-One Mapping
Chapter 4 Tutorials • Global IP addresses: 172.16.1.253 ~ 172.16.1.254 Then click Apply. 4.5.2 Full Feature NAT + One-to-One Mapping Use this setting if your applications must use fixed public IP addresses and the applications can be initiated either from the Intranet computers (A and B) or the Internet computer (C).
Page 55: Multiple Wan Connections Example
Click Apply on each of the screens. 4.6 Multiple WAN Connections Example This example shows an application for multiple WAN connections. Your ISP may configure more than one WAN connection on the ZyXEL Device to record traffic statistics or calculate service charges. P-660HN-TxA User’s Guide...
Page 56 Chapter 4 Tutorials Figure 9, three WAN connections are configured over the ADSL line: • The connection with VPI/VCI, 0/33, is dedicated for Media-On-Demand (MOD) service. • The connection with VPI/VCI, 0/34, is dedicated for VoIP service. • The connection with VPI/VCI, 0/35, is dedicated for general data transmission. Figure 9 Example for Multiple WAN Connections P-660HN-TxA User’s Guide...
Page 57: Technical Reference
Technical Reference...
Page 59: Internet And Wireless Setup Wizard
H A P T E R Internet and Wireless Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for background information on these fields. 5.2 Internet Access Wizard Setup After you enter the password to access the web configurator, select Go to Wizard setup and click Apply.
Page 60 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 11 Wizard Welcome Your ZyXEL device attempts to detect your DSL connection and your connection type. The following screen appears if a connection is not detected. Check your hardware connections and click Restart the INTERNET/WIRELESS SETUP Wizard to return to the wizard welcome screen.
Page 61 Section 5.3 on page 68 for wireless connection wizard setup. Figure 13 Auto-Detection: PPPoE The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 5.2.1 on page 62 on how to manually configure the ZyXEL Device for Internet access.
Page 62: Manual Configuration
Chapter 5 Internet and Wireless Setup Wizard 5.2.1 Manual Configuration If the ZyXEL Device fails to detect your DSL connection type but the physical line is connected, enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information.
Page 63 Chapter 5 Internet and Wireless Setup Wizard Table 7 Internet Access Wizard Setup: ISP Parameters LABEL DESCRIPTION Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list box either VC-based or LLC-based. Virtual Circuit VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
Page 64 Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 8 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
Page 65 Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. Type your ISP assigned IP address in this field. Back Click this to return to the previous screen without saving.
Page 66 Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 10 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP A static IP address is a fixed IP that your ISP gives you. A dynamic IP Address address is not fixed;...
Page 67 Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 11 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. Back Click this to return to the previous screen without saving.
Page 68: Wireless Connection Wizard Setup
Chapter 5 Internet and Wireless Setup Wizard 5.3 Wireless Connection Wizard Setup After you configure the Internet access information, use the following screens to set up your wireless LAN. Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to Step 6.
Page 69 Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the Name(SSID) wireless LAN. If you change this field on the ZyXEL Device, make sure all wireless stations use the same SSID in order to access the network. Channel The range of radio frequencies used by IEEE 802.11b/g wireless devices is...
Page 70: Manually Assign A Wpa-Psk Key
Exit Click this to close the wizard screen without saving. Note: The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is enabled) for wireless communication.
Page 71: Manually Assign A Wep Key
LABEL DESCRIPTION The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. Enter any 5 or 13 ASCII characters, or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64-bit or 128-bit WEP key respectively.
Page 72 Refer to the rest of this guide for more detailed information on the complete range of ZyXEL Device features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct.
Page 73: Wan Setup
6.1 Overview This chapter describes how to configure WAN settings from the WAN screens. Use these screens to configure your ZyXEL Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 74: Before You Begin
WAN IP Address The WAN IP address is an IP address for the ZyXEL Device, which makes it accessible from an outside network. It is used by the ZyXEL Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the ZyXEL Device tries to access the Internet.
Page 75: The Internet Access Setup Screen
Chapter 6 WAN Setup 6.2 The Internet Access Setup Screen Use this screen to change your ZyXEL Device’s WAN settings. Click Network > WAN > Internet Access Setup. The screen differs by the WAN type and encapsulation you select. Figure 30 Network > WAN >Internet Access Setup (PPPoE) The following table describes the labels in this screen.
Page 76 Internet account. Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use Firewall, DHCP server and NAT on the ZyXEL Device. Encapsulation Select the method of encapsulation used by your ISP from the drop- down list box.
Page 77: Advanced Internet Access Setup
Connection (PPPoA and PPPoE encapsulation only) Keep Alive Select Keep Alive when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected. Connect on Select Connect on Demand when you don't want the connection up...
Page 78 Table 17 Network > WAN > Internet Access Setup: Advanced Setup LABEL DESCRIPTION RIP & Multicast This section is not available when you configure the ZyXEL Device to Setup be in bridge mode. RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information with other routers.
Page 79: The More Connections Screen
Click this to restore your previously saved settings. 6.3 The More Connections Screen The ZyXEL Device allows you to configure more than one Internet access connection. To configure additional Internet access connections click Network > WAN > More Connections. The screen differs by the encapsulation you select.
Page 80: More Connections Edit
Chapter 6 WAN Setup Table 18 Network > WAN > More Connections (continued) LABEL DESCRIPTION Modify The first (ISP) connection is read-only in this screen. Use the WAN > Internet Access Setup screen to edit it. Click the Edit icon to edit the Internet connection settings. Click this icon on an empty configuration to add a new Internet access setup.
Page 81 Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge, the ZyXEL Device will forward any packet that it does not route to this remote node; otherwise, the packets are discarded.
Page 82: Configuring More Connections Advanced Setup
Connection Nailed-Up Connection Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected. Connect on Demand Select Connect on Demand when you don't want the connection up all the time and specify an idle time-out in the Max Idle Timeout field.
Page 83: Wan Technical Reference
6.4 WAN Technical Reference This section provides some technical background information about the topics covered in this chapter. 6.4.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods. P-660HN-TxA User’s Guide...
Page 84: Enet Encap
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 85: Multiplexing
Chapter 6 WAN Setup method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. 6.4.2 Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying.
Page 86: Nailed-Up Connection (Ppp)
IP Address and Gateway IP Address fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the IP Address and Gateway IP Address fields are not applicable (N/A) as the DHCP server assigns them to the ZyXEL Device.
Page 87: Atm Traffic Classes
Chapter 6 WAN Setup Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the maximum average rate at which cells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR.
Page 88 Chapter 6 WAN Setup The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is specified) but is only available when data is being sent.
Page 89: Lan Setup
(Section 7.2 on page 91) to set the LAN IP address and subnet mask of your ZyXEL device. You can also edit your ZyXEL Device's RIP, multicast and Windows Networking settings from this screen. • Use the DHCP Setup screen (Section 7.3 on page...
Page 90: What You Need To Know About Lan
You can also use subnet masks to divide one network into multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your ZyXEL Device an IP address, subnet mask, DNS and other routing information when it's turned on.
Page 91: Before You Begin
Enter an IP address into the IP Address field. The IP address must be in dotted decimal notation. This will become the IP address of your ZyXEL Device. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered.
Page 92: The Advanced Lan Ip Setup Screen
LABEL DESCRIPTION IP Address Enter the LAN IP address you want to assign to your ZyXEL Device in dotted decimal notation, for example, 192.168.1.1 (factory default). IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
Page 93: The Dhcp Setup Screen
Chapter 7 LAN Setup 7.3 The DHCP Setup Screen Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen.
Page 94: The Client List Screen
00:A0:C5:00:00:02. Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network > LAN > Client List to open the following screen.
Page 95: The Ip Alias Screen
IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN network.
Page 96: Configuring The Lan Ip Alias Screen
C: 192.168.3.1 - 192.168.3.24 7.5.1 Configuring the LAN IP Alias Screen Use this screen to change your ZyXEL Device’s IP alias settings. Click Network > LAN > IP Alias to open the following screen. Figure 41 Network > LAN > IP Alias The following table describes the labels in this screen.
Page 97: Lan Technical Reference
Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically. When set to Both or In Only, it will incorporate the RIP information that it receives;...
Page 98: Lans, Wans And The Zyxel Device
TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 99: Lan Tcp/Ip
IP addresses in the DHCP Setup screen. 7.6.4 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number.
Page 100: Rip Setup
• Both - the ZyXEL Device will broadcast its routing table periodically and incorporate the RIP information that it receives. • In Only - the ZyXEL Device will not send any RIP packets but will accept all RIP packets received.
Page 101: Multicast
224.0.0.2 is assigned to the multicast routers group. The ZyXEL Device supports IGMP version 1 (IGMP-v1), IGMP version 2 (IGMP- v2) and IGMP version 3 (IGMP-v3). At start up, the ZyXEL Device queries all directly connected networks to gather group membership. After that, the ZyXEL Device periodically updates this information.
Page 102 Chapter 7 LAN Setup P-660HN-TxA User’s Guide...
Page 103: Wireless Lan
• Use the WDS screen (see Section 8.6 on page 117) to set up a Wireless Distribution System, in which the ZyXEL Device acts as a bridge with other ZyXEL access points. • Use the Scheduling screen (see Section 8.7 on page 119) to configure the dates/times to enable or disable the wireless LAN.
Page 104: What You Need To Know About Wireless
Chapter 8 Wireless LAN You don’t necessarily need to use all these screens to set up your wireless connection. For example, you may just want to set up a network name, a wireless radio channel and security in the AP screen. 8.1.2 What You Need to Know About Wireless Wireless Basics “Wireless”...
Page 105: The Ap Screen
8.2 The AP Screen Use this screen to configure the wireless settings of your ZyXEL Device. Click Network > Wireless LAN to open the AP screen. Figure 43 Network > Wireless LAN > AP...
Page 106: No Security
8.2.1 No Security In the Network > Wireless LAN > AP screen, select No Security from the Security Mode list to allow wireless devices to communicate with the ZyXEL Device without any data encryption or authentication. P-660HN-TxA User’s Guide...
Page 107: Wep Encryption
Chapter 8 Wireless LAN Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 44 Network > Wireless LAN > AP: No Security The following table describes the labels in this screen.
Page 108: Wpa(2)-Psk
The ZyXEL Device automatically generates a WEP key. WEP Key The WEP key is used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you want to manually set the WEP key, enter any 5 or 13 characters (ASCII string) or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64-...
Page 109: Wpa(2) Authentication
This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA-PSK and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2-PSK or WPA2. ReAuthentication...
Page 110: Wireless Lan Advanced Setup
Device. The key must be the same on the external authentication server and your ZyXEL Device. The key is not sent over the network. 8.2.5 Wireless LAN Advanced Setup Use this screen to configure advanced wireless settings. Click the Advanced Setup button in the AP screen.
Page 111 DESCRIPTION Output Power Set the output power of the ZyXEL Device. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. Select one of the following: 100%, 75%, 50% or 25%.
Page 112: Mac Filter
Chapter 8 Wireless LAN 8.2.6 MAC Filter Use this screen to change your ZyXEL Device’s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 49 Network > Wireless LAN > AP: MAC Address Filter The following table describes the labels in this screen.
Page 113: The More Ap Screen
This field indicates whether this SSID is active. SSID An SSID profile is the set of parameters relating to one of the ZyXEL Device’s BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated.
Page 114: More Ap Edit
MAC Filter This shows whether the wireless devices with the MAC addresses listed are allowed or denied to access the ZyXEL Device using this SSID. Edit Click this to go to the MAC Filter screen to configure MAC filter settings.
Page 115: The Wps Screen
Click this to restore your previously saved settings. 8.4 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your ZyXEL Device. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices.
Page 116: The Wps Station Screen
This displays Unconfigured if WPS is disabled and there is no wireless or wireless security changes on the ZyXEL Device or you click Release to remove the configured wireless and wireless security settings.
Page 117: The Wds Screen
Note: WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation.
Page 118 This is the index number of the individual WDS link. Active Select this to activate the link between the ZyXEL Device and the peer device to which this entry refers. When you do not select the check box this link is down.
Page 119: The Scheduling Screen
The following table describes the labels in this screen. Table 38 Network > Wireless LAN > QoS LABEL DESCRIPTION Enable Select this box to activate wireless LAN scheduling on your ZyXEL Wireless LAN Device. Scheduling Action Select On or Off to enable or disable the wireless LAN.
Page 120: Wireless Lan Technical Reference
Chapter 8 Wireless LAN 8.8 Wireless LAN Technical Reference This section discusses wireless LANs in depth. For more information, see the appendix. 8.8.1 Wireless Network Overview Wireless networks consist of wireless clients, access points and bridges. • A wireless client is a radio connected to a user’s computer. •...
Page 121 The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines.
Page 122: Additional Wireless Terms
By setting this value lower than the default value, the wireless devices must sometimes get permission to send information to the ZyXEL Device. The lower the value, the more often the devices must get permission. If this value is greater than the fragmentation threshold value (see below), then wireless devices never have to get permission to send information to the ZyXEL Device.
Page 123: Mac Address Filter
Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess.
Page 124: User Authentication
Chapter 8 Wireless LAN You can use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security).
Page 125: Signal Problems
Usually, you should set up the strongest encryption that every device in the wireless network supports. For example, suppose you have a wireless network with the ZyXEL Device and you do not have a RADIUS server. Therefore, there is no authentication. Suppose the wireless network has two devices. Device A only supports WEP, and device B supports WEP and WPA.
Page 126: Mbssid
Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The ZyXEL Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously.
Page 127: Wireless Distribution System (Wds)
APs you want to link to. Once the security settings of peer sides match one another, the connection between devices is made. At the time of writing, WDS security is compatible with other ZyXEL access points only. Refer to your other access point’s documentation for details.
Page 128: Push Button Configuration
Section 8.5 on page 116). Press the button on one of the devices (it doesn’t matter which). For the ZyXEL Device you must press the WPS button for more than three seconds. Within two minutes, press the button on the other device. The registrar sends the network name (SSID) and security key through an secure connection to the enrollee.
Page 129 Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 8.4 on page 115).
Page 130: How Wps Works
Chapter 8 Wireless LAN The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 59 Example WPS Process: PIN Method ENROLLEE REGISTRAR This device’s WPS PIN: 123456 Enter WPS PIN from other device: START...
Page 131 Chapter 8 Wireless LAN The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. Figure 60 How WPS works ACTIVATE ACTIVATE WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes).
Page 132 Chapter 8 Wireless LAN 8.8.8.4 Example WPS Network Setup This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee.
Page 133: Limitations Of Wps
Chapter 8 Wireless LAN point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. Figure 63 WPS: Example Network Step 3 EXISTING CONNECTION CLIENT 1 REGISTRAR CLIENT 2 ENROLLEE 8.8.8.5 Limitations of WPS WPS has some limitations of which you should be aware.
Page 134 Chapter 8 Wireless LAN • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled device could join the network. This is because the registrar has no way of identifying the “correct”...
Page 135: Network Address Translation (Nat)
(NAT) 9.1 Overview This chapter discusses how to configure NAT on the ZyXEL Device. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
Page 136 LAN IP addresses of clients or servers using mapping types as outlined in Table 48 on page 149. • Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device. • Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device.
Page 137: The Nat General Setup Screen
Note: You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL Device. Figure 64 Network > NAT > General The following table describes the labels in this screen.
Page 138: The Port Forwarding Screen
A default server receives packets from ports that are not specified in this screen. Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
Page 139: Configuring The Port Forwarding Screen
Chapter 9 Network Address Translation (NAT) Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
Page 140 A default server receives packets from ports that are not specified in this screen. If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
Page 141: The Port Forwarding Rule Edit Screen
Chapter 9 Network Address Translation (NAT) 9.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule. Click the rule’s edit icon in the Port Forwarding screen to display the screen shown next. Figure 67 Network > NAT > Port Forwarding: Edit The following table describes the fields in this screen.
Page 142: The Address Mapping Screen
Note: The Address Mapping screen is available only when you select Full Feature in the NAT > General screen. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify. When a rule matches the current packet, the ZyXEL Device takes the corresponding action and the remaining rules are ignored.
Page 143 M-1: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only. M-M Ov (Overload): Many-to-Many Overload mode maps multiple local IP addresses to shared global IP addresses.
Page 144: The Address Mapping Rule Edit Screen
Many-to-One: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only. Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP addresses to shared global IP addresses.
Page 145: The Alg Screen
SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if your ZyXEL Device is behind a SIP ALG. Use this screen to enable and disable the SIP (VoIP) ALG in the ZyXEL Device. To access this screen, click Network > NAT > ALG.
Page 146: Nat Technical Reference
This chapter contains more information regarding NAT. 9.6.1 NAT Definitions Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 147: How Nat Works
IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored.
Page 148: Nat Application
9.6.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: • One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. • Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to one global IP address.
Page 149 Chapter 9 Network Address Translation (NAT) Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT mapping types. The following table summarizes these types. Table 48 NAT Mapping Types TYPE IP MAPPING One-to-One ILA1 IGA1 Many-to-One (SUA/PAT) ILA1 IGA1 ILA2 IGA1...
Page 150 Chapter 9 Network Address Translation (NAT) P-660HN-TxA User’s Guide...
Page 151: Firewall
Firewall 10.1 Overview This chapter shows you how to enable the ZyXEL Device firewall. Use the firewall to protect your ZyXEL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: •...
Page 152 Chapter 10 Firewall device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known DoS attacks. DDoS A DDoS attack is one in which multiple compromised systems attack a single target, thereby causing denial of service for users of the targeted system.
Page 153: The Firewall Screen
Table 49 Advanced > Firewall LABEL DESCRIPTION Firewall Use this field to enable or disable firewall on your ZyXEL Device. Use this field to enable or disable SPI on your ZyXEL Device. SAVE Click this to save your changes. CANCEL Click this to restore your previously saved settings.
Page 154 Chapter 10 Firewall P-660HN-TxA User’s Guide...
Page 155: Filters
Internet browser, for example “http://www.zyxel.com”. IP/MAC Filter Structure An IP/MAC filter set consists of one or more filter rules. The ZyXEL Device allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system.
Page 156: The Url Filter Screen
Enter the URL for the ZyXEL Device to block. URL Filter Listing Index This is the index number of the filter rule. This is the URL you have configured the ZyXEL Device to block. Apply Click this to save your changes. Delete Click this to remove the filter rule.
Page 157: The Application Filter Screen
Chapter 11 Filters 11.3 The Application Filter Screen Use this screen to allow or deny traffic for certain types of applications. The application filter provides a convenient way to manage the use of various applications on the network. Click Security > Filter > Application Filter. The screen appears as shown. Figure 75 Security >...
Page 158: The Ip/Mac Filter Screen
Chapter 11 Filters 11.4 The IP/MAC Filter Screen Use this screen to create and apply IP/MAC filters. Click Security > Filter > IP/ MAC Filter. The screen appears as shown. Security > Filter > IP/MAC Filter Figure 76 The following table describes the labels in this screen. Table 52 Access Management >...
Page 159 This is the destination port number. Protocol This is the upper layer protocol. Unmatched When a packet doesn’t match the rule, this is the action the ZyXEL Device takes on the packet. SAVE Click this to save your changes. P-660HN-TxA User’s Guide...
Page 160 Chapter 11 Filters Table 52 Access Management > Filter (IP/MAC) (continued) LABEL DESCRIPTION DELETE Click this to remove the filter rule. CANCEL Click this to restore your previously saved settings. P-660HN-TxA User’s Guide...
Page 161: Static Route
12.1 Overview The ZyXEL Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the ZyXEL Device send data to devices not reachable through the default gateway, use static routes.
Page 162: What You Can Do In The Static Route Screens
Use the Static Route screens (Section 12.2 on page 162) to view and configure IP static routes on the ZyXEL Device. 12.2 The Static Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen.
Page 163: Static Route Edit
Click the Edit icon to go to the screen where you can set up a static route on the ZyXEL Device. Click the Remove icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route.
Page 164 Chapter 12 Static Route P-660HN-TxA User’s Guide...
Page 165: Q/1P
Each group can have its own rules about where and how to forward traffic. You can assign any ports on the ZyXEL Device to a VLAN group and configure the settings for the group. You may also set the priority level for traffic trasmitted through the ports.
Page 166: The 802.1Q/1P Group Setting Screen
802.1Q VLAN-aware device to an 802.1Q VLAN-unaware device, the ZyXEL Device first decides where to forward the frame and then strips off the VLAN tag. To forward a frame from an 802.1Q VLAN-unaware device to an 802.1Q VLAN-aware switch, the ZyXEL Device first decides where to forward the...
Page 167 Chapter 13 802.1Q/1P Note: If the WAN interface in the VLAN group is not the default router, you need to create a static route to communicate with the WAN. Figure 81 Advanced > 802.1Q/1P > Group Setting The following table describes the labels in this screen. Table 55 Advanced >...
Page 168: Editing 802.1Q/1P Group Setting
Chapter 13 802.1Q/1P 13.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure the settings for each VLAN group. In the 802.1Q/1P screen, click the Edit button from the Modify filed to display the following screen. Figure 82 Advanced > 802.1Q/1P > Group Setting > Edit The following table describes the labels in this screen.
Page 169: The 802.1Q/1P Port Setting Screen
Select Tx Tagging if you want the port to tag all outgoing traffic trasmitted through this VLAN. You select this if you want to create VLANs across different devices and not just the ZyXEL Device. Back Click this to return to the previous screen without saving.
Page 170 This field displays the types of ports available to join the VLAN group. 802.1Q PVID Assign a VLAN ID for the port. The valid VID range is between 1 and 4094. The ZyXEL Device assigns the PVID to untagged frames or priority-tagged frames received on this port. Apply Click this to save your changes.
Page 171: Quality Of Service (Qos)
H A P T E R Quality of Service (QoS) 14.1 Overview Use the QoS screen to set up your ZyXEL Device to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth.
Page 172: What You Can Do In The Qos Screens
• Use the QoS Settings Summary screen (Section 14.2.1 on page 175) to check the summary of QoS rules and actions you configured for the ZyXEL Device. 14.1.2 What You Need to Know About QoS 802.1p QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority.
Page 173: The Qos Screen
Chapter 14 Quality of Service (QoS) 14.2 The QoS Screen Use this screen to enable or disable QoS and have the ZyXEL Device assign priority levels to traffic according to the port range, IEEE 802.1p priority level and/ or IP precedence.
Page 174 Quality of Service Use this field to turn on QoS to improve your network performance. You can give priority to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly.
Page 175: The Qos Settings Summary Screen
14.2.1 The QoS Settings Summary Screen Use this screen to display a summary of rules and actions configured for the ZyXEL Device. In the Advanced > QoS screen, click the QoS Settings Summary button to open the following screen. Figure 86 Advanced Setup > QoS > QoS Settings Summary...
Page 176: Qos Technical Reference
The ZyXEL Device re-assigns the priority levels specified in this field Remarking to matched traffic. Queue # The ZyXEL Device assigns the queue level specified in this field to matched traffic. 14.3 QoS Technical Reference This section provides some technical background information about the topics covered in this chapter.
Page 177: Ip Precedence
14.3.3 Automatic Priority Queue Assignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class.
Page 178 Chapter 14 Quality of Service (QoS) Table 61 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 IEEE 802.1P PRIORITY QUEUE USER PRIORITY TOS (IP IP PACKET PRECEDENCE) DSCP (ETHERNET LENGTH (BYTE) PRIORITY) 001110 250~1100 001100 001010 001000 010110 010100 010010 010000...
Page 179: Dynamic Dns Setup
Use the Dynamic DNS screen (Section 15.2 on page 180) to enable DDNS and configure the DDNS settings on the ZyXEL Device. 15.1.2 What You Need To Know About DDNS DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org.
Page 180: The Dynamic Dns Screen
Chapter 15 Dynamic DNS Setup 15.2 The Dynamic DNS Screen Use this screen to change your ZyXEL Device’s DDNS. Click Advanced > Dynamic DNS. The screen appears as shown. Figure 87 Advanced > Dynamic DNS The following table describes the fields in this screen.
Page 181: Remote Management
To disable remote management of a service, select Disable in the corresponding Service Access field. You may only have one remote management session running at a time. The ZyXEL Device automatically disconnects a remote management session of lower priority P-660HN-TxA User’s Guide...
Page 182: What You Can Do In The Remote Management Screens
IP address(es) users can use FTP to access the ZyXEL Device. • Your ZyXEL Device can act as an SNMP agent, which allows a manager station to manage and monitor the ZyXEL Device through the network. Use the SNMP screen (see Section 16.5 on page...
Page 183: The Www Screen
16.2 The WWW Screen Use this screen to specify how to connect to the ZyXEL Device from a web browser, such as Internet Explorer. Note: If you disable the WWW service in the Remote MGMT > WWW screen, then the ZyXEL Device blocks all HTTP connection attempts.
Page 184: The Telnet Screen
A secured client is a “trusted” computer that is allowed to communicate IP Address with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Page 185: The Ftp Screen
A secured client is a “trusted” computer that is allowed to communicate IP Address with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Page 186: The Snmp Screen
A secured client is a “trusted” computer that is allowed to communicate IP Address with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Page 187: Configuring Snmp
The SNMP agent listens on port 161 by default. If you change the SNMP server port to a different number on the ZyXEL Device, for example 8161, then you must notify people who need to access the ZyXEL Device SNMP agent to use the same port.
Page 188: The Dns Screen
Use this screen to set from which IP address the ZyXEL Device will accept DNS queries and on which interface it can send them your ZyXEL Device’s DNS settings. This feature is not available when the ZyXEL Device is set to bridge mode.
Page 189: The Icmp Screen
To change your ZyXEL Device’s security settings, click Advanced > Remote MGMT > ICMP. The screen appears as shown. If an outside user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is automatically returned. This allows the outside user to know the ZyXEL Device exists.
Page 190 Chapter 16 Remote Management P-660HN-TxA User’s Guide...
Page 191: Universal Plug-And-Play (Upnp)
17.1.1 What You Can Do in the UPnP Screen Use the UPnP screen (Section 17.2 on page 193) to enable UPnP on the ZyXEL Device and allow UPnP-enabled applications to automatically configure the ZyXEL Device. 17.1.2 What You Need to Know About UPnP Identifying UPnP Devices UPnP hardware is identified as an icon in the Network Connections folder (Windows XP).
Page 192 All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0.
Page 193: The Upnp Screen
Chapter 17 Universal Plug-and-Play (UPnP) 17.2 The UPnP Screen Use the following screen to configure the UPnP settings on your ZyXEL Device. Click Advanced > UPnP to display the screen shown next. Section 17.1 on page 191 for more information.
Page 194: Installing Upnp In Windows Example
Chapter 17 Universal Plug-and-Play (UPnP) 17.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel.
Page 195 Chapter 17 Universal Plug-and-Play (UPnP) In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components Click OK to go back to the Add/Remove Programs Properties window and click Next.
Page 196 Chapter 17 Universal Plug-and-Play (UPnP) In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard P-660HN-TxA User’s Guide...
Page 197: Using Upnp In Windows Xp Example
UPnP installed in Windows XP and UPnP activated on the ZyXEL Device. Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel.
Page 198 Chapter 17 Universal Plug-and-Play (UPnP) Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties P-660HN-TxA User’s Guide...
Page 199 Chapter 17 Universal Plug-and-Play (UPnP) You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Page 200 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device.
Page 201 Chapter 17 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-660HN-TxA User’s Guide...
Page 202 Chapter 17 Universal Plug-and-Play (UPnP) Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device.
Page 203: Cwmp
Protocol Release 2.0) and TR-069 Amendment 2 (CPE WAN Management Protocol v1.1, Release 3.0). TR-069 is a protocol that defines how your ZyXEL Device (ZD) can be managed via a management server (MS) such as ZyXEL’s Vantage Access. Figure 97 LAN and WAN...
Page 204: The Cwmp Setup Screen
The user name is used to authenticate the ZyXEL Device when making a connection to the management server. This user name on the management server and the ZyXEL Device must be the same. Type a user name of up to 255 printable characters found on an English-language keyboard. Spaces and characters such as @#$%^&*()_+ are allowed.
Page 205 The password is used to authenticate the ZyXEL Device when making a connection to the management server. This password on the management server and the ZyXEL Device must be the same. Type a password of up to 255 printable characters found on an English-language keyboard.
Page 206 Chapter 18 CWMP P-660HN-TxA User’s Guide...
Page 207: System Settings
H A P T E R System Settings 19.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 19.1.1 What You Can Do in the System Settings Screens •...
Page 208: The Time And Date Screen
Click this to restore your previously saved settings. 19.3 The Time and Date Screen Use this screen to configure the ZyXEL Device’s time based on your local time zone. To change your ZyXEL Device’s time and date, click Maintenance >...
Page 209 When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the ZyXEL Device get the time and date Server from the time server you specified below.
Page 210 Chapter 19 System Settings Table 72 Maintenance > System > Time and Date (continued) LABEL DESCRIPTION Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylight Saving. The o'clock field uses the 24 hour format.
Page 211: Logs
Logs A log is a message about an event that occurred on your ZyXEL Device. For example, when someone logs in to the ZyXEL Device, you can set a schedule for how often logs should be enabled, or sent to a syslog server.
Page 212 Chapter 20 Logs Alerts are e-mailed as soon as they happen. Logs may be e-mailed as soon as the log is full. Selecting many alert and/or log categories (especially Access Control) may result in many e-mails being sent. Figure 101 Maintenance > System Logs The following table describes the fields in this screen.
Page 213: Log Descriptions
Chapter 20 Logs 20.3 Log Descriptions This section provides descriptions of example log messages. Table 74 System Maintenance Logs LOG MESSAGE DESCRIPTION The router has adjusted its time based on information Time calibration is from the time server. successful The router failed to get information from the time Time calibration failed server.
Page 214 Chapter 20 Logs Table 74 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Someone has logged on to the router's web Successful HTTPS login configurator interface using HTTPS protocol. Someone has failed to log on to the router's web HTTPS login failed configurator interface using HTTPS protocol.
Page 215 Chapter 20 Logs Table 77 TCP Reset Logs LOG MESSAGE DESCRIPTION The router sent a TCP reset packet when a host was Under SYN flood attack, under a SYN flood attack (the TCP incomplete count is per sent TCP RST destination host.) The router sent a TCP reset packet when the number of Exceed TCP MAX...
Page 216 Chapter 20 Logs For type and code details, see Table 87 on page 219. Table 79 ICMP Logs LOG MESSAGE DESCRIPTION ICMP access matched the default policy and was Firewall default policy: ICMP blocked or forwarded according to the user's <Packet Direction>, <type:%d>, setting.
Page 217 Chapter 20 Logs Table 81 PPP Logs (continued) LOG MESSAGE DESCRIPTION The PPP connection’s Link Control Protocol stage is closing. ppp:LCP Closing The PPP connection’s Internet Protocol Control Protocol stage is ppp:IPCP Closing closing. Table 82 UPnP Logs LOG MESSAGE DESCRIPTION UPnP packets can pass through the firewall.
Page 218 Chapter 20 Logs Table 84 Attack Logs (continued) LOG MESSAGE DESCRIPTION The firewall detected a TCP NetBIOS attack. NetBIOS TCP The firewall classified a packet with no source routing ip spoofing - no routing entry as an IP spoofing attack. entry [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall classified an ICMP packet with no source...
Page 219 (L to L/ZyXEL LAN to LAN/ ACL set for packets traveling from the LAN to the Device) ZyXEL Device LAN or the ZyXEL Device. (W to W/ZyXEL WAN to WAN/ ACL set for packets traveling from the WAN to the Device) ZyXEL Device WAN or the ZyXEL Device.
Page 220 Chapter 20 Logs Table 87 ICMP Notes (continued) TYPE CODE DESCRIPTION Information request message Information Reply Information reply message Table 88 Syslog Logs LOG MESSAGE DESCRIPTION "This message is sent by the system ("RAS" <Facility*8 + Severity>Mon dd displays as the system name if you haven’t hr:mm:ss hostname configured one) when the router generates a src="<srcIP:srcPort>"...
Page 221: Tools
The firmware determines the device’s available features and functionality. You can download new firmware releases from your nearest ZyXEL FTP site (or www.zyxel.com) to use to upgrade your device’s performance. Only use firmware for your device’s specific model. Refer to the label on the bottom of your ZyXEL Device.
Page 222 Chapter 21 Tools Do NOT turn off the ZyXEL Device while firmware upload is in progress! Figure 102 Maintenance > Tools > Firmware The following table describes the labels in this screen. Table 90 Maintenance > Tools > Firmware LABEL...
Page 223 Chapter 21 Tools The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 104 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
Page 224: The Configuration Screen
Backup Configuration Backup Configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer. Once your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 225 (.ZIP) files before you can upload them. Upload Click this to begin the upload process. Do not turn off the ZyXEL Device while configuration file upload is in progress. After you see a “restore configuration successful” screen, you must then wait one minute before logging into the ZyXEL Device again.
Page 226 Figure 109 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the ZyXEL Device to its factory defaults. The following warning screen appears. Figure 110 Reset Warning Message Figure 111 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device.
Page 227: The Restart Screen
System restart allows you to reboot the ZyXEL Device remotely without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot.
Page 228 Chapter 21 Tools P-660HN-TxA User’s Guide...
Page 229: Diagnostic
H A P T E R Diagnostic 22.1 Overview These read-only screens display information to help you identify problems with the ZyXEL Device. 22.1.1 What You Can Do in the Diagnostic Screens • Use the General screen (Section 22.2 on page 229) to ping an IP address.
Page 230: The Dsl Line Screen
Chapter 22 Diagnostic The following table describes the fields in this screen. Table 92 Maintenance > Diagnostic > General LABEL DESCRIPTION TCP/IP Type the IP address of a computer that you want to ping in order to test a Address connection.
Page 231 ATM OAM F5 cells that have been received. outF5Pkts is the number of ATM OAM F5 cells that have been sent. openChan is the number of times that the ZyXEL Device has opened a logical DSL channel.
Page 232 Status noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the ZyXEL Device from the ISP). It is measured in decibels. The higher the number the more signal and less noise there is.
Page 233: Troubleshooting
The ZyXEL Device does not turn on. None of the LEDs turn on. Make sure the ZyXEL Device is turned on. Make sure you are using the power adaptor or cord included with the ZyXEL Device. Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source.
Page 234: Zyxel Device Access And Login
If you changed the IP address and have forgotten it, you might get the IP address of the ZyXEL Device by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig.
Page 235 Advanced Suggestions • Try to access the ZyXEL Device using another service, such as Telnet. If you can access the ZyXEL Device, check the remote management settings and firewall rules to find out why the ZyXEL Device does not respond to HTTP.
Page 236: Internet Access
Start Guide again. If the problem continues, contact your ISP. I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL Device), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected.
Page 237 Check the signal strength. If the signal strength is low, try moving your computer closer to the ZyXEL Device if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on).
Page 238 Chapter 23 Troubleshooting P-660HN-TxA User’s Guide...
Page 239: Product Specifications
H A P T E R Product Specifications The following tables summarize the ZyXEL Device’s hardware and firmware features. 24.1 Hardware Specifications Table 94 Hardware Specifications Dimensions 133 x 61 x 163 mm Weight 215g Power Specification 12VDC 1A Built-in Switch...
Page 240 Configuration Backup Make a copy of the ZyXEL Device’s configuration. You can put it & Restoration back on the ZyXEL Device later if you decide to revert back to an earlier configuration. Network Address Each computer on your network must have its own unique IP Translation (NAT) address.
Page 241 Remote Management This allows you to decide whether a service (HTTP or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the ZyXEL Device. PPPoE Support PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up (RFC2516) connection.
Page 242 Chapter 24 Product Specifications Table 95 Firmware Specifications (continued) ADSL Standards Support Multi-Mode standard (ANSI T1.413, Issue 2; G.dmt (G.992.1); G.lite (G992.2)) EOC specified in ITU-T G.992.1 ADSL2 G.dmt.bis (G.992.3) ADSL2 G.lite.bis (G.992.4) ADSL2+ (G.992.5) Reach Extended ADSL (RE ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate adaptation ADSL physical connection ATM AAL5 (ATM Adaptation Layer type...
Page 243: Wireless Features
MTU adjustable on WebGUI 24.3 Wireless Features Table 96 Wireless Features Internal Antenna The ZyXEL Device is equipped with one internal antenna to provide a clear radio signal between the wireless stations and the access points. Wireless LAN MAC Address...
Page 244 WPA, WPA-PSK, WPA2, WPA2-PSK IEEE 802.1x (EAP-MD5, TLS and TTLS) Multi BSSID (4 BSSIDs) Wireless Scheduling The following list, which is not exhaustive, illustrates the standards supported in the ZyXEL Device. Table 97 Standards Supported STANDARD DESCRIPTION RFC 867 Daytime Protocol RFC 868 Time Protocol.
Page 245 Chapter 24 Product Specifications Table 97 Standards Supported (continued) STANDARD DESCRIPTION RFC 2516 A Method for Transmitting PPP Over Ethernet (PPPoE) RFC 2684 Multiprotocol Encapsulation over ATM Adaptation Layer 5. RFC 2766 Network Address Translation - Protocol IEEE 802.11 Also known by the brand Wi-Fi, denotes a set of Wireless LAN/ WLAN standards developed by working group 11 of the IEEE LAN/MAN Standards Committee (IEEE 802).
Page 246: Power Adaptor Specifications
Chapter 24 Product Specifications 24.4 Power Adaptor Specifications Table 98 ZyXEL Device Series Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model 12V 1A SOCB PA Input Power AC 120Volts/60Hz Output Power DC 12Volts/1.0A Power Consumption 7.7 Watt max...
Page 247: Appendix A Setting Up Your Computer's Ip Address
"communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device’s LAN port. P-660HN-TxA User’s Guide...
Page 248 Appendix A Setting up Your Computer’s IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 115 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks.
Page 249 Appendix A Setting up Your Computer’s IP Address Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers.
Page 250 Click OK to save and close the TCP/IP Properties window. Click OK to close the Network window. Insert the Windows CD if prompted. Turn on your ZyXEL Device and restart your computer when prompted. Verifying Settings Click Start and then Run.
Page 251 Appendix A Setting up Your Computer’s IP Address Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 118 Windows XP: Start Menu In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT).
Page 252 Appendix A Setting up Your Computer’s IP Address Right-click Local Area Connection and then click Properties. Figure 120 Windows XP: Control Panel: Network Connections: Properties Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 121 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Page 253 Appendix A Setting up Your Computer’s IP Address • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. •...
Page 254 Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 123 Windows XP: Advanced TCP/IP Properties In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 255: Windows Vista
Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab.
Page 256 Appendix A Setting up Your Computer’s IP Address Click the Start icon, Control Panel. Figure 125 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 126 Windows Vista: Control Panel Click Network and Sharing Center. Figure 127 Windows Vista: Network And Internet P-660HN-TxA User’s Guide...
Page 257 Appendix A Setting up Your Computer’s IP Address Click Manage network connections. Figure 128 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 129 Windows Vista: Network and Sharing Center P-660HN-TxA User’s Guide...
Page 258 Appendix A Setting up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 130 Windows Vista: Local Area Connection Properties The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically.
Page 259 Appendix A Setting up Your Computer’s IP Address • Click Advanced. Figure 131 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Page 260 Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 132 Windows Vista: Advanced TCP/IP Properties In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 261 11 Click Close to close the Local Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Click Start, All Programs, Accessories and then Command Prompt.
Page 262 Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 134 Macintosh OS 8/9: Apple Menu P-660HN-TxA User’s Guide...
Page 263 • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. Close the TCP/IP Control Panel. Click Save if prompted, to save changes to your configuration.
Page 264: Macintosh Os X
Appendix A Setting up Your Computer’s IP Address Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 136 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. •...
Page 265 • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. Click Apply Now and close the window.
Page 266 Appendix A Setting up Your Computer’s IP Address Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 139 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list.
Page 267 Appendix A Setting up Your Computer’s IP Address Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 141 Red Hat 9.0: KDE: Network Configuration: Activate After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen.
Page 268 Appendix A Setting up Your Computer’s IP Address • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
Page 269: Verifying Settings
Appendix A Setting up Your Computer’s IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 146 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1...
Page 270 Appendix A Setting up Your Computer’s IP Address P-660HN-TxA User’s Guide...
Page 271: Appendix B Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 272: Subnet Masks
Appendix B IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 147 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Page 273 Appendix B IP Addresses and Subnetting By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1”...
Page 274 Appendix B IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
Page 275 Appendix B IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 148 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25).
Page 276 Appendix B IP Addresses and Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
Page 277 Appendix B IP Addresses and Subnetting Table 105 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 10000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 106 Subnet 4...
Page 278 Appendix B IP Addresses and Subnetting Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 108 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25)
Page 279 You must also enable Network Address Translation (NAT) on the ZyXEL Device. Once you have decided on the network number, pick an IP address for your ZyXEL Device that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 280 Appendix B IP Addresses and Subnetting P-660HN-TxA User’s Guide...
Page 281: Appendix C Pop-Up Windows, Javascripts And Java Permissions
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Page 282 Appendix C Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 151 Internet Options: Privacy Click Apply to save this setting.
Page 283 Appendix C Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 152 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-660HN-TxA User’s Guide...
Page 284 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 153 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 285 Appendix C Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 154 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Page 286: Java Permissions
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 155 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Page 287 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 156 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-660HN-TxA User’s Guide...
Page 288 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 157 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Page 289 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 159 Mozilla Firefox Content Security P-660HN-TxA User’s Guide...
Page 290 Appendix C Pop-up Windows, JavaScripts and Java Permissions P-660HN-TxA User’s Guide...
Page 291: Appendix D Wireless Lans
P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS).
Page 292 Appendix D Wireless LANs with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Figure 161 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network.
Page 293 Appendix D Wireless LANs An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. Figure 162 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data.
Page 294 Appendix D Wireless LANs hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other.
Page 295: Fragmentation Threshold
Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. Note: The wireless devices MUST use the same preamble mode in order to communicate.
Page 296 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. P-660HN-TxA User’s Guide...
Page 297 Appendix D Wireless LANs IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices.
Page 298 Appendix D Wireless LANs • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: •...
Page 299 Appendix D Wireless LANs However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the authentication server may access the password file. In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication.
Page 300: Dynamic Wep Key Exchange
Appendix D Wireless LANs Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. If this feature is enabled, it is not necessary to configure a default encryption key in the wireless security configuration screen.
Page 301 Appendix D Wireless LANs If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not. Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is less secure than WPA or WPA2.
Page 302 Appendix D Wireless LANs keys. This prevent all wireless devices sharing the same encryption keys. (a weakness of WEP) User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network.
Page 303 Appendix D Wireless LANs The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
Page 304: Security Parameters Summary
Appendix D Wireless LANs The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 165 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type.
Page 305: Antenna Characteristics
Appendix D Wireless LANs Antenna Overview An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Positioning the antennas properly increases the range and coverage area of a wireless LAN.
Page 306 Appendix D Wireless LANs • Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points.
Page 307: Appendix E Services
P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. •...
Page 308 A popular videoconferencing solution from White Pines Software. TCP/UDP 24032 TCP/UDP Domain Name Server, a service that matches web names (for instance www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation (IPSEC_TUNNEL) Security Protocol) tunneling protocol uses this service. FINGER...
Page 309 Appendix E Services Table 114 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication TCP/UDP between computers in a LAN. TCP/UDP TCP/UDP NEW-ICQ...
Page 310 Appendix E Services Table 114 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SFTP The Simple File Transfer Protocol is an old way of transferring files between computers. SMTP Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another.
Page 311: Appendix F Legal Information
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice.
Page 312 Appendix F Legal Information • This device must accept any interference received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Page 313: Zyxel Limited Warranty
Canada. Viewing Certifications Go to http://www.zyxel.com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
Page 314 (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.
Page 315: Index
Index Index AP (access point) Numerics application filter applications, NAT 802.1p 175, 176 Asynchronous Transfer Mode, see ATM 802.1Q/1P activation group settings 78, 83 port settings 78, 83 priority 78, 83, 87 78, 83 PVID status tagging frames 166, 169 authentication 122, 124 RADIUS server...
Page 316 Index Command Line Interface, see CLI activation wildcard compatibility, WDS activation configuration Dynamic Host Configuration Protocol, see DHCP backup CWMP dynamic WEP key exchange DHCP DYNDNS wildcard firewalls activation IP alias IP precedence IP/MAC filter logs port forwarding reset EAP Authentication restoring encapsulation 73, 76, 81...
Page 317 Index LAND attack configuration Ping of Death IP/MAC filter status configuration SYN attack structure firmware version forwarding ports 136, 138 activation configuration example client list rules DHCP 90, 93, 98 fragmentation threshold 110, 122, 295 90, 94, 98 21, 185 IGMP 90, 101 IP address...
Page 318 Index 78, 83, 87 MBSSID 78, 83 multicast Pairwise Master Key (PMK) 74, 78, 90, 92, 101 301, 303 IGMPInternet Group Multicast Protocol, see passwords IGMP administrator Multiple BSS, see MBSSID multiplexing 76, 81, 85 78, 83, 86 LLC-based Peak Cell Rate, see PCR VC-based PIN, WPS 116, 117, 128...
Page 319 Index IP precedenceQoS IP precedence IP/MAC filter RADIUS logs message types port forwarding messages static route shared secret key RADIUS server wireless LAN reauthentication, WPA wizard registration shaping traffic 86, 87 product Simple Network Management Protocol, see related documentation SNMP remote management Single User Account, see SUA SIP ALG...
Page 320 Index firmware version passwords VBR-nRT 78, 83, 88 administrator VBR-RT 78, 83, 88 reset status 76, 81, 85 32, 35 firewalls Virtual Channel Identifier, see VCI Virtual Local Area Network, see VLAN Virtual Path Identifier, see VPI wireless LAN VLAN time 802.1P priority activation...
Page 321 Index passwords wireless security Wireless tutorial 107, 125 wizard Wide Area Network, see WAN configuration wireless LAN Wi-Fi Protected Access WLAN WiFi Protected Setup, see WPS interference wireless client WPA supplicants security parameters Wireless Distribution System, see WDS 109, 125, 300 wireless LAN 103, 120 authentication...
Page 322 Index P-660HN-TxA User’s Guide...
Page 323 Index P-660HN-TxA User’s Guide...
Page 324 Index P-660HN-TxA User’s Guide...

This manual is also suitable for:

P-660hn-txa

ZyXEL Communications P-660HNT1 User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 The Web Configurator

Chapter 3 Status Screens

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Internet and Wireless Setup Wizard

Chapter 6 WAN Setup

Chapter 7 LAN Setup

Chapter 8 Wireless LAN

Chapter 9 Network Address Translation (NAT)

Chapter 10 Firewall

Chapter 11 Filters

Chapter 12 Static Route

Chapter 13 Q/1P

Chapter 14 Quality of Service (Qos)

Chapter 15 Dynamic DNS Setup

Chapter 16 Remote Management

Chapter 17 Universal Plug-And-Play (Upnp)

Chapter 18 CWMP

Chapter 19 System Settings

Chapter 20 Logs

Chapter 21 Tools

Chapter 22 Diagnostic

Chapter 23 Troubleshooting

Chapter 24 Product Specifications

Appendix A Setting up Your Computer's IP Address

Appendix B IP Addresses and Subnetting

Appendix C Pop-Up Windows, Javascripts and Java Permissions

Appendix D Wireless Lans

Appendix E Services

Appendix F Legal Information

Index

Quick Links

Related Manuals for ZyXEL Communications P-660HNT1

Summary of Contents for ZyXEL Communications P-660HNT1