About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
Syntax Conventions • The P-791R v2 may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 5
Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router...
Safety Warnings Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 7
Safety Warnings This product is recyclable. Dispose of it properly. P-791R v2 User’s Guide...
Contents Overview Contents Overview Introduction, Wizards and Tutorials ..................31 Getting To Know Your ZyXEL Device ..................33 Introducing the Web Configurator ....................37 Wizard Setup for Internet Access ....................47 Point-to-point Configuration ....................... 55 Network Setup ........................59 WAN Setup ..........................61 LAN Setup ..........................
Page 10
Contents Overview System Password ........................229 System Information & Diagnosis ..................... 231 Firmware and Configuration File Maintenance ................ 241 Menus 24.8 to 24.11 ........................ 255 IP Routing Policy Setup ......................261 Schedule Setup ........................269 Troubleshooting ........................273 Appendices and Index ......................279 P-791R v2 User’s Guide...
1.1.1 High-speed Internet Access ..................33 1.1.2 High-speed Point-to-point Connections ..............33 1.2 Ways to Manage the ZyXEL Device ..................34 1.3 Good Habits for Managing the ZyXEL Device ..............34 1.4 LEDs ............................ 35 Chapter 2 Introducing the Web Configurator ..................37 2.1 Web Configurator Overview ....................
Page 12
5.9.2 Advanced Modem Settings for Dial Backup .............. 80 Chapter 6 LAN Setup..........................83 6.1 LAN Overview ........................83 6.1.1 LANs, WANs and the ZyXEL Device ................83 6.1.2 DHCP Setup ....................... 84 6.1.3 DNS Server Address ....................84 6.1.4 DNS Server Address Assignment ................84...
Page 13
Table of Contents 6.2 LAN TCP/IP ......................... 85 6.2.1 IP Address and Subnet Mask ..................85 6.2.2 RIP Setup ........................86 6.2.3 Multicast ........................87 6.3 Configuring LAN IP ......................87 6.3.1 Configuring Advanced LAN Setup ................88 6.4 DHCP Setup ........................89 6.5 LAN Client List ........................
Page 14
12.1.1 How do I know if I'm using UPnP? ................. 129 12.1.2 NAT Traversal ......................129 12.1.3 Cautions with UPnP ....................129 12.2 UPnP and ZyXEL ......................130 12.2.1 Configuring UPnP ....................130 12.3 Installing UPnP in Windows Example ................131 12.4 Using UPnP in Windows XP Example ................
Page 15
Table of Contents 13.1 General Setup ......................... 143 13.1.1 General Setup and System Name ................. 143 13.1.2 General Setup ....................... 143 13.2 Time Setting ........................145 Chapter 14 Logs ............................149 14.1 Logs Overview ........................ 149 14.1.1 Alerts and Logs ...................... 149 14.2 Viewing the Logs ......................
Page 16
Table of Contents 19.3 Dial Backup Interface ...................... 175 19.4 Configuring Dial Backup in Menu 2 ................. 175 19.5 Advanced Dial Backup Setup ..................176 Chapter 20 LAN Setup..........................179 20.1 Accessing the LAN Menus ....................179 20.2 LAN Port Filter Setup ....................... 179 20.3 TCP/IP and DHCP Setup Menu ..................
Page 17
Chapter 25 Filter Configuration....................... 213 25.1 Introduction to Filters ....................... 213 25.1.1 The Filter Structure of the ZyXEL Device ............... 214 25.2 Configuring a Filter Set ....................215 25.2.1 Configuring a Filter Rule ..................217 25.2.2 Configuring a TCP/IP Filter Rule ................217 25.2.3 Configuring a Generic Filter Rule ................
Page 18
Table of Contents 29.3.6 Backup Configuration Using TFTP ................. 244 29.3.7 TFTP Command Example ..................245 29.3.8 GUI-based TFTP Clients ..................245 29.3.9 Backup Via Console Port ..................245 29.4 Restore Configuration ...................... 246 29.4.1 Restore Using FTP ....................247 29.4.2 Restore Using FTP Session Example ..............
Page 19
33.1 Power, Hardware Connections, and LEDs ..............273 33.2 ZyXEL Device Access and Login ..................274 33.3 Internet Access ........................ 276 33.4 Reset the ZyXEL Device to Its Factory Defaults .............. 277 Part VII: Appendices and Index ............279 Appendix A Product Specifications..................281 Appendix B Setting up Your Computer’s IP Address............
Page 20
Table of Contents P-791R v2 User’s Guide...
List of Figures List of Figures Figure 1 High-speed Internet Access with Your ZyXEL Device .............. 33 Figure 2 Point-to-point Connections with Your ZyXEL Device ..............34 Figure 3 LEDs ............................35 Figure 4 Login Screen ..........................38 Figure 5 Change Password at Login ...................... 38 Figure 6 Select a Mode ..........................
Page 22
List of Figures Figure 39 LAN > IP Alias ........................92 Figure 40 How NAT Works ........................94 Figure 41 NAT Application With IP Alias ....................95 Figure 42 NAT > General ........................97 Figure 43 Multiple Servers Behind NAT Example .................. 99 Figure 44 NAT >...
Page 24
List of Figures Figure 125 NAT Example 2 ........................207 Figure 126 Menu 15.2: Specifying an Inside Server ................208 Figure 127 NAT Example 3 ........................208 Figure 128 Example 3: Menu 11.3 ......................209 Figure 129 Example 3: Menu 15.1.1.1 ....................209 Figure 130 Example 3: Final Menu 15.1.1 ....................
Page 25
List of Figures Figure 168 System Maintenance: Starting Xmodem Download Screen ..........248 Figure 169 Restore Configuration Example ..................248 Figure 170 Successful Restoration Confirmation Screen ..............248 Figure 171 Menu 24.7.1: System Maintenance - Upload System Firmware ........249 Figure 172 Menu 24.7.2: System Maintenance - Upload System Configuration File ......
Page 26
List of Figures Figure 211 Red Hat 9.0: KDE: Network Configuration: DNS ............... 300 Figure 212 Red Hat 9.0: KDE: Network Configuration: Activate ............300 Figure 213 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 ..........301 Figure 214 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 ...........
List of Tables List of Tables Table 1 LEDs ............................35 Table 2 Web Configurator Screens Summary ..................40 Table 3 Status ............................42 Table 4 Status > Packet Statistics ......................44 Table 5 Internet Access Wizard Setup: ISP Parameters ............... 48 Table 6 Internet Connection with PPPoE ....................
Page 28
List of Tables Table 39 Remote MGMT > SNMP ....................... 125 Table 40 Remote MGMT > DNS ......................126 Table 41 Remote MGMT > ICMP ......................127 Table 42 UPnP > General ........................130 Table 43 System > General ......................... 144 Table 44 System >...
Page 29
List of Tables Table 82 Menu 24.2.1: System Maintenance - Information ..............234 Table 83 Menu 24.3.2: System Maintenance - UNIX Syslog ............... 236 Table 84 Menu 24.4: System Maintenance - Diagnostic ..............239 Table 85 Filename Conventions ......................242 Table 86 General Commands for GUI-based FTP Clients ..............
Introduction, Wizards and Tutorials Getting To Know Your ZyXEL Device (33) Introducing the Web Configurator (37) Wizard Setup for Internet Access (47) Point-to-point Configuration (55)
ETHERNET port. (See the Quick Start Guide for detailed instructions about hardware connections.) Next, set up the ZyXEL Device as a router or as a bridge, depending on the desired configuration. As a router, the ZyXEL Device provides security and networking functionality.
119. 1.3 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
If you forget your password, you will have to reset the ZyXEL Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the ZyXEL Device.
Page 36
ZyXEL Device is sending/receiving data.) Blinking The ZyXEL Device is sending/receiving data. The ZyXEL Device tried to get an IP address, but an error occurred. The Internet connection is down. P-791R v2 User’s Guide...
See the chapter on troubleshooting if you need to make sure these functions are allowed in Internet Explorer. 2.2 Accessing the Web Configurator 1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). 2 Prepare your computer/computer network to connect to the ZyXEL Device (refer to the Quick Start Guide).
Chapter 2 Introducing the Web Configurator Figure 4 Login Screen 6 If you entered the user password, the Status screen appears. See Section 2.4 on page If you entered the admin password, the following screen appears. Figure 5 Change Password at Login It is highly recommended you change the default admin password.
Go to Advanced setup, and click Apply to display the Status screen. Select Click here to always start with the Advanced setup if you want the ZyXEL Device to skip this screen from now on and always go to the Status screen. See Section 2.4 on page...
ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment. Logout Click this icon to exit the web configurator. Status Use this screen to look at the ZyXEL Device’s general device, system and interface status information. You can also access the summary statistics tables. Network Internet...
Page 41
This screen contains administrative and system-related information and also allows you to change your password. Time Setting Use this screen to change your ZyXEL Device’s time and date. Logs View Log Use this screen to view the logs for the categories that you selected.
Click this button to refresh the status screen statistics. Device Information Host Name This is the System Name you enter in the Maintenance > System > General screen. It is for identification purposes. Model Number This is the model name of the ZyXEL Device. P-791R v2 User’s Guide...
Page 43
This number shows how many kilobytes of the heap memory the ZyXEL Device is using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL Network Operating System) and is thus available for running processes like NAT.
WAN Port Statistics Link Status This is the status of your WAN link. WAN IP Address This is the IP address assigned to your ZyXEL Device on the WAN. Upstream Speed This is the upstream speed of your ZyXEL Device. Downstream Speed This is the downstream speed of your ZyXEL Device.
If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the ZyXEL Device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
Page 46
Chapter 2 Introducing the Web Configurator P-791R v2 User’s Guide...
H A P T E R Wizard Setup for Internet Access This chapter provides information on the Wizard Setup screens for Internet access in the web configurator. 3.1 Introduction Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP.
Chapter 3 Wizard Setup for Internet Access Figure 11 Wizard: Welcome 3 Type the Internet access information given to you by your ISP exactly in the wizard screen. If not given, leave the fields set to the default. Figure 12 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen.
Type the name of your PPPoE service here. Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes to the ZyXEL Device. Exit Click Exit to close the wizard screen without saving your changes. P-791R v2 User’s Guide...
Chapter 3 Wizard Setup for Internet Access Figure 14 Internet Connection with RFC 1483 The following table describes the fields in this screen. Table 7 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. Type your ISP assigned IP address in this field.
Back Click Back to go back to the previous wizard screen. Apply Click Apply to save your changes to the ZyXEL Device. Exit Click Exit to close the wizard screen without saving your changes. Figure 16 Internet Connection with PPPoA The following table describes the fields in this screen.
Chapter 3 Wizard Setup for Internet Access Figure 17 Connection Test Failed-1 • If the following screen displays, check if your account is activated or click Restart the Internet Setup Wizard to verify your Internet access settings. Figure 18 Connection Test Failed-2. When you are finished with the Internet Setup Wizard the following screen displays your configuration details.
Page 53
Chapter 3 Wizard Setup for Internet Access P-791R v2 User’s Guide...
Page 54
Chapter 3 Wizard Setup for Internet Access P-791R v2 User’s Guide...
An example is shown below. Figure 20 Example: Point-to-point Connections In a point-to-point connection, the DSL ports on the ZyXEL Devices are directly connected to each other, not to an ISP or the Internet. A point-to-point connection can use RFC 1483 in bridge mode or ENET ENCAP in router mode.
Chapter 4 Point-to-point Configuration To establish a point-to-point connection, one of the ZyXEL Devices becomes the server (instead of the ISP). The server controls some of the attributes of the DSL connection, such as the transfer rate and the DSL operational mode. Otherwise, there is no difference between the server and the client.
7 Click Apply. 4.2.3 Connect the ZyXEL Devices Connect the DSL ports on the ZyXEL Devices together, and wait while the ZyXEL Devices automatically establish the connection. When the connection is established, the DSL and INTERNET lights are on. It takes up to half a minute to establish the connection. If the ZyXEL Devices do not establish the connection, verify that the settings (except the Service Type) match.
5.1 WAN Overview A WAN (Wide Area Network) is an outside connection to another network or the Internet. 5.1.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods. 5.1.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol.
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection. The ZyXEL Device encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (DSL Access Multiplexer).
The ZyXEL Device does two things when you specify a nailed-up connection. The first is that idle timeout is disabled. The second is that the ZyXEL Device will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons.
"2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect route also fails.
An example application is background file transfer. 5.4 Internet Connection To change your ZyXEL Device’s WAN remote node settings, click Network > WAN > Internet Connection. The screen differs by the encapsulation. Section 5.1 on page 61 for more information.
Chapter 5 WAN Setup Figure 23 WAN > Internet Connection The following table describes the labels in this screen. Table 10 WAN > Internet Connection LABEL DESCRIPTION General Name Enter the name of your Internet Service Provider, for example “MyISP”. This information is for descriptive purposes only.
Page 67
This field is enabled if Service Type is Server. Indicate whether or not the Adaption ZyXEL Device can adjust the speed of its connection to that of the other device. Transfer Max Rate This field is enabled if Service Type is Server. Set the maximum rate at which (Kbps) the ZyXEL Device sends and receives information.
WAN setup. 5.4.1 Configuring Advanced Internet Connection Use this screen to edit your ZyXEL Device's advanced settings for Internet connections. Click the Advanced Setup button in the Internet Connection screen. The screen appears as shown. Figure 24 WAN > Internet Connection > Advanced Setup The following table describes the labels in this screen.
Passthrough to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the ZyXEL Device. Each host can have a separate account and a public WAN IP address.
Chapter 5 WAN Setup Figure 25 WAN > More Connections The following table describes the labels in this screen. Table 12 WAN > More Connections LABEL DESCRIPTION This is the index number of a connection. Active This display whether this connection is activated. Clear the check box to disable the connection.
Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge, the ZyXEL Device will forward any packet that it does not route to this remote node; otherwise, the packets are discarded.
Nailed-Up Select Nailed-Up Connection when you want your connection up all the time. Connection The ZyXEL Device will try to bring up the connection automatically if it is disconnected. Connect on Select Connect on Demand when you don't want the connection up all the time Demand and specify an idle time-out in the Max Idle Timeout field.
This field is enabled if RIP Direction is not None. The RIP Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information.
LAN. Use IP alias to configure the LAN into two or three logical networks with the ZyXEL Device itself as the gateway for each LAN network. Put the protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in another subnet (Subnet 2).
Internet access via a modem. Connect the RJ-45 connector of the console cable to the CON/AUX port of the ZyXEL Device and the other end to a serial port (COM1, COM2 or other COM port) on your modem.
Select the method that the ZyXEL Device uses to check the DSL connection. Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses configured in the Check WAN IP Address fields.
Click Cancel to begin configuring this screen afresh. 5.9.1 Advanced Backup Setup Use this screen to change your ZyXEL Device’s advanced dial backup settings. Click WAN > WAN Backup Setup > Advanced Setup. The screen appears as shown. P-791R v2 User’s Guide...
Use the drop-down list box to select an authentication protocol for outgoing calls. Type Options are: CHAP/PAP - Your ZyXEL Device accepts either CHAP or PAP when requested by this remote node. CHAP - Your ZyXEL Device accepts CHAP only.
Page 79
Select this if you want to enable RIP in the dial-backup connection. RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers. Clear this if you want the ZyXEL Deviceto not send any RIP packets and to ignore any RIP packets received.
Click Cancel to begin configuring this screen afresh. 5.9.2 Advanced Modem Settings for Dial Backup Use this screen to change your ZyXEL Device’s modem settings for dial backup. Click WAN > WAN Backup Setup > Advanced Setup > Edit. The screen appears as shown.
Page 81
Call Control Dial Timeout Enter a number of seconds for the ZyXEL Device to keep trying to set up an outgoing call before timing out (stopping). The ZyXEL Device times out and stops if it cannot set up an outgoing call within the timeout value.
Page 82
Chapter 5 WAN Setup P-791R v2 User’s Guide...
6.1.1 LANs, WANs and the ZyXEL Device The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
If the Primary and Secondary DNS Server fields in the DHCP Setup screen are not specified, for instance, left as 0.0.0.0, the ZyXEL Device tells the DHCP clients that it itself is the DNS server. When a computer sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.
If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. • The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server fields are left as 0.0.0.0 in the DHCP Setup screen.
• Both - the ZyXEL Device will broadcast its routing table periodically and incorporate the RIP information that it receives. • In Only - the ZyXEL Device will not send any RIP packets but will accept all RIP packets received.
(LAN; WAN). Select None to disable IP multicasting on these interfaces. 6.3 Configuring LAN IP Use this screen to set the LAN IP address of your ZyXEL Device. Click LAN > IP. See Section 6.1 on page 83 for background information.
Chapter 6 LAN Setup 6.3.1 Configuring Advanced LAN Setup Use this screen to edit your ZyXEL Device's advanced LAN settings. Click the Advanced Setup button in the LAN IP screen. The screen appears as shown. Figure 35 LAN > IP > Advanced Setup The following table describes the labels in this screen.
Address contiguous addresses in the IP address pool. Pool Size This field is enabled if the ZyXEL Device is a Server. Enter the size of, or the number of addresses in, the IP address pool. Remote DHCP This field is enabled if the ZyXEL Device is a Relay. Enter the IP address of the Server DHCP server to which the ZyXEL Device should route requests.
DHCP clients along with the IP address and the subnet mask. If the fields are left as 0.0.0.0, the ZyXEL Device acts as a DNS proxy and forwards the DHCP client’s DNS query to the real DNS server learned through IPCP and relays the response back to the computer.
IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN network.
This field is enabled if RIP Direction is not None. The RIP Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information.
IP address known within another network. 7.1.1 NAT Definitions Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
7.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: • One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. • Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to one global IP address.
When the ZyXEL Device registers with the SIP register server, the SIP ALG translates the ZyXEL Device’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if your ZyXEL Device is behind a SIP ALG. P-791R v2 User’s Guide...
Address Translation (NAT) SUA Only Select this radio button if you have just one public WAN IP address for your ZyXEL Device. Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL Device.
If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
NAT > General screen or when you edit a server mapping set with Full Feature NAT. If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
The Address Mapping screen is available only when you select Full Feature in the NAT > General screen. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify. When a rule matches the current packet, the ZyXEL Device takes the corresponding action and the remaining rules are ignored.
One-to-one NAT mapping type. M-1: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (in other words PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only.
Many-to-One: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (in other words PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only. Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP addresses to shared global IP addresses.
This chapter shows how to configure Internet security filters on your ZyXEL Device. 8.1 Configuring Filter The ZyXEL Device can use predefined filters to stop packets of specified types from passing from the WAN to the LAN. If you want to enable remote management of the ZyXEL Device from the WAN, ensure that the settings in this screen allow packets of the relevant type to pass from the WAN.
Page 108
Select this to stop all HTTP traffic passing from the WAN to the LAN. SNMP Select this to stop all SNMP traffic passing from the WAN to the ZyXEL Device. SNMP traffic from the LAN can still access the ZyXEL Device. Ping Select this to stop all ICMP Echo traffic passing from the WAN to the LAN.
ZyXEL Device about the networks beyond the remote nodes. Figure 49 Example of Static Routing Topology 9.2 Configuring Static Route Use this screen to look at static routes in the ZyXEL Device. Click Advanced > Static Route to open the Static Route screen. P-791R v2 User’s Guide...
Click the edit icon to go to the screen where you can set up a static route on the ZyXEL Device. Click the delete icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route.
Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-791R v2 User’s Guide...
Section 10.2 on page 115 for configuration instruction. 10.2 Configuring Dynamic DNS Use this screen to change your ZyXEL Device’s DDNS settings. Click Advanced > Dynamic DNS. The screen appears as shown. Section 10.1 on page 115 for more information.
Select this option to update the IP address of the host name(s) to the WAN IP Address address. Dynamic DNS Select this option only when there are one or more NAT routers between the ZyXEL server auto Device and the DDNS server. This feature has the DDNS server automatically detect IP detect and use the IP address of the NAT router that has a public IP address.
Page 117
Type the IP address of the host name(s). Use this if you have a static IP address. Address Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-791R v2 User’s Guide...
To disable remote management of a service, select Disable in the corresponding Access Status field. You may only have one remote management session running at a time. The ZyXEL Device automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts.
• Use the ZyXEL Device’s LAN IP address when configuring from the LAN. 11.1.3 System Timeout There is a system management idle timeout. The ZyXEL Device automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling.
11.4 Configuring Telnet Section 11.1 on page 119 for background information. Use this screen to configure Telnet access to the ZyXEL Device. Click Advanced > Remote MGMT > Telnet tab to display the screen as shown. Figure 55 Remote MGMT > Telnet The following table describes the labels in this screen.
Section 11.1 on page 119 for background information. Use this screen to control FTP access to the ZyXEL Device. To change your ZyXEL Device’s FTP settings, click Advanced > Remote MGMT > FTP tab. The screen appears as shown. Figure 56 Remote MGMT > FTP The following table describes the labels in this screen.
An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the ZyXEL Device). An agent translates the local management information from the managed device into a form compatible with SNMP.
Chapter 11 Remote Management Configuration 11.6.1 Supported MIBs The ZyXEL Device supports MIB II that is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance. 11.6.2 SNMP Traps...
A secured client is a “trusted” computer that is allowed to communicate with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Click Advanced > Remote MGMT > DNS. The screen appears as shown. Use this screen to set from which IP address the ZyXEL Device will accept DNS queries and on which interface it can send them your ZyXEL Device’s DNS settings.
Respond to Ping The ZyXEL Device will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise, select LAN & WAN to reply to both incoming LAN and WAN Ping requests.
H A P T E R Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configurator. 12.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
See the following sections for examples of installing and using UPnP. 12.2.1 Configuring UPnP Use this screen to set up UPnP in the ZyXEL Device. Click Advanced > UPnP to display the screen shown next. Section 12.1 on page 129 for more information.
Chapter 12 Universal Plug-and-Play (UPnP) 12.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. 1 Click Start and Control Panel.
Chapter 12 Universal Plug-and-Play (UPnP) Figure 63 Add/Remove Programs: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. 1 Click Start and Control Panel.
Chapter 12 Universal Plug-and-Play (UPnP) Figure 65 Windows Optional Networking Components Wizard 5 In the Networking Services window, select the Universal Plug and Play check box. Figure 66 Networking Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next.
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL Device. Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device.
Chapter 12 Universal Plug-and-Play (UPnP) Figure 68 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 69 Internet Connection Properties: Advanced Settings P-791R v2 User’s Guide...
Chapter 12 Universal Plug-and-Play (UPnP) Figure 70 Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray.
Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device.
Figure 73 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. P-791R v2 User’s Guide...
Chapter 12 Universal Plug-and-Play (UPnP) Figure 74 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 75 Network Connections: My Network Places: Properties: Example...
The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name), the domain name can be assigned from the ZyXEL Device via DHCP.
Password User Password If you log in with the user password, you can only view the ZyXEL Device status. The default user password is user. New Password Type your new system password (up to 30 characters). Note that as you type a password, the screen displays a (*) for each character you type.
13.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Figure 77 System > Time Setting The following table describes the fields in this screen.
Page 146
When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the ZyXEL Device get the time and date from the Server time server you specified below.
Page 147
In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh.
Page 148
Chapter 13 System P-791R v2 User’s Guide...
The web configurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then display the logs or have the ZyXEL Device send them to an administrator (as e-mail) or to a syslog server.
Use the Log Settings screen to configure where the ZyXEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL Device is to record. See Section 14.1 on page 149 for more information.
ZyXEL Device sends. Not all ZyXEL Device models have this field. Send Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail.
Page 152
Enter the time of the day in 24-hour format (for example 23:00 equals 11:00 pm) to Sending Log send the logs. Clear log after Select the check box to delete all the logs after the ZyXEL Device sends an E-mail sending mail of the logs. Syslog Logging The ZyXEL Device sends a log to an external syslog server.
ZyXEL Device. 15.1 Firmware Upgrade Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, “ZyXEL Device.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Note: Do not turn off the device while firmware upload is in progress. Do NOT turn off the ZyXEL Device while firmware upload is in progress! After you see the Firmware Upload in Progress screen, wait two minutes before logging into the ZyXEL Device again.
Figure 83 Error Message 15.2 Configuration Use this screen to back up or restore the configuration of the ZyXEL Device. You can also use this screen to reset the ZyXEL Device to the factory default settings. To access this screen, click Maintenance >...
If the ZyXEL Device’s IP address is different in the configuration file you selected, you may need to change the IP address of your computer to be in the same subnet as that of the ZyXEL Device. See your Quick Start Guide or the appendices for details on how to set up your computer’s IP address.
15.3 Restart System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 88 Tools > Restart...
H A P T E R Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 16.1 General Diagnostic Use this screen to ping a computer on the network. Click Maintenance > Diagnostic to open the screen shown next.
Chapter 16 Diagnostic Figure 90 Diagnostic > DSL Line The following table describes the fields in this screen. Table 50 Diagnostic > DSL Line LABEL DESCRIPTION ATM Status Click this button to view ATM status. Capture All Logs Click this button to display all logs generated by the DSL line. DSL Line Status Click this button to view the DSL port’s line operating values and line bit allocation.
SMT and Troubleshooting Introducing the SMT (163) General Setup (169) WAN Setup (173) LAN Setup (179) Internet Access Setup (183) Remote Node Setup (185) Static Route Setup (195) NAT Setup (199) Filter Configuration (213) SNMP Configuration (227) System Password (229) System Information &...
Connect the RJ-45 connector of the console cable to the CON/AUX port of the ZyXEL Device and the other end to a serial port (COM1, COM2 or other COM port) on your computer. Your computer must have a terminal emulation communications program (such as HyperTerminal) set to VT100 terminal emulation, no parity, 8 data bits, 1 stop bit, no flow control and 9600 b/s port speed.
ZyXEL Device will automatically log you out. You will then have to telnet into the ZyXEL Device again. You can use the web configurator or the CI commands (menu 24.8) to change the inactivity timeout period.
Chapter 17 Introducing the SMT Table 51 Main Menu Summary MENU FUNCTION 22 SNMP Configuration Use this menu to configure SNMP. 23 System Password Use this menu to change your password. 24 System Maintenance Use this menu for comprehensive system maintenance, from looking at the system status to uploading firmware.
Chapter 17 Introducing the SMT Table 52 SMT Menus Overview (continued) MENUS SUB MENUS 24 System Maintenance 24.1 System Maintenance - System Status 24.2 System Information and 24.2.1 System Maintenance - Console Port Speed Information 24.2.2 System Maintenance - Change Console Port Speed 24.3 System Maintenance - 24.3.1 View Error Log Log and Trace...
Page 167
Chapter 17 Introducing the SMT Table 53 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move the cursor [ENTER] or [UP]/ Within a menu, press [ENTER] to move to the next field. [DOWN] arrow You can also use the [UP]/[DOWN] arrow keys to move to keys.
Spaces are not allowed, but dashes “-” and underscores "_" are accepted. Location Enter a descriptive name for the place where the ZyXEL Device is located. You can enter up to 31 characters, or you can leave this field blank. Contact Enter the name of the person to contact for questions about the ZyXEL Device.
Bridge If Route IP is Yes, select Yes in this field to enable bridging in the ZyXEL Device for protocols that are not supported by IP-based routing (for example, SNA). If Route IP is No, select Yes in this field to enable bridging in the ZyXEL Device for all protocols.
IP Address of the host name(s) to the IP address specified below. Only select Yes if the ZyXEL Device uses or is behind a static public IP address. Use IP Enter the static public IP address if you select Yes in the Use Specified IP Address Address field.
Page 172
Chapter 18 General Setup P-791R v2 User’s Guide...
Service Type Press [SPACE BAR] to indicate whether the ZyXEL Device is the server or the client in the DSL connection. Select Server if this ZyXEL Device is the server in a point-to- point application. (See Chapter 4 on page 55.) Otherwise, select Client.
Page 174
Select the method that the ZyXEL Device uses to check the DSL connection. Mechanism Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is up. Select ICMP to have the ZyXEL Device periodically ping the IP addresses configured in the Check WAN IP Address fields.
Use this field to turn the traffic redirect feature on (Yes) or off (No). Configuration Backup Type the IP address of your backup gateway in dotted decimal notation. The ZyXEL Gateway IP Device automatically forwards traffic to this IP address if the ZyXEL Device's Internet Address connection terminates.
Chapter 19 WAN Setup Figure 97 Menu 2.2: Dial Backup Setup Menu 2.2 - Dial Backup Setup Dial-Backup: Active= No Port Speed= 115200 AT Command String: Init= at&fs0=0 Edit Advanced Setup= No The following table describes the fields in this menu. Table 58 Menu 2.2: Dial Backup Setup FIELD DESCRIPTION...
Call Control Dial Timeout (sec) Enter a number of seconds for the ZyXEL Device to keep trying to set up an outgoing call before timing out (stopping). The ZyXEL Device times out and stops if it cannot set up an outgoing call within the timeout value.
Page 178
Chapter 19 WAN Setup P-791R v2 User’s Guide...
H A P T E R LAN Setup Use this to apply LAN filters, configure LAN DHCP and TCP/IP settings, and to activate or deactivate VLAN on each LAN port. 20.1 Accessing the LAN Menus From the main menu, enter 3 to open Menu 3 - LAN Setup. Figure 99 Menu 3: LAN Setup Menu 3 - LAN Setup 1.
DHCP This field enables/disables the DHCP server. If set to Server, your ZyXEL Device will act as a DHCP server. You should configure the rest of the fields in this section except for Remote DHCP Server. If set to Relay, the ZyXEL Device acts as a surrogate DHCP server and relays requests and responses between the remote server and the clients.
Device's LAN IP address displays in the IP Address field below (read-only). The ZyXEL Device tells the DHCP clients on the LAN that the ZyXEL Device itself is the DNS server. When a computer on the LAN sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the ZyXEL Device's system DNS server (configured in menu 1) and relays the response back to the computer.
Enter the IP address of your ZyXEL Device in dotted decimal notation. IP Subnet Mask Your ZyXEL Device will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the ZyXEL Device.
Use this menu to configure your Internet connection. Use information from your ISP along with the instructions in this chapter to set up your ZyXEL Device to access the Internet. Contact your ISP to determine what encapsulation type you should use.
Page 184
Chapter 21 Internet Access Setup Table 62 Menu 4: Internet Access Setup (continued) FIELD DESCRIPTION The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. ATM QoS Type Select CBR (Constant Bit Rate) to specify fixed (always-on) bandwidth for voice or data traffic.
H A P T E R Remote Node Setup Use this menu to configure detailed remote node settings (for example, your ISP is a remote node) as well as apply filters. 22.1 Introduction to Remote Node Setup A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection.
This section is only enabled for PPPoA or PPPoE connections. Rem Login Type the login name that this remote node will use to call your ZyXEL Device. The login name and the Rem Password will be used to authenticate this node.
Page 187
With Period, you can set a limit on the total outgoing call time of the ZyXEL Device within a certain period of time. When the total outgoing call time exceeds the limit, the current call will be dropped and any future outgoing calls will be blocked.
Enter the password again. Authen This field appears if you select PPPoE in the Encapsulation field. Select what type of authentication your ISP uses. Select CHAP/PAP if you want the ZyXEL Device to support both choices. Pri Phone # Type the phone number(s) for this remote node. If the Primary Phone number...
With Period, you can set a limit on the total outgoing call time of the ZyXEL Device within a certain period of time. When the total outgoing call time exceeds the limit, the current call will be dropped and any future outgoing calls will be blocked.
"cost". Private This field is related to RIP. This field determines whether or not the ZyXEL Device includes the route to this remote node in its RIP broadcasts. If you select Yes, this route is not included in RIP broadcast. If you select No, the route to this remote node is propagated to other hosts through RIP broadcasts.
Use this menu to specify the filter set(s) to apply to the incoming and outgoing traffic between this remote node and the ZyXEL Device to prevent certain packets from triggering calls. You can specify up to 4 filter sets separated by commas, for example, 1, 5, 9, 12, in each filter field.
Chapter 22 Remote Node Setup The following table describes the labels in this menu. Table 66 Menu 11.5: Remote Node Filter FIELD DESCRIPTION Input Filter Sets protocol filters Enter up to four filter sets. If you enter more than one, separate each one with a comma ( , ).
Passthrough to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the ZyXEL Device. Each host can have a separate account and a public WAN IP address.
H A P T E R Static Route Setup Use this menu to configure IP and bridge (MAC) static routes. 23.1 IP Static Route Setup Enter 1 from the menu 12. Select one of the IP static routes as shown next to configure IP static routes in menu 12.1.
ZyXEL Device; over the WAN, the gateway must be the IP address of one of the remote nodes. Metric Enter a number from 1 to 15 to set this route’s priority among the ZyXEL Device’s routes (see Section 5.2 on page 63).
ZyXEL Device that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your ZyXEL Device; over the WAN, the gateway must be the IP address of one of the remote nodes.
Section 24.2.1 on page 201 for a detailed description of the NAT set for SUA. The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types.
Section 24.2.1 on page 201). Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device. 24.2 NAT Setup Use the address mapping sets menus and submenus to create the mapping table used to assign global addresses to computers on the LAN and the DMZ.
Chapter 24 NAT Setup Figure 118 Menu 15.1: Address Mapping Sets Menu 15.1 - Address Mapping Sets 1. ACL Default Set 255. SUA (read only) Select the address mapping set you want to modify. The fields in address 255 are used for SUA and are read-only.
Confirm…” to save your configuration, or press [ESC] to cancel. Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify. When a rule matches the current packet, the ZyXEL Device takes the corresponding action and the remaining rules are ignored.
Confirm…” to save your configuration, or press [ESC] to cancel. 24.3 Configuring a Server behind NAT If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup.
1 Enter 15 in the main menu to go to Menu 15 - NAT Setup. 2 Enter 2 to open menu 15.2 (and configure the address mapping rules for the WAN port on a ZyXEL Device with a single WAN port). Figure 121 Menu 15.2: NAT Server Sets Menu 15.2 - NAT Server Sets...
Rule This field is a sequential value, and it is not associated with a specific rule. The sequence is important, however. The ZyXEL Device checks each active rule in order, and it only follows the first one that applies. Start Port This field displays the beginning of the range of port numbers forwarded by this rule.
Chapter 24 NAT Setup Figure 126 Menu 15.2: Specifying an Inside Server Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 192.168.1.10 192.168.1.33 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 24.4.3 Example 3: Multiple Public IP Addresses With Inside Servers...
Chapter 24 NAT Setup 1 In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in menu 4 or menu 11.3) in Figure 128 on page 209.
1 Enter 15 from the main menu. 2 Enter 2 to go to menu 15.2. 3 (Enter 1 or 2 from menu 15.2 on a ZyXEL Device with multiple WAN ports) configure the menu as shown in Figure 131 on page 210.
Chapter 24 NAT Setup 24.4.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation. In this case it is better to use Many-One-to-One mapping as port numbers do not change for Many-One-to-One (and One-to-One) NAT mapping types.
Chapter 24 NAT Setup Figure 134 Example 4: Menu 15.1.1: Address Mapping Rules Menu 15.1.1 - Address Mapping Rules Set Name= Example4 Local Start IP Local End IP Global Start IP Global End IP Type --------------- --------------- --------------- --------------- -- 1.
This chapter shows you how to create and apply filters. 25.1 Introduction to Filters Your ZyXEL Device uses filters to decide whether to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later.
A filter set consists of one or more filter rules. Usually, you would group related rules, for example all the rules for NetBIOS, into a single set and give it a descriptive name. The ZyXEL Device allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system.
24 rules active for a single port. 25.2 Configuring a Filter Set The ZyXEL Device includes filtering for NetBIOS over TCP/IP packets by default. To configure another filter set, follow the procedure below. P-791R v2 User’s Guide...
Chapter 25 Filter Configuration 1 Enter 21 in the main menu to open menu 21. Figure 137 Menu 21: Filter Set Configuration Menu 21 - Filter Set Configuration Filter Filter Set # Comments Set # Comments ------ ----------------- ------ ----------------- NetBIOS_WAN _______________ NetBIOS_LAN...
Chapter 25 Filter Configuration To configure TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [ENTER] to open Menu 21.x.x - TCP/IP Filter Rule. Menu 122.1.1 is shown next as an example. Figure 139 Menu 21.1.1: TCP/IP Filter Rule Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule...
Page 219
Chapter 25 Filter Configuration Table 77 Menu 21.1.1: TCP/IP Filter Rule FIELD DESCRIPTION Port # Comp Press [SPACE BAR] and then [ENTER] to select the comparison to apply to the source port in the packet against the value given in Source: Port #. Options are None, Equal, Not Equal, Less and Greater.
Chapter 25 Filter Configuration Figure 140 Executing an IP Filter 25.2.3 Configuring a Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. P-791R v2 User’s Guide...
Chapter 25 Filter Configuration For generic rules, the ZyXEL Device treats a packet as a byte stream as opposed to an IP or IPX packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
Menu 21.1 - Filter Rules Summary. 25.3 Example Filter Let’s look at an example to block outside users from accessing the ZyXEL Device via telnet. Please see our included disk for more example filters. Figure 142 Telnet Filter Example 1 Enter 21 from the main menu to open Menu 21 - Filter Set Configuration.
Chapter 25 Filter Configuration Figure 143 Example Filter: Menu 21.1.1 Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 23 Port # Comp= Equal Source: IP Addr= 0.0.0.0...
NAT for incoming packets. On the other hand, the generic, or device filters are applied to the raw packets that appear on the wire. They are applied at the point when the ZyXEL Device is receiving and sending the packets; in other words the interface. The interface can be an Ethernet port or any other hardware port.
You can cascade up to four filter sets by entering their numbers separated by commas. The ZyXEL Device already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, FTP and HTTP connections.
Trusted Host If you enter a trusted host, your ZyXEL Device will only respond to SNMP messages from this address. A blank (default) field means your ZyXEL Device will respond to all SNMP messages it receives, regardless of source.
The following table describes the labels in this menu. Table 80 Menu 23: System Password FIELD DESCRIPTION Old Password Enter the current administrator password for the ZyXEL Device. New Password Enter the new administrator password for the ZyXEL Device. Retype to confirm Enter the new administrator password again.
Page 230
Chapter 27 System Password P-791R v2 User’s Guide...
System Status is a tool that can be used to monitor your ZyXEL Device. Specifically, it gives you information on your system firmware version, number of packets sent and number of packets received.
Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop (dropping a call) if you're using PPPoE encapsulation. It displays N/A if the port is not connected. TxPkts This is the number of packets transmitted from the ZyXEL Device to the remote node. RxPkts This is the number of packets received by the ZyXEL Device from the remote node.
Chapter 28 System Information & Diagnosis Table 81 Menu 24.1: System Maintenance - Status (continued) FIELD DESCRIPTION This section displays information about the WAN port. Note: In a point-to-2points connection this field only displays line 1 status. Line Status This field displays the port speed and duplex setting if you’re using Ethernet encapsulation and Down (line is down or not connected), Idle (line (ppp) idle), Dial (starting to trigger a call) or Drop (dropping a call) if you’re using PPPoE encapsulation.
Table 82 Menu 24.2.1: System Maintenance - Information FIELD DESCRIPTION Name This is the ZyXEL Device's system name + domain name assigned in menu 1. For example, System Name= xxx; Domain Name= baboo.mickey.com Name= xxx.baboo.mickey.com Routing Refers to the routing protocol used.
Chapter 28 System Information & Diagnosis 28.4 Log and Trace There are two logging facilities in the ZyXEL Device. The first is the error logs and trace records that are stored locally. The second is the UNIX syslog facility for message logging.
Jul 19 11:42:54 192.168.102.2 ZyXEL: ppp:CCP Closing 28.5 Diagnostic The diagnostic facility allows you to test the different aspects of your ZyXEL Device to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown next.
Enter 12 to ping any machine (with an IP address) on your LAN or WAN. Enter its IP address in the Host IP Address field below. Reboot System Enter 11 to reboot the ZyXEL Device. Command Mode Enter 22 to go to the Command Interpreter (CI) for further diagnosis. You can also enter the CI using menu 24.8.
Page 240
Chapter 28 System Information & Diagnosis P-791R v2 User’s Guide...
The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension. Once you have customized the ZyXEL Device's settings, they can be saved back to your computer under a filename of your choosing.
The following table is a summary. Please note that the internal filename refers to the filename on the ZyXEL Device and the external filename refers to the filename not on the ZyXEL Device, that is, on your computer, local network or FTP site and so the name (but not the extension) may vary.
4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary. 6 Use “get” to transfer files from the ZyXEL Device to the computer, for example, “get rom-0 config.rom” transfers the configuration file on the ZyXEL Device to your computer and renames it “config.rom”.
To use TFTP, your computer must have both telnet and TFTP clients. To backup the configuration file, follow the procedure shown next. 1 Use telnet from your computer to connect to the ZyXEL Device and log in. Because TFTP does not have any security checks, the ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address.
Enter the IP address of the ZyXEL Device. 192.168.1.1 is the ZyXEL Device’s default IP address when shipped. Send/Fetch Use “Send” to upload the file to the ZyXEL Device and “Fetch” to back up the file on your computer. Local File Enter the path and name of the firmware file (*.bin extension) or configuration file...
FTP is the preferred method for restoring your current computer configuration to your ZyXEL Device since FTP is faster. Please note that you must wait for the system to automatically restart after the file transfer is complete.
5 Enter “bin” to set transfer mode to binary. 6 Find the “rom” file (on your computer) that you want to restore to your ZyXEL Device. 7 Use “put” to transfer files from the ZyXEL Device to the computer, for example, “put config.rom rom-0”...
Choose the Xmodem protocol. Then click Send. 4 After a successful restoration you will see the following screen. Press any key to restart the ZyXEL Device and return to the SMT menu. Figure 170 Successful Restoration Confirmation Screen Save to ROM Hit any key to start system reboot.
FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. When you telnet into the ZyXEL Device, you will see the following screens for uploading firmware and the configuration file using FTP.
4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary. 6 Use “put” to transfer files from the computer to the ZyXEL Device, for example, “put firmware.bin ras” transfers the firmware on your computer (firmware.bin) to the ZyXEL Device and renames it “ras”.
Device and the computer. The file name for the firmware is “ras”. Note that the telnet connection must be active and the ZyXEL Device in CI mode before and during the TFTP transfer. For details on TFTP commands (see following example), please consult the documentation of your TFTP client program.
Where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyXEL Device’s IP address, “put” transfers the file source on the computer (firmware.bin – name of the firmware on the computer) to the file destination on the remote host (ras - name of the firmware on the ZyXEL Device).
Chapter 29 Firmware and Configuration File Maintenance Figure 175 Example Xmodem Upload After the firmware upload process has completed, the ZyXEL Device will automatically restart. 29.5.10 Uploading Configuration File Via Console Port 1 Select 2 from Menu 24.7 – System Maintenance – Upload Firmware to display Menu 24.7.2 - System Maintenance - Upload System Configuration File.
Chapter 29 Firmware and Configuration File Maintenance Figure 177 Example Xmodem Upload After the configuration upload process has completed, restart the ZyXEL Device by entering “atgo”. P-791R v2 User’s Guide...
Enter the CI from the SMT by selecting menu 24.8. Access can be by Telnet or by a connection to the console port, although some commands are only available with a console connection. See the included disk or zyxel.com for more detailed information on CI commands. Enter 8 from Menu 24 - System Maintenance.
The budget management function allows you to set a limit on the total outgoing call time of the ZyXEL Device within certain times. When the total outgoing call time exceeds the limit, the current call will be dropped and any future outgoing calls will be blocked.
30.3 Time and Date Setting The ZyXEL Device’s Real Time Chip (RTC) keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your ZyXEL Device.
Enter 10 to go to Menu 24.10 - System Maintenance - Time and Date Setting to update the time and date settings of your ZyXEL Device as shown in the following screen. Figure 183 Menu 24.10: System Maintenance - Time and Date Setting Menu 24.10 - System Maintenance - Time and Date Setting...
Chapter 30 Menus 24.8 to 24.11 Table 89 Menu 24.10: System Maintenance - Time and Date Setting (continued) FIELD DESCRIPTION Current Time This field displays an updated time only when you reenter this menu. New Time Enter the new time in hour, minute and second format. (hh:mm:ss) Current Date This field displays an updated date only when you reenter this menu.
Secured Client The default 0.0.0.0 allows any client to use this service to remotely manage the ZyXEL Device. Enter an IP address to restrict access to a client with a matching IP address. Once you have filled in this menu, press [ENTER] at the message "Press ENTER to Confirm or ESC to Cancel"...
• Load Sharing – Network administrators can use IPPR to distribute traffic among multiple paths. • NAT - The ZyXEL Device performs NAT by default for traffic going to or from the ge1 interface. Routing policy’s SNAT allows network administrators to have traffic received on a specified interface use a specified IP address as the source IP address.
Chapter 31 IP Routing Policy Setup IPPR follows the existing packet filtering facility of RAS in style and in implementation. 31.4 IP Routing Policy Setup Use this menu to look at a summary of policy routes. To open this menu, enter 25 in the main menu.
Chapter 31 IP Routing Policy Setup 31.6 IP Routing Policy Use this menu to configure policy routes. To open this menu, select Edit and enter the appropriate rule number in menu 25. Figure 187 Menu 25.1.1: IP Routing Policy Menu 25.1.1 - IP Routing Policy Policy Set Name= ex1 Active= No Criteria:...
ZyXEL Device and must be on the same subnet as the ZyXEL Device, if it is on the LAN, or the IP address of a remote node, if it is on the WAN. Enter 0.0.0.0 to specify the default gateway.
Chapter 31 IP Routing Policy Setup Figure 188 IP Routing Policy Example To force Web packets coming from clients with IP addresses of 192.168.1.33 to 192.168.1.64 to be routed to the Internet via the WAN port of the ZyWALL, follow the steps as shown next. 1 Create a rule in Menu 25.1 - IP Routing Policy Setup as shown next.
Chapter 31 IP Routing Policy Setup Figure 190 IP Routing Policy Example 2 Menu 25.1.1 - IP Routing Policy Policy Set Name= example2 Active= No Criteria: IP Protocol Type of Service= Don't Care Packet length= 10 Precedence = Don't Care Len Comp= Equal Source: addr start= 0.0.0.0...
32.2 Schedule Setup This menu is only applicable if your Internet connection uses PPPoE encapsulation. Use this menu to look at the schedule sets in the ZyXEL Device. To open this menu, enter 26 in the main menu. Figure 191 Menu 26: Schedule Setup...
This menu is only applicable if your Internet connection uses PPPoE encapsulation. Use this menu to configure the schedule sets in the ZyXEL Device. To open this menu, enter the number of the schedule set in the Enter Schedule Set Number to Configure field, enter the name of the schedule set in the Edit Name field, and press [ENTER] in menu 26.
Chapter 32 Schedule Setup The following table describes the labels in this menu. Table 95 Menu 26.1: Schedule Set Setup FIELD DESCRIPTION Active Press [SPACE BAR] to select Yes or No. Choose Yes and press [ENTER] to activate the schedule set. Start Date Should this schedule set recur weekly or be used just once only? Press the [SPACE BAR] and then [ENTER] to select Once or Weekly.
2 Make sure you are using the power adaptor or cord included with the ZyXEL Device. 3 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source. Make sure the power source is turned on.
Appendix C on page 303. 4 Make sure your computer is in the same subnet as the ZyXEL Device. (If you know that there are routers between your computer and the ZyXEL Device, skip this step.) • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address.
Page 275
Advanced Suggestion • Try to access the ZyXEL Device using another service, such as Telnet. If you can access the ZyXEL Device, check the remote management settings and SMT filters to find out why the ZyXEL Device does not respond to HTTP. See Section 17.2 on page...
1 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.4 on page 35. If the ZyXEL Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. 2 Turn the ZyXEL Device and your computer off and on.
33.4 Reset the ZyXEL Device to Its Factory Defaults If you reset the ZyXEL Device, you lose all of the changes you have made. The ZyXEL Device re-loads its default settings, and the password resets to 1234. You have to make all of your changes again.
Appendices and Index Product Specifications (281) Setting up Your Computer’s IP Address (287) Pop-up Windows, JavaScripts and Java Permissions (303) IP Addresses and Subnetting (309) IP Address Assignment Conflicts (317) Common Services (321) Command Interpreter (325) Log Descriptions (331) NetBIOS Filter Commands (343) Legal Information (345) Customer Support (349) Index (353)
P P E N D I X Product Specifications The following tables summarize the ZyXEL Device’s hardware and firmware features. Table 96 Hardware Specifications SPECIFICATION DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Default Password user: “user”...
DESCRIPTION Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, an FTP or a TFTP tool to put it on the ZyXEL Device. Note: Only upload firmware for your specific model! Configuration Backup &...
Management Protocol) used to join multicast groups (see RFC 2236). IP Alias IP alias allows you to subdivide a physical network into logical networks over the same Ethernet interface with the ZyXEL Device itself as the gateway for each subnet. Time and Date Get the current time and date from an external server when you turn on your ZyXEL Device.
4 Make sure the screws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. 5 Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws.
After the appropriate TCP/IP components are installed, configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window.
Appendix B Setting up Your Computer’s IP Address Figure 195 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add.
Appendix B Setting up Your Computer’s IP Address Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. •...
5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your ZyXEL Device and restart your computer when prompted. Verifying Settings 1 Click Start and then Run.
Appendix B Setting up Your Computer’s IP Address Figure 198 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 199 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. P-791R v2 User’s Guide...
Appendix B Setting up Your Computer’s IP Address Figure 200 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 201 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Appendix B Setting up Your Computer’s IP Address Figure 202 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Appendix B Setting up Your Computer’s IP Address Figure 203 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and then Command Prompt. 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab.
Appendix B Setting up Your Computer’s IP Address Figure 205 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 206 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: •...
• Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Control Panel.
• Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 5 Click Apply Now and close the window.
Appendix B Setting up Your Computer’s IP Address Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
Appendix B Setting up Your Computer’s IP Address • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
Appendix B Setting up Your Computer’s IP Address Figure 213 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet • If you have a static IP address, enter in the field. Type static BOOTPROTO= = followed by the IP address (in dotted decimal notation) and type IPADDR NETMASK...
Appendix B Setting up Your Computer’s IP Address Verifying Settings Enter in a terminal screen to check your TCP/IP properties. ifconfig Figure 217 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1...
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Internet Explorer 6 screens are used here.
Appendix C Pop-up Windows, JavaScripts and Java Permissions 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 219 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 220 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites. Figure 221 Pop-up Blocker Settings P-791R v2 User’s Guide...
Appendix C Pop-up Windows, JavaScripts and Java Permissions 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 223 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
Appendix C Pop-up Windows, JavaScripts and Java Permissions JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window. Figure 225 Java (Sun) P-791R v2 User’s Guide...
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Appendix D IP Addresses and Subnetting Figure 226 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation).
Appendix D IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Table 101 Subnet Masks BINARY DECIMAL 4TH OCTET OCTET...
Appendix D IP Addresses and Subnetting Table 103 Alternative Subnet Mask Notation (continued) ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.192 1100 0000 255.255.255.224 1110 0000 255.255.255.240 1111 0000 255.255.255.248 1111 1000 255.255.255.252 1111 1100 Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons.
Appendix D IP Addresses and Subnetting Figure 228 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 2 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
Appendix D IP Addresses and Subnetting Table 108 Eight Subnets (continued) SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 109 24-bit Network Number Subnet Planning NO.
You must also enable Network Address Translation (NAT) on the ZyXEL Device. Once you have decided on the network number, pick an IP address for your ZyXEL Device that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
You must set the ZyXEL Device to use different LAN and WAN IP addresses on different subnets if you enable DHCP server on the ZyXEL Device. For example, you set the WAN IP address to 192.59.1.1 and the LAN IP address to 10.59.1.1. Otherwise, It is recommended the ZyXEL Device use a public WAN IP address.
Appendix E IP Address Assignment Conflicts Figure 230 IP Address Conflicts: Case B To solve this problem, make sure the ZyXEL Device LAN IP address is not in the DHCP IP address pool. Case C: The Subscriber IP address is the same as the IP...
Appendix E IP Address Assignment Conflicts Figure 232 IP Address Conflicts: Case D This problem can be solved by adding a VLAN-enabled switch or set the computers to obtain IP addresses dynamically. P-791R v2 User’s Guide...
Page 320
Appendix E IP Address Assignment Conflicts P-791R v2 User’s Guide...
7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation Security (IPSEC_TUNNEL) Protocol) tunneling protocol uses this service. FINGER...
Page 322
Appendix F Common Services Table 111 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web.
Page 323
Appendix F Common Services Table 111 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP Simple File Transfer Protocol. SMTP Simple Mail Transfer Protocol is the message-exchange standard for the...
Page 324
Appendix F Common Services P-791R v2 User’s Guide...
Type exit to close the session when finished. Command Examples This section provides some examples of commands you can use on the ZyXEL Device. This list is intended as a general reference of examples. The commands available in your ZyXEL Device may differ from the examples given here.
3 to record both logs and alerts for that category. Not every parameter is available with every category. 5 Use the command to store the settings in the ZyXEL Device (you must sys logs save do this in order to record logs).
[0:LAN] [0:no|1:yes] Use this command to set the ZyXEL Device to route traffic that does not match a NAT rule through a specific interface. An example of when you may want to use this is if you have servers with public IP addresses connected to the LAN.
Page 328
For example, say the regular gateway goes down and a backup gateway sends a gratuitous ARP request. If the request is for an IP address that is not already in the ZyXEL Device’s ARP table, the ZyXEL Device sends an ARP request to ask which host is using the IP address.
Turning on the force updates option is more dangerous than leaving it off because the ZyXEL Device updates the ARP table even when there is an existing entry.
Page 330
Appendix G Command Interpreter P-791R v2 User’s Guide...
P P E N D I X Log Descriptions This appendix provides descriptions of example log messages. Table 112 System Maintenance Logs LOG MESSAGE DESCRIPTION The router has adjusted its time based on information from Time calibration is the time server. successful The router failed to get information from the time server.
Appendix H Log Descriptions Table 112 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Someone has logged on to the router’s SSH server. Successful SSH login Someone has failed to log on to the router’s SSH server. SSH login failed Someone has logged on to the router's web configurator Successful HTTPS login interface using HTTPS protocol.
Appendix H Log Descriptions Table 117 ICMP Logs LOG MESSAGE DESCRIPTION The router blocked a packet that didn’t have a Packet without a NAT table entry corresponding NAT table entry. blocked: ICMP The router sent an ICMP reply packet to the sender. Router reply ICMP packet: ICMP Table 118 CDR Logs LOG MESSAGE...
Page 334
Appendix H Log Descriptions Table 120 IKE Logs (continued) LOG MESSAGE DESCRIPTION The router retransmitted the last packet sent because there IKE Packet Retransmit was no response from the peer. An Ethernet error stopped the router from sending IKE Failed to send IKE Packet packets.
Page 335
Appendix H Log Descriptions Table 120 IKE Logs (continued) LOG MESSAGE DESCRIPTION The phase 1 ID types do not match. ID type mismatch. Local / Peer: <Local ID type/Peer ID type> The phase 1 ID contents do not match. ID content mismatch The phase 1 ID contents do not match and the configured Configured Peer ID Content: "Peer ID Content"...
Appendix H Log Descriptions Table 120 IKE Logs (continued) LOG MESSAGE DESCRIPTION The listed rule’s IKE phase 1 pre-shared key did not match Rule [%d] Phase 1 preshared between the router and the peer. key mismatch The listed rule’s IPSec tunnel has been built successfully. Rule [%d] Tunnel built successfully The listed rule’s IKE phase 1 peer’s public key was not found.
Appendix H Log Descriptions Table 121 PKI Logs (continued) LOG MESSAGE DESCRIPTION The router received a CRL (Certificate Revocation List), with size and Rcvd CRL <size>: issuer name as recorded, from the LDAP server whose IP address and <issuer name> port are recorded in the Source field.
ZyXEL Device the ZyXEL Device. (W to W) WAN to WAN/ ACL set for packets traveling from the WAN to the WAN ZyXEL Device or the ZyXEL Device. Table 124 ICMP Notes TYPE CODE DESCRIPTION Echo Reply Echo reply message...
Page 339
Appendix H Log Descriptions Table 124 ICMP Notes (continued) TYPE CODE DESCRIPTION A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagrams for output to the next network on the route to the destination network.
Configuring What You Want the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record.
Displaying Logs • Use the sys logs display command to show all of the logs in the ZyXEL Device’s log. • Use the sys logs category display command to show the log settings for all of the log categories.
Page 342
Appendix H Log Descriptions P-791R v2 User’s Guide...
• Allow or disallow NetBIOS packets to initiate calls. Display NetBIOS Filter Settings Syntax: sys filter netbios disp This command gives a read-only list of the current NetBIOS filter modes for The ZyXEL Device. NetBIOS Display Filter Settings Command Example =========== NetBIOS Filter Status ===========...
Page 344
Appendix I NetBIOS Filter Commands The filter types and their default settings are as follows. Table 127 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN This field displays whether NetBIOS packets are blocked or forwarded Block and WAN between the LAN and the WAN. Trigger dial This field displays whether NetBIOS packets are allowed to initiate Disabled...
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 347
Appendix J Legal Information ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.
Page 348
Appendix J Legal Information P-791R v2 User’s Guide...
Page 354
Appendix S Customer Support P-791R v2 User’s Guide...
Page 355
Index Index for upgrading firmware Constant Bit Rate (CBR) contact information address mapping Continuous Bit Rate alert see CBR copyright enabling SIP/FTP/H.323 customer support alternative subnet mask notation application layer gateway Application Layer Gateway. See ALG. applications high-speed Internet access point-to-point connections data filter set.
Page 356
Index ENET ENCAP static and IP address IP address class and IGMP IP alias and NAT and traffic redirect IP Control Protocol (IPCP) IP Policy Routing (IPPR). See policy route. FCC interference statement IP pool filter set and NAT and remote node data generic filter rule structure...
Page 357
RFC 1215 conditions RFC 1466 encapsulation RFC 1483 procedure and IP address roles for the ZyXEL Device in server RFC 1597 Point-to-Point Protocol over ATM Adaptation Layer 5. RFC 1631. See NAT. See PPPoA. RFC 2131. See DHCP. Point-to-Point Protocol over Ethernet. See PPPoE.
Page 358
Index Constant Bit Rate (CBR) Unspecified Bit Rate (UBR) Variable Bit Rate (VBR) safety warnings traffic redirect schedule set and IP alias screws and triangle route Select Mode screen traffic shaping Maximum Burst Size (MBS) Simple Network Management Protocol. See SNMP. Peak Cell Rate (PCR) Single User Account.