Page 1 P-870HN-5xb IPv6 version 802.11n VDSL2 4-port Gateway Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmware Version 1.12 www.zyxel.com Edition 1, 1/2011 www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...
Page 3: About This User's Guide
Refer to the included CD for support documents. Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp. Need More Help? More help is available at www.zyxel.com. • Download Library Search for the latest product updates and documentation from this link. Read...
Page 4 • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. P-870HN-5xb User’s Guide...
Page 5: Document Conventions
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on. • “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”. P-870HN-5xb User’s Guide...
Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The Device icon is not an exact representation of your device. Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router P-870HN-5xb User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-870HN-5xb User’s Guide...
Page 8 Safety Warnings P-870HN-5xb User’s Guide...
Page 9: Table Of Contents
Universal Plug-and-Play (UPnP) ..................... 227 Parental Control ........................241 Interface Group ........................245 Captive Portal .......................... 251 System Settings ........................253 Logs ............................259 Tools ............................263 Diagnostic ..........................269 Troubleshooting ........................275 Product Specifications ......................281 P-870HN-5xb User’s Guide...
Page 10 Contents Overview P-870HN-5xb User’s Guide...
Page 11: Table Of Contents
2.2 How to Set up Multiple VDSL Connection Groups .............. 38 2.2.1 Adding WAN Internet Connections ................38 2.2.2 Setting Interface Groups .................... 44 2.2.3 Configuring Interface Group IP .................. 49 2.2.4 Testing the VDSL Connection Groups ............... 50 P-870HN-5xb User’s Guide...
Page 12 LAN Setup..........................103 6.1 Overview ..........................103 6.1.1 What You Can Do in this Chapter ................103 6.2 What You Need To Know ....................104 6.3 The IP Screen ........................105 6.4 The DHCP Client List Screen .................... 107 P-870HN-5xb User’s Guide...
Page 13 8.4 The Trigger Port Screen ....................151 8.4.1 Trigger Port Configuration ..................154 8.5 The DMZ Host Screen ....................... 156 8.6 The ALG Screen ....................... 156 8.7 Technical Reference ......................157 Chapter 9 MAC Filter ..........................159 P-870HN-5xb User’s Guide...
Page 14 Chapter 13 Policy Forwarding......................... 185 13.1 Overview ........................185 13.1.1 What You Can Do in this Chapter ................185 13.2 The Policy Forwarding Screen ..................185 13.2.1 Policy Forwarding Setup ..................186 Chapter 14 DNS Route ..........................189 P-870HN-5xb User’s Guide...
Page 15 18.1.1 What You Can Do in this Chapter ................221 18.2 The TR-069 Screen ......................221 18.3 The TR-064 Screen ......................223 18.4 The Service Control Screen .................... 224 18.5 The IP Address Screen ....................225 18.5.1 Adding an IP Address .................... 226 P-870HN-5xb User’s Guide...
Page 16 23.1.1 What You Can Do in this Chapter ................253 23.2 The General Screen ......................253 23.3 The Time Setting Screen ....................255 Chapter 24 Logs ............................259 24.1 Overview ......................... 259 24.1.1 What You Can Do in this Chapter ................259 P-870HN-5xb User’s Guide...
Page 17 Appendix B Pop-up Windows, JavaScripts and Java Permissions ........317 Appendix C IP Addresses and Subnetting ................327 Appendix D Wireless LANs ....................339 Appendix E IPv6........................355 Appendix F Common Services..................... 367 Appendix G Open Software Announcements............... 371 P-870HN-5xb User’s Guide...
Page 18 Table of Contents Appendix H Legal Information ....................391 Index............................395 P-870HN-5xb User’s Guide...
Page 19: User's Guide
User’s Guide...
Page 21: Introducing The Device
1.2 Ways to Manage the Device Use any of the following methods to manage the Device. • Web Configurator. This is recommended for everyday management of the Device using a (supported) web browser. P-870HN-5xb User’s Guide...
Page 22: Good Habits For Managing The Device
Your Device provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the Device’s LAN ports (or wirelessly). You can have multiple WAN services over P-870HN-5xb User’s Guide...
Page 23 IP filter is on, all incoming traffic from the Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. P-870HN-5xb User’s Guide...
Page 24: Leds (Lights)
Chapter 1 Introducing the Device 1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 2 The Front Panel of the Device: P-870HN-5xb User’s Guide...
Page 25: The Reset Button
RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to the default. P-870HN-5xb User’s Guide...
Page 26: Using The Reset Button
WLAN/WPS LED should flash while the Device sets up a WPS connection with the wireless device. Note: You must activate WPS in the Device and in another wireless device within two minutes of each other. See Section 7.10.4 on page 139 for more information. P-870HN-5xb User’s Guide...
Page 27: Tutorials
We use the Device web screens and M-302 utility screens as an example. The screens may vary slightly for different models. 2.1.2 Configuring the AP Follow the steps below to configure the wireless settings on your AP. P-870HN-5xb User’s Guide...
Page 28 Make sure the Enable Wireless LAN check box is selected. Enter “SSID_Example3” as the SSID and select a channel which is not used by another AP. Set security mode to WPA-PSK and enter “ThisismyWPA-PSKpre-sharedkey” in the Pre-Shared Key field. Click Apply. P-870HN-5xb User’s Guide...
Page 29 Chapter 2 Tutorials Click the Advanced Setup tab and select 802.11b/g Mixed in the 802.11 Mode field. Click Apply. Figure 4 AP: Wireless LAN > Advanced Setup P-870HN-5xb User’s Guide...
Page 30 Chapter 2 Tutorials Open the Status screen.Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. Figure 5 AP: Status P-870HN-5xb User’s Guide...
Page 31: Configuring The Wireless Client
• Configure nothing and leave the wireless client to automatically scan for and connect to any available network that has no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to a specific network or peer computer. P-870HN-5xb User’s Guide...
Page 32 Scan if you want to search again. If no entry displays in the Available Network List, that means there is no wireless network available within range. Make sure the AP or peer computer is turned on or move the wireless client closer to the AP or peer computer. P-870HN-5xb User’s Guide...
Page 33 Exit button to return to the Site Survey screen. Figure 8 ZyXEL Utility: Security Settings The Confirm Save window appears. Check your settings and click Save to continue. Figure 9 ZyXEL Utility: Confirm Save P-870HN-5xb User’s Guide...
Page 34 This example illustrates how to set up a profile and connect the wireless client to an access point configured for WPA-PSK security. In this example, the SSID is “SSID_Example3”, the profile name is “PN_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”. You have chosen the profile name “PN_Example3”. P-870HN-5xb User’s Guide...
Page 35 Figure 12 ZyXEL Utility: Add New Profile Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. P-870HN-5xb User’s Guide...
Page 36 This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Figure 14 ZyXEL Utility: Profile Encryption In the next screen, leave both boxes checked. Figure 15 Profile: Wireless Protocol Settings. P-870HN-5xb User’s Guide...
Page 37 11 If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit. Check the details you entered previously. Also, refer to the Troubleshooting section of this User's Guide or contact your network administrator if necessary. P-870HN-5xb User’s Guide...
Page 38: How To Set Up Multiple Vdsl Connection Groups
GR2: LAN3, 4 192.168.3.x 2.2.1 Adding WAN Internet Connections In this example, we will add 2 new WAN connections: PTM/Bridge and PTM/PPPoE. 2.2.1.1 Adding a PTM/Bridge WAN Service Click Network > WAN > Internet Connection and click Add. P-870HN-5xb User’s Guide...
Page 39 Chapter 2 Tutorials Select PTM0/(0_0_1) as the layer 2 interface for this service and click Next. Select Bridging as the WAN service type. Click Next to finish the setup. P-870HN-5xb User’s Guide...
Page 40 The WAN setup summary is displayed. If the settings are correct, click Apply/ Save. The PTM/Bridge WAN connection is configured successfully. The Internet Connection screen should look like the following. 2.2.1.2 Adding a PTM/PPPoE WAN Service Click Network > WAN > Internet Connection and click Add. P-870HN-5xb User’s Guide...
Page 41 Chapter 2 Tutorials Select PTM0/(0_0_1) as the layer 2 interface for this service and click Next. Select PPP over Ethernet as the WAN service type. Then click Next. P-870HN-5xb User’s Guide...
Page 42 Chapter 2 Tutorials Configure the PPP User and Password screen. The PPP Username is Service@ISP.net, the PPP Password is 1234, and the PPPoE Service Name is User. Click Next when you finish the settings. P-870HN-5xb User’s Guide...
Page 43 Select ppp0.3 as the default gateway interface, and as the default IPv6 gateway interface. Then click Next. Obtain DNS and IPv6 DNS information from the PPPoE WAN interface that you selected. Then click Next to finish the setup. P-870HN-5xb User’s Guide...
Page 44: Setting Interface Groups
The PTM/PPPoE WAN connection is configured successfully. The Internet Connection screen should look like the following. 2.2.2 Setting Interface Groups This part shows examples of creating multiple networks groups with the WAN services that you have configured in the previous section. P-870HN-5xb User’s Guide...
Page 45 WAN interface with LAN1 and WL_ZyXEL01 (WLAN) as the LAN interfaces. Select br_0_0_1.0/ptm0_1 from the WAN Interface options. Select LAN1 and WL_SSID_Example (WLAN) from the Available LAN Interfaces list and click <- to add it to the Grouped LAN Interfaces. Click Apply to finish the settings. P-870HN-5xb User’s Guide...
Page 46 Chapter 2 Tutorials GR1 has been added successfully to the interface group list. Click Add to create another interface group: GR2. P-870HN-5xb User’s Guide...
Page 47 WAN interface with LAN3 and LAN4 as the LAN interfaces. Select pppoe_0_0_1.0/ppp0.3 (VDSL2) from the WAN Interface options. Select LAN3 and LAN4 from the Available LAN Interfaces list and click <- to add them to the Grouped LAN Interfaces. Click Apply to finish the settings. P-870HN-5xb User’s Guide...
Page 48 Chapter 2 Tutorials GR2 has been added successfully to the interface group list. The screen should look like the following. P-870HN-5xb User’s Guide...
Page 49: Configuring Interface Group Ip
Chapter 2 Tutorials 2.2.3 Configuring Interface Group IP Click Network > LAN > IP. Select GR1 from the GroupName drop-down list. The IP Address (192.168.2.1) and IP Subnet Mask (255.255.255.0) is obtained automatically. P-870HN-5xb User’s Guide...
Page 50: Testing The Vdsl Connection Groups
To test GR2, connect your computer to LAN3 or LAN4 of the Device. After a few seconds, the IP address of your computer should be renewed to 192.168.3.x automatically. If you can access Internet by using this VDSL connection, GR2 is successfully configured. P-870HN-5xb User’s Guide...
Page 51: Introducing The Web Configurator
Internet Explorer. 3.1.1 Accessing the Web Configurator Make sure your Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "http://192.168.1.1" as the URL. P-870HN-5xb User’s Guide...
Page 52 You cannot configure some settings with the user account. The password displays in non-readable characters. If you have changed the password, enter your password and click Login. Click Cancel to revert to the default password in the password field. Figure 18 Password Screen P-870HN-5xb User’s Guide...
Page 53: Web Configurator Main Screen
Device models. Figure 19 Main Screen As illustrated above, the main screen is divided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar P-870HN-5xb User’s Guide...
Page 54: Navigation Panel
Use this screen to allow SIP sessions to pass through the Device. Security MAC Filter Use this screen to configure filtering rule(s) that blocks or allows traffic according to its destination and/or source MAC address in bridge mode. P-870HN-5xb User’s Guide...
Page 55 Use this screen to enable captive portal to redirect users to a URL. Maintenance System General Use this screen to configure your device’s name, domain name, management inactivity timeout and password. Time Setting Use this screen to change your Device’s time and date. P-870HN-5xb User’s Guide...
Page 56: Main Window
Right after you log in, the Status screen is displayed. See Chapter 4 on page 59 for more information about the Status screen. 3.2.3 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been updated. P-870HN-5xb User’s Guide...
Page 57: Technical Reference
Technical Reference...
Page 59: Status Screens
Use the Status screens to look at the current status of the device, system resources and interfaces (LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from traffic. 4.1 Status Screen Click Status to open this screen. Figure 20 Status Screen P-870HN-5xb User’s Guide...
Page 60 This field displays the current subnet mask in the LAN. Mask IPv6 This field displays the current IPv6 address and prefix length for the Address/ Device’s WAN interface. Mask IPv6 Scope This field displays whether the IPv6 address is a link-local or global address. P-870HN-5xb User’s Guide...
Page 61 If you want some applications to have more throughput, you should turn off other applications (for example, using QoS; see Chapter 16 on page 193). P-870HN-5xb User’s Guide...
Page 62 Statistics Click this link to view packet specific statistics on the LAN and WLAN Statistics interfaces. See Section 4.1.5 on page Client List Click this link to view current DHCP client information. See Section 4.1.6 on page P-870HN-5xb User’s Guide...
Page 63: Wan Service Statistics
PVC or the VLAN ID number assigned to traffic sent through this connection. (null) means the entry is not valid. Received Bytes This indicates the number of bytes received on this interface. P-870HN-5xb User’s Guide...
Page 64: Route Info
DESCRIPTION Destination This indicates the destination IP address of this route. Gateway This indicates the IP address of the gateway that helps forward this route’s traffic. Subnet This indicates the destination subnet mask of this route. Mask P-870HN-5xb User’s Guide...
Page 65 VDSL WAN interface using IPoE or in bridge mode. • atm* indicates the ADSL WAN interface using IPoE or in bridge mode. • pppoa* indicates the ADSL WAN interface using PPPoA. • ipoa* indicates the ADSL WAN interface using IPoA. P-870HN-5xb User’s Guide...
Page 66: Wlan Station List
Refresh Enter the time interval for refreshing statistics in this field. Interval Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. P-870HN-5xb User’s Guide...
Page 67: Xdsl Statistics
Chapter 4 Status Screens 4.1.4 xDSL Statistics Click Status > xDSL Statistics to access this screen. Use this screen to view detailed DSL statistics. Figure 24 Status > xDSL Statistics P-870HN-5xb User’s Guide...
Page 68 Downstream is how much port the service provider is using to transmit to the port. Receive Power Upstream is how much power the service provider is receiving from the port. Downstream is how much power the port is receiving from the service provider. P-870HN-5xb User’s Guide...
Page 69 Refresh Enter the time interval for refreshing statistics in this field. Interval Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. P-870HN-5xb User’s Guide...
Page 70: Lan Statistics
Refresh Enter the time interval for refreshing statistics in this field. Interval Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. P-870HN-5xb User’s Guide...
Page 71: Client List
The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. This indicates the MAC address of the client computer. IP Address This indicates the IP address assigned to this client computer. P-870HN-5xb User’s Guide...
Page 72 Chapter 4 Status Screens P-870HN-5xb User’s Guide...
Page 73: Wan Setup
• The Layer 2 Interface screen lets you view, remove or add a layer-2 WAN interface (Section 5.5 on page 75). • The Internet Connection screen lets you view and configure the WAN settings on the Device for Internet access (Section 5.6 on page 80). P-870HN-5xb User’s Guide...
Page 74: What You Need To Know
IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The ZyXEL device can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). See Appendix E on page 355 for background information about IPv6. P-870HN-5xb User’s Guide...
Page 75: Before You Begin
Figure 28 Mode 5.5 The Layer 2 Interface Screen The Device must have a layer-2 interface to allow users to use the DSL port to access the Internet. The screen varies depending on the interface type you select. P-870HN-5xb User’s Guide...
Page 76 This is the Virtual Channel Identifier (VCI). Category This is the ATM traffic class. Link Type This is the DSL link type of the ATM layer-2 interface. Connection Mode This shows the connection mode of the layer-2 interface. Remove P-870HN-5xb User’s Guide...
Page 77: Layer 2 Interface Configuration
PTM interface on the Device. You can have multiple ATM layer-2 interfaces using different VPI and/or VCI values. The screen varies depending on the interface type you select. Figure 31 DSL ATM Interface Configuration P-870HN-5xb User’s Guide...
Page 78 Select DSL Link Type field. • LLC/SNAP-ROUTING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header. This is available only when you select EoA in the Select DSL Link Type field. P-870HN-5xb User’s Guide...
Page 79 The Device uses Default Mode automatically for PPPoA or IPoA. Back Click this button to return to the previous screen without saving any changes. Apply/Save Click this button to save your changes and go back to the previous screen. P-870HN-5xb User’s Guide...
Page 80: The Internet Connection Screen
This shows the method of encapsulation used by this connection. Rate This shows the maximum data rate (in Kbps) allowed for traffic sent through this connection. This displays N/A when there is no limit on transmission rate. P-870HN-5xb User’s Guide...
Page 81: Wan Interface
5.6.1 WAN Connection Configuration Click the Edit or Add button in the WAN Service screen to configure a WAN connection. 5.6.1.1 WAN Interface This screen displays when you add a new WAN connection. Figure 34 WAN Configuration: WAN Interface P-870HN-5xb User’s Guide...
Page 82: Service Type
Select the method of encapsulation used by your ISP. service type Choices are PPP over Ethernet (PPPoE), IP over Ethernet and Bridging. Enter Service Specify a name for this connection or use the automatically generated Description one. P-870HN-5xb User’s Guide...
Page 83 Click this button to return to the previous screen. Next Click this button to continue. 5.6.1.3 WAN IP Address and DNS Server The screen differs by the encapsulation you selected in the previous screen. See Section 5.7 on page 95 for more information. P-870HN-5xb User’s Guide...
Page 84 PPP Password Enter the password associated with the user name above. PPPoE Service Type the name of your PPPoE service here. Name This field is not available for a PPPoA connection. P-870HN-5xb User’s Guide...
Page 85 The IP address assigned by a DHCPv6 server has priority over the IP address automatically generated by the Device using the IPv6 prefix from an RA. Use Static IPv6 Select this option if you have a fixed IPv6 address assigned by your Address ISP. P-870HN-5xb User’s Guide...
Page 86 This allows the ZyXEL Device to get subscription information and maintain a joined member list for each multicast group. It can reduce multicas traffic significantly. Back Click this button to return to the previous screen. Next Click this button to continue. P-870HN-5xb User’s Guide...
Page 87: Configuration Screen
Internet. Select this if you have a dynamic IP address. Enable DHCP Select this to identify the vendor and functionality of the Device in Option 60 DHCP requests that the Device sends to a DHCP server when getting a WAN IP address. P-870HN-5xb User’s Guide...
Page 88 Device using the IPv6 prefix from an RA. Use the following Select this option if you have a fixed IPv6 address assigned by your Static IPv6 ISP. address WAN IPv6 Enter the static IPv6 address provided by your ISP. Address P-870HN-5xb User’s Guide...
Page 89 Enter the subnet mask provided by your ISP. Mask Unnumbered Select this if your ISP provided a range of static public IP addresses Mode for you to use. Gateway IP Enter the Device’s WAN IP address. Address P-870HN-5xb User’s Guide...
Page 90 Select this check box to have the Device act as an IGMP proxy on this Multicast Proxy connection. This allows the Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. P-870HN-5xb User’s Guide...
Page 91: Default Gateway
These are the WAN interfaces you can select from. WAN Interfaces Selected WAN Select a WAN interface through which to forward IPv6 traffic. Interface Back Click this button to return to the previous screen. Next Click this button to continue. P-870HN-5xb User’s Guide...
Page 92: Dns Server
Configuration screen. Note: If you configure only one IPoA or IPoE connection using the ATM interface on the Device, you must enter the static DNS server address. Figure 42 WAN Configuration: DNS Server: PPPoE, PPPoA, IPoE or IPoA P-870HN-5xb User’s Guide...
Page 93 Enter the first IPv6 DNS server address assigned by the ISP. DNS server Secondary Enter the second IPv6 DNS server address assigned by the ISP. IPv6 DNS server Back Click this button to return to the previous screen. Next Click this button to continue. P-870HN-5xb User’s Guide...
Page 94 This shows whether MLD multicasting is active or not for this connection. IPv6 This shows whether IPv6 is active or not for this connection. Back Click this button to return to the previous screen. Apply/Save Click this button to save your changes. P-870HN-5xb User’s Guide...
Page 95: Technical Reference
By implementing PPPoE directly on the Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the Device P-870HN-5xb User’s Guide...
Page 96 Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. P-870HN-5xb User’s Guide...
Page 97 CBR is used for connections that continuously require a specific amount of bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR would be high-resolution video and voice. P-870HN-5xb User’s Guide...
Page 98: Ip Address Assignment
IP address and port. In the following example, the Device maps the source address of all packets sent from the internal IP address 1 and port A to IP address 2 and port B on the P-870HN-5xb User’s Guide...
Page 99 A host on the external network (IP address 3 and port C for example) can only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to the external host’s IP address and port. So in P-870HN-5xb User’s Guide...
Page 100 GVRP. The VLAN ID associates a frame with a specific VLAN and provides the information that switches need to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and P-870HN-5xb User’s Guide...
Page 101 Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. P-870HN-5xb User’s Guide...
Page 102 DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. P-870HN-5xb User’s Guide...
Page 103: Lan Setup
107) to look at the IP addresses currently assigned to DHCP clients and the IP addresses reserved for specific MAC addresses. • The IPv6 screen lets you configure the IPv6 settings on your ZyXEL device’s LAN interface (Section 6.5 on page 109). P-870HN-5xb User’s Guide...
Page 104: What You Need To Know
Multicast group - it is not used to carry user data. There are two versions 1 and 2. IGMP version 2 is an improvement over version 1 but IGMP version 1 is still in wide use. P-870HN-5xb User’s Guide...
Page 105: The Ip Screen
Click Network > LAN > IP to open the IP screen. See Section 6.5 on page 109 for background information. Use this screen to set the Local Area Network IP address and subnet mask of your Device. Figure 47 Network > LAN > IP P-870HN-5xb User’s Guide...
Page 106 Select this to have the Device use the DNS server addresses you following configure manually. Static DNS IP address First DNS Enter the first DNS (Domain Name System) server IP address the Server Device passes to the DHCP clients. P-870HN-5xb User’s Guide...
Page 107: The Dhcp Client List Screen
MAC address. This field is a sequential value, and it is not associated with a specific entry. IP Address This field displays the IP address currently assigned to a DHCP client or reserved for a specific MAC address. P-870HN-5xb User’s Guide...
Page 108 If the static DHCP entry is for a device that is not connected, click Remove to delete the static DHCP entry. If the static DHCP entry is for a device that is connected, click Remove to change the static DHCP entry into a regular DHCP entry. P-870HN-5xb User’s Guide...
Page 109: The Ipv6 Screen
Select this option to automatically obtain an IPv6 network prefix from the service provider or an uplink router. WAN Interface Select a WAN interface through which you want to get an IPv6 network selected prefix. You should already have configured a WAN service with IPv6 enabled. P-870HN-5xb User’s Guide...
Page 110: Technical Reference
It helps reduce multicast traffic. Apply Click Apply to save your changes back to the Device. 6.6 Technical Reference The following section contains additional technical information about the Device features described in this chapter. P-870HN-5xb User’s Guide...
Page 111 Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP P-870HN-5xb User’s Guide...
Page 112 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. P-870HN-5xb User’s Guide...
Page 113 Ethernet interface with the Device itself as the gateway for each LAN network. When you use IP alias, you can also configure firewall rules to control access between the LAN's logical networks (subnets). Note: Make sure that the subnets of the logical networks do not overlap. P-870HN-5xb User’s Guide...
Page 114 Chapter 6 LAN Setup The following figure shows a LAN divided into subnets A and B. Figure 51 Physical Network & Partitioned Logical Networks A: 192.168.1.1 - 192.168.1.24 Ethernet Interface B: 192.168.2.1 - 192.168.2.24 P-870HN-5xb User’s Guide...
Page 115: Wireless Lan
PIN (Personal Identification Number) and see information about the Device’s WPS status. Use the WPS Station (see Section 7.7 on page 130) screen to set up WPS by pressing a button or using a PIN. P-870HN-5xb User’s Guide...
Page 116: What You Need To Know
Network Names Each network must have a name, referred to as the SSID - “Service Set IDentifier”. The “service set” is the network, so the “service set identifier” is the P-870HN-5xb User’s Guide...
Page 117 Because of the damage that can be done by a malicious attacker, it’s not just people who have sensitive information on their network who should use security. Everybody who uses any wireless network should ensure that effective security is in place. P-870HN-5xb User’s Guide...
Page 118: Before You Begin
• What advanced options do you want to configure, if any? If you want to configure advanced options, ensure that you know precisely what you want to do. If you do not want to configure advanced options, leave them alone. P-870HN-5xb User’s Guide...
Page 119: The General Screen
Try to use a channel that is as many channels away from any channels used by neighboring APs as possible. The channel number which the Device is currently using then displays next to this field. P-870HN-5xb User’s Guide...
Page 120 See the following sections for more details about this field. Mode MAC Filter Click this button to go to the MAC Filter screen to configure whether the wireless devices with the MAC addresses listed are allowed or denied to access the Device using this SSID. P-870HN-5xb User’s Guide...
Page 121: No Security
Figure 53 Wireless LAN > General: No Security The following table describes the labels in this screen. Table 27 Wireless LAN > General: No Security LABEL DESCRIPTION Security Choose No Security from the drop-down list box. Mode P-870HN-5xb User’s Guide...
Page 122: Wep Encryption
Figure 54 Wireless LAN > General: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 28 Network > Wireless LAN > General: Static WEP Encryption LABEL DESCRIPTION Security Choose WEP from the drop-down list box. Mode P-870HN-5xb User’s Guide...
Page 123: Wpa(2)-Psk
0x for each key. 7.4.3 WPA(2)-PSK In order to configure and enable WPA(2)-PSK authentication; click Network > Wireless LAN to display the General screen. Select WPA-PSK or WPA2-PSK from the Security Mode list. Figure 55 Wireless LAN > General: WPA(2)-PSK P-870HN-5xb User’s Guide...
Page 124 WEP key for an AP and all stations in a WLAN on a periodic basis. Setting of the Group Key Update Timer is also supported in WPA(2)- PSK mode. The Device default is 1800 seconds (30 minutes). P-870HN-5xb User’s Guide...
Page 125: Wpa(2) Authentication
Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it. Select Enabled to turn on preauthentication in WAP2. Otherwise, select Disabled. P-870HN-5xb User’s Guide...
Page 126: Mac Filter
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. P-870HN-5xb User’s Guide...
Page 127: Adding A New Mac Filtering Rule
Click this to create a new MAC filtering rule. 7.4.6 Adding a New MAC Filtering Rule Click the Add button in the MAC Filter screen. The following screen displays. Figure 58 Wireless LAN > MAC Filter > Add P-870HN-5xb User’s Guide...
Page 128: The More Ap Screen
AP to associate with, this is the name that is broadcast and seen in the wireless client utility. Security This field indicates the security mode of the SSID profile. Modify Click the Edit icon to configure the SSID profile. P-870HN-5xb User’s Guide...
Page 129: More Ap Edit
Use this screen to configure WiFi Protected Setup (WPS) on your Device. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. P-870HN-5xb User’s Guide...
Page 130: The Wps Station Screen
Device. Apply Click Apply to save your changes back to the Device. 7.7 The WPS Station Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. P-870HN-5xb User’s Guide...
Page 131: The Wds Screen
The wireless security settings apply to both WDS links and the connections between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is only compatible with other Devices of the same model. P-870HN-5xb User’s Guide...
Page 132 You can connect to up to 4 peer devices. This is available only when you select Enabled(Scan) in the Bridge Restrict field. Select the check box and click Apply to have the Device establish a wireless link with the selected wireless device. P-870HN-5xb User’s Guide...
Page 133: The Advanced Setup Screen
Table 37 Wireless LAN > Advanced Setup LABEL DESCRIPTION RTS/CTS Enter a value between 0 and 2347. Threshold Fragmentation This is the maximum data fragment size that can be sent. Enter a value Threshold between 256 and 2346. P-870HN-5xb User’s Guide...
Page 134 This field is not configurable and the Device uses Short when you set 802.11 Mode to 802.11g Only or 802.11n Only. Apply Click this to save your changes back to the Device. Reset Click this to reload the previous configuration for this screen. P-870HN-5xb User’s Guide...
Page 135: Technical Reference
The SSID is the name of the wireless network. It stands for Service Set IDentity. • If two wireless networks overlap, they should use a different channel. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. P-870HN-5xb User’s Guide...
Page 136: Additional Wireless Terms
Normally, the Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. P-870HN-5xb User’s Guide...
Page 137: Mac Address Filter
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-870HN-5xb User’s Guide...
Page 138 Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. P-870HN-5xb User’s Guide...
Page 139: Wifi Protected Setup
(SSID) and security key through an secure connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-870HN-5xb User’s Guide...
Page 140: Pin Configuration
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-870HN-5xb User’s Guide...
Page 141 PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-870HN-5xb User’s Guide...
Page 142 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-870HN-5xb User’s Guide...
Page 143 CLIENT 1 ENROLLEE CLIENT 2 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access P-870HN-5xb User’s Guide...
Page 144 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-870HN-5xb User’s Guide...
Page 145 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-870HN-5xb User’s Guide...
Page 146 Chapter 7 Wireless LAN P-870HN-5xb User’s Guide...
Page 147: Network Address Translation (Nat)
(the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. P-870HN-5xb User’s Guide...
Page 148: The Port Forwarding Screen
If you are unsure, refer to your ISP. To access this screen, click Network > NAT. The following screen appears. Figure 71 NAT Port Forwarding P-870HN-5xb User’s Guide...
Page 149 This field displays the WAN interface through which the service is forwarded. External Start This is the first external port number that identifies a service. Port External End This is the last external port number that identifies a service. Port P-870HN-5xb User’s Guide...
Page 150: The Port Forwarding Edit Screen
This screen lets you create or edit a port forwarding rule. Select User Define in the Service Name field or click the rule’s Edit icon in the Port Forwarding screen to open the following screen. Figure 72 Port Forwarding Edit P-870HN-5xb User’s Guide...
Page 151: The Trigger Port Screen
LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. P-870HN-5xb User’s Guide...
Page 152 Only Jane can connect to the Real Audio server until the connection is closed or times out. The Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). P-870HN-5xb User’s Guide...
Page 153 Clear the check box to disable the rule. Select the check box to enable it. Server Name This field displays the name of the service used by the packets for this virtual server. WAN Interface This field displays the WAN interface through which the service is forwarded. P-870HN-5xb User’s Guide...
Page 154: Trigger Port Configuration
8.4.1 Trigger Port Configuration This screen lets you create new port triggering rules. Click the Edit icon in the NAT - Trigger Port screen to open the following screen. Figure 75 NAT > Trigger Port > Edit P-870HN-5xb User’s Guide...
Page 155 Select the IP protocol from TCP, UDP, or TCP/UDP. Protocol Back Click Back to return to the previous screen. Apply Click Apply to save your changes to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 156: The Dmz Host Screen
The SIP ALG translates the Device’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if you enable the SIP ALG. P-870HN-5xb User’s Guide...
Page 157: Technical Reference
ECHO FTP (File Transfer Protocol) SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) P-870HN-5xb User’s Guide...
Page 158 ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 78 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 Internet IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 P-870HN-5xb User’s Guide...
Page 159: Mac Filter
MAC filtering means sifting traffic going through the Device based on the source and/or destination MAC addresses. 9.1.1 What You Can Do in this Chapter The MAC Filter screen lets you view and configure the MAC filtering rules (Section 9.2 on page 160). P-870HN-5xb User’s Guide...
Page 160: The Mac Filter Screen
This displays the destination MAC address to which this rule applies. Please note that a blank destination address is equivalent to Any. Source MAC This displays the source MAC address to which this rule applies. Please note that a blank source address is equivalent to Any. P-870HN-5xb User’s Guide...
Page 161: Creating Mac Filtering Rules
MAC address. Please note that a blank source address is equivalent to Any. Frame Direction Select the travel direction of frame to which this rule applies. P-870HN-5xb User’s Guide...
Page 162 Chapter 9 MAC Filter Table 48 MAC Filtering: Add (continued) LABEL DESCRIPTION WAN Interfaces Select the WAN interface to which this rule applies. Save/Apply Click Save/Apply to save your customized settings and exit this screen. P-870HN-5xb User’s Guide...
Page 163: Firewall
Web on port 80, other ports are also active. If the person configuring or managing the computer is not careful, a hacker could attack it over an unprotected port. P-870HN-5xb User’s Guide...
Page 164: The Firewall Screen
Your customized rules take precedence and override the Device’s default rules. 10.3 The Firewall Screen Click Security > Firewall > Incoming to display the following screen. This screen displays a list of the configured incoming filtering rules. Figure 81 Firewall > Incoming P-870HN-5xb User’s Guide...
Page 165 Click the Remove icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click Add to create a new rule. Apply Click Apply to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 166: Creating Incoming Firewall Rules
Address Source Subnet Enter the source subnet mask. Mask Source Port Enter a single port number or the range of port numbers of the source. Destination IP Enter the destination IP address in dotted decimal notation. Address P-870HN-5xb User’s Guide...
Page 167 Select Select All to apply the rule to all interfaces on the Device or select the specific WAN interface(s) to which this rule applies. Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. P-870HN-5xb User’s Guide...
Page 168 Chapter 10 Firewall P-870HN-5xb User’s Guide...
Page 169: Certificate
Anyone can then use the certification authority's public key to verify the certificates. You can use the Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. P-870HN-5xb User’s Guide...
Page 170: The Local Certificates Screen
Click the Load Signed button to import a valid certification to replace the request. Click the Remove button to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. P-870HN-5xb User’s Guide...
Page 171: Create Certificate Request
Type up to 127 characters to identify the state or province where the Name certificate owner is located. You may use any character, including spaces, but the Device drops trailing spaces. Country/Region Select a country to identify the nation where the certificate owner is Name located. P-870HN-5xb User’s Guide...
Page 172: Import Certificate
Figure 85 Certificate Request Details 11.3.2 Import Certificate Click Security > Certificates > Local Certificates and then Import Certificate to open the Import Local Certificate screen. Follow the instructions in this screen to save an existing certificate to the Device. P-870HN-5xb User’s Guide...
Page 173 Table 54 Import Local Certificate LABEL DESCRIPTION Certificate Type up to 31 ASCII characters (not including spaces) to identify this Name certificate. Certificate Copy and paste the certificate into the text box to store it on the Device. P-870HN-5xb User’s Guide...
Page 174: Certificate Details
Click Security > Certificates > Local Certificates to open the My Certificates screen (see Figure 83 on page 170). Click the View icon to open the Certificate Details screen. Use this screen to view in-depth certificate information and change the certificate’s name. P-870HN-5xb User’s Guide...
Page 175 Chapter 11 Certificate Figure 87 Certificate Details P-870HN-5xb User’s Guide...
Page 176: Load Signed Certificate
Click Security > Certificates > Local Certificates and then Load Signed or the Load Signed Certificate button in the Certificate Details screen of a certification request to open the Load Certificate screen. Follow the instructions in this screen to save a valid certificate to replace the request. P-870HN-5xb User’s Guide...
Page 177: The Trusted Ca Screen
This screen displays a summary list of certificates of the certification authorities that you have set the Device to accept as trusted. The Device accepts any valid certificate signed by a certification authority on this list as being P-870HN-5xb User’s Guide...
Page 178 Click View to open a screen with an in-depth list of information about the certificate. Click Remove to delete the certificate. Import Click this button to open a screen where you can save the certificate of Certificate a certification authority that you trust to the Device. P-870HN-5xb User’s Guide...
Page 179: View Trusted Ca Certificate
(via floppy disk for example). Back Click this button to return to the previous screen. P-870HN-5xb User’s Guide...
Page 180: Import Trusted Ca Certificate
Copy and paste the certificate into the text box to store it on the Device. Back Click this button to return to the previous screen. Apply Click this button to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 181: Static Route
R3 connected to the LAN. Figure 92 Example of Static Routing Topology Internet 12.1.1 What You Can Do in this Chapter The Static Route screens let you view and configure IP static routes on the Device (Section 12.2 on page 182). P-870HN-5xb User’s Guide...
Page 182: The Static Route Screen
Click the Remove icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. Click this to create a new rule. Apply Click this to apply your changes to the Device. P-870HN-5xb User’s Guide...
Page 183: Static Route Edit
Select this option and enter the IP address of the next-hop gateway. The IP Address gateway is a router or switch on the same segment as your Device's interface(s). The gateway helps forward packets to their destinations. P-870HN-5xb User’s Guide...
Page 184 Table 61 Static Route: Add LABEL DESCRIPTION Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 185: Policy Forwarding
The Policy Forwarding screens let you view and configure routing policies on the Device (Section 13.2 on page 185). 13.2 The Policy Forwarding Screen Click Advanced > Policy Forwarding to open the Policy Forwarding screen. Figure 96 Advanced > Policy Forwarding P-870HN-5xb User’s Guide...
Page 186: Policy Forwarding Setup
Enter a descriptive name of up to 16 printable English keyboard characters, including spaces. Source IP Enter the source IP address. Address Source Subnet Enter the source subnet mask. Mask Protocol Select the IP protocol (TCP or UDP). P-870HN-5xb User’s Guide...
Page 187 WAN interface(s) already configured in the WAN screens. Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 188 Chapter 13 Policy Forwarding P-870HN-5xb User’s Guide...
Page 189: Dns Route
The DNS Route screens let you view and configure DNS routing policies on the Device (Section 14.2 on page 189). 14.2 The DNS Route Screen Click Advanced > DNS Route to open the DNS Route screen. Figure 98 Advanced > DNS Route P-870HN-5xb User’s Guide...
Page 190: Dns Route Setup
Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the WAN screens. Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 191: Rip
15.1.1 What You Can Do in this Chapter The RIP screen lets you set up RIP settings on the Device (Section 15.2 on page 191). 15.2 The RIP Screen Click Advanced > RIP to open the RIP screen. Figure 100 Advanced > RIP P-870HN-5xb User’s Guide...
Page 192 Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply/Save Click Apply/Save to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 193: Quality Of Service (Qos)
195). • The Queue Setup screen lets you lets you configure QoS queue assignment (Section 16.4 on page 197). • The Class Setup screen lets you add, edit or delete QoS classifiers (Section 16.5 on page 200). P-870HN-5xb User’s Guide...
Page 194: What You Need To Know
Traffic Shaping Bursty traffic may cause network congestion. Traffic shaping regulates packets to be transmitted with a pre-configured data transmission rate using buffers (or P-870HN-5xb User’s Guide...
Page 195: The Quality Of Service General Screen
Click Advanced Setup > Quality of Service to open the screen as shown next. Use this screen to enable or disable QoS, set the bandwidth, and select to have the Device automatically assign priority to upstream traffic according to the IEEE P-870HN-5xb User’s Guide...
Page 196 This will cause the Device to not use some of the interface’s available bandwidth. If you leave this field blank, the Device automatically sets this number to be 95% of the DSL port’s actual upstream transmission speed. P-870HN-5xb User’s Guide...
Page 197: The Queue Setup Screen
Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. 16.4 The Queue Setup Screen Click QoS > Queue Setup to open the screen as shown next. P-870HN-5xb User’s Guide...
Page 198 Click the Edit icon to go to the screen where you can edit the queue. Click the Remove icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. Apply Click Apply to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 199: Adding A Qos Queue
This field displays Drop Tail (DT) and the Device drops the newly arriving Management packet when the queue is full. Rate Limit Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Back Click Back to return to the previous screen without saving. P-870HN-5xb User’s Guide...
Page 200: The Class Setup Screen
This is the name of the classifier. Classification This shows criteria specified in this classifier, for example the interface Criteria from which traffic of this class should come and the source MAC address of traffic that matches this classifier. P-870HN-5xb User’s Guide...
Page 201 Click the Edit icon to go to the screen where you can edit the classifier. Click the Remove icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. Apply Click Apply to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 202: Qos Class Edit
Chapter 16 Quality of Service (QoS) 16.5.1 QoS Class Edit Click the Add button or the Edit icon in the Class Setup screen to configure a classifier. Figure 105 QoS Class Setup: Add P-870HN-5xb User’s Guide...
Page 203 You should have configured a queue in the Queue Setup screen already. Criteria Configuration Use the following fields to configure the criteria for traffic classification. Basic From Interface Select from which Ethernet port or wireless interface traffic of this class should come. P-870HN-5xb User’s Guide...
Page 204 If you select TCP or UDP in the IP Protocol field, select the check Range box and enter the port number(s) of the source. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others P-870HN-5xb User’s Guide...
Page 205 Select this option to exclude the packets that match the specified criteria from this classifier. Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 206: The Policer Setup Screen
Click the Edit icon to go to the screen where you can edit the policer. Click the Remove icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. Apply Click Apply to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 207: Adding A Qos Policer
Figure 107 Policer Setup: Add The following table describes the labels in this screen. Table 73 QoS Policer Setup: Add LABEL DESCRIPTION Enable Select this to turn on this policer. Name Enter the descriptive name of this policer. P-870HN-5xb User’s Guide...
Page 208 (red-marked packets). Action • Drop: Discard the packets. • DSCP Mark: Change the DSCP mark value of the packets. Enter the DSCP mark value to use. The packets may be dropped if there is congestion on the network. P-870HN-5xb User’s Guide...
Page 209: The Qos Monitor Screen
Cancel Click Cancel to begin configuring this screen afresh. 16.7 The QoS Monitor Screen To view the Device’s QoS packet statistics, click Advanced > QoS > Monitor. The screen appears as shown. Figure 108 QoS > Monitor P-870HN-5xb User’s Guide...
Page 210: Technical Reference
Table 75 IEEE 802.1p Priority Level and Traffic Type PRIORITY TRAFFIC TYPE LEVEL Level 7 Typically used for network control traffic such as router configuration messages. Level 6 Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in delay). P-870HN-5xb User’s Guide...
Page 211 ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, P-870HN-5xb User’s Guide...
Page 212: Automatic Priority Queue Assignment
LAYER 2 LAYER 3 IEEE 802.1P PRIORITY QUEUE USER PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 P-870HN-5xb User’s Guide...
Page 213 It does not help if you set it to a bucket size over the interface’s capability. The smaller the bucket size, the lower the data transmission rate and that may cause outgoing packets to be dropped. A larger P-870HN-5xb User’s Guide...
Page 214 The trTCM evaluates incoming packets and marks them with one of three colors which refer to packet loss priority levels. High packet loss priority level is referred to as red, medium is referred to as yellow and low is referred to as green. P-870HN-5xb User’s Guide...
Page 215 • If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. P-870HN-5xb User’s Guide...
Page 216 Chapter 16 Quality of Service (QoS) P-870HN-5xb User’s Guide...
Page 217: Dynamic Dns Setup
IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. P-870HN-5xb User’s Guide...
Page 218: The Dynamic Dns Screen
Active Update Select this to have the Device update the domain name on a regular Periodically interval. Bear in mind that some Dynamic DNS service providers will not appreciate the extra traffic and may block your host name. P-870HN-5xb User’s Guide...
Page 219 If you selected Active Update Periodically, enter a number of days and hours to set how often teh Device updates the domain name. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 220 Chapter 17 Dynamic DNS Setup P-870HN-5xb User’s Guide...
Page 221: Remote Management
An administrator can use an ACS to remotely set up the Device, modify settings, perform firmware upgrades as well as monitor and diagnose the Device. You have enable the device to be managed by the ACS and specify the ACS IP address or domain name and username and password. P-870HN-5xb User’s Guide...
Page 222 Select this option to enable authentication when there is a connection Request request from the ACS. Authentication Connection Enter the connection request user name. Request User When the ACS makes a connection request to the Device, this user Name name is used to authenticate the ACS. P-870HN-5xb User’s Guide...
Page 223: The Tr-064 Screen
The following table describes the fields in this screen. Table 79 TR-064 LABEL DESCRIPTION Enable TR064 Select the check box to activate management via TR-064 on the LAN. Apply Click this button to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 224: The Service Control Screen
Device from the LAN. Select the Enable check box for the corresponding services that you want to allow access to the Device from the WAN. Apply Click this button to save your changes back to the Device. P-870HN-5xb User’s Guide...
Page 225: The Ip Address Screen
Device. Remove Select this check box and click the Remove button to delete this entry from the Device. Click this button to create a new entry. Remove Click this button to delete the selected entry. P-870HN-5xb User’s Guide...
Page 226: Adding An Ip Address
Enter the IP address of the trusted computer from which you can manage the Device. Apply/Save Click this button to save your changes back to the Device. Back Click this button to return to the previous screen without saving. P-870HN-5xb User’s Guide...
Page 227: Universal Plug-And-Play (Upnp)
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings P-870HN-5xb User’s Guide...
Page 228: The Upnp Screen
See the following sections for examples of installing and using UPnP. 19.3 The UPnP Screen Click Advanced > UPnP to display the screen shown next. Section 19.1 on page 227 for more information. Figure 115 Advanced > UPnP P-870HN-5xb User’s Guide...
Page 229: Installing Upnp In Windows Example
This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. P-870HN-5xb User’s Guide...
Page 230 Components selection box. Click Details. Figure 116 Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 117 Add/Remove Programs: Windows Setup: Communication: Components P-870HN-5xb User’s Guide...
Page 231 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Figure 118 Network Connections P-870HN-5xb User’s Guide...
Page 232 Chapter 19 Universal Plug-and-Play (UPnP) The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 119 Windows Optional Networking Components Wizard P-870HN-5xb User’s Guide...
Page 233: Using Upnp In Windows Xp Example
Make sure the computer is connected to a LAN port of the Device. Turn on your computer and the Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. P-870HN-5xb User’s Guide...
Page 234 Chapter 19 Universal Plug-and-Play (UPnP) Right-click the icon and select Properties. Figure 121 Network Connections P-870HN-5xb User’s Guide...
Page 235 Chapter 19 Universal Plug-and-Play (UPnP) In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 122 Internet Connection Properties P-870HN-5xb User’s Guide...
Page 236 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 123 Internet Connection Properties: Advanced Settings Figure 124 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. P-870HN-5xb User’s Guide...
Page 237 IP address of the Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. P-870HN-5xb User’s Guide...
Page 238 Chapter 19 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Figure 127 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-870HN-5xb User’s Guide...
Page 239 Figure 128 Network Connections: My Network Places Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. Figure 129 Network Connections: My Network Places: Properties: Example P-870HN-5xb User’s Guide...
Page 240 Chapter 19 Universal Plug-and-Play (UPnP) P-870HN-5xb User’s Guide...
Page 241: Parental Control
20.2 The Time Restriction Screen Use this screen to view the schedules and enable parental control on a specific user during certain periods. Click Advanced Setup > Parental Control to open the following screen. Figure 130 Parental Control > Time restriction P-870HN-5xb User’s Guide...
Page 242: Adding A Schedule
20.2.1 Adding a Schedule Click the Add button in the Time Restriction screen to open the following screen. Use this screen to configure a restricted access schedule for a specific user on your network. Figure 131 Time Restriction Configuration P-870HN-5xb User’s Guide...
Page 243: The Url Filter Screen
Use this screen to configure URL filtering settings to allow or block the users on your network from accessing certain web sites. Click Advanced Setup > Parental Control > URL Filter to open the following screen. Figure 132 Parental Control > URL Filter P-870HN-5xb User’s Guide...
Page 244: Adding Url Filter
Specify the port number the web server uses to forward HTTP traffic. Back Click this button to return to the previous screen without saving any changes. Save/Apply Click this button to save your settings back to the Device. P-870HN-5xb User’s Guide...
Page 245: Interface Group
Device to assign IP addresses based on the client’s source MAC address or DHCP option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 6 on page 103 for more information. P-870HN-5xb User’s Guide...
Page 246 This shows the descriptive name of the group. WAN Interface This shows the WAN interfaces in the group. LAN Interfaces This shows the LAN interfaces in the group. Criteria This shows the filtering criteria for the group. P-870HN-5xb User’s Guide...
Page 247: Interface Group Configuration
Click the Add button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to a group only. Figure 136 Interface Group Configuration P-870HN-5xb User’s Guide...
Page 248 Click the Remove icon to delete this rule from the Device. Click this button to create a new rule. Back Click this button to return to the previous screen without saving any changes. Apply Click this button to save your settings back to the Device. P-870HN-5xb User’s Guide...
Page 249: Interface Grouping Criteria
Number) to enter the vendor’s registered enterprise number. Select DUID-LL (DUID Based on Link-layer Address) to enter the device’s hardware type and hardware address (MAC address) in the following fields. Select Other to enter any string that identifies the device in the DUID field. P-870HN-5xb User’s Guide...
Page 250 Enter the model name of the device. Serial Enter the serial number of the device. Number Back Click this button to return to the previous screen without saving any changes. Apply Click this button to save your settings back to the Device. P-870HN-5xb User’s Guide...
Page 251: Captive Portal
The Captive Portal screen lets you redirect users to a specific URL when they first connect to the Internet. (Section 22.2 on page 251). 22.2 The DNS Route Screen Click Advanced > Captive Portal to open the Captive Portal screen. Figure 138 Advanced > Captive Portal P-870HN-5xb User’s Guide...
Page 252 After the captive portal timeout (not configurable here) is reached or the Device restarts, it will again redirect users to the listed URL when they first connect to the Internet. Apply/Save Click this button to apply and save your changes. P-870HN-5xb User’s Guide...
Page 253: System Settings
(Section 23.3 on page 255). 23.2 The General Screen Use the General screen to configure system settings such as the system password. Click Maintenance > System to open the General screen. Figure 139 Maintenance > System > General P-870HN-5xb User’s Guide...
Page 254 After you change the password, use the new password to access the Device. Retype to Type the new password again for confirmation. Confirm Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 255: The Time Setting Screen
Each time you reload this page, the Device synchronizes the time with the time server. Current Date This field displays the date of your Device. Each time you reload this page, the Device synchronizes the date with the time server. P-870HN-5xb User’s Guide...
Page 256 European Union you would select the second radio button, Last, Sunday, March. The time you select in the Time field depends on your time zone. In Germany for instance, you would use 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). P-870HN-5xb User’s Guide...
Page 257 Germany for instance, you would use 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HN-5xb User’s Guide...
Page 258 Chapter 23 System Settings P-870HN-5xb User’s Guide...
Page 259: Logs
24.2 The View Log Screen Click Maintenance > Logs to open the View Log screen. Use the View Log screen to see the logs for the categories that you selected in the Log Settings screen (see Section 24.3 on page 260). P-870HN-5xb User’s Guide...
Page 260: The Log Settings Screen
This field states the reason for the log. 24.3 The Log Settings Screen Use the Log Settings screen to configure to where the Device is to send logs and which logs and/or immediate alerts the Device is to record and display. P-870HN-5xb User’s Guide...
Page 261 Syslog Server Enter the server name or the IP address of the log server. IP Address Syslog Server Enter the UDP port of the log server. UDP Port Apply Click Apply to save your customized settings. P-870HN-5xb User’s Guide...
Page 262 Chapter 24 Logs P-870HN-5xb User’s Guide...
Page 263: Tools
• The Configuration screen lets you backup and restore device configurations (Section 25.3 on page 266). You can also reset your device settings back to the factory default. • The Restart screen lets you restart your Device (Section 25.4 on page 268). P-870HN-5xb User’s Guide...
Page 264: The Firmware Screen
Restore Select this to also clear all user-entered configuration information and Default return the Device to its factory defaults. Settings Upload Click Upload to begin the upload process. This process may take up to two minutes. P-870HN-5xb User’s Guide...
Page 265 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click Tools to go back to the Firmware screen. Figure 146 Error Message P-870HN-5xb User’s Guide...
Page 266: The Configuration Screen
Device. Table 97 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. P-870HN-5xb User’s Guide...
Page 267 If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix A on page 287 for details on how to set up your computer’s IP address. P-870HN-5xb User’s Guide...
Page 268: The Restart Screen
System restart allows you to reboot the Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the Device reboot. This does not affect the Device's configuration. Figure 152 Maintenance > Tools >Restart P-870HN-5xb User’s Guide...
Page 269: Diagnostic
Point (MEP) ports on the device under a Maintenance Domain (MD) level. An MEP port has the ability to send Connectivity Check Messages (CCMs) and get other MEP ports information from neighbor devices’ CCMs within an MA. CFM provides two tests to discover connectivity faults. P-870HN-5xb User’s Guide...
Page 270: The General Diagnostic Screen
26.3 The General Diagnostic Screen Click Maintenance > Diagnostic to open the screen shown next. Ping and traceroute help check availability of remote hosts and also help troubleshoot network or Internet connections. Figure 153 Maintenance > Diagnostic > General P-870HN-5xb User’s Guide...
Page 271: The Following Table Describes The Fields In This Screen.the 802.1Ag Screen
Connectivity Fault Management Maintenance Type a name of up to 39 printable English keyboard characters for this Domain (MD) Name The combined length of the MD Name and MA name must be less or equal to 44bytes. P-870HN-5xb User’s Guide...
Page 272 Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. P-870HN-5xb User’s Guide...
Page 273: The Oam Ping Test Screen
• segment F5 flows (PTI=100) • end-to-end F5 flows (PTI=101) OAM F4 or F5 tests are used to check virtual path or virtual channel availability between two DSL devices. Segment flows are terminated at the connecting point P-870HN-5xb User’s Guide...
Page 274 Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. P-870HN-5xb User’s Guide...
Page 275: Troubleshooting
If the problem continues, contact the vendor. One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. See the Quick Start Guide. P-870HN-5xb User’s Guide...
Page 276: Device Access And Login
I cannot see or access the Login screen in the web configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. • If you changed the IP address (Section on page 111), use the new IP address. P-870HN-5xb User’s Guide...
Page 277: Internet Access
Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page Make sure you entered your ISP account information correctly in the WAN screens. These fields are case-sensitive, so make sure [Caps Lock] is not on. P-870HN-5xb User’s Guide...
Page 278 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. P-870HN-5xb User’s Guide...
Page 279: Wireless Lan Troubleshooting
Make sure you allow the Device to be remotely accessed through the WLAN interface. Check your remote management settings. • See Chapter 7 Wireless LAN in the User’s Guide for more information. Check if MAC Filter is configured to deny wireless access to certain MAC addresses to the Device. P-870HN-5xb User’s Guide...
Page 280 You can use WDS only when wireless security is set to “No Security” or “WEP”. The wireless security settings apply to both WDS links and the connections between the Device and any wireless clients. WDS is only compatible with other ZyXEL Devices of the same model. P-870HN-5xb User’s Guide...
Page 281: Product Specifications
0º C ~ 40º C Temperature Storage Temperature -20º ~ 60º C Operation Humidity 20% ~ 85% RH Storage Humidity 20% ~ 90% RH 28.2 Firmware Specifications Table 101 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) P-870HN-5xb User’s Guide...
Page 282 IP address and convey its capabilities to other devices on the network. QoS (Quality of You can efficiently manage traffic on your network by reserving Service) bandwidth and giving priority to certain types of traffic and/or to particular computers. P-870HN-5xb User’s Guide...
Page 283 VDSL embedded operations channel (EOC) and VDSL overhead control channel (VOC) PTM Transmission Convergence (PTM-TC) Dual-latency xDSL framing (fast and interleaved) Trellis coding INP capability: At least two symbols protection (INP_MIN = 2), up to 16 symbols (INP_MIN = 16) P-870HN-5xb User’s Guide...
Page 284 Other Protocol PPP (Point-to-Point Protocol) link layer protocol Support Transparent bridging for unsupported network layer protocols RIP I/RIP II ICMP IP Multicasting IGMP v1 and v2 IGMP Proxy Management Embedded Web Configurator Remote Firmware Upgrade Syslog TR-069 TR-064 P-870HN-5xb User’s Guide...
Page 285: Wireless Features
External RADIUS server using EAP-MD5, TLS, TTLS The following list, which is not exhaustive, illustrates the standards supported in the Device. Table 103 Standards Supported STANDARD DESCRIPTION RFC 1058 RIP-1 (Routing Information Protocol) RFC 1112 IGMP v1 P-870HN-5xb User’s Guide...
Page 286 Port Based Network Access Control. IEEE 802.11e QoS IEEE 802.11 e Wireless LAN for Quality of Service ITU-T G.993.2 ITU standard that defines VDSL2. (VDSL2) TR-069 DSL Forum Standard for CPE Wan Management. TR-064 DSL Forum LAN-Side DSL CPE Configuration P-870HN-5xb User’s Guide...
Page 287: Appendix A Setting Up Your Computer's Ip Address
288 • Windows Vista page 292 • Mac OS X: 10.3 and 10.4 page 297 • Mac OS X: 10.5 page 301 • Linux: Ubuntu 8 (GNOME) page 304 • Linux: openSUSE 10.3 (KDE) page 310 P-870HN-5xb User’s Guide...
Page 288 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. Figure 157 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 158 Windows XP: Control Panel P-870HN-5xb User’s Guide...
Page 289 Right-click Local Area Connection and then select Properties. Figure 159 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 160 Windows XP: Local Area Connection Properties P-870HN-5xb User’s Guide...
Page 290 DNS server and an Alternate DNS server, if that information was provided. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-870HN-5xb User’s Guide...
Page 291 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. P-870HN-5xb User’s Guide...
Page 292: Windows Vista
Click Start > Control Panel. Figure 162 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 163 Windows Vista: Control Panel Click the Network and Sharing Center icon. Figure 164 Windows Vista: Network And Internet P-870HN-5xb User’s Guide...
Page 293 Figure 165 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 166 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-870HN-5xb User’s Guide...
Page 294 Appendix A Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 167 Windows Vista: Local Area Connection Properties P-870HN-5xb User’s Guide...
Page 295 DNS server and an Alternate DNS server, if that information was provided.Click Advanced. Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-870HN-5xb User’s Guide...
Page 296 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. P-870HN-5xb User’s Guide...
Page 297 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 169 Mac OS X 10.4: Apple Menu In the System Preferences window, click the Network icon. Figure 170 Mac OS X 10.4: System Preferences P-870HN-5xb User’s Guide...
Page 298 Configure. Figure 171 Mac OS X 10.4: Network Preferences For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 172 Mac OS X 10.4: Network Preferences > TCP/IP Tab. P-870HN-5xb User’s Guide...
Page 299 • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. Figure 173 Mac OS X 10.4: Network Preferences > Ethernet Click Apply Now and close the window. P-870HN-5xb User’s Guide...
Page 300 Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 174 Mac OS X 10.4: Network Utility P-870HN-5xb User’s Guide...
Page 301 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 175 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 176 Mac OS X 10.5: Systems Preferences P-870HN-5xb User’s Guide...
Page 302 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. P-870HN-5xb User’s Guide...
Page 303 Appendix A Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your Device. Figure 178 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. P-870HN-5xb User’s Guide...
Page 304 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: P-870HN-5xb User’s Guide...
Page 305 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 181 Ubuntu 8: Network Settings > Connections P-870HN-5xb User’s Guide...
Page 306 In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 182 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 183 Ubuntu 8: Network Settings > Connections P-870HN-5xb User’s Guide...
Page 307 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-870HN-5xb User’s Guide...
Page 308 Figure 185 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices P-870HN-5xb User’s Guide...
Page 309 Appendix A Setting Up Your Computer’s IP Address tab. The Interface Statistics column shows data if your connection is working properly. Figure 186 Ubuntu 8: Network Tools P-870HN-5xb User’s Guide...
Page 310 Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). Figure 187 openSUSE 10.3: K Menu > Computer Menu P-870HN-5xb User’s Guide...
Page 311 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 188 openSUSE 10.3: K Menu > Computer Menu When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. Figure 189 openSUSE 10.3: YaST Control Center P-870HN-5xb User’s Guide...
Page 312 Appendix A Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 190 openSUSE 10.3: Network Settings P-870HN-5xb User’s Guide...
Page 313 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. P-870HN-5xb User’s Guide...
Page 314 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 192 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window. P-870HN-5xb User’s Guide...
Page 315 From the Options sub-menu, select Show Connection Information. Figure 193 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 194 openSUSE: Connection Status - KNetwork Manager P-870HN-5xb User’s Guide...
Page 316 Appendix A Setting Up Your Computer’s IP Address P-870HN-5xb User’s Guide...
Page 317: Appendix B Pop-Up Windows, Javascripts And Java Permissions
Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 195 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-870HN-5xb User’s Guide...
Page 318 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-870HN-5xb User’s Guide...
Page 319 Select Settings…to open the Pop-up Blocker Settings screen. Figure 197 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-870HN-5xb User’s Guide...
Page 320 Figure 198 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. P-870HN-5xb User’s Guide...
Page 321 Figure 199 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-870HN-5xb User’s Guide...
Page 322 Figure 200 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-870HN-5xb User’s Guide...
Page 323 Click OK to close the window. Figure 201 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-870HN-5xb User’s Guide...
Page 324 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 203 Mozilla Firefox: Tools > Options P-870HN-5xb User’s Guide...
Page 325 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 204 Mozilla Firefox Content Security P-870HN-5xb User’s Guide...
Page 326 Appendix B Pop-up Windows, JavaScripts and Java Permissions P-870HN-5xb User’s Guide...
Page 327: Appendix C Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-870HN-5xb User’s Guide...
Page 328: Subnet Masks
Table 104 IP Address Network Number and Host ID Example OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 P-870HN-5xb User’s Guide...
Page 329 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.2 3 bits – 2 P-870HN-5xb User’s Guide...
Page 330 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-870HN-5xb User’s Guide...
Page 331 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-870HN-5xb User’s Guide...
Page 332 Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. P-870HN-5xb User’s Guide...
Page 333 Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 111 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001 11000000 Subnet Mask (Binary) 11111111.11111111.11111111 11000000 P-870HN-5xb User’s Guide...
Page 334 The following table is a summary for subnet planning on a network with a 24-bit network number. Table 113 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) P-870HN-5xb User’s Guide...
Page 335: Configuring Ip Addresses
(for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your Device will compute the subnet mask automatically based on the IP address that P-870HN-5xb User’s Guide...
Page 336 A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP P-870HN-5xb User’s Guide...
Page 337 Figure 209 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. P-870HN-5xb User’s Guide...
Page 338 Appendix C IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 210 Conflicting Computer and Router IP Addresses Example P-870HN-5xb User’s Guide...
Page 339: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate P-870HN-5xb User’s Guide...
Page 340 This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. P-870HN-5xb User’s Guide...
Page 341 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-870HN-5xb User’s Guide...
Page 342 RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. P-870HN-5xb User’s Guide...
Page 343: Preamble Type
IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has P-870HN-5xb User’s Guide...
Page 344 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the Device and on all wireless clients that you want to associate with it. P-870HN-5xb User’s Guide...
Page 345 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-870HN-5xb User’s Guide...
Page 346 The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. P-870HN-5xb User’s Guide...
Page 347 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-870HN-5xb User’s Guide...
Page 348 RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. P-870HN-5xb User’s Guide...
Page 349 The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-870HN-5xb User’s Guide...
Page 350 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. P-870HN-5xb User’s Guide...
Page 351 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-870HN-5xb User’s Guide...
Page 352 Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-870HN-5xb User’s Guide...
Page 353: Antenna Overview
Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-870HN-5xb User’s Guide...
Page 354 For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. P-870HN-5xb User’s Guide...
Page 355: Appendix E Ipv6
(start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. P-870HN-5xb User’s Guide...
Page 356 All routers on a local node. FF01:0:0:0:0:0:0:2 All hosts on a local connected link. FF02:0:0:0:0:0:0:1 All routers on a local connected link. FF02:0:0:0:0:0:0:2 All routers on a local site. FF05:0:0:0:0:0:0:2 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 P-870HN-5xb User’s Guide...
Page 357 Electrical and Electronics Engineers) is an interface ID format designed to adapt with IPv6. It is derived from the 48-bit (6-byte) Ethernet MAC address as shown next. EUI-64 inserts the hex digits fffe between the third and fourth bytes of the P-870HN-5xb User’s Guide...
Page 358 IP addresses. Each IA must be associated with exactly one interface. The DHCP client uses the In IPv6, all network interfaces can be associated with several addresses. P-870HN-5xb User’s Guide...
Page 359 IPv6 prefix (for example, 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the Device passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. P-870HN-5xb User’s Guide...
Page 360 Done message is received to determine if other devices connected to this port should remain in the group. Transition Techniques IPv6 Over IPv4 Tunnelling To route traffic between two IPv6 networks over an IPv4 network, an IPv6 over IPv4 tunnel has to be used. P-870HN-5xb User’s Guide...
Page 361 In a 6to4 tunnel, 6to4 routers (A and B in the example network) forward these packets between IPv6 networks (1 and 2) over the IPv4 Internet. A 6to4 relay router (C) connects to both an IPv6 and IPv4 network. A 6to4 relay router is used P-870HN-5xb User’s Guide...
Page 362 Windows XP does not support DHCPv6. If your network uses DHCPv6 for IP address assignment, you have to additionally install a DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.) P-870HN-5xb User’s Guide...
Page 363 DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. Click Start and then OK. Now your computer can obtain an IPv6 address from a DHCPv6 server. P-870HN-5xb User’s Guide...
Page 364 Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. P-870HN-5xb User’s Guide...
Page 365 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 P-870HN-5xb User’s Guide...
Page 366 Appendix E IPv6 P-870HN-5xb User’s Guide...
Page 367: Appendix F Common Services
Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-870HN-5xb User’s Guide...
Page 368 ICMP echo requests to test whether or not a remote host is reachable. POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). P-870HN-5xb User’s Guide...
Page 369 Access Controller Access Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. P-870HN-5xb User’s Guide...
Page 370 Table 122 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. P-870HN-5xb User’s Guide...
Page 371: Appendix G Open Software Announcements
Open Software Announcements End-User License Agreement for “P-870HN-5xb” WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS LICENSE AGREEMENT. PLEASE READ THE TERMS CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AS INSTALLING THE SOFTWARE WILL INDICATE YOUR ASSENT TO THEM.
Page 372 (express, implied or statutory) whatsoever with respect thereto. Please contact the appropriate software vendor or manufacturer directly for technical support and customer service related to its software and products. P-870HN-5xb User’s Guide...
Page 373 DOCUMENTATION OR OTHERWISE SHALL BE EQUAL TO THE PURCHASE PRICE, BUT SHALL IN NO EVENT EXCEED THE PRODUCT'S PRICE. BECAUSE SOME STATES/COUNTRIES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. P-870HN-5xb User’s Guide...
Page 374 ZyXEL. Any waiver or modification of this License Agreement shall only be effective if it is in writing and signed by both parties hereto. If any part of this License Agreement is found invalid or unenforceable by a court of competent P-870HN-5xb User’s Guide...
Page 375 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. P-870HN-5xb User’s Guide...
Page 376 The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION P-870HN-5xb User’s Guide...
Page 377 Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But P-870HN-5xb User’s Guide...
Page 378 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, P-870HN-5xb User’s Guide...
Page 379 Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. P-870HN-5xb User’s Guide...
Page 380 IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS All other trademarks or trade names mentioned herein, if any, are the property of their respective owners. P-870HN-5xb User’s Guide...
Page 381 Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE P-870HN-5xb User’s Guide...
Page 382 See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org. OpenSSL License --------------- ================================================== ================== * Copyright (c) 1998-2008 The OpenSSL Project. All rights reserved. P-870HN-5xb User’s Guide...
Page 383 For written permission, please contact openssl-core@openssl.org. * 5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written P-870HN-5xb User’s Guide...
Page 384 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED * OF THE POSSIBILITY OF SUCH DAMAGE. ================================================== ================== * This product includes cryptographic software written by Eric Young * (eay@cryptsoft.com). This product includes software written by Tim P-870HN-5xb User’s Guide...
Page 385 * If this package is used in a product, Eric Young should be given attribution * as the author of the parts of the library used. * This can be in the form of a textual message at program startup or P-870HN-5xb User’s Guide...
Page 386 "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE P-870HN-5xb User’s Guide...
Page 387 * [including the GNU Public Licence.] This Product includes Dhcpv6 software under below license $KAME: COPYRIGHT,v 1.2 2004/07/29 19:02:18 jinmei Exp $ Copyright (C) 1998-2004 WIDE Project. All rights reserved. Redistribution and use in source and binary forms, with or without P-870HN-5xb User’s Guide...
Page 388 OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF P-870HN-5xb User’s Guide...
Page 389 4. All advertising materials mentioning features or use of this software must display the following acknowledgement with the name(s) of the authors as specified in the copyright notice(s) substituted where indicated: This product includes software developed by the authors which are P-870HN-5xb User’s Guide...
Page 390 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. P-870HN-5xb User’s Guide...
Page 391: Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 392 • To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. 注意 ! 依據低功率電波輻射性電機管理辦法第十二條經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 P-870HN-5xb User’s Guide...
Page 393: Zyxel Limited Warranty
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or P-870HN-5xb User’s Guide...
Page 394 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. P-870HN-5xb User’s Guide...
Page 395 Connectivity Check Messages, see CCMs copyright CoS technologies CPU usage creating certificates 169, 347 CTS (Clear to Send) Canonical Format Indicator See CFI CBR (Continuous Bit Rate) CCMs certificate details date and time factory default default P-870HN-5xb User’s Guide...
Page 396 ECHO encapsulated routing link protocol (ENET ENCAP) IANA 112, 336 Encapsulation IBSS IEEE 802.11g PPP over Ethernet IEEE 802.11g wireless LAN PPPoA IEEE 802.11i encapsulation ENET ENCAP IEEE 802.1Q RFC 1483 IGMP 101, 104, 113 encryption version P-870HN-5xb User’s Guide...
Page 397 101, 104, 113 Neighbor Discovery Protocol multi-mode ping multiplexing prefix LLC-based prefix length VC-based stateless autoconfiguration multiprotocol encapsulation unspecified address LAN statistics 112, 147, 335 67, 70 default server LAN TCP/IP DMZ host LAN-Side DSL CPE Configuration P-870HN-5xb User’s Guide...
Page 398 PPP (Point-to-Point Protocol) Link Layer see RIP Protocol route status PPPoE router features Benefits routing information PPPoE (Point-to-Point Protocol over Ethernet) Routing Information Protocol. See RIP PPTP RPPCs preamble mode RTS (Request To Send) product registration threshold 341, 342 P-870HN-5xb User’s Guide...
Page 399 Tag Control Information See TCI VLAN tag Tag Protocol Identifier See TPID TCP/IP temperature Temporal Key Integrity Protocol (TKIP) WAN (Wide Area Network) WAN interface TPID WAN statistics TR-064 warranty TR-069 note ACS setup authentication Web Configurator P-870HN-5xb User’s Guide...
Page 400 WPA-PSK wireless client supplicant with RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK 348, 349 application example WPA-PSK application example status P-870HN-5xb User’s Guide...

This manual is also suitable for:

P-870hn-51b P-870hn-51d P-870hn-53b P-870hw-i1 P-870m-i1 P-870m-i3 ... Show all

ZyXEL Communications P-870HN-5xb User Manual

Chapter 1 Introducing the Device

Chapter 2 Tutorials

Chapter 3 Introducing the Web Configurator

Chapter 4 Status Screens

Chapter 5 WAN Setup

Chapter 6 LAN Setup

Chapter 7 Wireless LAN

Chapter 8 Network Address Translation (NAT)

Chapter 9 MAC Filter

Chapter 10 Firewall

Chapter 11 Certificate

Chapter 12 Static Route

Chapter 13 Policy Forwarding

Chapter 14 DNS Route

Chapter 15 RIP

Chapter 16 Quality of Service (Qos)

Chapter 17 Dynamic DNS Setup

Chapter 18 Remote Management

Chapter 19 Universal Plug-And-Play (Upnp)

Chapter 20 Parental Control

Chapter 21 Interface Group

Chapter 22 Captive Portal

Chapter 23 System Settings

Chapter 24 Logs

Chapter 25 Tools

Chapter 26 Diagnostic

Chapter 27 Troubleshooting

Chapter 28 Product Specifications

Appendix A Setting up Your Computer's IP Address

Appendix B Pop-Up Windows, Javascripts and Java Permissions

Appendix C IP Addresses and Subnetting

Appendix D Wireless Lans

Appendix E Ipv6

Appendix F Common Services

Appendix G Open Software Announcements

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications P-870HN-5xb

Summary of Contents for ZyXEL Communications P-870HN-5xb